Bug 762870 – rtspsrc crash

After an evaluation, GNOME has moved from Bugzilla to GitLab. Learn more about GitLab.
No new issues can be reported in GNOME Bugzilla anymore.
To report an issue in a GNOME project, go to GNOME GitLab.
Do not go to GNOME Gitlab for: Bluefish, Doxygen, GnuCash, GStreamer, java-gnome, LDTP, NetworkManager, Tomboy.

Bug 762870 - rtspsrc crash


Summary:	rtspsrc crash


Status:	RESOLVED INCOMPLETE

Product:	GStreamer
Classification:	Platform
Component:	gst-plugins-good
Version:	git master
Hardware:	Other Linux

Importance:	Normal normal
Target Milestone:	NONE
Assigned To:	GStreamer Maintainers
QA Contact:	GStreamer Maintainers

URL:
Whiteboard:

Depends on:
Blocks:

Reported:	2016-02-29 12:33 UTC by Nicola
Modified:	2016-05-22 18:24 UTC

See Also:
GNOME target:	---
GNOME version:	---

Description Nicola 2016-02-29 12:33:01 UTC

Hi,

while testing some other things on current git master I got this crash:

Got message #149 from element "rtspsrc0" (warning): GstMessageWarning, gerror=(GError)NULL;
WARNING: from element /GstPipeline:pipeline0/GstRTSPSrc:rtspsrc0: Delayed linking failed.
Additional debug info:
`n�
*** Error in `/home/nicola/gst/master/gstreamer/tools/.libs/lt-gst-launch-1.0': double free or corruption (!prev): 0x0000000000854a60 ***

the pipeline was quite simple:

rtspsrc ... ! rtponvifparse ! rtpjpegdepay ! fakesink

the crash does not happen all the times, I tryed to reproduce inside valgrind with no success, eventually I'll try to produce a better test case later

Comment 1 Sebastian Dröge (slomo) 2016-02-29 12:46:29 UTC

Do you have a public stream to reproduce it? Can you get a backtrace with gdb?

Also if it worked before, using git bisect to find the offending commit might be useful.

Comment 2 Tim-Philipp Müller 2016-02-29 12:53:18 UTC

And: does it happen if you remove the rtpjpegdepay from the pipeline? If yes, does it still happen if you remove the rtponvifparse from the pipeline?

Comment 3 Nicola 2016-02-29 13:32:02 UTC

it is not easy to trigger, here is the output from gdb from the whole pipeline

Thread 1 "lt-gst-launch-1" received signal SIGABRT, Aborted.
0x00007ffff66af2a8 in raise () from /usr/lib/libc.so.6
(gdb) bt

+ Trace 236016

Thread 12 (Thread 0x7fffe0ff9700 (LWP 13098))

#0 syscall
from /usr/lib/libc.so.6
#1 g_cond_wait_until
from /usr/lib/libglib-2.0.so.0
#2 ??
from /usr/lib/libglib-2.0.so.0
#3 ??
from /usr/lib/libglib-2.0.so.0
#4 ??
from /usr/lib/libglib-2.0.so.0
#5 start_thread
from /usr/lib/libpthread.so.0
#6 clone
from /usr/lib/libc.so.6

Thread 11 (Thread 0x7fffe17fa700 (LWP 13096))

#0 syscall
from /usr/lib/libc.so.6
#1 g_cond_wait
from /usr/lib/libglib-2.0.so.0
#2 gst_task_func
at gsttask.c line 317
#3 ??
from /usr/lib/libglib-2.0.so.0
#4 ??
from /usr/lib/libglib-2.0.so.0
#5 start_thread
from /usr/lib/libpthread.so.0
#6 clone
from /usr/lib/libc.so.6

Thread 10 (Thread 0x7fffe1ffb700 (LWP 13095))

#0 syscall
from /usr/lib/libc.so.6
#1 g_cond_wait
from /usr/lib/libglib-2.0.so.0
#2 wait_next_timeout
at gstrtpjitterbuffer.c line 3520
#3 ??
from /usr/lib/libglib-2.0.so.0
#4 start_thread
from /usr/lib/libpthread.so.0
#5 clone
from /usr/lib/libc.so.6

Thread 9 (Thread 0x7fffe27fc700 (LWP 13094))

#0 syscall
from /usr/lib/libc.so.6
#1 g_cond_wait
from /usr/lib/libglib-2.0.so.0
#2 gst_rtp_jitter_buffer_loop
at gstrtpjitterbuffer.c line 3548
#3 gst_task_func
at gsttask.c line 332
#4 ??
from /usr/lib/libglib-2.0.so.0
#5 ??
from /usr/lib/libglib-2.0.so.0
#6 start_thread
from /usr/lib/libpthread.so.0
#7 clone
from /usr/lib/libc.so.6

Thread 8 (Thread 0x7fffe2ffd700 (LWP 13093))

#0 syscall
from /usr/lib/libc.so.6
#1 g_cond_wait
from /usr/lib/libglib-2.0.so.0
#2 wait_next_timeout
at gstrtpjitterbuffer.c line 3520
#3 ??
from /usr/lib/libglib-2.0.so.0
#4 start_thread
from /usr/lib/libpthread.so.0
#5 clone
from /usr/lib/libc.so.6


a quick look at the backtrace seems to show that rtpjpegdepay and onvifparse are not doing anything bad when gst-launch crash

however I'll do some more tests and eventually I'll provide a better report as soon as I have some spare time,

thanks!

Comment 4 Nicola 2016-02-29 13:36:43 UTC

this seems relevant too:

Got message #149 from element "rtspsrc0" (warning): GstMessageWarning, gerror=(GError)NULL;
WARNING: from element /GstPipeline:pipeline0/GstRTSPSrc:rtspsrc0: Delayed linking failed.
Additional debug info:


*** Error in `/home/nicola/gst/master/gstreamer/tools/.libs/lt-gst-launch-1.0': free(): invalid pointer: 0x00000000008083b0 ***

the problem seems to happen only at the initial connection

Comment 5 Sebastian Dröge (slomo) 2016-02-29 13:48:55 UTC

Please install debug symbols for all the relevant libraries and get another backtrace

Comment 6 Tim-Philipp Müller 2016-05-22 18:24:08 UTC

Can't fix this without more info (ie. stack trace or valgrind log with full debugging symbols), sorry!

Closing this bug report as no further information has been provided. Please feel free to reopen this bug report if you can provide the information that was asked for in a previous comment.
Thanks!