[Bug 697720] New: [audioconvert] valgrind invalid read during transcoding in sound-juicer

[GStreamer (bugzilla.gnome.org)]

https://bugzilla.gnome.org/show_bug.cgi?id=697720
  GStreamer | gst-plugins-base | 1.0.6

           Summary: [audioconvert] valgrind invalid read during
                    transcoding in sound-juicer
    Classification: Platform
           Product: GStreamer
           Version: 1.0.6
        OS/Version: Linux
            Status: UNCONFIRMED
          Severity: normal
          Priority: Normal
         Component: gst-plugins-base
        AssignedTo: gstreamer-bugs at lists.freedesktop.org
        ReportedBy: cfergeau at redhat.com
         QAContact: gstreamer-bugs at lists.freedesktop.org
     GNOME version: ---


Caught this in valgrind. I can hit it everytime when trying to rip a CD to ogg
vorbis with sound-juicer 3.5.0 compiled with gstreamer 1.0 support. Not sure
whether to report this against gstreamer or liborc, but I couldn't find a bug
tracker for liborc, so here you are... ;)

gstreamer1-1.0.6-1.fc18.x86_64
gstreamer1-plugins-bad-free-1.0.6-1.fc18.x86_64
gstreamer1-plugins-base-1.0.6-1.fc18.x86_64
gstreamer1-plugins-good-1.0.6-1.fc18.x86_64
orc-0.4.16-7.fc18.x86_64


==13242== Thread 5:
==13242== Invalid read of size 4
==13242==    at 0x32F0610970: orc_code_region_allocate_codemem_dual_map
(orccodemem.c:219)
==13242==    by 0x32F0610BE1: orc_code_region_allocate_codemem
(orccodemem.c:293)
==13242==    by 0x32F0610C84: orc_code_region_new (orccodemem.c:64)
==13242==    by 0x32F0610D3F: orc_code_region_get_free_chunk (orccodemem.c:136)
==13242==    by 0x32F0610DFF: orc_code_allocate_codemem (orccodemem.c:160)
==13242==    by 0x32F06148CA: orc_program_compile_full (orccompiler.c:341)
==13242==    by 0x15BB4D41: audio_convert_orc_unpack_s16 (tmp-orc.c:599)
==13242==    by 0x15BADA8A: audio_convert_convert (audioconvert.c:778)
==13242==    by 0x15BAB6D0: gst_audio_convert_transform (gstaudioconvert.c:801)
==13242==    by 0x3F9E632246: gst_base_transform_handle_buffer
(gstbasetransform.c:2069)
==13242==    by 0x3F9E632B04: gst_base_transform_chain
(gstbasetransform.c:2176)
==13242==    by 0x3F9E25E169: gst_pad_push_data (gstpad.c:3655)
==13242==    by 0x159A492A: gst_audio_rate_chain (gstaudiorate.c:642)
==13242==    by 0x3F9E25E169: gst_pad_push_data (gstpad.c:3655)
==13242==    by 0x179B0D8A: gst_stream_splitter_chain (gststreamsplitter.c:136)
==13242==    by 0x3F9E25E169: gst_pad_push_data (gstpad.c:3655)
==13242==    by 0x18251F4B: gst_queue_loop (gstqueue.c:1054)
==13242==    by 0x3F9E28BB60: gst_task_func (gsttask.c:316)
==13242==    by 0x32D526BE21: g_thread_pool_thread_proxy (gthreadpool.c:309)
==13242==    by 0x32D526B604: g_thread_proxy (gthread.c:797)
==13242==    by 0x32D2E07D14: start_thread (pthread_create.c:308)
==13242==    by 0x32D2AF248C: clone (clone.S:114)
==13242==  Address 0x19d6dbb0 is 16 bytes inside a block of size 19 alloc'd
==13242==    at 0x4A0887C: malloc (vg_replace_malloc.c:270)
==13242==    by 0x32F06108F8: orc_code_region_allocate_codemem_dual_map
(orccodemem.c:204)
==13242==    by 0x32F0610BE1: orc_code_region_allocate_codemem
(orccodemem.c:293)
==13242==    by 0x32F0610C84: orc_code_region_new (orccodemem.c:64)
==13242==    by 0x32F0610D3F: orc_code_region_get_free_chunk (orccodemem.c:136)
==13242==    by 0x32F0610DFF: orc_code_allocate_codemem (orccodemem.c:160)
==13242==    by 0x32F06148CA: orc_program_compile_full (orccompiler.c:341)
==13242==    by 0x15BB4D41: audio_convert_orc_unpack_s16 (tmp-orc.c:599)
==13242==    by 0x15BADA8A: audio_convert_convert (audioconvert.c:778)
==13242==    by 0x15BAB6D0: gst_audio_convert_transform (gstaudioconvert.c:801)
==13242==    by 0x3F9E632246: gst_base_transform_handle_buffer
(gstbasetransform.c:2069)
==13242==    by 0x3F9E632B04: gst_base_transform_chain
(gstbasetransform.c:2176)
==13242==    by 0x3F9E25E169: gst_pad_push_data (gstpad.c:3655)
==13242==    by 0x159A492A: gst_audio_rate_chain (gstaudiorate.c:642)
==13242==    by 0x3F9E25E169: gst_pad_push_data (gstpad.c:3655)
==13242==    by 0x179B0D8A: gst_stream_splitter_chain (gststreamsplitter.c:136)
==13242==    by 0x3F9E25E169: gst_pad_push_data (gstpad.c:3655)
==13242==    by 0x18251F4B: gst_queue_loop (gstqueue.c:1054)
==13242==    by 0x3F9E28BB60: gst_task_func (gsttask.c:316)
==13242==    by 0x32D526BE21: g_thread_pool_thread_proxy (gthreadpool.c:309)
==13242==    by 0x32D526B604: g_thread_proxy (gthread.c:797)
==13242==    by 0x32D2E07D14: start_thread (pthread_create.c:308)
==13242==    by 0x32D2AF248C: clone (clone.S:114)
==13242==-

-- 
Configure bugmail: https://bugzilla.gnome.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the QA contact for the bug.
You are the assignee for the bug.