Macromedia Flash Server - Flash File Format SDK question

This is Interesting: Free IT Magazines  
Home > Archive > Macromedia Flash Server > May 2005 > Flash File Format SDK question





You are viewing an archived Text-only version of the thread. To view this thread in it's original format and/or if you want to reply to this thread please [click here]

Author Flash File Format SDK question
Michael D. Randolph

2005-05-05, 5:45 pm

This isn't really an FCS issue, but does anyone know of any way to check
if a SWF has code in it? We want to let customers uploads SWFs to our
site to use in an application...but we don't want there to be any code
in them. I don't think there is a boxed solution that will do this, but
does anyone know if it's possible to write a C++ app that will check a
SWF for code using the file format sdk?



Michael Randolph




Robert Laing

2005-05-05, 5:45 pm

Could=20email=20the=20guy=20who=20made=2
0this:
http://pixelfumes.blogspot.com/2005...r-released.html



=20


This=20e- mail=20and=20any=20attached=20files=20ar
e=20for=20the=20exclusive=
=20use=20of=20the=20addressee=20and=20ma
y=20contain=20privileged=20and/or=20=
confidential=20information.=20If=20you=20receive=20this=20e-mail=20in=20er=
ror=20you=20should=20not=20disclose=20th
e=20contents=20to=20any=20other=20=
person=20nor=20take=20copies=20but=20sho
uld=20delete=20it=20and=20telephon=
e=20us=20immediately=20on=20+44(0)20=207
440=201100.

TEQUILA\=20London=20Limited=20does=20not
=20make=20any=20warranty=20as=20to=
=20the=20accuracy=20or=20completeness=20
of=20this=20e-mail=20and=20we=20ac=
cept=20no=20liability=20for=20its=20cont
ent=20or=20use.=20Any=20opinions=20=
expressed=20in=20this=20e- mail=20are=20those=20of=20the=20author=2
0and=20d=
o=20not=20necessarily=20reflect=20the=20
opinions=20of=20TEQUILA\=20London=20=
Limited.

TEQUILA\=20London=20Limited=20operates=2
0within=20the=20parameters=20set=20=
by=20the=20Data=20Protection=20Act=20199
8=20with=20regard=20to=20the=20use=
=20of=20personal=20information=20includi
ng=20e-mail=20addresses.=20We=20ac=
cept=20no=20liability=20for=20the=20forw
arding=20of=20this=20e-mail=20to=20=
other=20parties=20that=20may=20result=20
in=20unsolicited=20e-mails=20being=
=20received=20by=20those=20whose=20email
=20addresses=20appear=20in=20this=20=
e-mail.

=-----------------------------------------------------------
Supported by Fig Leaf Software - http://www.figleaf.com
=-----------------------------------------------------------

To change your subscription options or search the archive:
http://chattyfig.figleaf.com/mailman/listinfo/flashcomm

Darron J. Schall

2005-05-05, 5:45 pm

Michael D. Randolph wrote:

>This isn't really an FCS issue, but does anyone know of any way to check
>if a SWF has code in it? We want to let customers uploads SWFs to our
>site to use in an application...but we don't want there to be any code
>in them. I don't think there is a boxed solution that will do this, but
>does anyone know if it's possible to write a C++ app that will check a
>SWF for code using the file format sdk?
>
>


Might be able to use swfmill and see if there any script blocks in the
..xml file. I have no idea what the XML produced by swfmill looks like
(haven't ever used it yet), so this might not work..

http://iterative.org/swfmill/

Also, you can try using JavaSWF, it should enable you to parse files:
http://sourceforge.net/projects/javaswf/

Or, you can run flasm ( http://flasm.sourceforge.net/ ) on the .swf and
see if theres anything in the .flm file.

Probably other options too, but this should get you started.

-d



=-----------------------------------------------------------
Supported by Fig Leaf Software - http://www.figleaf.com
=-----------------------------------------------------------

To change your subscription options or search the archive:
http://chattyfig.figleaf.com/mailman/listinfo/flashcomm

Darron J. Schall

2005-05-05, 5:45 pm

Darron J. Schall wrote:

> Or, you can run flasm ( http://flasm.sourceforge.net/ ) on the .swf
> and see if theres anything in the .flm file.
>


Just tried it, if you run flasm on a .swf with no code in it, the
resulting .flm file (in my test anyway), only had 3 lines -

movie { path and information here on the same line }
end

... with a blank line following end.

