After an evaluation, GNOME has moved from Bugzilla to GitLab. Learn more about GitLab.
No new issues can be reported in GNOME Bugzilla anymore.
To report an issue in a GNOME project, go to GNOME GitLab.
Do not go to GNOME Gitlab for: Bluefish, Doxygen, GnuCash, GStreamer, java-gnome, LDTP, NetworkManager, Tomboy.
Bug 634445 - [matroska-demux] crash when seeking on partially-downloaded file
[matroska-demux] crash when seeking on partially-downloaded file
Status: RESOLVED DUPLICATE of bug 629047
Product: GStreamer
Classification: Platform
Component: gst-plugins-good
unspecified
Other Linux
: Normal critical
: git master
Assigned To: GStreamer Maintainers
GStreamer Maintainers
Depends on:
Blocks:
 
 
Reported: 2010-11-09 17:55 UTC by Cristian Aravena Romero
Modified: 2010-11-15 10:13 UTC
See Also:
GNOME target: ---
GNOME version: 2.31/2.32


Description Cristian Aravena Romero 2010-11-09 17:55:27 UTC 
Open bug in Launchpad.net
https://bugs.launchpad.net/bugs/673090

+ Trace 224604

  • #0 gst_matroska_demux_handle_seek_event
    at matroska-demux.c line 2397
  • #1 gst_matroska_demux_handle_src_event
    at matroska-demux.c line 2791
  • #2 gst_pad_send_event
    at gstpad.c line 5098
  • #3 gst_pad_push_event
    at gstpad.c line 4954
  • #4 gst_pad_send_event
    at gstpad.c line 5098
  • #5 gst_pad_push_event
    at gstpad.c line 4954
  • #6 gst_ffmpegdec_src_event
    at gstffmpegdec.c line 559
  • #7 gst_pad_send_event
    at gstpad.c line 5098
  • #8 gst_pad_push_event
    at gstpad.c line 4954
  • #9 gst_pad_send_event
    at gstpad.c line 5098
  • #10 gst_pad_push_event
    at gstpad.c line 4954
  • #11 gst_pad_send_event
    at gstpad.c line 5098
  • #12 gst_pad_push_event
    at gstpad.c line 4954
  • #13 gst_input_selector_event
    at gstinputselector.c line 1076
  • #14 gst_pad_send_event
    at gstpad.c line 5098
  • #15 gst_pad_push_event
    at gstpad.c line 4954
  • #16 gst_pad_send_event
    at gstpad.c line 5098
  • #17 gst_pad_push_event
    at gstpad.c line 4954
  • #18 gst_pad_send_event
    at gstpad.c line 5098
  • #19 gst_pad_push_event
    at gstpad.c line 4954
  • #20 gst_pad_send_event
    at gstpad.c line 5098
  • #21 gst_pad_push_event
    at gstpad.c line 4954
  • #22 gst_base_transform_src_eventfunc
    at gstbasetransform.c line 1899
  • #23 gst_base_transform_src_event
    at gstbasetransform.c line 1868
  • #24 gst_pad_send_event
    at gstpad.c line 5098
  • #25 gst_pad_push_event
    at gstpad.c line 4954
  • #26 gst_base_transform_src_eventfunc
    at gstbasetransform.c line 1899
  • #27 gst_video_scale_src_event
    at gstvideoscale.c line 1284
  • #28 gst_base_transform_src_event
    at gstbasetransform.c line 1868
  • #29 gst_pad_send_event
    at gstpad.c line 5098
  • #30 gst_pad_push_event
    at gstpad.c line 4954
  • #31 gst_base_sink_send_event
    at gstbasesink.c line 4316
  • #32 gst_element_send_event
    at gstelement.c line 1469
  • #33 gst_bin_send_event
    at gstbin.c line 2619
  • #34 gst_element_send_event
    at gstelement.c line 1469
  • #35 gst_play_sink_send_event_to_sink
    at gstplaysink.c line 2854
  • #36 gst_play_sink_send_event
    at gstplaysink.c line 2904
  • #37 gst_element_send_event
    at gstelement.c line 1469
  • #38 gst_bin_send_event
    at gstbin.c line 2619
  • #39 gst_element_send_event
    at gstelement.c line 1469
  • #40 bacon_video_widget_seek_time_no_lock
    at bacon-video-widget-gst-0.10.c line 3962
  • #41 bacon_video_widget_seek_time
    at bacon-video-widget-gst-0.10.c line 4028
  • #42 main
    at totem-video-thumbnailer.c line 389 






