[gstreamer-bugs] [Bug 461253] Crash when gst_base_transform_prepare_output_buffer is sent negative size.

[GStreamer (bugzilla.gnome.org)]

If you have any questions why you received this email, please see the text at
the end of this email. Replies to this email are NOT read, please see the text
at the end of this email. You can add comments to this bug at:
  http://bugzilla.gnome.org/show_bug.cgi?id=461253

  GStreamer | gstreamer (core) | Ver: HEAD CVS

Sebastian Dröge changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |slomo at circular-chaos.org
             Status|UNCONFIRMED                 |RESOLVED
         Resolution|                            |FIXED
   Target Milestone|HEAD                        |0.10.20




------- Comment #2 from Sebastian Dröge  2008-05-06 08:42 UTC -------
Ok, basetransform and gst_pad_alloc*() will now complain about negative sizes
instead of exploding :)

I don't think this was caused by a mp3parse bug though, it looks like one of
the elements between mp3parse and the crasher transform the size wrong.
If you can still reproduce this bug could you file a new one with the complete
pipeline and a complete GST_DEBUG=5 log?

2008-05-06  Sebastian Dröge  <slomo at circular-chaos.org>

        * gst/gstpad.c: (gst_pad_alloc_buffer_full):
        * libs/gst/base/gstbasetransform.c:
        (gst_base_transform_prepare_output_buffer):
        Don't allow negative sizes when allocating new buffers.
        Fixes bug #461253.


-- 
See http://bugzilla.gnome.org/page.cgi?id=email.html for more info about why you received
this email, why you can't respond via email, how to stop receiving
emails (or reduce the number you receive), and how to contact someone
if you are having problems with the system.

You can add comments to this bug at http://bugzilla.gnome.org/show_bug.cgi?id=461253.