[gstreamer-bugs] [Bug 482274] New: totem crashed with SIGSEGV in hl_decode_mb()
GStreamer (bugzilla.gnome.org)
bugzilla-daemon at bugzilla.gnome.org
Mon Oct 1 08:34:05 PDT 2007
If you have any questions why you received this email, please see the text at
the end of this email. Replies to this email are NOT read, please see the text
at the end of this email. You can add comments to this bug at:
http://bugzilla.gnome.org/show_bug.cgi?id=482274
GStreamer | gst-ffmpeg | Ver: 0.10.x
Summary: totem crashed with SIGSEGV in hl_decode_mb()
Product: GStreamer
Version: 0.10.x
Platform: Other
OS/Version: Linux
Status: UNCONFIRMED
Severity: critical
Priority: Normal
Component: gst-ffmpeg
AssignedTo: gstreamer-bugs at lists.sourceforge.net
ReportedBy: pvillavi at gnome.org
QAContact: gstreamer-bugs at lists.sourceforge.net
GNOME version: 2.21/2.22
GNOME milestone: Unspecified
This bug has been filled here:
https://bugs.launchpad.net/ubuntu/+source/gstreamer0.10-ffmpeg/+bug/146915
"Happened while trying to play an H264 in MPEG2TS stream"
".
Thread 5 (process 2456):
#0 0xffffe410 in __kernel_vsyscall ()
#1 0xb6fd9647 in poll () from /lib/tls/i686/cmov/libc.so.6
#2 0xb708c593 in g_main_context_iterate (context=0x81869c8, block=1,
dispatch=1, self=0x809b470)
at /build/buildd/glib2.0-2.14.1/glib/gmain.c:2996
got_ownership = <value optimized out>
max_priority = 2147483647
timeout = 116
some_ready = <value optimized out>
nfds = 9
allocated_nfds = <value optimized out>
fds = (GPollFD *) 0x83f3ad0
__PRETTY_FUNCTION__ = "g_main_context_iterate"
#3 0xb708c909 in IA__g_main_loop_run (loop=0x80ced60) at
/build/buildd/glib2.0-2.14.1/glib/gmain.c:2898
got_ownership = -1223285456
self = (GThread *) 0x809b470
__PRETTY_FUNCTION__ = "IA__g_main_loop_run"
#4 0xb7a4b9e4 in IA__gtk_main () at
/build/buildd/gtk+2.0-2.12.0/gtk/gtkmain.c:1144
tmp_list = (GList *) 0x81af000
functions = (GList *) 0x0
init = (GtkInitFunction *) 0x832db40
loop = (GMainLoop *) 0x80ced60
#5 0x08063583 in main (argc=) at totem.c:3197
totem = (Totem *) 0x81af000
gc = <value optimized out>
program = (GnomeProgram *) 0x80a4c10
context = <value optimized out>
baconoptiongroup = (GOptionGroup *) 0x80a14c0
.
Thread 4 (process 2458):
#0 0xffffe410 in __kernel_vsyscall ()
#1 0xb71679f6 in ?? () from /lib/tls/i686/cmov/libpthread.so.0
#2 0xb70ae962 in IA__g_usleep (microseconds=50000) at
/build/buildd/glib2.0-2.14.1/glib/gtimer.c:170
request = {tv_sec = 0, tv_nsec = 50000000}
remaining = {tv_sec = -516, tv_nsec = -1223597540}
#3 0xb6088cbc in gst_xvimagesink_event_thread (xvimagesink=0x83be1f8) at
xvimagesink.c:1517
__PRETTY_FUNCTION__ = "gst_xvimagesink_event_thread"
#4 0xb70ac5af in g_thread_create_proxy (data=0x83ea5b0) at
/build/buildd/glib2.0-2.14.1/glib/gthread.c:635
__PRETTY_FUNCTION__ = "g_thread_create_proxy"
#5 0xb716046b in start_thread () from /lib/tls/i686/cmov/libpthread.so.0
#6 0xb6fe373e in clone () from /lib/tls/i686/cmov/libc.so.6
.
