[MPlayer-users] MPlayer crash report

Nicolás Lichtmaier nick at technisys.com.ar
Sun Jun 30 02:13:02 CEST 2002


Hi just wanted to report a crash while playing a .rm file:

Program received signal SIGSEGV, Segmentation fault.
0x08146f6d in generate_index (demuxer=0x83429e8) at demux_real.c:320
320        priv->index_table[stream_id][i].timestamp = timestamp;

(gdb) p priv->index_table[stream_id][i]
Cannot access memory at address 0x3379f2b4
(gdb) info locals
s = (stream_t *) 0x833d768
len = -4611716993731294896
priv = (real_priv_t *) 0x833c890
origpos = 469
data_pos = -10
num_of_packets = 58356
i = 11588
len = 40000
stream_id = 9670
timestamp = -1800265213
tab_pos = 11588
(gdb) bt
#0  0x08146f6d in generate_index (demuxer=0x83429e8) at demux_real.c:320
#1  0x0814b8c5 in demux_open_real (demuxer=0x83429e8) at demux_real.c:1100
#2  0x0814196c in demux_open_stream (stream=0x833d768, file_format=11,
    audio_id=-1, video_id=-1, dvdsub_id=-1) at demuxer.c:869
#3  0x08141cb2 in demux_open (vs=0x833d768, file_format=0, audio_id=-1,
    video_id=-1, dvdsub_id=-1) at demuxer.c:974
#4  0x0807df2e in main (argc=5, argv=0xbffff954, envp=0xbffff96c)
    at mplayer.c:1097
#5  0x404ae65f in __libc_start_main () from /lib/libc.so.6
(gdb) p *s
$4 = {fd = 7, type = 0, buf_pos = 1354, buf_len = 2048, pos = 5847040,
  start_pos = 0, end_pos = 29469557, eof = 0, cache_pid = 0, cache_data 
= 0x0,
  priv = 0x0,
  buffer = 
"VÏÛSøÝ¡uwò1¤H\035,7t9ÝWü°Cë1ÊWö\022ÊîeÉ`ñù¨dIúÁ\037Ñ}׺¬L6\216í®#GE\213]e0$6vóߧ2ª$Å\025C?¡«ç\032=\212û\225-Ür\t&$Ï^Ï+z(þ½ 
üã~5ɸ\eÍ3\bKN±7\016:\237)¼ïZÒ\225w5\232¦óÂUûKR;Ø·\211â¸_aH+Å8&Ë\217¢áuðì\034¨>ÜÜKÀ\fQÇÞ\221ö]\226Ä\b|ãR·,#\037½xh}q\eª\021ôÅÔ\202>¿é¶ÒÏ×\003\233\205ßP\225\220¸\""..., 

  streaming_ctrl = 0x0}
(gdb) p *priv
$5 = {index_chunk_offset = 29453865, index_table = {0x4069d008, 0x407ba008,
    0x408d7008, 0x409f4008, 0x40b11008, 0x40c2e008, 0x40d4b008, 0x40e68008,
    0x40f85008, 0x410a2008, 0x411bf008, 0x412dc008, 0x413f9008, 0x41516008,
    0x41633008, 0x41750008, 0x4186d008, 0x4198a008, 0x41aa7008, 0x41bc4008,
    0x41ce1008, 0x41dfe008, 0x41f1b008, 0x42038008, 0x42155008, 0x42272008,
    0x4238f008, 0x424ac008, 0x425c9008, 0x426e6008, 0x42803008, 
0x42920008},
  index_table_size = {58356 <repeats 32 times>}, data_chunk_offset = 461,
  num_of_packets = 58356, current_packet = 0, current_apacket = 0,
  current_vpacket = 0, kf_pts = 0, a_pts = 0, v_pts = 0, last_a_stream = 1,
  a_streams = {0 <repeats 32 times>}, last_v_stream = 1, v_streams = {1,
    0 <repeats 31 times>}}

I've ran it with "-v" and crashed again, this was the output:
MPlayer CVS-020629-19:59-2.95.4 (C) 2000-2002 Arpad Gereoffy (see DOCS!)

