[gstreamer-bugs] [Bug 327350] crash (double free) on mpg playback

[GStreamer (bugzilla.gnome.org)]

Do not reply to this via email (we are currently unable to handle email
responses and they get discarded).  You can add comments to this bug at
http://bugzilla.gnome.org/show_bug.cgi?id=327350
 GStreamer | gst-plugins-ugly | Ver: 0.10.2





------- Comment #6 from Martin Pitt  2006-01-18 17:41 UTC -------
New stack trace without totem overhead and all gst* packages rebuilt with
debugging info and without otpmimization:

$ gdb --args gst-launch-0.10 playbin uri=file:///home/martin/a-mpeg2.mpg
Pipeline is PREROLLING ...
[New Thread 842355952 (LWP 8707)]
Pipeline is PREROLLED ...
Setting pipeline to PLAYING ...
[New Thread 858838256 (LWP 8708)]
New clock: GstSystemClock

Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 833967344 (LWP 8706)]
0x0fbcc034 in free () from /lib/libc.so.6
(gdb) bt
#0  0x0fbcc034 in free () from /lib/libc.so.6
#1  0x0fd2805c in IA__g_free (mem=0x323a2008) at gmem.c:172
#2  0x0feb40b0 in gst_buffer_finalize (buffer=0x10180ad0) at gstbuffer.c:181
#3  0x0fedba50 in gst_mini_object_free (mini_object=0x10180ad0) at
gstminiobject.c:264
#4  0x0fedbc28 in gst_mini_object_unref (mini_object=0x10180ad0) at
gstminiobject.c:297
#5  0x0fedbcc4 in gst_mini_object_replace (olddata=0x101721a0,
newdata=0x10180b28) at gstminiobject.c:324
#6  0x0f3f6ec8 in handoff (identity=0x1018f008, frame=0x10180b28,
data=0x10172050) at gstplaybin.c:375
#7  0x0f5a229c in marshal_VOID__MINIOBJECT (closure=0x101898e8,
return_value=0x0, n_param_values=2, param_values=0x31b546a0,
invocation_hint=0x31b545b0,
    marshal_data=0x0) at gstidentity.c:158
#8  0x0fe2a8a0 in IA__g_closure_invoke (closure=0x101898e8, return_value=0x0,
n_param_values=2, param_values=0x31b546a0, invocation_hint=0x31b545b0) at
gclosure.c:490
#9  0x0fe40cb8 in signal_emit_unlocked_R (node=0x10086c58, detail=0,
instance=0x1018f008, emission_return=0x0, instance_and_params=0x31b546a0) at
gsignal.c:2438
#10 0x0fe42178 in IA__g_signal_emit_valist (instance=0x1018f008,
signal_id=833963728, detail=0, var_args=0x31b548e0) at gsignal.c:2197
#11 0x0fe4258c in IA__g_signal_emit (instance=0x323a2008, signal_id=1583769445,
detail=267602848) at gsignal.c:2241
#12 0x0f5a3d74 in gst_identity_transform_ip (trans=0x1018f008, buf=0x10180b28)
at gstidentity.c:411
#13 0x0f63b5d0 in gst_base_transform_handle_buffer (trans=0x1018f008,
inbuf=0x10180b28, outbuf=0x31b54a70) at gstbasetransform.c:1164
#14 0x0f63be58 in gst_base_transform_chain (pad=0x10188aa0, buffer=0x10180b28)
at gstbasetransform.c:1298
#15 0x0fee8740 in gst_pad_chain (pad=0x10188aa0, buffer=0x10180b28) at
gstpad.c:3155
#16 0x0fecf830 in gst_proxy_pad_do_chain (pad=0x101782a0, buffer=0x10180b28) at
gstghostpad.c:205
#17 0x0fee8740 in gst_pad_chain (pad=0x101782a0, buffer=0x10180b28) at
gstpad.c:3155
#18 0x0fee8f9c in gst_pad_push (pad=0x101756f0, buffer=0x10180b28) at
gstpad.c:3254
#19 0x0f5a87e0 in gst_queue_loop (pad=0x101756f0) at gstqueue.c:808
#20 0x0ff053f8 in gst_task_func (task=0x10171598, tclass=0x10292470) at
gsttask.c:186
#21 0x0fd46e7c in g_thread_pool_thread_proxy (data=<value optimized out>) at
gthreadpool.c:172
#22 0x0fd43dd0 in g_thread_create_proxy (data=<value optimized out>) at
gthread.c:582
#23 0x0fcc1a30 in start_thread () from /lib/libpthread.so.0
#24 0x0fc2f024 in clone () from /lib/libc.so.6
Previous frame inner to this frame (corrupt stack?)


-- 
Configure bugmail: http://bugzilla.gnome.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the QA contact for the bug.
You are the assignee for the bug.