mplayer crashes in open_stream at streaming radio site

Bug #519579 reported by George Socker
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
mplayer (Ubuntu)
Fix Released
Medium
Reinhard Tartler

Bug Description

Binary package hint: mplayer

Trying to load rtsp://accstream.polskieradio.pl/program1 crashes mplayer with signal 11 in open_stream. I can't seem to find the debug package, but GDB came up with the following.
Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 0xb5d60770 (LWP 27650)]
0x08278fd8 in real_setup_and_get_header ()
(gdb) bt
#0 0x08278fd8 in real_setup_and_get_header ()
#1 0xb6796ac0 in ?? ()
Backtrace stopped: previous frame inner to this frame (corrupt stack?)

This happens both from a shell and the mplayer firefox plugin.

ProblemType: Bug
Architecture: i386
DistroRelease: Ubuntu 9.04
Package: mplayer 2:1.0~rc2-0ubuntu19
ProcEnviron:
 LANGUAGE=
 LANG=en_US.UTF-8
 SHELL=/bin/bash
SourcePackage: mplayer
Uname: Linux 2.6.28-18-generic i686

Related branches

Revision history for this message
George Socker (gsocker) wrote :
Revision history for this message
Reinhard Tartler (siretart) wrote : Re: [Bug 519579] [NEW] mplayer crashes in open_stream at streaming radio site
Download full text (3.4 KiB)

this crash seems to occur with 2:1.0~rc3+svn20090426-1ubuntu13 found in
lucid as well. There, this backtrace can be retrieved:

#0 0x0825a3e1 in real_parse_sdp (rtsp_session=0x8522870, bandwidth=0, username=0x0, password=0x0) at stream/realrtsp/real.c:241
        j = <value optimized out>
        n = -1
        b = "RC\n\000\000\000`\000\000\000p(R\b\n\000\000\000\263\v?\b\023#\274\001\004\000\000\000\001\000\000\000\002\000\000\000\377\377\377\377\004\000\000\000\263\v?\b\266\v?\b\264\v?\b\022\370\260\001\231\062"
        rulematches = {-1073749816, 28331980, -1208180384, 1, 5, 29249524, -1073749701, 8, -1073749784, 28345528, 139604568,
          -1073749701, 8, 0, 139602032, 139602032}
        desc = 0x85238f8
        buf = 0x8524598 ""
        avg_bit_rate = 0
        max_bit_rate = 0
        max_packet_size = 0
        avg_packet_size = 0
        len = <value optimized out>
        i = 0
        duration = 0
#1 real_setup_and_get_header (rtsp_session=0x8522870, bandwidth=0, username=0x0, password=0x0) at stream/realrtsp/real.c:551
        session_id = 0x8523400 "1715274-2"
        h = 0x8523970
        challenge1 = 0x85233c8 "05500325da15813b80c1f70e2e20fbfb"
        challenge2 = "R\b\000\000\000\000\003\000\000\000\266\v?\b\004\000\000\000\376\377\377\377\004\000\000\000\004\000\000\000\266\v?\b\263\v?\b\004\000"
        checksum = "\000\230\062R\b\003\000\000"
        subscribe = 0x85237f0 "Subscribe: "
        buf = <value optimized out>
        mrl = 0x8523100 "rtsp://accstream.polskieradio.pl:554/program1"
        size = <value optimized out>
        status = 0
        authfield = <value optimized out>
        i = <value optimized out>
#2 0x082508c5 in rtsp_session_start (fd=6, mrl=0xbfffe26c, path=0x84f9299 "program1", host=0x84f9278 "accstream.polskieradio.pl",
    port=554, redir=0xbfffe268, bandwidth=0, user=0x0, pass=0x0) at stream/librtsp/rtsp_session.c:141
        rtsp_session = 0x84f9410
        server = 0x8523268 "Helix Mobile Server Version 13.0.0.479 (win32) (RealServer compatible)"
        h = <value optimized out>
#3 0x0824ab27 in rtsp_streaming_start (stream=0x8521588, mode=0, opts=0x0, file_format=0x844f348) at stream/stream_rtsp.c:99
        fd = 6
        mrl = 0x8522838 "rtsp://accstream.polskieradio.pl:554/program1"
        file = 0x84f9299 "program1"
        temp = 5
        rtsp = <value optimized out>
        port = <value optimized out>
        redirected = 0
#4 rtsp_streaming_open (stream=0x8521588, mode=0, opts=0x0, file_format=0x844f348) at stream/stream_rtsp.c:159
        url = <value optimized out>
#5 0x081b49fd in open_stream_plugin (sinfo=0x83eff00, filename=0x84fd308 "rtsp://accstream.polskieradio.pl/program1", mode=0,
    options=0x0, file_format=0x844f348, ret=0xbfffe34c, redirected_url=0xbfffe348) at stream/stream.c:155
        arg = 0x0
        s = 0x8521588
        desc = 0x0
#6 0x081b4cd3 in open_stream_full (filename=0x84fd308 "rtsp://accstream.polskieradio.pl/program1", mode=0, options=0x0,
    file_format=0x844f348) at stream/stream.c:208
        i = 6
        r = 0
        s = <value optimized out>
        redirected_url = 0x0
#7 0x081b433b in open_stream (filename=0x85239d0 "", op...

Read more...

Revision history for this message
Reinhard Tartler (siretart) wrote :

this should be fixed by this upstream commit:
------------------------------------------------------------------------
r29626 | reimar | 2009-09-02 12:55:36 +0200 (Mi, 02 Sep 2009) | 3 lines

Fix possible crashes with invalid SDPs that result in stream descriptions
not being initialized.

Index: real.c
===================================================================
--- real.c (revision 29625)
+++ real.c (revision 29626)
@@ -235,6 +235,8 @@
     char b[64];
     int rulematches[MAX_RULEMATCHES];

+ if (!desc->stream[i])
+ continue;
 #ifdef LOG
     printf("calling asmrp_match with:\n%s\n%u\n", desc->stream[i]->asm_rule_book, bandwidth);
 #endif

Changed in mplayer (Ubuntu):
assignee: nobody → Reinhard Tartler (siretart)
importance: Undecided → Medium
status: New → Triaged
Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package mplayer - 2:1.0~rc3+svn20090426-1ubuntu14

---------------
mplayer (2:1.0~rc3+svn20090426-1ubuntu14) lucid; urgency=low

  * cleanup --configure flags
  * drop VDPAU build hacks, Closes: #566868, LP: #530481, #532007
  * enable musepack support
  * enable libaa support, LP: #502767, #455535
  * enable enca support, LP: #115519
  * remove DEB_BUILD_CONFIGURE override hack
  * fix weird permission bits for mplayer.desktop and mplayer.xpm
  * reorganize binary packages to no longer install the gui version by
    default
  * refactor debian/rules to avoid sub makes
  * add patch to allow compilation with newer x264
  * use mp_msg instead of printf in debug help message
  * bump standards version
  * as no longer used, remove dependencies on debconf
  * Fix possible crashes with invalid SDPs, LP: #519579
  * add missing replaces
  * install manpages in the 'mplayer' package. and only there
 -- Reinhard Tartler <email address hidden> Thu, 11 Mar 2010 12:45:55 +0100

Changed in mplayer (Ubuntu):
status: Triaged → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.