Bug 257248 - Dragonplayer crashes in the middel of a .ogv file for unknown reason
Summary: Dragonplayer crashes in the middel of a .ogv file for unknown reason
Status: CLOSED UPSTREAM
Alias: None
Product: Phonon
Classification: Frameworks and Libraries
Component: Xine backend (show other bugs)
Version: unspecified
Platform: Ubuntu Linux
: NOR crash
Target Milestone: ---
Assignee: Martin Sandsmark
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2010-11-18 15:22 UTC by cparg
Modified: 2010-11-21 13:52 UTC (History)
2 users (show)

See Also:
Latest Commit:
Version Fixed In:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description cparg 2010-11-18 15:22:15 UTC
Application: dragon (2.0)
KDE Platform Version: 4.4.2 (KDE 4.4.2)
Qt Version: 4.6.2
Operating System: Linux 2.6.32-25-generic x86_64
Distribution: Ubuntu 10.04.1 LTS

-- Information about the crash:
- I captured a screen clip ugin gt-recordMyDesktop
- I double clicked in Dolhin to replay the file
- after some seconds Dragon player crashed. 

This happens everytime with this .ogv file.


The crash can be reproduced every time.

 -- Backtrace:
Application: Dragon Player (dragon), signal: Aborted
__lll_lock_wait_private ()
    at ../nptl/sysdeps/unix/sysv/linux/x86_64/lowlevellock.S:97
	in ../nptl/sysdeps/unix/sysv/linux/x86_64/lowlevellock.S
[Current thread is 1 (Thread 0x7ff2cadfa760 (LWP 11952))]

Thread 10 (Thread 0x7ff2b9286710 (LWP 11953)):
#0  pthread_cond_timedwait@@GLIBC_2.3.2 () at ../nptl/sysdeps/unix/sysv/linux/x86_64/pthread_cond_timedwait.S:211
#1  0x00007ff2c99c9081 in ?? () from /usr/lib/libxine.so.1
#2  0x00007ff2c63249ca in start_thread (arg=<value optimized out>) at pthread_create.c:300
#3  0x00007ff2c7bcf70d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:112
#4  0x0000000000000000 in ?? ()

Thread 9 (Thread 0x7ff2b7e4a710 (LWP 11954)):
#0  0x00007ff2c7bc2f93 in *__GI___poll (fds=<value optimized out>, nfds=<value optimized out>, timeout=-1) at ../sysdeps/unix/sysv/linux/poll.c:87
#1  0x00007ff2c2bdb29a in ?? () from /usr/lib/libxcb.so.1
#2  0x00007ff2c2bdb7d7 in ?? () from /usr/lib/libxcb.so.1
#3  0x00007ff2c2bdb8f8 in ?? () from /usr/lib/libxcb.so.1
#4  0x00007ff2c2bdba0a in xcb_flush () from /usr/lib/libxcb.so.1
#5  0x00007ff2b88817de in ?? () from /usr/lib/xine/plugins/1.27/xineplug_vo_out_xcbxv.so
#6  0x00007ff2c99d67aa in ?? () from /usr/lib/libxine.so.1
#7  0x00007ff2c99d6bb3 in ?? () from /usr/lib/libxine.so.1
#8  0x00007ff2c63249ca in start_thread (arg=<value optimized out>) at pthread_create.c:300
#9  0x00007ff2c7bcf70d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:112
#10 0x0000000000000000 in ?? ()

Thread 8 (Thread 0x7ff2b7011710 (LWP 11955)):
#0  0x00007ff2c7bc2f93 in *__GI___poll (fds=<value optimized out>, nfds=<value optimized out>, timeout=31) at ../sysdeps/unix/sysv/linux/poll.c:87
#1  0x00007ff2c3e8f4a9 in ?? () from /lib/libglib-2.0.so.0
#2  0x00007ff2c3e8f8fc in g_main_context_iteration () from /lib/libglib-2.0.so.0
#3  0x00007ff2c8fae566 in QEventDispatcherGlib::processEvents (this=0x1214790, flags=<value optimized out>) at kernel/qeventdispatcher_glib.cpp:414
#4  0x00007ff2c8f83992 in QEventLoop::processEvents (this=<value optimized out>, flags=) at kernel/qeventloop.cpp:149
#5  0x00007ff2c8f83d6c in QEventLoop::exec (this=0x7ff2b7010d90, flags=) at kernel/qeventloop.cpp:201
#6  0x00007ff2c8e8dd59 in QThread::exec (this=<value optimized out>) at thread/qthread.cpp:487
#7  0x00007ff2bf1da440 in ?? () from /usr/lib/qt4/plugins/phonon_backend/phonon_xine.so
#8  0x00007ff2c8e90775 in QThreadPrivate::start (arg=0x1216030) at thread/qthread_unix.cpp:248
#9  0x00007ff2c63249ca in start_thread (arg=<value optimized out>) at pthread_create.c:300
#10 0x00007ff2c7bcf70d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:112
#11 0x0000000000000000 in ?? ()

