[MPlayer-dev-eng] [BUG] memcorrupt? libmpeg2/G1

gabucino at mplayerhq.hu gabucino at mplayerhq.hu
Sat May 24 11:54:42 CEST 2003


I found this MPEG1 file (hainal nemeth videomix.mpg) which

  -vc mpeg12 -vo null	- plays correctly
  -vc mpeg12 -vo !null	- SIG11
  -vc ffmpeg12 -vo ANY	- plays correctly

gdb output follows:


MPlayer dev-CVS-030524-06:46-2.95.3 (C) 2000-2003 Arpad Gereoffy (see DOCS)

CPU: Advanced Micro Devices K6-2 (Family: 5, Stepping: 12)
Detected cache-line size is 32 bytes
CPUflags:  MMX: 1 MMX2: 0 3DNow: 1 3DNow2: 0 SSE: 0 SSE2: 0
Compiled with Runtime CPU Detection - WARNING - this is not optimal!
To get best performance, recompile MPlayer with --disable-runtime-cpudetection
Reading config file /etc/mplayer/mplayer.conf
Reading config file /root/.mplayer/config
Reading /root/.mplayer/codecs.conf: can't open '/root/.mplayer/codecs.conf': No such file or directory
Reading /etc/mplayer/codecs.conf: 57 audio & 145 video codecs
CommandLine: '-v' '/home/gabucino/x/hainal nemeth videomix.mpg'
get_path('font/font.desc') -> '/root/.mplayer/font/font.desc'
font: can't open file: /root/.mplayer/font/font.desc
font: can't open file: /usr/share/mplayer/font/font.desc
init_freetype
Using MMX (with tiny bit 3DNow) Optimized OnScreenDisplay
Using Linux hardware RTC timing (1024Hz).
get_path('input.conf') -> '/root/.mplayer/input.conf'
Can't open input config file /root/.mplayer/input.conf : No such file or directory
Parsing input config file /etc/mplayer/input.conf
Input config file /etc/mplayer/input.conf parsed : 51 binds
get_path('hainal nemeth videomix.mpg.conf') -> '/root/.mplayer/hainal nemeth videomix.mpg.conf'

