[gstreamer-bugs] [Bug 409949] New: crash to adpcm_decode_frame() function

GStreamer (bugzilla.gnome.org) bugzilla-daemon at bugzilla.gnome.org
Tue Feb 20 01:48:41 PST 2007


Do not reply to this via email (we are currently unable to handle email
responses and they get discarded).  You can add comments to this bug at
http://bugzilla.gnome.org/show_bug.cgi?id=409949

  GStreamer | gst-ffmpeg | Ver: 0.10.2

           Summary: crash to adpcm_decode_frame() function
           Product: GStreamer
           Version: 0.10.2
          Platform: Other
        OS/Version: Linux
            Status: UNCONFIRMED
          Severity: critical
          Priority: Normal
         Component: gst-ffmpeg
        AssignedTo: gstreamer-bugs at lists.sourceforge.net
        ReportedBy: seb128 at debian.org
         QAContact: gstreamer-bugs at lists.sourceforge.net
     GNOME version: 2.17/2.18
   GNOME milestone: Unspecified


That bug has been opened on https://launchpad.net/bugs/86447

"Binary package hint: totem

Trying play archive .asf audio extension.
...
Package: totem-gstreamer 2.17.91-0ubuntu2
ProcCmdline: totem file:///media/cdrom0/Data/audio/Musc/Mikel.asf
...
"

Debug backtrace for the crash:

#0  0xb45f4c1b in adpcm_decode_frame (avctx=0x8470400, data=0x8652000,
data_size=0xb3c87e04, buf=0x8604962 "", buf_size=2)
    at adpcm.c:1145
1145    adpcm.c: No such file or directory.
        in adpcm.c
(gdb) thread apply all bt full

Thread 9 (process 8257):
#0  0xb7f95410 in __kernel_vsyscall ()
No symbol table info available.
#1  0xb71bc6f3 in poll () from /lib/tls/i686/cmov/libc.so.6
No symbol table info available.
#2  0xb733ac53 in g_main_context_iterate (context=0x814ec90, block=1,
dispatch=1, self=0x80940a0) at gmain.c:2979
        got_ownership = <value optimized out>
        max_priority = 2147483647
        timeout = 106
        some_ready = <value optimized out>
        nfds = 9
        allocated_nfds = <value optimized out>
        fds = (GPollFD *) 0x83be7a8
        __PRETTY_FUNCTION__ = "g_main_context_iterate"
#3  0xb733afc9 in IA__g_main_loop_run (loop=0x83f69a8) at gmain.c:2881
        got_ownership = -1220115392
        self = (GThread *) 0x80940a0
        __PRETTY_FUNCTION__ = "IA__g_main_loop_run"
#4  0xb7b22f84 in IA__gtk_main () at gtkmain.c:1171
        tmp_list = (GList *) 0x8173218
        functions = (GList *) 0x0
        init = (GtkInitFunction *) 0x82b71e8
        loop = (GMainLoop *) 0x83f69a8
#5  0x08062500 in main ()
No symbol table info available.

Thread 8 (process 8259):
#0  0xb7f95410 in __kernel_vsyscall ()
No symbol table info available.
#1  0xb746d986 in ?? () from /lib/tls/i686/cmov/libpthread.so.0
No symbol table info available.
#2  0xb7357bb2 in IA__g_usleep (microseconds=50000) at gtimer.c:170
        request = {tv_sec = 0, tv_nsec = 50000000}
        remaining = {tv_sec = -516, tv_nsec = -1220942616}
#3  0xb5da66b1 in gst_xvimagesink_event_thread (xvimagesink=0x83e4080) at
xvimagesink.c:1435
        __PRETTY_FUNCTION__ = "gst_xvimagesink_event_thread"
#4  0xb73559bf in g_thread_create_proxy (data=0x842e2d0) at gthread.c:591
        __PRETTY_FUNCTION__ = "g_thread_create_proxy"
#5  0xb746631b in start_thread () from /lib/tls/i686/cmov/libpthread.so.0
No symbol table info available.
#6  0xb71c63ee in clone () from /lib/tls/i686/cmov/libc.so.6
No symbol table info available.

