[gstreamer-bugs] [Bug 308766] gst_element_factory_create() may invalidate pad templates for the factory it is called with

[bugzilla-daemon at bugzilla.gnome.org]

Please DO NOT reply to this by email. All additional comments should be made in
the comments box of this bug report.

 http://bugzilla.gnome.org/show_bug.cgi?id=308766
 GStreamer | gstreamer (core) | Ver: 0.8.10





------- Additional Comments From Akos Maroy  2005-06-23 13:00 -------
the important part of the debug output is:

gst_element_factory_cleanup #1, factory: id3demuxbin, padtemplates: 1C14FF74
template: 1C187868, name: 1C1879A0, src
template: 1C187E08, name: 1C187F40, sink
gst_pad_template_dispose #1, template: 1C187868, name: 1C1879A0, src
gst_pad_template_dispose #1, template: 1C187E08, name: 1C187F40, sink

...

==31063==
==31063== Invalid read of size 4
==31063==    at 0x80497C9: try_to_plug (dynamic_orig.c:205)
==31063==    by 0x80498D1: cb_typefound (dynamic_orig.c:237)
==31063==    by 0x1B96B8CB: gst_marshal_VOID__UINT_BOXED (gstmarshal.c:470)
==31063==    by 0x1BA50C4C: g_closure_invoke (in /usr/lib/libgobject-2.0.so.0.600.3)
==31063==  Address 0x1C187E34 is 44 bytes inside a block of size 76 free'd
==31063==    at 0x1B90657D: free (vg_replace_malloc.c:153)
==31063==    by 0x1BCA9502: g_free (in /usr/lib/libglib-2.0.so.0.600.3)
==31063==

...

try_to_plug #1.2, template: 1C187E08, name: 1C187F40, sink



it's easy to see that during the call to gst_element_factory_create(), for some
reason the very factory is reaused that is passed to the call, and the template
referenced as tmpl in try_to_plug (1C187E08) is freed in the process.

------- You are receiving this mail because: -------
You are the assignee for the bug.
You are the QA contact for the bug.