[Bug 680558] rtpmparobustdepay: invalid memory access with mp3 rtsp stream

[GStreamer (bugzilla.gnome.org)]

https://bugzilla.gnome.org/show_bug.cgi?id=680558
  GStreamer | gst-plugins-good | 0.11.x

--- Comment #7 from Tim-Philipp Müller <t.i.m at zen.co.uk> 2012-08-04 14:55:10 UTC ---
Indeed, I also believe now that the main problem is buffer management going
wrong somewhere.

Btw, bugzilla combined my last two puzzle pieces into one stack trace (those
are not separate threads, but two separate traces), so I'm reposting the last
one again here (sorry for spam):

And (with fakesink enable-last-sample=false):

*** glibc detected ***
/home/tpm/gst/0.11/gstreamer/tools/.libs/lt-gst-launch-1.0: munmap_chunk():
invalid pointer: 0x000000000068ecd0 ***

Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 0x7ffff3c4c700 (LWP 19656)]
0x00007ffff6861dbd in malloc_consolidate (av=0x7ffff6b6ee60) at malloc.c:5169
5169    malloc.c: No such file or directory.
(gdb) bt
#0  0x00007ffff6861dbd in malloc_consolidate (av=0x7ffff6b6ee60) at
malloc.c:5169
#1  0x00007ffff68642a4 in _int_malloc (av=0x7ffff6b6ee60, bytes=1174) at
malloc.c:4373
#2  0x00007ffff6865f42 in __libc_calloc (n=<optimized out>,
elem_size=<optimized out>) at malloc.c:4065
#3  0x00007ffff7de7abf in ?? () from /lib64/ld-linux-x86-64.so.2
#4  0x00007ffff7de3126 in ?? () from /lib64/ld-linux-x86-64.so.2
#5  0x00007ffff7de495a in ?? () from /lib64/ld-linux-x86-64.so.2
#6  0x00007ffff7def10e in ?? () from /lib64/ld-linux-x86-64.so.2
#7  0x00007ffff7deabd6 in ?? () from /lib64/ld-linux-x86-64.so.2
#8  0x00007ffff7deeb4a in ?? () from /lib64/ld-linux-x86-64.so.2
#9  0x00007ffff68fad00 in do_dlopen (ptr=0x7ffff3c4aa40) at dl-libc.c:86
#10 0x00007ffff7deabd6 in ?? () from /lib64/ld-linux-x86-64.so.2
#11 0x00007ffff68fad9f in dlerror_run (operate=0x21, args=0x7ffff6b6ee60) at
dl-libc.c:47
#12 0x00007ffff68fae97 in *__GI___libc_dlopen_mode (name=<optimized out>,
mode=<optimized out>) at dl-libc.c:160
#13 0x00007ffff68d8fc5 in init () at ../sysdeps/x86_64/../ia64/backtrace.c:41
#14 0x00007ffff6b7f830 in pthread_once () at
../nptl/sysdeps/unix/sysv/linux/x86_64/pthread_once.S:104
#15 0x00007ffff68d90c4 in *__GI___backtrace (array=<optimized out>, size=64) at
../sysdeps/x86_64/../ia64/backtrace.c:85
#16 0x00007ffff685830f in __libc_message (do_abort=<optimized out>,
fmt=<optimized out>) at ../sysdeps/unix/sysv/linux/libc_fatal.c:168
#17 0x00007ffff6861b46 in malloc_printerr (action=3, str=0x7ffff6938670
"munmap_chunk(): invalid pointer", ptr=<optimized out>) at malloc.c:6283
#18 0x00007ffff7b43b4d in gst_memory_unref (memory=<optimized out>) at
../gst/gstmemory.h:296
#19 _gst_memory_free (mem=0x68ea00) at gstmemory.c:90
#20 0x00007ffff7b1d4e1 in gst_memory_unref (memory=<optimized out>) at
../gst/gstmemory.h:296
#21 _gst_buffer_free (buffer=0x68e070) at gstbuffer.c:531
#22 0x00007ffff5426ad0 in gst_buffer_unref (buf=0x68e070) at
/home/tpm/gst/0.11/gstreamer/gst/gstbuffer.h:351
#23 0x00007ffff5427af0 in gst_rtp_mpa_robust_depay_free_frame (frame=0x7b78f0)
at gstrtpmparobustdepay.c:386
#24 0x00007ffff5427bdd in gst_rtp_mpa_robust_depay_dequeue_frame
(rtpmpadepay=0x7ad870) at gstrtpmparobustdepay.c:402
#25 0x00007ffff5428a77 in gst_rtp_mpa_robust_depay_push_mp3_frames
(rtpmpadepay=0x7ad870) at gstrtpmparobustdepay.c:619
#26 0x00007ffff5428af0 in gst_rtp_mpa_robust_depay_submit_adu
(rtpmpadepay=0x7ad870, buf=0x7b31e0) at gstrtpmparobustdepay.c:639
#27 0x00007ffff5428f4b in gst_rtp_mpa_robust_depay_process (depayload=0x7ad870,
buf=0x7b31e0) at gstrtpmparobustdepay.c:736

-- 
Configure bugmail: https://bugzilla.gnome.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the QA contact for the bug.
You are the assignee for the bug.