Bug#739579: gstreamer1.0: totem crashes while seeking

[Kelly Clowers]

Hi, I am seeing this bug with Totem (3.8.2-4+b1) and Snappy (1.0, from
source, not in archive currently) in Sid (gstreamer 1.2.3-1).

For me it occurs in most, but not all, h264+mkv files. My h264+MP4
files are not affected, nor are any non-h264 files as far as I can
tell. Non-gst players (mplayer, vlc) have no issue with these files.

The error is either
** (snappy:20884): CRITICAL **: gst_video_codec_frame_unref: assertion
'frame->ref_count > 0' failed

or else (it varies from run to run):
 ** (snappy:20914): CRITICAL **: gst_video_codec_frame_ref: assertion
'frame != NULL' failed


Attaching GDB run and backtrace from snappy. Let me know if I need to
do things differently.

Thanks,
Kelly Clowers
-------------- next part --------------
krc at ken:~$ gdb --args snappy NFS/media/video/tv/BBC.Life.2009.BluRay.1080p.DTS.x264-CHD/BBC.Life.E06.2009.BluRay.1080p.DTS.x264-CHD.mkv 
GNU gdb (GDB) 7.6.2 (Debian 7.6.2-1)
Copyright (C) 2013 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html>
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.  Type "show copying"
and "show warranty" for details.
This GDB was configured as "x86_64-linux-gnu".
For bug reporting instructions, please see:
<http://www.gnu.org/software/gdb/bugs/>...
Reading symbols from /usr/local/bin/snappy...done.
(gdb) run
Starting program: /usr/local/bin/snappy NFS/media/video/tv/BBC.Life.2009.BluRay.1080p.DTS.x264-CHD/BBC.Life.E06.2009.BluRay.1080p.DTS.x264-CHD.mkv
warning: no loadable sections found in added symbol-file system-supplied DSO at 0x7ffff7ffa000
warning: Could not load shared library symbols for linux-vdso.so.1.
Do you need "set solib-search-path" or "set sysroot"?
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1".
Adding file: NFS/media/video/tv/BBC.Life.2009.BluRay.1080p.DTS.x264-CHD/BBC.Life.E06.2009.BluRay.1080p.DTS.x264-CHD.mkv
[New Thread 0x7fffe90df700 (LWP 18405)]
[New Thread 0x7fffe3fff700 (LWP 18406)]
[New Thread 0x7fffe33ac700 (LWP 18407)]
[New Thread 0x7fffe2bab700 (LWP 18408)]
[New Thread 0x7fffe1f5e700 (LWP 18409)]
Stream with high frequencies VQ coding
[New Thread 0x7fffcbfff700 (LWP 18410)]
[New Thread 0x7fffcb7fe700 (LWP 18411)]
[New Thread 0x7fffcaffd700 (LWP 18412)]
[New Thread 0x7fffca7fc700 (LWP 18413)]
[New Thread 0x7fffc9ffb700 (LWP 18414)]
[New Thread 0x7fffc97fa700 (LWP 18415)]
[Thread 0x7fffcbfff700 (LWP 18410) exited]
[Thread 0x7fffcb7fe700 (LWP 18411) exited]
[Thread 0x7fffcaffd700 (LWP 18412) exited]
[Thread 0x7fffca7fc700 (LWP 18413) exited]
Loading: file:///home/krc/NFS/media/video/tv/BBC.Life.2009.BluRay.1080p.DTS.x264-CHD/BBC.Life.E06.2009.BluRay.1080p.DTS.x264-CHD.mkv
Loading ui!
[New Thread 0x7fffca7fc700 (LWP 18416)]

** (snappy:18401): WARNING **: Problem inhibiting the screensaver: GDBus.Error:org.freedesktop.DBus.Error.NameHasNoOwner: Name "org.gnome.SessionManager" does not exist
[New Thread 0x7fffcaffd700 (LWP 18417)]
[Thread 0x7fffcaffd700 (LWP 18417) exited]
[New Thread 0x7fffcaffd700 (LWP 18418)]
[Thread 0x7fffcaffd700 (LWP 18418) exited]
[New Thread 0x7fffcaffd700 (LWP 18419)]
[New Thread 0x7fffcb7fe700 (LWP 18420)]
[New Thread 0x7fffcbfff700 (LWP 18421)]
[New Thread 0x7fffb1fda700 (LWP 18422)]
[New Thread 0x7fffb17d9700 (LWP 18423)]
Stream with high frequencies VQ coding
[New Thread 0x7fffa7df6700 (LWP 18424)]

