[gstreamer-bugs] [Bug 424809] New: totem-video-thumbnailer crashed with SIGSEGV in decode_mb_cavlc()

GStreamer (bugzilla.gnome.org) bugzilla-daemon at bugzilla.gnome.org
Sat Mar 31 03:47:11 PDT 2007


If you have any questions why you received this email, please see the text at
the end of this email. Replies to this email are NOT read, please see the text
at the end of this email. You can add comments to this bug at:
  http://bugzilla.gnome.org/show_bug.cgi?id=424809

  GStreamer | gst-ffmpeg | Ver: 0.10.2
           Summary: totem-video-thumbnailer crashed with SIGSEGV in
                    decode_mb_cavlc()
           Product: GStreamer
           Version: 0.10.2
          Platform: Other
        OS/Version: Linux
            Status: UNCONFIRMED
          Severity: critical
          Priority: Normal
         Component: gst-ffmpeg
        AssignedTo: gstreamer-bugs at lists.sourceforge.net
        ReportedBy: seb128 at debian.org
         QAContact: gstreamer-bugs at lists.sourceforge.net
     GNOME version: 2.17/2.18
   GNOME milestone: Unspecified


The bug has been opened on https://launchpad.net/bugs/99348

"Binary package hint: totem

Description of the problem:
The gnome thumbnailer crashed while trying to thumbnail a file
(https://launchpad.net/ubuntu/+source/totem/+bug/99341 ) which was still
downloading. See Bug #99341 for further details.

ProblemType: Crash
Architecture: i386
CrashCounter: 1
Date: Sat Mar 31 09:54:58 2007
DistroRelease: Ubuntu 7.04
ExecutablePath: /usr/bin/totem-video-thumbnailer
Package: totem-gstreamer 2.18.0-0ubuntu2
PackageArchitecture: i386
ProcCmdline: /usr/bin/gnome-video-thumbnailer -s 128
file:///home/sits/Desktop/spolsky.mp4 /tmp/.gnome_thumbnail.C393PT
...
.
Thread 8 (process 15288):
#0  0xffffe410 in __kernel_vsyscall ()
#1  0xb74185c6 in pthread_cond_wait@@GLIBC_2.3.2 ()
   from /lib/tls/i686/cmov/libpthread.so.0
#2  0xb74281c1 in g_cond_timed_wait_posix_impl (cond=0x8115de8, 
    entered_mutex=0x0, abs_time=0x3) at gthread-posix.c:231
        result = <value optimized out>
        end_time = {tv_sec = 0, tv_nsec = -1217981784}
        __PRETTY_FUNCTION__ = "g_cond_timed_wait_posix_impl"
#3  0xb7606f1a in gst_element_get_state_func (element=0x812c018, state=0x0, 
    pending=0x0, timeout=18446744073709551615) at gstelement.c:1802
        timeval = (GTimeVal *) 0x0
        abstimeout = {tv_sec = 0, tv_usec = -1079469104}
        cookie = 1
        ret = GST_STATE_CHANGE_ASYNC
        old_pending = GST_STATE_PAUSED
        __PRETTY_FUNCTION__ = "gst_element_get_state_func"
#4  0xb75f55b4 in gst_bin_get_state_func (element=0x812c018, state=0x0, 
    pending=0x0, timeout=18446744073709551615) at gstbin.c:1294
        bin = (GstBin *) 0x812c018
        ret = 4294967292
        __PRETTY_FUNCTION__ = "gst_bin_get_state_func"
#5  0xb76038d4 in gst_element_get_state (element=0x812c018, state=0x0, 
    pending=0x0, timeout=18446744073709551615) at gstelement.c:1905
        result = <value optimized out>
        __PRETTY_FUNCTION__ = "gst_element_get_state"
#6  0x080563fb in bacon_video_widget_get_current_frame ()
#7  0x0804f62c in main ()
.
