GNOME Bugzilla – Bug 564122
Crash in monoscope_update
Last modified: 2011-03-08 15:33:27 UTC
Version: 2.24.3 What were you doing when the application crashed? A track had finished player a few moments before. Totem was in the background and crashed while I was doing something else. Distribution: Debian lenny/sid Gnome Release: 2.22.3 2008-09-18 (Debian) BugBuddy Version: 2.22.0 System: Linux 2.6.26-1-amd64 #1 SMP Wed Nov 26 18:26:02 UTC 2008 x86_64 X Vendor: The X.Org Foundation X Vendor Release: 10402000 Selinux: No Accessibility: Disabled GTK+ Theme: Clearlooks Icon Theme: gnome Memory status: size: 816959488 vsize: 816959488 resident: 60858368 share: 21790720 rss: 60858368 rss_rlim: 18446744073709551615 CPU usage: start_time: 1229000356 rtime: 15364 utime: 14206 stime: 1158 cutime:4 cstime: 11 timeout: 0 it_real_value: 0 frequency: 100 Backtrace was generated from '/usr/bin/totem' [Thread debugging using libthread_db enabled] [New Thread 0x7f16e00b6790 (LWP 22160)] [New Thread 0x4c01e950 (LWP 31565)] [New Thread 0x4b81d950 (LWP 31558)] [New Thread 0x4200a950 (LWP 31557)] [New Thread 0x4b01c950 (LWP 30948)] [New Thread 0x4a81b950 (LWP 30109)] [New Thread 0x4a01a950 (LWP 29632)] [New Thread 0x49819950 (LWP 29520)] [New Thread 0x49018950 (LWP 29160)] [New Thread 0x48817950 (LWP 28637)] [New Thread 0x48016950 (LWP 23374)] [New Thread 0x47815950 (LWP 23277)] [New Thread 0x4400e950 (LWP 22819)] [New Thread 0x4300c950 (LWP 22566)] [New Thread 0x4480f950 (LWP 22565)] [New Thread 0x47014950 (LWP 22564)] [New Thread 0x45010950 (LWP 22554)] [New Thread 0x45811950 (LWP 22202)] [New Thread 0x4380d950 (LWP 22195)] [New Thread 0x40cd7950 (LWP 22174)] [New Thread 0x414d8950 (LWP 22170)] [New Thread 0x4280b950 (LWP 22163)] 0x00007f16d87bfb66 in poll () from /lib/libc.so.6
+ Trace 210699
Thread 18 (Thread 0x45811950 (LWP 22202))
----------- .xsession-errors (423 sec old) --------------------- (totem:22816): GStreamer-WARNING **: Failed to load plugin '/usr/lib/gstreamer-0.10/libgstice.so': libjinglep2pbase-0.3.so.0: cannot open shared object file: No such file or directory (totem:23371): GStreamer-WARNING **: Failed to load plugin '/usr/lib/gstreamer-0.10/libgstice.so': libjinglep2pbase-0.3.so.0: cannot open shared object file: No such file or directory ** (epiphany-browser:23075): WARNING **: Unable to delete /home/sam/.gnome2/epiphany/favicon_cache/a3e9cc401a851a2f792e289e06629823 (totem:29157): GStreamer-WARNING **: Failed to load plugin '/usr/lib/gstreamer-0.10/libgstice.so': libjinglep2pbase-0.3.so.0: cannot open shared object file: No such file or directory ** (epiphany-browser:23075): WARNING **: Unable to delete /home/sam/.gnome2/epiphany/favicon_cache/0f9e6aee8f4128267596a0859d441318 (totem:29629): GStreamer-WARNING **: Failed to load plugin '/usr/lib/gstreamer-0.10/libgstice.so': libjinglep2pbase-0.3.so.0: cannot open shared object file: No such file or directory (evolution:32555): Gdk-CRITICAL **: gdk_window_set_title: assertion `title != NULL' failed (totem:30945): GStreamer-WARNING **: Failed to load plugin '/usr/lib/gstreamer-0.10/libgstice.so': libjinglep2pbase-0.3.so.0: cannot open shared object file: No such file or directory --------------------------------------------------
Looks like a GStreamer bug.
Why does this look like a GStreamer bug? It doesn't to me.
> Why does this look like a GStreamer bug? It doesn't to me. Because it crashed in code we ship? (gst-plugins-good/gst/monoscope/convolve.c)
commit d2ee8b979d84f0e714e502116b6fafd9f1d68d16 Author: Stefan Kost <ensonic@users.sf.net> Date: Wed Mar 2 10:56:33 2011 +0200 monoscope: stack needs to be size+1 as we put a end-marker into it Valgrind is still complaining about one bad read, but this takes care of the crash mentioned in the comment and in bug #564122. I still get one invalid read: ==15142== Invalid read of size 4 ==15142== at 0x4069AD3: monoscope_update (monoscope.c:129) ==15142== by 0x4069710: gst_monoscope_chain (gstmonoscope.c:395) ==15142== Address 0x5611584 is 0 bytes after a block of size 134,924 alloc'd ==15142== at 0x40260BB: calloc (in /usr/lib/valgrind/vgpreload_memcheck-x86-linux.so) ==15142== by 0x4069822: monoscope_init (monoscope.c:68) ==15142== by 0x4069075: gst_monoscope_src_setcaps (gstmonoscope.c:234) ==15142== by 0x40C656B: gst_pad_set_caps (gstpad.c:2692) ==15142== by 0x4068ABB: get_buffer (gstmonoscope.c:269) ==15142== by 0x4069724: gst_monoscope_chain (gstmonoscope.c:344) but the crash is fixed.
Fixed the remaining critical issues: commit 3ec3bed497b488364726c87e522c05b846ed4e70 Author: Stefan Kost <ensonic@users.sf.net> Date: Wed Mar 2 13:00:31 2011 +0200 monoscope: don't leak the monoscope_state data The monoscope_close() implementation was empty. commit 7bc3344131a307a4da3b0f65c1d6ca6968226f6e Author: Stefan Kost <ensonic@users.sf.net> Date: Wed Mar 2 12:59:35 2011 +0200 monoscope: we have 64 colors, don't access colors[64] Fixes remaining invalid read.