Totem crashed with SIGSEGV in volume_process_int32

[Mike Crowe]

Binary package hint: totem

Apologies for the lack of extra debug information but apport didn't seem to want to catch this one. :(

When seeking to near the end of a half hour 128Kbit/s CBR MP3 using the seek slider I can reliably reproduce a segfault every time. Please let me know if you'd like the file I used - it's not small though. :(

I'm going to start the file playing from the beginning to see if the same fault occurs when that part of the file is reached normally.

I'm no gstreamer expert but n_bytes looks suspiciously large.

Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 0xb33f4b90 (LWP 5021)]
0xb41ba468 in volume_process_int32 (this=0x8504030, bytes=0xb2a03c00, n_bytes=1063639424) at gstvolume.c:503
503 gstvolume.c: No such file or directory.
 in gstvolume.c
(gdb) bt
#0 0xb41ba468 in volume_process_int32 (this=0x8504030, bytes=0xb2a03c00, n_bytes=1063639424) at gstvolume.c:503
#1 0xb41bb2e5 in volume_transform_ip (base=0x8504030, outbuf=0x8393068) at gstvolume.c:709
#2 0xb7cba5a7 in ?? () from /usr/lib/libgstbase-0.10.so.0
#3 0x08504030 in ?? ()
#4 0x08393068 in ?? ()
#5 0x1fc276f4 in ?? ()
#6 0x0000017f in ?? ()
#7 0x083ca050 in ?? ()
#8 0x00000001 in ?? ()
#9 0xb33f3d38 in ?? ()
#10 0xb73c4a54 in g_type_check_instance_is_a () from /usr/lib/libgobject-2.0.so.0
#11 0xb7cbb59b in ?? () from /usr/lib/libgstbase-0.10.so.0
#12 0x08614988 in ?? ()
#13 0x0839ed58 in ?? ()
#14 0xb33f3dd8 in ?? ()
#15 0xb7348180 in g_static_rec_mutex_lock () from /usr/lib/libglib-2.0.so.0
#16 0xb7c454f9 in ?? () from /usr/lib/libgstreamer-0.10.so.0
#17 0x0860c400 in ?? ()
#18 0x08393068 in ?? ()
#19 0xb7129531 in pthread_mutex_lock () from /lib/tls/i686/cmov/libpthread.so.0
#20 0xb7c45bc6 in gst_pad_push () from /usr/lib/libgstreamer-0.10.so.0
#21 0xb7cbb5fe in ?? () from /usr/lib/libgstbase-0.10.so.0
#22 0x0860c340 in ?? ()
#23 0x08393068 in ?? ()
#24 0x5661dea0 in ?? ()
#25 0x00000186 in ?? ()
#26 0x08525d0c in ?? ()
#27 0x08370820 in ?? ()
#28 0x00000000 in ?? ()

ProblemType: Bug
Architecture: i386
Date: Sat Apr 12 19:55:04 2008
DistroRelease: Ubuntu 8.04
ExecutablePath: /usr/bin/totem-gstreamer
Package: totem-gstreamer 2.22.1-0ubuntu2
PackageArchitecture: i386
ProcEnviron:
 SHELL=/usr/bin/zsh
 LANG=en_GB.UTF-8
 PATH=/home/username/bin/i386-linux:/home/username/bin/scripts:/usr/local/bin:/usr/bin:/bin:/usr/local/bin/X11:/usr/bin/X11:/usr/local/games:/usr/games:/sbin:/usr/sbin:.
SourcePackage: totem
Uname: Linux 2.6.24-15-386 i686

[Mike Crowe (mac)]

I wrote:
> I'm going to start the file playing from the
> beginning to see if the same fault occurs
> when that part of the file is reached normally.

The entire file played through from start to finish without causing a crash. This would seem to imply that the fault is caused by the seeking.

[Pedro Villavicencio (pedro)]

thanks for your report, it looks like bug http://bugzilla.gnome.org/show_bug.cgi?id=527572, may you please answer the questions upstream is doing? thanks.

[Mike Crowe (mac)]

I've provided the file to upstream (see http://bugzilla.gnome.org/show_bug.cgi?id=527572 ) but they can't reproduce it using the current state of CVS. Perhaps it is worth someone other than me trying the file on the Ubuntu 8.04 packaged version?

The file is still available from http://www.fysh.org/~mac/totem-bug-527572.mp3 .

[Pedro Villavicencio (pedro)]

fixed upstream now, thanks for reporting.

[Sebastien Bacher (seb128)]

there is a new gstreamer version in intrepid