Bug#463759: gstreamer0.10-ffmpeg: crashes iceweasel from gstffmpegdec.c:731

Sun Feb 3 02:23:58 UTC 2008

Package: gstreamer0.10-ffmpeg
Version: 0.10.3-4
Severity: important

This is 100% reproducible when trying to view flash video (e.g. YouTube) from iceweasel.  My system has a number of experimental packages that I installed to resolve dependencies so I could build non-optimized versions from source.  I'm happy to provide further information or shell access upon request.

(gdb) where
#0  0x00002b8c87c6e970 in abort () from /lib/libc.so.6
#1  0x00002b8c87223a13 in g_assertion_message () from /usr/lib/libglib-2.0.so.0
#2  0x00002aaab98dc9d9 in gst_ffmpegdec_get_buffer (context=0x7cde200, picture=0x8037940) at gstffmpegdec.c:731
#3  0x00002aaab5fa1ae2 in alloc_picture () from /usr/lib/libavcodec.so.1d
#4  0x00002aaab5fa208f in MPV_frame_start () from /usr/lib/libavcodec.so.1d
#5  0x00002aaab606c2c9 in ff_h263_decode_frame () from /usr/lib/libavcodec.so.1d
#6  0x00002aaab5fb10b3 in avcodec_decode_video () from /usr/lib/libavcodec.so.1d
#7  0x00002aaab98e05e8 in gst_ffmpegdec_video_frame (ffmpegdec=0x85f0010, data=0x85f2000 "", size=3212, in_timestamp=18446744073709551615, 
    in_duration=18446744073709551615, outbuf=0x7fff2768b638, ret=0x7fff2768b85c) at gstffmpegdec.c:1352
#8  0x00002aaab98e2def in gst_ffmpegdec_frame (ffmpegdec=0x85f0010, data=0x85f2000 "", size=3212, got_data=0x7fff2768b860, 
    in_timestamp=18446744073709551615, in_duration=18446744073709551615, ret=0x7fff2768b85c) at gstffmpegdec.c:1719
#9  0x00002aaab98e552a in gst_ffmpegdec_chain (pad=0x6cfbe60, inbuf=0x842d3a0) at gstffmpegdec.c:2102
#10 0x00002aaab76d97b9 in ?? () from /usr/lib/libgstreamer-0.10.so.0
#11 0x00002aaab76d9dd3 in gst_pad_push () from /usr/lib/libgstreamer-0.10.so.0
#12 0x00002aaab53b999a in ?? () from /usr/lib/libswfdec-0.5.so.5
#13 0x00002aaab53b9a9f in ?? () from /usr/lib/libswfdec-0.5.so.5
#14 0x00002aaab53baede in swfdec_video_decoder_decode () from /usr/lib/libswfdec-0.5.so.5
#15 0x00002aaab53d1c8e in ?? () from /usr/lib/libswfdec-0.5.so.5
#16 0x00002aaab53d1fdb in ?? () from /usr/lib/libswfdec-0.5.so.5
#17 0x00002aaab53c7ee8 in ?? () from /usr/lib/libswfdec-0.5.so.5
#18 0x00002aaab53d9233 in ?? () from /usr/lib/libswfdec-0.5.so.5
#19 0x00002aaab53db4b4 in ?? () from /usr/lib/libswfdec-0.5.so.5
#20 0x00002aaab53d9f4c in ?? () from /usr/lib/libswfdec-0.5.so.5
#21 0x00002b8c86f76ad4 in ?? () from /usr/lib/libgobject-2.0.so.0
#22 0x00002b8c86f767b6 in g_closure_invoke () from /usr/lib/libgobject-2.0.so.0
#23 0x00002b8c86f8fd83 in ?? () from /usr/lib/libgobject-2.0.so.0
#24 0x00002b8c86f8e749 in g_signal_emit_valist () from /usr/lib/libgobject-2.0.so.0
#25 0x00002b8c86f8ed1a in g_signal_emit () from /usr/lib/libgobject-2.0.so.0
#26 0x00002aaab5164408 in ?? () from /usr/lib/libswfdec-gtk-0.5.so.5
#27 0x00002b8c871f6457 in ?? () from /usr/lib/libglib-2.0.so.0
#28 0x00002b8c871f7be4 in g_main_context_dispatch () from /usr/lib/libglib-2.0.so.0
#29 0x00002b8c871f8229 in ?? () from /usr/lib/libglib-2.0.so.0
#30 0x00002b8c871f8a33 in g_main_loop_run () from /usr/lib/libglib-2.0.so.0
#31 0x00002b8c8459e883 in IA__gtk_main () at /build/buildd/gtk+2.0-2.12.7/gtk/gtkmain.c:1163
#32 0x00000000006b38e5 in nsAppShell::Run (this=0x15e8860) at nsAppShell.cpp:139
#33 0x0000000000c23d6e in nsAppStartup::Run (this=0x15e87e0) at nsAppStartup.cpp:151
#34 0x0000000000447b42 in XRE_main (argc=<value optimized out>, argv=<value optimized out>, aAppData=<value optimized out>) at nsAppRunner.cpp:2817
#35 0x00002b8c87c591c4 in __libc_start_main () from /lib/libc.so.6
#36 0x0000000000442d69 in _start ()