Thread 7 (process 15300):
#0  0xb32df9b9 in __do_global_dtors_aux ()
   from /usr/lib/gstreamer-0.10/libgstffmpegcolorspace.so
#1  0xb32f44ac in _fini ()
   from /usr/lib/gstreamer-0.10/libgstffmpegcolorspace.so
#2  0xb7f4e9ee in ?? () from /lib/ld-linux.so.2
#3  0xb7f5b2e0 in _rtld_global () from /lib/ld-linux.so.2
#4  0x00000000 in ?? ()
.
Thread 6 (process 15302):
#0  0xffffe410 in __kernel_vsyscall ()
#1  0xb741aec1 in __lll_mutex_unlock_wake ()
   from /lib/tls/i686/cmov/libpthread.so.0
#2  0xb7417bf9 in _L_mutex_unlock_61 ()
   from /lib/tls/i686/cmov/libpthread.so.0
#3  0xb7417860 in __pthread_mutex_unlock_usercnt ()
   from /lib/tls/i686/cmov/libpthread.so.0
#4  0xb7417bf0 in pthread_mutex_unlock ()
   from /lib/tls/i686/cmov/libpthread.so.0
#5  0xb6c06d9f in gst_queue_chain (pad=0x8161cd8, buffer=0x8249f20)
    at gstqueue.c:762
        item = <value optimized out>
        leak = <value optimized out>
        queue = (GstQueue *) 0x8162240
        __PRETTY_FUNCTION__ = "gst_queue_chain"
#6  0xb761ba49 in gst_pad_chain_unchecked (pad=0x8161cd8, buffer=0x8249f20)
    at gstpad.c:3459
        caps = <value optimized out>
        caps_changed = 0
        chainfunc = (GstPadChainFunction) 0xb6c06460 <gst_queue_chain>
        ret = <value optimized out>
        __PRETTY_FUNCTION__ = "gst_pad_chain_unchecked"
#7  0xb761c13b in gst_pad_push (pad=0x8161c18, buffer=0x8249f20)
    at gstpad.c:3625
        peer = (GstPad *) 0x8161cd8
        ret = 136617800
        caps = (GstCaps *) 0x8068060
        __PRETTY_FUNCTION__ = "gst_pad_push"
#8  0xb63da744 in gst_qtdemux_loop (pad=0x813e708) at qtdemux.c:1519
        stop = <value optimized out>
        reason = <value optimized out>
        qtdemux = (GstQTDemux *) 0x815e018
        cur_offset = <value optimized out>
        ret = <value optimized out>
        __PRETTY_FUNCTION__ = "gst_qtdemux_loop"
#9  0xb7634d56 in gst_task_func (task=0x8152e50, tclass=0x815d520)
    at gsttask.c:192
        t = 1
        lock = (GStaticRecMutex *) 0x815d270
        tself = (GThread *) 0x815d690
        __PRETTY_FUNCTION__ = "gst_task_func"
#10 0xb73834d8 in g_thread_pool_thread_proxy (data=0x815d5b0)
    at gthreadpool.c:265
        task = (gpointer) 0x8152e50
        pool = (GRealThreadPool *) 0x815d5b0
#11 0xb7381b7f in g_thread_create_proxy (data=0x815d690) at gthread.c:591
        __PRETTY_FUNCTION__ = "g_thread_create_proxy"
#12 0xb741431b in start_thread () from /lib/tls/i686/cmov/libpthread.so.0
#13 0xb71b050e in clone () from /lib/tls/i686/cmov/libc.so.6
.
