[gstreamer-bugs] [Bug 545370] New: playing some mp3s segfaults

[GStreamer (bugzilla.gnome.org)]

If you have any questions why you received this email, please see the text at
the end of this email. Replies to this email are NOT read, please see the text
at the end of this email. You can add comments to this bug at:
  http://bugzilla.gnome.org/show_bug.cgi?id=545370

  GStreamer | gst-plugins-ugly | Ver: 0.10.8
           Summary: playing some mp3s segfaults
           Product: GStreamer
           Version: 0.10.8
          Platform: Other
        OS/Version: All
            Status: UNCONFIRMED
          Severity: critical
          Priority: Normal
         Component: gst-plugins-ugly
        AssignedTo: gstreamer-bugs at lists.sourceforge.net
        ReportedBy: don at amberfisharts.com
         QAContact: gstreamer-bugs at lists.sourceforge.net
     GNOME version: 2.21/2.22
   GNOME milestone: Unspecified


Steps to reproduce:
1. start qt4s musicplayer example 
2. load a certain mp3 (only some cause the crash)



Stack trace:
#0  0x00007f46ed3bdfb5 in ?? () from /lib/libc.so.6
#1  0x00007f46ed3bf744 in ?? () from /lib/libc.so.6
#2  0x00007f46ed3c06af in realloc () from /lib/libc.so.6
#3  0x00007f46ee2a365e in g_realloc () from /usr/lib/libglib-2.0.so.0
#4  0x00007f46ee2777e3 in ?? () from /usr/lib/libglib-2.0.so.0
#5  0x00007f46ee277c22 in g_array_append_vals () from /usr/lib/libglib-2.0.so.0
#6  0x00007f46ebd574ef in gst_structure_id_set_valist () from
/usr/lib/libgstreamer-0.10.so.0
#7  0x00007f46ebd576bd in gst_structure_id_set () from
/usr/lib/libgstreamer-0.10.so.0
#8  0x00007f46ebd51669 in gst_query_new_duration () from
/usr/lib/libgstreamer-0.10.so.0
#9  0x00007f46ebd653ae in gst_pad_query_duration () from
/usr/lib/libgstreamer-0.10.so.0
#10 0x00007f46ebd654f3 in gst_pad_query_peer_duration () from
/usr/lib/libgstreamer-0.10.so.0
#11 0x00007f46e7756b70 in mp3parse_total_bytes (mp3parse=0x21ce600,
total=0x41ce3408) at gstmpegaudioparse.c:1464
#12 0x00007f46e7756daa in mp3parse_bytepos_to_time (mp3parse=0x7f46ed697a00,
bytepos=10000, ts=0x41ce34b0) at gstmpegaudioparse.c:1605
#13 0x00007f46e7757093 in mp3parse_total_time (mp3parse=0x21ce600,
total=0x41ce34b0) at gstmpegaudioparse.c:1501
#14 0x00007f46e7756dbf in mp3parse_bytepos_to_time (mp3parse=0x21ce600,
bytepos=10000, ts=0x41ce3560) at gstmpegaudioparse.c:1605
#15 0x00007f46e7757093 in mp3parse_total_time (mp3parse=0x21ce600,
total=0x41ce3560) at gstmpegaudioparse.c:1501
#16 0x00007f46e7756dbf in mp3parse_bytepos_to_time (mp3parse=0x21ce600,
bytepos=10000, ts=0x41ce3610) at gstmpegaudioparse.c:1605
#17 0x00007f46e7757093 in mp3parse_total_time (mp3parse=0x21ce600,
total=0x41ce3610) at gstmpegaudioparse.c:1501
#18 0x00007f46e7756dbf in mp3parse_bytepos_to_time (mp3parse=0x21ce600,
bytepos=10000, ts=0x41ce36c0) at gstmpegaudioparse.c:1605
[...]
#95265 0x00007f428149a093 in mp3parse_total_time (mp3parse=0x26e2200,
total=0x4268fb90) at gstmpegaudioparse.c:1501
#95266 0x00007f4281499dbf in mp3parse_bytepos_to_time (mp3parse=0x26e2200,
bytepos=10000, ts=0x4268fce8) at gstmpegaudioparse.c:1605
#95267 0x00007f428149a093 in mp3parse_total_time (mp3parse=0x26e2200,
total=0x4268fce8) at gstmpegaudioparse.c:1501
#95268 0x00007f428149ca31 in gst_mp3parse_chain (pad=<value optimized out>,
buf=<value optimized out>) at gstmpegaudioparse.c:950
#95269 0x00007f4285a84ec6 in ?? () from /usr/lib/libgstreamer-0.10.so.0
#95270 0x00007f4285a85f63 in gst_pad_push () from
/usr/lib/libgstreamer-0.10.so.0
#95271 0x00007f4283937c9f in ?? () from
/usr/lib64/gstreamer-0.10/libgstcoreelements.so
#95272 0x00007f4285a84ec6 in ?? () from /usr/lib/libgstreamer-0.10.so.0
#95273 0x00007f4285a85f63 in gst_pad_push () from
/usr/lib/libgstreamer-0.10.so.0
#95274 0x00007f4285a84ec6 in ?? () from /usr/lib/libgstreamer-0.10.so.0
#95275 0x00007f4285a85f63 in gst_pad_push () from
/usr/lib/libgstreamer-0.10.so.0
#95276 0x00007f4284c62c31 in ?? () from /usr/lib/libgstbase-0.10.so.0
#95277 0x00007f4285aa3016 in ?? () from /usr/lib/libgstreamer-0.10.so.0
#95278 0x00007f428800840f in ?? () from /usr/lib/libglib-2.0.so.0
#95279 0x00007f4288006e46 in ?? () from /usr/lib/libglib-2.0.so.0
#95280 0x00007f4287b8c037 in start_thread () from /lib/libpthread.so.0
#95281 0x00007f4287159fdd in clone () from /lib/libc.so.6
#95282 0x0000000000000000 in ?? ()


Other information:
This bug might be related too (or the same as)
http://bugzilla.gnome.org/show_bug.cgi?id=522357 but I'm not sure.
It seems that there is an infinite loop in gstmpegaudioparse.c
I also ran the prog with GST_DEBUG=*:5 the output was a whopping 241MB but
compressed nicely to 7.3MB.


-- 
See http://bugzilla.gnome.org/page.cgi?id=email.html for more info about why you received
this email, why you can't respond via email, how to stop receiving
emails (or reduce the number you receive), and how to contact someone
if you are having problems with the system.

You can add comments to this bug at http://bugzilla.gnome.org/show_bug.cgi?id=545370.