Bug 622020 – totem crashed with SIGSEGV in gst_pulsering_context_state_cb()

After an evaluation, GNOME has moved from Bugzilla to GitLab. Learn more about GitLab.
No new issues can be reported in GNOME Bugzilla anymore.
To report an issue in a GNOME project, go to GNOME GitLab.
Do not go to GNOME Gitlab for: Bluefish, Doxygen, GnuCash, GStreamer, java-gnome, LDTP, NetworkManager, Tomboy.

Bug 622020 - totem crashed with SIGSEGV in gst_pulsering_context_state_cb()


Summary:	totem crashed with SIGSEGV in gst_pulsering_context_state_cb()


Status:	RESOLVED OBSOLETE

Product:	GStreamer
Classification:	Platform
Component:	gst-plugins-good
Version:	0.10.x
Hardware:	Other Linux

Importance:	Normal critical
Target Milestone:	NONE
Assigned To:	GStreamer Maintainers
QA Contact:	GStreamer Maintainers

URL:
Whiteboard:

Depends on:
Blocks:

Reported:	2010-06-18 17:27 UTC by madbiologist
Modified:	2010-06-21 22:43 UTC

See Also:	https://launchpad.net/bugs/463037
GNOME target:	---
GNOME version:	---

Attachments
Stacktrace.txt (retraced) (5.35 KB, text/plain) 2010-06-18 17:27 UTC, madbiologist	Details
ThreadStacktrace.txt (retraced) (22.66 KB, text/plain) 2010-06-18 17:30 UTC, madbiologist	Details
Registers (481 bytes, text/plain) 2010-06-18 17:31 UTC, madbiologist	Details

Description madbiologist 2010-06-18 17:27:04 UTC

Created attachment 164026 [details]
Stacktrace.txt (retraced)

This bug was reported at https://bugs.edge.launchpad.net/ubuntu/+source/totem/+bug/463037

Binary package hint: totem

I opened a .MOV file from Nautilus that is about 1 minute long. When it completed, I opened another MOV file from Nautilus which caused the crash of the existing instance of Totem

ProblemType: Crash
Architecture: i386
Date: Wed Oct 28 21:34:00 2009
DistroRelease: Ubuntu 9.10
ExecutablePath: /usr/bin/totem
Package: totem 2.28.1-0ubuntu4
ProcCmdline: totem /home/username/Pictures/2007-12-06--21.32.28/100_2200.MOV
ProcEnviron:
 LANG=en_CA.UTF-8
 SHELL=/bin/bash
ProcVersionSignature: Ubuntu 2.6.31-14.48-generic
SegvAnalysis:
 Segfault happened at: 0xd74917 <gst_pulsering_context_state_cb+151>: mov 0x1c4(%esi),%eax
 PC (0x00d74917) ok
 source "0x1c4(%esi)" (0x000001c4) not located in a known VMA region (needed readable region)!
 destination "%eax" ok
SegvReason: reading NULL VMA
Signal: 11
SourcePackage: totem
StacktraceTop:
 gst_pulsering_context_state_cb (c=0xb3413008,
 ?? () from /usr/lib/libpulse.so.0
 pa_context_disconnect () from /usr/lib/libpulse.so.0
 gst_pulsering_destroy_context (pbuf=0xb3413008)
 gst_pulseringbuffer_finalize (object=0x9f48ee8)
Title: totem crashed with SIGSEGV in gst_pulsering_context_state_cb()
Uname: Linux 2.6.31-14-generic i686
UserGroups: adm admin audio cdrom dialout dip floppy fuse lpadmin netdev plugdev powerdev scanner video
XsessionErrors:
 (gnome-settings-daemon:2154): GLib-CRITICAL **: g_propagate_error: assertion `src != NULL' failed
 (gnome-settings-daemon:2154): GLib-CRITICAL **: g_propagate_error: assertion `src != NULL' failed
 (nautilus:2288): Eel-CRITICAL **: eel_preferences_get_boolean: assertion `preferences_is_initialized ()' failed
 (polkit-gnome-authentication-agent-1:2318): GLib-CRITICAL **: g_once_init_leave: assertion `initialization_value != 0' failed
 (nautilus:3810): Eel-CRITICAL **: eel_preferences_get_boolean: assertion `preferences_is_initialized ()' failed

Comment 1 madbiologist 2010-06-18 17:30:09 UTC

Created attachment 164027 [details]
ThreadStacktrace.txt (retraced)

Comment 2 madbiologist 2010-06-18 17:31:29 UTC

Created attachment 164028 [details]
Registers

Comment 3 Fabio Durán Verdugo 2010-06-18 18:33:19 UTC

Paste here the thread Stacktrace.

