[Bug 760696] gl: Regression with caps ref-couting

GStreamer (GNOME Bugzilla) bugzilla at gnome.org
Fri Jan 15 18:27:10 PST 2016


https://bugzilla.gnome.org/show_bug.cgi?id=760696

--- Comment #1 from Nicolas Dufresne (stormer) <nicolas.dufresne at collabora.co.uk> ---
Which I catched in valgrind:

==30178== Invalid read of size 4
==30178==    at 0x4E7E26A: gst_caps_get_structure (gstcaps.c:819)
==30178==    by 0xE748887: update_output_format (gstglimagesink.c:1234)
==30178==    by 0xE7493E3: gst_glimage_sink_prepare (gstglimagesink.c:1487)
==30178==    by 0xE2404E9: gst_base_sink_chain_unlocked (gstbasesink.c:3473)
==30178==    by 0xE241425: gst_base_sink_chain_main (gstbasesink.c:3655)
==30178==    by 0xE241594: gst_base_sink_chain (gstbasesink.c:3684)
==30178==    by 0x4EBF6B9: gst_pad_chain_data_unchecked (gstpad.c:4155)
==30178==    by 0x4EC0452: gst_pad_push_data (gstpad.c:4407)
==30178==    by 0x4EC0B7A: gst_pad_push (gstpad.c:4526)
==30178==    by 0xE258F59: gst_base_transform_chain (gstbasetransform.c:2369)
==30178==    by 0x4EBF6B9: gst_pad_chain_data_unchecked (gstpad.c:4155)
==30178==    by 0x4EC0452: gst_pad_push_data (gstpad.c:4407)
==30178==  Address 0x1a4870b8 is 8 bytes inside a block of size 40 free'd
==30178==    at 0x4C29D6A: free (in
/usr/lib64/valgrind/vgpreload_memcheck-amd64-linux.so)
==30178==    by 0x592A5ED: g_free (gmem.c:189)
==30178==    by 0x5941D9C: g_slice_free1 (gslice.c:1112)
==30178==    by 0x58F86A4: array_free (garray.c:379)
==30178==    by 0x4E7CF82: _gst_caps_free (gstcaps.c:204)
==30178==    by 0x4EB2E6D: gst_mini_object_unref (gstminiobject.c:467)
==30178==    by 0xE252533: gst_caps_unref (gstcaps.h:222)
==30178==    by 0xE256128: gst_base_transform_reconfigure
(gstbasetransform.c:1478)
==30178==    by 0xE2579F1: default_submit_input_buffer
(gstbasetransform.c:2026)
==30178==    by 0xE258D59: gst_base_transform_chain (gstbasetransform.c:2326)
==30178==    by 0x4EBF6B9: gst_pad_chain_data_unchecked (gstpad.c:4155)
==30178==    by 0x4EC0452: gst_pad_push_data (gstpad.c:4407)
==30178==  Block was alloc'd at
==30178==    at 0x4C28C50: malloc (in
/usr/lib64/valgrind/vgpreload_memcheck-amd64-linux.so)
==30178==    by 0x592A4D8: g_malloc (gmem.c:94)
==30178==    by 0x5941622: g_slice_alloc (gslice.c:1007)
==30178==    by 0x58F873C: g_array_sized_new (garray.c:193)
==30178==    by 0x4E7D038: gst_caps_init (gstcaps.c:225)
==30178==    by 0x4E7D068: gst_caps_new_empty (gstcaps.c:245)
==30178==    by 0x4E8013E: gst_caps_intersect_first (gstcaps.c:1610)
==30178==    by 0x4E80406: gst_caps_intersect_full (gstcaps.c:1663)
==30178==    by 0xE2551A4: gst_base_transform_find_transform
(gstbasetransform.c:1192)
==30178==    by 0xE255A97: gst_base_transform_setcaps (gstbasetransform.c:1359)
==30178==    by 0xE257747: gst_base_transform_sink_eventfunc
(gstbasetransform.c:1939)
==30178==    by 0xE2575D4: gst_base_transform_sink_event
(gstbasetransform.c:1898)

-- 
You are receiving this mail because:
You are the QA Contact for the bug.
You are the assignee for the bug.


More information about the gstreamer-bugs mailing list