After an evaluation, GNOME has moved from Bugzilla to GitLab. Learn more about GitLab.
No new issues can be reported in GNOME Bugzilla anymore.
To report an issue in a GNOME project, go to GNOME GitLab.
Do not go to GNOME Gitlab for: Bluefish, Doxygen, GnuCash, GStreamer, java-gnome, LDTP, NetworkManager, Tomboy.
Bug 587223 - mpegtsdemux seg.fault due to invalid PMT_pid
mpegtsdemux seg.fault due to invalid PMT_pid
Status: RESOLVED FIXED
Product: GStreamer
Classification: Platform
Component: gst-plugins-bad
git master
Other All
: Normal normal
: 0.10.21
Assigned To: GStreamer Maintainers
GStreamer Maintainers
Depends on:
Blocks:
 
 
Reported: 2009-06-28 18:52 UTC by H.W. Wan
Modified: 2010-11-01 17:31 UTC
See Also:
GNOME target: ---
GNOME version: ---

Attachments
Application which cause the crash (5.78 KB, text/plain)
2009-06-28 18:54 UTC, H.W. Wan 		Details

Description H.W. Wan 2009-06-28 18:52:25 UTC 
Please describe the problem:

as title,
stack strace

Core was generated by `python iphoneproxy3.py rtsp://127.0.0.1:8554/1/82 12003'.
Program terminated with signal 11, Segmentation fault.

+ Trace 216234

  • #0 gst_mpegts_demux_chain
    at gstmpegtsdemux.c line 1703
  • #1 gst_pad_chain_data_unchecked
    at gstpad.c line 4063
  • #2 gst_pad_push_data
    at gstpad.c line 4293
  • #3 gst_base_rtp_depayload_chain
    at gstbasertpdepayload.c line 349
  • #4 gst_pad_chain_data_unchecked
    at gstpad.c line 4063
  • #5 gst_pad_push_data
    at gstpad.c line 4293
  • #6 gst_type_find_element_chain
    at gsttypefindelement.c line 697
  • #7 gst_pad_chain_data_unchecked
    at gstpad.c line 4063
  • #8 gst_pad_push_data
    at gstpad.c line 4293
  • #9 gst_pad_chain_data_unchecked
    at gstpad.c line 4063
  • #10 gst_pad_push_data
    at gstpad.c line 4293
  • #11 gst_pad_chain_data_unchecked
    at gstpad.c line 4063
  • #12 gst_pad_push_data
    at gstpad.c line 4293
  • #13 gst_pad_chain_data_unchecked
    at gstpad.c line 4063
  • #14 gst_pad_push_data
    at gstpad.c line 4293
  • #15 gst_pad_chain_data_unchecked
    at gstpad.c line 4063
  • #16 gst_pad_push_data
    at gstpad.c line 4293
  • #17 gst_rtp_jitter_buffer_loop
    at gstrtpjitterbuffer.c line 1655
  • #18 gst_task_func
    at gsttask.c line 234 

(gdb) list 
1702
1702	                /* check if this is correct pcr for pmt */
1703	                if (demux->streams[demux->streams[j]->PMT_pid] &&
1704	                    stream->PID ==
1705                demux->streams[demux->streams[j]->PMT_pid]->PMT.PCR_PID) {

(gdb) p demux->streams[0]->PMT_pid
$1 = 8192
(gdb) p demux->streams[demux->streams[0]->PMT_pid]->PMT.PCR_PID


The input  is a digital tv source which is served with rtsp stream (from gnome-dvb-daemon)

Attached the application which cause the crash for reference
 

Steps to reproduce:
1. 
2. 
3. 


Actual results:


Expected results:


Does this happen every time?


Other information:
Comment 1 H.W. Wan 2009-06-28 18:54:44 UTC 
Created attachment 137512 [details]
Application which cause the crash
Comment 2 Thiago Sousa Santos 2009-10-15 14:15:39 UTC 
Seems that this portion of the code has already been modified for more invalid memory access "protection". Can you test again with git head version and check if it still segfaults?

Thanks.
Comment 3 Tobias Mueller 2010-04-09 16:30:06 UTC 
H.W. Wan, could you test please?
Comment 4 Zaheer Abbas Merali 2010-05-19 09:34:17 UTC 
I pushed a patch a couple of days ago that fixes a memory corruption, can you please try with git master of gst-plugins-bad and see if you can reproduce it now.
Comment 5 Akhil Laddha 2010-08-19 04:43:46 UTC 
Closing this bug report as no further information has been provided. Please 
feel free to reopen the bug if the problem still occurs with a newer
version of GStreamer, thanks.