[xine-bugs] [ xine-Bugs-1550503 ] xine crashes on attached file

[SourceForge.net <no...@so...>]

Bugs item #1550503, was opened at 2006-09-01 14:46
Message generated for change (Comment added) made by dgp85
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=109655&aid=1550503&group_id=9655

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: None
Group: v1.1.2
>Status: Closed
>Resolution: Fixed
Priority: 5
Submitted By: Rihards (richlv)
Assigned to: Diego Pettenò (dgp85)
Summary: xine crashes on attached file

Initial Comment:
slackware packages, xine 1.1.2
backtrace isn't extremly long (also no debugging in 
xine build) :
#0  0xb1f9562c in ic_prediction () from /usr/lib/xine/
plugins/1.1.2/xineplug_decode_faad.so

testcase file attached (it's trimmed, but xine still 
crashes on it).
if this is not reproducible, i can provide full file.

this seems quite similar to bug 1466211, faad is 
mentioned again :)

----------------------------------------------------------------------

Comment By: Diego Pettenò (dgp85)
Date: 2006-09-29 22:51

Message:
Logged In: YES 
user_id=60011

This bug entry is believed to be fixed in CVS.
Please reopen it if needed.


----------------------------------------------------------------------

Comment By: Diego Pettenò (dgp85)
Date: 2006-09-01 15:58

Message:
Logged In: YES 
user_id=60011

Okay, with -fno-inline I have more useful results:

#4  ic_predict (state=0x0, input=0, output=0x437ff580, 
pred=0 '\0') at ic_predict.c:92
#5  0x00002aaaaddc51f7 in ic_prediction (ics=0x438005c6, 
spec=0x437ff580, state=0x0, frame_len=1024, 
sf_index=10 '\n') at ic_predict.c:248
#6  0x00002aaaaddd5d5e in reconstruct_single_channel 
(hDecoder=0x127e2e0, ics=0x438005c6, sce=0x438005c0, 
spec_data=0x43805770) at specrec.c:880
#7  0x00002aaaaddd7dea in single_lfe_channel_element 
(hDecoder=0x127e2e0, ld=0x43806040, channel=2 '\002', 
tag=0x43805fc7 "") at syntax.c:596
#8  0x00002aaaaddd7e7a in decode_sce_lfe (hDecoder=0x0, 
hInfo=0x127a090, ld=0x437ff580, id_syn_ele=<value 
optimized out>) at syntax.c:345
#9  0x00002aaaaddd7f95 in raw_data_block 
(hDecoder=0x127e2e0, hInfo=0x127a090, ld=0x43806040, 
pce=0x127ee21, drc=0x127f0a0) at syntax.c:445
#10 0x00002aaaaddc19a7 in aac_frame_decode 
(hDecoder=0x127e2e0, hInfo=0x127a090, 
buffer=0x127a700 "r�005B(UY�i2K]�sȿZ?��\023�237\223�032", 
buffer_size=8192,
    sample_buffer2=0x0, sample_buffer_size=0) at 
decoder.c:817
#11 0x00002aaaaddd8dbc in faad_decode_audio 
(this=0x127a050, end_frame=4) at xine_decoder.c:224
#12 0x00002b751ef23100 in audio_decoder_loop 
(stream_gen=<value optimized out>) at audio_decoder.c:361


----------------------------------------------------------------------

Comment By: Diego Pettenò (dgp85)
Date: 2006-09-01 15:03

Message:
Logged In: YES 
user_id=60011

Can reproduce, seems like faad code is kinda funky on that 
place. Full backtrace:

#3  <signal handler called>
#4  ic_prediction (ics=0x448025f6, spec=0x448015a0, 
state=0x0, frame_len=1024, sf_index=10 '\n') at 
ic_predict.c:75
#5  0x00002aaab1a8e578 in reconstruct_single_channel 
(hDecoder=0x1276b60, ics=0x448025f6, sce=0x448025f0, 
spec_data=0x448077a0) at specrec.c:880
#6  0x00002aaab1a90415 in decode_sce_lfe 
(hDecoder=0x1276b60, hInfo=0x1272910, ld=0x44808040, 
id_syn_ele=<value optimized out>) at syntax.c:596
#7  0x00002aaab1a90568 in raw_data_block 
(hDecoder=0x1276b60, hInfo=0x1272910, ld=0x44808040, 
pce=0x12776a1, drc=0x1277920) at syntax.c:445
#8  0x00002aaab1a7a56a in aac_frame_decode 
(hDecoder=0x1276b60, hInfo=0x1272910, 
buffer=0x1272ff5 "\004%\200�%U\235c", buffer_size=8192, 
sample_buffer2=0x0, sample_buffer_size=0)
    at decoder.c:817
#9  0x00002aaab1a9134a in faad_decode_data 
(this_gen=0x12728d0, buf=<value optimized out>) at 
xine_decoder.c:224
#10 0x00002b302e942e2c in audio_decoder_loop 
(stream_gen=<value optimized out>) at audio_decoder.c:361
#11 0x00002b302ea7c0fa in start_thread (arg=<value 
optimized out>) at pthread_create.c:261
#12 0x00002b302f5dff1d in clone () from /lib/libc.so.6
#13 0x0000000000000000 in ?? ()


----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=109655&aid=1550503&group_id=9655