[Webkit-unassigned] [Bug 201652] New: [GStreamer] Crash in combiner_control_pad (gstplaybin3)

Tue Sep 10 12:38:37 PDT 2019

https://bugs.webkit.org/show_bug.cgi?id=201652

            Bug ID: 201652
           Summary: [GStreamer] Crash in combiner_control_pad
                    (gstplaybin3)
           Product: WebKit
           Version: WebKit Nightly Build
          Hardware: PC
                OS: Linux
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: Media
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: mcatanzaro at gnome.org
                CC: bugs-noreply at webkitgtk.org

Created attachment 378475

  --> https://bugs.webkit.org/attachment.cgi?id=378475&action=review

Backtrace

2.25.92 is crashy when visiting youtube.com:

(gdb) bt
#0  0x00007f29142b3605 in __GI_raise (sig=sig at entry=6) at ../sysdeps/unix/sysv/linux/raise.c:50
#1  0x00007f291429c899 in __GI_abort () at abort.c:79
#2  0x00007f2913395b33 in g_assertion_message
    (domain=<optimized out>, file=<optimized out>, line=<optimized out>, func=0x7f28a47b0e00 <__func__.28560> "combiner_control_pad", message=<optimized out>) at ../glib/gtestutils.c:2912
#3  0x00007f29133f214f in g_assertion_message_expr
    (domain=0x0, file=file at entry=0x7f28a47b000a "../gst/playback/gstplaybin3.c", line=line at entry=2924, func=func at entry=0x7f28a47b0e00 <__func__.28560> "combiner_control_pad", expr=expr at entry=0x7f28a47b03bf "combine->sinkpad != NULL")
    at ../glib/gtestutils.c:2938
#4  0x00007f28a47877bf in combiner_control_pad (srcpad=
    0x7f0fc8006da0 [GstGhostPad], combine=<optimized out>, playbin=0x55cff47e8dd0 [GstPlayBin3])
    at ../gst/playback/gstplaybin3.c:2924
#5  0x00007f28a47877bf in pad_added_cb
    (uridecodebin=<optimized out>, pad=0x7f0fc8006da0 [GstGhostPad], group=0x55cff47e9040)
    at ../gst/playback/gstplaybin3.c:3058
#6  0x00007f2910321b78 in ffi_call_unix64 () at ../src/x86/unix64.S:76
#7  0x00007f2910321374 in ffi_call
    (cif=cif at entry=0x7f0fceffba80, fn=fn at entry=0x7f28a4787160 <pad_added_cb>, rvalue=<optimized out>, avalue=avalue at entry=0x7f0fceffb9d0) at ../src/x86/ffi64.c:525
#12 0x00007f29134d1a03 in <emit signal ??? on instance 0x55cff5378c60 [GstURIDecodeBin3]>
    (instance=instance at entry=0x55cff5378c60, signal_id=<optimized out>, detail=detail at entry=0)
    at ../gobject/gsignal.c:3453
    #8  0x00007f29134b524d in g_cclosure_marshal_generic
    (closure=closure at entry=0x55cff5382a90, return_gvalue=return_gvalue at entry=0x0, n_param_values=n_param_values at entry=2, param_values=param_values at entry=0x7f0fceffbcb0, invocation_hint=invocation_hint at entry=0x7f0fceffbc30, marshal_data=marshal_data at entry=0x0) at ../gobject/gclosure.c:1500
    #9  0x00007f29134b4742 in g_closure_invoke
    (closure=0x55cff5382a90, return_value=0x0, n_param_values=2, param_values=0x7f0fceffbcb0, invocation_hint=0x7f0fceffbc30) at ../gobject/gclosure.c:810
    #10 0x00007f29134c85a4 in signal_emit_unlocked_R
    (node=node at entry=0x55cff506dc70, detail=detail at entry=0, instance=instance at entry=0x55cff5378c60, emission_return=emission_return at entry=0x0, instance_and_params=instance_and_params at entry=0x7f0fceffbcb0) at ../gobject/gsignal.c:3641
    #11 0x00007f29134d1377 in g_signal_emit_valist
    (instance=<optimized out>, signal_id=<optimized out>, detail=<optimized out>, var_args=var_args at entry=0x7f0fceffbe80) at ../gobject/gsignal.c:3397
#13 0x00007f29112dcee0 in gst_element_add_pad
    (element=0x55cff5378c60 [GstURIDecodeBin3], pad=pad at entry=0x7f0fc8006da0 [GstGhostPad])
    at ../gst/gstelement.c:711
#14 0x00007f28a4762ae6 in add_output_pad (target_pad=<optimized out>, dec=0x55cff5378c60 [GstURIDecodeBin3])
    at ../gst/playback/gsturidecodebin3.c:540
#15 0x00007f28a4762ae6 in db_pad_added_cb
    (element=<optimized out>, pad=<optimized out>, dec=0x55cff5378c60 [GstURIDecodeBin3])
    at ../gst/playback/gsturidecodebin3.c:559
#16 0x00007f2910321b78 in ffi_call_unix64 () at ../src/x86/unix64.S:76
#17 0x00007f2910321374 in ffi_call
    (cif=cif at entry=0x7f0fceffc190, fn=fn at entry=0x7f28a47629a0 <db_pad_added_cb>, rvalue=<optimized out>, avalue=avalue at entry=0x7f0fceffc0e0) at ../src/x86/ffi64.c:525
