[gstreamer-bugs] [Bug 411220] New: totem crashed with SIGSEGV in put_pixels16_mmx()

GStreamer (bugzilla.gnome.org) bugzilla-daemon at bugzilla.gnome.org
Fri Feb 23 06:25:56 PST 2007


Do not reply to this via email (we are currently unable to handle email
responses and they get discarded).  You can add comments to this bug at
http://bugzilla.gnome.org/show_bug.cgi?id=411220

  GStreamer | gst-ffmpeg | Ver: 0.10.2

           Summary: totem crashed with SIGSEGV in put_pixels16_mmx()
           Product: GStreamer
           Version: 0.10.2
          Platform: Other
        OS/Version: Linux
            Status: UNCONFIRMED
          Severity: critical
          Priority: Normal
         Component: gst-ffmpeg
        AssignedTo: gstreamer-bugs at lists.sourceforge.net
        ReportedBy: seb128 at debian.org
         QAContact: gstreamer-bugs at lists.sourceforge.net
     GNOME version: 2.17/2.18
   GNOME milestone: Unspecified


That bug has been described on
https://beta.launchpad.net/ubuntu/+source/gstreamer0.10-ffmpeg/+bug/87216

"Binary package hint: totem

problems with .rm files

ProblemType: Crash
Date: Fri Feb 23 00:32:03 2007
DistroRelease: Ubuntu 7.04
ExecutablePath: /usr/bin/totem
Package: totem-gstreamer 2.17.91-0ubuntu3
ProcCmdline: totem
file:///media/hda2/Videos/Apple/1999/1999-05-10%20WWDC%201999.rm
..."

Debug backtrace for the crash:

