After an evaluation, GNOME has moved from Bugzilla to GitLab. Learn more about GitLab.
No new issues can be reported in GNOME Bugzilla anymore.
To report an issue in a GNOME project, go to GNOME GitLab.
Do not go to GNOME Gitlab for: Bluefish, Doxygen, GnuCash, GStreamer, java-gnome, LDTP, NetworkManager, Tomboy.
Bug 411220 - totem crashed with SIGSEGV in put_pixels16_mmx()
totem crashed with SIGSEGV in put_pixels16_mmx()
Status: RESOLVED DUPLICATE of bug 334707
Product: GStreamer
Classification: Platform
Component: gst-libav
0.10.2
Other Linux
: Normal critical
: git master
Assigned To: GStreamer Maintainers
GStreamer Maintainers
Depends on:
Blocks:
 
 
Reported: 2007-02-23 14:23 UTC by Sebastien Bacher
Modified: 2007-03-02 11:14 UTC
See Also:
GNOME target: ---
GNOME version: 2.17/2.18



Description Sebastien Bacher 2007-02-23 14:23:56 UTC
That bug has been described on https://beta.launchpad.net/ubuntu/+source/gstreamer0.10-ffmpeg/+bug/87216

"Binary package hint: totem

problems with .rm files

ProblemType: Crash
Date: Fri Feb 23 00:32:03 2007
DistroRelease: Ubuntu 7.04
ExecutablePath: /usr/bin/totem
Package: totem-gstreamer 2.17.91-0ubuntu3
ProcCmdline: totem file:///media/hda2/Videos/Apple/1999/1999-05-10%20WWDC%201999.rm
..."

Debug backtrace for the crash:

  • #0 put_pixels16_mmx
    at dsputil_mmx.c line 430
  • #1 MPV_motion
    at mpegvideo.c line 2992
  • #2 MPV_decode_mb
    at mpegvideo.c line 3950
  • #3 rv10_decode_packet
    at rv10.c line 688
  • #4 rv10_decode_frame
    at rv10.c line 737
  • #5 avcodec_decode_video
    at utils.c line 932
  • #6 gst_ffmpegdec_frame
    at gstffmpegdec.c line 1208
  • #7 gst_ffmpegdec_chain
    at gstffmpegdec.c line 1936
  • #8 gst_pad_alloc_buffer_full
    at gstpad.c line 2750
  • #9 gst_pad_chain_unchecked
    at gstpad.c line 3482
  • #10 gst_queue_loop
    at gstqueue.c line 810

Comment 1 Sebastien Bacher 2007-02-25 22:00:45 UTC
That file provided on one launchpad duplicate trigers that crash: http://librarian.launchpad.net/6527630/umkleide.rm
Comment 2 Edward Hervey 2007-03-02 11:12:42 UTC
The good old ffmpeg classic, let's read beyond the limits.


==7618== Invalid read of size 4
==7618==    at 0x76BBA70: put_pixels8_c (dsputil.c:1108)
==7618==    by 0x76BC040: put_pixels16_c (dsputil.c:1108)
==7618==    by 0x76A8281: MPV_motion (mpegvideo.c:2992)
==7618==    by 0x76AA55C: MPV_decode_mb (mpegvideo.c:3950)
==7618==    by 0x765FE25: rv10_decode_packet (rv10.c:688)
==7618==    by 0x7660435: rv10_decode_frame (rv10.c:737)
==7618==    by 0x76955B2: avcodec_decode_video (utils.c:932)
==7618==    by 0x74C7D0D: gst_ffmpegdec_frame (gstffmpegdec.c:1231)
==7618==    by 0x74CAB30: gst_ffmpegdec_chain (gstffmpegdec.c:1967)
==7618==    by 0x4B7E257: gst_pad_chain_unchecked (gstpad.c:3472)
==7618==    by 0x4B7EBCF: gst_pad_push (gstpad.c:3638)
==7618==    by 0x6632FCE: gst_queue_push_one (gstqueue.c:810)
Comment 3 Edward Hervey 2007-03-02 11:14:14 UTC

*** This bug has been marked as a duplicate of 334707 ***