Bug 211571

Summary: crash play dvd and click forward in Phonon::MediaController::previousTitle()
Product: [Frameworks and Libraries] Phonon Reporter: Johann-Nikolaus Andreae <johann-nikolaus>
Component: generalAssignee: Matthias Kretz <kretz>
Status: RESOLVED FIXED    
Severity: crash CC: christophpfister, ingolf, kretz, martin.sandsmark, rubens.matos, zahl
Priority: NOR    
Version: 4.3.0 (KDE 4.2.0)   
Target Milestone: ---   
Platform: Unlisted Binaries   
OS: Linux   
Latest Commit: Version Fixed In: 4.4.3
Sentry Crash Report:

Description Johann-Nikolaus Andreae 2009-10-23 19:09:35 UTC 
Application that crashed: kaffeine
Version of the application: 1.0-pre2
KDE Version: 4.3.1 (KDE 4.3.1) "release 5"
Qt Version: 4.5.3
Operating System: Linux 2.6.31.3-1-desktop x86_64
Distribution: "openSUSE 11.2 RC 1 (x86_64)"

What I was doing when the application crashed:
kaffeine dvd://mnt/
libdvdnav: Using dvdnav version 1.1.16.3 from http://xine.sf.net
libdvdread: Encrypted DVD support unavailable.
libdvdread: Attempting to use device /dev/loop0 mounted on /mnt for CSS authentication
libdvdread: Could not open input: Keine Berechtigung
libdvdread: Can't open /dev/loop0 for reading
libdvdread: Device /dev/loop0 inaccessible, CSS authentication not available.
libdvdnav: Can't read name block. Probably not a DVD-ROM device.
libdvdnav: Unable to find map file '/home/johann/.dvdnav/.map'
libdvdnav: DVD disk reports itself with Region mask 0x00000000. Regions: 1 2 3 4 5 6 7 8
KCrash: Application 'kaffeine' crashing...
sock_file=/home/johann/.kde4/socket-arbeitstier/kdeinit4__0

before the crash i have click on the back button. The crash is reproducible.

 -- Backtrace:
Application: Kaffeine (kaffeine), signal: Segmentation fault
[Current thread is 1 (Thread 0x7f04727c4750 (LWP 15218))]

Thread 10 (Thread 0x7f0461d78910 (LWP 15219)):
#0  0x00007f046eddd2cd in pthread_cond_timedwait@@GLIBC_2.3.2 () from /lib64/libpthread.so.0
#1  0x00007f0467ab2271 in metronom_sync_loop () from /usr/lib64/libxine.so.1
#2  0x00007f046edd865d in start_thread () from /lib64/libpthread.so.0
#3  0x00007f046f55714d in clone () from /lib64/libc.so.6
#4  0x0000000000000000 in ?? ()

Thread 9 (Thread 0x7f0460625910 (LWP 15220)):
#0  0x00007fff7590b82c in clock_gettime ()
#1  0x00007f046c3b4308 in clock_gettime () from /lib64/librt.so.1
#2  0x00007f0470a40e9d in ?? () from /usr/lib64/libQtCore.so.4
#3  0x00007f0470a41091 in ?? () from /usr/lib64/libQtCore.so.4
#4  0x00007f0470a3f48e in ?? () from /usr/lib64/libQtCore.so.4
#5  0x00007f046c127cba in IA__g_main_context_check (context=0x7f6040, max_priority=2147483647, fds=<value optimized out>, n_fds=-1) at gmain.c:2469
#6  0x00007f046c1284a0 in g_main_context_iterate (context=0x7f6040, block=<value optimized out>, dispatch=<value optimized out>, self=<value optimized out>) at gmain.c:2588
#7  0x00007f046c1288d0 in IA__g_main_context_iteration (context=0x7f6040, may_block=1) at gmain.c:2654
#8  0x00007f0470a3f3ae in QEventDispatcherGlib::processEvents(QFlags<QEventLoop::ProcessEventsFlag>) () from /usr/lib64/libQtCore.so.4
#9  0x00007f0470a156d2 in QEventLoop::processEvents(QFlags<QEventLoop::ProcessEventsFlag>) () from /usr/lib64/libQtCore.so.4
#10 0x00007f0470a15aa4 in QEventLoop::exec(QFlags<QEventLoop::ProcessEventsFlag>) () from /usr/lib64/libQtCore.so.4
#11 0x00007f047092e6db in QThread::exec() () from /usr/lib64/libQtCore.so.4
#12 0x00007f0467d0c3f4 in Phonon::Xine::XineThread::run (this=0x69f620) at /usr/src/debug/phonon-4.3.1/xine/xinethread.cpp:143
#13 0x00007f0470931445 in ?? () from /usr/lib64/libQtCore.so.4
#14 0x00007f046edd865d in start_thread () from /lib64/libpthread.so.0
#15 0x00007f046f55714d in clone () from /lib64/libc.so.6
#16 0x0000000000000000 in ?? ()