#0  0xb3e37cb0 in put_pixels16_mmx (
    block=0x8709640
"\177\200\202\201~}\177\203��\236\226\216\210\202\201\206\212\214\215\215\215\215\215\217\221\220\215\214\215\216\215\214\213\214\213\212\212\213\213\214\215\215\215\214\214\214\215\201\200\200\200\177\200\200\200\200\200\200\200\200\200\200\201\177\177\177\201\177\177\200\177\200\200\177\202\200\177\177\200\201\177\177\177\177\177\177\177\200\201}\201\200\177\177\201�\022\0225\206�$\030���g\205��\200\212\211\211\211\211\211\210\207\204\203\201\201\203\203\204\204�\237\201}\202\201~~\206\211\232\214����\214\203\201x~\233\236\220x\216\207\223����",
'\200' <repeats 40 times>..., 
    pixels=0xdca0 <Address 0xdca0 out of bounds>, line_size=320, h=16) at
dsputil_mmx.c:430
No locals.
#1  0xb3c3f0c0 in MPV_motion (s=0x8623f60, dest_y=<value optimized out>,
dest_cb=<value optimized out>, 
    dest_cr=0x8716870
"\200\200\200\200\200\200\200\200\201\200\201\201\201\201\200\200\227\226\224\217\212\211\207\207", 
    dir=0, ref_picture=0x8624044, pix_op=0x86249dc, qpix_op=0x8624bbc) at
mpegvideo.c:2992
        j = <value optimized out>
        dxy = <value optimized out>
        mx = <value optimized out>
        my = <value optimized out>
        src_x = <value optimized out>
        src_y = <value optimized out>
        motion_x = <value optimized out>
        motion_y = <value optimized out>
        mb_x = 10
        mb_y = 11
        i = <value optimized out>
        ptr = <value optimized out>
#2  0xb3c41a9d in MPV_decode_mb (s=0x8623f60, block=0x861fa10) at
mpegvideo.c:3950
No locals.
#3  0xb3de9510 in rv10_decode_packet (avctx=0xb3a025e0, buf=<value optimized
out>, buf_size=553) at rv10.c:688
        ret = 0
        s = (MpegEncContext *) 0x8623f60
        mb_count = 70
#4  0xb3de9acc in rv10_decode_frame (avctx=0xb3a025e0, data=0xb3a02250,
data_size=0xb29fcf60, 
    buf=0x861ec80
"\214\030svB\"OEz\211�\203\001\200�\035��`\016q\030\200\037�\020�\006\v�4J\211d@�t\203\002\0266\016\020\224��[�Q��0!<c7s�\203�L\016\005���Ne��\201���
��\206�", buf_size=553) at rv10.c:737
        i = <value optimized out>
#5  0xb3c27e20 in avcodec_decode_video (avctx=0xb3a025e0, picture=0xb3a02250,
got_picture_ptr=0xb29fcf60, 
    buf=0x861ec80
"\214\030svB\"OEz\211�\203\001\200�\035��`\016q\030\200\037�\020�\006\v�4J\211d@�t\203\002\0266\016\020\224��[�Q��0!<c7s�\203�L\016\005���Ne��\201���
��\206�", buf_size=553) at utils.c:932
        ret = 320
#6  0xb3bc3160 in gst_ffmpegdec_frame (ffmpegdec=0x85ff1e8, 
    data=0x861ec80
"\214\030svB\"OEz\211�\203\001\200�\035��`\016q\030\200\037�\020�\006\v�4J\211d@�t\203\002\0266\016\020\224��[�Q��0!<c7s�\203�L\016\005���Ne��\201���
��\206�", size=553, got_data=0xb29fd08c, in_timestamp=1265000000, 
    in_duration=18446744073709551615, ret=0xb29fd088) at gstffmpegdec.c:1208
        oclass = (GstFFMpegDecClass *) 0x8599d40
        outbuf = (GstBuffer *) 0x0
        have_data = <value optimized out>
        len = <value optimized out>
        __PRETTY_FUNCTION__ = "gst_ffmpegdec_frame"
---Type <return> to continue, or q <return> to quit---
#7  0xb3bc4fd4 in gst_ffmpegdec_chain (pad=0x855a490, inbuf=0x8567c18) at
gstffmpegdec.c:1936
        res = <value optimized out>
        ffpts = -5245439123201732440
        ffmpegdec = (GstFFMpegDec *) 0x85ff1e8
        oclass = (GstFFMpegDecClass *) 0x8599d40
        data = (
    guint8 *) 0x861ec80
"\214\030svB\"OEz\211�\203\001\200�\035��`\016q\030\200\037�\020�\006\v�4J\211d@�t\203\002\0266\016\020\224��[�Q��0!<c7s�\203�L\016\005���Ne��\201���
��\206
        bdata = (
    guint8 *) 0x861ec80
"\214\030svB\"OEz\211�\203\001\200�\035��`\016q\030\200\037�\020�\006\v�4J\211d@�t\203\002\0266\016\020\224��[�Q��0!<c7s�\203�L\016\005���Ne��\201���
��\206
        size = 320
        bsize = 553
        len = <value optimized out>
        have_data = 1
        ret = GST_FLOW_OK
        left = 0
        in_timestamp = 1265000000
        in_duration = 18446744073709551615
        next_timestamp = 18446744073709551615
        next_duration = 18446744073709551615
        pending_timestamp = 1265000000
        pending_duration = 18446744073709551615
        __PRETTY_FUNCTION__ = "gst_ffmpegdec_chain"
#8  0xb7619339 in gst_pad_alloc_buffer_full (pad=0xb3bc4c30,
offset=13205134601124665340, size=-1281343568, 
    caps=0xb29fd150, buf=0xb7363d5b, setcaps=-1221134863) at gstpad.c:2750
        peer = <value optimized out>
        ret = 139885592
        __PRETTY_FUNCTION__ = "gst_pad_alloc_buffer_full"
#9  0xb7619a2b in gst_pad_chain_unchecked (pad=0x1, buffer=0xb29fd158) at
gstpad.c:3482
        caps = (GstCaps *) 0x855a3d0
        caps_changed = 141669392
        chainfunc = <value optimized out>
        ret = <value optimized out>
        __PRETTY_FUNCTION__ = "gst_pad_chain_unchecked"
#10 0xb5e0a16e in gst_queue_loop (pad=0x855a3d0) at gstqueue.c:810
        result = <value optimized out>
        queue = (GstQueue *) 0x855a818
        __PRETTY_FUNCTION__ = "gst_queue_loop"
...


-- 
Configure bugmail: http://bugzilla.gnome.org/userprefs.cgi?tab=email




More information about the Gstreamer-bugs mailing list