[real demuxer] mencoder crashed with SIGSEGV in ds_get_next_pts()

[bill]

Binary package hint: mplayer

ProblemType: Crash
Architecture: i386
Date: Sun Sep 27 01:18:27 2009
DistroRelease: Ubuntu 9.10
ExecutablePath: /usr/bin/mencoder
Package: mencoder 2:1.0~rc3+svn20090426-1ubuntu5
ProcCmdline: /usr/bin/mencoder -srate 48000 -af lavcresample=48000 -oac lavc -aid 0 -ovc lavc -of mpeg -mpegopts format=dvd:tsaf -ofps 25 -vf scale=720:576,harddup -lavcopts vcodec=mpeg2video:trell:mbd=2:sc_threshold=1000000000:cgop:vstrict=0:vrc_maxrate=8500:vrc_buf_size=1835:vbitrate=5001:keyint=12:acodec=ac3:abitrate=224:aspect=4/3 -o /home/hostname/Vídeos/2x1/2x1_02_01.mpg /home/hostname/Vídeos/Era\ Uma\ Vez\ na\ China\ e\ na\ America.rmvb
ProcEnviron:
 LANGUAGE=pt_BR.UTF-8
 LANG=pt_BR.UTF-8
 SHELL=/bin/bash
ProcVersionSignature: Ubuntu 2.6.31-11.36-generic
SegvAnalysis:
 Segfault happened at: 0x8133ade: cmpl $0x4134504d,0xc(%eax)
 PC (0x08133ade) ok
 source "$0x4134504d" ok
 destination "0xc(%eax)" (0x0000000c) not located in a known VMA region (needed writable region)!
SegvReason: writing NULL VMA
Signal: 11
SourcePackage: mplayer
StacktraceTop:
 ?? ()
 ds_get_next_pts ()
 video_read_frame ()
 main ()
Title: mencoder crashed with SIGSEGV in ds_get_next_pts()
Uname: Linux 2.6.31-11-generic i686
UserGroups: adm admin cdrom dialout lpadmin plugdev sambashare

[Apport retracing service (apport)]

StacktraceTop:demux_real_fill_buffer (demuxer=0xa078ff8, dsds=0xa079cd0)
ds_get_next_pts (ds=0xa079cd0) at libmpdemux/demuxer.c:677
video_read_frame (sh_video=0xa07abb8,
main (argc=24, argv=0xbfd9ced4) at mencoder.c:1220

[Reinhard Tartler (siretart)]

I've compared libmpdemux/demux_real.c with upstream's latest version, and I've found no changes that could fix this crash. Can you please try to compile mplayer from svn trunk and confirm if it crashes there as well? If yes, this bugs needs forwarding upstream.

please also attach the file /home/hostname/Vídeos/Era\ Uma\ Vez\ na\ China\ e\ na\ America.rmvb, or at least parts of it so that we can try to reproduce this crash.