GNOME Bugzilla – Bug 628768
VRAWDEPAY crashes on launch -- heap corruption
Last modified: 2010-10-20 12:01:13 UTC
Simple shell script with test video source crashes on launch. This is receive side udp/rtp raw video. Send side is not active. $ cat rtp-client.sh caps="application/x-rtp,media=(string)video,clock-rate=(int)90000,encoding-name=(string)RAW,sampling=(string)YCbCr-4:2:2,depth=(string)8,width=(string)400,height=(string)300,colorimetry=(string)SMPTE240M,payload=(int)96,ssrc=(uint)1,clock-base=(uint)1,seqnum-base=(uint)1" gst-launch -v \ udpsrc name=src1 uri=udp://127.0.0.1:51234 caps=$caps \ ! rtpvrawdepay name=depay1 \ ! ffmpegcolorspace name=cs1 \ ! ximagesink name=xis1 $ . rtp-client.sh Setting pipeline to PAUSED ... Pipeline is live and does not need PREROLL ... Setting pipeline to PLAYING ... New clock: GstSystemClock /GstPipeline:pipeline0/GstRtpVRawDepay:depay1.GstPad:src: caps = video/x-raw-yuv, width=(int)400, height=(int)300, format=(fourcc)UYVY, framerate=(fraction)0/1 /GstPipeline:pipeline0/GstRtpVRawDepay:depay1.GstPad:sink: caps = application/x-rtp, media=(string)video, clock-rate=(int)90000, encoding-name=(string)RAW, sampling=(string)YCbCr-4:2:2, depth=(string)8, width=(string)400, height=(string)300, colorimetry=(string)SMPTE240M, payload=(int)96, ssrc=(uint)1, clock-base=(uint)1, seqnum-base=(uint)1 /GstPipeline:pipeline0/GstFFMpegCsp:cs1.GstPad:src: caps = video/x-raw-rgb, bpp=(int)32, depth=(int)24, endianness=(int)4321, red_mask=(int)65280, green_mask=(int)16711680, blue_mask=(int)-16777216, width=(int)400, height=(int)300, framerate=(fraction)0/1, pixel-aspect-ratio=(fraction)1/1 /GstPipeline:pipeline0/GstFFMpegCsp:cs1.GstPad:sink: caps = video/x-raw-yuv, width=(int)400, height=(int)300, format=(fourcc)UYVY, framerate=(fraction)0/1 /GstPipeline:pipeline0/GstXImageSink:xis1.GstPad:sink: caps = video/x-raw-rgb, bpp=(int)32, depth=(int)24, endianness=(int)4321, red_mask=(int)65280, green_mask=(int)16711680, blue_mask=(int)-16777216, width=(int)400, height=(int)300, framerate=(fraction)0/1, pixel-aspect-ratio=(fraction)1/1 *** glibc detected *** /usr/bin/gst-launch-0.10: free(): invalid next size (normal): 0x0000000001621000 *** ======= Backtrace: ========= /lib/libc.so.6(+0x775b6)[0x7f1a6ac9d5b6] /lib/libc.so.6(cfree+0x73)[0x7f1a6aca3e53] /usr/lib/libgstreamer-0.10.so.0(+0x37ec9)[0x7f1a6bf38ec9] /usr/lib/libgstreamer-0.10.so.0(gst_mini_object_unref+0x153)[0x7f1a6bf5cbf3] /usr/lib/libgstbase-0.10.so.0(+0x24f4c)[0x7f1a693a7f4c] /usr/lib/libgstbase-0.10.so.0(+0x25c22)[0x7f1a693a8c22] /usr/lib/libgstreamer-0.10.so.0(+0x605bd)[0x7f1a6bf615bd] /usr/lib/libgstreamer-0.10.so.0(+0x60eae)[0x7f1a6bf61eae] /usr/lib/gstreamer-0.10/libgstrtp.so(+0x31b0a)[0x7f1a69167b0a] /usr/lib/libgstrtp-0.10.so.0(+0x100c7)[0x7f1a68ae50c7] /usr/lib/libgstreamer-0.10.so.0(+0x605bd)[0x7f1a6bf615bd] /usr/lib/libgstreamer-0.10.so.0(+0x60eae)[0x7f1a6bf61eae] /usr/lib/libgstbase-0.10.so.0(+0x1ee11)[0x7f1a693a1e11] /usr/lib/libgstreamer-0.10.so.0(+0x8b9b3)[0x7f1a6bf8c9b3] /lib/libglib-2.0.so.0(+0x69a5f)[0x7f1a6b63ba5f] /lib/libglib-2.0.so.0(+0x67b84)[0x7f1a6b639b84] /lib/libpthread.so.0(+0x69ca)[0x7f1a6afaf9ca] /lib/libc.so.6(clone+0x6d)[0x7f1a6ad0c6fd] ======= Memory