(gdb) print *context
$2 = {av_class = 0x2aaab64ef620, bit_rate = 64000, bit_rate_tolerance = 4000000, flags = 16384, sub_id = 0, me_method = 5, extradata = 0x3b02820 "", 
  extradata_size = 0, time_base = {num = 1, den = 25}, width = 320, height = 240, gop_size = 12, pix_fmt = PIX_FMT_YUV420P, rate_emu = 0, 
  draw_horiz_band = 0, sample_rate = 0, channels = 0, sample_fmt = SAMPLE_FMT_S16, frame_size = 0, frame_number = 1, real_pict_num = 0, delay = 0, 
  qcompress = 0.5, qblur = 0.5, qmin = 2, qmax = 31, max_qdiff = 3, max_b_frames = 0, b_quant_factor = 1.25, rc_strategy = 0, b_frame_strategy = 0, 
  hurry_up = 0, codec = 0x2aaab64f0d80, priv_data = 0x927f8b0, rtp_mode = 0, rtp_payload_size = 0, rtp_callback = 0, mv_bits = 0, header_bits = 0, 
  i_tex_bits = 0, p_tex_bits = 0, i_count = 0, p_count = 0, skip_count = 0, misc_bits = 0, frame_bits = 0, opaque = 0x85f0010, 
  codec_name = '\0' <repeats 31 times>, codec_type = CODEC_TYPE_UNKNOWN, codec_id = CODEC_ID_FLV1, codec_tag = 0, workaround_bugs = 1, 
  luma_elim_threshold = 0, chroma_elim_threshold = 0, strict_std_compliance = 0, b_quant_offset = 1.25, error_resilience = 1, 
  get_buffer = 0x2aaab98dc8f6 <gst_ffmpegdec_get_buffer>, release_buffer = 0x2aaab98dc9de <gst_ffmpegdec_release_buffer>, has_b_frames = 0, 
  block_align = 0, parse_only = 0, mpeg_quant = 0, stats_out = 0x0, stats_in = 0x0, rc_qsquish = 0, rc_qmod_amp = 0, rc_qmod_freq = 0, rc_override = 0x0, 
  rc_override_count = 0, rc_eq = 0x2aaab623cad0 "tex^qComp", rc_max_rate = 0, rc_min_rate = 0, rc_buffer_size = 0, rc_buffer_aggressivity = 1, 
  i_quant_factor = -0.800000012, i_quant_offset = 0, rc_initial_cplx = 0, dct_algo = 0, lumi_masking = 0, temporal_cplx_masking = 0, 
  spatial_cplx_masking = 0, p_masking = 0, dark_masking = 0, unused = 0, idct_algo = 0, slice_count = 0, slice_offset = 0x0, error_concealment = 3, 
  dsp_mask = 0, bits_per_sample = 0, prediction_method = 0, sample_aspect_ratio = {num = 0, den = 1}, coded_frame = 0x9280020, debug = 0, debug_mv = 0, 
  error = {0, 0, 0, 0}, mb_qmin = 0, mb_qmax = 0, me_cmp = 0, me_sub_cmp = 0, mb_cmp = 0, ildct_cmp = 8, dia_size = 0, last_predictor_count = 0, 
  pre_me = 0, me_pre_cmp = 0, pre_dia_size = 0, me_subpel_quality = 8, get_format = 0x2aaab5fb08b0 <avcodec_default_get_format>, dtg_active_format = 0, 
  me_range = 0, intra_quant_bias = 999999, inter_quant_bias = 999999, color_table_id = 0, internal_buffer_count = 0, internal_buffer = 0x0, 
  global_quality = 0, coder_type = 0, context_model = 0, slice_flags = 0, xvmc_acceleration = 0, mb_decision = 0, intra_matrix = 0x0, inter_matrix = 0x0, 
  stream_codec_tag = 0, scenechange_threshold = 0, lmin = 236, lmax = 3658, palctrl = 0x0, noise_reduction = 0, 
  reget_buffer = 0x2aaab5fb1bb0 <avcodec_default_reget_buffer>, rc_initial_buffer_occupancy = 0, inter_threshold = 0, flags2 = 256, error_rate = 0, 
  antialias_algo = 0, quantizer_noise_shaping = 0, thread_count = 1, execute = 0x2aaab5fb0800 <avcodec_default_execute>, thread_opaque = 0x0, 
  me_threshold = 0, mb_threshold = 0, intra_dc_precision = 0, nsse_weight = 8, skip_top = 0, skip_bottom = 0, profile = -99, level = -99, lowres = 0, 
  coded_width = 320, coded_height = 240, frame_skip_threshold = 0, frame_skip_factor = 0, frame_skip_exp = 0, frame_skip_cmp = 13, border_masking = 0, 
  mb_lmin = 236, mb_lmax = 3658, me_penalty_compensation = 256, skip_loop_filter = AVDISCARD_DEFAULT, skip_idct = AVDISCARD_DEFAULT, 
  skip_frame = AVDISCARD_DEFAULT, bidir_refine = 0, brd_scale = 0, crf = 0, cqp = -1, keyint_min = 25, refs = 1, chromaoffset = 0, bframebias = 0, 
  trellis = 0, complexityblur = 20, deblockalpha = 0, deblockbeta = 0, partitions = 0, directpred = 2, cutoff = 0, scenechange_factor = 6, 
  mv0_threshold = 256, b_sensitivity = 40, compression_level = -1, use_lpc = -1, lpc_coeff_precision = 0, min_prediction_order = -1, 
  max_prediction_order = -1, prediction_order_method = -1, min_partition_order = -1, max_partition_order = -1, timecode_frame_start = 0, 
  request_channels = 0}

