[MPlayer-users] Crash in free_demuxer when playing aac files

Thu Jan 10 09:21:08 CET 2008

http://svn.mplayerhq.hu/mplayer/trunk/libmpdemux/demuxer.c?r1=25603&r2=25642

I was able to track down the change that caused the crash to start happening
to the revision linked above.
When I comment the line out it doesn't crash anymore.

Here is debug info before I commented the line out.

 ./mplayer -crash-debug /mnt/DVD_DATA/buffy1/movie1.aac
MPlayer dev-SVN-r25659-4.1.2 (C) 2000-2008 MPlayer Team
CPU: AMD Athlon(tm) 64 Processor 3700+ (Family: 15, Model: 39, Stepping: 1)
CPUflags:  MMX: 1 MMX2: 1 3DNow: 1 3DNow2: 1 SSE: 1 SSE2: 1
Compiled for x86 CPU with extensions: MMX MMX2 3DNow 3DNowEx SSE SSE2

Playing /mnt/DVD_DATA/buffy1/movie1.aac.
libavformat file format detected.
[lavf] Audio stream found, -aid 0
==========================================================================
Opening audio decoder: [faad] AAC (MPEG2/4 Advanced Audio Coding)
AUDIO: 48000 Hz, 2 ch, s16le, 282.4 kbit/18.38% (ratio: 35296->192000)
Selected audio codec: [faad] afm: faad (FAAD AAC (MPEG-2/MPEG-4 Audio)
decoder)
==========================================================================
AO: [alsa] 48000Hz 2ch s16le (2 bytes per sample)
Video: no video
Starting playback...
*** glibc detected *** ./mplayer: free(): invalid pointer: 0x0881a04a ***
======= Backtrace: =========
/lib/libc.so.6[0xb75666e0]
/lib/libc.so.6(cfree+0x89)[0xb75683c9]
./mplayer(free_sh_audio+0x5d)[0x815583d]
./mplayer(free_demuxer+0x5b)[0x815667b]
./mplayer(uninit_player+0xd5)[0x8084ca5]
./mplayer(exit_player_with_rc+0x2e)[0x808521e]
./mplayer(run_command+0x31f)[0x808fe4f]
./mplayer(main+0x1e82)[0x8087ab2]
/lib/libc.so.6(__libc_start_main+0xdc)[0xb75153dc]
./mplayer(vfprintf+0x545)[0x8083101]
======= Memory map: ========
08048000-08669000 r-xp 00000000 08:04 1097336
/home/mcguyver/src/mplayer/mplayer
08669000-0866a000 r--p 00620000 08:04 1097336
/home/mcguyver/src/mplayer/mplayer
0866a000-086b4000 rw-p 00621000 08:04 1097336
/home/mcguyver/src/mplayer/mplayer
086b4000-088a3000 rw-p 086b4000 00:00 0          [heap]
b7200000-b7221000 rw-p b7200000 00:00 0
b7221000-b7300000 ---p b7221000 00:00 0
b7355000-b7375000 rw-s 00000000 00:08 137297924  /SYSV0056a4d6 (deleted)
b7375000-b7385000 rw-s 00000000 00:0e 4782       /dev/snd/pcmC0D0p
b7385000-b738d000 r-xp 00000000 08:03 2968419    /lib/libnss_files-2.7.so
b738d000-b738e000 r--p 00008000 08:03 2968419    /lib/libnss_files-2.7.so
b738e000-b738f000 rw-p 00009000 08:03 2968419    /lib/libnss_files- 2.7.so
b738f000-b7397000 r-xp 00000000 08:03 2968255    /lib/libnss_nis-2.7.so
b7397000-b7398000 r--p 00007000 08:03 2968255    /lib/libnss_nis- 2.7.so
b7398000-b7399000 rw-p 00008000 08:03 2968255    /lib/libnss_nis-2.7.so
b7399000-b73ac000 r-xp 00000000 08:03 2968254    /lib/libnsl-2.7.so
