Bug 13491

Summary: 5min.com player causes assertion
Product: swfdec Reporter: Priit Laes (irc: plaes) <plaes>
Component: libraryAssignee: swfdec ml <swfdec>
Status: RESOLVED FIXED QA Contact: swfdec ml <swfdec>
Severity: blocker    
Priority: medium    
Version: unspecified   
Hardware: x86-64 (AMD64)   
OS: All   
URL: http://www.5min.com/
Whiteboard:
i915 platform: i915 features:

Description Priit Laes (irc: plaes) 2007-12-02 11:41:03 UTC
Getting following assertion with all the 5min.com videos:

SWFDEC: ERROR: swfdec_as_context.c(171): swfdec_as_context_abort: Stack overflow

Swfdec-CRITICAL **: swfdec_as_frame_return: assertion `frame == context->frame' failed
aborting...

Program received signal SIGABRT, Aborted.
[Switching to Thread 0x2af7f6a238b0 (LWP 21161)]
0x00002af7ef7a0185 in *__GI_raise (sig=<value optimized out>)
    at ../nptl/sysdeps/unix/sysv/linux/raise.c:64
(gdb) bt full
#0  0x00002af7ef7a0185 in *__GI_raise (sig=<value optimized out>)
    at ../nptl/sysdeps/unix/sysv/linux/raise.c:64
        pid = <value optimized out>
        selftid = <value optimized out>
#1  0x00002af7ef7a1630 in *__GI_abort () at abort.c:88
        act = {__sigaction_handler = {sa_handler = 0x62d7a64, 
    sa_sigaction = 0x62d7a64}, sa_mask = {__val = {103643648, 103643748, 0, 0, 
      0, 0, 0, 107261312, 108738256, 47244362864864, 47244360680624, 60935456, 
      6788756, 0, 2920512, 2}}, sa_flags = 8, sa_restorer = 0x5}
        sigs = {__val = {32, 0 <repeats 15 times>}}
#2  0x00002af7ef2cf3b0 in IA__g_logv (log_domain=0x2aaaafc5491d "Swfdec", 
    log_level=G_LOG_LEVEL_CRITICAL, 
    format=0x2af7ef317aed "%s: assertion `%s' failed", args1=0x7fffbf5d9500)
    at gmessages.c:497
        depth = 1
        domain = <value optimized out>
        data = (gpointer) 0x0
        log_func = (GLogFunc) 0x4bbc60 <trap_handler>
        domain_fatal_mask = 5
        test_level = G_LOG_FLAG_FATAL
        was_recursion = 0
        i = <value optimized out>
#3  0x00002af7ef2cf433 in IA__g_log (
    log_domain=0x52a9 <Address 0x52a9 out of bounds>, log_level=21161, 
    format=0x6 <Address 0x6 out of bounds>) at gmessages.c:517
        args = {{gp_offset = 40, fp_offset = 48, 
    overflow_arg_area = 0x7fffbf5d95e0, reg_save_area = 0x7fffbf5d9520}}
#4  0x00002aaaafbea39a in swfdec_as_frame_return (frame=0x36a5d80, 
    return_value=0x7fffbf5d9690) at swfdec_as_frame.c:472
        __o = <value optimized out>
        context = (SwfdecAsContext *) 0x1bfa750
        retval = {type = 57302400, value = {boolean = 29337424, 
    number = 1.4494613335878487e-316, string = 0x1bfa750 "\220\0055\002", 
    object = 0x1bfa750}}
        next = <value optimized out>
        __PRETTY_FUNCTION__ = "swfdec_as_frame_return"
#5  0x00002aaaafbe72cb in swfdec_as_context_run (context=0x1bfa750)
    at swfdec_as_context.c:850
        argv = (SwfdecAsValue *) 0x4dc3f10
        native = (SwfdecAsNativeFunction *) 0x34b8820
        rval = {type = SWFDEC_AS_TYPE_STRING, value = {boolean = -1346003103, 
    number = 2.3177895010821281e-310, string = 0x2aaaafc59f61 "", 
    object = 0x2aaaafc59f61}}
        frame = (SwfdecAsFrame *) 0x36a5d80
        last_frame = (SwfdecAsFrame *) 0x0
        spec = <value optimized out>
        startpc = (const guint8 *) 0x2aaab0367de0 "CWS\b\004\023\b"
        pc = (const guint8 *) 0x4dc3f10 ""
        endpc = (const guint8 *) 0x2aaab03e90e4 ""
        nextpc = (const guint8 *) 0x2aaab0378406 "\226\002"
        exitpc = (const guint8 *) 0x2aaab037864f "O\226\004"
        check = <value optimized out>
        action = 82
        len = <value optimized out>
