Bug 245679

Summary: Kaffeine crashed when I tried to play (FFMpeg and WMA/WMV files) [float_to_int16_interleave_sse2, wma_decode_frame, wma_decode_superframe, avcodec_decode_audio3/2]
Product: [Applications] kaffeine Reporter: super250
Component: generalAssignee: Christoph Pfister <christophpfister>
Status: RESOLVED DUPLICATE    
Severity: crash CC: andresbajotierra, b.botje, boballen2, casperd, cfranchini, echidnaman, Freiheits, nesterenkodima90, wasge
Priority: NOR    
Version: unspecified   
Target Milestone: ---   
Platform: unspecified   
OS: Linux   
Latest Commit: Version Fixed In:
Sentry Crash Report:

Description super250 2010-07-24 21:57:37 UTC
Application: kaffeine-xbu (1.0 1.1.18.1)
KDE Platform Version: 4.4.5 (KDE 4.4.5) (Compiled from sources)
Qt Version: 4.6.3
Operating System: Linux 2.6.32.16-141.fc12.i686.PAE i686
Distribution: "Fedora release 12 (Constantine)"

-- Information about the crash:
[wmv3 @ 0xacd00a20]Extra data: 8 bits left, value: 0
KCrash: Application 'kaffeine-xbu' crashing...
sock_file=/home/madhu/.kde/socket-madhu-desktop/kdeinit4__0

The crash can be reproduced every time.

 -- Backtrace:
Application: Kaffeine (kaffeine-xbu), signal: Segmentation fault
[Current thread is 1 (Thread 0xb77937a0 (LWP 29936))]

Thread 9 (Thread 0xb61d8b70 (LWP 29937)):
#0  0x004bd424 in __kernel_vsyscall ()
#1  0x00509f72 in pthread_cond_timedwait@@GLIBC_2.3.2 () at ../nptl/sysdeps/unix/sysv/linux/i386/i486/pthread_cond_timedwait.S:179
#2  0x0479c7f5 in metronom_sync_loop (this=0x9979308) at metronom.c:870
#3  0x00505ab5 in start_thread (arg=0xb61d8b70) at pthread_create.c:297
#4  0x0076ef1e in clone () at ../sysdeps/unix/sysv/linux/i386/clone.S:130

Thread 8 (Thread 0xb57d7b70 (LWP 29938)):
#0  0x004bd424 in __kernel_vsyscall ()
#1  0x00764536 in __poll (fds=0xb4c01310, nfds=1, timeout=-1) at ../sysdeps/unix/sysv/linux/poll.c:87
#2  0x062036b3 in poll_func (ufds=0xb4c01310, nfds=1, timeout=-1, userdata=0x997b980) at pulse/thread-mainloop.c:75
#3  0x061f04da in pa_mainloop_poll (m=0x997b8e0) at pulse/mainloop.c:879
#4  0x061f1d54 in pa_mainloop_iterate (m=0x997b8e0, block=1, retval=0x0) at pulse/mainloop.c:961
#5  0x061f1e34 in pa_mainloop_run (m=0x997b8e0, retval=0x0) at pulse/mainloop.c:979
#6  0x062035a4 in thread (userdata=0x997b858) at pulse/thread-mainloop.c:94
#7  0x06080863 in internal_thread_func (userdata=0x997b878) at pulsecore/thread-posix.c:72
#8  0x00505ab5 in start_thread (arg=0xb57d7b70) at pthread_create.c:297
#9  0x0076ef1e in clone () at ../sysdeps/unix/sysv/linux/i386/clone.S:130

Thread 7 (Thread 0xb0bfeb70 (LWP 29939)):
#0  0x004bd424 in __kernel_vsyscall ()
#1  0x00509c45 in pthread_cond_wait@@GLIBC_2.3.2 () at ../nptl/sysdeps/unix/sysv/linux/i386/i486/pthread_cond_wait.S:122
#2  0x047ae9e4 in fifo_peek_int (this_gen=0x9983938) at audio_out.c:348
#3  fifo_peek (this_gen=0x9983938) at audio_out.c:388
#4  ao_loop (this_gen=0x9983938) at audio_out.c:1015
#5  0x00505ab5 in start_thread (arg=0xb0bfeb70) at pthread_create.c:297
#6  0x0076ef1e in clone () at ../sysdeps/unix/sysv/linux/i386/clone.S:130

