[gstreamer-bugs] [Bug 633502] New: crash in playing (likely) malformed mp4 file

[GStreamer (bugzilla.gnome.org)]

https://bugzilla.gnome.org/show_bug.cgi?id=633502
  GStreamer | gstreamer (core) | git

           Summary: crash in playing (likely) malformed mp4 file
    Classification: Desktop
           Product: GStreamer
           Version: git
        OS/Version: Linux
            Status: UNCONFIRMED
          Severity: normal
          Priority: Normal
         Component: gstreamer (core)
        AssignedTo: gstreamer-bugs at lists.sourceforge.net
        ReportedBy: ensonic at sonicpulse.de
         QAContact: gstreamer-bugs at lists.sourceforge.net
      GNOME target: ---
     GNOME version: ---


#0  0xb7183133 in vfprintf () from /lib/libc.so.6
#1  0xb722f185 in __vasprintf_chk () from /lib/libc.so.6
#2  0xb7508e26 in vasprintf (string=0xae38661c, format=0xb7692408 "%s%d",
args=0xae386654 "2\245ǰ\233n") at /usr/include/bits/stdio2.h:199
#3  IA__g_vasprintf (string=0xae38661c, format=0xb7692408 "%s%d",
args=0xae386654 "2\245ǰ\233n") at gprintf.c:315
#4  0xb74e5117 in IA__g_strdup_vprintf (format=0xb7692408 "%s%d",
args=0xae386654 "2\245ǰ\233n") at gstrfuncs.c:244
#5  0xb74e5137 in IA__g_strdup_printf (format=0xb7692408 "%s%d") at
gstrfuncs.c:270
#6  0xb760cf42 in gst_object_set_name_default (object=0x8b6a5d8 [GstDecodePad],
name=0x0) at gstobject.c:641
#7  gst_object_set_name (object=0x8b6a5d8 [GstDecodePad], name=0x0) at
gstobject.c:700
#8  0xb760d15d in gst_object_set_property (object=0x8b6a5d8 [GstDecodePad],
prop_id=1, value=0xae3867bc, pspec=0x80df818 [GParamString]) at
gstobject.c:1073
#9  0xb75ae200 in object_set_property (type=146024000,
n_construct_properties=<value optimized out>, construct_params=0xa9e2ddd0) at
gobject.c:973
#10 g_object_constructor (type=146024000, n_construct_properties=<value
optimized out>, construct_params=0xa9e2ddd0) at gobject.c:1410
#11 0xb75af94e in IA__g_object_newv (object_type=146024000, n_parameters=2,
parameters=0xa9e6ed90) at gobject.c:1261
#12 0xb75b0587 in IA__g_object_new_valist (object_type=146024000,
first_property_name=0xb0c7a579 "direction", var_args=<value optimized out>) at
gobject.c:1377
#13 0xb75b06b0 in IA__g_object_new (object_type=146024000,
first_property_name=0xb0c7a579 "direction") at gobject.c:1095
#14 0xb0c7091d in gst_decode_pad_new (dbin=0x8318750 [GstDecodeBin2],
src=<value optimized out>, pad=0xa9e6a0d0 [GstPad], caps=0xa9e622a0,
chain=0x8b6f4b0) at gstdecodebin2.c:3412
#15 analyze_new_pad (dbin=0x8318750 [GstDecodeBin2], src=<value optimized out>,
pad=0xa9e6a0d0 [GstPad], caps=0xa9e622a0, chain=0x8b6f4b0) at
gstdecodebin2.c:1369
#16 0xb0c72b54 in pad_added_cb (element=0xa9e68270 [GstAacParse],
pad=0xa9e6a0d0 [GstPad], chain=0x8b6f4b0) at gstdecodebin2.c:2021

#6  0xb760cf42 in gst_object_set_name_default (object=0x8b6a5d8 [GstDecodePad],
name=0x0) at gstobject.c:641
641      tmp = g_strdup_printf ("%s%d", type_name, count);
(gdb) print count
$1 = 28315
(gdb) print q
$2 = <value optimized out>
(gdb) print type_name
$3 = (const gchar *) 0xb0c7a532 "DecodePad"

Not sure why it segfaults. The scary thing from looking at the debug log is
that this is counting up in a look until it dies:

0:00:03.223707104  6438  0x8335fe8 INFO        GST_ELEMENT_PADS
gstpad.c:1733:gst_pad_unlink: unlinked aacparse595:src and
decodepad1195:proxypad1197
0:00:03.223722630  6438  0x8335fe8 INFO                GST_PADS
gstpad.c:1916:gst_pad_link_prepare: trying to link aacparse595:src and
decodepad1195:proxypad1197
0:00:03.223730211  6438  0x8335fe8 INFO                GST_PADS
gstpad.c:2099:gst_pad_link_full: linked aacparse595:src and
decodepad1195:proxypad1197, successful
0:00:03.223745836  6438  0x8335fe8 INFO        GST_ELEMENT_PADS
gstpad.c:1690:gst_pad_unlink: unlinking aacparse595:src(0xb4458a60) and
decodepad1195:proxypad1197

The file has been created in attempt to 'save' a rtsp stream:

gst-launch-0.10 rtspsrc
location=rtsp://stream.yle.mobi/yle/areena/MEDIA_E0326797_p3_veryhigh.mp4
protocols="tcp" name=s mp4mux name=m ! filesink location=2010.10.25.mp4 s. !
gstrtpjitterbuffer ! rtpmp4adepay ! aacparse ! progressreport ! m. s. !
gstrtpjitterbuffer ! rtph264depay byte-stream=false ! h264parse
output-format=sample ! m.

The exact rtsp uris expire after some time, but one can use any uri from e.g.:
http://m.yle.fi/w/areena/tv/ohjelmat/?l=15&o=0

Unfortunately you still need to apply the first hack from bug #625825 to allow
inserting aacparse in the above pipeline.

-- 
Configure bugmail: https://bugzilla.gnome.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the QA contact for the bug.
You are the assignee for the bug.