totem crashed with SIGSEGV in g_object_notify()

[asasoft]

Binary package hint: totem

Description: Ubuntu lucid (development branch)
Release: 10.04 (beta 1)
totem:
  Installed: 2.30.0-0ubuntu2
  Candidate: 2.30.0-0ubuntu2
  Version table:
 *** 2.30.0-0ubuntu2 0
        500 http://archive.ubuntu.com/ubuntu/ lucid/main Packages
        100 /var/lib/dpkg/status

Totem crash after I up and down the (totem) volume control several times in a row, when playing a .avi movie.

Sry about my english..

ProblemType: Crash
DistroRelease: Ubuntu 10.04
Package: totem 2.30.0-0ubuntu2
ProcVersionSignature: Ubuntu 2.6.32-19.28-generic 2.6.32.10+drm33.1
Uname: Linux 2.6.32-19-generic i686
NonfreeKernelModules: nvidia
Architecture: i386
CrashCounter: 1
Date: Sun Apr 4 10:58:36 2010
Disassembly: => 0x0: Cannot access memory at address 0x0
ExecutablePath: /usr/bin/totem
InstallationMedia: Ubuntu 10.04 "Lucid Lynx" - Beta i386 (20100318)
ProcCmdline: totem /media/AA28B53028B4FBFF/vids/Pelis/Sunshine.avi
ProcEnviron:
 LANG=en_US.UTF-8
 SHELL=/bin/bash
SegvAnalysis:
 Segfault happened at: 0x0: Cannot access memory at address 0x0
 PC (0x00000000) not located in a known VMA region (needed executable region)!
SegvReason: executing NULL VMA
Signal: 11
SourcePackage: totem
StacktraceTop:
 ?? ()
 g_object_notify () from /usr/lib/libgobject-2.0.so.0
 ?? () from /usr/lib/gstreamer-0.10/libgstplaybin.so
 g_cclosure_marshal_VOID__PARAM ()
 g_closure_invoke () from /usr/lib/libgobject-2.0.so.0
Title: totem crashed with SIGSEGV in g_object_notify()
UserGroups: adm admin cdrom dialout lpadmin plugdev sambashare

[Ronnie McMaster (ronnie-mcmaster)]

I have only had this crash once. I normally do not use Totem, but Rhythmbox had just crashed while doing the same thing so I figured I would try a different player.

[Pedro Villavicencio (pedro)]

Thank you taking the time to report this bug and helping to make Ubuntu better. However, processing the crash report to get detailed information for the developers failed as the retracer did not generate a useful symbolic stack trace.
Please try to obtain a backtrace manually following the instructions at http://wiki.ubuntu.com/DebuggingProgramCrash and upload the backtrace (as an attachment) to the bug report. This will greatly help us in tracking down your problem.

[asasoft (asasoft)]

GNU gdb (GDB) 7.1-ubuntu
Copyright (C) 2010 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html>
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law. Type "show copying"
and "show warranty" for details.
This GDB was configured as "i486-linux-gnu".
For bug reporting instructions, please see:
<http://www.gnu.org/software/gdb/bugs/>...
Reading symbols from /usr/bin/totem...(no debugging symbols found)...done.
(gdb) handle SIG33 pass nostop noprint
Signal Stop Print Pass to program Description
SIG33 No No Yes Real-time event 33
(gdb) set pagination 0
(gdb) run
Starting program: /usr/bin/totem
[Thread debugging using libthread_db enabled]
[New Thread 0xb70f0b70 (LWP 1906)]
[New Thread 0xb68efb70 (LWP 1907)]
[Thread 0xb68efb70 (LWP 1907) exited]
[New Thread 0xb68efb70 (LWP 1911)]
[New Thread 0xb5cffb70 (LWP 1912)]
[New Thread 0xb4932b70 (LWP 1913)]
[New Thread 0xb4131b70 (LWP 1914)]
[New Thread 0xb3930b70 (LWP 1915)]

(totem:1903): GLib-GObject-CRITICAL **: g_value_type_compatible: assertion `G_TYPE_IS_VALUE (src_type)' failed

(totem:1903): GLib-GObject-WARNING **: /build/buildd/glib2.0-2.24.0/gobject/gsignal.c:2962: invalid param spec type `

(totem:1903): GLib-GObject-CRITICAL **: g_value_type_compatible: assertion `G_TYPE_IS_VALUE (src_type)' failed

(totem:1903): GLib-GObject-WARNING **: /build/buildd/glib2.0-2.24.0/gobject/gsignal.c:2962: invalid param spec type `
[New Thread 0xaf12eb70 (LWP 1917)]
[Thread 0xaf12eb70 (LWP 1917) exited]

Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 0xb5cffb70 (LWP 1912)]
0x00000000 in ?? ()
(gdb)

ubuntu hangs at this point I cant continue the backtrace.

[Ronnie McMaster (ronnie-mcmaster)]

Pedro, I tried the debugging wiki and had problems getting it to install yelp-dbgsym. It couldn't be found in Synaptic after adding the multiverse repo. I will give it another shot tomorrow. I did just reproduce the bug by toggling the volume while playing an MP3. Hopefully the uploaded info will give you what you need.

Cheers,
uRock

[Pedro Villavicencio (pedro)]

why you're trying to install yelp-dbgsym? you need to install the totem one there's no yelp crash here.

[shuerhaaken (shkn)]

The problem still exists in ubuntu-10.04.
It can be triggered in rhythmbox, banshee and other music players by fast scrolling up and down on the volume button. Sometimes the crash is coming after a few seconds and sometimes the player crashes at once.

