On Mon, Oct 29, 2007 at 09:07:35PM +0000, Chad Musick wrote:

>  void
> -SWFHandlers::ActionImplementsOp(ActionExec& /*thread*/)
> +SWFHandlers::ActionImplementsOp(ActionExec& thread)
...
> +     while (count--)
> +     {
> +             as_object *inter = 
> env.pop().to_as_function()->getPrototype().get();
> +             obj->add_interface(inter);
> +     }
>  }

The loop body above is assuming the values on the stack are all functions.
as_value::to_as_function() can return NULL, in which case the above will
segfault. 

--strk;


_______________________________________________
Gnash-commit mailing list
[email protected]
http://lists.gnu.org/mailman/listinfo/gnash-commit

Reply via email to