Crashes when trying to read RealMedia Files

Bug #56158 reported by Nicolas da Luz Duque
12
Affects Status Importance Assigned to Milestone
GStreamer
Fix Released
High
gstreamer0.10-ffmpeg (Ubuntu)
Fix Released
Medium
Ubuntu Desktop Bugs

Bug Description

When I double click on a .rm file, totem launches, but crashes directly.

I suspect it is a gstreamer issue, as right-clicking on the file and selecting "properties" crashes nautilus as well.

This should obviously never happen.

Following is the stack trace I got with gdb by launching totem in gdb, then drag&drop an .rm video file on totem.

iceman@Kamui:~/torrents/123done/Season 4 $ gdb totem
GNU gdb 6.4-debian
Copyright 2005 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB. Type "show warranty" for details.
This GDB was configured as "i486-linux-gnu"...(no debugging symbols found)
Using host libthread_db library "/lib/tls/i686/cmov/libthread_db.so.1".

(gdb) r
Starting program: /usr/bin/totem
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
---Type <return> to continue, or q <return> to quit---
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
[Thread debugging using libthread_db enabled]
[New Thread -1225226560 (LWP 26704)]
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
[New Thread -1238488144 (LWP 26721)]
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
[New Thread -1239106640 (LWP 26723)]
(no debugging symbols found)
[New Thread -1247499344 (LWP 26724)]
** Message: Couldn't initialize lirc.

(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
[New Thread -1260491856 (LWP 26734)]
** Message: don't know how to handle audio/x-sipro, flavor=(int)3, rate=(int)16000, channels=(int)1, width=(int)16, leaf_size=(int)0, packet_size=(int)320, height=(int)6, codec_data=(buffer)00000000000000000049000000000000
(no debugging symbols found)
[New Thread -1272452176 (LWP 26735)]
[New Thread -1280844880 (LWP 26736)]
(no debugging symbols found)
[Thread -1280844880 (LWP 26736) exited]
(no debugging symbols found)
---Type <return> to continue, or q <return> to quit---
(no debugging symbols found)
[New Thread -1280844880 (LWP 26741)]

Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread -1272452176 (LWP 26735)]
0xb44c43d8 in add_pixels_clamped_mmx () from /usr/lib/gstreamer-0.10/libgstffmpeg.so
(gdb) where
#0 0xb44c43d8 in add_pixels_clamped_mmx () from /usr/lib/gstreamer-0.10/libgstffmpeg.so
#1 0xb430f168 in ff_print_debug_info () from /usr/lib/gstreamer-0.10/libgstffmpeg.so
#2 0xb4315177 in MPV_decode_mb () from /usr/lib/gstreamer-0.10/libgstffmpeg.so
#3 0xb44aa06a in rv_decode_dc () from /usr/lib/gstreamer-0.10/libgstffmpeg.so
#4 0xb44aa7e7 in rv_decode_dc () from /usr/lib/gstreamer-0.10/libgstffmpeg.so
#5 0xb42fbc0a in avcodec_decode_video () from /usr/lib/gstreamer-0.10/libgstffmpeg.so
#6 0xb42a81fc in gst_ffmpegenc_register () from /usr/lib/gstreamer-0.10/libgstffmpeg.so
#7 0xb42aaba6 in gst_ffmpegenc_register () from /usr/lib/gstreamer-0.10/libgstffmpeg.so
#8 0xb753b804 in gst_pad_chain () from /usr/lib/libgstreamer-0.10.so.0
#9 0xb753bfa2 in gst_pad_push () from /usr/lib/libgstreamer-0.10.so.0
#10 0xb6284463 in gst_queue_get_type () from /usr/lib/gstreamer-0.10/libgstcoreelements.so
#11 0xb754fd9f in gst_task_get_type () from /usr/lib/libgstreamer-0.10.so.0
#12 0xb72bb448 in g_thread_pool_free () from /usr/lib/libglib-2.0.so.0
#13 0xb72b95a2 in g_static_private_free () from /usr/lib/libglib-2.0.so.0
#14 0xb74ad341 in start_thread () from /lib/tls/i686/cmov/libpthread.so.0
#15 0xb712d4ee in clone () from /lib/tls/i686/cmov/libc.so.6
(gdb) thread apply all bt

Thread 8 (Thread -1280844880 (LWP 26741)):
#0 0xffffe410 in __kernel_vsyscall ()
#1 0xb74afc76 in pthread_cond_wait@@GLIBC_2.3.2 () from /lib/tls/i686/cmov/libpthread.so.0
#2 0xb6283724 in gst_queue_get_type () from /usr/lib/gstreamer-0.10/libgstcoreelements.so
#3 0xb754fd9f in gst_task_get_type () from /usr/lib/libgstreamer-0.10.so.0
#4 0xb72bb448 in g_thread_pool_free () from /usr/lib/libglib-2.0.so.0
#5 0xb72b95a2 in g_static_private_free () from /usr/lib/libglib-2.0.so.0
#6 0xb74ad341 in start_thread () from /lib/tls/i686/cmov/libpthread.so.0
#7 0xb712d4ee in clone () from /lib/tls/i686/cmov/libc.so.6

