Opened 11 years ago

Last modified 11 years ago

#1323 new defect

mplayer crashes with a channel coupling error

Reported by: douglas.pearless@… Owned by: reimar
Priority: normal Component: ao
Version: HEAD Severity: normal
Keywords: Cc:
Blocked By: Blocking:
Reproduced by developer: Analyzed by developer:

Description

May be the same bug as 1142?
I have an Intel QX6800 running Mythbuntu and I have used the latest SVN update on mplayer as a standalone application.

I get:
....
AUDIO PAYLOAD: d4 0 3f 80
AUDIO PAYLOAD: 0 3f 80 56

AAC_PROBE: ret 0
FAAD: Failed to decode frame: Channel coupling not yet implemented
A:69970.8 V:69972.2 A-V: -1.366 ct: -0.004 4/ 4 ??% ??% ??,?% 0 0
Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 0xb6e016d0 (LWP 13153)]
ifilter_bank (fb=0x8a7a760, window_sequence=0 '\0', window_shape=1 '\001',

window_shape_prev=0 '\0', freq_in=0xbfaeab70, time_out=0x0, overlap=0x0,
object_type=2 '\002', frame_len=1024) at libfaad2/filtbank.c:221

warning: Source file is more recent than executable.
221 time_out[i] = overlap[i] + MUL_F(transf_buf[i],window_long_prev[i]);
(gdb) bt
#0 ifilter_bank (fb=0x8a7a760, window_sequence=0 '\0', window_shape=1 '\001',

window_shape_prev=0 '\0', freq_in=0xbfaeab70, time_out=0x0, overlap=0x0,
object_type=2 '\002', frame_len=1024) at libfaad2/filtbank.c:221

#1 0x081fec4d in reconstruct_single_channel (hDecoder=0x8acdc38,

ics=0xbfaec3c4, sce=0xbfaec3be, spec_data=0xbfaebbbe)
at libfaad2/specrec.c:928

#2 0x0820363d in decode_sce_lfe (hDecoder=0x8acdc38, hInfo=0x87c90c0,

ld=0xbfaf15f0, id_syn_ele=0 '\0') at libfaad2/syntax.c:597

#3 0x082054f9 in raw_data_block (hDecoder=0x8acdc38, hInfo=0x87c90c0,

ld=0xbfaf15f0, pce=0x8ace2a9, drc=0x8ace588) at libfaad2/syntax.c:446

#4 0x081e6769 in aac_frame_decode (hDecoder=0x8acdc38, hInfo=0x87c90c0,

buffer=<value optimized out>, buffer_size=4608, sample_buffer2=0x0,
sample_buffer_size=0) at libfaad2/decoder.c:872

#5 0x081b50e2 in decode_audio (sh=0x8a75238, buf=0x8ab1c20 "", minlen=34816,

maxlen=114688) at libmpcodecs/ad_faad.c:235

#6 0x08102484 in decode_audio (sh_audio=0x8a75238, minlen=32768)

at libmpcodecs/dec_audio.c:383

#7 0x0808aa5d in main (argc=3, argv=0xbfaf2994) at mplayer.c:2044
(gdb) disass $pc-32 $pc+32
Dump of assembler code from 0x81e7b80 to 0x81e7bc0:
0x081e7b80 <ifilter_bank+2208>: mov %eax,-0x2058(%ebp)
0x081e7b86 <ifilter_bank+2214>: movswl %dx,%eax
0x081e7b89 <ifilter_bank+2217>: mov 0x20(%ebp),%ecx
0x081e7b8c <ifilter_bank+2220>: add $0x4,%edx
0x081e7b8f <ifilter_bank+2223>: flds -0x200c(%ebp,%eax,4)
0x081e7b96 <ifilter_bank+2230>: fmuls (%ebx,%eax,4)
0x081e7b99 <ifilter_bank+2233>: cmp %dx,-0x2094(%ebp)
0x081e7ba0 <ifilter_bank+2240>: fadds (%ecx,%eax,4)
0x081e7ba3 <ifilter_bank+2243>: mov 0x1c(%ebp),%ecx
0x081e7ba6 <ifilter_bank+2246>: fstps (%ecx,%eax,4)
0x081e7ba9 <ifilter_bank+2249>: mov -0x2060(%ebp),%ecx
0x081e7baf <ifilter_bank+2255>: flds -0x2008(%ebp,%eax,4)
0x081e7bb6 <ifilter_bank+2262>: fmuls (%ecx,%eax,4)
0x081e7bb9 <ifilter_bank+2265>: mov -0x2064(%ebp),%ecx
0x081e7bbf <ifilter_bank+2271>: fadds (%ecx,%eax,4)
End of assembler dump.
(gdb) info all-registers
eax 0x0 0
ecx 0x0 0
edx 0x4 4
ebx 0x8692ee0 141111008
esp 0xbfae8a00 0xbfae8a00
ebp 0xbfaeab08 0xbfaeab08
esi 0xc 12
edi 0x8692ee8 141111016
eip 0x81e7ba0 0x81e7ba0 <ifilter_bank+2240>
eflags 0x210216 [ PF AF IF RF ID ]
cs 0x73 115
ss 0x7b 123
ds 0x7b 123
es 0x7b 123
fs 0x0 0
gs 0x33 51
st0 4.7947156882678343670722664302029717e-12 (raw 0x3fd9a8b2f5a6a54a0000)
st1 4.5503234957777749514207243919372559e-08 (raw 0x3fe6c36f560000000000)
st2 -5.9439554433993180282413959503173828e-07 (raw 0xbfea9f8e8d0000000000)
st3 2.3585557535154666290722058619167001e-08 (raw 0x3fe5ca9930840d800000)
st4 2.3534226367706801677852197787429479e-08 (raw 0x3fe5ca284fa333ab4500)
st5 8.38894702610559761524200439453125e-05 (raw 0x3ff1afedd10000000000)
st6 0.031249888241291046142578125 (raw 0x3ff9ffffc40000000000)
st7 -1.9121508826423410856839776861271218e-08 (raw 0xbfe5a440a480d06c0000)
fctrl 0x37f 895
fstat 0x3c20 15392
ftag 0x3fff 16383
fiseg 0x73 115
fioff 0x81e7b96 136215446
foseg 0x7b 123
fooff 0x8692ee0 141111008
fop 0xc 12
xmm0 {v4_float = {0x0, 0x0, 0x0, 0x0}, v2_double = {0x0, 0x0},

