Bug 436674 – media-libs/gst-plugins-base-0.10.35: www-client/firefox-15.0.1[gstreamer] segfaults playing some videos

• Product: Gentoo Linux
• Status: RESOLVED FIXED

[Description Ilya Gordeev 2012-09-30 16:10:34 UTC]

My firefox-15.0.1 compiled with USE "gstreamer" segfaults playing some youtube videos.

#0  degas_type_find (tf=0x7fffe24ccfd0, private=<optimized out>) at gsttypefindfunctions.c:4026
#1  0x00007fffee522353 in gst_type_find_factory_call_function (factory=<optimized out>, find=0x7fffe24ccfd0) at gsttypefindfactory.c:224
#2  0x00007fffeb4948f4 in gst_type_find_helper_get_range_ext (obj=0x7fffd8c586a0, func=<optimized out>, size=<optimized out>, 
    extension=<optimized out>, prob=0x7fffe24cd0cc) at gsttypefindhelper.c:326
#3  0x00007fffc567a37e in gst_type_find_element_activate (pad=0x7fffe1b88f80) at gsttypefindelement.c:961
#4  0x00007fffee4f9fdf in gst_pad_set_active (pad=0x7fffe1b88f80, active=1) at gstpad.c:708
#5  0x00007fffee4db2fb in activate_pads (pad=0x7fffe1b88f80, ret=0x7fffe24cd1c0, active=<optimized out>) at gstelement.c:2802
#6  0x00007fffee4ec8d6 in gst_iterator_fold (it=0x7fffd9a54430, func=0x7fffee4db2e0 <activate_pads>, ret=0x7fffe24cd1c0, 
    user_data=0x7fffe24cd22c) at gstiterator.c:549
#7  0x00007fffee4db266 in iterator_activate_fold_with_resync (iter=0x7fffd9a54430, func=0x7fffee4db2e0 <activate_pads>, 
    user_data=0x7fffe24cd22c) at gstelement.c:2834
#8  0x00007fffee4dd635 in gst_element_pads_activate (element=0x7fffcd3c4f60, active=1) at gstelement.c:2878
#9  0x00007fffee4dd94b in gst_element_change_state_func (element=0x7fffcd3c4f60, transition=<optimized out>) at gstelement.c:2948
#10 0x00007fffc5678828 in gst_type_find_element_change_state (element=0x7fffcd3c4f60, transition=GST_STATE_CHANGE_READY_TO_PAUSED)
    at gsttypefindelement.c:1031
#11 0x00007fffee4df79c in gst_element_change_state (element=0x7fffcd3c4f60, transition=<optimized out>) at gstelement.c:2718
#12 0x00007fffee4e0140 in gst_element_set_state_func (element=0x7fffcd3c4f60, state=GST_STATE_PAUSED) at gstelement.c:2674
#13 0x00007fffee4cd6d4 in gst_bin_element_set_state (next=GST_STATE_PAUSED, current=GST_STATE_READY, start_time=0, base_time=0, 
    element=0x7fffcd3c4f60, bin=0x7fffc6f9b000) at gstbin.c:2193
#14 gst_bin_change_state_func (element=0x7fffc6f9b000, transition=GST_STATE_CHANGE_READY_TO_PAUSED) at gstbin.c:2489
#15 0x00007fffc5238d53 in gst_decode_bin_change_state (element=0x7fffc6f9b000, transition=GST_STATE_CHANGE_READY_TO_PAUSED)
    at gstdecodebin2.c:3678
#16 0x00007fffee4df79c in gst_element_change_state (element=0x7fffc6f9b000, transition=<optimized out>) at gstelement.c:2718
#17 0x00007fffee4df81f in gst_element_change_state (element=0x7fffc6f9b000, transition=<optimized out>) at gstelement.c:2755
#18 0x00007fffee4e0140 in gst_element_set_state_func (element=0x7fffc6f9b000, state=GST_STATE_PAUSED) at gstelement.c:2674
