GNOME Bugzilla – Bug 643298
[Call] Crashed when starting receiving video
Last modified: 2011-02-28 10:19:06 UTC
I received an audio call which was working fine. Then the other side tried to send video and empathy-call crashed.
+ Trace 226117
Here are the logs when video is activated on the other side. (empathy-call:29081): tp-glib/proxy-DEBUG: tp_proxy_borrow_interface_by_id: 0x9e2b80: org.freedesktop.Telepathy.Call.Content.DRAFT DBusGProxy is 0xd190f0 (empathy-call:29081): tp-glib/proxy-DEBUG: tp_proxy_borrow_interface_by_id: 0x9e2b80: org.freedesktop.DBus.Properties DBusGProxy is 0xbe6950 (empathy-call:29081): tp-glib/proxy-DEBUG: tp_proxy_borrow_interface_by_id: 0xc9f020: org.freedesktop.Telepathy.Call.Content.DRAFT DBusGProxy is 0xd19c20 (empathy-call:29081): tp-glib/proxy-DEBUG: tp_proxy_borrow_interface_by_id: 0xc9f020: org.freedesktop.DBus.Properties DBusGProxy is 0xd19d00 (empathy-call:29081): tp-glib/proxy-DEBUG: tp_proxy_borrow_interface_by_id: 0x9e2ce0: org.freedesktop.Telepathy.Call.Content.DRAFT DBusGProxy is 0xd19c90 (empathy-call:29081): tp-glib/proxy-DEBUG: tp_proxy_borrow_interface_by_id: 0x9e2ce0: org.freedesktop.DBus.Properties DBusGProxy is 0xbf1170 (empathy-call:29081): tp-glib/proxy-DEBUG: tp_proxy_borrow_interface_by_id: 0xa39660: org.freedesktop.Telepathy.Call.Content.DRAFT DBusGProxy is 0xcc7810 (empathy-call:29081): tp-glib/proxy-DEBUG: tp_proxy_borrow_interface_by_id: 0xa39660: org.freedesktop.DBus.Properties DBusGProxy is 0xcc78f0 (empathy-call:29081): tp-glib/proxy-DEBUG: tp_proxy_borrow_interface_by_id: 0xb89e60: org.freedesktop.Telepathy.Call.Stream.DRAFT DBusGProxy is 0xcc7880 (empathy-call:29081): tp-glib/proxy-DEBUG: tp_proxy_borrow_interface_by_id: 0xb89e60: org.freedesktop.DBus.Properties DBusGProxy is 0xcc75c0 (empathy-call:29081): tp-glib/proxy-DEBUG: tp_proxy_borrow_interface_by_id: 0xc9f020: org.freedesktop.Telepathy.Call.Content.Interface.Media.DRAFT DBusGProxy is 0xcc39c0 (empathy-call:29081): tp-glib/proxy-DEBUG: tp_proxy_borrow_interface_by_id: 0xb89f00: org.freedesktop.Telepathy.Call.Stream.DRAFT DBusGProxy is 0xbe6c10 (empathy-call:29081): tp-glib/proxy-DEBUG: tp_proxy_borrow_interface_by_id: 0xb89f00: org.freedesktop.DBus.Properties DBusGProxy is 0xbd06b0 (empathy-call:29081): tp-glib/proxy-DEBUG: tp_proxy_borrow_interface_by_id: 0xa39660: org.freedesktop.Telepathy.Call.Content.Interface.Media.DRAFT DBusGProxy is 0xd1bc00 [New Thread 0x7fffd4eef700 (LWP 29120)] (empathy-call:29081): tp-glib/proxy-DEBUG: tp_proxy_borrow_interface_by_id: 0xd165a0: org.freedesktop.Telepathy.Call.Stream.DRAFT DBusGProxy is 0xd36040 (empathy-call:29081): tp-glib/proxy-DEBUG: tp_proxy_borrow_interface_by_id: 0xd165a0: org.freedesktop.DBus.Properties DBusGProxy is 0xd36470 (empathy-call:29081): tp-fs-DEBUG: tf_call_content_dispose (empathy-call:29081): tp-fs-DEBUG: tf_call_stream_dispose (empathy-call:29081): tp-glib/proxy-DEBUG: tp_proxy_signal_connection_lost_weak_ref: 0xd36400: lost weak ref to 0xb8a030 (empathy-call:29081): tp-glib/proxy-DEBUG: tp_proxy_pending_call_lost_weak_ref: 0xbd5120 lost weak ref to 0xb8a030 (empathy-call:29081): tp-glib/proxy-DEBUG: tp_proxy_pending_call_cancel: 0xbd5120 (empathy-call:29081): tp-glib/proxy-DEBUG: tp_proxy_signal_connection_lost_weak_ref: 0xbef810: lost weak ref to 0xc9f0b0 (empathy-call:29081): tp-glib/proxy-DEBUG: tp_proxy_signal_connection_lost_weak_ref: 0xbdee40: lost weak ref to 0xc9f0b0 (empathy-call:29081): tp-glib/proxy-DEBUG: tp_proxy_pending_call_lost_weak_ref: 0xc7b520 lost weak ref to 0xc9f0b0 (empathy-call:29081): tp-glib/proxy-DEBUG: tp_proxy_pending_call_cancel: 0xc7b520 (empathy-call:29081): tp-glib/proxy-DEBUG: tp_proxy_signal_connection_lost_weak_ref: 0xbdecf0: lost weak ref to 0xc9f0b0
