[gstreamer-bugs] [Bug 500467] New: totem crashed with SIGSEGV

SourceForge Headquarters 225 Broadway Suite 1600 San Diego, CA 92101 +1 (858) 454-5900

If you have any questions why you received this email, please see the text at
the end of this email. Replies to this email are NOT read, please see the text
at the end of this email. You can add comments to this bug at:
  http://bugzilla.gnome.org/show_bug.cgi?id=500467

  GStreamer | gst-ffmpeg | Ver: 0.10.2
           Summary: totem crashed with SIGSEGV
           Product: GStreamer
           Version: 0.10.2
          Platform: Other
        OS/Version: Linux
            Status: UNCONFIRMED
          Severity: critical
          Priority: Normal
         Component: gst-ffmpeg
        AssignedTo: gst...@li...
        ReportedBy: pvi...@gn...
         QAContact: gst...@li...
     GNOME version: 2.21/2.22
   GNOME milestone: Unspecified

This report has been filled here: 

https://bugs.launchpad.net/ubuntu/+source/gstreamer0.10-ffmpeg/+bug/162500

"I was attempting to play a .rm file."

file: 

http://launchpadlibrarian.net/10355489/city_lights.rm

"[Switching to Thread -1271817328 (LWP 27629)]
0xb6f0d7f7 in memset () from /lib/tls/i686/cmov/libc.so.6
#0  0xb6f0d7f7 in memset () from /lib/tls/i686/cmov/libc.so.6
#1  0xb4491efc in ff_er_add_slice (s=0x8805800, startx=1, starty=0, endx=0,
    endy=<value optimized out>, status=<value optimized out>)
    at error_resilience.c:638
#2  0xb45649de in rv10_decode_packet (avctx=0x87e80d0,
    buf=<value optimized out>, buf_size=628) at rv10.c:702
#3  0xb4564d9f in rv10_decode_frame (avctx=0x87e80d0, data=0x80cf9c0,
    data_size=0xb4318fa0, buf=0x87f81d8 "\023\004", buf_size=628) at rv10.c:737
#4  0xb439a030 in avcodec_decode_video (avctx=0x87e80d0, picture=0x80cf9c0,
    got_picture_ptr=0xb4318fa0, buf=0x87f81d8 "\023\004", buf_size=628)
    at utils.c:932
#5  0xb43351d7 in gst_ffmpegdec_frame (ffmpegdec=0x87e90a0,
    data=0x87f81d8 "\023\004", size=628, got_data=0xb43190dc,
    in_timestamp=1266000000, in_duration=18446744073709551615, ret=0xb43190d8)
    at gstffmpegdec.c:1212
#6  0xb4336f64 in gst_ffmpegdec_chain (pad=0x869bd40, inbuf=0x87fe638)
    at gstffmpegdec.c:1940
#7  0xb7470399 in gst_pad_chain_unchecked (pad=0x869bd40, buffer=0x87fe638)
    at gstpad.c:3503
#8  0xb7470a66 in gst_pad_push (pad=0x869bc80, buffer=0x87fe638)
    at gstpad.c:3671
#9  0xb5db1198 in gst_queue_loop (pad=0x869bc80) at gstqueue.c:991
#10 0xb748a480 in gst_task_func (task=0x868c680, tclass=0x8692fe0)
    at gsttask.c:192
#11 0xb70534eb in g_thread_pool_thread_proxy (data=0x8693070)
    at /build/buildd/glib2.0-2.14.3/glib/gthreadpool.c:265
#12 0xb705185f in g_thread_create_proxy (data=0x87ec100)
    at /build/buildd/glib2.0-2.14.3/glib/gthread.c:635
#13 0xb6fec46b in start_thread () from /lib/tls/i686/cmov/libpthread.so.0
#14 0xb6f6f74e in clone () from /lib/tls/i686/cmov/libc.so.6
"

"Thread 6 (Thread -1280742512 (LWP 27630)):
#0  0xb6f6f738 in clone () from /lib/tls/i686/cmov/libc.so.6
No symbol table info available.
#1  0x003d0f00 in ?? ()
No symbol table info available.
#2  0x00000000 in ?? ()
No symbol table info available.

