[gstreamer-bugs] [Bug 332964] random crashes in mp3_type_find

[GStreamer (bugzilla.gnome.org)]

Do not reply to this via email (we are currently unable to handle email
responses and they get discarded).  You can add comments to this bug at
http://bugzilla.gnome.org/show_bug.cgi?id=332964
 GStreamer | gst-plugins-base | Ver: 0.10.3





------- Comment #7 from Tim-Philipp Müller  2006-03-09 16:09 UTC -------
Created an attachment (id=60984)
 --> (http://bugzilla.gnome.org/attachment.cgi?id=60984&action=view)
sample that demonstrates the bug

Sample data (for posterity), shows the bug in valgrind when using

  gst-launch-0.10 playbin uri=file:///path/to/foo.data

==27584== Invalid read of size 4
==27584==    at 0x4FE3F5F: mp3_type_find_at_offset (gsttypefindfunctions.c:629)
==27584==    by 0x4FE46C8: mp3_type_find (gsttypefindfunctions.c:718)
==27584==    by 0x4075FA2: gst_type_find_factory_call_function
(gsttypefindfactory.c:243)
==27584==    by 0x4699C8A: gst_type_find_helper_get_range
(gsttypefindhelper.c:223)
==27584==    by 0x4D19ECB: gst_type_find_element_activate
(gsttypefindelement.c:673)
==27584==    by 0x405D732: gst_pad_set_active (gstpad.c:638)
==27584==    by 0x404BEA8: activate_pads (gstelement.c:2250)
==27584==    by 0x4056A53: gst_iterator_fold (gstiterator.c:503)
==27584==    by 0x404BF49: iterator_fold_with_resync (gstelement.c:2268)
==27584==    by 0x404C0E0: gst_element_pads_activate (gstelement.c:2317)
==27584==    by 0x404C41F: gst_element_change_state_func (gstelement.c:2354)
==27584==    by 0x4D1A168: gst_type_find_element_change_state
(gsttypefindelement.c:722)
==27584==  Address 0x4FEDBE6 is 2 bytes before a block of size 2,048 alloc'd
==27584==    at 0x401B422: malloc (vg_replace_malloc.c:149)
==27584==    by 0x412AF36: g_malloc (gmem.c:131)
==27584==    by 0x403EE43: gst_buffer_new_and_alloc (gstbuffer.c:284)
==27584==    by 0x46C71D6: gst_gnome_vfs_src_create (gstgnomevfssrc.c:991)
==27584==    by 0x46907DE: gst_base_src_get_range (gstbasesrc.c:1195)
==27584==    by 0x4691497: gst_base_src_pad_get_range (gstbasesrc.c:1263)
==27584==    by 0x4061086: gst_pad_get_range (gstpad.c:3427)
==27584==    by 0x4050EB4: gst_proxy_pad_do_getrange (gstghostpad.c:220)
==27584==    by 0x469981B: helper_find_peek (gsttypefindhelper.c:107)
==27584==    by 0x4075B6E: gst_type_find_peek (gsttypefind.c:117)
==27584==    by 0x4FE3E96: mp3_type_find_at_offset (gsttypefindfunctions.c:604)
==27584==    by 0x4FE46C8: mp3_type_find (gsttypefindfunctions.c:718)


-- 
Configure bugmail: http://bugzilla.gnome.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the QA contact for the bug.
You are the assignee for the bug.