Thread 6 (Thread 0xafdf2b70 (LWP 29940)):
#0  0x004bd424 in __kernel_vsyscall ()
#1  0x00767581 in select () at ../sysdeps/unix/syscall-template.S:82
#2  0x047c7115 in xine_usec_sleep (usec=<value optimized out>) at utils.c:481
#3  0x047ab206 in video_out_loop (this_gen=0x997e910) at video_out.c:1246
#4  0x00505ab5 in start_thread (arg=0xafdf2b70) at pthread_create.c:297
#5  0x0076ef1e in clone () at ../sysdeps/unix/sysv/linux/i386/clone.S:130

Thread 5 (Thread 0xaf008b70 (LWP 29941)):
#0  0x004bd424 in __kernel_vsyscall ()
#1  0x00764536 in __poll (fds=0xaf007cb8, nfds=1, timeout=-1) at ../sysdeps/unix/sysv/linux/poll.c:87
#2  0x005430c0 in _xcb_conn_wait (c=<value optimized out>, cond=<value optimized out>, vector=<value optimized out>, count=<value optimized out>) at xcb_conn.c:306
#3  0x00544d52 in xcb_wait_for_reply (c=<value optimized out>, request=<value optimized out>, e=<value optimized out>) at xcb_in.c:390
#4  0x0059ef76 in _XReply (dpy=<value optimized out>, rep=<value optimized out>, extra=<value optimized out>, discard=<value optimized out>) at xcb_io.c:454
#5  0x00592708 in XSync (dpy=<value optimized out>, discard=<value optimized out>) at Sync.c:48
#6  0x07ff0eb6 in x11_InstallXErrorHandler (this=0x997ce78, shminfo=<value optimized out>, width=1920, height=1088, format=842094169) at video_out_xv.c:249
#7  create_ximage (this=0x997ce78, shminfo=<value optimized out>, width=1920, height=1088, format=842094169) at video_out_xv.c:290
#8  0x07ff1432 in xv_update_frame_format (this_gen=0x997ce78, frame_gen=0x997eef8, width=<value optimized out>, height=1088, ratio=1.7647058823529411, format=842094169, flags=3) at video_out_xv.c:464
#9  0x047a8cd1 in vo_get_frame (this_gen=0x997e910, width=1920, height=1088, ratio=<value optimized out>, format=842094169, flags=3) at video_out.c:421
#10 0x047baa79 in post_video_get_frame (port_gen=0x9ede148, width=1920, height=1088, ratio=0, format=842094169, flags=3) at post.c:69
#11 0x004c26e7 in get_buffer (context=0xacd00a20, av_frame=0xacd2bec0) at ff_video_decoder.c:204
#12 0x011e479c in alloc_frame_buffer (s=0xacd20fd0, pic=0xacd2bec0, shared=0) at /usr/src/debug/ffmpeg-0.6/libavcodec/mpegvideo.c:228
#13 ff_alloc_picture (s=0xacd20fd0, pic=0xacd2bec0, shared=0) at /usr/src/debug/ffmpeg-0.6/libavcodec/mpegvideo.c:270
#14 0x011e7b5f in MPV_frame_start (s=0xacd20fd0, avctx=0xacd00a20) at /usr/src/debug/ffmpeg-0.6/libavcodec/mpegvideo.c:956
#15 0x012d4470 in vc1_decode_frame (avctx=0xacd00a20, data=0xacd00950, data_size=0xaf0081f8, avpkt=0xaf0080d4) at /usr/src/debug/ffmpeg-0.6/libavcodec/vc1dec.c:3250
#16 0x012bd0b5 in avcodec_decode_video2 (avctx=0xacd00a20, picture=0xacd00950, got_picture_ptr=0xaf0081f8, buf=0xacd00da8 "", buf_size=85946) at /usr/src/debug/ffmpeg-0.6/libavcodec/utils.c:611
#17 avcodec_decode_video (avctx=0xacd00a20, picture=0xacd00950, got_picture_ptr=0xaf0081f8, buf=0xacd00da8 "", buf_size=85946) at /usr/src/debug/ffmpeg-0.6/libavcodec/utils.c:597
#18 0x004c3657 in ff_handle_buffer (this_gen=0xacd00468, buf=0x9ebf650) at ff_video_decoder.c:1315
#19 ff_decode_data (this_gen=0xacd00468, buf=0x9ebf650) at ff_video_decoder.c:1566
#20 0x047a6c73 in video_decoder_loop (stream_gen=0x9980108) at video_decoder.c:382
#21 0x00505ab5 in start_thread (arg=0xaf008b70) at pthread_create.c:297
#22 0x0076ef1e in clone () at ../sysdeps/unix/sysv/linux/i386/clone.S:130