+ Trace 222480

Thread 10 (process 3930)

#0 __kernel_vsyscall
#1 fsync
from /lib/tls/i686/cmov/libpthread.so.0
#2 g_file_set_contents
from /lib/libglib-2.0.so.0
#3 g_bookmark_file_to_file
from /lib/libglib-2.0.so.0
#4 gtk_recent_manager_real_changed
at /build/buildd/gtk+2.0-2.18.3/gtk/gtkrecentmanager.c line 409
#5 g_cclosure_marshal_VOID__VOID
from /usr/lib/libgobject-2.0.so.0
#6 ??
from /usr/lib/libgobject-2.0.so.0
#7 g_closure_invoke
from /usr/lib/libgobject-2.0.so.0
#8 ??
from /usr/lib/libgobject-2.0.so.0
#9 g_signal_emit_valist
from /usr/lib/libgobject-2.0.so.0
#10 g_signal_emit
from /usr/lib/libgobject-2.0.so.0
#11 IA__gtk_recent_manager_add_full
at /build/buildd/gtk+2.0-2.18.3/gtk/gtkrecentmanager.c line 1377
#12 recent_info_cb
at totem-menu.c line 726
#13 g_simple_async_result_complete
from /usr/lib/libgio-2.0.so.0
#14 ??
from /usr/lib/libgio-2.0.so.0
#15 ??
from /lib/libglib-2.0.so.0
#16 g_main_context_dispatch
from /lib/libglib-2.0.so.0
#17 ??
from /lib/libglib-2.0.so.0
#18 g_main_loop_run
from /lib/libglib-2.0.so.0
#19 IA__gtk_main
at /build/buildd/gtk+2.0-2.18.3/gtk/gtkmain.c line 1218
#20 main
at totem.c line 278

Thread 1 (process 3980)

#0 gst_pulsering_context_state_cb
at pulsesink.c line 314
#1 pa_context_set_state
at pulse/context.c line 313
#2 pa_context_disconnect
at pulse/context.c line 1037
#3 gst_pulsering_destroy_context
at pulsesink.c line 254
#4 gst_pulseringbuffer_finalize
at pulsesink.c line 274
#5 g_object_unref
from /usr/lib/libgobject-2.0.so.0
#6 gst_object_unref
at gstobject.c line 326
#7 gst_object_unparent
at gstobject.c line 865
#8 gst_base_audio_sink_dispose
at gstbaseaudiosink.c line 275
#9 g_object_unref
from /usr/lib/libgobject-2.0.so.0
#10 gst_object_unref
at gstobject.c line 326
#11 gst_play_sink_set_sink
at gstplaysink.c line 482
#12 no_more_pads_cb
at gstplaybin2.c line 2252
#13 g_cclosure_marshal_VOID__VOID
from /usr/lib/libgobject-2.0.so.0
#14 g_closure_invoke
from /usr/lib/libgobject-2.0.so.0
#15 ??
from /usr/lib/libgobject-2.0.so.0
#16 g_signal_emit_valist
from /usr/lib/libgobject-2.0.so.0
#17 g_signal_emit
from /usr/lib/libgobject-2.0.so.0
#18 gst_element_no_more_pads
at gstelement.c line 923
#19 no_more_pads_full
at gsturidecodebin.c line 673
#20 g_cclosure_marshal_VOID__VOID
from /usr/lib/libgobject-2.0.so.0
#21 g_closure_invoke
from /usr/lib/libgobject-2.0.so.0
#22 ??
from /usr/lib/libgobject-2.0.so.0
#23 g_signal_emit_valist
from /usr/lib/libgobject-2.0.so.0
#24 g_signal_emit
from /usr/lib/libgobject-2.0.so.0
#25 gst_element_no_more_pads
at gstelement.c line 923
#26 gst_decode_bin_expose
at gstdecodebin2.c line 2512
#27 source_pad_blocked_cb
at gstdecodebin2.c line 2621
#28 handle_pad_block
at gstpad.c line 3852
#29 gst_pad_push_event
at gstpad.c line 4795
#30 gst_multi_queue_loop
at gstmultiqueue.c line 772
#31 gst_task_func
at gsttask.c line 234
#32 default_func
at gsttaskpool.c line 70
#33 ??
from /lib/libglib-2.0.so.0
#34 ??
from /lib/libglib-2.0.so.0
#35 start_thread
from /lib/tls/i686/cmov/libpthread.so.0
#36 clone
at ../sysdeps/unix/sysv/linux/i386/clone.S line 130

Comment 4 Edward Hervey 2010-06-19 07:20:30 UTC

what version of gst-plugins-good do you have ?

This might have been fixed by the following commit:

commit 55b5e2e3f38803cd50930db6fd6c7fdb09f0e815
Author:	Wim Taymans <wim.taymans@collabora.co.uk>  Wed Jan 27 13:26:46 2010
Committer:	Wim Taymans <wim.taymans@collabora.co.uk>  Fri Feb 12 13:53:57 2010

pulsesink: avoid segfault when shutting down

when we are shutting down, we might still receive state updates from pulseaudio
but since we are unparented we should not do anything with the NULL parent
anymore.

Comment 5 madbiologist 2010-06-19 16:22:09 UTC

I've asked this question of the original reporter in Launchpad.

Comment 6 madbiologist 2010-06-21 12:45:13 UTC

The original reporter has upgraded to Ubuntu 10.04 "Lucid Lynx" with gstreamer0.10-plugins-good 0.10.21-1ubuntu3 and cannot reproduce this bug anymore.

Closing this bug.

Thanks for your prompt attention.

Comment 7 Tim-Philipp Müller 2010-06-21 22:43:49 UTC

Marking as OBSOLETE since we don't really know what fixed it when.