#22 0x00007f29134d1a03 in <emit signal ??? on instance 0x55cff53ba030 [GstDecodebin3]>
    (instance=instance at entry=0x55cff53ba030, signal_id=<optimized out>, detail=detail at entry=0)
    at ../gobject/gsignal.c:3453
    #18 0x00007f29134b524d in g_cclosure_marshal_generic
    (closure=closure at entry=0x55cff5382880, return_gvalue=return_gvalue at entry=0x0, n_param_values=n_param_values at entry=2, param_values=param_values at entry=0x7f0fceffc3c0, invocation_hint=invocation_hint at entry=0x7f0fceffc340, marshal_data=marshal_data at entry=0x0) at ../gobject/gclosure.c:1500
--Type <RET> for more, q to quit, c to continue without paging--c
    #19 0x00007f29134b4742 in g_closure_invoke (closure=0x55cff5382880, return_value=0x0, n_param_values=2, param_values=0x7f0fceffc3c0, invocation_hint=0x7f0fceffc340) at ../gobject/gclosure.c:810
    #20 0x00007f29134c85a4 in signal_emit_unlocked_R (node=node at entry=0x55cff506dc70, detail=detail at entry=0, instance=instance at entry=0x55cff53ba030, emission_return=emission_return at entry=0x0, instance_and_params=instance_and_params at entry=0x7f0fceffc3c0) at ../gobject/gsignal.c:3641
    #21 0x00007f29134d1377 in g_signal_emit_valist (instance=<optimized out>, signal_id=<optimized out>, detail=<optimized out>, var_args=var_args at entry=0x7f0fceffc590) at ../gobject/gsignal.c:3397
#23 0x00007f29112dcee0 in gst_element_add_pad (element=element at entry=0x55cff53ba030 [GstDecodebin3], pad=0x7f0fc8006b20 [GstGhostPad]) at ../gst/gstelement.c:711
#24 0x00007f28a475afcb in reconfigure_output_stream (output=0x7f0fc0002560, slot=0x7f0fd001de80) at ../gst/playback/gstdecodebin3.c:2252
#25 0x00007f28a475b6b5 in multiqueue_src_probe (pad=pad at entry=0x55cff5419430 [GstPad], info=info at entry=0x7f0fceffc960, slot=0x7f0fd001de80) at ../gst/playback/gstdecodebin3.c:1789
#26 0x00007f29112f860e in probe_hook_marshal (hook=0x7f0fd0004900, data=0x7f0fceffc830) at ../gst/gstpad.c:3565
#27 0x00007f29133b9726 in g_hook_list_marshal (hook_list=hook_list at entry=0x55cff54194c8, may_recurse=may_recurse at entry=1, marshaller=marshaller at entry=0x7f29112f8200 <probe_hook_marshal>, data=data at entry=0x7f0fceffc830) at ../glib/ghook.c:672
#28 0x00007f29112f7c9e in do_probe_callbacks (pad=pad at entry=0x55cff5419430 [GstPad], info=<optimized out>, defaultval=defaultval at entry=GST_FLOW_OK) at ../gst/gstpad.c:3727
#29 0x00007f29112fb3a7 in gst_pad_push_event_unchecked (pad=pad at entry=0x55cff5419430 [GstPad], event=0x7f0fd0002a30 [GstEvent], type=type at entry=GST_PAD_PROBE_TYPE_EVENT_DOWNSTREAM) at ../gst/gstpad.c:5375
#30 0x00007f29112fb95a in push_sticky (pad=pad at entry=0x55cff5419430 [GstPad], ev=ev at entry=0x7f0fceffca40, user_data=user_data at entry=0x7f0fceffcab0) at ../gst/gstevent.h:438
#31 0x00007f29112f92d0 in events_foreach (pad=pad at entry=0x55cff5419430 [GstPad], func=func at entry=0x7f29112fb900 <push_sticky>, user_data=user_data at entry=0x7f0fceffcab0) at ../gst/gstpad.c:608
#32 0x00007f29113041c1 in check_sticky (event=0x7f0fd0002a30 [GstEvent], pad=0x55cff5419430 [GstPad]) at ../gst/gstpad.c:3985
#33 0x00007f29113041c1 in gst_pad_push_event (pad=0x55cff5419430 [GstPad], event=event at entry=0x7f0fd0002a30 [GstEvent]) at ../gst/gstpad.c:5541
#34 0x00007f28a45c607d in gst_single_queue_push_one (allow_drop=<synthetic pointer>, object=0x7f0fd0002a30 [GstEvent], sq=0x7f0fd001dee0, mq=0x55cff53bf020 [GstMultiQueue]) at ../plugins/elements/gstmultiqueue.c:1688
#35 0x00007f28a45c607d in gst_multi_queue_loop (pad=<optimized out>) at ../plugins/elements/gstmultiqueue.c:1959
#36 0x00007f29113318e7 in gst_task_func (task=0x55cff541b3b0 [GstTask]) at ../gst/gsttask.c:328
#37 0x00007f29133f3674 in g_thread_pool_thread_proxy (data=<optimized out>) at ../glib/gthreadpool.c:308
#38 0x00007f29133f2f31 in g_thread_proxy (data=0x7f0fc8002ca0) at ../glib/gthread.c:805
#39 0x00007f2910efd5e2 in start_thread (arg=<optimized out>) at pthread_create.c:479
#40 0x00007f2914378413 in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95

Full backtrace attached.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20190910/f1fdee8c/attachment.html>