[MPlayer-users] crash in filter_video with lavdopts=threads=2

[William Brana]

I have got some output from valgrind. Other applications don't crash.
Mesa is latest (10.6.1).

==470443== Invalid read of size 4
==470443==    at 0x25C83B: mp_path_join (in /usr/bin/mplayer)
==470443==    by 0x33D617: load_vob_subtitle (in /usr/bin/mplayer)
==470443==    by 0x206A0F: main (in /usr/bin/mplayer)
==470443==  Address 0x12467de4 is 20 bytes inside a block of size 23 alloc'd
==470443==    at 0x4C2B0DF: malloc (in
/usr/lib64/valgrind/vgpreload_memcheck-amd64-linux.so)
==470443==    by 0x25C814: mp_path_join (in /usr/bin/mplayer)
==470443==    by 0x33D617: load_vob_subtitle (in /usr/bin/mplayer)
==470443==    by 0x206A0F: main (in /usr/bin/mplayer)
==470443==

many like these:
==470443== Invalid write of size 4
==470443==    at 0x153D02AB: brw_emit_pipe_control_flush (in
/usr/lib64/mesa/i965_dri.so)
==470443==    by 0x153D0993: intel_emit_post_sync_nonzero_flush (in
/usr/lib64/mesa/i965_dri.so)
==470443==    by 0x153867C7: brw_init_state (in /usr/lib64/mesa/i965_dri.so)
==470443==    by 0x152F9469: brwCreateContext (in /usr/lib64/mesa/i965_dri.so)
==470443==    by 0x152DDFA4: driCreateContextAttribs (in
/usr/lib64/mesa/i965_dri.so)
==470443==    by 0x152DE0A5: driCreateNewContext (in
/usr/lib64/mesa/i965_dri.so)
==470443==    by 0xA52AF39: dri2_create_context (in /usr/lib64/libGL.so.1.2.0)
==470443==    by 0xA4F7C0E: CreateContext (in /usr/lib64/libGL.so.1.2.0)
==470443==    by 0xA4F7F63: glXCreateContext (in /usr/lib64/libGL.so.1.2.0)
==470443==    by 0x2288AE: setGlWindow_x11 (in /usr/bin/mplayer)
==470443==    by 0x23064D: config (in /usr/bin/mplayer)
==470443==    by 0x222ABE: config_video_out (in /usr/bin/mplayer)
==470443==  Address 0x2b491775000 is not stack'd, malloc'd or (recently) free'd
==470443==
==470443== Invalid write of size 4
==470443==    at 0x153D0209: brw_emit_pipe_control_flush (in
/usr/lib64/mesa/i965_dri.so)
==470443==    by 0x153D0993: intel_emit_post_sync_nonzero_flush (in
/usr/lib64/mesa/i965_dri.so)
==470443==    by 0x153867C7: brw_init_state (in /usr/lib64/mesa/i965_dri.so)
==470443==    by 0x152F9469: brwCreateContext (in /usr/lib64/mesa/i965_dri.so)
==470443==    by 0x152DDFA4: driCreateContextAttribs (in
/usr/lib64/mesa/i965_dri.so)
==470443==    by 0x152DE0A5: driCreateNewContext (in
/usr/lib64/mesa/i965_dri.so)
==470443==    by 0xA52AF39: dri2_create_context (in /usr/lib64/libGL.so.1.2.0)
==470443==    by 0xA4F7C0E: CreateContext (in /usr/lib64/libGL.so.1.2.0)
==470443==    by 0xA4F7F63: glXCreateContext (in /usr/lib64/libGL.so.1.2.0)
==470443==    by 0x2288AE: setGlWindow_x11 (in /usr/bin/mplayer)
==470443==    by 0x23064D: config (in /usr/bin/mplayer)
==470443==    by 0x222ABE: config_video_out (in /usr/bin/mplayer)
==470443==  Address 0x2b491775004 is not stack'd, malloc'd or (recently) free'd
==470443==
==470443== Invalid write of size 4
==470443==    at 0x153D012B: brw_emit_pipe_control_flush (in
/usr/lib64/mesa/i965_dri.so)
==470443==    by 0x153D0993: intel_emit_post_sync_nonzero_flush (in
/usr/lib64/mesa/i965_dri.so)
==470443==    by 0x153867C7: brw_init_state (in /usr/lib64/mesa/i965_dri.so)
==470443==    by 0x152F9469: brwCreateContext (in /usr/lib64/mesa/i965_dri.so)
==470443==    by 0x152DDFA4: driCreateContextAttribs (in
/usr/lib64/mesa/i965_dri.so)
==470443==    by 0x152DE0A5: driCreateNewContext (in
/usr/lib64/mesa/i965_dri.so)
==470443==    by 0xA52AF39: dri2_create_context (in /usr/lib64/libGL.so.1.2.0)
==470443==    by 0xA4F7C0E: CreateContext (in /usr/lib64/libGL.so.1.2.0)
==470443==    by 0xA4F7F63: glXCreateContext (in /usr/lib64/libGL.so.1.2.0)
==470443==    by 0x2288AE: setGlWindow_x11 (in /usr/bin/mplayer)
==470443==    by 0x23064D: config (in /usr/bin/mplayer)
==470443==    by 0x222ABE: config_video_out (in /usr/bin/mplayer)
==470443==  Address 0x2b491775008 is not stack'd, malloc'd or (recently) free'd

last:
==470443== Invalid read of size 8
==470443==    at 0x4C307F3: memcpy@@GLIBC_2.14 (in
/usr/lib64/valgrind/vgpreload_memcheck-amd64-linux.so)
==470443==    by 0x150F35D5: memcpy_texture.isra.0 (in
/usr/lib64/mesa/i965_dri.so)
==470443==    by 0x150F3A05: _mesa_texstore (in /usr/lib64/mesa/i965_dri.so)
==470443==    by 0x150F4434: store_texsubimage (in /usr/lib64/mesa/i965_dri.so)
==470443==    by 0x150E1DD4: _mesa_texture_sub_image (in
/usr/lib64/mesa/i965_dri.so)
==470443==    by 0x150E20A5: texsubimage (in /usr/lib64/mesa/i965_dri.so)
==470443==    by 0x150E24D6: _mesa_TexSubImage2D (in
/usr/lib64/mesa/i965_dri.so)
==470443==    by 0x229934: glUploadTex (in /usr/bin/mplayer)
==470443==    by 0x2309D5: control (in /usr/bin/mplayer)
==470443==    by 0x2C52AC: put_image (in /usr/bin/mplayer)
==470443==    by 0x281662: filter_video (in /usr/bin/mplayer)
==470443==    by 0x2184EF: update_video (in /usr/bin/mplayer)
==470443==  Address 0x2b4916e5000 is not stack'd, malloc'd or (recently) free'd
==470443==


MPlayer interrupted by signal 11 in module: filter_video
ID_SIGNAL=11
- MPlayer crashed by bad usage of CPU/FPU/RAM.
  Recompile MPlayer with --enable-debug and make a 'gdb' backtrace and
  disassembly. Details in DOCS/HTML/en/bugreports_what.html#bugreports_crash.
- MPlayer crashed. This shouldn't happen.
  It can be a bug in the MPlayer code _or_ in your drivers _or_ in your
  gcc version. If you think it's MPlayer's fault, please read
  DOCS/HTML/en/bugreports.html and follow the instructions there. We can't and
  won't help unless you provide this information when reporting a possible bug.