** (snappy:18401): CRITICAL **: gst_video_codec_frame_ref: assertion 'frame != NULL' failed

Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 0x7fffe1f5e700 (LWP 18409)]
0x00007ffff7260066 in gst_mini_object_replace (olddata=olddata at entry=0x40, newdata=0x0) at gstminiobject.c:497
497 gstminiobject.c: No such file or directory.
(gdb) backtrace
#0  0x00007ffff7260066 in gst_mini_object_replace (olddata=olddata at entry=0x40, newdata=0x0) at gstminiobject.c:497
#1  0x00007fffe0ef6a20 in gst_buffer_replace (nbuf=<optimized out>, obuf=0x40) at /usr/include/gstreamer-1.0/gst/gstbuffer.h:475
#2  gst_ffmpegviddec_video_frame (ffmpegdec=ffmpegdec at entry=0x7fffcc012180, data=<optimized out>, data at entry=0x7fffce7f3aa0 "", size=<optimized out>, 
    frame=frame at entry=0x7fffbc0b57f0, ret=ret at entry=0x7fffe1f5d35c) at gstavviddec.c:1229
#3  0x00007fffe0ef7698 in gst_ffmpegviddec_frame (ffmpegdec=ffmpegdec at entry=0x7fffcc012180, data=data at entry=0x7fffce7f3aa0 "", size=size at entry=46194, 
    got_data=got_data at entry=0x7fffe1f5d358, frame=frame at entry=0x7fffbc0b57f0, ret=ret at entry=0x7fffe1f5d35c) at gstavviddec.c:1371
#4  0x00007fffe0ef7d2c in gst_ffmpegviddec_handle_frame (decoder=0x7fffcc012180, frame=0x7fffbc0b57f0) at gstavviddec.c:1491
#5  0x00007ffff798e989 in gst_video_decoder_decode_frame (decoder=decoder at entry=0x7fffcc012180, frame=0x7fffbc0b57f0) at gstvideodecoder.c:2832
#6  0x00007ffff798eced in gst_video_decoder_chain_forward (decoder=decoder at entry=0x7fffcc012180, buf=buf at entry=0x7fffcd284c50, at_eos=at_eos at entry=0)
    at gstvideodecoder.c:1757
#7  0x00007ffff7990eed in gst_video_decoder_chain (pad=<optimized out>, parent=0x7fffcc012180, buf=0x7fffcd284c50) at gstvideodecoder.c:2037
#8  0x00007ffff7263b88 in gst_pad_chain_data_unchecked (data=0x7fffcd284c50, type=4112, pad=0x7fffd4027220) at gstpad.c:3760
#9  gst_pad_push_data (pad=0x7fffd81c8ba0, type=type at entry=4112, data=<optimized out>) at gstpad.c:3990
#10 0x00007ffff726a816 in gst_pad_push (pad=<optimized out>, buffer=<optimized out>) at gstpad.c:4093
#11 0x00007ffff75391d9 in gst_base_transform_chain (pad=<optimized out>, parent=0x7fffd402cdd0, buffer=<optimized out>) at gstbasetransform.c:2237
#12 0x00007ffff7263b88 in gst_pad_chain_data_unchecked (data=0x7fffcd284c50, type=4112, pad=0x2085d60) at gstpad.c:3760
#13 gst_pad_push_data (pad=0x7fffd40260a0, type=type at entry=4112, data=<optimized out>, data at entry=0x7fffcd284c50) at gstpad.c:3990
#14 0x00007ffff726a816 in gst_pad_push (pad=<optimized out>, buffer=buffer at entry=0x7fffcd284c50) at gstpad.c:4093
#15 0x00007ffff751ba49 in gst_base_parse_push_frame (parse=parse at entry=0x7fffbc017e90, frame=frame at entry=0x7fffe1f5d9b0) at gstbaseparse.c:2299
#16 0x00007ffff751c450 in gst_base_parse_chain (pad=<optimized out>, parent=0x7fffbc017e90, buffer=0x7fffcd284c50) at gstbaseparse.c:2805
#17 0x00007ffff7263b88 in gst_pad_chain_data_unchecked (data=0x7fffcd284c50, type=4112, pad=0x2085900) at gstpad.c:3760
#18 gst_pad_push_data (pad=0x2085b30, type=type at entry=4112, data=<optimized out>, data at entry=0x7fffcd284c50) at gstpad.c:3990
#19 0x00007ffff726a816 in gst_pad_push (pad=<optimized out>, buffer=buffer at entry=0x7fffcd284c50) at gstpad.c:4093
#20 0x00007fffe846a873 in gst_single_queue_push_one (object=0x7fffcd284c50, sq=0x7fffbc016b40, mq=0x7fffd40196b0) at gstmultiqueue.c:1089
#21 gst_multi_queue_loop (pad=<optimized out>) at gstmultiqueue.c:1338
#22 0x00007ffff72912b9 in gst_task_func (task=0x7fffd401c710) at gsttask.c:316
#23 0x00007ffff21e4a4c in ?? () from /lib/x86_64-linux-gnu/libglib-2.0.so.0
#24 0x00007ffff21e4095 in ?? () from /lib/x86_64-linux-gnu/libglib-2.0.so.0
#25 0x00007ffff1f62062 in start_thread (arg=0x7fffe1f5e700) at pthread_create.c:312
#26 0x00007ffff1c96a3d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:111