Bug 208757 - Dragon crashes on a certain file
Summary: Dragon crashes on a certain file
Status: RESOLVED UPSTREAM
Alias: None
Product: dragonplayer
Classification: Applications
Component: general (show other bugs)
Version: unspecified
Platform: Unlisted Binaries Linux
: NOR crash
Target Milestone: ---
Assignee: Unassigned bugs mailing-list
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2009-09-28 09:40 UTC by Tim McKenzie
Modified: 2009-09-29 04:05 UTC (History)
1 user (show)

See Also:
Latest Commit:
Version Fixed In:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Tim McKenzie 2009-09-28 09:40:32 UTC
Application that crashed: dragon
Version of the application: 2.0
KDE Version: 4.3.1 (KDE 4.3.1)
Qt Version: 4.5.2
Operating System: Linux 2.6.30.5-43.fc11.i586 i686

What I was doing when the application crashed:
Dragon consistently crashes when trying to play a certain mpg file created by MythTV.  It's plausible that the file is corrupt, but you may be interested in preventing the crash, anyway.

 -- Backtrace:
Application: Dragon Player (dragon), signal: Segmentation fault
[Current thread is 1 (Thread 0xb7f179b0 (LWP 5083))]

Thread 11 (Thread 0x2439b70 (LWP 5084)):
#0  0x00703422 in __kernel_vsyscall ()
#1  0x005d22d2 in pthread_cond_timedwait@@GLIBC_2.3.2 () from /lib/libpthread.so.0
#2  0x05df8a8d in metronom_sync_loop (this=0x9fd6818) at metronom.c:870
#3  0x005cd935 in start_thread () from /lib/libpthread.so.0
#4  0x0050294e in clone () from /lib/libc.so.6

Thread 10 (Thread 0x2e4bb70 (LWP 5085)):
#0  0x00703422 in __kernel_vsyscall ()
#1  0x004fb001 in select () from /lib/libc.so.6
#2  0x05e23d00 in xine_usec_sleep (usec=0) at utils.c:481
#3  0x05e071c6 in video_out_loop (this_gen=0x9fde628) at video_out.c:1246
#4  0x005cd935 in start_thread () from /lib/libpthread.so.0
#5  0x0050294e in clone () from /lib/libc.so.6

Thread 9 (Thread 0x8e36b70 (LWP 5086)):
#0  0x00113f86 in clock_gettime () from /lib/librt.so.1
#1  0x0031a1b3 in QTimerInfoList::getTime (this=0xb6201434, t=@0xb6201458) at kernel/qeventdispatcher_unix.cpp:339
#2  0x0031a3a1 in QTimerInfoList::updateCurrentTime (this=0xb6201434) at kernel/qeventdispatcher_unix.cpp:297
#3  0x0031ae2c in QTimerInfoList::timerWait (this=0xb6201434, tm=@0x8e36004) at kernel/qeventdispatcher_unix.cpp:420
#4  0x003187d0 in timerSourcePrepare (source=0xb6201400, timeout=0x8e3606c) at kernel/qeventdispatcher_glib.cpp:141
#5  0x00659240 in IA__g_main_context_prepare (context=0xb62004d8, priority=0x8e360ec) at gmain.c:2144
#6  0x00659601 in g_main_context_iterate (context=0xb62004d8, block=<value optimized out>, dispatch=1, self=0xb62016a8) at gmain.c:2435
#7  0x00659b13 in IA__g_main_context_iteration (context=0xb62004d8, may_block=1) at gmain.c:2518
#8  0x00318627 in QEventDispatcherGlib::processEvents (this=0xb6200468, flags={i = 36}) at kernel/qeventdispatcher_glib.cpp:329
#9  0x002ec0d9 in QEventLoop::processEvents (this=0x8e36234, flags={i = 36}) at kernel/qeventloop.cpp:149
#10 0x002ec52a in QEventLoop::exec (this=0x8e36234, flags={i = 0}) at kernel/qeventloop.cpp:201
#11 0x001f9ff3 in QThread::exec (this=0xa3f8d70) at thread/qthread.cpp:487
#12 0x00e8c79a in Phonon::Xine::XineThread::run (this=0xa3f8d70) at /usr/src/debug/phonon-4.3.1/xine/xinethread.cpp:143
#13 0x001fd2f2 in QThreadPrivate::start (arg=0xa3f8d70) at thread/qthread_unix.cpp:188
#14 0x005cd935 in start_thread () from /lib/libpthread.so.0
#15 0x0050294e in clone () from /lib/libc.so.6

