[gstreamer-bugs] [Bug 330844] New: mpeg2dec crashes with "cropped" MPEG videos

[GStreamer (bugzilla.gnome.org)]

Do not reply to this via email (we are currently unable to handle email
responses and they get discarded).  You can add comments to this bug at
http://bugzilla.gnome.org/show_bug.cgi?id=330844
 GStreamer | gst-plugins-ugly | Ver: HEAD CVS

           Summary: mpeg2dec crashes with "cropped" MPEG videos
           Product: GStreamer
           Version: HEAD CVS
          Platform: Other
        OS/Version: All
            Status: UNCONFIRMED
          Severity: normal
          Priority: Normal
         Component: gst-plugins-ugly
        AssignedTo: gstreamer-bugs at lists.sourceforge.net
        ReportedBy: fabrizio.ge at tiscali.it
         QAContact: gstreamer-bugs at lists.sourceforge.net
     GNOME version: Unspecified
   GNOME milestone: Unspecified


Please describe the problem:
If the image in a MPEG video file needs to be cropped, mpeg2dec allocates a new
buffer with the cropped image. But there are two serious problems with that
- the newly allocated buffer has no caps
- the newly allocated buffer is never freed, while the old buffer is
double-freed, causing memory corruption and crashes

Steps to reproduce:
1. Open an MPEG video file with video frames needing cropping in a GStreamer
app, in a pipeline which has mpeg2dec in it and terminates with xvimagesink
2. xvimagesink will break, since it does not get "width" and "height" caps 


Actual results:


Expected results:


Does this happen every time?


Other information:


-- 
Configure bugmail: http://bugzilla.gnome.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the QA contact for the bug.
You are the assignee for the bug.