[MPlayer-users] CVS mplayer crashes with one particular file

[The Wanderer]

Much of the system information below is copied directly from the output
of the provided commands.

I'm running Libranet 2.0 Debian (sarge and woody, with unimportant bits
of sid).

uname -a reports:
Linux pegasus 2.4.20 #1 Thu May 22 14:48:37 EDT 2003 i686 GNU/Linux

ls -l /lib/libc[.-]* reports two .so files (plus symlinks), one 2.3.1
and the other 5.4.46.

I'm running XFree86 4.2.1.1, gcc 3.2.3 20030415 (Debian prerelease), and
ld and binutils 2.13.90.0.18 20030121 Debian GNU/Linux.

cat /proc/cpuinfo reports:
processor       : 0
vendor_id       : AuthenticAMD
cpu family      : 6
model           : 8
model name      : AMD Athlon(tm) XP 2200+
stepping        : 0
cpu MHz         : 1800.109
cache size      : 256 KB
fdiv_bug        : no
hlt_bug         : no
f00f_bug        : no
coma_bug        : no
fpu             : yes
fpu_exception   : yes
cpuid level     : 1
wp              : yes
flags           : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge 
mca cmov pat pse36 mmx fxsr sse syscall mmxext 3dnowext 3dnow
bogomips        : 3591.37

I've got a GeForce FX 5200 (not Ultra), 128MB; I've got no idea at this
point who actually put together the board, it's pretty much Brand X,
though I could probably dig a name out if it proves really important.
I'm using the nVidia drivers, version 1.0-4363.

My audio is integrated into my motherboard, using (according to the
motherboard manual) the C-Media CMI8738-MX chipset.

All I was able to copy of the output of gdb and mplayer -v running
inside it follow; my buffer didn't quite go back far enough to get it
all, but I think everything requested is here. I run large terminal
windows; I apologize for any wrapping issues. If necessary I can resend 
without the 72-character line limit.

welcome to change it and/or distribute copies of it under certain 
conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for details.
This GDB was configured as "i386-linux"...
(gdb) run -v F3-ep1.asf
Starting program: /usr/local/bin/mplayer -v F3-ep1.asf
[New Thread 16384 (LWP 30359)]
Using GNU internationalization
Original domain: messages
Original dirname: /usr/share/locale
Current domain: mplayer
Current dirname: /usr/local/share/locale


MPlayer dev-CVS-030701-23:09-3.2.3 (C) 2000-2003 <C1>rp<E1>d Gere<F6>ffy 
(see DOCS)

CPU: Advanced Micro Devices  (Family: 6, Stepping: 0)
Detected cache-line size is 64 bytes
CPUflags:  MMX: 1 MMX2: 1 3DNow: 1 3DNow2: 1 SSE: 1 SSE2: 0
Compiled for x86 CPU with extensions: MMX MMX2 3DNow 3DNowEx SSE

Reading config file /usr/local/etc/mplayer/mplayer.conf: No such file or 
directory
Reading config file /home/wanderer/.mplayer/config
Reading /home/wanderer/.mplayer/codecs.conf: can't open 
'/home/wanderer/.mplayer/codecs.conf': No such file or directory
Reading /usr/local/etc/mplayer/codecs.conf: 60 audio & 149 video codecs
CommandLine: '-v' 'F3-ep1.asf'
get_path('font/font.desc') -> '/home/wanderer/.mplayer/font/font.desc'
font: can't open file: /home/wanderer/.mplayer/font/font.desc
font: can't open file: /usr/local/share/mplayer/font/font.desc
init_freetype
Using MMX (with tiny bit MMX2) Optimized OnScreenDisplay
Failed to open /dev/rtc: Permission denied (mplayer should be setuid 
root or /dev/rtc should be readable by the user.)
Using usleep() timing
get_path('input.conf') -> '/home/wanderer/.mplayer/input.conf'
Can't open input config file /home/wanderer/.mplayer/input.conf : No 
such file or directory
Can't open input config file /usr/local/etc/mplayer/input.conf : No such 
file or directory
Falling back on default (hardcoded) input config
get_path('F3-ep1.asf.conf') -> '/home/wanderer/.mplayer/F3-ep1.asf.conf'