Thread 4 (Thread 0xae43ab70 (LWP 29942)):
[KCrash Handler]
#6  0x0138fcbd in float_to_int16_interleave_sse2 (dst=0xad00a008, src=0xae43a098, len=2048, channels=2) at /usr/src/debug/ffmpeg-0.6/libavcodec/x86/dsputil_mmx.c:2475
#7  0x01307c44 in wma_decode_frame (s=<value optimized out>, samples=<value optimized out>) at /usr/src/debug/ffmpeg-0.6/libavcodec/wmadec.c:810
#8  0x01309291 in wma_decode_superframe (avctx=0xacf18580, data=0xad00a008, data_size=0xae43a1ec, avpkt=0xae43a124) at /usr/src/debug/ffmpeg-0.6/libavcodec/wmadec.c:897
#9  0x012bd182 in avcodec_decode_audio3 (avctx=0xacf18580, samples=0xad00a008, frame_size_ptr=0xae43a1ec, buf=0xacf00500 "\005", buf_size=4096) at /usr/src/debug/ffmpeg-0.6/libavcodec/utils.c:656
#10 avcodec_decode_audio2 (avctx=0xacf18580, samples=0xad00a008, frame_size_ptr=0xae43a1ec, buf=0xacf00500 "\005", buf_size=4096) at /usr/src/debug/ffmpeg-0.6/libavcodec/utils.c:634
#11 0x004bfe68 in ff_audio_decode_data (this_gen=0xacf004b8, buf=0x9ec8060) at ff_audio_decoder.c:313
#12 0x047a8216 in audio_decoder_loop (stream_gen=0x9980108) at audio_decoder.c:362
#13 0x00505ab5 in start_thread (arg=0xae43ab70) at pthread_create.c:297
#14 0x0076ef1e in clone () at ../sysdeps/unix/sysv/linux/i386/clone.S:130

Thread 3 (Thread 0xada39b70 (LWP 29943)):
#0  0x004bd424 in __kernel_vsyscall ()
#1  0x00509c45 in pthread_cond_wait@@GLIBC_2.3.2 () at ../nptl/sysdeps/unix/sysv/linux/i386/i486/pthread_cond_wait.S:122
#2  0x047b1b8c in xine_event_wait (queue=0x9edda98) at events.c:56
#3  0x047b1c11 in listener_loop (queue_gen=0x9edda98) at events.c:214
#4  0x00505ab5 in start_thread (arg=0xada39b70) at pthread_create.c:297
#5  0x0076ef1e in clone () at ../sysdeps/unix/sysv/linux/i386/clone.S:130