Thread 7 (process 8260):
#0  0xb7f95410 in __kernel_vsyscall ()
---Type <return> to continue, or q <return> to quit---
No symbol table info available.
#1  0xb746a5c6 in pthread_cond_wait@@GLIBC_2.3.2 () from
/lib/tls/i686/cmov/libpthread.so.0
No symbol table info available.
#2  0xb767d828 in gst_system_clock_async_thread (clock=0x81dad80) at
gstsystemclock.c:260
        entry = (GstClockEntry *) 0xb739eaf0
        requested = 7337370520
        res = 3074024680
        sysclock = (GstSystemClock *) 0x81dad80
        __PRETTY_FUNCTION__ = "gst_system_clock_async_thread"
#3  0xb73559bf in g_thread_create_proxy (data=0x8433650) at gthread.c:591
        __PRETTY_FUNCTION__ = "g_thread_create_proxy"
#4  0xb746631b in start_thread () from /lib/tls/i686/cmov/libpthread.so.0
No symbol table info available.
#5  0xb71c63ee in clone () from /lib/tls/i686/cmov/libc.so.6
No symbol table info available.

Thread 6 (process 8261):
#0  0xb7f95410 in __kernel_vsyscall ()
No symbol table info available.
#1  0xb746a5c6 in pthread_cond_wait@@GLIBC_2.3.2 () from
/lib/tls/i686/cmov/libpthread.so.0
No symbol table info available.
#2  0xb5dc23f2 in gst_queue_chain (pad=0x84803f8, buffer=0x846a008) at
gstqueue.c:729
        queue = (GstQueue *) 0x8485850
        __PRETTY_FUNCTION__ = "gst_queue_chain"
#3  0xb766a239 in gst_pad_chain_unchecked (pad=0x84803f8, buffer=0x846a008) at
gstpad.c:3407
        caps = <value optimized out>
        caps_changed = 0
        chainfunc = (GstPadChainFunction) 0xb5dc2210 <gst_queue_chain>
        ret = <value optimized out>
        __PRETTY_FUNCTION__ = "gst_pad_chain_unchecked"
#4  0xb766a92b in gst_pad_push (pad=0x8480338, buffer=0x846a008) at
gstpad.c:3573
        peer = (GstPad *) 0x84803f8
        ret = 22050
        caps = (GstCaps *) 0x80d0cc0
        __PRETTY_FUNCTION__ = "gst_pad_push"
#5  0xb44b0b72 in gst_ffmpegdemux_loop (pad=0x83f7ed8) at gstffmpegdemux.c:1196
        __txt = <value optimized out>
        __dbg = <value optimized out>
        demux = (GstFFMpegDemux *) 0x8475070
        ret = GST_FLOW_OK
        res = <value optimized out>
        pkt = {pts = 45093, dts = 45093, data = 0x864eb00 "�\005", size =
1572, stream_index = 0, flags = 1, 
  duration = 1572, destruct = 0xb44b6eb0 <av_destruct_packet>, priv = 0x0, pos
= 11248}
        srcpad = (GstPad *) 0x8480338
        stream = (GstFFStream *) 0x846aba8
        avstream = <value optimized out>
---Type <return> to continue, or q <return> to quit---
        outbuf = (GstBuffer *) 0xfffffffc
        timestamp = 2045034014
        duration = 71292517
        __PRETTY_FUNCTION__ = "gst_ffmpegdemux_loop"
#6  0xb7682696 in gst_task_func (task=0x83ccf78, tclass=0x847deb0) at
gsttask.c:192
        t = -1217911285
        lock = (GStaticRecMutex *) 0x847de80
        tself = (GThread *) 0x80c40c0
        __PRETTY_FUNCTION__ = "gst_task_func"
#7  0xb7357318 in g_thread_pool_thread_proxy (data=0x80d0628) at
gthreadpool.c:265
        task = (gpointer) 0x83ccf78
        pool = (GRealThreadPool *) 0x80d0628
#8  0xb73559bf in g_thread_create_proxy (data=0x80c40c0) at gthread.c:591
        __PRETTY_FUNCTION__ = "g_thread_create_proxy"
#9  0xb746631b in start_thread () from /lib/tls/i686/cmov/libpthread.so.0
No symbol table info available.
#10 0xb71c63ee in clone () from /lib/tls/i686/cmov/libc.so.6
No symbol table info available.