Playing F3-ep1.asf
Not an URL!
[file] File size is 90449175 bytes
STREAM: [file] F3-ep1.asf
STREAM: Description: File
STREAM: Author: Albeu
STREAM: Comment: based on the code from ??? (probably Arpi)
Checking for YUV4MPEG2
DEMUXER: freeing demuxer at 0x84c5470
ASF file format detected.
ASF: packets: 16078  flags: 2  max_packet_size: 5625  min_packet_size: 
5625  max_bitrate: 450000  preroll: 3100
stream type: guid_audio_stream
stream concealment: guid_audio_conceal_none
type: 30 bytes,  stream: 16 bytes  ID: 1
unk1: 0  unk2: 10
FILEPOS=0x102
==> Found audio stream: 1
======= WAVE Format =======
Format Tag: 85 (0x55)
Channels: 2
Samplerate: 24000
avg byte/sec: 7000
Block align: 1
bits/sample: 0
cbSize: 12
mp3.wID=1
mp3.fdwFlags=0x2
mp3.nBlockSize=168
mp3.nFramesPerBlock=1
mp3.nCodecDelay=1393
ASF: audio scrambling: 1 x 1 x 1
stream type: guid_video_stream
stream concealment: unknown guid 0057fb20-555b-cf11-a8fd00805f5c442b
type: 51 bytes,  stream: 0 bytes  ID: 2
unk1: 0  unk2: 10
FILEPOS=0x17E
==> Found video stream: 2
======= VIDEO Format ======
   biSize 40
   biWidth 320
   biHeight 240
   biPlanes 1
   biBitCount 24
   biCompression 859066445='MP43'
   biSizeImage 230400
===========================
Found movie at 0x2B9 - 0x563FF17
ASF: 1 audio and 1 video streams found
Invalid plen type! assuming plen=0
Invalid plen type! assuming plen=0
Invalid plen type! assuming plen=0
Invalid plen type! assuming plen=0
Invalid plen type! assuming plen=0
Invalid plen type! assuming plen=0
Invalid plen type! assuming plen=0
Invalid plen type! assuming plen=0
Invalid plen type! assuming plen=0
Auto-selected ASF video ID = 2
VIDEO:  [MP43]  320x240  24bpp
ASF: Searching for audio stream (id:1).
[V] filefmt:6  fourcc:0x3334504D  size:320x240  fps:1000.00  ftime:=0.0010
get_path('sub/') -> '/home/wanderer/.mplayer/sub/'
get_path('default.sub') -> '/home/wanderer/.mplayer/default.sub'
==========================================================================
Opening audio decoder: [mp3lib] MPEG layer-2, layer-3
dec_audio: Allocating 4608 + 65536 = 70144 bytes for output buffer
mp3lib: made decode tables with MMX optimization
mp3lib: using 3DNow!Ex optimized decore!
MP3lib: init layer2&3 finished, tables done
MPEG 2.0, Layer III, 24000 Hz 56 kbit Joint-Stereo, BPF: 168
Channels: 2, copyright: No, original: Yes, CRC: No, emphasis: 0
AUDIO: 24000 Hz, 2 ch, 16 bit (0x10), ratio: 7000->96000 (56.0 kbit)
Selected audio codec: [mp3] afm:mp3lib (mp3lib MPEG layer-2, layer-3)
==========================================================================
X11 opening display: :0.0
vo: X11 color mask:  FFFFFF  (R:FF0000 G:FF00 B:FF)
vo: X11 running at 1600x1200 with depth 24 and 32 bpp (":0.0" => local 
display)
[x11] Detected wm supports layers.
==========================================================================
Opening video decoder: [ffmpeg] FFmpeg's libavcodec codec family
INFO: libavcodec init OK!
Selected video codec: [ffdivx] vfm:ffmpeg (FFmpeg DivX ;-) (MS MPEG-4 v3))
==========================================================================
Checking audio filter chain for 24000Hz/2ch/16bit -> 24000Hz/2ch/16bit...
[libaf] Adding filter dummy
[dummy] Was reinitialized, rate=24000Hz, nch = 2, format = 0x00000001 
and bps = 2
AF_pre: af format: 2 bps, 2 ch, 24000 hz, little endian signed int
AF_pre: 24000Hz 2ch Signed 16-bit (Little-Endian)
ao2: 24000 Hz  2 chans  Signed 16-bit (Little-Endian)
audio_setup: using '/dev/dsp' dsp device
audio_setup: sample format: Signed 16-bit (Little-Endian) (requested: 
Signed 16-bit (Little-Endian))
audio_setup: using 2 channels (requested: 2)
audio_setup: using 22050 Hz samplerate (requested: 24000)
audio_setup: frags: 128/128  (512 bytes/frag)  free:  65536
AO: [oss] 22050Hz 2ch Signed 16-bit (Little-Endian) (2 bps)
AO: Description: OSS/ioctl audio output
AO: Author: A'rpi
Building audio filter chain for 24000Hz/2ch/16bit -> 22050Hz/2ch/16bit...
[dummy] Was reinitialized, rate=24000Hz, nch = 2, format = 0x00000001 
and bps = 2
[libaf] Adding filter resample
[resample] Changing sample rate to 22050Hz
[resample] Using integer processing and inexact frequecy conversion.
[resample] New filter designed up: 147 down: 160
[dummy] Was reinitialized, rate=24000Hz, nch = 2, format = 0x00000001 
and bps = 2
[resample] Using integer processing and inexact frequecy conversion.
Starting playback...

Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 16384 (LWP 30291)]
III_i_stereo (xr_buf=0x83fcd60, scalefac=0xbfffe56c, gr_info=0xbfffe3f8, 
sfreq=54, ms_stereo=2, lsf=8) at layer3.c:1032
1032                   t1  = tab1[is_p]; t2 = tab2[is_p];
(gdb) bt
#0  III_i_stereo (xr_buf=0x83fcd60, scalefac=0xbfffe56c, 
gr_info=0xbfffe3f8, sfreq=54, ms_stereo=2, lsf=8) at layer3.c:1032
#1  0x08137c52 in do_layer3 (fr=0x83fff80, single=-1) at layer3.c:1294
#2  0x08137f5b in MP3_DecodeFrame (hova=0x36 <Address 0x36 out of 
bounds>, single=-1) at sr1.c:518
#3  0x080f5fd5 in decode_audio (sh_audio=0x84c7410, buf=0x85be948 "", 
minlen=-1, maxlen=65536) at dec_audio.c:410
#4  0x080a5f80 in main (argc=3, argv=0xbffffa34) at mplayer.c:1915
(gdb) disass $pc-32 $pc+32
Dump of assembler code from 0x8135a2b to 0x8135a6b:
0x8135a2b <III_i_stereo+395>:   stc
0x8135a2c <III_i_stereo+396>:   pop    %es
0x8135a2d <III_i_stereo+397>:   je     0x8135a83 <III_i_stereo+483>
0x8135a2f <III_i_stereo+399>:   mov    0xfffffff0(%ebp),%eax
0x8135a32 <III_i_stereo+402>:   mov    0xfffffff0(%ebp),%edi
0x8135a35 <III_i_stereo+405>:   mov    0xec(%eax,%ebx,4),%edx
0x8135a3c <III_i_stereo+412>:   mov    0xffffffe4(%ebp),%eax
0x8135a3f <III_i_stereo+415>:   add    0xb4(%edi,%ebx,4),%eax
0x8135a46 <III_i_stereo+422>:   mov    0xffffffec(%ebp),%edi
0x8135a49 <III_i_stereo+425>:   test   %edx,%edx
0x8135a4b <III_i_stereo+427>:   flds   (%edi,%ecx,4)
0x8135a4e <III_i_stereo+430>:   mov    0xffffffe8(%ebp),%edi
0x8135a51 <III_i_stereo+433>:   flds   (%edi,%ecx,4)
0x8135a54 <III_i_stereo+436>:   jle    0x8135b75 <III_i_stereo+725>
0x8135a5a <III_i_stereo+442>:   lea    0x0(%esi),%esi
0x8135a60 <III_i_stereo+448>:   flds   (%esi,%eax,4)
0x8135a63 <III_i_stereo+451>:   dec    %edx
0x8135a64 <III_i_stereo+452>:   fld    %st(0)
0x8135a66 <III_i_stereo+454>:   fmul   %st(2),%st
0x8135a68 <III_i_stereo+456>:   fxch   %st(1)
0x8135a6a <III_i_stereo+458>:   fmul   %st(3),%st
End of assembler dump.
(gdb) info all-registers
eax            0x36     54
ecx            0xf      15
edx            0x8      8
ebx            0x4      4
esp            0xbfffe294       0xbfffe294
ebp            0xbfffe2c8       0xbfffe2c8
esi            0x83fcd60        138399072
edi            0xf      15
eip            0x8135a4b        0x8135a4b
eflags         0x10202  66050
cs             0x23     35
ss             0x2b     43
ds             0x2b     43
es             0x2b     43
fs             0x0      0
gs             0x14d7   5335
st0            -nan(0x3c0918b10ef6530b) (raw 0xffff3c0918b10ef6530b)