So, I think can you check "line 2" to see if it's "end" or not. In .flm
files of .swf files that had code in them, line 2 was always blank. *shrug*

-d



=-----------------------------------------------------------
Supported by Fig Leaf Software - http://www.figleaf.com
=-----------------------------------------------------------

To change your subscription options or search the archive:
http://chattyfig.figleaf.com/mailman/listinfo/flashcomm

Michael D. Randolph

2005-05-05, 5:45 pm

Thanks man, I'll try it.

Michael Randolph

-----Original Message-----
From: flashcomm-bounces-1Ss2GqJETD3yZ38Mhd3e/9ZfFG6BLHNm@public.gmane.org
[mailto:flashcomm-bounces-1Ss2GqJETD3yZ38Mhd3e/9ZfFG6BLHNm@public.gmane.org] On Behalf Of Darron J.
Schall
Sent: Thursday, May 05, 2005 12:13 PM
To: FlashComm Mailing List
Subject: Re: [FlashComm] Flash File Format SDK question

Darron J. Schall wrote:

> Or, you can run flasm ( http://flasm.sourceforge.net/ ) on the .swf
> and see if theres anything in the .flm file.
>


Just tried it, if you run flasm on a .swf with no code in it, the
resulting .flm file (in my test anyway), only had 3 lines -

movie { path and information here on the same line }
end

... with a blank line following end.

So, I think can you check "line 2" to see if it's "end" or not. In .flm

files of .swf files that had code in them, line 2 was always blank.
*shrug*

-d



=-----------------------------------------------------------
Supported by Fig Leaf Software - http://www.figleaf.com
=-----------------------------------------------------------

To change your subscription options or search the archive:
http://chattyfig.figleaf.com/mailman/listinfo/flashcomm



Michael D. Randolph

2005-05-05, 5:45 pm

I'd like to automate this as a server process whenever someone uploads a
swf. Our application is written in ASP.NET. I suppose with enough work
I could make flasm work...any other ideas?

Michael Randolph
IMAGE PLANT
(973) 244-9220
mrandolph-PMb9m0z8LQpWk0Htik3J/w@public.gmane.org

-----Original Message-----
From: flashcomm-bounces-1Ss2GqJETD3yZ38Mhd3e/9ZfFG6BLHNm@public.gmane.org
[mailto:flashcomm-bounces-1Ss2GqJETD3yZ38Mhd3e/9ZfFG6BLHNm@public.gmane.org] On Behalf Of Michael D.
Randolph
Sent: Thursday, May 05, 2005 12:16 PM
To: FlashComm Mailing List
Subject: RE: [FlashComm] Flash File Format SDK question

Thanks man, I'll try it.

Michael Randolph

-----Original Message-----
From: flashcomm-bounces-1Ss2GqJETD3yZ38Mhd3e/9ZfFG6BLHNm@public.gmane.org
[mailto:flashcomm-bounces-1Ss2GqJETD3yZ38Mhd3e/9ZfFG6BLHNm@public.gmane.org] On Behalf Of Darron J.
Schall
Sent: Thursday, May 05, 2005 12:13 PM
To: FlashComm Mailing List
Subject: Re: [FlashComm] Flash File Format SDK question

Darron J. Schall wrote:

> Or, you can run flasm ( http://flasm.sourceforge.net/ ) on the .swf
> and see if theres anything in the .flm file.
>


Just tried it, if you run flasm on a .swf with no code in it, the
resulting .flm file (in my test anyway), only had 3 lines -

movie { path and information here on the same line }
end

... with a blank line following end.

So, I think can you check "line 2" to see if it's "end" or not. In .flm

files of .swf files that had code in them, line 2 was always blank.
*shrug*

-d



=-----------------------------------------------------------
Supported by Fig Leaf Software - http://www.figleaf.com
=-----------------------------------------------------------

To change your subscription options or search the archive:
http://chattyfig.figleaf.com/mailman/listinfo/flashcomm





Sponsored Links






Free braindumps | Software forum | Database administration forum

Copyright 2003 - 2008 webservertalk.com