Thread 5 (process 15307):
#0  0xffffe410 in __kernel_vsyscall ()
#1  0xb74185c6 in pthread_cond_wait@@GLIBC_2.3.2 ()
   from /lib/tls/i686/cmov/libpthread.so.0
#2  0xb6c03b2f in gst_queue_loop (pad=0x8147620) at gstqueue.c:885
        queue = (GstQueue *) 0x8162060
        __PRETTY_FUNCTION__ = "gst_queue_loop"
#3  0xb7634d56 in gst_task_func (task=0x815f808, tclass=0x815d520)
    at gsttask.c:192
        t = 1
        lock = (GStaticRecMutex *) 0x81614b8
        tself = (GThread *) 0x8165588
        __PRETTY_FUNCTION__ = "gst_task_func"
#4  0xb73834d8 in g_thread_pool_thread_proxy (data=0x815d5b0)
    at gthreadpool.c:265
        task = (gpointer) 0x815f808
        pool = (GRealThreadPool *) 0x815d5b0
#5  0xb7381b7f in g_thread_create_proxy (data=0x8165588) at gthread.c:591
        __PRETTY_FUNCTION__ = "g_thread_create_proxy"
#6  0xb741431b in start_thread () from /lib/tls/i686/cmov/libpthread.so.0
#7  0xb71b050e in clone () from /lib/tls/i686/cmov/libc.so.6
.
Thread 4 (process 15322):
#0  0xffffe410 in __kernel_vsyscall ()
#1  0xb74185c6 in pthread_cond_wait@@GLIBC_2.3.2 ()
   from /lib/tls/i686/cmov/libpthread.so.0
#2  0xb767918f in gst_base_sink_wait_preroll (sink=0x813c0a8)
    at gstbasesink.c:1229
        __PRETTY_FUNCTION__ = "gst_base_sink_wait_preroll"
#3  0xb767c1ae in gst_base_sink_render_object (basesink=0x813c0a8, 
    pad=0x813e048, obj=0x8249ed0) at gstbasesink.c:1323
        ret = <value optimized out>
        bclass = <value optimized out>
        late = <value optimized out>
        priv = (GstBaseSinkPrivate *) 0x813c240
        __PRETTY_FUNCTION__ = "gst_base_sink_render_object"
#4  0xb767d905 in gst_base_sink_queue_object_unlocked (basesink=0x813c0a8, 
    pad=0x813e048, obj=0x8249ed0, prerollable=1) at gstbasesink.c:1860
        ret = GST_FLOW_OK
        length = 1
        q = (GQueue *) 0x813ac10
        __PRETTY_FUNCTION__ = "gst_base_sink_queue_object_unlocked"
#5  0xb767df36 in gst_base_sink_chain_unlocked (basesink=0x813c0a8, 
    pad=0x813e048, buf=0x8249ed0) at gstbasesink.c:2120
        result = <value optimized out>
        start = 1247205538872
        end = 1247213424035
        clip_segment = (GstSegment *) 0x813b460
        __PRETTY_FUNCTION__ = "gst_base_sink_chain_unlocked"
#6  0xb767e4ee in gst_base_sink_chain (pad=0x813e048, buf=0x8249ed0)
    at gstbasesink.c:2154
        basesink = (GstBaseSink *) 0x813c0a8
        result = <value optimized out>
        __PRETTY_FUNCTION__ = "gst_base_sink_chain"
#7  0xb761ba49 in gst_pad_chain_unchecked (pad=0x813e048, buffer=0x8249ed0)
    at gstpad.c:3459
        caps = <value optimized out>
        caps_changed = 0
        chainfunc = (GstPadChainFunction) 0xb767e490 <gst_base_sink_chain>
        ret = <value optimized out>
        __PRETTY_FUNCTION__ = "gst_pad_chain_unchecked"
#8  0xb761c13b in gst_pad_push (pad=0x813e288, buffer=0x8249ed0)
    at gstpad.c:3625
        peer = (GstPad *) 0x813e048
        ret = 135510760
        caps = (GstCaps *) 0x8103820
        __PRETTY_FUNCTION__ = "gst_pad_push"
#9  0xb7689364 in gst_base_transform_chain (pad=0x813e1c8, buffer=0x8249ed0)
    at gstbasetransform.c:1571