Thread 7 (Thread -1280844880 (LWP 26741)):
#0 0xffffe410 in __kernel_vsyscall ()
#1 0xb74afc76 in pthread_cond_wait@@GLIBC_2.3.2 () from /lib/tls/i686/cmov/libpthread.so.0
#2 0xb6283724 in gst_queue_get_type () from /usr/lib/gstreamer-0.10/libgstcoreelements.so
#3 0xb754fd9f in gst_task_get_type () from /usr/lib/libgstreamer-0.10.so.0
#4 0xb72bb448 in g_thread_pool_free () from /usr/lib/libglib-2.0.so.0
#5 0xb72b95a2 in g_static_private_free () from /usr/lib/libglib-2.0.so.0
#6 0xb74ad341 in start_thread () from /lib/tls/i686/cmov/libpthread.so.0
#7 0xb712d4ee in clone () from /lib/tls/i686/cmov/libc.so.6

Thread 6 (Thread -1272452176 (LWP 26735)):
#0 0xb44c43d8 in add_pixels_clamped_mmx () from /usr/lib/gstreamer-0.10/libgstffmpeg.so
#1 0xb430f168 in ff_print_debug_info () from /usr/lib/gstreamer-0.10/libgstffmpeg.so
#2 0xb4315177 in MPV_decode_mb () from /usr/lib/gstreamer-0.10/libgstffmpeg.so
#3 0xb44aa06a in rv_decode_dc () from /usr/lib/gstreamer-0.10/libgstffmpeg.so
#4 0xb44aa7e7 in rv_decode_dc () from /usr/lib/gstreamer-0.10/libgstffmpeg.so
#5 0xb42fbc0a in avcodec_decode_video () from /usr/lib/gstreamer-0.10/libgstffmpeg.so
#6 0xb42a81fc in gst_ffmpegenc_register () from /usr/lib/gstreamer-0.10/libgstffmpeg.so
#7 0xb42aaba6 in gst_ffmpegenc_register () from /usr/lib/gstreamer-0.10/libgstffmpeg.so
#8 0xb753b804 in gst_pad_chain () from /usr/lib/libgstreamer-0.10.so.0
#9 0xb753bfa2 in gst_pad_push () from /usr/lib/libgstreamer-0.10.so.0
#10 0xb6284463 in gst_queue_get_type () from /usr/lib/gstreamer-0.10/libgstcoreelements.so
#11 0xb754fd9f in gst_task_get_type () from /usr/lib/libgstreamer-0.10.so.0
#12 0xb72bb448 in g_thread_pool_free () from /usr/lib/libglib-2.0.so.0
#13 0xb72b95a2 in g_static_private_free () from /usr/lib/libglib-2.0.so.0
#14 0xb74ad341 in start_thread () from /lib/tls/i686/cmov/libpthread.so.0
#15 0xb712d4ee in clone () from /lib/tls/i686/cmov/libc.so.6

Thread 5 (Thread -1260491856 (LWP 26734)):
#0 0xffffe410 in __kernel_vsyscall ()
#1 0xb74afc76 in pthread_cond_wait@@GLIBC_2.3.2 () from /lib/tls/i686/cmov/libpthread.so.0
#2 0xb62827a4 in gst_queue_get_type () from /usr/lib/gstreamer-0.10/libgstcoreelements.so
#3 0xb753b804 in gst_pad_chain () from /usr/lib/libgstreamer-0.10.so.0
#4 0xb753bfa2 in gst_pad_push () from /usr/lib/libgstreamer-0.10.so.0
#5 0xb4e4d576 in gst_rmdemux_add_stream () from /usr/lib/gstreamer-0.10/libgstrmdemux.so
#6 0xb4e4eb18 in gst_rmdemux_add_stream () from /usr/lib/gstreamer-0.10/libgstrmdemux.so
#7 0xb4e4f15c in gst_rmdemux_add_stream () from /usr/lib/gstreamer-0.10/libgstrmdemux.so
#8 0xb754fd9f in gst_task_get_type () from /usr/lib/libgstreamer-0.10.so.0
#9 0xb72bb448 in g_thread_pool_free () from /usr/lib/libglib-2.0.so.0
#10 0xb72b95a2 in g_static_private_free () from /usr/lib/libglib-2.0.so.0
#11 0xb74ad341 in start_thread () from /lib/tls/i686/cmov/libpthread.so.0
---Type <return> to continue, or q <return> to quit---
#12 0xb712d4ee in clone () from /lib/tls/i686/cmov/libc.so.6