Thread 3 (process 2460):
#0 0xffffe410 in __kernel_vsyscall ()
#1 0xb71671fb in ?? () from /lib/tls/i686/cmov/libpthread.so.0
#2 0xb609e51e in gst_file_src_create (basesrc=0x843c010, offset=696320,
length=4096, buffer=0xb581e2f4)
at gstfilesrc.c:782
src = (GstFileSrc *) 0x843c010
ret = <value optimized out>
#3 0xb7541f46 in gst_base_src_get_range (src=0x843c010, offset=696320,
length=4096, buf=0xb581e2f4) at gstbasesrc.c:1542
ret = GST_FLOW_OK
status = <value optimized out>
__PRETTY_FUNCTION__ = "gst_base_src_get_range"
#4 0xb7544746 in gst_base_src_loop (pad=0x81c55a0) at gstbasesrc.c:1711
src = (GstBaseSrc *) 0x843c010
buf = (GstBuffer *) 0x0
ret = <value optimized out>
position = 696320
eos = <value optimized out>
__PRETTY_FUNCTION__ = "gst_base_src_loop"
#5 0xb74f6a46 in gst_task_func (task=0x83a0e98, tclass=0x84669a8) at
gsttask.c:192
t = -1219532357
lock = (GStaticRecMutex *) 0x843b400
tself = (GThread *) 0x80ceaf8
__PRETTY_FUNCTION__ = "gst_task_func"
#6 0xb70ae0c8 in g_thread_pool_thread_proxy (data=0x8466a38) at
/build/buildd/glib2.0-2.14.1/glib/gthreadpool.c:265
task = (gpointer) 0x83a0e98
pool = (GRealThreadPool *) 0x8466a38
#7 0xb70ac5af in g_thread_create_proxy (data=0x80ceaf8) at
/build/buildd/glib2.0-2.14.1/glib/gthread.c:635
__PRETTY_FUNCTION__ = "g_thread_create_proxy"
#8 0xb716046b in start_thread () from /lib/tls/i686/cmov/libpthread.so.0
#9 0xb6fe373e in clone () from /lib/tls/i686/cmov/libc.so.6
.
Thread 2 (process 2461):
#0 0xb4f9cda8 in out_fifo (pcm_sample=0x8487298, num=3, fr_ps=0x848313c,
outBuf=0x8649250, psamples=0x848a19c,
bufSize=4608) at decode.c:673
i = 0
j = 5
l = 1
stereo = 2
#1 0xb4fa2116 in mp3tl_decode_frame (tl=0x8483108, samples=0x8649250
"ÿÿ\002", bufsize=4608, buf_time=0xb4a530f8)
at mp3tl.c:418
bit_alloc = {{3, 3, 3, 5, 6, 6, 5, 4, 4, 4, 4, 3, 3, 3, 1, 1, 0
<repeats 16 times>}, {3, 3, 4, 6, 6, 6, 5, 4, 4,
4, 4, 4, 3, 3, 2, 1, 0 <repeats 16 times>}}
scfsi = {{2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 2, 2, 2, 2, 2, 2, 140808776, 1,
3054132626, 4608, 1078619680, 3030724864,
3071612536, 135760880, 80817, 3030724184, 3071425006, 0, 0, 0, 0, 0}, {2,
2, 2, 2, 2, 1, 2, 2, 2, 2, 0, 2, 2, 2, 2,
2, 4, 3, 3054293968, 3054293968, 0, 138869524, 3075670600, 138869520,
135760640, 3071681857, 3075143358, 0, 0, 0, 0,
0}}
scale_index = {{{47, 49, 48, 50, 49, 49, 49, 50, 48, 50, 48, 49, 48,
47, 48, 49, 63 <repeats 16 times>}, {47, 49,
48, 50, 49, 49, 49, 50, 48, 50, 48, 49, 48, 47, 48, 49, 63 <repeats 16
times>}, {47, 49, 48, 50, 49, 49, 49, 50,
48, 48, 48, 49, 48, 47, 48, 49, 63 <repeats 16 times>}}, {{47, 49, 48,