v16_int8 = {0x80 <repeats 16 times>}, v8_int16 = {0x8080, 0x8080, 0x8080,

0x8080, 0x8080, 0x8080, 0x8080, 0x8080}, v4_int32 = {0x80808080,
0x80808080, 0x80808080, 0x80808080}, v2_int64 = {0x8080808080808080,
0x8080808080808080}, uint128 = 0x80808080808080808080808080808080}

xmm1 {v4_float = {0x0, 0x0, 0x0, 0x0}, v2_double = {0x0, 0x0},

v16_int8 = {0x80, 0x80, 0x80, 0x80, 0x80, 0x80, 0x80, 0x81, 0x82, 0x82,

0x82, 0x82, 0x82, 0x82, 0x82, 0x82}, v8_int16 = {0x8080, 0x8080, 0x8080,
0x8180, 0x8282, 0x8282, 0x8282, 0x8282}, v4_int32 = {0x80808080,
0x81808080, 0x82828282, 0x82828282}, v2_int64 = {0x8180808080808080,
0x8282828282828282}, uint128 = 0x82828282828282828180808080808080}

xmm2 {v4_float = {0x0, 0x0, 0x0, 0x0}, v2_double = {0x0, 0x0},

v16_int8 = {0x81, 0x81, 0x81, 0x81, 0x81, 0x81, 0x81, 0x81, 0x82, 0x82,

0x82, 0x82, 0x82, 0x82, 0x82, 0x82}, v8_int16 = {0x8181, 0x8181, 0x8181,
0x8181, 0x8282, 0x8282, 0x8282, 0x8282}, v4_int32 = {0x81818181,
0x81818181, 0x82828282, 0x82828282}, v2_int64 = {0x8181818181818181,
0x8282828282828282}, uint128 = 0x82828282828282828181818181818181}

xmm3 {v4_float = {0x0, 0x0, 0x0, 0x0}, v2_double = {0x0, 0x0},

v16_int8 = {0x82, 0x82, 0x82, 0x82, 0x82, 0x82, 0x82, 0x82, 0x81, 0x80,

0x80, 0x80, 0x81, 0x81, 0x81, 0x81}, v8_int16 = {0x8282, 0x8282, 0x8282,
0x8282, 0x8081, 0x8080, 0x8181, 0x8181}, v4_int32 = {0x82828282,
0x82828282, 0x80808081, 0x81818181}, v2_int64 = {0x8282828282828282,
0x8181818180808081}, uint128 = 0x81818181808080818282828282828282}

xmm4 {v4_float = {0x0, 0x0, 0x0, 0x0}, v2_double = {0x0, 0x0},

v16_int8 = {0x10, 0x0, 0x10, 0x0, 0x10, 0x0, 0x10, 0x0, 0x10, 0x0, 0x10,

0x0, 0x10, 0x0, 0x10, 0x0}, v8_int16 = {0x10, 0x10, 0x10, 0x10, 0x10,
0x10, 0x10, 0x10}, v4_int32 = {0x100010, 0x100010, 0x100010, 0x100010},

v2_int64 = {0x10001000100010, 0x10001000100010},
uint128 = 0x00100010001000100010001000100010}

xmm5 {v4_float = {0x0, 0x0, 0x0, 0x0}, v2_double = {0x0, 0x0}, v16_int8 = {0x30, 0x0, 0x30, 0x0, 0x30, 0x0, 0x30, 0x0, 0x30, 0x0, 0x30,