Thread 5 (process 8263):
#0  0xb7f95410 in __kernel_vsyscall ()
No symbol table info available.
#1  0xb746a84c in pthread_cond_timedwait@@GLIBC_2.3.2 () from
/lib/tls/i686/cmov/libpthread.so.0
No symbol table info available.
#2  0xb747b133 in g_cond_timed_wait_posix_impl (cond=0x84588c0,
entered_mutex=0x0, abs_time=0x1) at gthread-posix.c:242
        result = <value optimized out>
        end_time = {tv_sec = 1171960901, tv_nsec = 803891000}
        __PRETTY_FUNCTION__ = "g_cond_timed_wait_posix_impl"
#3  0xb731ac81 in g_async_queue_pop_intern_unlocked (queue=0x80b8a08,
try=<value optimized out>, end_time=0xb3409384)
    at gasyncqueue.c:341
        retval = <value optimized out>
        __PRETTY_FUNCTION__ = "g_async_queue_pop_intern_unlocked"
#4  0xb7357513 in g_thread_pool_thread_proxy (data=0x80b8aa8) at
gthreadpool.c:220
        task = <value optimized out>
        pool = (GRealThreadPool *) 0x80b8aa8
#5  0xb73559bf in g_thread_create_proxy (data=0x83f6a60) at gthread.c:591
        __PRETTY_FUNCTION__ = "g_thread_create_proxy"
#6  0xb746631b in start_thread () from /lib/tls/i686/cmov/libpthread.so.0
No symbol table info available.
#7  0xb71c63ee in clone () from /lib/tls/i686/cmov/libc.so.6
No symbol table info available.

Thread 4 (process 8264):
#0  0xb7f95410 in __kernel_vsyscall ()
No symbol table info available.
#1  0xb746a5c6 in pthread_cond_wait@@GLIBC_2.3.2 () from
/lib/tls/i686/cmov/libpthread.so.0
---Type <return> to continue, or q <return> to quit---
No symbol table info available.
#2  0xb5dbf8df in gst_queue_loop (pad=0x85fc6f0) at gstqueue.c:885
        queue = (GstQueue *) 0x8485b20
        __PRETTY_FUNCTION__ = "gst_queue_loop"
#3  0xb7682696 in gst_task_func (task=0x8469ca0, tclass=0x847deb0) at
gsttask.c:192
        t = -1217911285
        lock = (GStaticRecMutex *) 0x8600d58
        tself = (GThread *) 0x8600d88
        __PRETTY_FUNCTION__ = "gst_task_func"
#4  0xb7357318 in g_thread_pool_thread_proxy (data=0x80d0628) at
gthreadpool.c:265
        task = (gpointer) 0x8469ca0
        pool = (GRealThreadPool *) 0x80d0628
#5  0xb73559bf in g_thread_create_proxy (data=0x8600d88) at gthread.c:591
        __PRETTY_FUNCTION__ = "g_thread_create_proxy"
#6  0xb746631b in start_thread () from /lib/tls/i686/cmov/libpthread.so.0
No symbol table info available.
#7  0xb71c63ee in clone () from /lib/tls/i686/cmov/libc.so.6
No symbol table info available.

