[Webkit-unassigned] [Bug 225765] New: [GStreamer] Another crash under gst_element_add_pad

Thu May 13 07:05:56 PDT 2021

https://bugs.webkit.org/show_bug.cgi?id=225765

            Bug ID: 225765
           Summary: [GStreamer] Another crash under gst_element_add_pad
           Product: WebKit
           Version: WebKit Nightly Build
          Hardware: PC
                OS: Linux
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: Media
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: mcatanzaro at gnome.org

Reminds me of bug #222763, but this one is different. Visit https://www.warbyparker.com/eyeglasses/lenses in Epiphany Tech Preview with WebKitGTK 2.32.1. You'll see a couple warnings:

** (WebKitWebProcess:1339): WARNING **: 09:03:23.762: Warning: 11, not negotiated. Debug output: ../libs/gst/base/gstbasetransform.c(1423): gst_base_transform_reconfigure (): /GstPipeline:image-decoder-0/GstDecodebin3:decodebin3-0/GstParseBin:parsebin0/GstCapsFilter:capsfilter0:
not negotiated

** (WebKitWebProcess:1339): WARNING **: 09:03:23.763: Error: 1, Internal data stream error.. Debug output: ../gst/isomp4/qtdemux.c(6619): gst_qtdemux_loop (): /GstPipeline:image-decoder-0/GstDecodebin3:decodebin3-0/GstParseBin:parsebin0/GstQTDemux:qtdemux0:
streaming stopped, reason not-negotiated (-4)

Then it will crash:

(gdb) bt
#0  __GI_raise (sig=sig at entry=6) at ../sysdeps/unix/sysv/linux/raise.c:50
#1  0x00007f05e6596855 in __GI_abort () at abort.c:79
#2  0x00007f05e6da0bb1 in  () at /usr/lib/x86_64-linux-gnu/libwebkit2gtk-4.0.so.37
#3  0x00007f05e2170f75 in ffi_call_unix64 () at ../src/x86/unix64.S:101
#4  0x00007f05e2170369 in ffi_call_int
    (cif=<optimized out>, fn=<optimized out>, rvalue=<optimized out>, avalue=<optimized out>, closure=<optimized out>) at ../src/x86/ffi64.c:669
#5  0x00007f05e6230a9c in g_cclosure_marshal_generic () at /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0
#6  0x00007f05e622ffcf in g_closure_invoke () at /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0
#7  0x00007f05e6242ddb in signal_emit_unlocked_R.isra.0 () at /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0
#8  0x00007f05e62498f1 in g_signal_emit_valist () at /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0
#9  0x00007f05e6249a53 in g_signal_emit () at /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0
#10 0x00007f05e35745a0 in gst_element_add_pad (element=element at entry=0x7f040c010030, pad=0x7f040c013600)
    at ../gst/gstelement.c:714
#11 0x00007f052c489433 in reconfigure_output_stream (output=0x7f03f00024d0, slot=0x7f04040591e0)
    at ../gst/playback/gstdecodebin3.c:2254
#12 0x00007f052c489b4f in multiqueue_src_probe
    (pad=pad at entry=0x7f0404012f20, info=info at entry=0x7f03ff7fd950, slot=0x7f04040591e0)
    at ../gst/playback/gstdecodebin3.c:1791
#13 0x00007f05e35902ee in probe_hook_marshal (hook=0x7f04040116c0, data=0x7f03ff7fd820) at ../gst/gstpad.c:3565
#14 0x00007f05e61287f6 in g_hook_list_marshal () at /usr/lib/x86_64-linux-gnu/libglib-2.0.so.0
#15 0x00007f05e358f9d9 in do_probe_callbacks
    (pad=pad at entry=0x7f0404012f20, info=<optimized out>, defaultval=defaultval at entry=GST_FLOW_OK)
    at ../gst/gstpad.c:3728
#16 0x00007f05e35931c5 in gst_pad_push_event_unchecked
    (pad=pad at entry=0x7f0404012f20, event=0x7f040405b870, type=type at entry=GST_PAD_PROBE_TYPE_EVENT_DOWNSTREAM)
    at ../gst/gstpad.c:5376
#17 0x00007f05e3593758 in push_sticky
    (pad=pad at entry=0x7f0404012f20, ev=ev at entry=0x7f03ff7fda30, user_data=user_data at entry=0x7f03ff7fdaa0)
    at ../gst/gstevent.h:438
#18 0x00007f05e35910b0 in events_foreach
    (pad=pad at entry=0x7f0404012f20, func=func at entry=0x7f05e3593700 <push_sticky>, user_data=user_data at entry=0x7f03ff7fdaa0) at ../gst/gstpad.c:608
#19 0x00007f05e359c400 in check_sticky (event=0x7f040405b870, pad=0x7f0404012f20) at ../gst/gstpad.c:3986
#20 gst_pad_push_event (pad=0x7f0404012f20, event=event at entry=0x7f040405b870) at ../gst/gstpad.c:5542
#21 0x00007f052c2c4474 in gst_single_queue_push_one
    (allow_drop=<synthetic pointer>, object=0x7f040405b870, sq=0x7f040405ddb0, mq=0x7f040c018000)
    at ../plugins/elements/gstmultiqueue.c:1688
#22 gst_multi_queue_loop (pad=<optimized out>) at ../plugins/elements/gstmultiqueue.c:1959
#23 0x00007f05e35ca017 in gst_task_func (task=0x7f040002a050) at ../gst/gsttask.c:328
#24 0x00007f05e61643b4 in g_thread_pool_thread_proxy () at /usr/lib/x86_64-linux-gnu/libglib-2.0.so.0
#25 0x00007f05e6163ab1 in g_thread_proxy () at /usr/lib/x86_64-linux-gnu/libglib-2.0.so.0
#26 0x00007f05e28be4d2 in start_thread (arg=<optimized out>) at pthread_create.c:477
#27 0x00007f05e6672323 in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20210513/ac983b50/attachment.htm>