Thread 2 (Thread 0xaccffb70 (LWP 29944)):
#0  0x004bd424 in __kernel_vsyscall ()
#1  0x00509c45 in pthread_cond_wait@@GLIBC_2.3.2 () at ../nptl/sysdeps/unix/sysv/linux/i386/i486/pthread_cond_wait.S:122
#2  0x047a0310 in buffer_pool_alloc (this=0x9981070) at buffer.c:90
#3  0x01b455a6 in asf_send_buffer_nodefrag (this=<value optimized out>, stream=<value optimized out>, frag_offset=85317, timestamp=<value optimized out>, frag_len=<value optimized out>)
    at demux_asf.c:740
#4  0x01b4800d in asf_parse_packet_payload (this=0x9ee7030, stream=0x9ee73c8, raw_id=2 '\002', frag_offset=85317, rlen=12, timestamp=0xaccff1e0) at demux_asf.c:1372
#5  0x01b49e54 in demux_asf_send_chunk (this_gen=0x9ee7030) at demux_asf.c:1738
#6  0x047b6211 in demux_loop (stream_gen=0x9980108) at demux.c:342
#7  0x00505ab5 in start_thread (arg=0xaccffb70) at pthread_create.c:297
#8  0x0076ef1e in clone () at ../sysdeps/unix/sysv/linux/i386/clone.S:130

Thread 1 (Thread 0xb77937a0 (LWP 29936)):
#0  0x004bd424 in __kernel_vsyscall ()
#1  0x0050c899 in __lll_lock_wait () at ../nptl/sysdeps/unix/sysv/linux/i386/i486/lowlevellock.S:142
#2  0x00507d50 in _L_lock_936 () from /lib/libpthread.so.0
#3  0x00507c21 in __pthread_mutex_lock (mutex=0x98c97d0) at pthread_mutex_lock.c:61
#4  0x005842cb in _XLockDisplay (dpy=<value optimized out>) at locking.c:460
#5  0x005879ad in XEventsQueued (dpy=<value optimized out>, mode=<value optimized out>) at Pending.c:40
#6  0x021eb01f in x11EventSourcePrepare (s=0x98ba040, timeout=0xbf9894ac) at kernel/qguieventdispatcher_glib.cpp:79
#7  0x0038d150 in g_main_context_prepare () from /lib/libglib-2.0.so.0
#8  0x0038d509 in ?? () from /lib/libglib-2.0.so.0
#9  0x0038da14 in g_main_context_iteration () from /lib/libglib-2.0.so.0
#10 0x044860c6 in QEventDispatcherGlib::processEvents (this=0x98a2a80, flags=...) at kernel/qeventdispatcher_glib.cpp:412
#11 0x021eae86 in QGuiEventDispatcherGlib::processEvents (this=0x98a2a80, flags=...) at kernel/qguieventdispatcher_glib.cpp:204
#12 0x044605e2 in QCoreApplication::processEvents (flags=...) at kernel/qcoreapplication.cpp:918
#13 0x0804d8da in XineObject::customEvent (this=0xbf98a030, event=0x9ede300) at /usr/src/debug/kaffeine-1.0/src/backend-xine/xineapplication.cpp:604
#14 0x0446ded4 in QObject::event (this=0xbf98a030, e=0x9ede300) at kernel/qobject.cpp:1279
#15 0x0213c6cc in QApplicationPrivate::notify_helper (this=0x98b6e48, receiver=0xbf98a030, e=0x9ede300) at kernel/qapplication.cpp:4306
#16 0x02143206 in QApplication::notify (this=0xbf98a0c8, receiver=0xbf98a030, e=0x9ede300) at kernel/qapplication.cpp:3710
#17 0x04d5da6b in KApplication::notify (this=0xbf98a0c8, receiver=0xbf98a030, event=0x9ede300) at /usr/src/debug/kdelibs-4.4.5/kdeui/kernel/kapplication.cpp:302
#18 0x0445dd53 in QCoreApplication::notifyInternal (this=0xbf98a0c8, receiver=0xbf98a030, event=0x9ede300) at kernel/qcoreapplication.cpp:726
#19 0x044601dc in sendEvent (receiver=0x0, event_type=<value optimized out>, data=0x98a2fd0) at kernel/qcoreapplication.h:215
#20 QCoreApplicationPrivate::sendPostedEvents (receiver=0x0, event_type=<value optimized out>, data=0x98a2fd0) at kernel/qcoreapplication.cpp:1367
#21 0x0446035e in QCoreApplication::sendPostedEvents (receiver=0x0, event_type=0) at kernel/qcoreapplication.cpp:1260
#22 0x044865d0 in sendPostedEvents (s=0x98b9310) at kernel/qcoreapplication.h:220
#23 postEventSourceDispatch (s=0x98b9310) at kernel/qeventdispatcher_glib.cpp:276
#24 0x00389fb8 in g_main_context_dispatch () from /lib/libglib-2.0.so.0
#25 0x0038d8e8 in ?? () from /lib/libglib-2.0.so.0
#26 0x0038da14 in g_main_context_iteration () from /lib/libglib-2.0.so.0
#27 0x044860c6 in QEventDispatcherGlib::processEvents (this=0x98a2a80, flags=...) at kernel/qeventdispatcher_glib.cpp:412
#28 0x021eae86 in QGuiEventDispatcherGlib::processEvents (this=0x98a2a80, flags=...) at kernel/qguieventdispatcher_glib.cpp:204
#29 0x0445c42a in QEventLoop::processEvents (this=0xbf989f94, flags=...) at kernel/qeventloop.cpp:149
#30 0x0445c76a in QEventLoop::exec (this=0xbf989f94, flags=...) at kernel/qeventloop.cpp:201
#31 0x04460427 in QCoreApplication::exec () at kernel/qcoreapplication.cpp:1003
#32 0x0213c778 in QApplication::exec () at kernel/qapplication.cpp:3585
#33 0x0804b865 in main (argc=1, argv=0xbf98a1e4) at /usr/src/debug/kaffeine-1.0/src/backend-xine/xineapplication.cpp:1003

