Dies with sigseg on flash video

Jörg Sommer joerg at alea.gnuu.de
Fri Oct 7 22:13:41 UTC 2011 

I've sent a copy of this mail to the maintainer of libavcodec. Maybe they
have any idea.

Jörg Sommer hat am Wed 21. Jan, 13:06 (+0100) geschrieben:
> Package: xine-ui
> Version: 0.99.5+cvs20070914-2.1
> Severity: normal

I can still reproduce this crash, but I think it's a bug in libavcodec. I
think it's Altivec specific. I've rebuild the lib with debugging symbols
and this is the gdb session:

(gdb) run ~/video1.flv
Starting program: /usr/bin/xine ~/video1.flv
[Thread debugging using libthread_db enabled]
Dies ist xine (X11 gui) - Ein freier Video-Player v0.99.6.
(c) 2000-2007 Das xine Team.
[New Thread 0x489d6480 (LWP 26545)]
[New Thread 0x491d6480 (LWP 26546)]
[New Thread 0x499d6480 (LWP 26547)]
[New Thread 0x4a5e1480 (LWP 26548)]
[New Thread 0x4ade1480 (LWP 26549)]
[New Thread 0x4b5e1480 (LWP 26550)]
[New Thread 0x4cde2480 (LWP 26551)]
[New Thread 0x4d9e3480 (LWP 26552)]
[New Thread 0x4e5ee480 (LWP 26553)]
[New Thread 0x4edee480 (LWP 26554)]
[New Thread 0x4f5ee480 (LWP 26555)]
[New Thread 0x50def480 (LWP 26556)]
[New Thread 0x515ef480 (LWP 26557)]
[New Thread 0x52df0480 (LWP 26558)]
[New Thread 0x5365f480 (LWP 26559)]
[New Thread 0x53e5f480 (LWP 26561)]
[New Thread 0x5465f480 (LWP 26587)]

Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 0x4cde2480 (LWP 26551)]
0x0e4a5608 in put_pixels8_xy2_altivec (
    block=0x5469dff0 "\200\200\200\200\200\200\200\200\200\200\200\200\200\200\200\200" <Address 0x5469e000 out of bounds>, 
    pixels=0x547bef50 "wwwvvurpjjjjjjjj\227\227\227\227\227\227\227\227\227\226\225\224\224\224\224\224\224\224\223\222\220\217\216\215\214\213\212\211\210\207\206\205\205\203\202\201\200\177}{wwww", 'v' <repeats 14 times>, "uuuuuuuttttuuuuuuuuuvwwwwwwwwwutsssssssqonnnnmhiijkknqquuuuuuv}~\177\177\177\177\177\177|}\177\200\202\202\202\201\202\201\200~}||}zzzzzywummmmmmmm" <Address 0x547bf000 out of bounds>, line_size=160, h=8)
    at /var/tmp/libav-0.7.2/libavcodec/ppc/dsputil_altivec.c:743
743             temp2 = vec_ld(line_size + 16, pixels);
(gdb) bt full
#0  0x0e4a5608 in put_pixels8_xy2_altivec (
    block=0x5469dff0 "\200\200\200\200\200\200\200\200\200\200\200\200\200\200\200\200" <Address 0x5469e000 out of bounds>, 
    pixels=0x547bef50 "wwwvvurpjjjjjjjj\227\227\227\227\227\227\227\227\227\226\225\224\224\224\224\224\224\224\223\222\220\217\216\215\214\213\212\211\210\207\206\205\205\203\202\201\200\177}{wwww", 'v' <repeats 14 times>, "uuuuuuuttttuuuuuuuuuvwwwwwwwwwutsssssssqonnnnmhiijkknqquuuuuuv}~\177\177\177\177\177\177|}\177\200\202\202\202\201\202\201\200~}||}zzzzzywummmmmmmm" <Address 0x547bf000 out of bounds>, line_size=160, h=8)
    at /var/tmp/libav-0.7.2/libavcodec/ppc/dsputil_altivec.c:743
        rightside = 0
        i = 7
        pixelsv1 = {117, 117, 117, 116, 115, 113, 110, 107, 0, 0, 0, 0, 0, 0, 0, 0}
        pixelsv2 = {14, 74, 84, 240, 14, 74, 84, 132, 0, 0, 0, 0, 130, 2, 64, 0}
        pixelsavg = {14, 74, 84, 240, 14, 74, 84, 132, 0, 0, 0, 0, 130, 2, 64, 0}
        blockv = {122, 122, 122, 122, 122, 121, 119, 117, 109, 109, 109, 109, 109, 109, 109, 109}
        temp1 = {122, 122, 122, 122, 122, 121, 119, 117, 109, 109, 109, 109, 109, 109, 109, 109}
        temp2 = {14, 74, 84, 240, 14, 74, 84, 132, 0, 0, 0, 0, 130, 2, 64, 0}
        pixelssum1 = {31354, 31354, 31353, 30581, 28013, 28013, 28013, 28013}
        pixelssum2 = {30069, 30068, 29553, 28267, 0, 0, 0, 0}
        temp3 = {3658, 21744, 3658, 21636, 0, 0, 33282, 16384}
        vczero = {122, 122, 122, 122, 122, 121, 119, 117, 109, 109, 109, 109, 109, 109, 109, 109}
        vctwo = {31354, 31354, 31353, 30581, 28013, 28013, 28013, 28013}
#1  0x00000000 in ?? ()
No symbol table info available.
(gdb) i threads 
  Id   Target Id         Frame 
  18   Thread 0x5465f480 (LWP 26587) "xine" 0x0fb481ec in __pthread_cond_wait (cond=0x10798ea8, 
    mutex=0x10798e8c) at pthread_cond_wait.c:153
  17   Thread 0x53e5f480 (LWP 26561) "xine" 0x0fb481ec in __pthread_cond_wait (cond=0x10ee3538, 
    mutex=0x10ee351c) at pthread_cond_wait.c:153
  16   Thread 0x5365f480 (LWP 26559) "xine" 0x0fa91528 in select () at ../sysdeps/unix/syscall-template.S:82
