segfault in pad_block_callback_marshal from vorbis

[Gustavo Carneiro]

When playing vorbis files in rhythmbox, often at the end of a song it crashes thus:

Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 0x7fcbd3fff700 (LWP 28597)]
pad_block_callback_marshal (pad=<value optimized out>, blocked=<value optimized out>, user_data=<value optimized out>)
    at gstpad.override:1393
1393 gstpad.override: No such file or directory.
 in gstpad.override
(gdb) bt
#0 pad_block_callback_marshal (pad=<value optimized out>, blocked=<value optimized out>,
    user_data=<value optimized out>) at gstpad.override:1393
#1 0x00007fcc0801b8e4 in handle_pad_block (pad=0x1cbb060) at gstpad.c:4034
#2 0x00007fcc08020940 in gst_pad_alloc_buffer_full (pad=0x1cbb060, offset=18446744073709551615, size=1024,
    caps=0x88f600, buf=0x7fcbd3ffe970, setcaps=0) at gstpad.c:3052
#3 0x00007fcc082cc102 in gst_base_transform_buffer_alloc (pad=0x1f6ad80, offset=18446744073709551615, size=1024,
    caps=0x88f600, buf=0x7fcbd3ffe970) at gstbasetransform.c:1869
#4 0x00007fcc08020af7 in gst_pad_buffer_alloc_unchecked (pad=0x1f578a0, offset=18446744073709551615, size=1024,
    caps=0x88f600, buf=0x7fcbd3ffe970, setcaps=0) at gstpad.c:2984
#5 gst_pad_alloc_buffer_full (pad=0x1f578a0, offset=18446744073709551615, size=1024, caps=0x88f600, buf=0x7fcbd3ffe970,
    setcaps=0) at gstpad.c:3061
#6 0x00007fcc08020af7 in gst_pad_buffer_alloc_unchecked (pad=0x1f541c0, offset=18446744073709551615, size=1024,
    caps=0x88f600, buf=0x7fcbd3ffe970, setcaps=0) at gstpad.c:2984
#7 gst_pad_alloc_buffer_full (pad=0x1f541c0, offset=18446744073709551615, size=1024, caps=0x88f600, buf=0x7fcbd3ffe970,
    setcaps=0) at gstpad.c:3061
#8 0x00007fcc08020af7 in gst_pad_buffer_alloc_unchecked (pad=0x1f6ac00, offset=18446744073709551615, size=1024,
    caps=0x88f600, buf=0x7fcbd3ffe970, setcaps=0) at gstpad.c:2984
#9 gst_pad_alloc_buffer_full (pad=0x1f6ac00, offset=18446744073709551615, size=1024, caps=0x88f600, buf=0x7fcbd3ffe970,
    setcaps=0) at gstpad.c:3061
#10 0x00007fcc082cc102 in gst_base_transform_buffer_alloc (pad=0x1f6aa80, offset=18446744073709551615, size=1024,
    caps=0x88f600, buf=0x7fcbd3ffe970) at gstbasetransform.c:1869
#11 0x00007fcc08020af7 in gst_pad_buffer_alloc_unchecked (pad=0x1b7a520, offset=18446744073709551615, size=1024,
    caps=0x88f600, buf=0x7fcbd3ffe970, setcaps=0) at gstpad.c:2984
#12 gst_pad_alloc_buffer_full (pad=0x1b7a520, offset=18446744073709551615, size=1024, caps=0x88f600, buf=0x7fcbd3ffe970,
    setcaps=0) at gstpad.c:3061
#13 0x00007fcc082cc102 in gst_base_transform_buffer_alloc (pad=0x1b7a3a0, offset=18446744073709551615, size=1024,
    caps=0x88f600, buf=0x7fcbd3ffe970) at gstbasetransform.c:1869
#14 0x00007fcc08020af7 in gst_pad_buffer_alloc_unchecked (pad=0x1f6a900, offset=18446744073709551615, size=1024,