Reported using DrKonqi
Comment 1 Jonathan Thomas 2010-07-25 02:11:20 UTC
This is a crash with the libavcodec video decoding library itself, and not with kaffeine. Please report this to the ffmpeg developers.
Comment 2 super250 2010-07-25 03:05:09 UTC
(In reply to comment #1)
> This is a crash with the libavcodec video decoding library itself, and not with
> kaffeine. Please report this to the ffmpeg developers.

How do I report? Is there anything I can do to fix the problem at my end? Thanks.
Comment 3 Jonathan Thomas 2010-07-25 05:26:34 UTC
The FFMpeg bug tracker is located here: https://roundup.ffmpeg.org/roundup/ffmpeg/

Unfortunately, I don't know if there is anything that you can do from your end.
Comment 4 Christoph Feck 2010-10-25 11:05:58 UTC
*** Bug 255187 has been marked as a duplicate of this bug. ***
Comment 5 Christoph Feck 2010-11-10 02:56:46 UTC
*** Bug 256487 has been marked as a duplicate of this bug. ***
Comment 6 Christoph Feck 2010-11-13 03:00:26 UTC
*** Bug 256745 has been marked as a duplicate of this bug. ***
Comment 7 Dario Andres 2010-11-20 16:26:59 UTC
[Comment from a bug triager]
This bug also affects other Phonon-based players when using Xine+FFMpeg while playing a WMA/WMV file: bug 247228. Merging

*** This bug has been marked as a duplicate of bug 247228 ***
Comment 8 Dario Andres 2010-11-20 16:29:14 UTC
*** Bug 254362 has been marked as a duplicate of this bug. ***
Comment 9 Dario Andres 2010-11-20 16:29:23 UTC
*** Bug 244144 has been marked as a duplicate of this bug. ***
Comment 10 Dario Andres 2010-12-02 22:42:15 UTC
[Comment from a bug triager]
Bug 258456 reports a similar crash which doesn't happen on a standalone Xine. The attached media file (and another testcase file URL) may be useful for other reporters to test. May be it is a Phonon-Xine (or may be it is a different issue)
Regards
Comment 11 Dario Andres 2011-02-19 13:42:00 UTC
*** Bug 266661 has been marked as a duplicate of this bug. ***
Comment 12 Dario Andres 2011-03-08 21:24:06 UTC
*** Bug 267481 has been marked as a duplicate of this bug. ***
Comment 13 Dario Andres 2011-10-01 13:31:52 UTC
*** Bug 282931 has been marked as a duplicate of this bug. ***