dvgrab crashes with "stack smashing detected"

[Marty Lucich]

Binary package hint: dvgrab

I haven't used dvgrab in a long time; probably since before I upgraded to Gusty.
Now I have this problem trying to extract the video from my Canon ELURA 65
NTSC camcorder:

marty@anubis:/export/projects/021222$ dvgrab -autosplit -t -format rawsend oops
send oops
Found AV/C device with GUID 0x00008500009c4e13
Warning: Cannot set RR-scheduler
Warning: Cannot disable swapping
Capture Started
"dvgrab-2002.12.22_16-33-27.dv": 199.70 MB 1745 frames timecode 52573046:1204298623:52573046.272797678 date 2008.02.29 07:23:43
*** stack smashing detected ***: dvgrab terminated
Aborted (core dumped)

Although it says it dumped core I didn't see a core file in my CWD.
It does the same thing although without the send oops and warnings if I put sudo at
the beginning of the line.

"Please include, if possible:

1) The release of Ubuntu you are using"

marty@anubis:~$ cat /etc/lsb-release
DISTRIB_ID=Ubuntu
DISTRIB_RELEASE=7.10
DISTRIB_CODENAME=gutsy
DISTRIB_DESCRIPTION="Ubuntu 7.10"

"2) The source package you found the bug in"
"3) The version of the package you are using"

marty@anubis:~$ aptitude show dvgrab
Package: dvgrab
State: installed
Automatically installed: yes
Version: 3.0-1
Priority: extra
Section: universe/graphics
Maintainer: Ubuntu MOTU Developers <email address hidden>
Uncompressed Size: 348k
Depends: libavc1394-0 (>= 0.5.3), libc6 (>= 2.6-1), libdv4, libgcc1 (>=
         1:4.2.1), libiec61883-0 (>= 1.1.0), libjpeg62, libquicktime1 (>=
         2:1.0.0+debian), libraw1394-8, libstdc++6 (>= 4.2.1), zlib1g (>=
         1:1.2.3.3.dfsg-1)
Description: grab digital video data via IEEE1394 and USB links
 dvgrab receives audio and video data from a digital camcorder via an IEEE1394
 (widely known as FireWire) or USB link and stores them into one of several file
 formats. It features autosplit of long video sequences, and supports saving the
 data as raw frames, AVI type 1, AVI type 2, Quicktime DV, a series of JPEG
 stills or MPEG2-TS.

 Homepage: http://www.kinodv.org/

"4) What you expected to happen": I expected it to copy the raw digital video
     footage from my camcorder to files on my hard disk. I wanted it to start
    a new file every time the scene changed and name the files with the date
    and time it was recorded as read from the tape.

"5) What happened instead": It extracted video for a few minutes and then crashed.

ProblemType: Bug
Architecture: i386
Date: Fri Feb 29 20:00:06 2008
DistroRelease: Ubuntu 7.10
NonfreeKernelModules: nvidia
Package: dvgrab 3.0-1
PackageArchitecture: i386
SourcePackage: dvgrab
Uname: Linux anubis 2.6.22-14-generic #1 SMP Tue Feb 12 07:42:25 UTC 2008 i686 GNU/Linux

[James Westby (james-w)]

Hi,

This error is probably caused by a buffer overflow on the
stack, which is what the stack smashing protection
is there to prevent. It can be used maliciously in an
attack, but it can also be a programming error, which
is probably the case here.

It would be useful to get a backtrace, I think you may
get one if you run under gdb.

https://wiki.ubuntu.com/DebuggingProgramCrash

https://wiki.ubuntu.com/Backtrace

Also, the core might be hiding in /var/crash/

Thanks,

James

[Marty Lucich (mar3ty)]

Hello James,

There was no core file in /var/crash.

I followed the instructions you sent and have attached the file that
resulted. I did install the dvgrab-dbgsym package though you wouldn't
know it from all the "no debugging symbols found" messages.

Thanks for your help.