    caps=0x88f600, buf=0x7fcbd3ffe970, setcaps=0) at gstpad.c:2984
#15 gst_pad_alloc_buffer_full (pad=0x1f6a900, offset=18446744073709551615, size=1024, caps=0x88f600, buf=0x7fcbd3ffe970,
    setcaps=0) at gstpad.c:3061
#16 0x00007fcc082cc102 in gst_base_transform_buffer_alloc (pad=0x1f6a780, offset=18446744073709551615, size=1024,
    caps=0x88f600, buf=0x7fcbd3ffe970) at gstbasetransform.c:1869
#17 0x00007fcc08020af7 in gst_pad_buffer_alloc_unchecked (pad=0x1f57540, offset=18446744073709551615, size=1024,
    caps=0x88f600, buf=0x7fcbd3ffe970, setcaps=0) at gstpad.c:2984
#18 gst_pad_alloc_buffer_full (pad=0x1f57540, offset=18446744073709551615, size=1024, caps=0x88f600, buf=0x7fcbd3ffe970,
    setcaps=0) at gstpad.c:3061
#19 0x00007fcc08020af7 in gst_pad_buffer_alloc_unchecked (pad=0x1b7aca0, offset=18446744073709551615, size=1024,
    caps=0x88f600, buf=0x7fcbd3ffe970, setcaps=0) at gstpad.c:2984
#20 gst_pad_alloc_buffer_full (pad=0x1b7aca0, offset=18446744073709551615, size=1024, caps=0x88f600, buf=0x7fcbd3ffe970,
    setcaps=0) at gstpad.c:3061
#21 0x00007fcc082cc102 in gst_base_transform_buffer_alloc (pad=0x1b7a9a0, offset=18446744073709551615, size=1024,
---Type <return> to continue, or q <return> to quit---
    caps=0x88f600, buf=0x7fcbd3ffe970) at gstbasetransform.c:1869
#22 0x00007fcc08020af7 in gst_pad_buffer_alloc_unchecked (pad=0x1f57030, offset=18446744073709551615, size=1024,
    caps=0x88f600, buf=0x7fcbd3ffe970, setcaps=0) at gstpad.c:2984
#23 gst_pad_alloc_buffer_full (pad=0x1f57030, offset=18446744073709551615, size=1024, caps=0x88f600, buf=0x7fcbd3ffe970,
    setcaps=0) at gstpad.c:3061
#24 0x00007fcc08020af7 in gst_pad_buffer_alloc_unchecked (pad=0x1f57390, offset=18446744073709551615, size=1024,
    caps=0x88f600, buf=0x7fcbd3ffe970, setcaps=0) at gstpad.c:2984
#25 gst_pad_alloc_buffer_full (pad=0x1f57390, offset=18446744073709551615, size=1024, caps=0x88f600, buf=0x7fcbd3ffe970,
    setcaps=0) at gstpad.c:3061
#26 0x00007fcc08020af7 in gst_pad_buffer_alloc_unchecked (pad=0x1f33180, offset=18446744073709551615, size=1024,
    caps=0x88f600, buf=0x7fcbd3ffe970, setcaps=0) at gstpad.c:2984
#27 gst_pad_alloc_buffer_full (pad=0x1f33180, offset=18446744073709551615, size=1024, caps=0x88f600, buf=0x7fcbd3ffe970,
    setcaps=0) at gstpad.c:3061
#28 0x00007fcc082cc102 in gst_base_transform_buffer_alloc (pad=0x1f33000, offset=18446744073709551615, size=1024,
    caps=0x88f600, buf=0x7fcbd3ffe970) at gstbasetransform.c:1869
#29 0x00007fcc08020af7 in gst_pad_buffer_alloc_unchecked (pad=0x1e78d80, offset=18446744073709551615, size=1024,
    caps=0x88f600, buf=0x7fcbd3ffe970, setcaps=0) at gstpad.c:2984
#30 gst_pad_alloc_buffer_full (pad=0x1e78d80, offset=18446744073709551615, size=1024, caps=0x88f600, buf=0x7fcbd3ffe970,