Thread 4 (Thread -1247499344 (LWP 26724)):
#0 0xffffe410 in __kernel_vsyscall ()
#1 0xb74afc76 in pthread_cond_wait@@GLIBC_2.3.2 () from /lib/tls/i686/cmov/libpthread.so.0
#2 0xb754b657 in gst_system_clock_obtain () from /usr/lib/libgstreamer-0.10.so.0
#3 0xb72b95a2 in g_static_private_free () from /usr/lib/libglib-2.0.so.0
#4 0xb74ad341 in start_thread () from /lib/tls/i686/cmov/libpthread.so.0
#5 0xb712d4ee in clone () from /lib/tls/i686/cmov/libc.so.6

Thread 3 (Thread -1239106640 (LWP 26723)):
#0 0xffffe410 in __kernel_vsyscall ()
#1 0xb74b2d56 in __nanosleep_nocancel () from /lib/tls/i686/cmov/libpthread.so.0
#2 0xb72bbb04 in g_usleep () from /usr/lib/libglib-2.0.so.0
#3 0xb6266b07 in gst_xvimagesink_get_type () from /usr/lib/gstreamer-0.10/libgstxvimagesink.so
#4 0xb72b95a2 in g_static_private_free () from /usr/lib/libglib-2.0.so.0
#5 0xb74ad341 in start_thread () from /lib/tls/i686/cmov/libpthread.so.0
#6 0xb712d4ee in clone () from /lib/tls/i686/cmov/libc.so.6

Thread 2 (Thread -1238488144 (LWP 26721)):
#0 0xffffe410 in __kernel_vsyscall ()
#1 0xb71238c4 in poll () from /lib/tls/i686/cmov/libc.so.6
#2 0xb72a07e8 in g_main_context_check () from /usr/lib/libglib-2.0.so.0
#3 0xb72a0cb8 in g_main_loop_run () from /usr/lib/libglib-2.0.so.0
#4 0xb760470e in link_thread_io_context () from /usr/lib/libORBit-2.so.0
#5 0xb72b95a2 in g_static_private_free () from /usr/lib/libglib-2.0.so.0
#6 0xb74ad341 in start_thread () from /lib/tls/i686/cmov/libpthread.so.0
#7 0xb712d4ee in clone () from /lib/tls/i686/cmov/libc.so.6

Thread 1 (Thread -1225226560 (LWP 26704)):
#0 0xffffe410 in __kernel_vsyscall ()
#1 0xb71238c4 in poll () from /lib/tls/i686/cmov/libc.so.6
#2 0xb72a07e8 in g_main_context_check () from /usr/lib/libglib-2.0.so.0
#3 0xb72a0cb8 in g_main_loop_run () from /usr/lib/libglib-2.0.so.0
#4 0xb7b7f765 in gtk_main () from /usr/lib/libgtk-x11-2.0.so.0
#5 0x08065e37 in main ()
#0 0xb44c43d8 in add_pixels_clamped_mmx () from /usr/lib/gstreamer-0.10/libgstffmpeg.so
(gdb)

Revision history for this message
Sebastien Bacher (seb128) wrote :

Thanks for your bug. The crash seems to be due to gstreamer0.10-ffmpeg, reassigning. What version of Ubuntu do you use? Do you have an URL to download an example of file making it crash?

Changed in totem:
assignee: nobody → desktop-bugs
importance: Untriaged → Medium
status: Unconfirmed → Needs Info
Revision history for this message
Nicolas da Luz Duque (hot-boy) wrote :

You're welcome.

Yeah, I figured it came from gstreamer.

I'm using dapper, updated daily with universe, multiverse, and plf enabled.

I am uploading the .rm file on my server as I write. Hopefully It will be completely uploaded by the time you read this.

Just in case, the md5 checksum is
fc9b19429bc8a0a0dc0d21620b39db7f Daria - 407 - Of Human Bonding.rm

Here's the link:
http://iceman-srv.be/Daria%20-%20407%20-%20Of%20Human%20Bonding.rm

It's only 12,6 Mo.

Revision history for this message
Sebastien Bacher (seb128) wrote :

Thank you for the example. I've forwarded that upstream: http://bugzilla.gnome.org/show_bug.cgi?id=353872

Changed in gstreamer0.10-ffmpeg:
status: Needs Info → Confirmed
Changed in gstreamer:
status: Unknown → Rejected
Changed in gstreamer:
status: Unknown → Confirmed
Changed in gstreamer:
status: Confirmed → Fix Released
Revision history for this message
Daniel T Chen (crimsun) wrote :

unreproducible in jaunty, at least

Changed in gstreamer0.10-ffmpeg:
status: Confirmed → Fix Released
Changed in gstreamer:
importance: Unknown → High
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Duplicates of this bug

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.