[Webkit-unassigned] [Bug 20779] New: segmentation fault in swfdec mozilla plugin

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Thu Sep 11 05:20:05 PDT 2008


https://bugs.webkit.org/show_bug.cgi?id=20779

           Summary: segmentation fault in swfdec mozilla plugin
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: PC
        OS/Version: Linux
            Status: UNCONFIRMED
          Severity: Normal
          Priority: P2
         Component: Plug-ins
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: riccardo.magliocchetti at gmail.com


Since swfdec-mozilla 0.8.0 we have a segmentation fault with webkit based
browsers because we dereference a null pointer. Please note that swfdec is
linux only for now.

I'm seeing this with midori 0.19 / 0.21-git and webkit 1.0.1 / r36309 so it's
not a regression.

You can reproduce this by installing swfdec and swfdec-mozilla packages (see
http://swfdec.freedesktop.org for instructions) and pointing your browser to
any site that have a flash object.

This is the swfdec bug containing the patch that introduced the segmentation
fault:
https://bugs.freedesktop.org/show_bug.cgi?id=16717

The bug tracking this issue in swfdec is here:
https://bugs.freedesktop.org/show_bug.cgi?id=17521

This is the stack trace:

[Switching to Thread 0xb57cd720 (LWP 7846)]
0xb4bdf742 in plugin_set_window (instance=0xb4c06820, window=0xb4c06828)
    at plugin.c:398
398         plugin_x11_setup_windowed (instance->pdata, (Window)
window->window, 
(gdb) bt 1 full
#0  0xb4bdf742 in plugin_set_window (instance=0xb4c06820, window=0xb4c06828)
    at plugin.c:398
No locals.
(More stack frames follow...)
(gdb) print window
$1 = (NPWindow *) 0xb4c06828
(gdb) print instance->pdata
$2 = (void *) 0x9d86000
(gdb) print window->ws_info
$3 = (void *) 0x0
(gdb) print window->ws_info->visual
Attempt to dereference a generic pointer.


-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.



More information about the webkit-unassigned mailing list