    setcaps=0) at gstpad.c:3061
#31 0x00007fcc082cc102 in gst_base_transform_buffer_alloc (pad=0x1e78c00, offset=18446744073709551615, size=1024,
    caps=0x88f600, buf=0x7fcbd3ffe970) at gstbasetransform.c:1869
#32 0x00007fcc08020af7 in gst_pad_buffer_alloc_unchecked (pad=0x1e78a80, offset=18446744073709551615, size=1024,
    caps=0x88f600, buf=0x7fcbd3ffe970, setcaps=0) at gstpad.c:2984
#33 gst_pad_alloc_buffer_full (pad=0x1e78a80, offset=18446744073709551615, size=1024, caps=0x88f600, buf=0x7fcbd3ffe970,
    setcaps=0) at gstpad.c:3061
#34 0x00007fcc082cc102 in gst_base_transform_buffer_alloc (pad=0x1e78900, offset=18446744073709551615, size=1024,
    caps=0x88f600, buf=0x7fcbd3ffe970) at gstbasetransform.c:1869
#35 0x00007fcc08020af7 in gst_pad_buffer_alloc_unchecked (pad=0x1b7a820, offset=18446744073709551615, size=1024,
    caps=0x88f600, buf=0x7fcbd3ffe970, setcaps=0) at gstpad.c:2984
#36 gst_pad_alloc_buffer_full (pad=0x1b7a820, offset=18446744073709551615, size=1024, caps=0x88f600, buf=0x7fcbd3ffe970,
    setcaps=0) at gstpad.c:3061
#37 0x00007fcc08020af7 in gst_pad_buffer_alloc_unchecked (pad=0x1d86080, offset=18446744073709551615, size=1024,
    caps=0x88f600, buf=0x7fcbd3ffe970, setcaps=0) at gstpad.c:2984
#38 gst_pad_alloc_buffer_full (pad=0x1d86080, offset=18446744073709551615, size=1024, caps=0x88f600, buf=0x7fcbd3ffe970,
    setcaps=0) at gstpad.c:3061
#39 0x00007fcc08020af7 in gst_pad_buffer_alloc_unchecked (pad=0x1f33480, offset=18446744073709551615, size=1024,
    caps=0x88f600, buf=0x7fcbd3ffe970, setcaps=0) at gstpad.c:2984
#40 gst_pad_alloc_buffer_full (pad=0x1f33480, offset=18446744073709551615, size=1024, caps=0x88f600, buf=0x7fcbd3ffe970,
    setcaps=0) at gstpad.c:3061
#41 0x00007fcbe3914008 in gst_stream_synchronizer_sink_bufferalloc (pad=0x1f33300, offset=18446744073709551615,
    size=1024, caps=0x88f600, buf=0x7fcbd3ffe970) at gststreamsynchronizer.c:563
#42 0x00007fcc08020af7 in gst_pad_buffer_alloc_unchecked (pad=0x1f33600, offset=18446744073709551615, size=1024,
---Type <return> to continue, or q <return> to quit---
    caps=0x88f600, buf=0x7fcbd3ffe970, setcaps=0) at gstpad.c:2984
#43 gst_pad_alloc_buffer_full (pad=0x1f33600, offset=18446744073709551615, size=1024, caps=0x88f600, buf=0x7fcbd3ffe970,
    setcaps=0) at gstpad.c:3061
#44 0x00007fcbe34cb363 in gst_tee_buffer_alloc (pad=<value optimized out>, offset=18446744073709551615, size=1024,
    caps=0x88f600, buf=0x7fcbd3ffe970) at gsttee.c:572
#45 0x00007fcc08020af7 in gst_pad_buffer_alloc_unchecked (pad=0x21121c0, offset=18446744073709551615, size=1024,
    caps=0x88f600, buf=0x7fcbd3ffe970, setcaps=0) at gstpad.c:2984
#46 gst_pad_alloc_buffer_full (pad=0x21121c0, offset=18446744073709551615, size=1024, caps=0x88f600, buf=0x7fcbd3ffe970,
    setcaps=0) at gstpad.c:3061