st1            -nan(0x1ad264beff6d99cc) (raw 0xffff1ad264beff6d99cc)
st2            -nan(0x36864705f6ffa8da) (raw 0xffff36864705f6ffa8da)
st3            -nan(0x22c5c3ffffd3b710) (raw 0xffff22c5c3ffffd3b710)
st4            -nan(0xffff876559a3efa2) (raw 0xffffffff876559a3efa2)
st5            0        (raw 0x00000000000000000000)
st6            0        (raw 0x00000000000000000000)
st7            0        (raw 0x00000000000000000000)
fctrl          0x37f    895
fstat          0x20     32
ftag           0xffff   65535
fiseg          0x0      0
fioff          0x0      0
foseg          0x0      0
fooff          0x0      0
fop            0x0      0
xmm0           {v4_float = {0x0, 0x0, 0x0, 0x0}, v2_double = 
{0x8000000000000000, 0x8000000000000000}, v16_int8 = {0xff <repeats 16 
times>}, v8_int16 = {0xffff, 0xffff, 0xffff, 0xffff, 0xffff, 0xffff, 
0xffff, 0xffff}, v4_int32 = {0xffffffff,
     0xffffffff, 0xffffffff, 0xffffffff}, v2_int64 = 
{0xffffffffffffffff, 0xffffffffffffffff}, uint128 = 
0xffffffffffffffffffffffffffffffff}
xmm1           {v4_float = {0x0, 0x0, 0x0, 0x0}, v2_double = 
{0x8000000000000000, 0x8000000000000000}, v16_int8 = {0xff <repeats 16 
times>}, v8_int16 = {0xffff, 0xffff, 0xffff, 0xffff, 0xffff, 0xffff, 
0xffff, 0xffff}, v4_int32 = {0xffffffff,
     0xffffffff, 0xffffffff, 0xffffffff}, v2_int64 = 
{0xffffffffffffffff, 0xffffffffffffffff}, uint128 = 
0xffffffffffffffffffffffffffffffff}
xmm2           {v4_float = {0x0, 0x0, 0x0, 0x0}, v2_double = 
{0x8000000000000000, 0x8000000000000000}, v16_int8 = {0xff <repeats 16 
times>}, v8_int16 = {0xffff, 0xffff, 0xffff, 0xffff, 0xffff, 0xffff, 
0xffff, 0xffff}, v4_int32 = {0xffffffff,
     0xffffffff, 0xffffffff, 0xffffffff}, v2_int64 = 
{0xffffffffffffffff, 0xffffffffffffffff}, uint128 = 
0xffffffffffffffffffffffffffffffff}
xmm3           {v4_float = {0x0, 0x0, 0x0, 0x0}, v2_double = 
{0x8000000000000000, 0x8000000000000000}, v16_int8 = {0xff <repeats 16 
times>}, v8_int16 = {0xffff, 0xffff, 0xffff, 0xffff, 0xffff, 0xffff, 
0xffff, 0xffff}, v4_int32 = {0xffffffff,
     0xffffffff, 0xffffffff, 0xffffffff}, v2_int64 = 
{0xffffffffffffffff, 0xffffffffffffffff}, uint128 = 
0xffffffffffffffffffffffffffffffff}
xmm4           {v4_float = {0x0, 0x0, 0x0, 0x0}, v2_double = 
{0x8000000000000000, 0x8000000000000000}, v16_int8 = {0xff <repeats 16 
times>}, v8_int16 = {0xffff, 0xffff, 0xffff, 0xffff, 0xffff, 0xffff, 
0xffff, 0xffff}, v4_int32 = {0xffffffff,
     0xffffffff, 0xffffffff, 0xffffffff}, v2_int64 = 
{0xffffffffffffffff, 0xffffffffffffffff}, uint128 = 
0xffffffffffffffffffffffffffffffff}