CPU: Intel Celeron Covington/Pentium II Deschutes,Tonga/Pentium II Xeon 
(Family: 6, Stepping: 2)
CPUflags:  MMX: 1 MMX2: 0 3DNow: 0 3DNow2: 0 SSE: 0 SSE2: 0
Compiled for x86 CPU with extensions: MMX

/home/nick/.mplayer/config(4): option: vfm
/home/nick/.mplayer/config(4): parameter: 5
Reading /home/nick/.mplayer/codecs.conf: 36 audio & 101 video codecs
CommandLine: '-v' '-forceidx' '-xy' '2' '/cdrom/Maison Ikkoku - 02.rm'
get_path('font/font.desc') -> '/home/nick/.mplayer/font/font.desc'
Font /home/nick/.mplayer/font/font.desc loaded successfully! (206 chars)
Using MMX Optimized OnScreenDisplay
Linux RTC init error in ioctl (rtc_pie_on): Permission denied
Using usleep() timing
get_path('input.conf') -> '/home/nick/.mplayer/input.conf'
Can't open input config file /home/nick/.mplayer/input.conf : No such 
file or directory
Can't open input config file /etc/mplayer/input.conf : No such file or 
directoryFalling back on default (hardcoded) input config

Playing /cdrom/Maison Ikkoku - 02.rm
Not an URL!
File size is 29469557 bytes
Checking for YUV4MPEG2
DEMUXER: freeing demuxer at 0x83429e8 
ASF_check: not ASF guid!
DEMUXER: freeing demuxer at 0x83429e8 
Checking for NuppelVideo
DEMUXER: freeing demuxer at 0x83429e8 
Checking for MOV
DEMUXER: freeing demuxer at 0x83429e8 
Checking for VIVO
header block 1 size: 82
DEMUXER: freeing demuxer at 0x83429e8 
Checking for REAL
Detected REAL file format!
real: File version: 0
Chunk: PROP (504f5250) (size: 0x32, offset: 0x12)
First index chunk offset: 0x1c16e29
First data chunk offset: 0x1cd
Flags (b): [save allowed] [perfect play (more buffers)]
Chunk: MDPR (5250444d) (size: 0xa4, offset: 0x44)
Found new stream (id: 0)
skip_str: 12 bytes skipped
skip_str: 20 bytes skipped
==> Found audio stream: 0
Found audio stream!
version: 5
 00 00
 2E 72 61 35
 00 00 00 00
 00 05
 00 00 00 46
 00 00 02 2E
 00 5E 45 80
 00 03 AA B7
 00 03 AA B7
frame_size: 558
sub_packet_size: 93
 00 00
 00 00 56 22 00 00
 00 00
samplerate: 22050, channels: 1
 67 65 6E 72
Audio: Real's GeneralCooker (?) (RealAudio G2?) (unsupported)
======= WAVE Format =======
Format Tag: 28515 (0x6F63)
Channels: 1
Samplerate: 22050
avg byte/sec: 32115
Block align: 558
bits/sample: 16
cbSize: 30
Unknown extra header dump: [5d] [0] [10] [0] [7] [0] [1] [7] [0] [0] [0] 
[0] [0] [8] [1] [0] [0] [2] [2] [0] [0] [18] [4d] [44] [50] [52] [0] [0] 
[0] [70]
### skipping -8 bytes of codec info
Chunk: MDPR (5250444d) (size: 0x70, offset: 0xe8)
Found new stream (id: 1)
skip_str: 12 bytes skipped
skip_str: 20 bytes skipped
==> Found video stream: 1
video: VIDO (4f444956)
video fourcc: RV20 (30325652)
H.263 ID: 20100001
### skipping 0 bytes of codec info
Chunk: CONT (544e4f43) (size: 0x6b, offset: 0x158)
Chunk: DATA (41544144) (size: 0x1c16c66, offset: 0x1c3)
Packets in file: 58356
Generating index table from raw data (pos: 0x1c3) for 58356 packets

Program received signal SIGSEGV, Segmentation fault.