Valgrind logs: ==29150== Invalid read of size 8 ==29150== at 0x52913FF: process_codec_offer (call-content.c:408) ==29150== by 0x529191F: got_content_media_properties (call-content.c:541) ==29150== by 0x9E23267: _tp_cli_dbus_properties_invoke_callback_get_all (tp-cli-generic-body.h:1190) ==29150== by 0x9E26196: tp_proxy_pending_call_idle_invoke (proxy-methods.c:153) ==29150== by 0xE77EF8D: g_idle_dispatch (gmain.c:4536) ==29150== by 0xE77B12B: g_main_dispatch (gmain.c:2440) ==29150== by 0xE77C6BB: g_main_context_dispatch (gmain.c:3013) ==29150== by 0xE77CB81: g_main_context_iterate (gmain.c:3091) ==29150== by 0xE77D318: g_main_loop_run (gmain.c:3299) ==29150== by 0xBC613E6: gtk_main (gtkmain.c:1237) ==29150== by 0x41BA4B: main (empathy-call.c:186) ==29150== Address 0x182df250 is 48 bytes inside a block of size 144 free'd ==29150== at 0x4C27D71: free (vg_replace_malloc.c:366) ==29150== by 0xE7847C1: g_free (gmem.c:263) ==29150== by 0xE79E3BA: g_slice_free1 (gslice.c:907) ==29150== by 0xDEF625B: g_type_free_instance (gtype.c:1934) ==29150== by 0xDEDD708: g_object_unref (gobject.c:2747) ==29150== by 0xDBD3CED: g_simple_async_result_finalize (gsimpleasyncresult.c:269) ==29150== by 0xDEDD609: g_object_unref (gobject.c:2734) ==29150== by 0x52918E0: got_content_media_properties (call-content.c:537) ==29150== by 0x9E23267: _tp_cli_dbus_properties_invoke_callback_get_all (tp-cli-generic-body.h:1190) ==29150== by 0x9E26196: tp_proxy_pending_call_idle_invoke (proxy-methods.c:153) ==29150== by 0xE77EF8D: g_idle_dispatch (gmain.c:4536) ==29150== by 0xE77B12B: g_main_dispatch (gmain.c:2440) ==29150== by 0xE77C6BB: g_main_context_dispatch (gmain.c:3013) ==29150== by 0xE77CB81: g_main_context_iterate (gmain.c:3091) ==29150== by 0xE77D318: g_main_loop_run (gmain.c:3299) ==29150== by 0xBC613E6: gtk_main (gtkmain.c:1237) ==29150== by 0x41BA4B: main (empathy-call.c:186) ==29150== ==29150== Invalid read of size 8 ==29150== at 0x9E20765: tp_proxy_get_bus_name (proxy.c:1319) ==29150== by 0x7FEFFFFCF: ??? ==29150== by 0x529191F: got_content_media_properties (call-content.c:541) ==29150== by 0x9E23267: _tp_cli_dbus_properties_invoke_callback_get_all (tp-cli-generic-body.h:1190) ==29150== by 0x9E26196: tp_proxy_pending_call_idle_invoke (proxy-methods.c:153) ==29150== by 0xE77EF8D: g_idle_dispatch (gmain.c:4536) ==29150== by 0xE77B12B: g_main_dispatch (gmain.c:2440) ==29150== by 0xE77C6BB: g_main_context_dispatch (gmain.c:3013) ==29150== by 0xE77CB81: g_main_context_iterate (gmain.c:3091) ==29150== by 0xE77D318: g_main_loop_run (gmain.c:3299) ==29150== by 0xBC613E6: gtk_main (gtkmain.c:1237) ==29150== by 0x41BA4B: main (empathy-call.c:186) ==29150== Address 0x28 is not stack'd, malloc'd or (recently) free'd
That's a telepathy-farstream bug : https://bugs.freedesktop.org/show_bug.cgi?id=34816