xmm5           {v4_float = {0x0, 0x0, 0x0, 0x0}, v2_double = 
{0x8000000000000000, 0x8000000000000000}, v16_int8 = {0xff <repeats 16 
times>}, v8_int16 = {0xffff, 0xffff, 0xffff, 0xffff, 0xffff, 0xffff, 
0xffff, 0xffff}, v4_int32 = {0xffffffff,
     0xffffffff, 0xffffffff, 0xffffffff}, v2_int64 = 
{0xffffffffffffffff, 0xffffffffffffffff}, uint128 = 
0xffffffffffffffffffffffffffffffff}
xmm6           {v4_float = {0x0, 0x0, 0x0, 0x0}, v2_double = 
{0x8000000000000000, 0x8000000000000000}, v16_int8 = {0xff <repeats 16 
times>}, v8_int16 = {0xffff, 0xffff, 0xffff, 0xffff, 0xffff, 0xffff, 
0xffff, 0xffff}, v4_int32 = {0xffffffff,
     0xffffffff, 0xffffffff, 0xffffffff}, v2_int64 = 
{0xffffffffffffffff, 0xffffffffffffffff}, uint128 = 
0xffffffffffffffffffffffffffffffff}
xmm7           {v4_float = {0x0, 0x0, 0x0, 0x0}, v2_double = 
{0x8000000000000000, 0x8000000000000000}, v16_int8 = {0xff <repeats 16 
times>}, v8_int16 = {0xffff, 0xffff, 0xffff, 0xffff, 0xffff, 0xffff, 
0xffff, 0xffff}, v4_int32 = {0xffffffff,
     0xffffffff, 0xffffffff, 0xffffffff}, v2_int64 = 
{0xffffffffffffffff, 0xffffffffffffffff}, uint128 = 
0xffffffffffffffffffffffffffffffff}
mxcsr          0x1f80   8064
orig_eax       0xffffffff       -1
mm0            {uint64 = 0x3c0918b10ef6530b, v2_int32 = {0xef6530b, 
0x3c0918b1}, v4_int16 = {0x530b, 0xef6, 0x18b1, 0x3c09}, v8_int8 = {0xb, 
0x53, 0xf6, 0xe, 0xb1, 0x18, 0x9, 0x3c}}
mm1            {uint64 = 0x1ad264beff6d99cc, v2_int32 = {0xff6d99cc, 
0x1ad264be}, v4_int16 = {0x99cc, 0xff6d, 0x64be, 0x1ad2}, v8_int8 = 
{0xcc, 0x99, 0x6d, 0xff, 0xbe, 0x64, 0xd2, 0x1a}}
mm2            {uint64 = 0x36864705f6ffa8da, v2_int32 = {0xf6ffa8da, 
0x36864705}, v4_int16 = {0xa8da, 0xf6ff, 0x4705, 0x3686}, v8_int8 = 
{0xda, 0xa8, 0xff, 0xf6, 0x5, 0x47, 0x86, 0x36}}
mm3            {uint64 = 0x22c5c3ffffd3b710, v2_int32 = {0xffd3b710, 
0x22c5c3ff}, v4_int16 = {0xb710, 0xffd3, 0xc3ff, 0x22c5}, v8_int8 = 
{0x10, 0xb7, 0xd3, 0xff, 0xff, 0xc3, 0xc5, 0x22}}
mm4            {uint64 = 0xffff876559a3efa2, v2_int32 = {0x59a3efa2, 
0xffff8765}, v4_int16 = {0xefa2, 0x59a3, 0x8765, 0xffff}, v8_int8 = 
{0xa2, 0xef, 0xa3, 0x59, 0x65, 0x87, 0xff, 0xff}}
mm5            {uint64 = 0x0, v2_int32 = {0x0, 0x0}, v4_int16 = {0x0, 
0x0, 0x0, 0x0}, v8_int8 = {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}
mm6            {uint64 = 0x0, v2_int32 = {0x0, 0x0}, v4_int16 = {0x0, 
0x0, 0x0, 0x0}, v8_int8 = {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}
mm7            {uint64 = 0x0, v2_int32 = {0x0, 0x0}, v4_int16 = {0x0, 
0x0, 0x0, 0x0}, v8_int8 = {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}