[gstreamer-bugs] [Bug 604106] New: [jpegdec] Crash in jpeg_idct_ifast

[GStreamer (bugzilla.gnome.org)]

https://bugzilla.gnome.org/show_bug.cgi?id=604106
  GStreamer | gst-plugins-good | git

           Summary: [jpegdec] Crash in jpeg_idct_ifast
    Classification: Desktop
           Product: GStreamer
           Version: git
        OS/Version: Linux
            Status: UNCONFIRMED
          Severity: normal
          Priority: Normal
         Component: gst-plugins-good
        AssignedTo: gstreamer-bugs at lists.sourceforge.net
        ReportedBy: hadess at hadess.net
         QAContact: gstreamer-bugs at lists.sourceforge.net
      GNOME target: ---
     GNOME version: ---


Created an attachment (id=149363)
 --> (https://bugzilla.gnome.org/attachment.cgi?id=149363)
Crasher jpeg

gstreamer-0.10.25.1-2.fc12.x86_64
gstreamer-plugins-base-0.10.25.1-2.fc12.x86_64
gstreamer-plugins-good-0.10.17-3.fc12.x86_64

Crasher file attached.

$ gst-launch playbin2 uri=file:///home/hadess/Desktop/rb-crasher.jpg 
(gst-launch-0.10:9785): GLib-WARNING **: g_set_prgname() called multiple times
Setting pipeline to PAUSED ...
Pipeline is PREROLLING ...
Caught SIGSEGV accessing address (nil)

347        outptr[0] = range_limit[IDESCALE(tmp0 + tmp7, PASS1_BITS+3)
Missing separate debuginfos, use: debuginfo-install
gstreamer-0.10.25.1-2.fc12.x86_64
(gdb) bt
#0  0x00000030818167d2 in jpeg_idct_ifast (cinfo=<value optimized out>,
compptr=<value optimized out>, coef_block=<value optimized out>,
output_buf=<value optimized out>, output_col=<value optimized out>) at
./jidctfst.c:347
#1  0x000000308181524f in decompress_onepass (cinfo=<value optimized out>,
output_buf=<value optimized out>) at ./jdcoefct.c:197
#2  0x000000308180e611 in jpeg_read_raw_data (cinfo=0x80fd08,
data=0x7ffff0e3a9c0, max_lines=16) at ./jdapistd.c:210
#3  0x00007ffff0e4361d in gst_jpeg_dec_decode_indirect (r_h=<value optimized
out>, r_v=<value optimized out>, height=1500, width=<value optimized out>,
last=<value optimized out>, base=<value optimized out>, dec=<value optimized
out>) at gstjpegdec.c:740
#4  gst_jpeg_dec_chain (r_h=<value optimized out>, r_v=<value optimized out>,
height=1500, width=<value optimized out>, last=<value optimized out>,
base=<value optimized out>, dec=<value optimized out>) at gstjpegdec.c:1177
#5  0x000000308b0610a5 in gst_pad_chain_data_unchecked (pad=0x810990 [GstPad],
is_buffer=1, data=0x7fffec049760) at gstpad.c:4116
#6  0x000000308b061b7e in gst_pad_push_data (pad=0x7bafc0 [GstPad],
is_buffer=1, data=0x7fffec049760) at gstpad.c:4345
#7  0x00007ffff19136ed in gst_type_find_element_chain (pad=0x7ba3b0
[GstTypeFindElement], buffer=0x7fffec049760) at gsttypefindelement.c:697
#8  0x000000308b0610a5 in gst_pad_chain_data_unchecked (pad=0x7bab40 [GstPad],
is_buffer=1, data=0x7fffec049760) at gstpad.c:4116
#9  0x000000308b061b7e in gst_pad_push_data (pad=0x7bb580 [GstProxyPad],
is_buffer=1, data=0x7fffec049760) at gstpad.c:4345
#10 0x000000308b0610a5 in gst_pad_chain_data_unchecked (pad=0x7bb7d0
[GstGhostPad], is_buffer=1, data=0x7fffec049760) at gstpad.c:4116
#11 0x000000308b061b7e in gst_pad_push_data (pad=0x7b78f0 [GstPad],
is_buffer=1, data=0x7fffec049760) at gstpad.c:4345
#12 0x000000308da1c882 in ?? () from /usr/lib64/libgstbase-0.10.so.0
#13 0x000000308b085c7e in gst_task_func (task=0x7d84b0 [GstTask]) at
gsttask.c:234
#14 0x0000003074063ab2 in g_thread_pool_thread_proxy (data=<value optimized
out>) at gthreadpool.c:265
#15 0x00000030740624c4 in g_thread_create_proxy (data=0x7d8730) at
gthread.c:635
#16 0x0000003073406a3a in start_thread (arg=<value optimized out>) at
pthread_create.c:297
#17 0x00000030728de6dd in clone () at
../sysdeps/unix/sysv/linux/x86_64/clone.S:112

-- 
Configure bugmail: https://bugzilla.gnome.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the QA contact for the bug.
You are the assignee for the bug.