Thread 8 (Thread 0x7f045fc1a910 (LWP 15223)):
#0  0x00007f046f54e033 in poll () from /lib64/libc.so.6
#1  0x00007f045fc20c4e in ao_alsa_handle_event_thread () from /usr/lib64/xine/plugins/1.26/xineplug_ao_out_alsa.so
#2  0x00007f046edd865d in start_thread () from /lib64/libpthread.so.0
#3  0x00007f046f55714d in clone () from /lib64/libc.so.6
#4  0x0000000000000000 in ?? ()

Thread 7 (Thread 0x7f045f3f8910 (LWP 15224)):
#0  0x00007f046eddd049 in pthread_cond_wait@@GLIBC_2.3.2 () from /lib64/libpthread.so.0
#1  0x00007f0467ac3133 in ao_loop () from /usr/lib64/libxine.so.1
#2  0x00007f046edd865d in start_thread () from /lib64/libpthread.so.0
#3  0x00007f046f55714d in clone () from /lib64/libc.so.6
#4  0x0000000000000000 in ?? ()

Thread 6 (Thread 0x7f045df99910 (LWP 15225)):
#0  0x00007f046f5643ab in ?? () from /lib64/libc.so.6
#1  0x00007f046f54e04b in poll () from /lib64/libc.so.6
#2  0x00007f046aa4891a in ?? () from /usr/lib64/libxcb.so.1
#3  0x00007f046aa48e57 in ?? () from /usr/lib64/libxcb.so.1
#4  0x00007f046aa48f7d in ?? () from /usr/lib64/libxcb.so.1
#5  0x00007f046aa4909a in xcb_flush () from /usr/lib64/libxcb.so.1
#6  0x00007f045e9f268e in xv_display_frame () from /usr/lib64/xine/plugins/1.26/xineplug_vo_out_xcbxv.so
#7  0x00007f0467abfa5c in overlay_and_display_frame () from /usr/lib64/libxine.so.1
#8  0x00007f0467abff77 in video_out_loop () from /usr/lib64/libxine.so.1
#9  0x00007f046edd865d in start_thread () from /lib64/libpthread.so.0
#10 0x00007f046f55714d in clone () from /lib64/libc.so.6
#11 0x0000000000000000 in ?? ()

Thread 5 (Thread 0x7f045ceeb910 (LWP 15230)):
#0  0x00007f046eddd2cd in pthread_cond_timedwait@@GLIBC_2.3.2 () from /lib64/libpthread.so.0
#1  0x00007f0467abda8c in vo_remove_from_img_buf_queue_int () from /usr/lib64/libxine.so.1
#2  0x00007f0467abdb68 in vo_get_frame () from /usr/lib64/libxine.so.1
#3  0x00007f0467acf4a3 in post_video_get_frame () from /usr/lib64/libxine.so.1
#4  0x00007f04519fa4a8 in parse_chunk () from /usr/lib64/xine/plugins/1.26/xineplug_decode_mpeg2.so
#5  0x00007f04519fa6df in mpeg2_decode_data () from /usr/lib64/xine/plugins/1.26/xineplug_decode_mpeg2.so
#6  0x00007f0467abbdd9 in video_decoder_loop () from /usr/lib64/libxine.so.1
#7  0x00007f046edd865d in start_thread () from /lib64/libpthread.so.0
#8  0x00007f046f55714d in clone () from /lib64/libc.so.6
#9  0x0000000000000000 in ?? ()

Thread 4 (Thread 0x7f045c51d910 (LWP 15231)):
#0  0x00007f046eddd049 in pthread_cond_wait@@GLIBC_2.3.2 () from /lib64/libpthread.so.0
#1  0x00007f0467ab5b3b in fifo_buffer_get () from /usr/lib64/libxine.so.1
#2  0x00007f0467abcb05 in audio_decoder_loop () from /usr/lib64/libxine.so.1
#3  0x00007f046edd865d in start_thread () from /lib64/libpthread.so.0
#4  0x00007f046f55714d in clone () from /lib64/libc.so.6
#5  0x0000000000000000 in ?? ()

Thread 3 (Thread 0x7f045bd1c910 (LWP 15232)):
#0  0x00007f046eddd049 in pthread_cond_wait@@GLIBC_2.3.2 () from /lib64/libpthread.so.0
#1  0x00007f0467ac61fb in xine_event_wait () from /usr/lib64/libxine.so.1
#2  0x00007f0467ac626e in listener_loop () from /usr/lib64/libxine.so.1
#3  0x00007f046edd865d in start_thread () from /lib64/libpthread.so.0
#4  0x00007f046f55714d in clone () from /lib64/libc.so.6
#5  0x0000000000000000 in ?? ()

