[Bug 667568] New: [0.11] [wma9] Segfaults when playing/discovering ASF file

[GStreamer (bugzilla.gnome.org)]

https://bugzilla.gnome.org/show_bug.cgi?id=667568
  GStreamer | gst-ffmpeg | 0.11.x

           Summary: [0.11] [wma9] Segfaults when playing/discovering ASF
                    file
    Classification: Platform
           Product: GStreamer
           Version: 0.11.x
        OS/Version: Linux
            Status: NEW
          Severity: blocker
          Priority: Normal
         Component: gst-ffmpeg
        AssignedTo: gstreamer-bugs at lists.freedesktop.org
        ReportedBy: slomo at circular-chaos.org
         QAContact: gstreamer-bugs at lists.freedesktop.org
     GNOME version: ---


http://samples.mplayerhq.hu/A-codecs/WMA9/wmv-surroundtest_720p.wmv


Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 0x7ffff2edf700 (LWP 9055)]
put_bits (value=0, n=16, s=<optimized out>) at libavcodec/put_bits.h:157
157            AV_WB32(s->buf_ptr, bit_buf);
(gdb) bt
#0  put_bits (value=0, n=16, s=<optimized out>) at libavcodec/put_bits.h:157
#1  ff_copy_bits (pb=0x7ffff7f94640, 
    src=0x7fffec152eb3 "\337\377\200\001L\020\016p*D0ŗ\001\065\241R)\n\332
\265\265\220\201P$\217S\024\201^Ș\301\023d\211P1F\251\361x\362\264\232?\222\265\210G>\021\231<\350\351\211\341D{d\256-\205\f1\334
\223g\372\330\323dF\311e\326ߌk\314:ns1\334P4\027\220\070\002 !\236\034\036
\304\371\257\210;.$Q\005\266\234~\254w\344\342\207W\a\222\274\"\370,\365\\\b\223\020\026
wB\254\222\231\301\003xuÅ)x\210\305>\v-\244jqZr\264\\\201\210\020\217T*\216H\020\302\360\364A\021\177\310\355\004\071f;\210}\205\236\212\220\326\371\243",
<incomplete sequence \351>, 
    length=65512) at libavcodec/bitstream.c:68
#2  0x00007ffff1cd36c8 in save_bits (s=0x7ffff7f8b040, gb=0x7ffff7f990c8, 
    len=65512, append=<optimized out>) at libavcodec/wmaprodec.c:1456
#3  0x00007ffff1cd39b8 in decode_packet (avctx=<optimized out>, 
    data=0x7fffec31d000, data_size=0x7ffff2edeacc, avpkt=<optimized out>)
    at libavcodec/wmaprodec.c:1530
#4  0x00007ffff1c680aa in avcodec_decode_audio3 (avctx=0x83ff80, 
    samples=<optimized out>, frame_size_ptr=<optimized out>, 
    avpkt=<optimized out>) at libavcodec/utils.c:770
#5  0x00007ffff1929e3f in gst_ffmpegdec_audio_frame (ret=0x7ffff2edebcc, 
    outbuf=0x7ffff2edeaa0, dec_info=0x83dd08, size=8192, 
    data=0x7fffec152eb0 "&A>\337\377\200\001L\020\016p*D0ŗ\001\065\241R)\n\332
\265\265\220\201P$\217S\024\201^Ș\301\023d\211P1F\251\361x\362\264\232?\222\265---Type
<return> to continue, or q <return> to quit---
\210G>\021\231<\350\351\211\341D{d\256-\205\f1\334
\223g\372\330\323dF\311e\326ߌk\314:ns1\334P4\027\220\070\002 !\236\034\036
\304\371\257\210;.$Q\005\266\234~\254w\344\342\207W\a\222\274\"\370,\365\\\b\223\020\026
wB\254\222\231\301\003xuÅ)x\210\305>\v-\244jqZr\264\\\201\210\020\217T*\216H\020\302\360\364A\021\177\310\355\004\071f;\210}\205\236\212\220\326\371\243",
<incomplete sequence \351>, ffmpegdec=0x83d960, in_plugin=<optimized out>) at
gstffmpegdec.c:2223
#6  gst_ffmpegdec_frame (ffmpegdec=0x83d960, 
    data=0x7fffec152eb0 "&A>\337\377\200\001L\020\016p*D0ŗ\001\065\241R)\n\332
\265\265\220\201P$\217S\024\201^Ș\301\023d\211P1F\251\361x\362\264\232?\222\265\210G>\021\231<\350\351\211\341D{d\256-\205\f1\334
\223g\372\330\323dF\311e\326ߌk\314:ns1\334P4\027\220\070\002 !\236\034\036
\304\371\257\210;.$Q\005\266\234~\254w\344\342\207W\a\222\274\"\370,\365\\\b\223\020\026
wB\254\222\231\301\003xuÅ)x\210\305>\v-\244jqZr\264\\\201\210\020\217T*\216H\020\302\360\364A\021\177\310\355\004\071f;\210}\205\236\212\220\326\371\243",
<incomplete sequence \351>, size=8192, got_data=0x7ffff2edebc8,
dec_info=0x83dd08, ret=0x7ffff2edebcc)
    at gstffmpegdec.c:2357
#7  0x00007ffff192cd72 in gst_ffmpegdec_chain (pad=<optimized out>, 
    parent=0x83d960, inbuf=0x7fffec04c060) at gstffmpegdec.c:2808
#8  0x00007ffff727feba in gst_pad_chain_data_unchecked (data=0x7fffec04c060, 
    type=<optimized out>, pad=0x79d1b0) at gstpad.c:3306
#9  gst_pad_push_data (pad=0x79cfb0, type=<optimized out>, 
    data=<optimized out>) at gstpad.c:3509
---Type <return> to continue, or q <return> to quit---
#10 0x00007ffff4cdcbee in gst_single_queue_push_one (object=0x7fffec04c060, 
    sq=0x7bf240, mq=0x7f6070) at gstmultiqueue.c:1056
#11 gst_multi_queue_loop (pad=<optimized out>) at gstmultiqueue.c:1287
#12 0x00007ffff72adc80 in gst_task_func (task=0x7f45a0) at gsttask.c:322
#13 0x00007ffff67413e4 in g_thread_pool_thread_proxy (data=<optimized out>)
    at /tmp/buildd/glib2.0-2.28.6/./glib/gthreadpool.c:319
#14 0x00007ffff673ecf6 in g_thread_create_proxy (data=0x7f5b70)
    at /tmp/buildd/glib2.0-2.28.6/./glib/gthread.c:1897
#15 0x00007ffff64bcb40 in start_thread (arg=<optimized out>)
    at pthread_create.c:304
#16 0x00007ffff620736d in clone ()
    at ../sysdeps/unix/sysv/linux/x86_64/clone.S:112
#17 0x0000000000000000 in ?? ()

-- 
Configure bugmail: https://bugzilla.gnome.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the QA contact for the bug.
You are the assignee for the bug.