        data = (const guint8 *) 0x0
        original_version = 8
        step = (void (*)(SwfdecAsDebugger *, SwfdecAsContext *)) 0
        check_block = 1
        __PRETTY_FUNCTION__ = "swfdec_as_context_run"
#6  0x00002aaaafbf523e in swfdec_as_object_run_with_security (
    object=0x65dece0, script=<value optimized out>, sec=0x322c2c0)
    at swfdec_as_object.c:1170
        context = (SwfdecAsContext *) 0x1bfa750
        frame = (SwfdecAsFrame *) 0x672f900
        __PRETTY_FUNCTION__ = "swfdec_as_object_run_with_security"
#7  0x00002aaaafc2f952 in swfdec_player_perform_actions (player=0x1bfa750)
    at swfdec_player.c:470
        walk = <value optimized out>
        __PRETTY_FUNCTION__ = "swfdec_player_perform_actions"
#8  0x00002aaaafc32817 in swfdec_player_iterate (timeout=<value optimized out>)
    at swfdec_player.c:1274
        player = (SwfdecPlayer *) 0x1bfa750
        walk = <value optimized out>
        __PRETTY_FUNCTION__ = "swfdec_player_iterate"
#9  0x00002aaaafc3123b in swfdec_player_do_advance (player=0x1bfa750, 
    msecs=<value optimized out>, audio_samples=29) at swfdec_player.c:1335
        timeout = (SwfdecTimeout *) 0x1bfa9b8
        target_time = 485904384
        frames_now = 1470
        __PRETTY_FUNCTION__ = "swfdec_player_do_advance"
#10 0x00002af7ef05ec6f in IA__g_closure_invoke (closure=0x2976be0, 
    return_value=0x0, n_param_values=3, param_values=0x7fffbf5d9ac0, 
    invocation_hint=0x7fffbf5d99a0) at gclosure.c:490
        marshal = (GClosureMarshal) 0x2af7ef05d360 <g_type_class_meta_marshal>
        marshal_data = (gpointer) 0xa0
        __PRETTY_FUNCTION__ = "IA__g_closure_invoke"
#11 0x00002af7ef072d2a in signal_emit_unlocked_R (node=0x2976c50, detail=0, 
    instance=0x1bfa750, emission_return=0x0, 
    instance_and_params=0x7fffbf5d9ac0) at gsignal.c:2478
        tmp = <value optimized out>
        handler = (Handler *) 0x3a2aef0
        accumulator = (SignalAccumulator *) 0x0
        emission = {next = 0x0, instance = 0x1bfa750, ihint = {
    signal_id = 362, detail = 0, run_type = G_SIGNAL_RUN_LAST}, 
  state = EMISSION_RUN, chain_type = 29300208}
        class_closure = (GClosure *) 0x2976be0
        handler_list = (Handler *) 0x3a2aef0
        return_accu = (GValue *) 0x0
        accu = {g_type = 0, data = {{v_int = 0, v_uint = 0, v_long = 0, 
      v_ulong = 0, v_int64 = 0, v_uint64 = 0, v_float = 0, v_double = 0, 
      v_pointer = 0x0}, {v_int = 0, v_uint = 0, v_long = 0, v_ulong = 0, 
      v_int64 = 0, v_uint64 = 0, v_float = 0, v_double = 0, v_pointer = 0x0}}}
        signal_id = 362
        max_sequential_handler_number = 3255
        return_value_altered = 1
#12 0x00002af7ef074385 in IA__g_signal_emit_valist (instance=0x1bfa750, 
    signal_id=<value optimized out>, detail=0, var_args=0x7fffbf5d9d40)
    at gsignal.c:2199
        _cvalue = <value optimized out>
        _flags = <value optimized out>
        _vtable = <value optimized out>
        _cvalues = {{v_int = -1084384000, v_long = 140736403971328, 
    v_int64 = 140736403971328, v_double = 6.9533022321468743e-310, 
    v_pointer = 0x7fffbf5d9d00}, {v_int = 45691104, v_long = 45691104, 
    v_int64 = 45691104, v_double = 2.2574404806959563e-316, 
    v_pointer = 0x2b930e0}, {v_int = 44251152, v_long = 44251152, 
    v_int64 = 44251152, v_double = 2.1862973992099169e-316, 
    v_pointer = 0x2a33810}, {v_int = -4360590, v_long = 47244635895410, 
    v_int64 = 47244635895410, v_double = 2.3341951546200281e-310, 
    v_pointer = 0x2af7ffbd7672}, {v_int = 44249872, v_long = 44249872, 
    v_int64 = 44249872, v_double = 2.1862341588072492e-316, 
