[MPlayer-users] mencoder crashes at decoder.c:383

[Daniel Brahneborg]

Hi,

When encoding an mpeg file to divx, I got a segmentation fault.
I build mplayer from cvs today, using --enable-debug=3.

System info:
RedHat 7.3, updated with KDE 3.1 and GCC 3.2.1.
Kernel 2.4.21, plain.
Libc 2.2.5.
GNU ld version 2.11.93.0.2 20020207
GNU assembler 2.11.93.0.2 20020207

CPU Info:
processor	: 0
vendor_id	: AuthenticAMD
cpu family	: 6
model		: 7
model name	: AMD Duron(tm)
stepping	: 1
cpu MHz		: 1300.072
cache size	: 64 KB
fdiv_bug	: no
hlt_bug		: no
f00f_bug	: no
coma_bug	: no
fpu		: yes
fpu_exception	: yes
cpuid level	: 1
wp		: yes
flags		: fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 mmx fxsr sse syscall mmxext 3dnowext 3dnow
bogomips	: 2595.22

This is the output from gdb, when it has crashed.

Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 1024 (LWP 10419)]
0x080db40b in mpeg2_set_buf (mpeg2dec=0x83ddb50, buf=0x83cae30, id=0x83cae10)
    at decode.c:383
383	    if (mpeg2dec->custom_fbuf && !mpeg2dec->fbuf[1]->buf[0]){
(gdb) bt
#0  0x080db40b in mpeg2_set_buf (mpeg2dec=0x83ddb50, buf=0x83cae30, 
    id=0x83cae10) at decode.c:383
#1  0x0809b5e3 in decode (sh=0x83c2dd0, data=0x83cae30, len=138271568, flags=0)
    at vd_libmpeg2.c:145
#2  0x08096633 in decode_video (sh_video=0x83c2dd0, start=0x83cae10 "", 
    in_size=138194448, drop_frame=0) at dec_video.c:304
#3  0x0806656f in main (argc=138194448, argv=0x83cae10) at mencoder.c:1117
#4  0x42017589 in __libc_start_main () from /lib/i686/libc.so.6
(gdb) disass $pc-32 $pc+32
Dump of assembler code from 0x80db3eb to 0x80db42b:
0x80db3eb <mpeg2_set_buf+59>:	mov    (%esi),%eax
0x80db3ed <mpeg2_set_buf+61>:	test   %ecx,%ecx
0x80db3ef <mpeg2_set_buf+63>:	mov    %eax,(%edx)
0x80db3f1 <mpeg2_set_buf+65>:	mov    0x4(%esi),%eax
0x80db3f4 <mpeg2_set_buf+68>:	mov    %eax,0x4(%edx)
0x80db3f7 <mpeg2_set_buf+71>:	mov    0x8(%esi),%eax
0x80db3fa <mpeg2_set_buf+74>:	mov    %eax,0x8(%edx)
0x80db3fd <mpeg2_set_buf+77>:	mov    0x10(%ebp),%eax
0x80db400 <mpeg2_set_buf+80>:	mov    %eax,0xc(%edx)
0x80db403 <mpeg2_set_buf+83>:	je     0x80db428 <mpeg2_set_buf+120>
0x80db405 <mpeg2_set_buf+85>:	mov    0x398(%ebx),%edx
0x80db40b <mpeg2_set_buf+91>:	mov    (%edx),%eax
0x80db40d <mpeg2_set_buf+93>:	test   %eax,%eax
0x80db40f <mpeg2_set_buf+95>:	jne    0x80db428 <mpeg2_set_buf+120>
0x80db411 <mpeg2_set_buf+97>:	mov    (%esi),%eax
0x80db413 <mpeg2_set_buf+99>:	movl   $0x0,0xc(%edx)
0x80db41a <mpeg2_set_buf+106>:	mov    %eax,(%edx)
0x80db41c <mpeg2_set_buf+108>:	mov    0x4(%esi),%eax
0x80db41f <mpeg2_set_buf+111>:	mov    %eax,0x4(%edx)
0x80db422 <mpeg2_set_buf+114>:	mov    0x8(%esi),%eax
0x80db425 <mpeg2_set_buf+117>:	mov    %eax,0x8(%edx)
0x80db428 <mpeg2_set_buf+120>:	mov    0xfffffff8(%ebp),%ebx
End of assembler dump.
(gdb) info all-registers
eax            0x83cae10	138194448
ecx            0x1	1
edx            0x0	0
ebx            0x83ddb50	138271568
esp            0xbfffdc80	0xbfffdc80
ebp            0xbfffdc98	0xbfffdc98
esi            0x83cae30	138194480
edi            0x83ddb50	138271568
eip            0x80db40b	0x80db40b
eflags         0x10202	66050
cs             0x23	35
ss             0x2b	43
ds             0x2b	43
es             0x2b	43
fs             0x0	0
gs             0x7	7
st0            -nan(0x8080808080808080)	(raw 0xffff8080808080808080)
st1            -nan(0x8080808080808080)	(raw 0xffff8080808080808080)
st2            -0.079999999999999999998373696741271743	(raw 0xbffba3d70a3d70a3d70a)
st3            0.042583964550818718952651664721997804	(raw 0x3ffaae6c85f146d19800)
st4            0.042583964550818718952651664721997804	(raw 0x3ffaae6c85f146d19800)
st5            250000	(raw 0x4010f424000000000000)
st6            0.039999999999999999999186848370635872	(raw 0x3ffaa3d70a3d70a3d70a)
st7            0.0025839645508187189534648163513619323	(raw 0x3ff6a957bb3d62dc0f60)
fctrl          0x37f	895
fstat          0x220	544
ftag           0xffff	65535
fiseg          0x0	0
fioff          0x0	0
foseg          0x0	0
fooff          0x0	0
fop            0x0	0
xmm0           {f = {0x0, 0x0, 0x0, 0x0}}	{f = {-nan(0x7fffff), 
    -nan(0x7fffff), -nan(0x7fffff), -nan(0x7fffff)}}
xmm1           {f = {0x0, 0x0, 0x0, 0x0}}	{f = {-nan(0x7fffff), 
    -nan(0x7fffff), -nan(0x7fffff), -nan(0x7fffff)}}
xmm2           {f = {0x0, 0x0, 0x0, 0x0}}	{f = {-nan(0x7fffff), 
    -nan(0x7fffff), -nan(0x7fffff), -nan(0x7fffff)}}
xmm3           {f = {0x0, 0x0, 0x0, 0x0}}	{f = {-nan(0x7fffff), 
    -nan(0x7fffff), -nan(0x7fffff), -nan(0x7fffff)}}
xmm4           {f = {0x0, 0x0, 0x0, 0x0}}	{f = {-nan(0x7fffff), 
    -nan(0x7fffff), -nan(0x7fffff), -nan(0x7fffff)}}
xmm5           {f = {0x0, 0x0, 0x0, 0x0}}	{f = {-nan(0x7fffff), 
    -nan(0x7fffff), -nan(0x7fffff), -nan(0x7fffff)}}
xmm6           {f = {0x0, 0x0, 0x0, 0x0}}	{f = {-nan(0x7fffff), 
    -nan(0x7fffff), -nan(0x7fffff), -nan(0x7fffff)}}
xmm7           {f = {0x0, 0x0, 0x0, 0x0}}	{f = {-nan(0x7fffff), 
    -nan(0x7fffff), -nan(0x7fffff), -nan(0x7fffff)}}
mxcsr          0x1f80	8064
orig_eax       0xffffffff	-1

/Basic