[MPlayer-users] Crash using -demuxer lavf to play mpeg2 ts stream over http://

[Andy Furniss]

Reimar Döffinger wrote:
> On Wed, Jul 31, 2013 at 08:00:29PM +0100, Andy Furniss wrote:
>> I just noticed that using -demuxer lavf causes a crash when trying
>> to play an mpeg2 ts stream over http.
>>
>> The source is a dvb server (tvheadend) on lan.
>>
>> It works fine without -demuxer lavf.
>>
>> -demuxer lavf can play the same ts OK from disk (either recorded by
>> tvh or -dumpstream by mplayer)
>>
>> I have never tested this before, so don't know when it regressed,
>> but I do know it is a regression as my quite old installed mplayer
>> doesn't have the issue (SVN-r35635).
>
> Please try again.

It runs now, but crashes on quit.

*** glibc detected *** /home/andy/Src/Mplayer-svn/mplayer/mplayer: 
double free or corruption (!prev): 0x0000555556971d00 ***

< snip>

Program received signal SIGABRT, Aborted.
0x00007ffff25e2985 in __GI_raise (sig=6) at 
../nptl/sysdeps/unix/sysv/linux/raise.c:64
64      ../nptl/sysdeps/unix/sysv/linux/raise.c: No such file or directory.
(gdb) bt
#0  0x00007ffff25e2985 in __GI_raise (sig=6) at 
../nptl/sysdeps/unix/sysv/linux/raise.c:64
#1  0x00007ffff25e5aab in __GI_abort () at abort.c:91
#2  0x00007ffff261c75e in __libc_message (do_abort=2, fmt=0x7ffff2713218 
"*** glibc detected *** %s: %s: 0x%s ***\n") at 
../sysdeps/unix/sysv/linux/libc_fatal.c:201
#3  0x00007ffff2626716 in malloc_printerr (action=3, str=0x7ffff2713328 
"double free or corruption (!prev)", ptr=<optimized out>) at malloc.c:5007
#4  0x0000555555cf5cac in av_free (ptr=<optimized out>) at 
libavutil/mem.c:210
#5  av_freep (arg=<optimized out>) at libavutil/mem.c:217
#6  0x00005555557da75c in demux_close_lavf (demuxer=0x55555696f2a0) at 
libmpdemux/demux_lavf.c:876
#7  0x0000555555743343 in free_demuxer (demuxer=0x55555696f2a0) at 
libmpdemux/demuxer.c:415
#8  0x00005555556916fd in uninit_player (mask=7883) at mplayer.c:594
#9  0x0000555555691a1f in exit_player_with_rc (how=EXIT_QUIT, rc=0) at 
mplayer.c:702
#10 0x000055555568bcb4 in run_command (mpctx=<optimized out>, 
cmd=0x5555569fe3e0) at command.c:2762
#11 0x0000555555683af1 in main (argc=6, argv=0x7fffffffe4c8) at 
mplayer.c:3943