    v_pointer = 0x2a33310}, {v_int = -276856390, v_long = 47244363399610, 
    v_int64 = 47244363399610, v_double = 2.3341816915386865e-310, 
    v_pointer = 0x2af7ef7f81ba}, {v_int = -1340751440, 
    v_long = 46912587022768, v_int64 = 46912587022768, 
    v_double = 2.3177897605487553e-310, v_pointer = 0x2aaab015c1b0}, {
    v_int = 4, v_long = 4, v_int64 = 4, v_double = 1.9762625833649862e-323, 
    v_pointer = 0x4}}
        _lcopy_format = <value optimized out>
        _n_values = <value optimized out>
        return_value = {g_type = 47244369211264, data = {{v_int = -276926756, 
      v_uint = 4018040540, v_long = 47244363329244, v_ulong = 47244363329244, 
      v_int64 = 47244363329244, v_uint64 = 47244363329244, 
      v_float = -7.87432133e+28, v_double = 2.3341816880621442e-310, 
      v_pointer = 0x2af7ef7e6edc}, {v_int = 0, v_uint = 0, v_long = 0, 
      v_ulong = 0, v_int64 = 0, v_uint64 = 0, v_float = 0, v_double = 0, 
      v_pointer = 0x0}}}
        error = <value optimized out>
        instance_and_params = (GValue *) 0x0
        stack_values = {{g_type = 29300208, data = {{v_int = 29337424, 
        v_uint = 29337424, v_long = 29337424, v_ulong = 29337424, 
        v_int64 = 29337424, v_uint64 = 29337424, v_float = 7.04024007e-38, 
        v_double = 1.4494613335878487e-316, v_pointer = 0x1bfa750}, {
        v_int = 0, v_uint = 0, v_long = 0, v_ulong = 0, v_int64 = 0, 
        v_uint64 = 0, v_float = 0, v_double = 0, v_pointer = 0x0}}}, {
    g_type = 36, data = {{v_int = 34, v_uint = 34, v_long = 34, v_ulong = 34, 
        v_int64 = 34, v_uint64 = 34, v_float = 4.76441478e-44, 
        v_double = 1.6798231958602383e-322, v_pointer = 0x22}, {v_int = 0, 
        v_uint = 0, v_long = 0, v_ulong = 0, v_int64 = 0, v_uint64 = 0, 
        v_float = 0, v_double = 0, v_pointer = 0x0}}}, {g_type = 28, data = {{
        v_int = 1499, v_uint = 1499, v_long = 1499, v_ulong = 1499, 
        v_int64 = 1499, v_uint64 = 1499, v_float = 2.1005464e-42, 
        v_double = 7.4060440311602857e-321, v_pointer = 0x5db}, {v_int = 0, 
        v_uint = 0, v_long = 0, v_ulong = 0, v_int64 = 0, v_uint64 = 0, 
        v_float = 0, v_double = 0, v_pointer = 0x0}}}, {g_type = 512, data = {{
        v_int = -1337965776, v_uint = 2957001520, v_long = 46912589808432, 
        v_ulong = 46912589808432, v_int64 = 46912589808432, 
        v_uint64 = 46912589808432, v_float = -6.99446723e-10, 
        v_double = 2.3177898981788437e-310, v_pointer = 0x2aaab0404330}, {
        v_int = 512, v_uint = 512, v_long = 512, v_ulong = 512, v_int64 = 512, 
        v_uint64 = 512, v_float = 7.17464814e-43, 
        v_double = 2.5296161067071823e-321, v_pointer = 0x200}}}, {
    g_type = 512, data = {{v_int = -340613554, v_uint = 3954353742, 
        v_long = 47244299642446, v_ulong = 47244299642446, 
        v_int64 = 47244299642446, v_uint64 = 47244299642446, 
        v_float = -4.31948295e+26, v_double = 2.3341785415162456e-310, 
        v_pointer = 0x2af7ebb2a64e}, {v_int = 41864040, v_uint = 41864040, 
        v_long = 41864040, v_ulong = 41864040, v_int64 = 41864040, 
        v_uint64 = 41864040, v_float = 1.87193476e-37, 
        v_double = 2.0683583960123779e-316, v_pointer = 0x27ecb68}}}, {
    g_type = 46912585596960, data = {{v_int = 512, v_uint = 512, v_long = 512, 
        v_ulong = 512, v_int64 = 512, v_uint64 = 512, 
        v_float = 7.17464814e-43, v_double = 2.5296161067071823e-321, 
        v_pointer = 0x200}, {v_int = 0, v_uint = 0, v_long = 0, v_ulong = 0, 
        v_int64 = 0, v_uint64 = 0, v_float = 0, v_double = 0, 