#19 0x00007fffee4cd6d4 in gst_bin_element_set_state (next=GST_STATE_PAUSED, current=GST_STATE_READY, start_time=0, base_time=0, 
    element=0x7fffc6f9b000, bin=0x7fffc6f9a000) at gstbin.c:2193
#20 gst_bin_change_state_func (element=0x7fffc6f9a000, transition=GST_STATE_CHANGE_READY_TO_PAUSED) at gstbin.c:2489
#21 0x00007fffc523f64a in gst_uri_decode_bin_change_state (element=0x7fffc6f9a000, transition=GST_STATE_CHANGE_READY_TO_PAUSED)
    at gsturidecodebin.c:2395
#22 0x00007fffee4df79c in gst_element_change_state (element=0x7fffc6f9a000, transition=<optimized out>) at gstelement.c:2718
#23 0x00007fffee4e0140 in gst_element_set_state_func (element=0x7fffc6f9a000, state=GST_STATE_PAUSED) at gstelement.c:2674
#24 0x00007fffee4cd6d4 in gst_bin_element_set_state (next=GST_STATE_PAUSED, current=GST_STATE_READY, start_time=0, base_time=0, 
    element=0x7fffc6f9a000, bin=0x7fffc6f84000) at gstbin.c:2193
#25 gst_bin_change_state_func (element=0x7fffc6f84000, transition=GST_STATE_CHANGE_READY_TO_PAUSED) at gstbin.c:2489
#26 0x00007fffee4fdd65 in gst_pipeline_change_state (element=0x7fffc6f84000, transition=GST_STATE_CHANGE_READY_TO_PAUSED)
    at gstpipeline.c:482
#27 0x00007fffc5cd3710 in gst_play_bin_change_state (element=0x7fffc6f84000, transition=GST_STATE_CHANGE_READY_TO_PAUSED)
    at gstplaybin2.c:3695
#28 0x00007fffee4df79c in gst_element_change_state (element=0x7fffc6f84000, transition=<optimized out>) at gstelement.c:2718
#29 0x00007fffee4df81f in gst_element_change_state (element=0x7fffc6f84000, transition=<optimized out>) at gstelement.c:2755
#30 0x00007fffee4e0140 in gst_element_set_state_func (element=0x7fffc6f84000, state=GST_STATE_PAUSED) at gstelement.c:2674
#31 0x00007ffff4e50b35 in ?? () from /usr/lib64/firefox/libxul.so
#32 0x00007ffff4e48501 in ?? () from /usr/lib64/firefox/libxul.so
#33 0x00007ffff4e4ab26 in ?? () from /usr/lib64/firefox/libxul.so
#34 0x00007ffff57d5e91 in ?? () from /usr/lib64/firefox/libxul.so
#35 0x00007ffff53b8ca0 in ?? () from /usr/lib64/firefox/libxul.so
#36 0x00007ffff53adc29 in ?? () from /usr/lib64/firefox/libxul.so
#37 0x00007ffff59aee35 in ?? () from /usr/lib64/firefox/libxul.so
#38 0x00007ffff1801423 in ?? () from /usr/lib64/libnspr4.so
#39 0x00007ffff7bc5d96 in start_thread () from /lib64/libpthread.so.0
#40 0x00007ffff7105a1d in clone () from /lib64/libc.so.6

Debugging this case I made correcting patch (see attachment).
By the way, this fix applied in mainstream RELEASE-0.10.36, RELEASE-0.11.0 and later.

Reproducible: Always

[Comment 1 Ilya Gordeev 2012-09-30 16:11:57 UTC]

Created attachment 325390 [details, diff]
gst-plugins-base-0.10.35-fix-segfault.patch

[Comment 2 Gilles Dartiguelongue (RETIRED) 2013-01-20 12:27:29 UTC]

At this point in time, I think we will just want to stabilize gstreamer-0.10.36 
and co.

[Comment 3 Gilles Dartiguelongue (RETIRED) 2013-02-25 08:19:45 UTC]

gstreamer-0.10.36 and co is now stable. The tree will be purged from older ebuilds soonish. Closing.