mencoder crashed with SIGSEGV in malloc() when trying to convert FLV video from youtube to OGG Theora + Vorbis

[Alex Shulgin]

Binary package hint: mplayer

$ youtube-dl http://www.youtube.com/v/uOHvZjiDANg
$ mencoder uOHvZjiDANg.flv -oac lavc -ovc lavc -lavcopts acodec=vorbis:vcodec=libtheora -o out.ogg

ProblemType: Crash
Architecture: amd64
CheckboxSubmission: 714519e8c9d4d43b21e4cc980d2fffe5
CheckboxSystem: c69722ecac764861be52925fa50b4dcc
Date: Sun Oct 18 14:02:25 2009
DistroRelease: Ubuntu 9.10
ExecutablePath: /usr/bin/mencoder
Package: mencoder 2:1.0~rc3+svn20090426-1ubuntu10
ProcCmdline: mencoder uOHvZjiDANg.flv -oac lavc -ovc lavc -lavcopts acodec=vorbis:vcodec=libtheora -o out.ogg
ProcEnviron:
 SHELL=/bin/bash
 PATH=(custom, username)
 LANG=en_US.UTF-8
ProcVersionSignature: Ubuntu 2.6.31-14.48-generic
RelatedPackageVersions:
 libavcodec52 4:0.5+svn20090706-2ubuntu2
 libavcodec-extra-52 N/A
SegvAnalysis:
 Segfault happened at: 0x7f0a0bcbbe5d: cmp 0x18(%rdx),%r12
 PC (0x7f0a0bcbbe5d) ok
 source "0x18(%rdx)" (0x00000018) not located in a known VMA region (needed readable region)!
 destination "%r12" ok
SegvReason: reading NULL VMA
Signal: 11
SourcePackage: mplayer
StacktraceTop:
 ?? () from /lib/libc.so.6
 ?? () from /lib/libc.so.6
 malloc () from /lib/libc.so.6
 posix_memalign () from /lib/libc.so.6
 av_malloc () from /usr/lib/libavutil.so.49
Title: mencoder crashed with SIGSEGV in malloc()
Uname: Linux 2.6.31-14-generic x86_64
UserConf: # Write your default config options here!
UserGroups: adm admin audio cdrom dialout fuse lpadmin netdev plugdev sambashare video
XsessionErrors:
 (xfce4-cpugraph-plugin:1991): Gtk-CRITICAL **: gtk_container_set_border_width: assertion `GTK_IS_CONTAINER (container)' failed
 (xfce4-xkb-plugin:1993): GLib-CRITICAL **: g_hash_table_destroy: assertion `hash_table != NULL' failed
 (xfce4-xkb-plugin:1993): GLib-CRITICAL **: g_hash_table_destroy: assertion `hash_table != NULL' failed
 (xfce4-xkb-plugin:1993): GLib-CRITICAL **: g_hash_table_destroy: assertion `hash_table != NULL' failed
 (polkit-gnome-authentication-agent-1:2025): GLib-CRITICAL **: g_once_init_leave: assertion `initialization_value != 0' failed
system: distro = Ubuntu, architecture = x86_64, kernel = 2.6.31-14-generic

[Apport retracing service (apport)]

StacktraceTop:malloc_consolidate (av=0x7f0a0bfb0e40)
_int_malloc (av=0x7f0a0bfb0e40, bytes=0)
*__GI___libc_malloc (bytes=1401) at malloc.c:3638
__posix_memalign (memptr=0x7fffa7360f08,
av_malloc (size=0)

[Reinhard Tartler (siretart)]

I cannot reproduce it here, but this may be another problem on my system:

videocodec: libavcodec (400x226 fourcc=7462696c [libt])
[libtheora @ 0x90f1f40]theora_encode_init failed
Could not open codec.

anyway, since the crash seems to go through the libavformat library, can you please try to playback the file with the 'ffplay' utility? does this crash as well?

