[Bug 678017] gstfunnel: access of freed pad object

[GStreamer (bugzilla.gnome.org)]

https://bugzilla.gnome.org/show_bug.cgi?id=678017
  GStreamer | gstreamer (core) | git

Tim-Philipp Müller <t.i.m> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |t.i.m at zen.co.uk

--- Comment #2 from Tim-Philipp Müller <t.i.m at zen.co.uk> 2012-06-14 12:59:28 UTC ---
The transfer none just means that if the caller owned a ref to the pad before
calling _remove_pad(), it will still own that ref afterwards. It doesn't have
anything to do with whether the pad may be unreffed by some other piece of code
that previously held a ref (such as the element). It can't be destroyed though,
because the caller needs to hold a valid ref while calling _remove_pad().

I *think* the element implementation of request_new_pad is wrong here, I think
it should return a ref, but element_add_pad() took ownership of the pad after
creating it.

Perhaps compare with other elements such as tee.

-- 
Configure bugmail: https://bugzilla.gnome.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the QA contact for the bug.
You are the assignee for the bug.