This is the disassembled section around EIP:

0x8146f50 <generate_index+1888>:    mov    $0xffffff00,%esi
0x8146f55 <generate_index+1893>:    mov    0xffffffdc(%ebp),%edi
0x8146f58 <generate_index+1896>:    mov    0xffffffc0(%ebp),%edx
0x8146f5b <generate_index+1899>:    mov    0xffffffbc(%ebp),%ecx
0x8146f5e <generate_index+1902>:    mov    %edi,0xffffffec(%ebp)
0x8146f61 <generate_index+1905>:    lea    (%edi,%edi,4),%ebx
0x8146f64 <generate_index+1908>:    mov    0xffffffe0(%ebp),%edi
0x8146f67 <generate_index+1911>:    shl    $0x2,%ebx
0x8146f6a <generate_index+1914>:    mov    (%ecx,%edx,1),%eax
0x8146f6d <generate_index+1917>:    mov    %edi,(%eax,%ebx,1)    <---- crash
0x8146f70 <generate_index+1920>:    mov    0x8(%ebp),%eax
0x8146f73 <generate_index+1923>:    mov    0x18(%eax),%ecx
0x8146f76 <generate_index+1926>:    mov    0xffffffbc(%ebp),%edi
0x8146f79 <generate_index+1929>:    mov    0x10(%ecx),%eax
0x8146f7c <generate_index+1932>:    mov    0x14(%ecx),%edx
0x8146f7f <generate_index+1935>:    add    0x8(%ecx),%eax
0x8146f82 <generate_index+1938>:    adc    $0x0,%edx
0x8146f85 <generate_index+1941>:    sub    0xc(%ecx),%eax
0x8146f88 <generate_index+1944>:    sbb    $0x0,%edx
0x8146f8b <generate_index+1947>:    mov    0xffffffc0(%ebp),%ecx
0x8146f8e <generate_index+1950>:    mov    (%edi,%ecx,1),%ecx
0x8146f91 <generate_index+1953>:    add    $0xfffffff4,%eax
0x8146f94 <generate_index+1956>:    mov    %eax,0x4(%ecx,%ebx,1)
0x8146f98 <generate_index+1960>:    mov    0xffffffc0(%ebp),%edx
0x8146f9b <generate_index+1963>:    mov    0xffffffe8(%ebp),%ecx
0x8146f9e <generate_index+1966>:    mov    (%edi,%edx,1),%eax
0x8146fa1 <generate_index+1969>:    mov    %ecx,0xc(%eax,%ebx,1)
0x8146fa5 <generate_index+1973>:    mov    (%edi,%edx,1),%eax
0x8146fa8 <generate_index+1976>:    movl   $0x0,0x8(%eax,%ebx,1)
0x8146fb0 <generate_index+1984>:    mov    (%edi,%edx,1),%eax
0x8146fb3 <generate_index+1987>:    mov    %esi,0x10(%eax,%ebx,1)
0x8146fb7 <generate_index+1991>:    mov    0xffffffec(%ebp),%edi
0x8146fba <generate_index+1994>:    mov    0xffffffc4(%ebp),%eax
0x8146fbd <generate_index+1997>:    mov    0x8(%ebp),%ecx
0x8146fc0 <generate_index+2000>:    mov    %eax,0xffffffb0(%ebp)

And these are the registers:
eax            0x33766964    863398244
ecx            0x9718    38680
edx            0x833c894    137611412
ebx            0x38950    231760
esp            0xbfffe3c4    0xbfffe3c4
ebp            0xbfffe42c    0xbfffe42c
esi            0xfc    252
edi            0x94b22203    -1800265213
eip            0x8146f6d    0x8146f6d
eflags         0x210206    2163206
cs             0x23    35
ss             0x2b    43
ds             0x2b    43
es             0x2b    43
fs             0x0    0
gs             0x0    0

Thanks.

PS: I'm not subscribed to this list.






More information about the MPlayer-users mailing list