48, 50, 49, 49, 50, 49, 49, 51, 49, 49, 49,
49, 48, 63 <repeats 16 times>}, {47, 49, 48, 48, 50, 49, 49, 50, 49, 49,
47, 49, 49, 49, 49, 48,
63 <repeats 16 times>}, {47, 49, 48, 48, 50, 54, 49, 50, 49, 49, 51, 49,
49, 49, 49, 48, 63 <repeats 16 times>}}}
ch = <value optimized out>
hdr = (fr_header *) 0x848313c
i = 2
j = 3
error_protection = <value optimized out>
new_crc = 0
ret = <value optimized out>
__PRETTY_FUNCTION__ = "mp3tl_decode_frame"
#2 0xb4f99b4d in flump3dec_drain_avail (pad=<value optimized out>,
more_data=1) at flump3dec.c:412
caps = <value optimized out>
result = <value optimized out>
mp3hdr = (const fr_header *) 0x848313c
out_buf = (GstBuffer *) 0x8561460
ret = GST_FLOW_OK
flump3dec = (FluMp3Dec *) 0x8482000
dec_ts = 13117688036142166296
__PRETTY_FUNCTION__ = "flump3dec_drain_avail"
#3 0xb74dc039 in gst_pad_chain_unchecked (pad=0x843ef00, buffer=0x8628f28) at
gstpad.c:3453
caps = <value optimized out>
caps_changed = 0
chainfunc = (GstPadChainFunction) 0xb4f9b940 <flump3dec_sink_chain>
ret = <value optimized out>
__PRETTY_FUNCTION__ = "gst_pad_chain_unchecked"
#4 0xb74dc6f2 in gst_pad_push (pad=0x843ee40, buffer=0x8628f28) at
gstpad.c:3621
peer = (GstPad *) 0x843ef00
ret = <value optimized out>
caps = (GstCaps *) 0x843b2a0
__PRETTY_FUNCTION__ = "gst_pad_push"
#5 0xb60a5578 in gst_queue_loop (pad=0x843ee40) at gstqueue.c:932
queue = (GstQueue *) 0x83f1670
ret = <value optimized out>
__PRETTY_FUNCTION__ = "gst_queue_loop"
#6 0xb74f6a46 in gst_task_func (task=0x844a1f0, tclass=0x84669a8) at
gsttask.c:192
t = -1219532357
lock = (GStaticRecMutex *) 0x8468cb8
tself = (GThread *) 0x84947d8
__PRETTY_FUNCTION__ = "gst_task_func"
#7 0xb70ae0c8 in g_thread_pool_thread_proxy (data=0x8466a38) at
/build/buildd/glib2.0-2.14.1/glib/gthreadpool.c:265
task = (gpointer) 0x844a1f0
pool = (GRealThreadPool *) 0x8466a38
#8 0xb70ac5af in g_thread_create_proxy (data=0x84947d8) at
/build/buildd/glib2.0-2.14.1/glib/gthread.c:635
__PRETTY_FUNCTION__ = "g_thread_create_proxy"
#9 0xb716046b in start_thread () from /lib/tls/i686/cmov/libpthread.so.0
#10 0xb6fe373e in clone () from /lib/tls/i686/cmov/libc.so.6
.
Thread 1 (process 2462):
#0 pred8x8_top_dc_c (src=0xb4e472a0 '\200' <repeats 200 times>...,
stride=1280) at h264.c:2552
i = 0
dc0 = 0
dc1 = 0
#1 0xb40039ea in hl_decode_mb (h=0xb4f5c020) at h264.c:3727
ref = <value optimized out>
list = 0
mb_x = 0
mb_y = 1
mb_xy = 81
mb_type = <value optimized out>
dest_y = (uint8_t *) 0xb3581520 '\200' <repeats 200 times>...
dest_cb = (uint8_t *) 0xb4e472a0 '\200' <repeats 200 times>...
dest_cr = (uint8_t *) 0xb35482a0 '\200' <repeats 200 times>...