Playing /home/gabucino/x/hainal nemeth videomix.mpg
Not an URL!
[file] File size is 33779716 bytes
STREAM: [file] /home/gabucino/x/hainal nemeth videomix.mpg
STREAM: Description: File
STREAM: Author: Albeu
STREAM: Comment: based on the code from ??? (probably Arpi)
Checking for YUV4MPEG2
DEMUXER: freeing demuxer at 0x85397b0  
ASF_check: not ASF guid!
DEMUXER: freeing demuxer at 0x85397b0  
Checking for NuppelVideo
DEMUXER: freeing demuxer at 0x85397b0  
Checking for REAL
DEMUXER: freeing demuxer at 0x85397b0  
Checking for SMJPEG
DEMUXER: freeing demuxer at 0x85397b0  
DEMUXER: freeing demuxer at 0x855d860  
Searching demuxer type for filename /home/gabucino/x/hainal nemeth videomix.mpg ext: .mpg
Checking for MOV
DEMUXER: freeing demuxer at 0x855d860  
Checking for VIVO
header block 1 size: 0
DEMUXER: freeing demuxer at 0x855d860  
DEMUXER: freeing demuxer at 0x855d860  
DEMUXER: freeing demuxer at 0x855d860  
DEMUXER: freeing demuxer at 0x855d860  
DEMUXER: freeing demuxer at 0x855d860  
DEMUXER: freeing demuxer at 0x855d860  
Checking for PVA
DEMUXER: freeing demuxer at 0x855d860  
************Checking for TS************
NOT A TS FILE1
TRIED UP TO POSITION 1000000, FOUND da, packet_size= 0
BUF: 47 54 6c 46, PID 5228, SIZE: 0 
PID 5228, COMPARE CC 6 AND LAST_CC -1
BUF: 47 54 6c 46, PID 5228, SIZE: 0 
PID 5228, COMPARE CC 6 AND LAST_CC 6
DEMUXER: freeing demuxer at 0x855d860  
system stream synced at 0xB (0)!
==> Found video stream: 0
MPEG-PS file format detected.
==> Found audio stream: 0
Searching for sequence header... OK!
VIDEO:  MPEG1  360x288  (aspect 12)  29.97 fps    0.0 kbps ( 0.0 kbyte/s)
[V] filefmt:2  fourcc:0x10000001  size:360x288  fps:29.97  ftime:=0.0334
get_path('sub/') -> '/root/.mplayer/sub/'
get_path('default.sub') -> '/root/.mplayer/default.sub'
==========================================================================
Opening audio decoder: [mp3lib] MPEG layer-2, layer-3
dec_audio: Allocating 4608 + 65536 = 70144 bytes for output buffer
mp3lib: made decode tables with MMX optimization
mp3lib: using 3DNow! optimized decore!
MP3lib: init layer2&3 finished, tables done
MPEG 1.0, Layer II, 44100 Hz 192 kbit Stereo, BPF: 627
Channels: 2, copyright: No, original: No, CRC: No, emphasis: 0
AUDIO: 44100 Hz, 2 ch, 16 bit (0x10), ratio: 24000->176400 (192.0 kbit)
Selected audio codec: [mp3] afm:mp3lib (mp3lib MPEG layer-2, layer-3)
==========================================================================
X11 opening display: :0.0
vo: X11 color mask:  FFFFFF  (R:FF0000 G:FF00 B:FF)
vo: X11 running at 800x600 with depth 24 and 32 bpp (":0.0" => local display)
[x11] Unknown wm type...
Opening video filter: [pp]
[vo] query(Planar YV12) -> 3
==========================================================================
Opening video decoder: [mpegpes] MPEG 1/2 Video passthrough
VDec: vo config request - 360 x 288 (preferred csp: Mpeg PES)
[PP] Using external postprocessing filter, max q = 6.
Trying filter chain: pp vo
Could not find matching colorspace - retrying with -vop scale...
Opening video filter: [scale]
SwScale params: -1 x -1 (-1=no scaling)
Trying filter chain: scale pp vo
The selected video_out device is incompatible with this codec.
VDecoder init failed :(
Opening video decoder: [libmpeg2] MPEG 1/2 Video decoder libmpeg2-v0.3.1
Selected video codec: [mpeg12] vfm:libmpeg2 (MPEG 1 or 2 (libmpeg2))
==========================================================================
[PP] Using external postprocessing filter, max q = 6.
AutoQ: setting quality to 6
Checking audio filter chain for 44100Hz/2ch/16bit -> 44100Hz/2ch/16bit...
[libaf] Adding filter dummy 
[dummy] Was reinitialized, rate=44100Hz, nch = 2, format = 0x00000001 and bps = 2
AF_pre: af format: 2 bps, 2 ch, 44100 hz, little endian signed int 
AF_pre: 44100Hz 2ch Signed 16-bit (Little-Endian)
ao2: 44100 Hz  2 chans  Signed 16-bit (Little-Endian)
audio_setup: using '/dev/dsp' dsp device
audio_setup: sample format: Signed 16-bit (Little-Endian) (requested: Signed 16-bit (Little-Endian))
audio_setup: using 2 channels (requested: 2)
audio_setup: using 44100 Hz samplerate (requested: 44100)
audio_setup: frags:  16/16  (4096 bytes/frag)  free:  65536
AO: [oss] 44100Hz 2ch Signed 16-bit (Little-Endian) (2 bps)
AO: Description: OSS/ioctl audio output
AO: Author: A'rpi
Building audio filter chain for 44100Hz/2ch/16bit -> 44100Hz/2ch/16bit...
[dummy] Was reinitialized, rate=44100Hz, nch = 2, format = 0x00000001 and bps = 2
[dummy] Was reinitialized, rate=44100Hz, nch = 2, format = 0x00000001 and bps = 2
Starting playback...
VDec: vo config request - 368 x 288 (preferred csp: Planar YV12)