        trans = (GstBaseTransform *) 0x813f000
        ret = GST_FLOW_OK
        outbuf = (GstBuffer *) 0x8249ed0
#10 0xb761ba49 in gst_pad_chain_unchecked (pad=0x813e1c8, buffer=0x8249ed0)
    at gstpad.c:3459
        caps = <value optimized out>
        caps_changed = 0
        chainfunc = (
    GstPadChainFunction) 0xb76892c0 <gst_base_transform_chain>
        ret = <value optimized out>
        __PRETTY_FUNCTION__ = "gst_pad_chain_unchecked"
#11 0xb761c13b in gst_pad_push (pad=0x8141010, buffer=0x8249ed0)
    at gstpad.c:3625
        peer = (GstPad *) 0x813e1c8
        ret = 15322
        caps = (GstCaps *) 0x8103820
        __PRETTY_FUNCTION__ = "gst_pad_push"
#12 0xb760d64a in gst_proxy_pad_do_chain (pad=0x8140800, buffer=0x8249ed0)
    at gstghostpad.c:191
        res = GST_FLOW_NOT_NEGOTIATED
#13 0xb761ba49 in gst_pad_chain_unchecked (pad=0x8140800, buffer=0x8249ed0)
    at gstpad.c:3459
        caps = <value optimized out>
        caps_changed = 0
        chainfunc = (GstPadChainFunction) 0xb760d620 <gst_proxy_pad_do_chain>
        ret = <value optimized out>
        __PRETTY_FUNCTION__ = "gst_pad_chain_unchecked"
#14 0xb761c13b in gst_pad_push (pad=0x8172ed0, buffer=0x8249ed0)
    at gstpad.c:3625
        peer = (GstPad *) 0x8140800
        ret = 136441112
        caps = (GstCaps *) 0x8103820
        __PRETTY_FUNCTION__ = "gst_pad_push"
#15 0xb7689364 in gst_base_transform_chain (pad=0x8172e10, buffer=0x8249ed0)
    at gstbasetransform.c:1571
        trans = (GstBaseTransform *) 0x8220048
        ret = GST_FLOW_OK
        outbuf = (GstBuffer *) 0x8249ed0
#16 0xb761ba49 in gst_pad_chain_unchecked (pad=0x8172e10, buffer=0x8249ed0)
    at gstpad.c:3459
        caps = <value optimized out>
        caps_changed = 0
        chainfunc = (
    GstPadChainFunction) 0xb76892c0 <gst_base_transform_chain>
        ret = <value optimized out>
        __PRETTY_FUNCTION__ = "gst_pad_chain_unchecked"
#17 0xb761c13b in gst_pad_push (pad=0x8172d50, buffer=0x8249ed0)
    at gstpad.c:3625
        peer = (GstPad *) 0x8172e10
        ret = 136426184
        caps = (GstCaps *) 0x8103820
        __PRETTY_FUNCTION__ = "gst_pad_push"
#18 0xb7689364 in gst_base_transform_chain (pad=0x8172c90, buffer=0x8249ed0)
    at gstbasetransform.c:1571
        trans = (GstBaseTransform *) 0x821c060
        ret = GST_FLOW_OK
        outbuf = (GstBuffer *) 0x8249ed0
#19 0xb761ba49 in gst_pad_chain_unchecked (pad=0x8172c90, buffer=0x8249ed0)
    at gstpad.c:3459
        caps = <value optimized out>
        caps_changed = 0
        chainfunc = (
    GstPadChainFunction) 0xb76892c0 <gst_base_transform_chain>
        ret = <value optimized out>
        __PRETTY_FUNCTION__ = "gst_pad_chain_unchecked"
#20 0xb761c13b in gst_pad_push (pad=0x8172bd0, buffer=0x8249ed0)
    at gstpad.c:3625
        peer = (GstPad *) 0x8172c90
        ret = 136414488
        caps = (GstCaps *) 0x8103820
        __PRETTY_FUNCTION__ = "gst_pad_push"
#21 0xb7689364 in gst_base_transform_chain (pad=0x8172b10, buffer=0x8249ed0)
    at gstbasetransform.c:1571
        trans = (GstBaseTransform *) 0x8219048
        ret = GST_FLOW_OK