#47 0x00007fcc08020af7 in gst_pad_buffer_alloc_unchecked (pad=0x2101980, offset=18446744073709551615, size=1024,
    caps=0x88f600, buf=0x7fcbd3ffe970, setcaps=0) at gstpad.c:2984
#48 gst_pad_alloc_buffer_full (pad=0x2101980, offset=18446744073709551615, size=1024, caps=0x88f600, buf=0x7fcbd3ffe970,
    setcaps=0) at gstpad.c:3061
#49 0x00007fcbe34b5b9e in gst_selector_pad_bufferalloc (pad=0xbd9110, offset=18446744073709551615, size=1024,
    caps=0x88f600, buf=0x7fcbd3ffe970) at gstinputselector.c:530
#50 0x00007fcc08020af7 in gst_pad_buffer_alloc_unchecked (pad=0x1d85380, offset=18446744073709551615, size=1024,
    caps=0x88f600, buf=0x7fcbd3ffe970, setcaps=0) at gstpad.c:2984
#51 gst_pad_alloc_buffer_full (pad=0x1d85380, offset=18446744073709551615, size=1024, caps=0x88f600, buf=0x7fcbd3ffe970,
    setcaps=0) at gstpad.c:3061
#52 0x00007fcc08020af7 in gst_pad_buffer_alloc_unchecked (pad=0x20bf9d0, offset=18446744073709551615, size=1024,
    caps=0x88f600, buf=0x7fcbd3ffe970, setcaps=0) at gstpad.c:2984
#53 gst_pad_alloc_buffer_full (pad=0x20bf9d0, offset=18446744073709551615, size=1024, caps=0x88f600, buf=0x7fcbd3ffe970,
    setcaps=0) at gstpad.c:3061
#54 0x00007fcc08020af7 in gst_pad_buffer_alloc_unchecked (pad=0x2101800, offset=18446744073709551615, size=1024,
    caps=0x88f600, buf=0x7fcbd3ffe970, setcaps=1) at gstpad.c:2984
#55 gst_pad_alloc_buffer_full (pad=0x2101800, offset=18446744073709551615, size=1024, caps=0x88f600, buf=0x7fcbd3ffe970,
    setcaps=1) at gstpad.c:3061
#56 0x00007fcbe1ff5ecf in vorbis_handle_data_packet (vd=0x1f39b80, buffer=<value optimized out>) at gstvorbisdec.c:891
#57 vorbis_dec_decode_buffer (vd=0x1f39b80, buffer=<value optimized out>) at gstvorbisdec.c:996
#58 0x00007fcbe1ff76b3 in vorbis_dec_chain_forward (pad=<value optimized out>, buffer=0x2654ab0) at gstvorbisdec.c:1173
#59 vorbis_dec_chain (pad=<value optimized out>, buffer=0x2654ab0) at gstvorbisdec.c:1202
#60 0x00007fcc080249c4 in gst_pad_push (pad=0x2101500, buffer=0x2654ab0) at gstpad.c:4665
#61 0x00007fcbe34bb77e in gst_single_queue_push_one (pad=<value optimized out>) at gstmultiqueue.c:921
#62 gst_multi_queue_loop (pad=<value optimized out>) at gstmultiqueue.c:1101
#63 0x00007fcc0804af20 in gst_task_func (task=0x1e79c10) at gsttask.c:318
#64 0x00007fcc068f6b16 in g_thread_pool_thread_proxy (data=<value optimized out>)
    at /build/buildd/glib2.0-2.28.6/./glib/gthreadpool.c:319
#65 0x00007fcc068f43e4 in g_thread_create_proxy (data=0x26351b0) at /build/buildd/glib2.0-2.28.6/./glib/gthread.c:1897
#66 0x00007fcc071ddd8c in start_thread (arg=0x7fcbd3fff700) at pthread_create.c:304
#67 0x00007fcc05ebc04d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:112
#68 0x0000000000000000 in ?? ()
(gdb)

[Gustavo Carneiro (gjc)]

I forgot to mention, this is in Ubuntu 11.04 with all upgrades.