  15   Thread 0x52df0480 (LWP 26558) "xine" 0x0fb481ec in __pthread_cond_wait (cond=0x10e0fcb8, 
    mutex=0x10e0fc9c) at pthread_cond_wait.c:153
  14   Thread 0x515ef480 (LWP 26557) "xine" 0x0fb481ec in __pthread_cond_wait (cond=0x10e0ec78, 
    mutex=0x10e0ec5c) at pthread_cond_wait.c:153
  13   Thread 0x50def480 (LWP 26556) "xine" 0x0fb481ec in __pthread_cond_wait (cond=0x10d636f8, 
    mutex=0x10d636dc) at pthread_cond_wait.c:153
  12   Thread 0x4f5ee480 (LWP 26555) "xine" 0x0fb481ec in __pthread_cond_wait (cond=0x10d625d8, 
    mutex=0x10d625bc) at pthread_cond_wait.c:153
  11   Thread 0x4edee480 (LWP 26554) "xine" 0x0fb481ec in __pthread_cond_wait (cond=0x107c3160, 
    mutex=0x107c3148) at pthread_cond_wait.c:153
  10   Thread 0x4e5ee480 (LWP 26553) "xine" 0x0fa91528 in select () at ../sysdeps/unix/syscall-template.S:82
  9    Thread 0x4d9e3480 (LWP 26552) "xine" 0x0fb487b8 in __pthread_cond_timedwait (cond=0x1060b5f8, 
    mutex=0x1060b5e0, abstime=0x4d9e2c28) at pthread_cond_timedwait.c:168
* 8    Thread 0x4cde2480 (LWP 26551) "xine" 0x0e4a5608 in put_pixels8_xy2_altivec (
    block=0x5469dff0 "\200\200\200\200\200\200\200\200\200\200\200\200\200\200\200\200" <Address 0x5469e000 out of bounds>, 
    pixels=0x547bef50 "wwwvvurpjjjjjjjj\227\227\227\227\227\227\227\227\227\226\225\224\224\224\224\224\224\224\223\222\220\217\216\215\214\213\212\211\210\207\206\205\205\203\202\201\200\177}{wwww", 'v' <repeats 14 times>, "uuuuuuuttttuuuuuuuuuvwwwwwwwwwutsssssssqonnnnmhiijkknqquuuuuuv}~\177\177\177\177\177\177|}\177\200\202\202\202\201\202\201\200~}||}zzzzzywummmmmmmm" <Address 0x547bf000 out of bounds>, line_size=160, h=8)
    at /var/tmp/libav-0.7.2/libavcodec/ppc/dsputil_altivec.c:743
  7    Thread 0x4b5e1480 (LWP 26550) "xine" 0x0fa894ac in *__GI___poll (fds=0x4b5e0bb0, nfds=1, timeout=1000)
    at ../sysdeps/unix/sysv/linux/poll.c:87
  6    Thread 0x4ade1480 (LWP 26549) "xine" 0x0fa894ac in *__GI___poll (fds=0x4ade0c5c, nfds=1, timeout=333)
    at ../sysdeps/unix/sysv/linux/poll.c:87
  5    Thread 0x4a5e1480 (LWP 26548) "xine" 0x0fa894ac in *__GI___poll (fds=0x4a5e0b18, nfds=1, timeout=-1)
    at ../sysdeps/unix/sysv/linux/poll.c:87
  4    Thread 0x499d6480 (LWP 26547) "xine" 0x0fb487b8 in __pthread_cond_timedwait (cond=0x101c48c8, 
    mutex=0x101c48b0, abstime=0x499d5d08) at pthread_cond_timedwait.c:168
  3    Thread 0x491d6480 (LWP 26546) "xine" 0x0fa91528 in select () at ../sysdeps/unix/syscall-template.S:82
  2    Thread 0x489d6480 (LWP 26545) "xine" 0x0fb481ec in __pthread_cond_wait (cond=0x100e6cc0, 
    mutex=0x100e6ca8) at pthread_cond_wait.c:153
  1    Thread 0x48041080 (LWP 26542) "xine" 0x0fb481ec in __pthread_cond_wait (cond=0x100f95f0, 
    mutex=0x100f9628) at pthread_cond_wait.c:153
(gdb) cont
Continuing.
xiTK received SIGSEGV signal, RIP.