        outbuf = (GstBuffer *) 0x8249ed0
#22 0xb761ba49 in gst_pad_chain_unchecked (pad=0x8172b10, buffer=0x8249ed0)
    at gstpad.c:3459
        caps = <value optimized out>
        caps_changed = 0
        chainfunc = (
    GstPadChainFunction) 0xb76892c0 <gst_base_transform_chain>
        ret = <value optimized out>
        __PRETTY_FUNCTION__ = "gst_pad_chain_unchecked"
#23 0xb761c13b in gst_pad_push (pad=0x816b008, buffer=0x8249ed0)
    at gstpad.c:3625
        peer = (GstPad *) 0x8172b10
        ret = 15322
        caps = (GstCaps *) 0x8103820
        __PRETTY_FUNCTION__ = "gst_pad_push"
#24 0xb760d64a in gst_proxy_pad_do_chain (pad=0x816a800, buffer=0x8249ed0)
    at gstghostpad.c:191
        res = GST_FLOW_NOT_NEGOTIATED
#25 0xb761ba49 in gst_pad_chain_unchecked (pad=0x816a800, buffer=0x8249ed0)
    at gstpad.c:3459
        caps = <value optimized out>
        caps_changed = 0
        chainfunc = (GstPadChainFunction) 0xb760d620 <gst_proxy_pad_do_chain>
        ret = <value optimized out>
        __PRETTY_FUNCTION__ = "gst_pad_chain_unchecked"
#26 0xb761c13b in gst_pad_push (pad=0x8161a98, buffer=0x8249ed0)
    at gstpad.c:3625
        peer = (GstPad *) 0x816a800
        ret = 135732656
        caps = (GstCaps *) 0x8103820
        __PRETTY_FUNCTION__ = "gst_pad_push"
#27 0xb6c0416e in gst_queue_loop (pad=0x8161a98) at gstqueue.c:810
        result = <value optimized out>
        queue = (GstQueue *) 0x8162150
        __PRETTY_FUNCTION__ = "gst_queue_loop"
#28 0xb7634d56 in gst_task_func (task=0x815f8f8, tclass=0x815d520)
    at gsttask.c:192
        t = 1
        lock = (GStaticRecMutex *) 0x8172030
        tself = (GThread *) 0x821ffd8
        __PRETTY_FUNCTION__ = "gst_task_func"
#29 0xb73834d8 in g_thread_pool_thread_proxy (data=0x815d5b0)
    at gthreadpool.c:265
        task = (gpointer) 0x815f8f8
        pool = (GRealThreadPool *) 0x815d5b0
#30 0xb7381b7f in g_thread_create_proxy (data=0x821ffd8) at gthread.c:591
        __PRETTY_FUNCTION__ = "g_thread_create_proxy"
#31 0xb741431b in start_thread () from /lib/tls/i686/cmov/libpthread.so.0
#32 0xb71b050e in clone () from /lib/tls/i686/cmov/libc.so.6
.
Thread 3 (process 15329):
#0  0xffffe410 in __kernel_vsyscall ()
#1  0xb74185c6 in pthread_cond_wait@@GLIBC_2.3.2 ()
   from /lib/tls/i686/cmov/libpthread.so.0
#2  0xb6c03b2f in gst_queue_loop (pad=0x8172990) at gstqueue.c:885
        queue = (GstQueue *) 0x8162330
        __PRETTY_FUNCTION__ = "gst_queue_loop"
#3  0xb7634d56 in gst_task_func (task=0x815f948, tclass=0x815d520)
    at gsttask.c:192
        t = 1
        lock = (GStaticRecMutex *) 0x8213a10
        tself = (GThread *) 0x8246bf8
        __PRETTY_FUNCTION__ = "gst_task_func"
#4  0xb73834d8 in g_thread_pool_thread_proxy (data=0x815d5b0)
    at gthreadpool.c:265
        task = (gpointer) 0x815f948
        pool = (GRealThreadPool *) 0x815d5b0
#5  0xb7381b7f in g_thread_create_proxy (data=0x8246bf8) at gthread.c:591
        __PRETTY_FUNCTION__ = "g_thread_create_proxy"
#6  0xb741431b in start_thread () from /lib/tls/i686/cmov/libpthread.so.0
#7  0xb71b050e in clone () from /lib/tls/i686/cmov/libc.so.6
.
