[gstreamer-bugs] [Bug 506125] New: mpegstream crashes immediately in Windows Vista

[GStreamer (bugzilla.gnome.org)]

If you have any questions why you received this email, please see the text at
the end of this email. Replies to this email are NOT read, please see the text
at the end of this email. You can add comments to this bug at:
  http://bugzilla.gnome.org/show_bug.cgi?id=506125

  GStreamer | gst-plugins-ugly | Ver: HEAD CVS
           Summary: mpegstream crashes immediately in Windows Vista
           Product: GStreamer
           Version: HEAD CVS
          Platform: Other
        OS/Version: Windows
            Status: UNCONFIRMED
          Severity: critical
          Priority: Normal
         Component: gst-plugins-ugly
        AssignedTo: gstreamer-bugs at lists.sourceforge.net
        ReportedBy: kwangyul.seo at gmail.com
         QAContact: gstreamer-bugs at lists.sourceforge.net
     GNOME version: Unspecified
   GNOME milestone: Unspecified


Please describe the problem:
mpegstream crashes immediately in Windows Vista.

Steps to reproduce:
1. Compile gstreamer CVS in Windows Vista using mingw gcc-3.4.5.

2. Play a mpeg2 video file.

(Every mpeg2 video file.)


Actual results:
gst-launch-0.10.exe playbin uri="file:///d:/test.mpg"


#0  0x6b6dae3e in gst_element_remove_pad (element=0x1de0410, pad=0x1)
    at gstelement.c:745
#1  0x03e062de in gst_mpeg_demux_get_audio_stream (mpeg_demux=0x1de0410, 
    stream_nr=0 '\0', type=131074, info=0x0) at gstmpegdemux.c:407
#2  0x03e0a4f8 in gst_dvd_demux_get_audio_stream (mpeg_demux=0x1de0410, 
    stream_nr=0 '\0', type=131074, info=0x0) at gstdvddemux.c:506
#3  0x03e0827e in _fu65____gst_debug_min () at gstmpegdemux.c:898
#4  0x03e03d65 in _fu18____gst_debug_min () at gstmpegparse.c:753
#5  0x6b6f7000 in gst_pad_chain_unchecked (pad=0x671b480, buffer=0xb5fe528)
    at gstpad.c:3513
#6  0x6b6f76e1 in gst_pad_push (pad=0x671b300, buffer=0xb5fe528)
    at gstpad.c:3681
#7  0x6e096333 in gst_type_find_element_chain (pad=0x671b240, buffer=0xb5fe528)
    at gsttypefindelement.c:584
#8  0x6b6f7000 in gst_pad_chain_unchecked (pad=0x671b240, buffer=0xb5fe528)
    at gstpad.c:3513
#9  0x6b6f76e1 in gst_pad_push (pad=0x66be5b0, buffer=0xb5fe528)
    at gstpad.c:3681
#10 0x6b6e4848 in gst_proxy_pad_do_chain (pad=0x66bd468, buffer=0xb5fe528)
    at gstghostpad.c:193
#11 0x6b6f7000 in gst_pad_chain_unchecked (pad=0x66bd468, buffer=0xb5fe528)
    at gstpad.c:3513
#12 0x6b6f76e1 in gst_pad_push (pad=0x671b180, buffer=0xb5fe528)
    at gstpad.c:3681
#13 0x6cad297c in _fu190____gst_debug_min () at gstbasesrc.c:2063
#14 0x6b70eea2 in gst_task_func (task=0x1d8ad60, tclass=0x8978b10)
    at gsttask.c:192
#15 0x685fa11a in g_thread_pool_thread_proxy ()
   from C:\win32\bin\libglib-2.0-0.dll
#16 0x685f936a in g_thread_create_proxy () from C:\win32\bin\libglib-2.0-0.dll
#17 0x65c41ee1 in g_thread_proxy at 4 () from C:\win32\bin\libgthread-2.0-0.dll
#18 0x75c362b6 in msvcrt!_atof_l () from C:\Windows\system32\msvcrt.dll
#19 0x08980b78 in ?? ()
#20 0xdb1a94d1 in ?? ()
#21 0x00000000 in ?? () from 
#22 0x00000000 in ?? () from 
#23 0x01dd6730 in ?? ()
#24 0x0872ff6c in ?? ()
#25 0x0872ff6c in ?? ()
#26 0x0872ffdc in ?? ()
#27 0x0872ffdc in ?? ()
#28 0x75c313dd in wfindfirst64 () from C:\Windows\system32\msvcrt.dll
#29 0xa6ab0989 in ?? ()
#30 0x00000000 in ?? () from 
#31 0x0872ffa0 in ?? ()
#32 0x75c363de in msvcrt!_beginthreadex () from C:\Windows\system32\msvcrt.dll
#33 0x0872ffac in ?? ()
#34 0x760c3833 in KERNEL32!AcquireSRWLockExclusive ()
   from C:\Windows\system32\kernel32.dll
#35 0x01dd6730 in ?? ()
#36 0x0872ffec in ?? ()
#37 0x7710a9bd in ntdll!LdrProcessRelocationBlock ()
   from C:\Windows\system32\ntdll.dll
#38 0x01dd6730 in ?? ()
#39 0x08723083 in ?? ()
#40 0x00000000 in ?? () from 
#41 0x00000000 in ?? () from 
#42 0x01dd6730 in ?? ()
#43 0x00000000 in ?? () from 
#44 0x00000000 in ?? () from 
#45 0x00000000 in ?? () from 
#46 0x0872ffb8 in ?? ()
#47 0x00000000 in ?? () from 
#48 0xffffffff in ?? ()
#49 0x770d8bf2 in ntdll!EtwSetMark () from C:\Windows\system32\ntdll.dll
#50 0x77113e67 in ntdll!memmove () from C:\Windows\system32\ntdll.dll
(gdb) frame 1
#1  0x03e062de in gst_mpeg_demux_get_audio_stream (mpeg_demux=0x1de0410, 
    stream_nr=0 '\0', type=131074, info=0x0) at gstmpegdemux.c:407
407         gst_element_remove_pad (GST_ELEMENT (mpeg_demux), str->pad);
(gdb) p str
$1 = (GstMPEGStream *) 0x667e868
(gdb) p str->pad
$2 = (GstPad *) 0x1
(gdb) p type
$3 = 131074
(gdb) p str->type
$4 = 65535
(gdb) p mpeg_demux
$5 = (GstMPEGDemux *) 0x1de0410
(gdb) p mpeg_demux->audio_stream[stream_nr]
$6 = (GstMPEGStream *) 0x667e868

As you can see, str->pad points to an invalid address 0x1 and causes the crash.


Expected results:
Don't crash.


Does this happen every time?
Yes.

Other information:


-- 
See http://bugzilla.gnome.org/page.cgi?id=email.html for more info about why you received
this email, why you can't respond via email, how to stop receiving
emails (or reduce the number you receive), and how to contact someone
if you are having problems with the system.

You can add comments to this bug at http://bugzilla.gnome.org/show_bug.cgi?id=506125.