Thread 3 (process 8265):
#0  0xb7f95410 in __kernel_vsyscall ()
No symbol table info available.
#1  0xb746a5c6 in pthread_cond_wait@@GLIBC_2.3.2 () from
/lib/tls/i686/cmov/libpthread.so.0
No symbol table info available.
#2  0xb5dbf8df in gst_queue_loop (pad=0x85fc570) at gstqueue.c:885
        queue = (GstQueue *) 0x8485a30
        __PRETTY_FUNCTION__ = "gst_queue_loop"
#3  0xb7682696 in gst_task_func (task=0x8469cf0, tclass=0x847deb0) at
gsttask.c:192
        t = -1217911285
        lock = (GStaticRecMutex *) 0x8602d28
        tself = (GThread *) 0x85fe0f8
        __PRETTY_FUNCTION__ = "gst_task_func"
#4  0xb7357318 in g_thread_pool_thread_proxy (data=0x80d0628) at
gthreadpool.c:265
        task = (gpointer) 0x8469cf0
        pool = (GRealThreadPool *) 0x80d0628
#5  0xb73559bf in g_thread_create_proxy (data=0x85fe0f8) at gthread.c:591
        __PRETTY_FUNCTION__ = "g_thread_create_proxy"
#6  0xb746631b in start_thread () from /lib/tls/i686/cmov/libpthread.so.0
No symbol table info available.
#7  0xb71c63ee in clone () from /lib/tls/i686/cmov/libc.so.6
No symbol table info available.

Thread 2 (process 8266):
#0  0xb7f95410 in __kernel_vsyscall ()
No symbol table info available.
#1  0xb746a5c6 in pthread_cond_wait@@GLIBC_2.3.2 () from
/lib/tls/i686/cmov/libpthread.so.0
---Type <return> to continue, or q <return> to quit---
No symbol table info available.
#2  0xb5dbf8df in gst_queue_loop (pad=0x846f908) at gstqueue.c:885
        queue = (GstQueue *) 0x8485940
        __PRETTY_FUNCTION__ = "gst_queue_loop"
#3  0xb7682696 in gst_task_func (task=0x8469d40, tclass=0x847deb0) at
gsttask.c:192
        t = -1217911285
        lock = (GStaticRecMutex *) 0x85e7280
        tself = (GThread *) 0x8602ac0
        __PRETTY_FUNCTION__ = "gst_task_func"
#4  0xb7357318 in g_thread_pool_thread_proxy (data=0x80d0628) at
gthreadpool.c:265
        task = (gpointer) 0x8469d40
        pool = (GRealThreadPool *) 0x80d0628
#5  0xb73559bf in g_thread_create_proxy (data=0x8602ac0) at gthread.c:591
        __PRETTY_FUNCTION__ = "g_thread_create_proxy"
#6  0xb746631b in start_thread () from /lib/tls/i686/cmov/libpthread.so.0
No symbol table info available.
#7  0xb71c63ee in clone () from /lib/tls/i686/cmov/libc.so.6
No symbol table info available.