[Alex Shulgin (alex-shulgin)]

On Sun, Jan 10, 2010 at 10:20, Reinhard Tartler <email address hidden> wrote:
> I cannot reproduce it here, but this may be another problem on my
> system:
>
> videocodec: libavcodec (400x226 fourcc=7462696c [libt])
> [libtheora @ 0x90f1f40]theora_encode_init failed
> Could not open codec.
>
> anyway, since the crash seems to go through the libavformat library, can
> you please try to playback the file with the 'ffplay' utility? does this
> crash as well?

Hi,

I've got SIGSEGV from mencoder this time too:

MEncoder UNKNOWN-4.4.1 (C) 2000-2009 MPlayer Team

WARNING: OUTPUT FILE FORMAT IS _AVI_. See -of help.
success: format: 0 data: 0x0 - 0x19a509
libavformat file format detected.
[lavf] Video stream found, -vid 0
[lavf] Audio stream found, -aid 1
VIDEO: [FLV1] 400x226 0bpp 25.000 fps 251.1 kbps (30.7 kbyte/s)
[V] filefmt:44 fourcc:0x31564C46 size:400x226 fps:25.000 ftime:=0.0400
==========================================================================
Opening audio decoder: [mp3lib] MPEG layer-2, layer-3
AUDIO: 22050 Hz, 2 ch, s16le, 8.0 kbit/1.13% (ratio: 1000->88200)
Selected audio codec: [mp3] afm: mp3lib (mp3lib MPEG layer-2, layer-3)
==========================================================================
Opening video filter: [expand osd=1]
Expand: -1 x -1, -1 ; -1, osd: 1, aspect: 0.000000, round: 1
==========================================================================
Opening video decoder: [ffmpeg] FFmpeg's libavcodec codec family
Selected video codec: [ffflv] vfm: ffmpeg (FFmpeg Flash video)
==========================================================================
VDec: vo config request - 400 x 226 (preferred colorspace: Planar YV12)
VDec: using Planar YV12 as output csp (no 0)
Movie-Aspect is undefined - no prescaling applied.
videocodec: libavcodec (400x226 fourcc=7462696c [libt])
Writing header...
ODML: Aspect information not (yet?) available or unspecified, not
writing vprp header.
Writing header...
ODML: Aspect information not (yet?) available or unspecified, not
writing vprp header.
Segmentation fault

However, `ffplay' doesn't crash. And mplayer can play this particular clip.

--
Alex

[Reinhard Tartler (siretart)]

On So, Jan 10, 2010 at 16:04:24 (CET), Alex Shulgin wrote:

> I've got SIGSEGV from mencoder this time too:

We'd need the exact commandline and a backtrace for this crash as well.

--
Gruesse/greetings,
Reinhard Tartler, KeyID 945348A4

[Alex Shulgin (alex-shulgin)]

On Sun, Jan 10, 2010 at 19:26, Reinhard Tartler <email address hidden> wrote:
> On So, Jan 10, 2010 at 16:04:24 (CET), Alex Shulgin wrote:
>
>> I've got SIGSEGV from mencoder this time too:
>
> We'd need the exact commandline and a backtrace for this crash as well.

Command line is exactly the same as before:

mencoder uOHvZjiDANg.flv -oac lavc -ovc lavc -lavcopts
acodec=vorbis:vcodec=libtheora -o out.ogg

Please stand by for the backtrace.

--
Alex

[Alex Shulgin (alex-shulgin)]

Is this good enough?