Thread 2 (process 15336):
#0  0xffffe410 in __kernel_vsyscall ()
#1  0xb741884c in pthread_cond_timedwait@@GLIBC_2.3.2 ()
   from /lib/tls/i686/cmov/libpthread.so.0
#2  0xb7428133 in g_cond_timed_wait_posix_impl (cond=0x816c0c8, 
    entered_mutex=0x0, abs_time=0xb) at gthread-posix.c:242
        result = <value optimized out>
        end_time = {tv_sec = 1175331298, tv_nsec = 267203000}
        __PRETTY_FUNCTION__ = "g_cond_timed_wait_posix_impl"
#3  0xb7346c81 in g_async_queue_pop_intern_unlocked (queue=0x807b500, 
    try=<value optimized out>, end_time=0xb2adc384) at gasyncqueue.c:341
        retval = <value optimized out>
        __PRETTY_FUNCTION__ = "g_async_queue_pop_intern_unlocked"
#4  0xb73836d3 in g_thread_pool_thread_proxy (data=0x807cd80)
    at gthreadpool.c:220
        task = <value optimized out>
        pool = (GRealThreadPool *) 0x807cd80
#5  0xb7381b7f in g_thread_create_proxy (data=0x8245ad8) at gthread.c:591
        __PRETTY_FUNCTION__ = "g_thread_create_proxy"
#6  0xb741431b in start_thread () from /lib/tls/i686/cmov/libpthread.so.0
#7  0xb71b050e in clone () from /lib/tls/i686/cmov/libc.so.6
.
Thread 1 (process 15318):
#0  decode_residual (h=0xb5b8f020, gb=0xb5b90ee8, block=0xb5bc8b90, n=0, 
    scantable=0xb5bc9724 "", qmul=0xb5baaa8c, max_coeff=16) at h264.c:5095
        level = {-3, 1, -5, -6, -2, -12, 2, 3, 7, 10, 8, 11, 0, 0, -1, -1}
        zeros_left = 3556
        coeff_num = 3560
        coeff_token = 24
        total_coeff = 6
        i = 1
        j = <value optimized out>
        trailing_ones = 0
        run_before = -3552
        coeff_token_table_index = {0, 0, 1, 1, 2, 2, 2, 2, 3, 3, 3, 3, 3, 3, 
  3, 3, 3}
        suffix_limit = {0, 5, 11, 23, 47, 95, 2147483647}
#1  0xb3e191b3 in decode_mb_cavlc (h=0xb5b8f020) at h264.c:5612
        index = 0
        chroma_idx = <value optimized out>
        scan8x8 = (const uint8_t *) 0xb5bc9774 ""
        dc_scan = (const uint8_t *) 0xb3f9b780 ""
        i8x8 = <value optimized out>
        i4x4 = <value optimized out>
        chroma_qp = 24
        dquant = <value optimized out>
        gb = (GetBitContext *) 0xb5b90ee8
        scan = (const uint8_t *) 0xb5bc9724 ""
        partition_count = <value optimized out>
        mb_type = <value optimized out>
        cbp = 47
        dct8x8_allowed = 0
#2  0xb3e30f9e in decode_slice (h=0xde8) at h264.c:7501
        ret = <value optimized out>
        s = (MpegEncContext * const) 0xb5b8f020
        part_mask = 127
#3  0xb3e31f06 in decode_nal_units (h=0xb5b8f020, buf=0x8286058 "", 
    buf_size=17308) at h264.c:8238
        consumed = 8098
        dst_length = <value optimized out>
        bit_length = <value optimized out>
        i = <value optimized out>
        ptr = <value optimized out>
        nalsize = <value optimized out>
        avctx = (AVCodecContext * const) 0x8212200
        buf_index = <value optimized out>
#4  0xb3e3310e in decode_frame (avctx=0x8212200, data=0x80ee2e0, 