map: ======== 00400000-00406000 r-xp 00000000 08:01 42624 /usr/bin/gst-launch-0.10 00606000-00607000 r--p 00006000 08:01 42624 /usr/bin/gst-launch-0.10 00607000-00608000 rw-p 00007000 08:01 42624 /usr/bin/gst-launch-0.10 01479000-0167c000 rw-p 00000000 00:00 0 [heap] 7f1a60000000-7f1a60021000 rw-p 00000000 00:00 0 7f1a60021000-7f1a64000000 ---p 00000000 00:00 0 7f1a6561e000-7f1a65634000 r-xp 00000000 08:01 6843 /lib/libgcc_s.so.1 7f1a65634000-7f1a65833000 ---p 00016000 08:01 6843 /lib/libgcc_s.so.1 7f1a65833000-7f1a65834000 r--p 00015000 08:01 6843 /lib/libgcc_s.so.1 7f1a65834000-7f1a65835000 rw-p 00016000 08:01 6843 /lib/libgcc_s.so.1 7f1a65858000-7f1a65859000 ---p 00000000 00:00 0 7f1a65859000-7f1a66059000 rw-p 00000000 00:00 0 7f1a66059000-7f1a660cf000 rw-s 00000000 00:04 460423209 /SYSV00000000 (deleted) 7f1a660cf000-7f1a660d0000 ---p 00000000 00:00 0 7f1a660d0000-7f1a668d0000 rw-p 00000000 00:00 0 7f1a668d0000-7f1a668d1000 ---p 00000000 00:00 0 7f1a668d1000-7f1a670d1000 rw-p 00000000 00:00 0 7f1a670d1000-7f1a670d6000 r-xp 00000000 08:01 2476 /usr/lib/libXdmcp.so.6.0.0 7f1a670d6000-7f1a672d5000 ---p 00005000 08:01 2476 /usr/lib/libXdmcp.so.6.0.0 7f1a672d5000-7f1a672d6000 r--p 00004000 08:01 2476 /usr/lib/libXdmcp.so.6.0.0 7f1a672d6000-7f1a672d7000 rw-p 00005000 08:01 2476 /usr/lib/libXdmcp.so.6.0.0 7f1a672d7000-7f1a672d9000 r-xp 00000000 08:01 90 /usr/lib/libXau.so.6.0.0 7f1a672d9000-7f1a674d9000 ---p 00002000 08:01 90 /usr/lib/libXau.so.6.0.0 7f1a674d9000-7f1a674da000 r--p 00002000 08:01 90 /usr/lib/libXau.so.6.0.0 7f1a674da000-7f1a674db000 rw-p 00003000 08:01 90 /usr/lib/libXau.so.6.0.0 7f1a674db000-7f1a674f6000 r-xp 00000000 08:01 2753 /usr/lib/libxcb.so.1.1.0 7f1a674f6000-7f1a676f5000 ---p 0001b000 08:01 2753 /usr/lib/libxcb.so.1.1.0 7f1a676f5000-7f1a676f6000 r--p 0001a000 08:01 2753 /usr/lib/libxcb.so.1.1.0 7f1a676f6000-7f1a676f7000 rw-p 0001b000 08:01 2753 /usr/lib/libxcb.so.1.1.0 7f1a676f7000-7f1a676fb000 r-xp 00000000 08:01 1951 /lib/libuuid.so.1.3.0 7f1a676fb000-7f1a678fa000 ---p 00004000 08:01 1951 /lib/libuuid.so.1.3.0 7f1a678fa000-7f1a678fb000 r--p 00003000 08:01 1951 /lib/libuuid.so.1.3.0 7f1a678fb000-7f1a678fc000 rw-p 00004000 08:01 1951 /lib/libuuid.so.1.3.0 7f1a678fc000-7f1a6790d000 r-xp 00000000 08:01 2576 /usr/lib/libXext.so.6.4.0 7f1a6790d000-7f1a67b0c000 ---p 00011000 08:01 2576 /usr/lib/libXext.so.6.4.0 7f1a67b0c000-7f1a67b0d000 r--p 00010000 08:01 2576 /usr/lib/libXext.so.6.4.0 7f1a67b0d000-7f1a67b0e000 