[Bug 740080] New: faad crashes with a SIGSEGV if fed with unvalid data

[GStreamer (bugzilla.gnome.org)]

https://bugzilla.gnome.org/show_bug.cgi?id=740080
  GStreamer | gst-plugins-bad | unspecified

           Summary: faad crashes with a SIGSEGV if fed with unvalid data
    Classification: Platform
           Product: GStreamer
           Version: unspecified
        OS/Version: Linux
            Status: UNCONFIRMED
          Severity: normal
          Priority: Normal
         Component: gst-plugins-bad
        AssignedTo: gstreamer-bugs at lists.freedesktop.org
        ReportedBy: peter at dr-baum.net
         QAContact: gstreamer-bugs at lists.freedesktop.org
     GNOME version: ---


If the data fed to faad is not valid it crashes with the following output:

0:00:00.037768168  5777       0xd47450 DEBUG                   faad
gstfaad.c:376:gst_faad_set_format:<faad0> faacDecInit2() failed

(gst-launch-1.0:5777): GStreamer-CRITICAL **: 
Trying to dispose element faad0, but it is in PAUSED instead of the NULL state.
You need to explicitly set elements to the NULL state before
dropping the final reference, to allow them to clean up.
This problem may also be caused by a refcounting bug in the
application or some element.


(gst-launch-1.0:5777): GLib-GObject-CRITICAL **: g_object_ref: assertion
'G_IS_OBJECT (object)' failed

(gst-launch-1.0:5777): GLib-GObject-CRITICAL **: g_object_ref: assertion
'G_IS_OBJECT (object)' failed

(gst-launch-1.0:5777): GLib-GObject-WARNING **: invalid unclassed pointer in
cast to 'GstAudioDecoder'

(gst-launch-1.0:5777): GLib-GObject-CRITICAL **: g_object_ref: assertion
'G_IS_OBJECT (object)' failed

(gst-launch-1.0:5777): GLib-GObject-WARNING **: invalid unclassed pointer in
cast to 'GstAudioDecoder'

(gst-launch-1.0:5777): GStreamer-CRITICAL **: gst_object_unref: assertion
'((GObject *) object)->ref_count > 0' failed

(gst-launch-1.0:5777): GStreamer-CRITICAL **: gst_object_unref: assertion
'((GObject *) object)->ref_count > 0' failed

(gst-launch-1.0:5777): GLib-GObject-WARNING **: invalid unclassed pointer in
cast to 'GstAudioDecoder'
Caught SIGSEGV
#0  0x00007f026788371d in poll () from /lib64/libc.so.6
#1  0x00007f0267fc15b4 in g_main_context_iterate.isra ()
#2  0x00007f0267fc1a3a in g_main_loop_run () from /lib64/libglib-2.0.so.0
#3  0x00007f0268a3efc4 in gst_bus_poll (bus=bus at entry=0xc96a20, 
#4  0x00000000004047d8 in event_loop (pipeline=0xd480d0, 
#5  0x00000000004037b0 in main (argc=12, argv=0x7fff0d37cef8)
Spinning.  Please run 'gdb gst-launch-1.0 5777' to continue debugging, Ctrl-C
to quit, or Ctrl-\ to dump core.

-- 
Configure bugmail: https://bugzilla.gnome.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the QA contact for the bug.
You are the assignee for the bug.