Thread 5 (Thread -1271817328 (LWP 27629)):
#0  0xb6f0d7f7 in memset () from /lib/tls/i686/cmov/libc.so.6
No symbol table info available.
#1  0xb4491efc in ff_er_add_slice (s=0x8805800, startx=1, starty=0, endx=0, 
    endy=<value optimized out>, status=<value optimized out>)
    at error_resilience.c:638
        start_i = 1
        end_i = 0
        start_xy = 1
        end_xy = 0
        mask = -128
#2  0xb45649de in rv10_decode_packet (avctx=0x87e80d0, 
    buf=<value optimized out>, buf_size=628) at rv10.c:702
        ret = 1
        s = (MpegEncContext *) 0x8805800
        mb_count = 0
#3  0xb4564d9f in rv10_decode_frame (avctx=0x87e80d0, data=0x80cf9c0, 
    data_size=0xb4318fa0, buf=0x87f81d8 "\023\004", buf_size=628) at rv10.c:737
        i = <value optimized out>
#4  0xb439a030 in avcodec_decode_video (avctx=0x87e80d0, picture=0x80cf9c0, 
    got_picture_ptr=0xb4318fa0, buf=0x87f81d8 "\023\004", buf_size=628)
    at utils.c:932
        ret = 1072894940
#5  0xb43351d7 in gst_ffmpegdec_frame (ffmpegdec=0x87e90a0, 
    data=0x87f81d8 "\023\004", size=628, got_data=0xb43190dc, 
    in_timestamp=1266000000, in_duration=18446744073709551615, ret=0xb43190d8)
    at gstffmpegdec.c:1212
        oclass = (GstFFMpegDecClass *) 0x8787fc0
        outbuf = (GstBuffer *) 0x0
        len = <value optimized out>
        __PRETTY_FUNCTION__ = "gst_ffmpegdec_frame"
#6  0xb4336f64 in gst_ffmpegdec_chain (pad=0x869bd40, inbuf=0x87fe638)
    at gstffmpegdec.c:1940
        res = <value optimized out>
        ffpts = -5260515320258462688
        ffmpegdec = (GstFFMpegDec *) 0x87e90a0
        oclass = (GstFFMpegDecClass *) 0x8787fc0
        data = (guint8 *) 0x87f81d8 "\023\004"
        bdata = (guint8 *) 0x87f81d8 "\023\004"
        size = 1072894940
        bsize = 628
        len = <value optimized out>
        have_data = -1243860028
        ret = GST_FLOW_OK
        left = 0
        in_timestamp = 1266000000
        in_duration = 18446744073709551615
        next_timestamp = 18446744073709551615
        next_duration = 18446744073709551615
        pending_timestamp = 1266000000
        pending_duration = 18446744073709551615
        __PRETTY_FUNCTION__ = "gst_ffmpegdec_chain"
#7  0xb7470399 in gst_pad_chain_unchecked (pad=0x869bd40, buffer=0x87fe638)
    at gstpad.c:3503
        caps = <value optimized out>
        caps_changed = 0
        chainfunc = (GstPadChainFunction) 0xb4336c90 <gst_ffmpegdec_chain>
        ret = <value optimized out>
        __PRETTY_FUNCTION__ = "gst_pad_chain_unchecked"
#8  0xb7470a66 in gst_pad_push (pad=0x869bc80, buffer=0x87fe638)
    at gstpad.c:3671
        peer = (GstPad *) 0x869bd40
        ret = <value optimized out>
        caps = (GstCaps *) 0x8321ca0
        caps_changed = 0
        __PRETTY_FUNCTION__ = "gst_pad_push"
#9  0xb5db1198 in gst_queue_loop (pad=0x869bc80) at gstqueue.c:991
        queue = (GstQueue *) 0x86740f0
        ret = GST_FLOW_OK
        __PRETTY_FUNCTION__ = "gst_queue_loop"
#10 0xb748a480 in gst_task_func (task=0x868c680, tclass=0x8692fe0)
    at gsttask.c:192
        lock = (GStaticRecMutex *) 0x868d370
        tself = (GThread *) 0x87ec100
        __PRETTY_FUNCTION__ = "gst_task_func"
#11 0xb70534eb in g_thread_pool_thread_proxy (data=0x8693070)
    at /build/buildd/glib2.0-2.14.3/glib/gthreadpool.c:265
        task = (gpointer) 0x868c680
        pool = (GRealThreadPool *) 0x8693070
#12 0xb705185f in g_thread_create_proxy (data=0x87ec100)
    at /build/buildd/glib2.0-2.14.3/glib/gthread.c:635
        __PRETTY_FUNCTION__ = "g_thread_create_proxy"
#13 0xb6fec46b in start_thread () from /lib/tls/i686/cmov/libpthread.so.0
No symbol table info available.
#14 0xb6f6f74e in clone () from /lib/tls/i686/cmov/libc.so.6
No symbol table info available.

