[Bug 730167] New: panic in gst_bin_continue_func() when doing continuous zap operations

[GStreamer (bugzilla.gnome.org)]

https://bugzilla.gnome.org/show_bug.cgi?id=730167
  GStreamer | gstreamer (core) | 0.10.34

           Summary: panic in gst_bin_continue_func() when doing continuous
                    zap operations
    Classification: Platform
           Product: GStreamer
           Version: 0.10.34
        OS/Version: Windows
            Status: UNCONFIRMED
          Severity: normal
          Priority: Normal
         Component: gstreamer (core)
        AssignedTo: gstreamer-bugs at lists.freedesktop.org
        ReportedBy: bcxa.sz at gmail.com
         QAContact: gstreamer-bugs at lists.freedesktop.org
     GNOME version: ---


The panic is like below:

Program terminated with signal 11, Segmentation fault.
#0 0x36309348 in g_static_rec_mutex_get_rec_mutex_impl (mutex=0x0)
at ../../glib/deprecated/gthread-deprecated.c:676
676    ../../glib/deprecated/gthread-deprecated.c: No such file or directory.
(gdb) bt
#0 0x36309348 in g_static_rec_mutex_get_rec_mutex_impl (mutex=0x0)
at ../../glib/deprecated/gthread-deprecated.c:676
#1 0x363099f4 in g_static_rec_mutex_lock (mutex=0x0)
at ../../glib/deprecated/gthread-deprecated.c:711
#2 0x3664d938 in gst_bin_continue_func (data=0x8254650) at gstbin.c:2741
#3 0x3636c7f0 in g_thread_pool_thread_proxy (data=<optimized out>)
at ../../glib/gthreadpool.c:309
#4 0x3636ba4c in g_thread_proxy (data=0x7a276c0) at ../../glib/gthread.c:797
#5 0x3419e898 in start_thread (arg=0x3419e898) at pthread_create.c:299
#6 0x33ff4a98 in clone ()
at ../ports/sysdeps/unix/sysv/linux/arm/nptl/../clone.S:100
#7 0x33ff4a98 in clone ()
at ../ports/sysdeps/unix/sysv/linux/arm/nptl/../clone.S:100
Backtrace stopped: previous frame identical to this frame (corrupt stack?)
(gdb) frame 2
#2 0x3664d938 in gst_bin_continue_func (data=0x8254650) at gstbin.c:2741
2741    gstbin.c: No such file or directory.
(gdb) print *data
$1 = {bin = 0x2329380, cookie = 1, pending = GST_STATE_PLAYING}
(gdb) print *(GstBin*)0x2329380
$2 = {element = {object = {object = {g_type_instance = {g_class = 0x2329268}, 
ref_count = 0, qdata = 0x0}, refcount = 0, lock = 0xde16540, 
name = 0x83aa470 "0\343M", name_prefix = 0x0, parent = 0x0, flags = 2, 
_gst_reserved = 0x0}, state_lock = 0x0, state_cond = 0x0, 
state_cookie = 2, current_state = GST_STATE_NULL, 
next_state = GST_STATE_VOID_PENDING, 
pending_state = GST_STATE_VOID_PENDING, 
last_return = GST_STATE_CHANGE_SUCCESS, bus = 0x0, clock = 0x0, 
base_time = 0, numpads = 0, pads = 0x0, numsrcpads = 0, srcpads = 0x0, 
numsinkpads = 0, sinkpads = 0x0, pads_cookie = 0, abidata = {ABI = {
target_state = GST_STATE_NULL, start_time = 0}, _gst_reserved = {0x1, 
0x0, 0x0, 0x0}}}, numchildren = 0, children = 0x0, 
children_cookie = 8, child_bus = 0x0, messages = 0x0, polling = 0, 
state_dirty = 0, clock_dirty = 0, provided_clock = 0x0, 
clock_provider = 0x0, priv = 0x2329468, _gst_reserved = {0x0, 0x0, 0x0}}
(gdb) print *(GstObject*)0x2329380
$3 = {object = {g_type_instance = {g_class = 0x2329268}, ref_count = 0, 
qdata = 0x0}, refcount = 0, lock = 0xde16540, name = 0x83aa470 "0\343M", 
name_prefix = 0x0, parent = 0x0, flags = 2, _gst_reserved = 0x0}
(gdb) print *(gchar*)0x83aa470
$4 = 48 '0'
===================================================

Note: state_lock = 0x0 is definitely wrong which makes segmenation fault
because  after this lock will be accessed as point.

-- 
Configure bugmail: https://bugzilla.gnome.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the QA contact for the bug.
You are the assignee for the bug.