Pos: 0.8s 19f ( 3%) 0.00fps Trem: 0min 0mb A-V:0.072 [0:21]
Program received signal SIGSEGV, Segmentation fault.
0x00007ffff278ee5d in malloc_consolidate (av=0x7ffff2a83e40) at malloc.c:5103
5103 malloc.c: No such file or directory.
 in malloc.c
(gdb) bt
#0 0x00007ffff278ee5d in malloc_consolidate (av=0x7ffff2a83e40)
    at malloc.c:5103
#1 0x00007ffff2791509 in _int_malloc (av=0x7ffff2a83e40, bytes=0)
    at malloc.c:4338
#2 0x00007ffff279382e in *__GI___libc_malloc (bytes=1401) at malloc.c:3638
#3 0x00007ffff2793f49 in __posix_memalign (memptr=0x7fffffffdb28,
    alignment=140737264500288, size=0) at malloc.c:6249
#4 0x00007ffff45b1ac8 in av_malloc () from /usr/lib/libavutil.so.49
#5 0x00007ffff387a699 in av_new_packet () from /usr/lib/libavformat.so.52
#6 0x00007ffff387b406 in av_get_packet () from /usr/lib/libavformat.so.52
#7 0x00007ffff3898f0c in ?? () from /usr/lib/libavformat.so.52
#8 0x00007ffff387caae in av_read_packet () from /usr/lib/libavformat.so.52
#9 0x00007ffff387db13 in ?? () from /usr/lib/libavformat.so.52
#10 0x000000000058c4cb in demux_lavf_fill_buffer (demux=0xa59e00,
    dsds=<value optimized out>) at libmpdemux/demux_lavf.c:550
#11 0x00000000004cb6ce in ds_fill_buffer (ds=0xa58aa0)
    at libmpdemux/demuxer.c:507
#12 0x00000000004cbeb8 in demux_read_data (ds=0xa58aa0, mem=0x7fffffffde90 "",
    len=4) at libmpdemux/demuxer.c:529
#13 0x00000000005af905 in mp3_read (hova=<value optimized out>,
    single=<value optimized out>) at mp3lib/sr1.c:65
#14 stream_head_read (hova=<value optimized out>, single=<value optimized out>)
    at mp3lib/sr1.c:186
#15 read_frame (hova=<value optimized out>, single=<value optimized out>)
    at mp3lib/sr1.c:335
#16 MP3_DecodeFrame (hova=<value optimized out>, single=<value optimized out>)
    at mp3lib/sr1.c:540
#17 0x000000000048ec7e in filter_n_bytes (sh_audio=0xa65a90,
    minlen=<value optimized out>) at libmpcodecs/dec_audio.c:377
#18 decode_audio (sh_audio=0xa65a90, minlen=<value optimized out>)
    at libmpcodecs/dec_audio.c:455
#19 0x0000000000447056 in dec_audio (sh_audio=0xa65a90,
    buffer=<value optimized out>, total=4096) at mencoder.c:332
#20 0x00000000004483f6 in main (argc=<value optimized out>,
    argv=<value optimized out>) at mencoder.c:1172
(gdb)

[Reinhard Tartler (siretart)]

On Di, Jan 12, 2010 at 09:06:49 (CET), Alex Shulgin wrote:

> Is this good enough?

unfortunately not. while it shows the call hierarchy, it does not show
the function parameters, locals, etc. Since generating good backtraces
is not really trivial, I'd suggest to submit a crash report via apport,
as launchpad provides infrastructure for retracing core dumps.

--
Gruesse/greetings,
Reinhard Tartler, KeyID 945348A4

[Alex Shulgin (alex-shulgin)]

Architecture: amd64
CheckboxSubmission: 714519e8c9d4d43b21e4cc980d2fffe5
CheckboxSystem: c69722ecac764861be52925fa50b4dcc
DistroRelease: Ubuntu 9.10
Package: mplayer 2:1.0~rc3+svn20090426-1ubuntu10.1
PackageArchitecture: amd64
ProcEnviron:
 SHELL=/bin/bash
 PATH=(custom, user)
 LANG=en_US.UTF-8
ProcVersionSignature: Ubuntu 2.6.31-17.54-generic
RelatedPackageVersions:
 libavcodec52 N/A
 libavcodec-extra-52 4:0.5+svn20090706-2ubuntu3
Uname: Linux 2.6.31-17-generic x86_64
UserConf: # Write your default config options here!
UserGroups: adm admin audio cdrom dialout fuse lpadmin netdev plugdev sambashare video
system: distro = Ubuntu, architecture = x86_64, kernel = 2.6.31-17-generic

[Alex Shulgin (alex-shulgin)]

Couldn't make apport attach the report to existing bug, so here's
separate one: #507846

[Apport retracing service (apport)]

Unsetting the need retracing tag, there is no retracer left running on that version of Ubuntu, the crash will need to be manually retraced

[dino99 (9d9)]

This version is outdated and no more supported