bugGnash - The GNU Flash player - Bugs: bug #20526, Video-EmbedSquareTest.swf makes...

 
 

bug #20526: Video-EmbedSquareTest.swf makes gnash segfault (gst)

Submitted by:  Sandro Santilli <strk>
Submitted on:  Thu 19 Jul 2007 12:10:30 AM UTC  
 
Category: video-gstSeverity: 6 - Security
Release: NoneStatus: Fixed
Privacy: PublicAssigned to: Tomas Groth <tgc>
Open/Closed: Closed

Add a New Comment(Rich Markup)
   

You are not logged in

Please log in, so followups can be emailed to you.

 

Tue 24 Jul 2007 11:10:02 AM UTC, comment #4:

I found the problem and the solution! The problem is in video_stream_def, where we've started to use a bound (rect) to "store" the size of the videoframe. The information "stored" in the bound is stored in uint16_t, and needed to be converted to pixels and int.
Fix has just been commited. This also fixes the valgrind complaints.

Tomas Groth <tgc>In charge of this item.
Fri 20 Jul 2007 05:43:00 PM UTC, comment #3:

The valgrind rapport for ffmpeg and gst is very alike, which makes sense since they both uses ffmpeg for decoding h263 video. So what exactly is causing the gst backend crash, but not ffmpeg is still to be found.

Tomas Groth <tgc>In charge of this item.
Thu 19 Jul 2007 04:55:05 PM UTC, comment #2:

backtrace with some debug symbols

(gdb) bt full
#0 0x00002b499ff64bd5 in image::image_base::update (this=0xaaeb90,
data=0xb51e00 "�\003") at image.cpp:35
No locals.
#1 0x00002b499ff9f437 in gnash::embedVideoDecoderGst::callback_output (
buffer=0xaa8930, user_data=0x9a0d40) at embedVideoDecoderGst.cpp:272
decoder = (gnash::embedVideoDecoderGst *) 0x9a0d40
_PRETTY_FUNCTION_ = "static void gnash::embedVideoDecoderGst::callback_output(GstElement, GstBuffer, GstPad, void)"
#2 0x00002b49a1bcf929 in g_closure_invoke () from /usr/lib/libgobject-2.0.so.0
No symbol table info available.
#3 0x00002b49a1be0827 in ?? () from /usr/lib/libgobject-2.0.so.0
No symbol table info available.
#4 0x00002b49a1be1bdd in g_signal_emit_valist ()
from /usr/lib/libgobject-2.0.so.0
No symbol table info available.
#5 0x00002b49a1be1e93 in g_signal_emit () from /usr/lib/libgobject-2.0.so.0
No symbol table info available.
#6 0x00002aaaaab15831 in ?? ()
from /usr/lib/gstreamer-0.10/libgstcoreelements.so

(file #13403)

Alexander Sack <asac>
Thu 19 Jul 2007 04:54:09 PM UTC, comment #1:

backtrace with some debug symbols

(gdb) bt full
#0 0x00002b499ff64bd5 in image::image_base::update (this=0xaaeb90,
data=0xb51e00 "�\003") at image.cpp:35
No locals.
#1 0x00002b499ff9f437 in gnash::embedVideoDecoderGst::callback_output (
buffer=0xaa8930, user_data=0x9a0d40) at embedVideoDecoderGst.cpp:272
decoder = (gnash::embedVideoDecoderGst *) 0x9a0d40
_PRETTY_FUNCTION_ = "static void gnash::embedVideoDecoderGst::callback_output(GstElement, GstBuffer, GstPad, void)"
#2 0x00002b49a1bcf929 in g_closure_invoke () from /usr/lib/libgobject-2.0.so.0
No symbol table info available.
#3 0x00002b49a1be0827 in ?? () from /usr/lib/libgobject-2.0.so.0
No symbol table info available.
#4 0x00002b49a1be1bdd in g_signal_emit_valist ()
from /usr/lib/libgobject-2.0.so.0
No symbol table info available.
#5 0x00002b49a1be1e93 in g_signal_emit () from /usr/lib/libgobject-2.0.so.0
No symbol table info available.
#6 0x00002aaaaab15831 in ?? ()
from /usr/lib/gstreamer-0.10/libgstcoreelements.so

Alexander Sack <asac>
Thu 19 Jul 2007 12:10:30 AM UTC, original submission:

Doesn't segfault with ffmpeg ...

Sandro Santilli <strk>
Project Member

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach File(s):
   
   
Comment:
   

Attached Files
file #13403:  gnash-valgrind.log added by asac (55KiB - text/x-log - here a valgrind log (with some symbols))

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -unavailable- added by tgc (Posted a comment)
  • -unavailable- added by asac (Posted a comment)
  • -unavailable- added by strk (Submitted the item)
  •  

    Do you think this task is very important?
    If so, you can click here to add your encouragement to it.
    This task has 0 encouragements so far.

    Only logged-in users can vote.

     

    Please enter the title of George Orwell's famous dystopian book (it's a date):

     

     

    Follow 4 latest changes.

    Date Changed By Updated Field Previous Value => Replaced By
    Tue 24 Jul 2007 11:34:18 AM UTCstrkStatusReady For Test=>Fixed
      Open/ClosedOpen=>Closed
    Tue 24 Jul 2007 11:10:02 AM UTCtgcStatusNone=>Ready For Test
    Thu 19 Jul 2007 04:55:05 PM UTCasacAttached File-=>Added gnash-valgrind.log, #13403

    Back to the top


    Powered by Savane 3.1-cleanup1