[Bug 776303] vaapisink: race condition during caps negotiation with multiple src elements

Wed Dec 21 08:30:25 UTC 2016

https://bugzilla.gnome.org/show_bug.cgi?id=776303

--- Comment #3 from Hyunjun Ko <zzoon at igalia.com> ---
#0  0x00007ffff69bc428 in __GI_raise (sig=sig at entry=6) at
../sysdeps/unix/sysv/linux/raise.c:54
#1  0x00007ffff69be02a in __GI_abort () at abort.c:89
#2  0x00007ffff69fe7ea in __libc_message (do_abort=do_abort at entry=2,
fmt=fmt at entry=0x7ffff6b172e0 "*** Error in `%s': %s: 0x%s ***\n") at
../sysdeps/posix/libc_fatal.c:175
#3  0x00007ffff6a06e0a in malloc_printerr (ar_ptr=<optimized out>,
ptr=<optimized out>, str=0x7ffff6b173a8 "double free or corruption (fasttop)",
action=3) at malloc.c:5004
#4  _int_free (av=<optimized out>, p=<optimized out>, have_lock=1) at
malloc.c:3865
#5  0x00007ffff6a098f9 in _int_realloc (av=av at entry=0x7fffd0000020,
oldp=oldp at entry=0x7fffd0005cf0, oldsize=oldsize at entry=32, nb=nb at entry=48) at
malloc.c:4356
#6  0x00007ffff6a0ac89 in __GI___libc_realloc (oldmem=0x7fffd0005d00, bytes=32)
at malloc.c:3043
#7  0x00007ffff6fbc7e8 in g_realloc () from
/lib/x86_64-linux-gnu/libglib-2.0.so.0
#8  0x00007ffff6f8a399 in ?? () from /lib/x86_64-linux-gnu/libglib-2.0.so.0
#9  0x00007ffff6f8a718 in g_array_append_vals () from
/lib/x86_64-linux-gnu/libglib-2.0.so.0
#10 0x00007fffe8c616c5 in append_format (flags=<optimized out>,
format=GST_VIDEO_FORMAT_I420, formats=0x7fffdc007b00) at gstvaapidisplay.c:238
#11 append_formats (formats=0x7fffdc007b00,
va_formats=va_formats at entry=0x7fffd0005910, flags=flags at entry=0x0, n=<optimized
out>) at gstvaapidisplay.c:261
#12 0x00007fffe8c6197d in ensure_image_formats (display=display at entry=0x859350)
at gstvaapidisplay.c:730
#13 0x00007fffe8c62fbe in gst_vaapi_display_get_image_formats
(display=display at entry=0x859350) at gstvaapidisplay.c:1561
#14 0x00007fffe8c3b10a in ensure_allowed_raw_caps (plugin=0x89d1f0) at
gstvaapipluginbase.c:1136
#15 gst_vaapi_plugin_base_get_allowed_raw_caps (plugin=plugin at entry=0x89d1f0)
at gstvaapipluginbase.c:1195
#16 0x00007fffe8c42248 in gst_vaapisink_get_caps_impl (base_sink=0x89d1f0) at
gstvaapisink.c:1250
#17 gst_vaapisink_get_caps (base_sink=0x89d1f0, filter=0x0) at
gstvaapisink.c:1270
#18 0x00007ffff47c6318 in gst_base_sink_query_caps (bsink=bsink at entry=0x89d1f0,
pad=<optimized out>, filter=0x0) at gstbasesink.c:572
#19 0x00007ffff47cda96 in gst_base_sink_default_query (basesink=0x89d1f0,
query=0x7fffd0002400) at gstbasesink.c:4979
#20 0x00007ffff781f409 in gst_validate_pad_monitor_query_func (pad=0x85db40,
parent=0x89d1f0, query=0x7fffd0002400) at gst-validate-pad-monitor.c:2228
#21 0x00007ffff754b798 in gst_pad_query (pad=pad at entry=0x85db40,
query=query at entry=0x7fffd0002400) at gstpad.c:3949
#22 0x00007ffff754bd63 in gst_pad_peer_query (pad=pad at entry=0x83a110,
query=0x7fffd0002400) at gstpad.c:4081
#23 0x00007ffff75826d8 in query_caps_func (pad=pad at entry=0x83a110,
data=data at entry=0x7fffdbffdd70) at gstutils.c:2621
#24 0x00007ffff754a36e in gst_pad_forward (pad=pad at entry=0x838050,
forward=forward at entry=0x7ffff75826b0 <query_caps_func>,
user_data=user_data at entry=0x7fffdbffdd70) at gstpad.c:2945
#25 0x00007ffff7584fd2 in gst_pad_proxy_query_caps (pad=pad at entry=0x838050,
query=query at entry=0x7fffd0002400) at gstutils.c:2671
#26 0x00007ffff754a6a0 in gst_pad_query_caps_default (query=0x7fffd0002400,
pad=0x838050) at gstpad.c:3124
#27 gst_pad_query_default (pad=0x838050, parent=<optimized out>,
query=0x7fffd0002400) at gstpad.c:3356
#28 0x00007ffff754b798 in gst_pad_query (pad=pad at entry=0x838050,
query=query at entry=0x7fffd0002400) at gstpad.c:3949
#29 0x00007ffff754bd63 in gst_pad_peer_query (pad=pad at entry=0x7f2970,
query=query at entry=0x7fffd0002400) at gstpad.c:4081
#30 0x00007ffff7587dd4 in gst_pad_peer_query_caps (pad=pad at entry=0x7f2970,
filter=filter at entry=0x0) at gstutils.c:2951
#31 0x00007ffff47e0d54 in gst_base_transform_query_caps (filter=0x0,
