[gstreamer-bugs] [Bug 527622] New: Reproducable crash in FLV demuxer

[GStreamer (bugzilla.gnome.org)]

If you have any questions why you received this email, please see the text at
the end of this email. Replies to this email are NOT read, please see the text
at the end of this email. You can add comments to this bug at:
  http://bugzilla.gnome.org/show_bug.cgi?id=527622

  GStreamer | gst-plugins-bad | Ver: 0.10.x
           Summary: Reproducable crash in FLV demuxer
           Product: GStreamer
           Version: 0.10.x
          Platform: Other
        OS/Version: Linux
            Status: UNCONFIRMED
          Severity: major
          Priority: Normal
         Component: gst-plugins-bad
        AssignedTo: gstreamer-bugs at lists.sourceforge.net
        ReportedBy: pekka.lampila at iki.fi
         QAContact: gstreamer-bugs at lists.sourceforge.net
     GNOME version: 2.21/2.22
   GNOME milestone: Unspecified


In Ubuntu Hardy I always get crash when trying to play
http://flvdn.gomtv.net/viewer/384.flv in Totem. Version of
gstreamer0.10-plugins-bad package is 0.10.6-5.

bt full:

#0  0x00007f2612c0d080 in strlen () from /lib/libc.so.6
No symbol table info available.
#1  0x00007f2606ecca06 in gst_flv_parse_metadata_item (demux=0x11b5020, 
    data=0xf62caa "", data_size=8531, end_marker=0x428dcea4)
    at gstflvparse.c:181
        value = (gchar *) 0x0
        tag_name = (gchar *) 0xcc9980 "metadatacreator"
        tag_type = <value optimized out>
        offset = 18
        __FUNCTION__ = "gst_flv_parse_metadata_item"
#2  0x00007f2606ecd379 in gst_flv_parse_tag_script (demux=0x11b5020, 
    data=0xf62c00 "", data_size=8719) at gstflvparse.c:355
        read = 0
        nb_elems = 19
        end_marker = 0
        i = <value optimized out>
        function_name = <value optimized out>
        offset = 170
        __FUNCTION__ = "gst_flv_parse_tag_script"
#3  0x00007f2606ec8601 in gst_flv_demux_pull_tag (pad=0xfbc730, 
    demux=0x11b5020) at gstflvdemux.c:348
        buffer = (GstBuffer *) 0x114d1a0
        ret = GST_FLOW_OK
        __FUNCTION__ = "gst_flv_demux_pull_tag"
#4  0x00007f2606ec989b in gst_flv_demux_loop (pad=0xfbc730)
    at gstflvdemux.c:430
        demux = (GstFLVDemux *) 0x11b5020
        ret = <value optimized out>
        __FUNCTION__ = "gst_flv_demux_loop"
#5  0x00007f2617be2b29 in gst_task_func (task=0x1149a00, 
    tclass=<value optimized out>) at gsttask.c:192
        lock = (GStaticRecMutex *) 0xcaed50
        tself = <value optimized out>
        __PRETTY_FUNCTION__ = "gst_task_func"
#6  0x00007f2614387bf7 in g_thread_pool_thread_proxy (
    data=<value optimized out>)
    at /build/buildd/glib2.0-2.16.3/glib/gthreadpool.c:265
        task = (gpointer) 0x1149a00
        pool = (GRealThreadPool *) 0x752820
#7  0x00007f2614386054 in g_thread_create_proxy (data=0xcc4300)
    at /build/buildd/glib2.0-2.16.3/glib/gthread.c:635
        __PRETTY_FUNCTION__ = "g_thread_create_proxy"
#8  0x00007f26166353f7 in start_thread () from /lib/libpthread.so.0
No symbol table info available.
#9  0x00007f2612c69b2d in clone () from /lib/libc.so.6
No symbol table info available.
#10 0x0000000000000000 in ?? ()
No symbol table info available.


-- 
See http://bugzilla.gnome.org/page.cgi?id=email.html for more info about why you received
this email, why you can't respond via email, how to stop receiving
emails (or reduce the number you receive), and how to contact someone
if you are having problems with the system.

You can add comments to this bug at http://bugzilla.gnome.org/show_bug.cgi?id=527622.