Comment 1


Cristian Aravena Romero





          2010-11-14 03:05:37 UTC
        



$ping






Comment 2


Tim-Philipp Müller





          2010-11-14 12:29:17 UTC
        



This crashes on a half-downloaded matroska file. I'm guessing this is not reproducible ?

Seems to crash here:
http://cgit.freedesktop.org/gstreamer/gst-plugins-good/tree/gst/matroska/matroska-demux.c?id=b26897dd84ac9b09e7d262989a75984aab0bdc91#n2397

So in other words: buf is NULL here (as the SegvAnalysis suggest as well).


This may be caused by one of these goto resume (after buf has been freed and set to NULL):
http://cgit.freedesktop.org/gstreamer/gst-plugins-good/tree/gst/matroska/matroska-demux.c?id=b26897dd84ac9b09e7d262989a75984aab0bdc91#n2419
http://cgit.freedesktop.org/gstreamer/gst-plugins-good/tree/gst/matroska/matroska-demux.c?id=b26897dd84ac9b09e7d262989a75984aab0bdc91#n2433






Comment 3


Cristian Aravena Romero





          2010-11-14 17:51:57 UTC
        



(In reply to comment #2)
> This crashes on a half-downloaded matroska file. I'm guessing this is not
> reproducible ?

Tim-Philipp: This is not reproducible






Comment 4


Cristian Aravena Romero





          2010-11-14 18:45:19 UTC
        



Duplicated:





+
Trace
    224665






    

  • 
#0
gst_matroska_demux_handle_seek_event

    
                at matroska-demux.c
                  line
                  2397

    

    • 

  • 
#1
gst_matroska_demux_handle_src_event

    
                at matroska-demux.c
                  line
                  2791

    

    • 

  • 
#2
gst_pad_send_event

    
                at gstpad.c
                  line
                  5098

    

    • 

  • 
#3
gst_pad_push_event

    
                at gstpad.c
                  line
                  4954

    

    • 

  • 
#4
gst_multi_queue_src_event

    
                at gstmultiqueue.c
                  line
                  1370

    

    • 

  • 
#5
gst_pad_send_event

    
                at gstpad.c
                  line
                  5098

    

    • 

  • 
#6
gst_pad_push_event

    
                at gstpad.c
                  line
                  4954

    

    • 

  • 
#7
gst_ffmpegdec_src_event

    
                at gstffmpegdec.c
                  line
                  559

    

    • 

  • 
#8
gst_pad_send_event

    
                at gstpad.c
                  line
                  5098

    

    • 

  • 
#9
gst_pad_push_event

    
                at gstpad.c
                  line
                  4954

    

    • 

  • 
#10
gst_proxy_pad_do_event

    
                at gstghostpad.c
                  line
                  112

    

    • 

  • 
#11
gst_pad_send_event

    
                at gstpad.c
                  line
                  5098

    

    • 

  • 
#12
gst_pad_push_event

    
                at gstpad.c
                  line
                  4954

    

    • 

  • 
#13
gst_proxy_pad_do_event

    
                at gstghostpad.c
                  line
                  112

    

    • 

  • 
#14
gst_pad_send_event

    
                at gstpad.c
                  line
                  5098

    

    • 

  • 
#15
gst_pad_push_event

    
                at gstpad.c
                  line
                  4954

    

    • 

  • 
#16
gst_input_selector_event

    
                at gstinputselector.c
                  line
                  1076

    

    • 

  • 
#17
gst_pad_send_event

    
                at gstpad.c
                  line
                  5098

    

