totem-gstreamer crashed with SIGSEGV in _int_malloc()

[Martin Olsson]

Binary package hint: totem

I was playing rick astley in .flv format grabbed from the tube using youtube-dl. I then closed totem (without anything out of the ordinary). After about 10 seconds I got this crash out of nowhere (I had already launched a terminal and were doing other stuff)

ProblemType: Crash
Architecture: i386
Date: Fri Apr 18 18:30:23 2008
DistroRelease: Ubuntu 8.04
ExecutablePath: /usr/bin/totem-gstreamer
Package: totem-gstreamer 2.22.1-0ubuntu2
PackageArchitecture: i386
ProcCmdline: totem file:///home/username/Desktop/rick.flv
ProcEnviron:
 PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/games
 LANG=en_DK.UTF-8
 SHELL=/bin/bash
Signal: 11
SourcePackage: totem
StacktraceTop:
 _int_malloc () from /lib/tls/i686/cmov/libc.so.6
 malloc () from /lib/tls/i686/cmov/libc.so.6
 __gconv_open () from /lib/tls/i686/cmov/libc.so.6
 iconv_open () from /lib/tls/i686/cmov/libc.so.6
 ?? () from /usr/lib/libpulse.so.0
Title: totem-gstreamer crashed with SIGSEGV in _int_malloc()
Uname: Linux 2.6.24-16-generic i686
UserGroups: adm admin audio cdrom dialout dip floppy lpadmin netdev plugdev powerdev sambashare scanner video

[Apport retracing service (apport)]

StacktraceTop:_int_malloc () from /lib/tls/i686/cmov/libc.so.6
malloc () from /lib/tls/i686/cmov/libc.so.6
__gconv_open () from /lib/tls/i686/cmov/libc.so.6
iconv_open () from /lib/tls/i686/cmov/libc.so.6
iconv_simple (

[Sebastien Bacher (seb128)]

Thanks for your bug report. Could you try to get a valgrind log for the crash (you can follow the instructions on https://wiki.ubuntu.com/Valgrind)?

[Pedro Villavicencio (pedro)]

We are closing this bug report because it lacks the information we need to investigate the problem, as described in the previous comments. Please reopen it if you can give us the missing information, and don't hesitate to submit bug reports in the future. To reopen the bug report you can click on the current status, under the Status column, and change the Status back to "New". Thanks again!.

[Martin Olsson (mnemo)]

Unfortunately, I don't have reliable repro steps for this bug it was just a bug that appeared out of the blue and then apport submitted it. For this reason, I will not reopen this bug.

Anyway, I'm fairly sure it was related to a conflict between totem and some other app with respect to pulseaudio. Check out the stacktrace that apport report for thread number one:

#0 0xb7021f98 in _int_malloc () from /lib/tls/i686/cmov/libc.so.6
#1 0xb7023cad in malloc () from /lib/tls/i686/cmov/libc.so.6
#2 0xb6fcdc65 in __gconv_open () from /lib/tls/i686/cmov/libc.so.6
#3 0xb6fcd2e0 in iconv_open () from /lib/tls/i686/cmov/libc.so.6
#4 0xb4d8a69d in iconv_simple (
    str=0x842ab28 "Assertion 'pthread_setspecific(t->key, userdata) == 0' failed at pulsecore/thread-posix.c:194, function pa_tls_set(). Aborting.",
    to=0x5900 <Address 0x5900 out of bounds>, from=0xb7102160 "\001")
    at pulse/utf8.c:212
 new_str = 0x0
 len = <value optimized out>
 cd = <value optimized out>
 inbuf = <value optimized out>
 outbuf = <value optimized out>
 res = <value optimized out>
 inbytes = <value optimized out>
 outbytes = <value optimized out>
 __func__ = "iconv_simple"
 __PRETTY_FUNCTION__ = "iconv_simple"
#5 0xb4d9587b in pa_log_levelv_meta (level=PA_LOG_ERROR,
    file=0xb4db6216 "pulsecore/thread-posix.c", line=194,
    func=0xb4db62ab "pa_tls_set",
    format=0xb4dabcfc "Assertion '%s' failed at %s:%u, function %s(). Aborting.", ap=0xb0dd31b4 "Tb۴\026b۴�") at pulsecore/log.c:161
 prefix = 0xb4db0a33 ""
 suffix = 0xb4db0a33 ""
 local_t = 0xb4da1c20 "U\211�S�����\201�\037`\001"
 text = 0x842ab28 "Assertion 'pthread_setspecific(t->key, userdata) == 0' failed at pulsecore/thread-posix.c:194, function pa_tls_set(). Aborting."
 t = 0x842ab28 "Assertion 'pthread_setspecific(t->key, userdata) == 0' failed at pulsecore/thread-posix.c:194, function pa_tls_set(). Aborting."
 n = 0x0
 location = 0x84209a0 "thread-posix.c: "
 __func__ = "pa_log_levelv_meta"
 __PRETTY_FUNCTION__ = "pa_log_levelv_meta"
#6 0xb4d95c03 in pa_log_level_meta (level=PA_LOG_ERROR,
    file=0xb4db6216 "pulsecore/thread-posix.c", line=194,
    func=0xb4db62ab "pa_tls_set",
    format=0xb4dabcfc "Assertion '%s' failed at %s:%u, function %s(). Aborting.") at pulsecore/log.c:220
 ap = 0xb0dd31b4 "Tb۴\026b۴�"
#7 0xb4daa47f in pa_tls_set (t=0x816f690, userdata=0x81c0de0)
    at pulsecore/thread-posix.c:194
 r = (void *) 0x0
 __func__ = "pa_tls_set"
 __PRETTY_FUNCTION__ = "pa_tls_set"
#8 0xb4daad43 in pa_thread_self () at pulsecore/thread-posix.c:62
 t = (pa_thread *) 0x81c0de0
#9 0xb4d89ba5 in pa_threaded_mainloop_unlock (m=0xb430e8e0)
    at pulse/thread-mainloop.c:59
 __func__ = "pa_threaded_mainloop_unlock"
 __PRETTY_FUNCTION__ = "pa_threaded_mainloop_unlock"
#10 0xb55e0143 in gst_pulsesink_write (asink=0x83e2b80, data=0x8a0fd80,
    length=0) at pulsesink.c:482
 pulsesink = (GstPulseSink *) 0x83e2b80
 sum = 880
 __FUNCTION__ = "gst_pulsesink_write"
#11 0xb7a65fdb in audioringbuffer_thread_func (buf=0x85b0808)
    at gstaudiosink.c:226
 written = 144768176
 left = 880
 len = 880
 readptr = (
    guint8 *) 0x8a0fcb0 "�%\t�@�\035�\030G\177��Zz�p�\026�\230�\016�Т<�(�\\���\200\037���b��S��P\024...