linesize = 2560
uvlinesize = 1280
i = 0
block_offset = (int *) 0xb4f5e37c
bottom = 1
transform_bypass = 0
idct_add = (void (*)(uint8_t *, DCTELEM *, int)) 0xb4104360
<ff_h264_idct_add_mmx>
idct_dc_add = (void (*)(uint8_t *, DCTELEM *, int)) 0xb4104470
<ff_h264_idct_dc_add_mmx2>
#2 0xb400f5d1 in decode_slice (h=0x5) at h264.c:7465
ret = 0
eos = 0
s = (MpegEncContext * const) 0xb4f5c020
part_mask = 127
#3 0xb4010475 in decode_nal_units (h=0xb4f5c020, buf=0x864a458 "",
buf_size=15000) at h264.c:8238
consumed = 89
dst_length = <value optimized out>
bit_length = <value optimized out>
i = <value optimized out>
ptr = (uint8_t *) 0x864e0c0 "\210\201@"
nalsize = <value optimized out>
avctx = (AVCodecContext * const) 0x8527040
buf_index = <value optimized out>
#4 0xb401164e in decode_frame (avctx=0x8527040, data=0x85273a0,
data_size=0xb3e62fd0, buf=0x864a458 "", buf_size=15000)
at h264.c:8381
h = (H264Context *) 0xb4f5c020
buf_index = <value optimized out>
#5 0xb3ee3710 in avcodec_decode_video (avctx=0x8527040, picture=0x85273a0,
got_picture_ptr=0xb3e62fd0, buf=0x864a458 "",
buf_size=15000) at utils.c:932
ret = 0
#6 0xb3e7e7d0 in gst_ffmpegdec_frame (ffmpegdec=0x8482140, data=0x864a458 "",
size=15000, got_data=0xb3e630fc,
in_timestamp=11860000000, in_duration=18446744073709551615, ret=0xb3e630f8)
at gstffmpegdec.c:1208
oclass = (GstFFMpegDecClass *) 0x84d7ff0
outbuf = (GstBuffer *) 0x0
have_data = <value optimized out>
len = <value optimized out>
__PRETTY_FUNCTION__ = "gst_ffmpegdec_frame"
#7 0xb3e80644 in gst_ffmpegdec_chain (pad=0x846fe10, inbuf=0x85b3400) at
gstffmpegdec.c:1936
res = <value optimized out>
ffpts = 297
ffmpegdec = (GstFFMpegDec *) 0x8482140
oclass = (GstFFMpegDecClass *) 0x84d7ff0
data = (guint8 *) 0x864a458 ""
bdata = (guint8 *) 0x85b4809 ""
size = 0
bsize = 164
len = <value optimized out>
have_data = -1240767548
ret = GST_FLOW_OK
left = 0
in_timestamp = 11860000000
in_duration = 18446744073709551615
next_timestamp = 11860000000
next_duration = 18446744073709551615
pending_timestamp = 18446744073709551615
pending_duration = 18446744073709551615
__PRETTY_FUNCTION__ = "gst_ffmpegdec_chain"
#8 0xb74dc039 in gst_pad_chain_unchecked (pad=0x846fe10, buffer=0x85b3400) at
gstpad.c:3453
caps = <value optimized out>
caps_changed = 0
chainfunc = (GstPadChainFunction) 0xb3e802a0 <gst_ffmpegdec_chain>
ret = <value optimized out>
__PRETTY_FUNCTION__ = "gst_pad_chain_unchecked"
#9 0xb74dc6f2 in gst_pad_push (pad=0x846fd50, buffer=0x85b3400) at
gstpad.c:3621
peer = (GstPad *) 0x846fe10
ret = <value optimized out>
caps = (GstCaps *) 0x809d760
__PRETTY_FUNCTION__ = "gst_pad_push"
#10 0xb60a5578 in gst_queue_loop (pad=0x846fd50) at gstqueue.c:932
queue = (GstQueue *) 0x83f1990
ret = <value optimized out>
__PRETTY_FUNCTION__ = "gst_queue_loop"
#11 0xb74f6a46 in gst_task_func (task=0x844a010, tclass=0x84669a8) at
gsttask.c:192
t = -1219532357
lock = (GStaticRecMutex *) 0x8496710
tself = (GThread *) 0x85289a8
__PRETTY_FUNCTION__ = "gst_task_func"
#12 0xb70ae0c8 in g_thread_pool_thread_proxy (data=0x8466a38) at
/build/buildd/glib2.0-2.14.1/glib/gthreadpool.c:265
task = (gpointer) 0x844a010
pool = (GRealThreadPool *) 0x8466a38
#13 0xb70ac5af in g_thread_create_proxy (data=0x85289a8) at
/build/buildd/glib2.0-2.14.1/glib/gthread.c:635
__PRETTY_FUNCTION__ = "g_thread_create_proxy"
#14 0xb716046b in start_thread () from /lib/tls/i686/cmov/libpthread.so.0
#15 0xb6fe373e in clone () from /lib/tls/i686/cmov/libc.so.6"
--
See http://bugzilla.gnome.org/page.cgi?id=email.html for more info about why you received
this email, why you can't respond via email, how to stop receiving
emails (or reduce the number you receive), and how to contact someone
if you are having problems with the system.
You can add comments to this bug at http://bugzilla.gnome.org/show_bug.cgi?id=482274.
More information about the Gstreamer-bugs
mailing list