[gstreamer-bugs] [Bug 337785] New: A particular GIF file crashes rhymbox

[GStreamer (bugzilla.gnome.org)]

Do not reply to this via email (we are currently unable to handle email
responses and they get discarded).  You can add comments to this bug at
http://bugzilla.gnome.org/show_bug.cgi?id=337785
 GStreamer | gstreamer (core) | Ver: 0.10.4

           Summary: A particular GIF file crashes rhymbox
           Product: GStreamer
           Version: 0.10.4
          Platform: Other
        OS/Version: Linux
            Status: UNCONFIRMED
          Severity: normal
          Priority: Normal
         Component: gstreamer (core)
        AssignedTo: gstreamer-bugs at lists.sourceforge.net
        ReportedBy: seb128 at debian.org
         QAContact: gstreamer-bugs at lists.sourceforge.net
     GNOME version: Unspecified
   GNOME milestone: Unspecified


That bug has been opened on
https://launchpad.net/distros/ubuntu/+source/rhythmbox/+bug/38809

"After an upgrade (to 0.9.3.1-0ubuntu3), rhythmbox started crashing while
scanning local music files.

The output of 'rhythmbox -d' was:

[0x812b700] [action_thread_main] rhythmdb.c:2016 (11:28:56): executing
RHYTHMDB_ACTION_LOAD for
"file:///mnt/shared/music/Violent%20Femmes/Freak%20Magnet/vf_freak.gif"
[0x812b700] [rb_metadata_load] rb-metadata-gst.c:760 (11:28:56): loading
metadata for uri:
file:///mnt/shared/music/Violent%20Femmes/Freak%20Magnet/vf_freak.gif[0x812b700]
[rb_metadata_load] rb-metadata-gst.c:832 (11:28:56): going to PAUSED for
metadata, uri:
file:///mnt/shared/music/Violent%20Femmes/Freak%20Magnet/vf_freak.gif
[0x812b700] [rb_metadata_gst_typefind_cb] rb-metadata-gst.c:563 (11:28:56):
found type image/gif
[0x893aab0] [rb_metadata_gst_new_decoded_pad_cb] rb-metadata-gst.c:598
(11:28:56): got decoded video pad of type video/x-raw-rgb
*** glibc detected *** double free or corruption (out): 0x08971e20 ***

Removing this GIF file fixed the issue. When I put the file back, the problem
recurred with 100% repeatability. A different GIF file in the same location
caused no problem.

A copy of the file is here:
http://clublinux.almatech.net.au/files/images/vf_freak_0.gif"

$ gdb --args gst-launch-0.10 -t filesrc location=bug.gif ! decodebin ! fakesink
...
Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread -1236628560 (LWP 20237)]
0xb7f519a5 in gst_structure_foreach (structure=0x8279408, func=0xb7f272c8
<gst_caps_is_fixed_foreach>, user_data=0x0)
    at gststructure.c:788
788         ret = func (field->name, &field->value, user_data);
(gdb) bt
#0  0xb7f519a5 in gst_structure_foreach (structure=0x8279408, func=0xb7f272c8
<gst_caps_is_fixed_foreach>, user_data=0x0)
    at gststructure.c:788
#1  0xb7f27374 in gst_caps_is_fixed (caps=0x826df80) at gstcaps.c:767
#2  0xb7f42fc5 in gst_pad_set_caps (pad=0x81d6648, caps=0x826df80) at
gstpad.c:2169
#3  0xb7f452ce in gst_pad_chain (pad=0x81d6648, buffer=0x8270a98) at
gstpad.c:2243
#4  0xb7f458bf in gst_pad_push (pad=0x81d1650, buffer=0x8270a98) at
gstpad.c:3288
#5  0xb68d8a3e in gst_ffmpegdemux_register () from
/usr/lib/gstreamer-0.10/libgstffmpeg.so
#6  0xb7f590c4 in gst_task_func (task=0x8270410, tclass=0x826d4f0) at
gsttask.c:193
#7  0xb7e7e428 in g_thread_pool_thread_proxy (data=0x826d580) at
gthreadpool.c:265
#8  0xb7e7c582 in g_thread_create_proxy (data=0x826d670) at gthread.c:582
#9  0xb7e30341 in start_thread () from /lib/tls/i686/cmov/libpthread.so.0
#10 0xb7dc54de in clone () from /lib/tls/i686/cmov/libc.so.6


-- 
Configure bugmail: http://bugzilla.gnome.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the QA contact for the bug.
You are the assignee for the bug.