-marty

GNU gdb 6.6-debian
Copyright (C) 2006 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB. Type "show warranty" for details.
This GDB was configured as "i486-linux-gnu"...
(no debugging symbols found)
Using host libthread_db library "/lib/tls/i686/cmov/libthread_db.so.1".
(no debugging symbols found)
(gdb) handelle SIG33 pass nostop noprint
Signal Stop Print Pass to program Description
SIG33 No No Yes Real-time event 33
(gdb) set pagination 0
(gdb) run -autosplit -t -format raw
Starting program: /usr/bin/dvgrab -autosplit -t -format raw
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
[Thread debugging using libthread_db enabled]
[New Thread -1212959040 (LWP 8118)]
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
Found AV/C device with GUID 0x00008500009c4e13
Warning: Cannot set RR-scheduler
Warning: Cannot disable swapping
Capture Started
"dvgrab-2002.12.22_16-33-27.dv": 199.47 MB 1743 frames timecode 00:00:58.20 date 2002.12.22 16:34:25

"dvgrab-2008.03.04_22-31-04.dv": 0.11 MB 1 frames timecode 669833165:1204698664:669833165.272797679 date 2008.03.04 22:31:04
[New Thread -1319642224 (LWP 8121)]
[New Thread -1328694384 (LWP 8122)]

Program received signal SIGABRT, Aborted.
[Switching to Thread -1319642224 (LWP 8121)]
0xffffe410 in __kernel_vsyscall ()
(gdb) backtrace full
#0 0xffffe410 in __kernel_vsyscall ()
No symbol table info available.
#1 0xb7b67875 in raise () from /lib/tls/i686/cmov/libc.so.6
No symbol table info available.
#2 0xb7b69201 in abort () from /lib/tls/i686/cmov/libc.so.6
No symbol table info available.
#3 0xb7b9ee5c in ?? () from /lib/tls/i686/cmov/libc.so.6
No symbol table info available.
#4 0xb157caf0 in ?? ()
No symbol table info available.
#5 0xb7b3c1e4 in ?? ()
No symbol table info available.
#6 0xb157cb24 in ?? ()
No symbol table info available.
#7 0xb7c6a1f8 in ?? () from /lib/tls/i686/cmov/libc.so.6
No symbol table info available.
#8 0x00000021 in ?? ()
No symbol table info available.
#9 0xbfda0901 in ?? ()
No symbol table info available.
#10 0x0000000f in ?? ()
No symbol table info available.
#11 0xb7c6a21b in ?? () from /lib/tls/i686/cmov/libc.so.6
No symbol table info available.
#12 0x0000000c in ?? ()
No symbol table info available.
...

[Geoff123 (gsking1)]

This is happening for me also. Seems to happen between scenes when there is no video.

"capture-2007.12.22_17-31-14.avi": 16.24 MB 136 frames timecode 00:03:55.16 date 2007.12.22 17:31:19
# no audio
# no audio
"capture-2007.12.22_18-54-51.avi": 80.84 MB 681 frames timecode 163303660:-1319198088:-1277087736.159928980 date 2008.03.08 16:28:13
*** stack smashing detected ***: dvgrab terminated
======= Backtrace: =========
/lib/tls/i686/cmov/libc.so.6(__fortify_fail+0x48)[0xb7c96b08]
/lib/tls/i686/cmov/libc.so.6(__fortify_fail+0x0)[0xb7c96ac0]
dvgrab[0x8053232]
dvgrab[0x805525e]
dvgrab[0x80558b4]
dvgrab[0x8055b11]
/lib/tls/i686/cmov/libpthread.so.0[0xb7e634fb]
/lib/tls/i686/cmov/libc.so.6(clone+0x5e)[0xb7c808ee]
======= Memory map: ========
08048000-08083000 r-xp 00000000 08:01 9849356 /usr/bin/dvgrab
08083000-08084000 rw-p 0003a000 08:01 9849356 /usr/bin/dvgrab

[Marty Lucich (mar3ty)]

Now that Geoff123 mentions it, I also noticed it happens between scenes. I also
thought it was more likely when the recorded audio was switching between 12 bit
and 16 bit but that turned out to be a coincidence. I have found a work around. If
I reboot my system before grabbing each tape it will work. This makes me wonder
if it could be kernel/driver/firewire (IEEE1394) related rather than dvgrab.

[cowmix (mmarch-gmail)]

I'm having the same issue.. I am using a Canon DV camcorder to do A->D conversion of VHS tapes... If the tapes are of poor quality, this crash happens very quickly.

[Tomas Gustavsson (tomplast)]

My problems dissapeard after I upgraded to 3.1-2 from intrepid ibex (running Hardy Heron). Don't know if it's related to this but please try.

[JanBrinkmann (jbrinkmann)]

Please try to reproduce this under 8.10 . Maybe the problems were fixed upstream.

[Dimitrios Symeonidis (azimout)]

no answer received, closing as fix released