GNOME Bugzilla – Bug 357976
[flutsdemux] segfault
Last modified: 2007-09-24 16:50:15 UTC
It will segfault trying to allocate too much memory if the segment start is too much > 0 as it will try and allocate buffer for silence that is too large.
* gst/audiorate/gstaudiorate.c: (gst_audio_rate_reset), (gst_audio_rate_sink_event), (gst_audio_rate_convert), (gst_audio_rate_convert_segments), (gst_audio_rate_chain): Keep sink and src segment to keep track of time and support more input formats. Fix bogus next_offset and run_time calculation, don't understand how this could have worked before. Fixes #357976. Remove some unneeded vars.
Core was generated by `gst-launch-0.10 tcpclientsrc host=192.168.1.233 ! flutsdemux es-pids=256:257 ! audio/mpeg ! mad ! audiorate ! fakesink' Program terminated with signal 5, Trace/breakpoint trap. warning: Can't read pathname for load map: Input/output error. Reading symbols from /usr/lib/libgstreamer-0.10.so.0...(no debugging symbols found)...done. Loaded symbols for /usr/lib/libgstreamer-0.10.so.0 Reading symbols from /usr/lib/libxml2.so.2...(no debugging symbols found)...done. Loaded symbols for /usr/lib/libxml2.so.2 Reading symbols from /lib/libz.so.1... (no debugging symbols found)...done. Loaded symbols for /lib/libz.so.1 Reading symbols from /lib/libm.so.6...(no debugging symbols found)...done. Loaded symbols for /lib/libm.so.6 Reading symbols from /usr/lib/libgobject-2.0.so.0...done. Loaded symbols for /usr/lib/libgobject-2.0.so.0 Reading symbols from /usr/lib/libgthread-2.0.so.0...done. Loaded symbols for /usr/lib/libgthread-2.0.so.0 Reading symbols from /lib/libpthread.so.0...done. Loaded symbols for /lib/libpthread.so.0 Reading symbols from /usr/lib/libgmodule-2.0.so.0...done. Loaded symbols for /usr/lib/libgmodule-2.0.so.0 Reading symbols from /lib/libdl.so.2...done. Loaded symbols for /lib/libdl.so.2 Reading symbols from /usr/lib/libglib-2.0.so.0...done. Loaded symbols for /usr/lib/libglib-2.0.so.0 Reading symbols from /lib/libc.so.6...done. Loaded symbols for /lib/libc.so.6 Reading symbols from /lib/ld-linux.so.2...done. Loaded symbols for /lib/ld-linux.so.2 Reading symbols from /lib/libnss_compat.so.2...done. Loaded symbols for /lib/libnss_compat.so.2 Reading symbols from /lib/libnsl.so.1...done. Loaded symbols for /lib/libnsl.so.1 Reading symbols from /lib/libnss_nis.so.2...done. Loaded symbols for /lib/libnss_nis.so.2 Reading symbols from /lib/libnss_files.so.2...done. Loaded symbols for /lib/libnss_files.so.2 Reading symbols from /usr/lib/gstreamer-0.10/libgsttcp.so...done. Loaded symbols for /usr/lib/gstreamer-0.10/libgsttcp.so Reading symbols from /usr/lib/libgstbase-0.10.so.0...done. Loaded symbols for /usr/lib/libgstbase-0.10.so.0 Reading symbols from /usr/lib/libgstdataprotocol-0.10.so.0...done. Loaded symbols for /usr/lib/libgstdataprotocol-0.10.so.0 Reading symbols from /home/zaheer/.gstreamer-0.10/plugins/libgstflumpegdemux.so...done. Loaded symbols for /home/zaheer/.gstreamer-0.10/plugins/libgstflumpegdemux.so Reading symbols from /usr/lib/gstreamer-0.10/libgstmad.so...done. Loaded symbols for /usr/lib/gstreamer-0.10/libgstmad.so Reading symbols from /usr/lib/libgsttag-0.10.so.0...done. Loaded symbols for /usr/lib/libgsttag-0.10.so.0 Reading symbols from /usr/lib/libmad.so.0...done. Loaded symbols for /usr/lib/libmad.so.0 Reading symbols from /usr/lib/libid3tag.so.0...done. Loaded symbols for /usr/lib/libid3tag.so.0 Reading symbols from /usr/lib/gstreamer-0.10/libgstaudiorate.so...done. Loaded symbols for /usr/lib/gstreamer-0.10/libgstaudiorate.so Reading symbols from /usr/lib/gstreamer-0.10/libgstcoreelements.so...done. Loaded symbols for /usr/lib/gstreamer-0.10/libgstcoreelements.so
+ Trace 73473
zaheer, this seems to be a bug in fluts requesting too much in buffer_alloc, not an audiorate bug AFAIK.
What's the status on this? Has this been fixed in flutsdemux? Should it be moved over to fluendo's trac?
*** Bug 364995 has been marked as a duplicate of this bug. ***
That codepath has been changed since then. Closing, please reopen if something similar reappears.
*** Bug 479734 has been marked as a duplicate of this bug. ***