[gstreamer-bugs] [Bug 549784] New: Memory Corruption Probing v4l2src with Video4Linux1 device

[GStreamer (bugzilla.gnome.org)]

If you have any questions why you received this email, please see the text at
the end of this email. Replies to this email are NOT read, please see the text
at the end of this email. You can add comments to this bug at:
  http://bugzilla.gnome.org/show_bug.cgi?id=549784

  GStreamer | gst-plugins-good | Ver: 0.10.x
           Summary: Memory Corruption Probing v4l2src with Video4Linux1
                    device
           Product: GStreamer
           Version: 0.10.x
          Platform: Other
        OS/Version: Linux
            Status: UNCONFIRMED
          Severity: normal
          Priority: Normal
         Component: gst-plugins-good
        AssignedTo: gstreamer-bugs at lists.sourceforge.net
        ReportedBy: cmaiku at gmail.com
         QAContact: gstreamer-bugs at lists.sourceforge.net
     GNOME version: 2.23/2.24
   GNOME milestone: Unspecified


I have a Logitech QuickCam Express webcam and if you create a v4l2src and then
probe for devices it seems to cause memory corruption. I don't know if this
could be a GStreamer bug or if it would be the driver. I'm on Ubuntu 8.10
(Intrepid). Doing the following sequence causes a crash.

Steps to cause the crash:
1. Have Logitech QuickCam Express connected.
2. Create a v4l2src.
3. Probe the v4l2src's devices.
4. Create 2 more v4l2srcs.
5. Free all of them.

The program used to cause the crash:
#include <gst/gst.h>
#include <gst/interfaces/propertyprobe.h>

int main(int argc, char *argv[])
{
        gst_init(&argc, &argv);
g_message("creating element");
        GstElement *element1 = gst_element_factory_make("v4l2src", NULL);
g_message("created element1 %p", element1);

g_message("probing devices");
        gst_property_probe_probe_property_name(GST_PROPERTY_PROBE(element1),
"device");

g_message("creating more elements");
        GstElement *element2 = gst_element_factory_make("v4l2src", NULL);
g_message("created element2 %p", element2);
        GstElement *element3 = gst_element_factory_make("v4l2src", NULL);
g_message("created element3 %p", element3);

g_message("freeing element3");
        gst_object_unref(element3);
g_message("freeing element2");
        gst_object_unref(element2);
g_message("freeing element1");
        gst_object_unref(element1);
g_message("return");
        return 0;
}


-- 
See http://bugzilla.gnome.org/page.cgi?id=email.html for more info about why you received
this email, why you can't respond via email, how to stop receiving
emails (or reduce the number you receive), and how to contact someone
if you are having problems with the system.

You can add comments to this bug at http://bugzilla.gnome.org/show_bug.cgi?id=549784.