(gdb) bt
#0 0x00000000 in ?? ()
#1 0x00b5c873 in g_object_notify () from /usr/lib/libgobject-2.0.so.0
#2 0x01487746 in ?? () from /usr/lib/gstreamer-0.10/libgstplaybin.so
#3 0x00b634e8 in g_cclosure_marshal_VOID__PARAM ()
   from /usr/lib/libgobject-2.0.so.0
#4 0x00b56252 in g_closure_invoke () from /usr/lib/libgobject-2.0.so.0
#5 0x00b6a99d in ?? () from /usr/lib/libgobject-2.0.so.0
#6 0x00b6bdb4 in g_signal_emit_valist () from /usr/lib/libgobject-2.0.so.0
#7 0x00b6c256 in g_signal_emit () from /usr/lib/libgobject-2.0.so.0
#8 0x00b5a631 in ?? () from /usr/lib/libgobject-2.0.so.0
#9 0x002777f1 in ?? () from /usr/lib/libgstreamer-0.10.so.0
#10 0x00b56f8f in ?? () from /usr/lib/libgobject-2.0.so.0
#11 0x00b5c873 in g_object_notify () from /usr/lib/libgobject-2.0.so.0
#12 0x018f18b4 in ?? () from /usr/lib/gstreamer-0.10/libgstpulse.so
#13 0x017b4c4d in gst_ring_buffer_commit_full ()
   from /usr/lib/libgstaudio-0.10.so.0
#14 0x017bd5f2 in ?? () from /usr/lib/libgstaudio-0.10.so.0
#15 0x014c7415 in ?? () from /usr/lib/libgstbase-0.10.so.0
#16 0x014c84c7 in ?? () from /usr/lib/libgstbase-0.10.so.0
#17 0x014ca359 in ?? () from /usr/lib/libgstbase-0.10.so.0
#18 0x014ca871 in ?? () from /usr/lib/libgstbase-0.10.so.0
#19 0x002aae05 in ?? () from /usr/lib/libgstreamer-0.10.so.0
#20 0x002ab864 in ?? () from /usr/lib/libgstreamer-0.10.so.0
---Type <return> to continue, or q <return> to quit---
#21 0x00299d7d in ?? () from /usr/lib/libgstreamer-0.10.so.0
#22 0x002aae05 in ?? () from /usr/lib/libgstreamer-0.10.so.0
#23 0x002ab864 in ?? () from /usr/lib/libgstreamer-0.10.so.0
#24 0x014de75a in ?? () from /usr/lib/libgstbase-0.10.so.0
#25 0x002aae05 in ?? () from /usr/lib/libgstreamer-0.10.so.0
#26 0x002ab864 in ?? () from /usr/lib/libgstreamer-0.10.so.0
#27 0x014de75a in ?? () from /usr/lib/libgstbase-0.10.so.0
#28 0x002aae05 in ?? () from /usr/lib/libgstreamer-0.10.so.0
#29 0x002ab864 in ?? () from /usr/lib/libgstreamer-0.10.so.0
#30 0x00299d7d in ?? () from /usr/lib/libgstreamer-0.10.so.0
#31 0x002aae05 in ?? () from /usr/lib/libgstreamer-0.10.so.0
#32 0x002ab864 in ?? () from /usr/lib/libgstreamer-0.10.so.0
#33 0x0174242e in ?? () from /usr/lib/gstreamer-0.10/libgstcoreelements.so
#34 0x017426a6 in ?? () from /usr/lib/gstreamer-0.10/libgstcoreelements.so
#35 0x002aae05 in ?? () from /usr/lib/libgstreamer-0.10.so.0
#36 0x002ab864 in ?? () from /usr/lib/libgstreamer-0.10.so.0
#37 0x00299d7d in ?? () from /usr/lib/libgstreamer-0.10.so.0
#38 0x002aae05 in ?? () from /usr/lib/libgstreamer-0.10.so.0
#39 0x002ab864 in ?? () from /usr/lib/libgstreamer-0.10.so.0
#40 0x0149705a in ?? () from /usr/lib/gstreamer-0.10/libgstplaybin.so
#41 0x002aae05 in ?? () from /usr/lib/libgstreamer-0.10.so.0
#42 0x002ab864 in ?? () from /usr/lib/libgstreamer-0.10.so.0
#43 0x00299d7d in ?? () from /usr/lib/libgstreamer-0.10.so.0
---Type <return> to continue, or q <return> to quit---
#44 0x002aae05 in ?? () from /usr/lib/li...

[Pedro Villavicencio (pedro)]

please read my previous comment and get a backtrace with debugging symbols, thanks.

[Iain (iain-exolete)]

This bug happens in 10.04 both in totem and rhythmbox - when changing volume they can each segfault. Rhythmbox has reported failing the following assertion immediately before crash:

$ ./rhythmbox
(rhythmbox:10465): GLib-GObject-CRITICAL **: g_object_notify_queue_thaw: assertion `nqueue->freeze_count > 0' failed
Segmentation fault (core dumped)

I attach backtraces with debugging symbols for the crashes in each application. I hope they're helpful. As I say, the crash happens the same in each case, and as the stacks show, both programs crash after a call to gst_play_sink_set_volume takes it through g_object_notify_queue_thaw.

[Chealdo Ortiga (scriptwarlock)]

same segfault result to me, sliding the volume in totem back and forth causes segfault.... using ubuntu 10.04 totem version is 2.30.2

[Andy C. (ndc)]

Also affects Totem in Fedora. Rhythmbox is, weirdly, not affected by this.

[Ronnie McMaster (ronnie-mcmaster)]

Rhythmbox was being effected by this for me, but thankfully someone somewhere fixed it. I am guessing there was a duplicate bug report. If I stumble upon the duplicate, then I will link it, otherwise I will change the status in a few days.

[dino99 (9d9)]

This version has expired long ago; no more supported