Thread 2 (Thread 0x7f0452a56910 (LWP 15233)):
#0  0x00007f046eddd049 in pthread_cond_wait@@GLIBC_2.3.2 () from /lib64/libpthread.so.0
#1  0x00007f0467ab5a53 in buffer_pool_alloc () from /usr/lib64/libxine.so.1
#2  0x00007f04663ae87d in dvd_plugin_read_block () from /usr/lib64/xine/plugins/1.26/xineplug_inp_dvd.so
#3  0x00007f0467ad331a in cache_plugin_read_block () from /usr/lib64/libxine.so.1
#4  0x00007f0453a789f7 in demux_mpeg_block_parse_pack () from /usr/lib64/xine/plugins/1.26/xineplug_dmx_mpeg_block.so
#5  0x00007f0453a798bb in demux_mpeg_block_send_chunk () from /usr/lib64/xine/plugins/1.26/xineplug_dmx_mpeg_block.so
#6  0x00007f0467acb045 in demux_loop () from /usr/lib64/libxine.so.1
#7  0x00007f046edd865d in start_thread () from /lib64/libpthread.so.0
#8  0x00007f046f55714d in clone () from /lib64/libc.so.6
#9  0x0000000000000000 in ?? ()

Thread 1 (Thread 0x7f04727c4750 (LWP 15218)):
[KCrash Handler]
#5  ref (this=<value optimized out>) at /usr/include/QtCore/qatomic_x86_64.h:121
#6  QByteArray (this=<value optimized out>) at /usr/include/QtCore/qbytearray.h:414
#7  MrlChangedEvent (this=<value optimized out>) at /usr/src/debug/phonon-4.3.1/xine/events.h:146
#8  Phonon::Xine::XineStream::setMrl (this=<value optimized out>) at /usr/src/debug/phonon-4.3.1/xine/xinestream.cpp:1719
#9  0x00007f0467d1de32 in Phonon::Xine::MediaObject::interfaceCall (this=0x7f5330, interface=<value optimized out>, command=<value optimized out>, arguments=<value optimized out>)
    at /usr/src/debug/phonon-4.3.1/xine/mediaobject.cpp:551
#10 0x00007f0471c6ae2b in Phonon::MediaController::setCurrentTitle(int) () from /usr/lib64/libphonon.so.4
#11 0x000000000041bf45 in _start ()

Reported using DrKonqi
Comment 1 Christoph Pfister 2009-10-25 01:50:24 UTC 
Phonon::MediaController::previousTitle() triggers the problem (reproducible over here)

<snip>
ASSERT failure in QList<T>::operator[]: "index out of range", file /usr/include/qt4/QtCore/qlist.h, line 403

Program received signal SIGABRT, Aborted.
0x00007ffff418ad25 in raise () from /lib/libc.so.6
(gdb) bt
#0  0x00007ffff418ad25 in raise () from /lib/libc.so.6
#1  0x00007ffff418dde1 in abort () from /lib/libc.so.6
#2  0x00007ffff58c86e5 in qt_message_output(QtMsgType, char const*) () from /usr/lib/libQtCore.so.4
#3  0x00007ffff58c882b in qFatal(char const*, ...) () from /usr/lib/libQtCore.so.4
#4  0x00007fffe9acbc1e in QList<QByteArray>::operator[](int) () from /usr/lib/qt4/plugins/phonon_backend/phonon_xine.so
#5  0x00007fffe9ac833c in Phonon::Xine::MediaObject::interfaceCall(Phonon::AddonInterface::Interface, int, QList<QVariant> const&) ()
   from /usr/lib/qt4/plugins/phonon_backend/phonon_xine.so
#6  0x00007ffff744a182 in Phonon::MediaController::setCurrentTitle(int) () from /usr/lib/libphonon.so.4
#7  0x00007ffff744a495 in Phonon::MediaController::previousTitle() () from /usr/lib/libphonon.so.4
#8  0x0000000000481b3a in MediaWidget::previous (this=0x869b20) at /home/lxuser/Entwicklung/kaffeine/src/mediawidget.cpp:621
<snip>
Comment 2 Myriam Schweingruber 2010-04-06 14:43:41 UTC 
Is this still valid with KDE SC 4.4.2/Phonon 4.4.0?
Comment 3 Myriam Schweingruber 2010-07-19 15:31:19 UTC 
Closing for lack of feedback. Assuming it is fixed already, please only reopen if you can reproduce this with KDE SC 4.4.4 or later.
Comment 4 Myriam Schweingruber 2011-01-16 00:26:45 UTC 
*** Bug 234629 has been marked as a duplicate of this bug. ***
Comment 5 Myriam Schweingruber 2011-01-27 09:39:07 UTC 
*** Bug 264365 has been marked as a duplicate of this bug. ***