-- System Information:
Debian Release: lenny/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (500, 'testing'), (1, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.24-rc8 (SMP w/2 CPU cores)
Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968)
Shell: /bin/sh linked to /bin/bash

Versions of packages gstreamer0.10-ffmpeg depends on:
ii  libavcodec1d             0.cvs20071007-2 ffmpeg codec library
ii  libavformat1d            0.cvs20071007-2 ffmpeg file format library
ii  libavutil1d              0.cvs20071007-2 ffmpeg utility library
ii  libc6                    2.7-6           GNU C Library: Shared libraries
ii  libglib2.0-0             2.15.4-1        The GLib library of C routines
ii  libgstreamer-plugins-bas 0.10.17-1       GStreamer libraries from the "base
ii  libgstreamer0.10-0       0.10.17-1       Core GStreamer libraries and eleme
ii  libogg0                  1.1.3-3         Ogg Bitstream Library
ii  liboil0.3                0.3.12-1        Library of Optimized Inner Loops
ii  libpostproc1d            0.cvs20071007-2 ffmpeg video postprocessing librar
ii  libraw1394-8             1.3.0-2         library for direct access to IEEE 
ii  libtheora0               1.0~beta2-3     The Theora Video Compression Codec
ii  libvorbis0a              1.2.0.dfsg-3    The Vorbis General Audio Compressi
ii  libvorbisenc2            1.2.0.dfsg-3    The Vorbis General Audio Compressi
ii  libxml2                  2.6.31.dfsg-1   GNOME XML library

gstreamer0.10-ffmpeg recommends no packages.

-- no debconf information