[MPlayer-users] bugreport (avi created with RadTools crashes mplayer)

[Michal Seliga]

please see attached file for details. I uploaded complete archive+bugreport to 
ftp.mplayerhq.hu. File is named: 

mplayerbugreport-mplayer_crash_with_radtools_created_avi.bz2

I haven't tried with latest CVS version yet... sorry. (I used Mplayer0.90pre4)



-------------- next part --------------
I attached test file. When you play it with mplayer 0.90pre4 it works with native codes, but
crashes with win dll codec (sigsegv in module decode_video).It works in winow$ media player 6.4

But if you don't play audio (mplayer -ac null test.avi) it works well

The file is encoded with HuffYUV coded and has PCM soundtrack. It was created using RadTools from
.bik file and then I used 'mencoder -ovc copy -oac copy -endpos 1' to make sample as small as possible
(result of -endpos 0.9 works, result of -endpos 1  crashed mplayer). I believe this is problem of RAD
tools, because result is same for AVIzlib and AVImzsh codecs too (except they don't play well with
native codecs at all :-( )


I am afraid that gdb outputs are completely useless  (I compiled with --enable-debug=3)

(gdb) bt
#0  0x10005bbe in ?? ()
Cannot access memory at address 0x96000

(gdb) disass $eip-32 $eip+32
Dump of assembler code from 0x10005b9e to 0x10005bde:
0x10005b9e:     sub    %cl,%ch
0x10005ba0:     add    %ch,0xffffffff(%esi)
0x10005ba3:     cmp    %edi,%esi
0x10005ba5:     jb     0x10005b40
0x10005ba7:     pop    %ebx
0x10005ba8:     pop    %edi
0x10005ba9:     pop    %esi
0x10005baa:     pop    %ebp
0x10005bab:     ret    
0x10005bac:     push   %ebp
0x10005bad:     push   %edi
0x10005bae:     push   %esi
0x10005baf:     push   %ebx
0x10005bb0:     mov    0x14(%esp,1),%esi
0x10005bb4:     mov    0x18(%esp,1),%edi
0x10005bb8:     mov    0x1c(%esp,1),%ebp
0x10005bbc:     mov    (%esi),%eax
0x10005bbe:     mov    %eax,(%edi)
0x10005bc0:     add    $0x4,%edi
0x10005bc3:     mov    $0x20,%eax
0x10005bc8:     lea    0x0(%esp,1),%esp
0x10005bcf:     lea    0x0(%esp,1),%esp
0x10005bd6:     lea    0x0(%esp,1),%esp
0x10005bdd:     lea    0x0(%ecx),%ecx
End of assembler dump.