Thread 8 (Thread 0x9837b70 (LWP 5087)):
#0  0x00703422 in __kernel_vsyscall ()
#1  0x004f8396 in poll () from /lib/libc.so.6
#2  0x03c03039 in poll_func (ufds=0xb6000498, nfds=1, timeout=-1, userdata=0xa3fa708) at pulse/thread-mainloop.c:71
#3  0x03bf0869 in pa_mainloop_poll (m=0xa3fa668) at pulse/mainloop.c:857
#4  0x03bf0c2e in pa_mainloop_iterate (m=0xa3fa668, block=1, retval=0x0) at pulse/mainloop.c:923
#5  0x03bf0ca8 in pa_mainloop_run (m=0xa3fa668, retval=0x0) at pulse/mainloop.c:941
#6  0x03c030ba in thread (userdata=0xa3f9410) at pulse/thread-mainloop.c:90
#7  0x03cac7a4 in internal_thread_func (userdata=0xa3fa620) at pulsecore/thread-posix.c:72
#8  0x005cd935 in start_thread () from /lib/libpthread.so.0
#9  0x0050294e in clone () from /lib/libc.so.6

Thread 7 (Thread 0xb1ffeb70 (LWP 5088)):
#0  0x00703422 in __kernel_vsyscall ()
#1  0x005d1fa5 in pthread_cond_wait@@GLIBC_2.3.2 () from /lib/libpthread.so.0
#2  0x05e0a904 in fifo_peek_int (blocking=<value optimized out>, fifo=<value optimized out>) at audio_out.c:348
#3  fifo_peek (blocking=<value optimized out>, fifo=<value optimized out>) at audio_out.c:388
#4  ao_loop (blocking=<value optimized out>, fifo=<value optimized out>) at audio_out.c:1015
#5  0x005cd935 in start_thread () from /lib/libpthread.so.0
#6  0x0050294e in clone () from /lib/libc.so.6

Thread 6 (Thread 0xb11c5b70 (LWP 5089)):
#0  0x00703422 in __kernel_vsyscall ()
#1  0x005d1fa5 in pthread_cond_wait@@GLIBC_2.3.2 () from /lib/libpthread.so.0
#2  0x05dfc634 in fifo_buffer_get (fifo=0xb6203358) at buffer.c:230
#3  0x05e02a15 in video_decoder_loop (stream_gen=0xb6202418) at video_decoder.c:130
#4  0x005cd935 in start_thread () from /lib/libpthread.so.0
#5  0x0050294e in clone () from /lib/libc.so.6

