[Bug 673413] New: tsdemux causes random segfaults on start of playback

[GStreamer (bugzilla.gnome.org)]

https://bugzilla.gnome.org/show_bug.cgi?id=673413
  GStreamer | gst-plugins-bad | git

           Summary: tsdemux causes random segfaults on start of playback
    Classification: Platform
           Product: GStreamer
           Version: git
        OS/Version: Linux
            Status: UNCONFIRMED
          Severity: normal
          Priority: Normal
         Component: gst-plugins-bad
        AssignedTo: gstreamer-bugs at lists.freedesktop.org
        ReportedBy: julian at jusst.de
         QAContact: gstreamer-bugs at lists.freedesktop.org
     GNOME version: ---


Using gst-plugins-bad from git 0.10 branch one gets segementation faults with
mpegts input, when a pipeline is stopped and started again. The crash leads to
many different backtraces, but this one seems to be most interesting:

--

Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 0x7ffff0f17700 (LWP 31258)]
0x00007ffff654fee5 in g_slice_alloc () from /usr/lib/libglib-2.0.so.0
(gdb) bt
#0  0x00007ffff654fee5 in g_slice_alloc () from /usr/lib/libglib-2.0.so.0
#1  0x00007ffff652f29e in g_list_prepend () from /usr/lib/libglib-2.0.so.0
#2  0x00007ffff3acef52 in gst_ts_demux_queue_data (packet=0x7ffff0f16cb0,
stream=0x7fffe4059320, demux=0x87a2c0)
    at ../../../gst/mpegtsdemux/tsdemux.c:1382
#3  gst_ts_demux_handle_packet (section=<optimized out>, packet=0x7ffff0f16cb0,
stream=0x7fffe4059320, 
    demux=0x87a2c0) at ../../../gst/mpegtsdemux/tsdemux.c:1591
#4  gst_ts_demux_push (base=0x87a2c0, packet=0x7ffff0f16cb0, section=<optimized
out>)
    at ../../../gst/mpegtsdemux/tsdemux.c:1623
#5  0x00007ffff3ac086f in mpegts_base_push (section=0x0, packet=0x7ffff0f16cb0,
base=0x87a2c0)
    at ../../../gst/mpegtsdemux/mpegtsbase.c:1362
#6  mpegts_base_chain (pad=<optimized out>, buf=<optimized out>) at
../../../gst/mpegtsdemux/mpegtsbase.c:1413
#7  0x00007ffff3ac0d64 in mpegts_base_loop (base=0x87a2c0) at
../../../gst/mpegtsdemux/mpegtsbase.c:1557
#8  0x00007ffff7923124 in gst_task_func (task=0x88f670) at gsttask.c:328
#9  0x00007ffff655c6a8 in ?? () from /usr/lib/libglib-2.0.so.0
#10 0x00007ffff655a186 in ?? () from /usr/lib/libglib-2.0.so.0
#11 0x00007ffff62dbdaa in start_thread () from /lib/libpthread.so.0
#12 0x00007ffff601709d in clone () from /lib/libc.so.6
--

To easily reproduce this I used gst-auto-launch tool from
https://github.com/tigrux/gst-auto-launch. Calling it like this:

gst-auto-launch playbin2 flags=0x160 videosink="glessink"
uri=file:///home/julian/full.ts 0:play 10:stop 11:play 20:stop 21:play

The crash does not occur when testing the same with the ts file remuxed into
mp4 container, so it seems to be tsdemux specific.

-- 
Configure bugmail: https://bugzilla.gnome.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the QA contact for the bug.
You are the assignee for the bug.