Thread 4 (Thread -1252906096 (LWP 27624)):
#0  0xffffe410 in __kernel_vsyscall ()
No symbol table info available.
#1  0xb6ff0676 in pthread_cond_wait@@GLIBC_2.3.2 ()
   from /lib/tls/i686/cmov/libpthread.so.0
No symbol table info available.
#2  0xb5db2d2f in gst_queue_chain (pad=0x869bbc0, buffer=0x87fe4f8)
    at gstqueue.c:902
        queue = (GstQueue *) 0x86740f0
        duration = 18446744073709551615
        timestamp = 1266000000
        __PRETTY_FUNCTION__ = "gst_queue_chain"
#3  0xb7470399 in gst_pad_chain_unchecked (pad=0x869bbc0, buffer=0x87fe4f8)
    at gstpad.c:3503
        caps = <value optimized out>
        caps_changed = 0
        chainfunc = (GstPadChainFunction) 0xb5db2b70 <gst_queue_chain>
        ret = <value optimized out>
        __PRETTY_FUNCTION__ = "gst_pad_chain_unchecked"
#4  0xb7470a66 in gst_pad_push (pad=0x869bb00, buffer=0x87fe4f8)
    at gstpad.c:3671
        peer = (GstPad *) 0x869bbc0
        ret = <value optimized out>
        caps = (GstCaps *) 0x8321ca0
        caps_changed = 0
        __PRETTY_FUNCTION__ = "gst_pad_push"
#5  0xb4bd909a in gst_rmdemux_parse_packet (rmdemux=0x81c26a8, 
    data=0x893d96c "", version=0, length=648) at rmdemux.c:2044
        event = <value optimized out>
        stream = (GstRMDemuxStream *) 0x8693520
        buffer = (GstBuffer *) 0x87fe4f8
        packet_size = <value optimized out>
        cret = GST_FLOW_OK
        ret = GST_FLOW_OK
        key = 1
        __PRETTY_FUNCTION__ = "gst_rmdemux_parse_packet"
#6  0xb4bda187 in gst_rmdemux_chain (pad=0x83de718, buffer=0x87fe778)
    at rmdemux.c:1164
        ret = GST_FLOW_OK
        data = (const guint8 *) 0xb6fef8ac "\201ÃHÇ"
        rmdemux = (GstRMDemux *) 0x81c26a8
        __PRETTY_FUNCTION__ = "gst_rmdemux_chain"
#7  0xb4bdacc8 in gst_rmdemux_loop (pad=0x83de718) at rmdemux.c:856
        __txt = <value optimized out>
        __dbg = <value optimized out>
        reason = <value optimized out>
        rmdemux = (GstRMDemux *) 0x81c26a8
        buffer = (GstBuffer *) 0x87fe778
        ret = GST_FLOW_OK
        size = 577
        __PRETTY_FUNCTION__ = "gst_rmdemux_loop"
#8  0xb748a480 in gst_task_func (task=0x8681420, tclass=0x8692fe0)
    at gsttask.c:192
        lock = (GStaticRecMutex *) 0x8692e60
        tself = (GThread *) 0x8375b08
        __PRETTY_FUNCTION__ = "gst_task_func"
#9  0xb70534eb in g_thread_pool_thread_proxy (data=0x8693070)
    at /build/buildd/glib2.0-2.14.3/glib/gthreadpool.c:265
        task = (gpointer) 0x8681420
        pool = (GRealThreadPool *) 0x8693070
#10 0xb705185f in g_thread_create_proxy (data=0x8375b08)
    at /build/buildd/glib2.0-2.14.3/glib/gthread.c:635
        __PRETTY_FUNCTION__ = "g_thread_create_proxy"
#11 0xb6fec46b in start_thread () from /lib/tls/i686/cmov/libpthread.so.0
No symbol table info available.
#12 0xb6f6f74e in clone () from /lib/tls/i686/cmov/libc.so.6
No symbol table info available.

Thread 2 (Thread -1244095600 (LWP 27621)):
#0  0xffffe410 in __kernel_vsyscall ()
No symbol table info available.
#1  0xb6ff39f6 in ?? () from /lib/tls/i686/cmov/libpthread.so.0
No symbol table info available.
#2  0xb7053cb2 in IA__g_usleep (microseconds=3050869356)
    at /build/buildd/glib2.0-2.14.3/glib/gtimer.c:170
        request = {tv_sec = 0, tv_nsec = 50000000}
        remaining = {tv_sec = 0, tv_nsec = 29960272}
#3  0xb5d93d60 in ?? () from /usr/lib/gstreamer-0.10/libgstxvimagesink.so
No symbol table info available.
#4  0x0000c350 in ?? ()
No symbol table info available.
#5  0x03400129 in ?? ()
No symbol table info available.
#6  0x00028000 in ?? ()
No symbol table info available.
#7  0xb5d89334 in ?? ()
No symbol table info available.
#8  0x407a9000 in ?? ()
No symbol table info available.
#9  0x00000000 in ?? ()
No symbol table info available.

Thread 1 (Thread -1229015376 (LWP 27617)):
#0  0xffffe410 in __kernel_vsyscall ()
No symbol table info available.
#1  0xb6f68311 in select () from /lib/tls/i686/cmov/libc.so.6
No symbol table info available.
#2  0xb6d2629f in ?? () from /usr/lib/libxcb.so.1
No symbol table info available.
#3  0x00000007 in ?? ()
No symbol table info available.
#4  0xbfc696cc in ?? ()
No symbol table info available.
#5  0xbfc6964c in ?? ()
No symbol table info available.
#6  0x00000000 in ?? ()
No symbol table info available.
#0  0xb6f0d7f7 in memset () from /lib/tls/i686/cmov/libc.so.6
The program is running.  Exit anyway? (y or n) "

-- 
See http://bugzilla.gnome.org/page.cgi?id=email.html for more info about why you received
this email, why you can't respond via email, how to stop receiving
emails (or reduce the number you receive), and how to contact someone
if you are having problems with the system.

You can add comments to this bug at http://bugzilla.gnome.org/show_bug.cgi?id=500467.