pad=0x7f2730, trans=0x8340d0) at gstbasetransform.c:740
#32 gst_base_transform_default_query (trans=0x8340d0, direction=<optimized
out>, query=0x7fffcc002370) at gstbasetransform.c:1603
#33 0x00007ffff781f409 in gst_validate_pad_monitor_query_func (pad=0x7f2730,
parent=0x8340d0, query=0x7fffcc002370) at gst-validate-pad-monitor.c:2228
#34 0x00007ffff754b798 in gst_pad_query (pad=pad at entry=0x7f2730,
query=query at entry=0x7fffcc002370) at gstpad.c:3949
#35 0x00007ffff754bd63 in gst_pad_peer_query (pad=pad at entry=0x7f24f0,
query=query at entry=0x7fffcc002370) at gstpad.c:4081
#36 0x00007ffff7587dd4 in gst_pad_peer_query_caps (pad=pad at entry=0x7f24f0,
filter=filter at entry=0x0) at gstutils.c:2951
#37 0x00007fffeaffa5bc in gst_deinterlace_getcaps (filter=0x7dca30,
pad=0x7f22b0, self=0x801000) at gstdeinterlace.c:2315
#38 gst_deinterlace_sink_query (pad=0x7f22b0, parent=<optimized out>,
query=0x7fffcc002320) at gstdeinterlace.c:2965
#39 0x00007ffff781f409 in gst_validate_pad_monitor_query_func (pad=0x7f22b0,
parent=0x801000, query=0x7fffcc002320) at gst-validate-pad-monitor.c:2228
#40 0x00007ffff754b798 in gst_pad_query (pad=pad at entry=0x7f22b0,
query=query at entry=0x7fffcc002320) at gstpad.c:3949
#41 0x00007ffff754bd63 in gst_pad_peer_query (pad=pad at entry=0x7f2070,
query=query at entry=0x7fffcc002320) at gstpad.c:4081
#42 0x00007ffff7587dd4 in gst_pad_peer_query_caps (pad=pad at entry=0x7f2070,
filter=filter at entry=0x7dca30) at gstutils.c:2951
#43 0x00007fffeb23c0ad in gst_video_aggregator_pad_sink_getcaps
(filter=0x7fffcc002280, vagg=0x7efe20, pad=0x851580) at
gstvideoaggregator.c:963
#44 gst_video_aggregator_sink_query (agg=<optimized out>, bpad=0x851580,
query=0x7fffcc0022d0) at gstvideoaggregator.c:2031
#45 0x00007fffeb65b0e9 in _sink_query (agg=0x7efe20, bpad=0x851580,
query=0x7fffcc0022d0) at compositor.c:1096
#46 0x00007ffff781f409 in gst_validate_pad_monitor_query_func (pad=0x851580,
parent=0x7efe20, query=0x7fffcc0022d0) at gst-validate-pad-monitor.c:2228
#47 0x00007ffff754b798 in gst_pad_query (pad=pad at entry=0x851580,
query=query at entry=0x7fffcc0022d0) at gstpad.c:3949
#48 0x00007ffff754bd63 in gst_pad_peer_query (pad=pad at entry=0x7f3930,
query=query at entry=0x7fffcc0022d0) at gstpad.c:4081
---Type <return> to continue, or q <return> to quit---
#49 0x00007ffff7587dd4 in gst_pad_peer_query_caps (pad=pad at entry=0x7f3930,
filter=filter at entry=0x7fffcc002280) at gstutils.c:2951
#50 0x00007ffff47e09b5 in gst_base_transform_query_caps (filter=0x7dcde0,
pad=0x7f36f0, trans=0x852600) at gstbasetransform.c:740
#51 gst_base_transform_default_query (trans=0x852600, direction=<optimized
out>, query=0x7fffcc002230) at gstbasetransform.c:1603
#52 0x00007ffff781f409 in gst_validate_pad_monitor_query_func (pad=0x7f36f0,
parent=0x852600, query=0x7fffcc002230) at gst-validate-pad-monitor.c:2228
#53 0x00007ffff754b798 in gst_pad_query (pad=pad at entry=0x7f36f0,
query=query at entry=0x7fffcc002230) at gstpad.c:3949
#54 0x00007ffff754bd63 in gst_pad_peer_query (pad=pad at entry=0x7f3030,
query=query at entry=0x7fffcc002230) at gstpad.c:4081
#55 0x00007ffff7587dd4 in gst_pad_peer_query_caps (pad=0x7f3030,
filter=filter at entry=0x7dcde0) at gstutils.c:2951
#56 0x00007ffff47d9a7b in gst_base_src_default_negotiate (basesrc=0x8490d0) at
gstbasesrc.c:3211
#57 0x00007ffff47d7a9c in gst_base_src_negotiate (basesrc=0x8490d0) at
gstbasesrc.c:3275
#58 gst_base_src_loop (pad=0x7f3030) at gstbasesrc.c:2703
#59 0x00007ffff7579981 in gst_task_func (task=0x8a6290) at gsttask.c:334
#60 0x00007ffff6fde55e in ?? () from /lib/x86_64-linux-gnu/libglib-2.0.so.0
#61 0x00007ffff6fddbc5 in ?? () from /lib/x86_64-linux-gnu/libglib-2.0.so.0
#62 0x00007ffff6d576ba in start_thread (arg=0x7fffdbfff700) at
pthread_create.c:333
#63 0x00007ffff6a8d82d in clone () at
../sysdeps/unix/sysv/linux/x86_64/clone.S:109

-- 
You are receiving this mail because:
You are the QA Contact for the bug.
You are the assignee for the bug.