    • 

  • 
#18
gst_pad_push_event

    
                at gstpad.c
                  line
                  4954

    

    • 

  • 
#19
gst_proxy_pad_do_event

    
                at gstghostpad.c
                  line
                  112

    

    • 

  • 
#20
gst_pad_send_event

    
                at gstpad.c
                  line
                  5098

    

    • 

  • 
#21
gst_pad_push_event

    
                at gstpad.c
                  line
                  4954

    

    • 

  • 
#22
gst_proxy_pad_do_event

    
                at gstghostpad.c
                  line
                  112

    

    • 

  • 
#23
gst_pad_send_event

    
                at gstpad.c
                  line
                  5098

    

    • 

  • 
#24
gst_pad_push_event

    
                at gstpad.c
                  line
                  4954

    

    • 

  • 
#25
gst_queue_handle_src_event

    
                at gstqueue.c
                  line
                  1230

    

    • 

  • 
#26
gst_pad_send_event

    
                at gstpad.c
                  line
                  5098

    

    • 

  • 
#27
gst_pad_push_event

    
                at gstpad.c
                  line
                  4954

    

    • 

  • 
#28
gst_base_transform_src_eventfunc

    
                at gstbasetransform.c
                  line
                  1899

    

    • 

  • 
#29
gst_base_transform_src_event

    
                at gstbasetransform.c
                  line
                  1868

    

    • 

  • 
#30
gst_pad_send_event

    
                at gstpad.c
                  line
                  5098

    

    • 

  • 
#31
gst_pad_push_event

    
                at gstpad.c
                  line
                  4954

    

    • 

  • 
#32
gst_base_transform_src_eventfunc

    
                at gstbasetransform.c
                  line
                  1899

    

    • 

  • 
#33
gst_video_scale_src_event

    
                at gstvideoscale.c
                  line
                  1284

    

    • 

  • 
#34
gst_base_transform_src_event

    
                at gstbasetransform.c
                  line
                  1868

    

    • 

  • 
#35
gst_pad_send_event

    
                at gstpad.c
                  line
                  5098

    

    • 

  • 
#36
gst_pad_push_event

    
                at gstpad.c
                  line
                  4954

    

    • 

  • 
#37
gst_base_sink_send_event

    
                at gstbasesink.c
                  line
                  4316

    

    • 

  • 
#38
gst_element_send_event

    
                at gstelement.c
                  line
                  1469

    

    • 

  • 
#39
gst_bin_send_event

    
                at gstbin.c
                  line
                  2619

    

    • 

  • 
#40
gst_element_send_event

    
                at gstelement.c
                  line
                  1469

    

    • 

  • 
#41
gst_play_sink_send_event_to_sink

    
                at gstplaysink.c
                  line
                  2854

    

    • 

  • 
#42
gst_play_sink_send_event

    
                at gstplaysink.c
                  line
                  2904

    

    • 

  • 
#43
gst_element_send_event

    
                at gstelement.c
                  line
                  1469

    

    • 

  • 
#44
gst_bin_send_event

    
                at gstbin.c
                  line
                  2619

    

    • 

  • 
#45
gst_element_send_event

    
                at gstelement.c
                  line
                  1469

    

    • 

  • 
#46
gst_element_seek

    
                at gstelement.c
                  line
                  1509

    

    • 

  • 
#47
bacon_video_widget_seek_time_no_lock

    
                at bacon-video-widget-gst-0.10.c
                  line
                  3962

    

    • 

  • 
#48
bacon_video_widget_seek_time

    
                at bacon-video-widget-gst-0.10.c
                  line
                  4028

    

    • 

  • 
#49
bacon_video_widget_seek

    
                at bacon-video-widget-gst-0.10.c
                  line
                  4059

    

    • 

  • 
#50
main

    
                at totem-video-thumbnailer.c
                  line
                  389

    

    • 













Comment 5


Mark Nauwelaerts





          2010-11-15 10:13:31 UTC
        



Analysis above is correct; duplicate of bug #629047 and already fixed in HEAD.

*** This bug has been marked as a duplicate of bug 629047 ***