Thread 7 (Thread 0x7ff2b6606710 (LWP 11958)):
#0  0x00007ff2c7bc2f93 in *__GI___poll (fds=<value optimized out>, nfds=<value optimized out>, timeout=333) at ../sysdeps/unix/sysv/linux/poll.c:87
#1  0x00007ff2b660b915 in ?? () from /usr/lib/xine/plugins/1.27/xineplug_ao_out_alsa.so
#2  0x00007ff2c63249ca in start_thread (arg=<value optimized out>) at pthread_create.c:300
#3  0x00007ff2c7bcf70d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:112
#4  0x0000000000000000 in ?? ()

Thread 6 (Thread 0x7ff2b5e05710 (LWP 11959)):
#0  pthread_cond_wait@@GLIBC_2.3.2 () at ../nptl/sysdeps/unix/sysv/linux/x86_64/pthread_cond_wait.S:162
#1  0x00007ff2c99d9e23 in ?? () from /usr/lib/libxine.so.1
#2  0x00007ff2c63249ca in start_thread (arg=<value optimized out>) at pthread_create.c:300
#3  0x00007ff2c7bcf70d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:112
#4  0x0000000000000000 in ?? ()

Thread 5 (Thread 0x7ff2b51cc710 (LWP 11960)):
[KCrash Handler]
#5  0x00007ff2c7b1ca75 in *__GI_raise (sig=<value optimized out>) at ../nptl/sysdeps/unix/sysv/linux/raise.c:64
#6  0x00007ff2c7b205c0 in *__GI_abort () at abort.c:92
#7  0x00007ff2c7b564fb in __libc_message (do_abort=<value optimized out>, fmt=<value optimized out>) at ../sysdeps/unix/sysv/linux/libc_fatal.c:189
#8  0x00007ff2c7b605b6 in malloc_printerr (action=3, str=0x7ff2c7c30bb2 "realloc(): invalid old size", ptr=<value optimized out>) at malloc.c:6266
#9  0x00007ff2c7b66d96 in _int_realloc (av=0x7ff2c7e67e40, oldp=0x7ff2a7a6d000, oldsize=<value optimized out>, nb=1048592) at malloc.c:5221
#10 0x00007ff2c7b670b0 in *__GI___libc_realloc (oldmem=0x7ff2a7a6d010, bytes=1048576) at malloc.c:3821
#11 0x00007ff2aa142eeb in ?? () from /usr/lib/xine/plugins/1.27/xineplug_decode_theora.so
#12 0x00007ff2c99d2cdb in ?? () from /usr/lib/libxine.so.1
#13 0x00007ff2c63249ca in start_thread (arg=<value optimized out>) at pthread_create.c:300
#14 0x00007ff2c7bcf70d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:112
#15 0x0000000000000000 in ?? ()

Thread 4 (Thread 0x7ff2affff710 (LWP 11961)):
#0  pthread_cond_timedwait@@GLIBC_2.3.2 () at ../nptl/sysdeps/unix/sysv/linux/x86_64/pthread_cond_timedwait.S:211
#1  0x00007ff2c99d3dc3 in ?? () from /usr/lib/libxine.so.1
#2  0x00007ff2c63249ca in start_thread (arg=<value optimized out>) at pthread_create.c:300
#3  0x00007ff2c7bcf70d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:112
#4  0x0000000000000000 in ?? ()

Thread 3 (Thread 0x7ff2af7fe710 (LWP 11962)):
#0  pthread_cond_wait@@GLIBC_2.3.2 () at ../nptl/sysdeps/unix/sysv/linux/x86_64/pthread_cond_wait.S:162
#1  0x00007ff2c99dcf6b in ?? () from /usr/lib/libxine.so.1
#2  0x00007ff2c63249ca in start_thread (arg=<value optimized out>) at pthread_create.c:300
#3  0x00007ff2c7bcf70d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:112
#4  0x0000000000000000 in ?? ()