Program received signal SIGABRT, Aborted.
0x0f9e298c in *__GI_raise (sig=6) at ../nptl/sysdeps/unix/sysv/linux/raise.c:64
64      ../nptl/sysdeps/unix/sysv/linux/raise.c: Datei oder Verzeichnis nicht gefunden.
        in ../nptl/sysdeps/unix/sysv/linux/raise.c
(gdb) bt full
#0  0x0f9e298c in *__GI_raise (sig=6) at ../nptl/sysdeps/unix/sysv/linux/raise.c:64
        r4 = <optimized out>
        r7 = <optimized out>
        r12 = <optimized out>
        r5 = 6
        r8 = <optimized out>
        r10 = <optimized out>
        r0 = 250
        r3 = <optimized out>
        r6 = <optimized out>
        r9 = <optimized out>
        r11 = <optimized out>
        sc_ret = <optimized out>
        pid = 0
        selftid = 26551
#1  0x0f9e8040 in *__GI_abort () at abort.c:92
        act = {__sigaction_handler = {sa_handler = 0xed277e0, sa_sigaction = 0xed277e0}, sa_mask = {__val = {
              248674680, 248672736, 248674540, 248674268, 248674272, 248674844, 0, 0, 269369728, 0, 268454540, 
              1208094704, 1208097024, 1289621712, 1208021100, 261821412, 35, 1289621728, 262307024, 0, 
              17104896, 269380684, 26540, 11, 269352960, 1289621776, 1208048688, 570442818, 16, 35, 262307272, 
              0}}, sa_flags = 0, sa_restorer = 0xfa60520 <getppid+8>}
        sigs = {__val = {32, 0 <repeats 31 times>}}
#2  0x10082320 in xitk_signal_handler (sig=11) at xitk.c:326
        cur_pid = 26540
#3  <signal handler called>
No symbol table info available.
#4  0x0e4a5608 in put_pixels8_xy2_altivec (
    block=0x5469dff0 "\200\200\200\200\200\200\200\200\200\200\200\200\200\200\200\200" <Address 0x5469e000 out of bounds>, 
    pixels=0x547bef50 "wwwvvurpjjjjjjjj\227\227\227\227\227\227\227\227\227\226\225\224\224\224\224\224\224\224\223\222\220\217\216\215\214\213\212\211\210\207\206\205\205\203\202\201\200\177}{wwww", 'v' <repeats 14 times>, "uuuuuuuttttuuuuuuuuuvwwwwwwwwwutsssssssqonnnnmhiijkknqquuuuuuv}~\177\177\177\177\177\177|}\177\200\202\202\202\201\202\201\200~}||}zzzzzywummmmmmmm" <Address 0x547bf000 out of bounds>, line_size=160, h=8)
    at /var/tmp/libav-0.7.2/libavcodec/ppc/dsputil_altivec.c:743
        rightside = 0
        i = 7
        pixelsv1 = <error reading variable pixelsv1 (value has been optimized out)>
        pixelsv2 = {14, 74, 84, 240, 14, 74, 84, 132, 0, 0, 0, 0, 0, 0, 0, 0}
        pixelsavg = {14, 74, 84, 240, 14, 74, 84, 132, 0, 0, 0, 0, 0, 0, 0, 0}
        blockv = <error reading variable blockv (value has been optimized out)>
        temp1 = <error reading variable temp1 (value has been optimized out)>
        temp2 = {14, 74, 84, 240, 14, 74, 84, 132, 0, 0, 0, 0, 0, 0, 0, 0}
        pixelssum1 = <error reading variable pixelssum1 (value has been optimized out)>
        pixelssum2 = <error reading variable pixelssum2 (value has been optimized out)>
        temp3 = {3658, 21744, 3658, 21636, 0, 0, 0, 0}
        vczero = <error reading variable vczero (value has been optimized out)>
        vctwo = <error reading variable vctwo (value has been optimized out)>
#5  0x00000000 in ?? ()
No symbol table info available.
(gdb) cont
Continuing.
[Thread 0x5465f480 (LWP 26587) exited]
[Thread 0x53e5f480 (LWP 26561) exited]
[Thread 0x5365f480 (LWP 26559) exited]
[Thread 0x52df0480 (LWP 26558) exited]
[Thread 0x515ef480 (LWP 26557) exited]
[Thread 0x50def480 (LWP 26556) exited]
[Thread 0x4f5ee480 (LWP 26555) exited]
[Thread 0x4edee480 (LWP 26554) exited]
[Thread 0x4e5ee480 (LWP 26553) exited]
[Thread 0x4d9e3480 (LWP 26552) exited]
[Thread 0x4b5e1480 (LWP 26550) exited]
[Thread 0x4ade1480 (LWP 26549) exited]
[Thread 0x4a5e1480 (LWP 26548) exited]
[Thread 0x499d6480 (LWP 26547) exited]
[Thread 0x491d6480 (LWP 26546) exited]
[Thread 0x489d6480 (LWP 26545) exited]
[Thread 0x4cde2480 (LWP 26551) exited]

Program terminated with signal SIGABRT, Aborted.
The program no longer exists.
(gdb) q

Bye, Jörg.
-- 
Es ist besser nichts zu sagen und wie ein Dummkopf zu wirken,
statt den Mund zu öffnen und keinen Zweifel daran zu lassen.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 198 bytes
Desc: Digital signature http://en.wikipedia.org/wiki/OpenPGP
URL: <http://lists.alioth.debian.org/pipermail/pkg-multimedia-maintainers/attachments/20111008/8c97a5c5/attachment.pgp>

More information about the pkg-multimedia-maintainers mailing list