[gstreamer-bugs] [Bug 572863] New: ffdec_nellymoser seg faults

Mon Feb 23 07:41:43 PST 2009

If you have any questions why you received this email, please see the text at
the end of this email. Replies to this email are NOT read, please see the text
at the end of this email. You can add comments to this bug at:
  http://bugzilla.gnome.org/show_bug.cgi?id=572863

  GStreamer | gst-ffmpeg | Ver: 0.10.6
           Summary: ffdec_nellymoser seg faults
           Product: GStreamer
           Version: 0.10.6
          Platform: Other
        OS/Version: All
            Status: UNCONFIRMED
          Severity: critical
          Priority: Normal
         Component: gst-ffmpeg
        AssignedTo: gstreamer-bugs at lists.sourceforge.net
        ReportedBy: mad_aluche at hotmail.com
         QAContact: gstreamer-bugs at lists.sourceforge.net
     GNOME version: 2.23/2.24
   GNOME milestone: Unspecified

Steps to reproduce:
1. decode audio from a flash webcam

Stack trace:
#0  0xb805d430 in __kernel_vsyscall ()
(gdb) backtrace
#0  0xb805d430 in __kernel_vsyscall ()
#1  0xb7ed88a0 in raise () from /lib/tls/i686/cmov/libc.so.6
#2  0xb7eda268 in abort () from /lib/tls/i686/cmov/libc.so.6
#3  0x065028db in os::abort ()
   from /usr/lib/jvm/java-6-sun-1.6.0.10/jre/lib/i386/server/libjvm.so
#4  0x06606571 in VMError::report_and_die ()
   from /usr/lib/jvm/java-6-sun-1.6.0.10/jre/lib/i386/server/libjvm.so
#5  0x06507b79 in JVM_handle_linux_signal ()
   from /usr/lib/jvm/java-6-sun-1.6.0.10/jre/lib/i386/server/libjvm.so
#6  0x065046a8 in signalHandler ()
   from /usr/lib/jvm/java-6-sun-1.6.0.10/jre/lib/i386/server/libjvm.so
#7  <signal handler called>
#8  0x8f184a14 in float_to_int16_sse2 (dst=0xa4d5fc8, src=0xa318bb0, len=256)
    at libavcodec/i386/dsputil_mmx.c:2289
#9  0x8f354a9a in decode_tag (avctx=0xa513cc0, data=0xa4d5fc8, 
    data_size=0x8bdafef4, 
    buf=0xa4b47e8
"\f\232���(\214mN��\203R2E'\021i�\224�\206�7\032R\224\n�\0069v5\030�
�}\002I��\016M�#�\225�X9\"�\002�R��H��\237\bv\bu3�\b�L8J�b�k:\026\236${��fWb\030�m�\r�\\��[}̼E\224:\025\205�:V<\223\226d�j�\020sr[i�P\223�,�\2362\004n�=Z!�nVx\036\234n2�\022\232��\2218�\233\022nL�q�e\234��\217�K���BK\037�p�D��\001�v\215[rz��\033��T�e\211\b���V!N1"...,
buf_size=256)
    at libavcodec/nellymoserdec.c:182
#10 0x8f12a452 in avcodec_decode_audio2 (avctx=0xa513cc0, samples=0xa4d5fc8, 
---Type <return> to continue, or q <return> to quit---
    frame_size_ptr=0x8bdafef4, 
    buf=0xa4b47e8
"\f\232���(\214mN��\203R2E'\021i�\224�\206�7\032R\224\n�\0069v5\030�
�}\002I��\016M�#�\225�X9\"�\002�R��H��\237\bv\bu3�\b�L8J�b�k:\026\236${��fWb\030�m�\r�\\��[}̼E\224:\025\205�:V<\223\226d�j�\020sr[i�P\223�,�\2362\004n�=Z!�nVx\036\234n2�\022\232��\2218�\233\022nL�q�e\234��\217�K���BK\037�p�D��\001�v\215[rz��\033��T�e\211\b���V!N1"...,
buf_size=172843464)
    at libavcodec/utils.c:953
#11 0x8f09889c in gst_ffmpegdec_audio_frame (ffmpegdec=0x8f90a688, 
    data=0xa4b47e8
"\f\232���(\214mN��\203R2E'\021i�\224�\206�7\032R\224\n�\0069v5\030�
�}\002I��\016M�#�\225�X9\"�\002�R��H��\237\bv\bu3�\b�L8J�b�k:\026\236${��fWb\030�m�\r�\\��[}̼E\224:\025\205�:V<\223\226d�j�\020sr[i�P\223�,�\2362\004n�=Z!�nVx\036\234n2�\022\232��\2218�\233\022nL�q�e\234��\217�K���BK\037�p�D��\001�v\215[rz��\033��T�e\211\b���V!N1"...,
size=256, in_timestamp=0, 
    in_duration=18446744073709551615, outbuf=0x8bdb00a4, ret=0x8bdb0198)
    at gstffmpegdec.c:1790
#12 0x8f099edd in gst_ffmpegdec_frame (ffmpegdec=0x8f90a688, 
    data=0xa4b47e8
"\f\232���(\214mN��\203R2E'\021i�\224�\206�7\032R\224\n�\0069v5\030�
�}\002I��\016M�#�\225�X9\"�\002�R��H��\237\bv\bu3�\b�L8J�b�k:\026\236${��fWb\030�m�\r�\\��[}̼E\224:\025\205�:V<\223\226d�j�\020sr[i�P\223�,�\2362\004n�=Z!�nVx\036\234n2�\022\232��\2218�\233\022nL�q�e\234��\217�K���BK\037�p�D��\001�v\215[rz��\033��T�e\211\b���V!N1"...,
size=256, got_data=0x8bdb019c, 
    in_timestamp=0, in_duration=18446744073709551615, ret=0x8bdb0198)
    at gstffmpegdec.c:1907
---Type <return> to continue, or q <return> to quit---
#13 0x8f09d4a9 in gst_ffmpegdec_chain (pad=0x8f801a88, inbuf=0xa516510)
    at gstffmpegdec.c:2306
#14 0x90765765 in gst_pad_chain_unchecked (pad=0x8f801a88, buffer=0xa516510)
    at gstpad.c:3890
#15 0x90766b5a in gst_pad_push (pad=0x8f8019c8, buffer=0xa516510)
    at gstpad.c:4057
#16 0x907e31a1 in gst_base_src_loop (pad=0x8f8019c8) at gstbasesrc.c:2275
#17 0x907878a3 in gst_task_func (task=0x8f91ce88, tclass=0x908abb20)
    at gsttask.c:192
#18 0x9054b6c6 in ?? () from /usr/lib/libglib-2.0.so.0
#19 0x9054a02f in ?? () from /usr/lib/libglib-2.0.so.0
#20 0xb801f50f in start_thread () from /lib/tls/i686/cmov/libpthread.so.0
#21 0xb7f8ea0e in clone () from /lib/tls/i686/cmov/libc.so.6

Other information:
The segfault appears in 4 or 5 seconds after the receiving begins

-- 
See http://bugzilla.gnome.org/page.cgi?id=email.html for more info about why you received
this email, why you can't respond via email, how to stop receiving
emails (or reduce the number you receive), and how to contact someone
if you are having problems with the system.

You can add comments to this bug at http://bugzilla.gnome.org/show_bug.cgi?id=572863.