Thread 1 (process 8262):
#0  0xb45f4c1b in adpcm_decode_frame (avctx=0x8470400, data=0x8652000,
data_size=0xb3c87e04, buf=0x8604962 "", buf_size=2)
    at adpcm.c:1145
        cs = <value optimized out>
        n = <value optimized out>
        m = <value optimized out>
        channel = <value optimized out>
        i = <value optimized out>
        samples = (short int *) 0x86a0ff0
        src = (uint8_t *) 0x8619bfc ""
        st = 1
        last_byte = <value optimized out>
        nibble = <value optimized out>
        decode_top_nibble_next = <value optimized out>
        samples_in_chunk = <value optimized out>
        previous_left_sample = <value optimized out>
        previous_right_sample = <value optimized out>
        current_left_sample = 0
        current_right_sample = 0
        next_left_sample = 0
        next_right_sample = 0
        coeff1l = 0
        coeff2l = 0
        coeff1r = 0
        coeff2r = 0
        count1 = 2889
        count2 = 4
---Type <return> to continue, or q <return> to quit---
#1  0xb4509a6c in avcodec_decode_audio (avctx=0x8470400, samples=0x8652000,
frame_size_ptr=0xb3c87e04, buf=0x8604962 "", 
    buf_size=2) at utils.c:957
        ret = 8
#2  0xb44a3bb4 in gst_ffmpegdec_audio_frame (ffmpegdec=0x845a0b0,
data=0x8604962 "", size=2, 
    in_timestamp=18446744073709551615, in_duration=18446744073709551615,
outbuf=0xb3c87f64, ret=0xb3c88088)
    at gstffmpegdec.c:1443
        len = <value optimized out>
        have_data = <value optimized out>
        __PRETTY_FUNCTION__ = "gst_ffmpegdec_audio_frame"
#3  0xb44a556c in gst_ffmpegdec_frame (ffmpegdec=0x845a0b0, data=0x8604962 "",
size=2, got_data=0xb3c8808c, 
    in_timestamp=18446744073709551615, in_duration=18446744073709551615,
ret=0xb3c88088) at gstffmpegdec.c:1562
        oclass = (GstFFMpegDecClass *) 0x85c1868
        outbuf = (GstBuffer *) 0x846a2d8
        have_data = <value optimized out>
        len = <value optimized out>
        __PRETTY_FUNCTION__ = "gst_ffmpegdec_frame"
#4  0xb44a6fd4 in gst_ffmpegdec_chain (pad=0x8480578, inbuf=0x8469d90) at
gstffmpegdec.c:1936
        res = <value optimized out>
        ffpts = -5231336976022994776
        ffmpegdec = (GstFFMpegDec *) 0x845a0b0
        oclass = (GstFFMpegDecClass *) 0x85c1868
        data = (guint8 *) 0x8604962 ""
        bdata = (guint8 *) 0x8604962 ""
        size = 8
        bsize = 2
        len = <value optimized out>
        have_data = 1
        ret = GST_FLOW_OK
        left = 0
        in_timestamp = 18446744073709551615
        in_duration = 18446744073709551615
        next_timestamp = 18446744073709551615
        next_duration = 18446744073709551615
        pending_timestamp = 0
        pending_duration = 72743764
        __PRETTY_FUNCTION__ = "gst_ffmpegdec_chain"
#5  0xb766a239 in gst_pad_chain_unchecked (pad=0x8480578, buffer=0x8469d90) at
gstpad.c:3407
        caps = <value optimized out>
        caps_changed = 1
        chainfunc = (GstPadChainFunction) 0xb44a6c30 <gst_ffmpegdec_chain>
        ret = <value optimized out>
        __PRETTY_FUNCTION__ = "gst_pad_chain_unchecked"
#6  0xb766a92b in gst_pad_push (pad=0x84804b8, buffer=0x8469d90) at
gstpad.c:3573
        peer = (GstPad *) 0x8480578
        ret = 135131328
        caps = (GstCaps *) 0x80d0cc0
---Type <return> to continue, or q <return> to quit---
        __PRETTY_FUNCTION__ = "gst_pad_push"
#7  0xb5dbff1e in gst_queue_loop (pad=0x84804b8) at gstqueue.c:810
        result = <value optimized out>
        queue = (GstQueue *) 0x8485850
        __PRETTY_FUNCTION__ = "gst_queue_loop"
#8  0xb7682696 in gst_task_func (task=0x8469c50, tclass=0x847deb0) at
gsttask.c:192
        t = -1217911285
        lock = (GStaticRecMutex *) 0x846e220
        tself = (GThread *) 0x8459400
        __PRETTY_FUNCTION__ = "gst_task_func"
#9  0xb7357318 in g_thread_pool_thread_proxy (data=0x80d0628) at
gthreadpool.c:265
        task = (gpointer) 0x8469c50
        pool = (GRealThreadPool *) 0x80d0628
#10 0xb73559bf in g_thread_create_proxy (data=0x8459400) at gthread.c:591
        __PRETTY_FUNCTION__ = "g_thread_create_proxy"


-- 
Configure bugmail: http://bugzilla.gnome.org/userprefs.cgi?tab=email




More information about the Gstreamer-bugs mailing list