0x0, 0x30, 0x0, 0x30, 0x0}, v8_int16 = {0x30, 0x30, 0x30, 0x30, 0x30,
0x30, 0x30, 0x30}, v4_int32 = {0x300030, 0x300030, 0x300030, 0x300030},

v2_int64 = {0x30003000300030, 0x30003000300030},
uint128 = 0x00300030003000300030003000300030}

xmm6 {v4_float = {0x0, 0x0, 0x0, 0x0}, v2_double = {0x0, 0x0},

v16_int8 = {0x4, 0x0, 0x4, 0x0, 0x4, 0x0, 0x4, 0x0, 0x4, 0x0, 0x4, 0x0, 0x4,

0x0, 0x4, 0x0}, v8_int16 = {0x4, 0x4, 0x4, 0x4, 0x4, 0x4, 0x4, 0x4},

v4_int32 = {0x40004, 0x40004, 0x40004, 0x40004}, v2_int64 = {

0x4000400040004, 0x4000400040004},

uint128 = 0x00040004000400040004000400040004}

xmm7 {v4_float = {0x0, 0x0, 0x0, 0x0}, v2_double = {0x0, 0x0},

v16_int8 = {0x6, 0x2, 0x6, 0x2, 0x6, 0x2, 0x6, 0x2, 0x6, 0x2, 0x6, 0x2, 0x6,

0x2, 0x6, 0x2}, v8_int16 = {0x206, 0x206, 0x206, 0x206, 0x206, 0x206,
0x206, 0x206}, v4_int32 = {0x2060206, 0x2060206, 0x2060206, 0x2060206},

v2_int64 = {0x206020602060206, 0x206020602060206},
uint128 = 0x02060206020602060206020602060206}

mxcsr 0x1f80 [ IM DM ZM OM UM PM ]
mm0 {uint64 = 0xa440a480d06c0000, v2_int32 = {0xd06c0000,

0xa440a480}, v4_int16 = {0x0, 0xd06c, 0xa480, 0xa440}, v8_int8 = {0x0,
0x0, 0x6c, 0xd0, 0x80, 0xa4, 0x40, 0xa4}}

mm1 {uint64 = 0xa8b2f5a6a54a0000, v2_int32 = {0xa54a0000,

0xa8b2f5a6}, v4_int16 = {0x0, 0xa54a, 0xf5a6, 0xa8b2}, v8_int8 = {0x0, 0x0, 0x4a, 0xa5, 0xa6, 0xf5, 0xb2, 0xa8}}

mm2 {uint64 = 0xc36f560000000000, v2_int32 = {0x0, 0xc36f5600},

v4_int16 = {0x0, 0x0, 0x5600, 0xc36f}, v8_int8 = {0x0, 0x0, 0x0, 0x0, 0x0,

0x56, 0x6f, 0xc3}}

mm3 {uint64 = 0x9f8e8d0000000000, v2_int32 = {0x0, 0x9f8e8d00},

v4_int16 = {0x0, 0x0, 0x8d00, 0x9f8e}, v8_int8 = {0x0, 0x0, 0x0, 0x0, 0x0,

0x8d, 0x8e, 0x9f}}

mm4 {uint64 = 0xca9930840d800000, v2_int32 = {0xd800000,

0xca993084}, v4_int16 = {0x0, 0xd80, 0x3084, 0xca99}, v8_int8 = {0x0, 0x0,
0x80, 0xd, 0x84, 0x30, 0x99, 0xca}}

mm5 {uint64 = 0xca284fa333ab4500, v2_int32 = {0x33ab4500,

0xca284fa3}, v4_int16 = {0x4500, 0x33ab, 0x4fa3, 0xca28}, v8_int8 = {0x0,
0x45, 0xab, 0x33, 0xa3, 0x4f, 0x28, 0xca}}

mm6 {uint64 = 0xafedd10000000000, v2_int32 = {0x0, 0xafedd100},

v4_int16 = {0x0, 0x0, 0xd100, 0xafed}, v8_int8 = {0x0, 0x0, 0x0, 0x0, 0x0,

0xd1, 0xed, 0xaf}}

mm7 {uint64 = 0xffffc40000000000, v2_int32 = {0x0, 0xffffc400},

v4_int16 = {0x0, 0x0, 0xc400, 0xffff}, v8_int8 = {0x0, 0x0, 0x0, 0x0, 0x0,

0xc4, 0xff, 0xff}}

I have recorded a DVB-T stream via mplayer which when it is replayed causes the above issue. Note sure how to attach my crash.ts file to this bug report!

Change History (2)

comment:1 Changed 11 years ago by douglas.pearless@…

I tried to upload my crash.ts file, but it is 113MB. I will try to generate a smaller file (if required).

comment:2 Changed 11 years ago by douglas.pearless@…

I have a file that reliably causes this crash, but at 12MB (a few seconds of HDTV) I cannot upload it, nor do I have somewhere on the internet to store it and provdie a link, can I email it to whoever is looking at the bug??

Note: See TracTickets for help on using tickets.