[MPlayer-users] Some SEGFAULTS with mplayer 0.90rc1

[Emanuele Tatti]

HI all,

i get some reproducible SEGFAULTS with MPlayer 0.90rc1
This is my system:
Slackware 8.1 with kernel 2.4.18
libc 2.2.5
XFree86 Version 4.2.0
gcc version 2.95.3 20010315
GNU ld version 2.12.90.0.9 20020526
||GNU assembler 2.12.90.0.9 20020526
CPU: Pentium II (Klamath) at 267.276
Video: S3 Virge DX
Audio: Sound Blaster 16

I recompiled all with enable-debug and i started gmplayer in gdb.

This is the output if i try to start equalizer after having played a movie:

....
Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 1024 (LWP 7931)]
0x080d41ef in control (vf=0x83f3f88, request=8, data=0xbfffde94) at 
vf_vo.c:74
74              return((video_out->control(VOCTRL_GET_EQUALIZER, 
eq->item, &eq->value) == VO_TRUE) ? CONTROL_TRUE : CONTROL_FALSE);
(gdb) bt
#0  0x080d41ef in control (vf=0x83f3f88, request=8, data=0xbfffde94) at 
vf_vo.c:74
#1  0x080c7e06 in get_video_colors (sh_video=0x848a4c8, item=0x825315c 
"brightness", value=0x82a1db0)
    at dec_video.c:111
#2  0x080bca59 in eqSetBands (channel=1075803472) at mplayer/gtk/eq.c:71
#3  0x4019691c in gtk_signal_remove_emission_hook () from 
/usr/lib/libgtk-1.2.so.0
#4  0x40195d85 in gtk_signal_set_funcs () from /usr/lib/libgtk-1.2.so.0
#5  0x40193e63 in gtk_signal_emit () from /usr/lib/libgtk-1.2.so.0
#6  0x40114278 in gtk_clist_select_row () from /usr/lib/libgtk-1.2.so.0
#7  0x080bccd7 in eqSetChannelNames () at mplayer/gtk/eq.c:105
#8  0x00000001 in ?? ()
Cannot access memory at address 0x1
(gdb) disass $eip-32 $eip+32
Dump of assembler code from 0xffffffe0 to 0x20:
End of assembler dump.

All goes well if i start it before playing.

Then i get a SEGFAULT playing some movies in sequence (usually i get the 
signal 11 when i try to play the third movie)

........
Too old save slot found from lvl 2 : 139002928 !!!
Font /home/emanuele/.mplayer/font/font.desc loaded successfully! (206 chars)

Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 1024 (LWP 7934)]
0x404bfe43 in memcpy (dstpp=0x4000716d, srcpp=0x82a6bb8, len=4) at 
../sysdeps/generic/memcpy.c:61
61      ../sysdeps/generic/memcpy.c: No such file or directory.
        in ../sysdeps/generic/memcpy.c
(gdb) bt
#0  0x404bfe43 in memcpy (dstpp=0x4000716d, srcpp=0x82a6bb8, len=4) at 
../sysdeps/generic/memcpy.c:61
#1  0x08082158 in copy_opt (opt=0x82a37b4, dst=0x4000716d, 
src=0x82a6bb8) at m_option.c:22
#2  0x080815a3 in m_config_push (config=0x83781e0) at m_option.h:199
#3  0x080768da in play_tree_iter_push_params (iter=0x848dd28) at 
playtree.c:453
#4  0x08076ff6 in play_tree_iter_down_step (iter=0x848dd28, d=0, 
with_nodes=0) at playtree.c:726
#5  0x08076cec in play_tree_iter_step (iter=0x848dd28, d=0, 
with_nodes=0) at playtree.c:613
#6  0x0806dc25 in main (argc=1, argv=0xbffff754) at mplayer.c:900
#7  0x4046217d in __libc_start_main (main=0x806d174 <main>, argc=1, 
ubp_av=0xbffff754,
    init=0x8069f4c <_init>, fini=0x821a6e0 <_fini>, rtld_fini=0x4000a534 
<_dl_fini>, stack_end=0xbffff74c)
    at ../sysdeps/generic/libc-start.c:129
(gdb) disass $eip-32 $eip+32
Dump of assembler code from 0x404bfe23 to 0x404bfe63:
0x404bfe23 <memcpy+19>: jbe    0x404bfe40 <memcpy+48>
0x404bfe25 <memcpy+21>: mov    %edx,%ecx
0x404bfe27 <memcpy+23>: neg    %ecx
0x404bfe29 <memcpy+25>: and    $0x3,%ecx
0x404bfe2c <memcpy+28>: sub    %ecx,%eax
0x404bfe2e <memcpy+30>: cld
0x404bfe2f <memcpy+31>: repz movsb %ds:(%esi),%es:(%edi)
0x404bfe31 <memcpy+33>: mov    %eax,%ecx
0x404bfe33 <memcpy+35>: shr    $0x2,%ecx
0x404bfe36 <memcpy+38>: cld
0x404bfe37 <memcpy+39>: repz movsl %ds:(%esi),%es:(%edi)
0x404bfe39 <memcpy+41>: and    $0x3,%eax
0x404bfe3c <memcpy+44>: lea    0x0(%esi,1),%esi
0x404bfe40 <memcpy+48>: mov    %eax,%ecx
0x404bfe42 <memcpy+50>: cld
0x404bfe43 <memcpy+51>: repz movsb %ds:(%esi),%es:(%edi)
0x404bfe45 <memcpy+53>: mov    %edx,%eax
0x404bfe47 <memcpy+55>: pop    %esi
0x404bfe48 <memcpy+56>: pop    %edi
0x404bfe49 <memcpy+57>: mov    %ebp,%esp
0x404bfe4b <memcpy+59>: pop    %ebp
0x404bfe4c <memcpy+60>: ret
0x404bfe4d <Letext>:    lea    0x0(%esi),%esi
0x404bfe50 <Letext+3>:  mov    (%esp,1),%ebx
0x404bfe53 <Letext+6>:  ret
0x404bfe54 <_wordcopy_fwd_aligned>:     push   %ebp
0x404bfe55 <_wordcopy_fwd_aligned+1>:   mov    %esp,%ebp
0x404bfe57 <_wordcopy_fwd_aligned+3>:   push   %edi
0x404bfe58 <_wordcopy_fwd_aligned+4>:   push   %esi
0x404bfe59 <_wordcopy_fwd_aligned+5>:   push   %ebx
0x404bfe5a <_wordcopy_fwd_aligned+6>:   call   0x404bfe50 <Letext+3>
0x404bfe5f <_wordcopy_fwd_aligned+11>:  add    $0xa6ff9,%ebx