[MPlayer-users] Segfault with -vfm 3 (latest CVS)

[Sven Hartge]

Hi.

I have a very persistent Segfault when using -vfm 3 with _any_ of my
AVIs.

I have uploaded the whole logs inkl. gdb backtrace to 
mplayer-2002-01-17-12-55-segfault.tar.gz

The interesting part follows:

[xv] dcx: 100 dcy: 37 dx: 0 dy: 0 dw: 320 dh: 240
XXX initial  v_pts=0.434  a_pos=13079 (0.467)   5   0%  0%  0.0% 0 0 0%
A:   0.4 V:   0.4 A-V:  0.009 ct:  0.024   12/ 12   0%  0%  0.0% 0 0 0%
Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 1024 (LWP 576)]
CopyMBlockHorVer (Src=0x20302f88 <Address 0x20302f88 out of bounds>, 
    Dst=0x829d6b0 "]_acca_]bbcdeeffpoppooonÃÂÂÂÂÂÂÂ", 'ÿ' <repeats 128 times>, Stride=384)
    at basic_prediction.c:269
269				Dst[dx] = (Src[dx] + Src[dx+1] + 
(gdb) bt
#0  CopyMBlockHorVer (Src=0x20302f88 <Address 0x20302f88 out of bounds>, 
    Dst=0x829d6b0 "]_acca_]bbcdeeffpoppooonÃÂÂÂÂÂÂÂ", 'ÿ' <repeats 128 times>, Stride=384)
    at basic_prediction.c:269
#1  0x080fdabb in recon_comp (
    src=0x82b9ea8 "trnmu\203\210\202\230\230\230\230\230\230\230\230\214\214\214\214\214\214\214\214åçéëéæãàZZZZ[[[[@@BCDEEELLLLLLLLf-Mn>FdC­­­­­­­­€¥Šª®²³Žš©©ªª©©š\001\001\001\001\001\001\001\001", 
    dst=0x829d6a0 "hevr\205{\204z\207\203\177}~\177\201\201]_acca_]bbcdeeffpoppooonÃÂÂÂÂÂÂÂ", 'ÿ' <repeats 128 times>, lx=384, w=16, h=16, x=16, y=0, dx=805905569, dy=2147483647, chroma=0)
    at mp4_recon.c:177
#2  0x080fd839 in odivx_reconstruct (bx=1, by=0, mode=0) at mp4_recon.c:85
#3  0x080fd1db in macroblock () at mp4_mblock.c:123
#4  0x080fbdfc in get_mp4picture (bmp=0x3ebbebd7 <Address 0x3ebbebd7 out of bounds>, 
    render_flag=1) at mp4_picture.c:64
#5  0x080fb078 in decore_frame (
    stream=0x8288d60 "EÏ", 'ÿ' <repeats 12 times>, "àc!I\"\té\b4(Ði\0204*M\006\206\b>à¬2\220_¥×¡\n", length=211, bmp=0x3ebbebd7 <Address 0x3ebbebd7 out of bounds>, render_flag=1) at decore.c:197
#6  0x080faf1a in decore (handle=291, dec_opt=0, param1=0xbfffe31c, param2=0x0) at decore.c:126
#7  0x08058477 in decode_video (video_out=0x8137d40, sh_video=0x826c208, 
    start=0x8288d60 "EÏ", 'ÿ' <repeats 12 times>, "àc!I\"\té\b4(Ði\0204*M\006\206\b>à¬2\220_¥×¡\n", in_size=211, drop_frame=0) at dec_video.c:722
#8  0x080522ca in main (argc=5, argv=0xbffff9e4, envp=0xbffff9fc) at mplayer.c:1505
#9  0x4049665f in __libc_start_main () from /lib/libc.so.6
(gdb) disass $eip-32 $eip+32
Dump of assembler code from 0x80fdfe4 to 0x80fe024:
0x80fdfe4 <CopyMBlockHorVer+8>:	push   %ebx
0x80fdfe5 <CopyMBlockHorVer+9>:	mov    0x8(%ebp),%eax
0x80fdfe8 <CopyMBlockHorVer+12>:	mov    0xc(%ebp),%esi
0x80fdfeb <CopyMBlockHorVer+15>:	mov    0x10(%ebp),%edi
0x80fdfee <CopyMBlockHorVer+18>:	xor    %edx,%edx
0x80fdff0 <CopyMBlockHorVer+20>:	xor    %ebx,%ebx
0x80fdff2 <CopyMBlockHorVer+22>:	lea    (%edi,%eax,1),%ecx
0x80fdff5 <CopyMBlockHorVer+25>:	mov    %ecx,0xfffffffc(%ebp)
0x80fdff8 <CopyMBlockHorVer+28>:	lea    (%edi,%esi,1),%ecx
0x80fdffb <CopyMBlockHorVer+31>:	mov    %ecx,0xfffffff8(%ebp)
0x80fdffe <CopyMBlockHorVer+34>:	inc    %edx
0x80fdfff <CopyMBlockHorVer+35>:	mov    %edx,0xfffffff4(%ebp)
0x80fe002 <CopyMBlockHorVer+38>:	mov    %eax,%ecx
0x80fe004 <CopyMBlockHorVer+40>:	movzbl (%ecx),%eax
0x80fe007 <CopyMBlockHorVer+43>:	movzbl 0x1(%ecx),%edx
0x80fe00b <CopyMBlockHorVer+47>:	add    %edx,%eax
0x80fe00d <CopyMBlockHorVer+49>:	movzbl (%edi,%ecx,1),%edx
0x80fe011 <CopyMBlockHorVer+53>:	add    %edx,%eax
0x80fe013 <CopyMBlockHorVer+55>:	movzbl 0x1(%edi,%ecx,1),%edx
0x80fe018 <CopyMBlockHorVer+60>:	lea    0x2(%edx,%eax,1),%eax
0x80fe01c <CopyMBlockHorVer+64>:	sar    $0x2,%eax
0x80fe01f <CopyMBlockHorVer+67>:	mov    %al,(%ebx,%esi,1)
0x80fe022 <CopyMBlockHorVer+70>:	inc    %ecx
0x80fe023 <CopyMBlockHorVer+71>:	inc    %ebx
End of assembler dump.

I hope you can make anything out of this.

S!

-- 
BOFH excuse #367:

Webmasters kidnapped by evil cult.