[PP] Using external postprocessing filter, max q = 6.
Trying filter chain: pp vo
VDec: using Planar YV12 as output csp (no 0)
Movie-Aspect is 1.33:1 - prescaling to correct movie aspect.
VO Config (360x288->384x288,flags=1,'MPlayer',0x32315659)
REQ: flags=0x437  req=0x0  
VO: [xmga] 360x288 => 384x288 Planar YV12  [fs]
VO: Description: Matrox G200/G4x0/G550 overlay in X11 window (using /dev/mga_vid)
VO: Author: Zoltan Ponekker <pontscho at makacs.poliod.hu>
[mga] Using 3 buffers.
[xmga] x: 0 y: 19 w: 384 h: 288
[xmga] dcx: 1 dcy: 1 dx: 0 dy: 0 dw: 384 dh: 288
[xmga-fs] dcx: 1 dcy: 1 dx: 0 dy: 0 dw: 800 dh: 600
*** [pp] Allocating mp_image_t, 360x288x12bpp YUV planar, 155520 bytes
[xmga] x: 0 y: 0 w: 800 h: 600
[xmga] dcx: 1 dcy: 1 dx: 0 dy: 0 dw: 800 dh: 600
[xmga-fs] dcx: 1 dcy: 1 dx: 0 dy: 0 dw: 800 dh: 600
*** [pp] Allocating mp_image_t, 360x288x12bpp YUV planar, 155520 bytes%
*** [pp] Allocating mp_image_t, 360x288x12bpp YUV planar, 155520 bytes%
*** [vo] Allocating mp_image_t, 368x288x12bpp YUV planar, 158976 bytes
get_path('subfont.ttf') -> '/root/.mplayer/subfont.ttf'
Unicode font: 676 glyphs.
[xmga] x: 0 y: 0 w: 800 h: 600
[xmga] dcx: 1 dcy: 1 dx: 0 dy: 0 dw: 800 dh: 600
[xmga-fs] dcx: 1 dcy: 1 dx: 0 dy: 0 dw: 800 dh: 600
A:   0.9 V:   0.3 A-V:  0.576 ct:  0.017    6/  6   0%  0%  0.0% 4 5 0%
Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 1024 (LWP 30386)]
0x405cf9e6 in chunk_free () from /lib/libc.so.6
(gdb) bt
#0  0x405cf9e6 in chunk_free () from /lib/libc.so.6
#1  0x405cf8b3 in free () from /lib/libc.so.6
#2  0x816fb51 in ds_fill_buffer ()
#3  0x7e2 in ?? ()
Cannot access memory at address 0x7e2
(gdb) disass $pc-32 $pc+32
Dump of assembler code from 0x405cf9c6 to 0x405cfa06:
0x405cf9c6 <chunk_free+226>:    inc    %ebp
0x405cf9c7 <chunk_free+227>:    cld    
0x405cf9c8 <chunk_free+228>:    add    $0x8,%eax
0x405cf9cb <chunk_free+231>:    mov    0x8(%edi),%edx
0x405cf9ce <chunk_free+234>:    cmp    %eax,%edx
0x405cf9d0 <chunk_free+236>:    jne    0x405cf9e0 <chunk_free+252>
0x405cf9d2 <chunk_free+238>:    movl   $0x1,0xffffffec(%ebp)
0x405cf9d9 <chunk_free+245>:    jmp    0x405cf9ef <chunk_free+267>
0x405cf9db <chunk_free+247>:    nop    
0x405cf9dc <chunk_free+248>:    lea    0x0(%esi,1),%esi
0x405cf9e0 <chunk_free+252>:    mov    0xc(%edi),%esi
0x405cf9e3 <chunk_free+255>:    mov    %edx,0xffffffe8(%ebp)
0x405cf9e6 <chunk_free+258>:    mov    %esi,0xc(%edx)
0x405cf9e9 <chunk_free+261>:    mov    0xffffffe8(%ebp),%edx
0x405cf9ec <chunk_free+264>:    mov    %edx,0x8(%esi)
0x405cf9ef <chunk_free+267>:    mov    0xfffffff4(%ebp),%ecx
0x405cf9f2 <chunk_free+270>:    mov    0xfffffff0(%ebp),%eax
0x405cf9f5 <chunk_free+273>:    testb  $0x1,0x4(%eax,%ecx,1)
0x405cf9fa <chunk_free+278>:    jne    0x405cfa50 <chunk_free+364>
0x405cf9fc <chunk_free+280>:    add    %eax,0xfffffff8(%ebp)
0x405cf9ff <chunk_free+283>:    mov    0x8(%ecx),%ecx
0x405cfa02 <chunk_free+286>:    cmpl   $0x0,0xffffffec(%ebp)
End of assembler dump.
(gdb) info all-registers
eax            0x40679148       1080529224
ecx            0x40679140       1080529216
edx            0xc02c318        201507608
ebx            0x4067b8ac       1080539308
esp            0xbfffd714       0xbfffd714
ebp            0xbfffd74c       0xbfffd74c
esi            0x32315659       842094169
edi            0x85641d8        139870680
eip            0x405cf9e6       0x405cf9e6
eflags         0x210283 2163331
cs             0x23     35
ss             0x2b     43
ds             0x2b     43
es             0x2b     43
fs             0x0      0
gs             0x0      0
st0            nan      (raw 0xffff0001000100010001)
st1            -NaN(0xffffffffffffffff) (raw 0xffffffffffffffffffff)
st2            -0e+4922 (raw 0xffff0000000000000000)
st3            -NaN(0xfffffff9fffffff9) (raw 0xfffffffffff9fffffff9)
st4            nan      (raw 0xffff0001000100010001)
st5            176400   (raw 0x4010ac44000000000000)
st6            0        (raw 0x00000000000000000000)
st7            0.3801999986171722412109375      (raw 0x3ffdc2a9930000000000)
fctrl          0x37f    895
fstat          0x20     32
ftag           0xffff   65535
fiseg          0x23     35
fioff          0x8168b3b        135695163
foseg          0x2b     43
fooff          0x80dd80c        135125004
fop            0x15c    348

-- 
Gabucino
MPlayer Core Team
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 232 bytes
Desc: not available
URL: <http://lists.mplayerhq.hu/pipermail/mplayer-dev-eng/attachments/20030524/6dbfde38/attachment.pgp>


More information about the MPlayer-dev-eng mailing list