Thread 5 (Thread 0xb05f7b70 (LWP 5090)):
[KCrash Handler]
#6  sbr_process_channel (sbr=0x0, channel_buf=<value optimized out>, X=0xb05eba00, ch=0 '\0', dont_process=0 '\0', downSampledSBR=1 '\1') at sbr_dec.c:375
#7  0x03c39be8 in sbrDecodeSingleFramePS (sbr=0xa6bfee0, left_channel=0xa6b7250, right_channel=0xa6d28e8, just_seeked=0 '\0', downSampledSBR=<value optimized out>) at sbr_dec.c:637
#8  0x03c29697 in reconstruct_single_channel (hDecoder=0xa5bd5f8, ics=0xb05f1ed0, sce=0xb05f1eca, spec_data=0xb05f16ca) at specrec.c:1071
#9  0x03c2bd43 in single_lfe_channel_element (hDecoder=<value optimized out>, ld=0xb05f7174, channel=0 '\0', tag=0xb05f70cf "\17\331\r") at syntax.c:631
#10 0x03c2bea2 in decode_sce_lfe (hDecoder=0xa5bd5f8, hInfo=0xa5bc5d0, ld=0xb05f7174, id_syn_ele=3 '\3') at syntax.c:351
#11 0x03c2c71d in raw_data_block (hDecoder=0xa5bd5f8, hInfo=0xa5bc5d0, ld=0xb05f7174, pce=0xa5bdc71, drc=0xa5bdf50) at syntax.c:458
#12 0x03c1e12e in aac_frame_decode (hDecoder=<value optimized out>, hInfo=0x2, 
    buffer=0xa5bcda6 "\177\200o\v\320\61\377\252\240b\207\377e\273\227+\206v.7\377\4\356w\312\373\202\264 \340ZV\341M\377\245\220L\f\346\244\215\220\205\61\263\276_\\\336u>h\276#g+\274\204@\272\1\177^\202\327\261\21$\243\314\63$\215\24\254\5", buffer_size=3545, sample_buffer2=0x0, sample_buffer_size=0) at decoder.c:965
#13 0x03055047 in faad_decode_audio (end_frame=<value optimized out>, this=<value optimized out>) at xine_faad_decoder.c:231
#14 faad_decode_data (end_frame=<value optimized out>, this=<value optimized out>) at xine_faad_decoder.c:414
#15 0x05e0422e in audio_decoder_loop (stream_gen=0xb6202418) at audio_decoder.c:362
#16 0x005cd935 in start_thread () from /lib/libpthread.so.0
#17 0x0050294e in clone () from /lib/libc.so.6

Thread 4 (Thread 0xafbf6b70 (LWP 5091)):
#0  0x00703422 in __kernel_vsyscall ()
#1  0x005d1fa5 in pthread_cond_wait@@GLIBC_2.3.2 () from /lib/libpthread.so.0
#2  0x05e0da44 in xine_event_wait (queue=0xb6232b28) at events.c:56
#3  0x05e0dac5 in listener_loop (queue_gen=0xb6232b28) at events.c:214
#4  0x005cd935 in start_thread () from /lib/libpthread.so.0
#5  0x0050294e in clone () from /lib/libc.so.6

Thread 3 (Thread 0xaf1a5b70 (LWP 5092)):
#0  0x00703422 in __kernel_vsyscall ()
#1  0x004fb001 in select () from /lib/libc.so.6
#2  0x05e23d00 in xine_usec_sleep (usec=0) at utils.c:481
#3  0x05e12ebf in demux_loop (stream_gen=0xb6202418) at demux.c:352
#4  0x005cd935 in start_thread () from /lib/libpthread.so.0
#5  0x0050294e in clone () from /lib/libc.so.6

Thread 2 (Thread 0xae5e1b70 (LWP 5093)):
#0  0x00703422 in __kernel_vsyscall ()
#1  0x005d1fa5 in pthread_cond_wait@@GLIBC_2.3.2 () from /lib/libpthread.so.0
#2  0x03051336 in dvbsub_timer_func (this_gen=0xb6001ff8) at xine_spudvb_decoder.c:626
#3  0x005cd935 in start_thread () from /lib/libpthread.so.0
#4  0x0050294e in clone () from /lib/libc.so.6

