Merge pull request #2321 from tobytailor/master

Bug 1147291 - SWF #577 mousing over ad does not open drop-down menu

src/flash/ui/Mouse.ts

@@ -174,7 +174,7 @@ module Shumway.AVMX.AS.flash.ui {
             break;
           }
           var nodeEntered = target;
-          while (nodeEntered !== commonAncestor) {
+          while (nodeEntered && nodeEntered !== commonAncestor) {
             this._dispatchMouseEvent(nodeEntered, events.MouseEvent.ROLL_OVER, data, currentTarget);
             nodeEntered = nodeEntered.parent;
           }

src/swf/stream.ts

@@ -181,12 +181,19 @@ module Shumway.SWF {
     readUb(size: number): number {
       var buffer = this.bitBuffer;
       var bitlen = this.bitLength;
+      var val = 0;
       while (size > bitlen) {
+        if (bitlen > 24) {
+          // Avoid overflow. Save current buffer in val and add remaining bits later.
+          size -= bitlen;
+          val = buffer << size;
+          bitlen = 0;
+        }
         buffer = (buffer << 8) | this.bytes[this.pos++];
         bitlen += 8;
       }
       bitlen -= size;
-      var val = (buffer >>> bitlen) & masks[size];
+      val |= (buffer >>> bitlen) & masks[size];
       this.bitBuffer = buffer;
       this.bitLength = bitlen;
       return val;