    data_size=0xb4871f60, buf=0x8286058 "", buf_size=17308) at h264.c:8381
        h = (H264Context *) 0xb5b8f020
        buf_index = <value optimized out>
#5  0xb3d07e20 in avcodec_decode_video (avctx=0x8212200, picture=0x80ee2e0, 
    got_picture_ptr=0xb4871f60, buf=0x8286058 "", buf_size=17308)
    at utils.c:932
        ret = 1
#6  0xb3ca3160 in gst_ffmpegdec_frame (ffmpegdec=0x8211070, 
    data=0x8286058 "", size=17308, got_data=0xb487208c, 
    in_timestamp=1247247247247, in_duration=41708375, ret=0xb4872088)
    at gstffmpegdec.c:1208
        oclass = (GstFFMpegDecClass *) 0x81c2608
        outbuf = (GstBuffer *) 0x0
        have_data = <value optimized out>
        len = <value optimized out>
        __PRETTY_FUNCTION__ = "gst_ffmpegdec_frame"
#7  0xb3ca4fd4 in gst_ffmpegdec_chain (pad=0x8161e58, inbuf=0x8249f20)
    at gstffmpegdec.c:1936
        res = <value optimized out>
        ffpts = -5243131935457861464
        ffmpegdec = (GstFFMpegDec *) 0x8211070
        oclass = (GstFFMpegDecClass *) 0x81c2608
        data = (guint8 *) 0x8286058 ""
        bdata = (guint8 *) 0x8286058 ""
        size = 1
        bsize = 17308
        len = <value optimized out>
        have_data = 1
        ret = GST_FLOW_OK
        left = 0
        in_timestamp = 1247247247247
        in_duration = 41708375
        next_timestamp = 18446744073709551615
        next_duration = 18446744073709551615
        pending_timestamp = 1247247247247
        pending_duration = 41708375
        __PRETTY_FUNCTION__ = "gst_ffmpegdec_chain"
#8  0xb761ba49 in gst_pad_chain_unchecked (pad=0x8161e58, buffer=0x8249f20)
    at gstpad.c:3459
        caps = <value optimized out>
        caps_changed = 0
        chainfunc = (GstPadChainFunction) 0xb3ca4c30 <gst_ffmpegdec_chain>
        ret = <value optimized out>
        __PRETTY_FUNCTION__ = "gst_pad_chain_unchecked"
#9  0xb761c13b in gst_pad_push (pad=0x8161d98, buffer=0x8249f20)
    at gstpad.c:3625
        peer = (GstPad *) 0x8161e58
        ret = 136658944
        caps = (GstCaps *) 0x8068060
        __PRETTY_FUNCTION__ = "gst_pad_push"
#10 0xb6c0416e in gst_queue_loop (pad=0x8161d98) at gstqueue.c:810
        result = <value optimized out>
        queue = (GstQueue *) 0x8162240
        __PRETTY_FUNCTION__ = "gst_queue_loop"
#11 0xb7634d56 in gst_task_func (task=0x815f8a8, tclass=0x815d520)
    at gsttask.c:192
        t = 1
        lock = (GStaticRecMutex *) 0x81679c8
        tself = (GThread *) 0x8212fc8
        __PRETTY_FUNCTION__ = "gst_task_func"
#12 0xb73834d8 in g_thread_pool_thread_proxy (data=0x815d5b0)
    at gthreadpool.c:265
        task = (gpointer) 0x815f8a8
        pool = (GRealThreadPool *) 0x815d5b0
#13 0xb7381b7f in g_thread_create_proxy (data=0x8212fc8) at gthread.c:591
        __PRETTY_FUNCTION__ = "g_thread_create_proxy"
#14 0xb741431b in start_thread () from /lib/tls/i686/cmov/libpthread.so.0
#15 0xb71b050e in clone () from /lib/tls/i686/cmov/libc.so.6
...
