[gstreamer-bugs] [Bug 376594] New: id3demux crashes when reading compressed ID3 frames

[GStreamer (bugzilla.gnome.org)]

Do not reply to this via email (we are currently unable to handle email
responses and they get discarded).  You can add comments to this bug at
http://bugzilla.gnome.org/show_bug.cgi?id=376594

  GStreamer | gst-plugins-good | Ver: 0.10.x

           Summary: id3demux crashes when reading compressed ID3 frames
           Product: GStreamer
           Version: 0.10.x
          Platform: Other
        OS/Version: Linux
            Status: UNCONFIRMED
          Severity: major
          Priority: Normal
         Component: gst-plugins-good
        AssignedTo: gstreamer-bugs at lists.sourceforge.net
        ReportedBy: lalinsky at gmail.com
         QAContact: gstreamer-bugs at lists.sourceforge.net
     GNOME version: Unspecified
   GNOME milestone: Unspecified


Whenever you try to open a MP3 file with ID3 tags that contain a compresses ID3
frame (usually APIC), it crashes.

/lib/tls/i686/cmov/libc.so.6(__libc_free+0x18a)[0xb6ffab4a]
/usr/lib/libglib-2.0.so.0(g_free+0x31)[0xb71cdb51]
/usr/lib/gstreamer-0.10/libgstid3demux.so(id3demux_id3v2_parse_frame+0x67b)[0xb36f7e4b]
/usr/lib/gstreamer-0.10/libgstid3demux.so(id3demux_read_id3v2_tag+0x710)[0xb36f6770]
/usr/lib/gstreamer-0.10/libgstid3demux.so[0xb36f395b]
/usr/lib/gstreamer-0.10/libgstid3demux.so[0xb36f5422]
/usr/lib/libgstreamer-0.10.so.0(gst_pad_set_active+0xa4)[0xb7528db4]
/usr/lib/libgstreamer-0.10.so.0[0xb7511adb]
/usr/lib/libgstreamer-0.10.so.0(gst_iterator_fold+0x67)[0xb751d757]
/usr/lib/libgstreamer-0.10.so.0[0xb7511552]
/usr/lib/libgstreamer-0.10.so.0[0xb7511618]
/usr/lib/libgstreamer-0.10.so.0[0xb7511986]
/usr/lib/gstreamer-0.10/libgstid3demux.so[0xb36f5987]
/usr/lib/libgstreamer-0.10.so.0[0xb750e16a]
/usr/lib/libgstreamer-0.10.so.0[0xb7511196]
/usr/lib/libgstreamer-0.10.so.0(gst_element_set_state+0x53)[0xb750d2f3]
/usr/lib/gstreamer-0.10/libgstdecodebin.so[0xb313175a]
/usr/lib/gstreamer-0.10/libgstdecodebin.so[0xb3131d7e]
/usr/lib/libgstreamer-0.10.so.0(gst_marshal_VOID__UINT_BOXED+0x5d)[0xb755403d]
/usr/lib/libgobject-2.0.so.0(g_closure_invoke+0x12b)[0xb72fa79b]
/usr/lib/libgobject-2.0.so.0[0xb730ab93]
/usr/lib/libgobject-2.0.so.0(g_signal_emit_valist+0x8c7)[0xb730c0b7]
/usr/lib/libgobject-2.0.so.0(g_signal_emit+0x29)[0xb730c279]
/usr/lib/gstreamer-0.10/libgstcoreelements.so[0xb475298b]
/usr/lib/libgstreamer-0.10.so.0(gst_pad_set_active+0xa4)[0xb7528db4]
/usr/lib/libgstreamer-0.10.so.0[0xb7511adb]
/usr/lib/libgstreamer-0.10.so.0(gst_iterator_fold+0x67)[0xb751d757]
/usr/lib/libgstreamer-0.10.so.0[0xb7511552]
/usr/lib/libgstreamer-0.10.so.0[0xb7511618]
/usr/lib/libgstreamer-0.10.so.0[0xb7511986]
/usr/lib/gstreamer-0.10/libgstcoreelements.so[0xb4752db8]
/usr/lib/libgstreamer-0.10.so.0[0xb750e16a]
/usr/lib/libgstreamer-0.10.so.0[0xb7511196]
/usr/lib/libgstreamer-0.10.so.0(gst_element_set_state+0x53)[0xb750d2f3]
/usr/lib/libgstreamer-0.10.so.0[0xb7502a72]
/usr/lib/gstreamer-0.10/libgstdecodebin.so[0xb3133998]
/usr/lib/libgstreamer-0.10.so.0[0xb750e16a]
/usr/lib/libgstreamer-0.10.so.0[0xb750e252]
/usr/lib/libgstreamer-0.10.so.0[0xb7511196]
/usr/lib/libgstreamer-0.10.so.0(gst_element_set_state+0x53)[0xb750d2f3]
/usr/lib/libgstreamer-0.10.so.0[0xb7502a72]
/usr/lib/libgstreamer-0.10.so.0[0xb752b36a]
/usr/lib/gstreamer-0.10/libgstplaybin.so[0xb476746b]
/usr/lib/gstreamer-0.10/libgstplaybin.so[0xb4761790]
/usr/lib/libgstreamer-0.10.so.0[0xb750e16a]
/usr/lib/libgstreamer-0.10.so.0[0xb750e252]
/usr/lib/libgstreamer-0.10.so.0[0xb7511196]
/usr/lib/libgstreamer-0.10.so.0(gst_element_set_state+0x53)[0xb750d2f3]
totem(bacon_video_widget_open_with_subtitle+0x2cb)[0x808350b]
totem(totem_action_set_mrl_with_warning+0xa6)[0x8063106]
totem(totem_action_set_mrl+0x20)[0x8063740]
totem(totem_action_set_mrl_and_play+0x19)[0x8063bd9]
totem(totem_action_play_pause+0xb0)[0x8064310]
totem(main+0x2050)[0x8067380]
/lib/tls/i686/cmov/libc.so.6(__libc_start_main+0xdc)[0xb6fa98cc]
totem[0x805a7a1]


-- 
Configure bugmail: http://bugzilla.gnome.org/userprefs.cgi?tab=email