[Bug 736965] New: segfault in shmsrc ! matroskademux ! videoconvert

[GStreamer (bugzilla.gnome.org)]

https://bugzilla.gnome.org/show_bug.cgi?id=736965
  GStreamer | gst-plugins-bad | 1.4.1

           Summary: segfault in shmsrc ! matroskademux ! videoconvert
    Classification: Platform
           Product: GStreamer
           Version: 1.4.1
        OS/Version: Linux
            Status: UNCONFIRMED
          Severity: normal
          Priority: Normal
         Component: gst-plugins-bad
        AssignedTo: gstreamer-bugs at lists.freedesktop.org
        ReportedBy: jan.steffens at gmail.com
         QAContact: gstreamer-bugs at lists.freedesktop.org
     GNOME version: ---


Given the following pair of pipelines:

gst-launch-1.0 videotestsrc !
video/x-raw,framerate=25/1,width=1280,height=720,format=AYUV ! matroskamux !
shmsink socket-path=/tmp/foo

gst-launch-1.0 shmsrc socket-path=/tmp/foo ! matroskademux ! videoconvert !
video/x-raw,format=YUY2 ! fakesink

The latter causes a segfault in the orc-generated code in videoconvert:

Thread 3 (Thread 0x7f13201fb700 (LWP 11294)):
#0  0x00007f13232fda7d in nanosleep () from /usr/lib/libpthread.so.0
#1  0x00007f132357bda8 in g_usleep (microseconds=microseconds at entry=1000000) at
gtimer.c:259
#2  0x00000000004057ea in fault_spin () at gst-launch.c:109
#3  fault_handler_sighandler (signum=11) at gst-launch.c:90
#4  <signal handler called>
#5  0x00007f1323f870d0 in ?? ()
#6  0x00007f13204573e4 in video_convert_orc_convert_AYUV_YUY2
(d1=0x7f1323d9b0a0 "", d1_stride=2560, 
    s1=0x7f131ee75019
"\377뀀\377뀀\377뀀\377뀀\377뀀\377뀀\377뀀\377뀀\377뀀\377뀀\377뀀\377뀀\377뀀\377뀀\377뀀\377뀀\377뀀\377뀀\377뀀\377뀀\377뀀\377뀀\377뀀\377뀀\377뀀\377뀀\377뀀\377뀀\377뀀\377뀀\377뀀\377뀀\377뀀\377뀀\377뀀\377뀀
\377뀀\377뀀\377뀀\377뀀\377뀀\377뀀\377뀀\377뀀\377뀀\377뀀\377뀀\377뀀\377뀀\377뀀"...,
s1_stride=5120, n=640, m=720) at tmp-orc.c:4190
#7  0x00007f132044d8fe in gst_video_convert_transform_frame (filter=0x2218440,
in_frame=0x7f13201fa2c0, out_frame=0x7f13201fa560) at gstvideoconvert.c:574
#8  0x00007f132118920f in gst_video_filter_transform (trans=0x2218440,
inbuf=0x7f1323d9b0a0, outbuf=0x7f1318006000) at gstvideofilter.c:270
#9  0x00007f1321c9f4b7 in gst_base_transform_handle_buffer (trans=0x2218440,
inbuf=0x7f1318006220, outbuf=0x7f13201fa890) at gstbasetransform.c:2117
#10 0x00007f1321c9fd1f in gst_base_transform_chain (pad=0x7f13201f9f30,
parent=0x2218440, buffer=0x7f1318006220) at gstbasetransform.c:2224
#11 0x00007f1323acc13e in gst_pad_chain_data_unchecked (data=<optimized out>,
type=<optimized out>, pad=<optimized out>) at gstpad.c:3836
#12 gst_pad_push_data (pad=0x2207240, type=566885552, data=0x7f1318006220) at
gstpad.c:4069
#13 0x00007f132182bb78 in gst_matroska_demux_parse_blockgroup_or_simpleblock
(demux=0x220e090, ebml=0x7f13201fab00, cluster_time=139720099581977,
is_simpleblock=1, cluster_offset=<optimized out>) at matroska-demux.c:3593
#14 0x00007f1321832c50 in gst_matroska_demux_parse_id (demux=0x220e090, id=163,
length=3686409, needed=5) at matroska-demux.c:4237
#15 0x00007f1321834090 in gst_matroska_demux_chain (pad=0x7f13201f9f30,
parent=0x220e090, buffer=0x384009) at matroska-demux.c:4565
#16 0x00007f1323acc13e in gst_pad_chain_data_unchecked (data=<optimized out>,
type=<optimized out>, pad=<optimized out>) at gstpad.c:3836
#17 gst_pad_push_data (pad=0x22060c0, type=562249456, data=0x7f1318006440) at
gstpad.c:4069
#18 0x00007f1321c97995 in gst_base_src_loop (pad=0x22060c0) at
gstbasesrc.c:2835
#19 0x00007f1323afa1f7 in gst_task_func (task=0x2229050) at gsttask.c:317
#20 0x00007f132357b0f8 in g_thread_pool_thread_proxy (data=<optimized out>) at
gthreadpool.c:307
#21 0x00007f132357a765 in g_thread_proxy (data=0x221e1e0) at gthread.c:764
#22 0x00007f13232f5314 in start_thread () from /usr/lib/libpthread.so.0
#23 0x00007f13230333ed in clone () from /usr/lib/libc.so.6

Removing either the shm transport, the muxing, or the orc-accelerated
converting (ORC_CODE=backup) makes the segfault disappear.

Could this be a problem with orc working on unaligned buffers in the shm
segment due to the tiny metadata buffers matroskamux injects?

-- 
Configure bugmail: https://bugzilla.gnome.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the QA contact for the bug.
You are the assignee for the bug.