Thread 2 (Thread 0x7ff2a839b710 (LWP 11963)):
#0  0x00007ff2c7bc7ff3 in select () at ../sysdeps/unix/syscall-template.S:82
#1  0x00007ff2c99f22c5 in xine_usec_sleep () from /usr/lib/libxine.so.1
#2  0x00007ff2c99e244b in ?? () from /usr/lib/libxine.so.1
#3  0x00007ff2c63249ca in start_thread (arg=<value optimized out>) at pthread_create.c:300
#4  0x00007ff2c7bcf70d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:112
#5  0x0000000000000000 in ?? ()

Thread 1 (Thread 0x7ff2cadfa760 (LWP 11952)):
#0  __lll_lock_wait_private () at ../nptl/sysdeps/unix/sysv/linux/x86_64/lowlevellock.S:97
#1  0x00007ff2c7b683dc in _L_lock_12449 () from /lib/libc.so.6
#2  0x00007ff2c7b66e78 in *__GI___libc_free (mem=0x7ff2c7e67e40) at malloc.c:3736
#3  0x00007ff2c6df72a2 in ?? () from /usr/lib/libX11.so.6
#4  0x00007ff2c6df7c07 in _XEventsQueued () from /usr/lib/libX11.so.6
#5  0x00007ff2c6de040b in XEventsQueued () from /usr/lib/libX11.so.6
#6  0x00007ff2c83ee62c in x11EventSourceCheck (s=0xb203d0) at kernel/qguieventdispatcher_glib.cpp:87
#7  0x00007ff2c3e8eb0a in g_main_context_check () from /lib/libglib-2.0.so.0
#8  0x00007ff2c3e8f4c3 in ?? () from /lib/libglib-2.0.so.0
#9  0x00007ff2c3e8f8fc in g_main_context_iteration () from /lib/libglib-2.0.so.0
#10 0x00007ff2c8fae513 in QEventDispatcherGlib::processEvents (this=0xb05380, flags=<value optimized out>) at kernel/qeventdispatcher_glib.cpp:412
#11 0x00007ff2c83ee46e in QGuiEventDispatcherGlib::processEvents (this=0x7ff2c7e67e40, flags=<value optimized out>) at kernel/qguieventdispatcher_glib.cpp:204
#12 0x00007ff2c8f83992 in QEventLoop::processEvents (this=<value optimized out>, flags=) at kernel/qeventloop.cpp:149
#13 0x00007ff2c8f83d6c in QEventLoop::exec (this=0x7fff9a7528e0, flags=) at kernel/qeventloop.cpp:201
#14 0x00007ff2c8f87aab in QCoreApplication::exec () at kernel/qcoreapplication.cpp:981
#15 0x00000000004231f7 in main (argc=2, argv=<value optimized out>) at ../../../../dragonplayer/src/app/main.cpp:57

Possible duplicates by query: bug 243462, bug 228333.

Reported using DrKonqi
Comment 1 Dario Andres 2010-11-18 22:29:14 UTC
[Comment from a bug triager]
This seems to be a bug in the Xine media library while trying to decode the video (Theora) of the OGV. Try checking if other Xine enabled players (like "xine-ui" and "gxine") also crash with that OGV. If that is the case, the error could be reported directly to the Xine developers.
Thanks
Comment 2 cparg 2010-11-21 12:50:41 UTC
I confirm, it crashes also with xine-ui (sometimes)

xine clip-1.ogv
Dies ist xine (X11 gui) - Ein freier Video-Player v0.99.6cvs.
(c) 2000-2007 Das xine Team.
/usr/bin/xdg-screensaver: Zeile 542: dcop: Kommando nicht gefunden.
*** glibc detected *** xine: double free or corruption (out): 0x00007fc6e3328010 ***
======= Backtrace: =========
/lib/libc.so.6(+0x775b6)[0x7fc704b285b6]
/lib/libc.so.6(cfree+0x73)[0x7fc704b2ee83]
/usr/lib/libxine.so.1(+0x2c6a0)[0x7fc7064b26a0]
xine[0x4a1d46]
xine[0x4a1e65]
xine[0x49d8a3]
xine[0x45b947]
/usr/lib/libxine.so.1(_x_vo_scale_redraw_needed+0x72)[0x7fc7064b4f22]
/usr/lib/xine/plugins/1.27/xineplug_vo_out_xv.so(+0x6e47)[0x7fc6f84b6e47]
/usr/lib/libxine.so.1(+0x2317b)[0x7fc7064a917b]
/lib/libpthread.so.0(+0x69ca)[0x7fc70489a9ca]
/lib/libc.so.6(clone+0x6d)[0x7fc704b9770d]
======= Memory map: ========
Comment 3 Dario Andres 2010-11-21 13:52:47 UTC
[Comment from a bug triager]
Thanks for checking. If you want, you can report that error to http://bugs.xine-project.org/ provinding the media file that causes the crash.