[Bug 751000] New: oggdemux: crash with validate.http.media_check.vorbis_theora_1_ogg

[GStreamer (GNOME Bugzilla)]

https://bugzilla.gnome.org/show_bug.cgi?id=751000

            Bug ID: 751000
           Summary: oggdemux: crash with
                    validate.http.media_check.vorbis_theora_1_ogg
    Classification: Platform
           Product: GStreamer
           Version: git master
                OS: Linux
            Status: NEW
          Severity: major
          Priority: Normal
         Component: gst-plugins-base
          Assignee: gstreamer-bugs at lists.freedesktop.org
          Reporter: gdesmott at gnome.org
        QA Contact: gstreamer-bugs at lists.freedesktop.org
     GNOME version: ---

The validate.http.media_check.vorbis_theora_1_ogg test is raising a crash.

#0  0x0000003eb84348d7 in __GI_raise (sig=sig at entry=6) at
../sysdeps/unix/sysv/linux/raise.c:55
#1  0x0000003eb843653a in __GI_abort () at abort.c:89
#2  0x0000003eb8477da3 in __libc_message (do_abort=do_abort at entry=2,
fmt=fmt at entry=0x3eb85872f0 "*** Error in `%s': %s: 0x%s ***\n") at
../sysdeps/posix/libc_fatal.c:175
#3  0x0000003eb84839f5 in __GI___libc_free (ptr=<optimized out>,
str=0x3eb8584f15 "free(): invalid pointer", action=<optimized out>) at
malloc.c:4974
#4  0x0000003eb84839f5 in __GI___libc_free (have_lock=0, p=<optimized out>,
av=<optimized out>) at malloc.c:3841
#5  0x0000003eb84839f5 in __GI___libc_free (mem=<optimized out>) at
malloc.c:2951
#6  0x0000003ebb04f50f in g_free (mem=0x7fe75c001930) at gmem.c:190
#7  0x0000003ebb01d3f1 in array_free (array=0x7fe77802eb30, flags=(FREE_SEGMENT
| PRESERVE_WRAPPER)) at garray.c:365
#8  0x0000003ebb01d649 in g_array_free (farray=<optimized out>,
free_segment=free_segment at entry=1) at garray.c:346
#9  0x00007fe7887345f7 in gst_ogg_chain_free (chain=0x7fe77802db70) at
gstoggdemux.c:2057
#10 0x00007fe78874208f in gst_ogg_demux_finalize (object=0x7fe778032000
[GstOggDemux]) at gstoggdemux.c:2276
#11 0x0000003ebbc14c46 in g_object_unref (_object=0x7fe778032000) at
gobject.c:3170
#12 0x00007fe78c71617e in gst_object_unref (object=<optimized out>) at
gstobject.c:282
#13 0x00007fe78be8a207 in gst_decode_chain_free_internal
(chain=chain at entry=0x7fe7780020c0, hide=hide at entry=0) at gstdecodebin2.c:3288
#14 0x00007fe78be8aab1 in gst_decode_bin_change_state (chain=0x7fe7780020c0) at
gstdecodebin2.c:3308
#15 0x00007fe78be8aab1 in gst_decode_bin_change_state (element=0x13669f0
[GstDecodeBin], transition=<optimized out>) at gstdecodebin2.c:4968
#16 0x00007fe78c73f412 in gst_element_change_state
(element=element at entry=0x13669f0 [GstDecodeBin],
transition=transition at entry=GST_STATE_CHANGE_PAUSED_TO_READY) at
gstelement.c:2604
#17 0x00007fe78c73fa1a in gst_element_set_state_func (element=0x13669f0
[GstDecodeBin], state=GST_STATE_READY) at gstelement.c:2560
#18 0x00007fe78c72065d in gst_bin_change_state_func (next=GST_STATE_READY,
current=GST_STATE_PAUSED, start_time=0, base_time=0, element=0x13669f0
[GstDecodeBin], bin=0x133a030 [GstURIDecodeBin])
    at gstbin.c:2328
#19 0x00007fe78c72065d in gst_bin_change_state_func (element=0x133a030
[GstURIDecodeBin], transition=GST_STATE_CHANGE_PAUSED_TO_READY) at
gstbin.c:2676
#20 0x00007fe78be94cf1 in gst_uri_decode_bin_change_state (element=0x133a030
[GstURIDecodeBin], transition=GST_STATE_CHANGE_PAUSED_TO_READY) at
gsturidecodebin.c:2752
#21 0x00007fe78c73f412 in gst_element_change_state
(element=element at entry=0x133a030 [GstURIDecodeBin],
transition=transition at entry=GST_STATE_CHANGE_PAUSED_TO_READY) at
gstelement.c:2604
#22 0x00007fe78c73fa1a in gst_element_set_state_func (element=0x133a030
[GstURIDecodeBin], state=GST_STATE_READY) at gstelement.c:2560
#23 0x00007fe78c72065d in gst_bin_change_state_func (next=GST_STATE_READY,
current=GST_STATE_PAUSED, start_time=0, base_time=0, element=0x133a030
[GstURIDecodeBin], bin=0x13440d0 [GstPipeline]) at gstbin.c:2328
#24 0x00007fe78c72065d in gst_bin_change_state_func (element=0x13440d0
[GstPipeline], transition=GST_STATE_CHANGE_PAUSED_TO_READY) at gstbin.c:2676
#25 0x00007fe78c73f412 in gst_element_change_state
(element=element at entry=0x13440d0 [GstPipeline],
transition=transition at entry=GST_STATE_CHANGE_PAUSED_TO_READY) at
gstelement.c:2604
#26 0x00007fe78c73fa1a in gst_element_set_state_func (element=0x13440d0
[GstPipeline], state=GST_STATE_READY) at gstelement.c:2560
#27 0x00007fe78d37a6a4 in discoverer_cleanup (dc=dc at entry=0x132f350
[GstDiscoverer]) at gstdiscoverer.c:1534
#28 0x00007fe78d37e738 in gst_discoverer_discover_uri
(discoverer=discoverer at entry=0x132f350 [GstDiscoverer],
uri=uri at entry=0x7fff9aac1676
"http://127.0.0.1:8079/defaults/ogg/vorbis_theora.1.ogg",
err=err at entry=0x7fff9aac0d88) at gstdiscoverer.c:2134
#29 0x00007fe78d5e99e9 in gst_media_descriptor_writer_new_discover
(runner=runner at entry=0x132ab50 [GstValidateRunner], uri=0x7fff9aac1676
"http://127.0.0.1:8079/defaults/ogg/vorbis_theora.1.ogg", full=0,
handle_g_logs=handle_g_logs at entry=1, err=err at entry=0x7fff9aac0d88) at
media-descriptor-writer.c:527
#30 0x00000000004012ba in main (argc=2, argv=0x7fff9aac0f68) at
gst-validate-media-check.c:97

-- 
You are receiving this mail because:
You are the QA Contact for the bug.
You are the assignee for the bug.