b73ac000-b73ad000 r--p 00012000 08:03 2968254    /lib/libnsl- 2.7.so
b73ad000-b73ae000 rw-p 00013000 08:03 2968254    /lib/libnsl-2.7.so
b73ae000-b73b0000 rw-p b73ae000 00:00 0
b73bf000-b73c0000 rw-s 81000000 00:0e 4782       /dev/snd/pcmC0D0p
b73c0000-b73c1000 r--s 80000000 00:0e 4782       /dev/snd/pcmC0D0p
b73c1000-b73c4000 rw-p b73c1000 00:00 0
b73c4000-b74df000 r-xp 00000000 08:03 2161205    /usr/lib/libxml2.so.2.6.30
b74df000-b74e2000 r--p 0011b000 08:03 2161205    /usr/lib/libxml2.so.2.6.30
b74e2000-b74e4000 rw-p 0011e000 08:03 2161205    /usr/lib/libxml2.so.2.6.30
b74e4000-b74e5000 rw-p b74e4000 00:00 0
b74e5000-b74ed000 r-xp 00000000 08:03 1073390    /usr/lib/libdrm.so.2.3.0
b74ed000-b74ee000 rw-p 00008000 08:03 1073390    /usr/lib/libdrm.so.2.3.0
b74ee000-b74ef000 rw-p b74ee000 00:00 0
b74ef000-b74f3000 r-xp 00000000 08:03 1084337    /usr/lib/libXfixes.so.3.1.0
b74f3000-b74f4000 rw-p 00003000 08:03 1084337    /usr/lib/libXfixes.so.3.1.0
b74f4000-b74f6000 r-xp 00000000 08:03 1085564
/usr/lib/libXdamage.so.1.1.0
b74f6000-b74f7000 rw-p 00001000 08:03 1085564
/usr/lib/libXdamage.so.1.1.0
b74f7000-b74fb000 r-xp 00000000 08:03 1082913    /usr/lib/libXdmcp.so.6.0.0
b74fb000-b74fc000 rw-p 00003000 08:03 1082913    /usr/lib/libXdmcp.so.6.0.0
b74fc000-b74fe000 r-xp 00000000 08:03 1082045    /usr/lib/libXau.so.6.0.0
b74fe000-b74ff000 rw-p 00001000 08:03 1082045    /usr/lib/libXau.so.6.0.0
b74ff000-b762e000 r-xp 00000000 08:03 2967737    /lib/libc- 2.7.so
b762e000-b7630000 r--p 0012f000 08:03 2967737    /lib/libc-2.7.so
b7630000-b7631000 rw-p 00131000 08:03 2967737    /lib/libc-2.7.so
b7631000-b7634000 rw-p b7631000 00:00 0
b7634000-b763e000 r-xp 00000000 08:03 1506783
/usr/lib/gcc/i686-pc-linux-gnu/4.1.2/libgcc_s.so.1
b763e000-b763f000 rw-p 00009000 08:03 1506783
/usr/lib/gcc/i686-pc-linux-gnu/4.1.2/libgcc_s.so.1
b763f000-b7640000 rw-p b763f000 00:00 0
b7640000-b7656000 r-xp 00000000 08:03 936046
/usr/lib/libdvdnavmini.so.4.1.1
b7656000-b7657000 r--p 00015000 08:03 936046
/usr/lib/libdvdnavmini.so.4.1.1
b7657000-b7658000 rw-p 00016000 08:03 936046
/usr/lib/libdvdnavmini.so.4.1.1
b7658000-b767c000 r-xp 00000000 08:03 2968230    /lib/libm-2.7.so
b767c000-b767d000 r--p 00023000 08:03 2968230    /lib/libm-2.7.so
b767d000-b767e000 rw-p 00024000 08:03 2968230    /lib/libm- 2.7.so
b767e000-b7716000 r-xp 00000000 08:03 2972478    /usr/lib/libxvidcore.so.4.1
b771

MPlayer interrupted by signal 6 in module: free_demuxer
- MPlayer crashed. This shouldn't happen.
  It can be a bug in the MPlayer code _or_ in your drivers _or_ in your
  gcc version. If you think it's MPlayer's fault, please read
  DOCS/HTML/en/bugreports.html and follow the instructions there. We can't
and
  won't help unless you provide this information when reporting a possible
bug.
Forking...

[1]+  Stopped                 ./mplayer -crash-debug
/mnt/DVD_DATA/buffy1/movie1.aac