rw-p 00011000 08:01 2576 /usr/lib/libXext.so.6.4.0 7f1a67b0e000-7f1a67c3f000 r-xp 00000000 08:01 3033 /usr/lib/libX11.so.6.3.0 7f1a67c3f000-7f1a67e3f000 ---p 00131000 08:01 3033 /usr/lib/libX11.so.6.3.0 7f1a67e3f000-7f1a67e40000 r--p 00131000 08:01 3033 /usr/lib/libX11.so.6.3.0 7f1a67e40000-7f1a67e44000 rw-p 00132000 08:01 3033 /usr/lib/libX11.so.6.3.0 7f1a67e44000-7f1a67e5b000 r-xp 00000000 08:01 7426 /usr/lib/libICE.so.6.3.0 7f1a67e5b000-7f1a6805a000 ---p 00017000 08:01 7426 /usr/lib/libICE.so.6.3.0 7f1a6805a000-7f1a6805b000 r--p 00016000 08:01 7426 /usr/lib/libICE.so.6.3.0 7f1a6805b000-7f1a6805c000 rw-p 00017000 08:01 7426 /usr/lib/libICE.so.6.3.0 7f1a6805c000-7f1a6805f000 rw-p 00000000 00:00 0 7f1a6805f000-7f1a68067000 r-xp 00000000 08:01 7429 /usr/lib/libSM.so.6.0.1 7f1a68067000-7f1a68266000 ---p 00008000 08:01 7429 /usr/lib/libSM.so.6.0.1 7f1a68266000-7f1a68267000 r--p 00007000 08:01 7429 /usr/lib/libSM.so.6.0.1 7f1a68267000-7f1a68268000 rw-p 00008000 08:01 7429 /usr/lib/libSM.so.6.0.1 7f1a68268000-7f1a68274000 r-xp 00000000 08:01 8465 /usr/lib/gstreamer-0.10/libgstximagesink.so 7f1a68274000-7f1a68473000 ---p 0000c000 08:01 8465 /usr/lib/gstreamer-0.10/libgstximagesink.so 7f1a68473000-7f1a68474000 r--p 0000b000 08:01 8465 /usr/lib/gstreamer-0.10/libgstximagesink.so 7f1a68474000-7f1a68475000 rw-p 0000c000 08:01 8465 /usr/lib/gstreamer-0.10/libgstximagesink.so 7f1a68475000-7f1a6847d000 r-xp 00000000 08:01 5876 /usr/lib/libgstvideo-0.10.so.0.21.0 7f1a6847d000-7f1a6867c000 ---p 00008000 08:01 5876 /usr/lib/libgstvideo-0.10.so.0.21.0 7f1a6867c000-7f1a6867d000 r--p 00007000 08:01 5876 /usr/lib/libgstvideo-0.10.so.0.21.0 7f1a6867d000-7f1a6867e000 rw-p 00008000 08:01 5876 /usr/lib/libgstvideo-0.10.so.0.21.0Aborted
Thanks for taking the time to report this bug. This bug report isn't very useful because it doesn't describe the bug well. If you have time and can still reproduce the bug, please read http://bugzilla.gnome.org/bug-HOWTO.html and add a description of how to reproduce this bug. You'll also need to add a stack trace; please see http://live.gnome.org/GettingTraces for more information about how to do so. Thanks in advance!
I can't reproduce this here either. Could you install the appropriate GStreamer packages with debugging information (on ubuntu/debian, these would be: libgstreamer0.10-0-dbg gstreamer0.10-plugins-base-dbg gstreamer0.10-plugins-good-dbg) and then try running the pipeline in gdb, like: $ gdb --args /usr/bin/gst-launch-0.10 <pipeline> (wait for crash, then type: (gdb) thread apply all bt) A valgrind log might also be useful: $ G_SLICE=always-malloc valgrind /usr/bin/gst-launch-0.10 <pipeline> 2> valgrind.log
Closing this bug report as no further information has been provided. Please feel free to reopen this bug if you can provide the information asked for. Thanks!