[gstreamer-bugs] [Bug 358074] [mpeg] crash in mpeg2dec reading a certain VOB file

[GStreamer (bugzilla.gnome.org)]

Do not reply to this via email (we are currently unable to handle email
responses and they get discarded).  You can add comments to this bug at
http://bugzilla.gnome.org/show_bug.cgi?id=358074

  GStreamer | gst-plugins-ugly | Ver: HEAD CVS


Priit Laes (IRC: plaes) changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |amd at store20.com
      GNOME version|2.15/2.16                   |2.17/2.18




------- Comment #7 from Priit Laes (IRC: plaes)  2007-01-27 18:36 UTC -------
gdb> r
[Thread debugging using libthread_db enabled]
[New Thread -1212200480 (LWP 31670)]
Setting pipeline to PAUSED ...
[New Thread -1216656496 (LWP 31674)]
Pipeline is PREROLLING ...
[New Thread -1226499184 (LWP 31675)]
[New Thread -1234891888 (LWP 31676)]

Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread -1226499184 (LWP 31675)]
_______________________________________________________________________________
     eax:0838D970 ebx:B6F95570  ecx:00000002  edx:081148B8     eflags:00010206
     esi:DDAC0000 edi:00000000  esp:B6E50FBC  ebp:B6E51048     eip:0838D970
     cs:0073  ds:007B  es:007B  fs:0000  gs:0033  ss:007B    o d I t s z a P c 
[007B:B6E50FBC]---------------------------------------------------------[stack]
B6E50FEC : DA 40 F9 B6  38 9F 05 08 - A0 67 07 08  50 3B 11 08 . at ..8....g..P;..
B6E50FDC : A6 47 EA B7  08 00 00 00 - 6E 00 00 00  00 00 00 00 .G......n.......
B6E50FCC : 63 48 EA B7  C4 5E F1 B7 - 08 00 00 00  C0 A7 EE B7 cH...^..........
B6E50FBC : DD CD F8 B6  40 48 11 08 - B8 48 11 08  20 59 F9 B6 .... at H...H.. Y..
[007B:DDAC0000]---------------------------------------------------------[ data]
DDAC0000 : Error while running hook_stop:
Cannot access memory at address 0xddac0000
0x0838d970 in ?? ()
gdb> up 1
#1  0xb6f8cddd in mpeg2_slice (decoder=0x8114840, code=0x6, buffer=0xb6e52040
"\022R���\020\026S���kE��\035���\fN����\237\214fM7\016��\035C0TcU�4R���z��2�.Si�R9%�lt�B�\f�YUhDEM\223\236U����l]\225�\r8�$�\235K\f\b{�:K�z\004�u\177��q�\233}�l`\0377���CH�˽\"���TL!U�1*\032\033\221\214g`\n�\017��8kw!l�\034\017\025\025Y$_�X�\205\v�\a\t\022wa\n
�ۤ\2233��76\225�a\027\231�|�^X�K��)�\225+=�\b\226�"...)
at slice.c:1874
1874                MOTION_CALL (parser, macroblock_modes);
gdb> info args
decoder = (mpeg2_decoder_t * const) 0x8114840
code = 0x6
buffer = (const uint8_t * const) 0xb6e52040
"\022R���\020\026S���kE��\035���\fN����\237\214fM7\016��\035C0TcU�4R���z��2�.Si�R9%�lt�B�\f�YUhDEM\223\236U����l]\225�\r8�$�\235K\f\b{�:K�z\004�u\177��q�\233}�l`\0377���CH�˽\"���TL!U�1*\032\033\221\214g`\n�\017��8kw!l�\034\017\025\025Y$_�X�\205\v�\a\t\022wa\n
�ۤ\2233��76\225�a\027\231�|�^X�K��)�\225+=�\b\226�"...
gdb> info local
parser = (motion_parser_t *) 0x838d970
macroblock_modes = 0x6e
mba_inc = 0x0
mba = (const MBAtab *) 0xb6f940da
cpu_state = {
  dummy = 0x8
}
gdb> bt
#0  0x0838d970 in ?? ()
#1  0xb6f8cddd in mpeg2_slice (decoder=0x8114840, code=0x6, buffer=0xb6e52040
"\022R���\020\026S���kE��\035���\fN����\237\214fM7\016��\035C0TcU�4R���z��2�.Si�R9%�lt�B�\f�YUhDEM\223\236U����l]\225�\r8�$�\235K\f\b{�:K�z\004�u\177��q�\233}�l`\0377���CH�˽\"���TL!U�1*\032\033\221\214g`\n�\017��8kw!l�\034\017\025\025Y$_�X�\205\v�\a\t\022wa\n
�ۤ\2233��76\225�a\027\231�|�^X�K��)�\225+=�\b\226�"...)
at slice.c:1874
#2  0xb6f8128e in mpeg2_parse (mpeg2dec=0x8114840) at decode.c:188
#3  0xb77e0540 in gst_mpeg2dec_chain (pad=0x81d8010, buf=0x81214b0) at
gstmpeg2dec.c:972
#4  0xb7f4f7e5 in gst_pad_chain_unchecked (pad=0x81d8010, buffer=0x81214b0) at
gstpad.c:3412
#5  0xb7f4fcd9 in gst_pad_push (pad=0x81136c8, buffer=0x81214b0) at
gstpad.c:3578
#6  0xb7b4b0e8 in gst_queue_loop (pad=0x81136c8) at gstqueue.c:786
#7  0xb7f62585 in gst_task_func (task=0x8114770, tclass=0x8112960) at
gsttask.c:192
#8  0xb7ea661b in g_thread_pool_thread_proxy (data=0x81129f0) at
gthreadpool.c:265
#9  0xb7ea539c in g_thread_create_proxy (data=0x811b550) at gthread.c:591
#10 0xb7e584bb in start_thread (arg=0xb6e51b90) at pthread_create.c:296
#11 0xb7de71ae in clone () from /lib/libc.so.6
gdb> 


-- 
Configure bugmail: http://bugzilla.gnome.org/userprefs.cgi?tab=email