That URI should have been
http://media1.podtech.net/download.php?file=media/2007/03/PID_010739/Podtech_Joel_Spolsky_interview.mp4"


Valgrind lists an invalid read:

==8078== Invalid read of size 4
==8078==    at 0x7D81193: decode_mb_cavlc (bitstream.h:407)
==8078==    by 0x7D97F9D: decode_slice (h264.c:7501)
==8078==    by 0x7D98F05: decode_nal_units (h264.c:8238)
==8078==    by 0x7D9A10D: decode_frame (h264.c:8381)
==8078==    by 0x7C6EE1F: avcodec_decode_video (utils.c:932)
==8078==    by 0x7C0A15F: gst_ffmpegdec_frame (gstffmpegdec.c:1208)
==8078==    by 0x7C0BFD3: gst_ffmpegdec_chain (gstffmpegdec.c:1936)
==8078==    by 0x4944A48: gst_pad_chain_unchecked (gstpad.c:3459)
==8078==    by 0x494513A: gst_pad_push (gstpad.c:3625)
==8078==    by 0x576916D: gst_queue_loop (gstqueue.c:810)
==8078==    by 0x495DD55: gst_task_func (gsttask.c:192)
==8078==    by 0x4BF14D7: g_thread_pool_thread_proxy (gthreadpool.c:265)
==8078==    by 0x4BEFB7E: g_thread_create_proxy (gthread.c:591)
==8078==    by 0x4B4FE59: start_thread (pthread_create.c:296)
==8078==    by 0x4E0B8ED: clone (in /usr/lib/debug/libc-2.5.so)
==8078==  Address 0x9637B81 is 209 bytes inside a block of size 211 alloc'd
==8078==    at 0x4021620: malloc (vg_replace_malloc.c:149)
==8078==    by 0x4BD92C5: g_malloc (gmem.c:131)
==8078==    by 0x492269B: gst_buffer_new_and_alloc (gstbuffer.c:289)
==8078==    by 0x5764AED: gst_file_src_create (gstfilesrc.c:784)
==8078==    by 0x48E9395: gst_base_src_get_range (gstbasesrc.c:1381)
==8078==    by 0x48E9E6F: gst_base_src_pad_get_range (gstbasesrc.c:1451)
==8078==    by 0x4941ECA: gst_pad_get_range (gstpad.c:3784)
==8078==    by 0x4942468: gst_pad_pull_range (gstpad.c:3916)
==8078==    by 0x493660E: gst_proxy_pad_do_getrange (gstghostpad.c:203)
==8078==    by 0x4941ECA: gst_pad_get_range (gstpad.c:3784)
==8078==    by 0x4942468: gst_pad_pull_range (gstpad.c:3916)
==8078==    by 0x576F3D0: gst_type_find_element_getrange
(gsttypefindelement.c:664)
==8078==    by 0x4941ECA: gst_pad_get_range (gstpad.c:3784)
==8078==    by 0x4942468: gst_pad_pull_range (gstpad.c:3916)
==8078==    by 0x5F8C64D: (within /usr/lib/gstreamer-0.10/libgstqtdemux.so)
==8078==    by 0x495DD55: gst_task_func (gsttask.c:192)
==8078==    by 0x4BF14D7: g_thread_pool_thread_proxy (gthreadpool.c:265)
==8078==    by 0x4BEFB7E: g_thread_create_proxy (gthread.c:591)
==8078==    by 0x4B4FE59: start_thread (pthread_create.c:296)
==8078==    by 0x4E0B8ED: clone (in /usr/lib/debug/libc-2.5.so)


-- 
See http://bugzilla.gnome.org/page.cgi?id=email.html for more info about why you received
this email, why you can't respond via email, how to stop receiving
emails (or reduce the number you receive), and how to contact someone
if you are having problems with the system.

You can add comments to this bug at http://bugzilla.gnome.org/show_bug.cgi?id=424809.




More information about the Gstreamer-bugs mailing list