After an evaluation, GNOME has moved from Bugzilla to GitLab. Learn more about GitLab.
No new issues can be reported in GNOME Bugzilla anymore.
To report an issue in a GNOME project, go to GNOME GitLab.
Do not go to GNOME Gitlab for: Bluefish, Doxygen, GnuCash, GStreamer, java-gnome, LDTP, NetworkManager, Tomboy.
Bug 782359 - vp9dec: double free or crash in gst_vpx_dec_release_buffer_cb
vp9dec: double free or crash in gst_vpx_dec_release_buffer_cb
Status: RESOLVED INCOMPLETE
Product: GStreamer
Classification: Platform
Component: gst-plugins-good
1.10.4
Other Linux
: Normal normal
: git master
Assigned To: GStreamer Maintainers
GStreamer Maintainers
Depends on:
Blocks:
 
 
Reported: 2017-05-09 00:01 UTC by Florian Nierhaus
Modified: 2018-05-07 15:54 UTC
See Also:
GNOME target: ---
GNOME version: ---


Description Florian Nierhaus 2017-05-09 00:01:58 UTC 
Running a test where we have rtp media VP9 and we have muted the video (no frames) and bring media in again and repeat. After a while we see our gstreamer pipeline crash in:

+ Trace 237434

  • #0 __GI_raise
    at ../nptl/sysdeps/unix/sysv/linux/raise.c line 56
  • #1 __GI_abort
    at abort.c line 89
  • #2 __libc_message
    at ../sysdeps/posix/libc_fatal.c line 175
  • #3 malloc_printerr
  • #4 _int_free
    at malloc.c line 3840
  • #5 gst_vpx_dec_release_buffer_cb
    at gstvpxdec.c line 493
  • #6 ??
    from /usr/lib/x86_64-linux-gnu/libvpx.so.4
  • #7 ??
    from /usr/lib/x86_64-linux-gnu/libvpx.so.4
  • #8 ??
    from /usr/lib/x86_64-linux-gnu/libvpx.so.4
  • #9 ??
    from /usr/lib/x86_64-linux-gnu/libvpx.so.4
  • #10 ??
    from /usr/lib/x86_64-linux-gnu/libvpx.so.4
  • #11 vpx_codec_decode
    from /usr/lib/x86_64-linux-gnu/libvpx.so.4
  • #12 gst_vpx_dec_handle_frame
    at gstvpxdec.c line 676
  • #13 gst_video_decoder_decode_frame
    at gstvideodecoder.c line 3389
  • #14 gst_video_decoder_chain_forward
    at gstvideodecoder.c line 2131
  • #15 gst_video_decoder_chain
    at gstvideodecoder.c line 2443
  • #16 gst_pad_chain_data_unchecked
    at gstpad.c line 4202
  • #17 gst_pad_push_data
    at gstpad.c line 4454
  • #18 gst_pad_push
    at gstpad.c line 4573
  • #19 gst_rtp_base_depayload_push
    at gstrtpbasedepayload.c line 823
  • #20 gst_rtp_base_depayload_handle_buffer
    at gstrtpbasedepayload.c line 477
  • #21 gst_pad_chain_data_unchecked
    at gstpad.c line 4202
  • #22 gst_pad_push_data
    at gstpad.c line 4454
  • #23 gst_pad_push
    at gstpad.c line 4573
  • #24 gst_queue_push_one
    at gstqueue.c line 1361
  • #25 gst_queue_loop
    at gstqueue.c line 1508
  • #26 gst_task_func
    at gsttask.c line 334
  • #27 ??
    from /lib/x86_64-linux-gnu/libglib-2.0.so.0
  • #28 ??
    from /lib/x86_64-linux-gnu/libglib-2.0.so.0
  • #29 start_thread
    at pthread_create.c line 309
  • #30 clone
    at ../sysdeps/unix/sysv/linux/x86_64/clone.S line 111 






Comment 1


Sebastian Dröge (slomo)





          2017-05-09 09:40:14 UTC
        



Can you provide a pcap capture, or gdp capture of a RTP stream that reproduces this crash?






Comment 2


Sebastian Dröge (slomo)





          2017-05-09 09:42:27 UTC
        



Also which version of libvpx are you using?

And this might fix it http://cgit.freedesktop.org/gstreamer/gst-plugins-good/commit/?id=e4cbefcb6cee33492a7f7f0b4e97a3fbccc96c54 , however it would seem like a bug in libvpx then.






Comment 3


Tim-Philipp Müller





          2017-07-12 18:25:55 UTC
        



This is/was with post-processing disabled?






Comment 4


Sebastian Dröge (slomo)





          2018-05-07 15:54:35 UTC
        



Closing this bug report as no further information has been provided. Please feel free to reopen this bug report if you can provide the information that was asked for in a previous comment.
Thanks!