Thread 1 (Thread 0xb7f179b0 (LWP 5083)):
#0  0x00703422 in __kernel_vsyscall ()
#1  0x005d1fa5 in pthread_cond_wait@@GLIBC_2.3.2 () from /lib/libpthread.so.0
#2  0x001fe337 in QWaitConditionPrivate::wait (time=<value optimized out>, this=<value optimized out>) at thread/qwaitcondition_unix.cpp:87
#3  QWaitCondition::wait (time=<value optimized out>, this=<value optimized out>) at thread/qwaitcondition_unix.cpp:159
#4  0x00e91892 in Phonon::Xine::XineStream::closeBlocking (this=0xb6201e00) at /usr/src/debug/phonon-4.3.1/xine/xinestream.cpp:1542
#5  0x00ea7492 in Phonon::Xine::MediaObject::~MediaObject (this=0xa3ebef0, __in_chrg=<value optimized out>) at /usr/src/debug/phonon-4.3.1/xine/mediaobject.cpp:109
#6  0x05db86cc in Phonon::MediaNodePrivate::deleteBackendObject (this=0xa3f8c78) at /usr/src/debug/phonon-4.3.1/phonon/medianode.cpp:81
#7  0x05dc733f in Phonon::FactoryPrivate::~FactoryPrivate (this=0x9e4a3e0, __in_chrg=<value optimized out>) at /usr/src/debug/phonon-4.3.1/phonon/factory.cpp:193
#8  0x05dc5d75 in Phonon::<anonymous struct>::destroy(void) () at /usr/src/debug/phonon-4.3.1/phonon/factory.cpp:84
#9  0x05dc30cb in Phonon::CleanUpGlobalStatic::~CleanUpGlobalStatic (this=0x5de7abc, __in_chrg=<value optimized out>) at /usr/src/debug/phonon-4.3.1/phonon/globalstatic_p.h:55
#10 0x00452e0f in exit () from /lib/libc.so.6
#11 0x0498692b in qt_xio_errhandler () at kernel/qapplication_x11.cpp:707
#12 0x05513f6a in KApplication::xioErrhandler (this=0xbfa3cd18, dpy=0x9dd02a8) at /usr/src/debug/kdelibs-4.3.1/kdeui/kernel/kapplication.cpp:408
#13 0x05513fa6 in kde_xio_errhandler (dpy=0x9dd02a8) at /usr/src/debug/kdelibs-4.3.1/kdeui/kernel/kapplication.cpp:125
#14 0x008d1e36 in _XIOError (dpy=0x9dd02a8) at XlibInt.c:2959
#15 0x008d9aaa in process_responses (dpy=0x9dd02a8, wait_for_first_event=<value optimized out>, current_error=0x0, current_request=0) at xcb_io.c:240
#16 0x008da3e6 in _XEventsQueued (dpy=0x9dd02a8, mode=2) at xcb_io.c:256
#17 0x008c317f in XEventsQueued (dpy=0x9dd02a8, mode=2) at Pending.c:44
#18 0x049c2f0e in x11EventSourcePrepare (s=0x9dc0068, timeout=0xbfa3ca7c) at kernel/qguieventdispatcher_glib.cpp:79
#19 0x00659240 in IA__g_main_context_prepare (context=0x9dbf290, priority=0xbfa3cafc) at gmain.c:2144
#20 0x00659601 in g_main_context_iterate (context=0x9dbf290, block=<value optimized out>, dispatch=1, self=0x9dbd058) at gmain.c:2435
#21 0x00659b13 in IA__g_main_context_iteration (context=0x9dbf290, may_block=1) at gmain.c:2518
#22 0x00318627 in QEventDispatcherGlib::processEvents (this=0x9da76e0, flags={i = 36}) at kernel/qeventdispatcher_glib.cpp:329
#23 0x049c2cb5 in QGuiEventDispatcherGlib::processEvents (this=0x9da76e0, flags={i = 36}) at kernel/qguieventdispatcher_glib.cpp:202
#24 0x002ec0d9 in QEventLoop::processEvents (this=0xbfa3cc94, flags={i = 36}) at kernel/qeventloop.cpp:149
#25 0x002ec52a in QEventLoop::exec (this=0xbfa3cc94, flags={i = 0}) at kernel/qeventloop.cpp:201
#26 0x002ee9af in QCoreApplication::exec () at kernel/qcoreapplication.cpp:888
#27 0x049237f7 in QApplication::exec () at kernel/qapplication.cpp:3525
#28 0x0806caa1 in _start ()

Reported using DrKonqi
Comment 1 Tim McKenzie 2009-09-28 09:47:43 UTC
The original problem file is 179.4 MiB; a truncated version that also causes the crash is 8 MiB, but this is still too big to upload.
Comment 2 Dario Andres 2009-09-29 03:33:00 UTC
It seems that the crash is related to Xine and FAAD.
- If you use a different xine-enabled player (like "xine-ui" or "gxine") to play that movie file, do they crash too ?

Thanks
Comment 3 Tim McKenzie 2009-09-29 04:01:06 UTC
Yes, both xine-ui and gxine crash in their own ways, at about the same point in the original file.
Comment 4 Dario Andres 2009-09-29 04:05:38 UTC
Then it is a Xine crash, could you please file a bug report at http://bugs.xine-project.org/ ? Thank you very much