[Bug 686008] New: [qtdemux] Crashes in push mode

[GStreamer (bugzilla.gnome.org)]

https://bugzilla.gnome.org/show_bug.cgi?id=686008
  GStreamer | gst-plugins-good | git

           Summary: [qtdemux] Crashes in push mode
    Classification: Platform
           Product: GStreamer
           Version: git
        OS/Version: Linux
            Status: UNCONFIRMED
          Severity: normal
          Priority: Normal
         Component: gst-plugins-good
        AssignedTo: gstreamer-bugs at lists.freedesktop.org
        ReportedBy: bugzilla at hadess.net
         QAContact: gstreamer-bugs at lists.freedesktop.org
     GNOME version: ---


Trying to stream a video from a local rygel instance crashes qtdemux.

ERROR:qtdemux.c:7648:gst_qtdemux_guess_bitrate: assertion failed: (size >=
qtdemux->header_size)

Program received signal SIGABRT, Aborted.
[Switching to Thread 0x7fffccdd2700 (LWP 22567)]
0x00007ffff2af1ba5 in raise () from /lib64/libc.so.6

(gdb) bt
#0  0x00007ffff2af1ba5 in raise () from /lib64/libc.so.6
#1  0x00007ffff2af3358 in abort () from /lib64/libc.so.6
#2  0x00007ffff30f9387 in g_assertion_message (domain=domain at entry=0x0,
file=file at entry=0x7fffc4a7f691 "qtdemux.c", line=line at entry=7648, 
    func=func at entry=0x7fffc4a85110 <__PRETTY_FUNCTION__.23899>
"gst_qtdemux_guess_bitrate", message=<optimized out>) at gtestutils.c:1877
#3  0x00007ffff30f98a4 in g_assertion_message_expr (domain=domain at entry=0x0,
file=file at entry=0x7fffc4a7f691 "qtdemux.c", line=line at entry=7648, 
    func=func at entry=0x7fffc4a85110 <__PRETTY_FUNCTION__.23899>
"gst_qtdemux_guess_bitrate", 
    expr=expr at entry=0x7fffc4a803b6 "size >= qtdemux->header_size") at
gtestutils.c:1888
#4  0x00007fffc4a57020 in gst_qtdemux_guess_bitrate (qtdemux=0x1a006f0) at
qtdemux.c:7648
#5  qtdemux_expose_streams (qtdemux=qtdemux at entry=0x1a006f0) at qtdemux.c:7787
#6  0x00007fffc4a605a6 in gst_qtdemux_chain (sinkpad=<optimized out>,
parent=<optimized out>, inbuf=<optimized out>) at qtdemux.c:4236
#7  0x00007ffff6680388 in gst_pad_chain_data_unchecked (data=0x1d1f090,
type=<optimized out>, pad=0x1a01020) at gstpad.c:3642
#8  gst_pad_push_data (pad=0x19de660, type=<optimized out>, data=<optimized
out>) at gstpad.c:3859
#9  0x00007ffff6680388 in gst_pad_chain_data_unchecked (data=0x1d1f090,
type=(GST_PAD_PROBE_TYPE_BUFFER | GST_PAD_PROBE_TYPE_PUSH), pad=0x19de190)
    at gstpad.c:3642
#10 gst_pad_push_data (pad=pad at entry=0x19deee0,
type=type at entry=(GST_PAD_PROBE_TYPE_BUFFER | GST_PAD_PROBE_TYPE_PUSH),
data=<optimized out>, 
    data at entry=0x1d1f090) at gstpad.c:3859
#11 0x00007ffff6686b96 in gst_pad_push (pad=pad at entry=0x19deee0,
buffer=buffer at entry=0x1d1f090) at gstpad.c:3962
#12 0x00007ffff667206b in gst_proxy_pad_chain_default (pad=<optimized out>,
parent=<optimized out>, buffer=0x1d1f090) at gstghostpad.c:128
#13 0x00007ffff6680388 in gst_pad_chain_data_unchecked (data=0x1d1f090,
type=(GST_PAD_PROBE_TYPE_BUFFER | GST_PAD_PROBE_TYPE_PUSH), pad=0x19deab0)
    at gstpad.c:3642
#14 gst_pad_push_data (pad=0x18638d0,
type=type at entry=(GST_PAD_PROBE_TYPE_BUFFER | GST_PAD_PROBE_TYPE_PUSH),
data=<optimized out>, 
    data at entry=0x1d1f090) at gstpad.c:3859
#15 0x00007ffff6686b96 in gst_pad_push (pad=<optimized out>,
buffer=buffer at entry=0x1d1f090) at gstpad.c:3962
#16 0x00007fffd9bad070 in gst_queue2_push_one (queue=0x1862b50) at
gstqueue2.c:2448
#17 gst_queue2_loop (pad=<optimized out>) at gstqueue2.c:2541
#18 0x00007ffff66ae1c1 in gst_task_func (task=0x1864d10) at gsttask.c:316
#19 0x00007ffff30fb672 in g_thread_pool_thread_proxy (data=<optimized out>) at
gthreadpool.c:309
#20 0x00007ffff30fae55 in g_thread_proxy (data=0x17f9920) at gthread.c:797
#21 0x00007ffff2e7bd15 in start_thread () from /lib64/libpthread.so.0
#22 0x00007ffff2bae2cd in clone () from /lib64/libc.so.6
(gdb) frame 4
#4  0x00007fffc4a57020 in gst_qtdemux_guess_bitrate (qtdemux=0x1a006f0) at
qtdemux.c:7648
7648      g_assert (size >= qtdemux->header_size);
(gdb) p size
$1 = -1
(gdb) p qtdemux->header_size
$2 = 1845995
(gdb) list
7643      }
7644    
7645      /* Subtract the header size */
7646      GST_DEBUG_OBJECT (qtdemux, "Total size %" G_GINT64_FORMAT ", header
size %u",
7647          size, qtdemux->header_size);
7648      g_assert (size >= qtdemux->header_size);
7649      size = size - qtdemux->header_size;
7650    
7651      if (!gst_qtdemux_get_duration (qtdemux, &duration) ||
7652          duration == GST_CLOCK_TIME_NONE) {
(gdb)

-- 
Configure bugmail: https://bugzilla.gnome.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the QA contact for the bug.
You are the assignee for the bug.