        v_pointer = 0x0}}}, {g_type = 303, data = {{v_int = 512, v_uint = 512, 
        v_long = 512, v_ulong = 512, v_int64 = 512, v_uint64 = 512, 
        v_float = 7.17464814e-43, v_double = 2.5296161067071823e-321, 
        v_pointer = 0x200}, {v_int = 347, v_uint = 347, v_long = 347, 
        v_ulong = 347, v_int64 = 347, v_uint64 = 347, 
        v_float = 4.86250567e-43, v_double = 1.7144077910691255e-321, 
        v_pointer = 0x15b}}}, {g_type = 47244363310400, data = {{
        v_int = -1337965663, v_uint = 2957001633, v_long = 46912589808545, 
        v_ulong = 46912589808545, v_int64 = 46912589808545, 
        v_uint64 = 46912589808545, v_float = -6.99452996e-10, 
        v_double = 2.3177898981844266e-310, v_pointer = 0x2aaab04043a1}, {
        v_int = -287024727, v_uint = 4007942569, v_long = 47244353231273, 
        v_ulong = 47244353231273, v_int64 = 47244353231273, 
        v_uint64 = 47244353231273, v_float = -3.53354874e+28, 
        v_double = 2.3341811891560878e-310, v_pointer = 0x2af7eee459a9}}}, {
    g_type = 0, data = {{v_int = 251904, v_uint = 251904, v_long = 251904, 
        v_ulong = 251904, v_int64 = 251904, v_uint64 = 251904, 
        v_float = 3.52992688e-40, v_double = 1.2445711244999337e-318, 
        v_pointer = 0x3d800}, {v_int = 512, v_uint = 512, v_long = 512, 
        v_ulong = 512, v_int64 = 512, v_uint64 = 512, 
        v_float = 7.17464814e-43, v_double = 2.5296161067071823e-321, 
        v_pointer = 0x200}}}, {g_type = 34310664, data = {{v_int = 2, 
        v_uint = 2, v_long = 2, v_ulong = 2, v_int64 = 2, v_uint64 = 2, 
        v_float = 2.80259693e-45, v_double = 9.8813129168249309e-324, 
        v_pointer = 0x2}, {v_int = 34311840, v_uint = 34311840, 
        v_long = 34311840, v_ulong = 34311840, v_int64 = 34311840, 
        v_uint64 = 34311840, v_float = 1.02530385e-37, 
        v_double = 1.6952301389601517e-316, v_pointer = 0x20b8ea0}}}, {
    g_type = 0, data = {{v_int = -1342177248, v_uint = 2952790048, 
        v_long = 46912585596960, v_ulong = 46912585596960, 
        v_int64 = 46912585596960, v_uint64 = 46912585596960, 
        v_float = -4.65663064e-10, v_double = 2.3177896901044803e-310, 
        v_pointer = 0x2aaab0000020}, {v_int = -1337965776, 
        v_uint = 2957001520, v_long = 46912589808432, 
        v_ulong = 46912589808432, v_int64 = 46912589808432, 
        v_uint64 = 46912589808432, v_float = -6.99446723e-10, 
        v_double = 2.3177898981788437e-310, v_pointer = 0x2aaab0404330}}}, {
    g_type = 47244366260608, data = {{v_int = 76109776, v_uint = 76109776, 
        v_long = 76109776, v_ulong = 76109776, v_int64 = 76109776, 
        v_uint64 = 76109776, v_float = 3.22891883e-36, 
        v_double = 3.7603225634272606e-316, v_pointer = 0x48957d0}, {
        v_int = 34309968, v_uint = 34309968, v_long = 34309968, 
        v_ulong = 34309968, v_int64 = 34309968, v_uint64 = 34309968, 
        v_float = 1.025094e-37, v_double = 1.6951376498712502e-316, 
        v_pointer = 0x20b8750}}}, {g_type = 0, data = {{v_int = -1342177248, 
        v_uint = 2952790048, v_long = 46912585596960, 
        v_ulong = 46912585596960, v_int64 = 46912585596960, 
        v_uint64 = 46912585596960, v_float = -4.65663064e-10, 
        v_double = 2.3177896901044803e-310, v_pointer = 0x2aaab0000020}, {
        v_int = 76109776, v_uint = 76109776, v_long = 76109776, 
        v_ulong = 76109776, v_int64 = 76109776, v_uint64 = 76109776, 
        v_float = 3.22891883e-36, v_double = 3.7603225634272606e-316, 
        v_pointer = 0x48957d0}}}, {g_type = 34309968, data = {{v_int = 0, 
        v_uint = 0, v_long = 0, v_ulong = 0, v_int64 = 0, v_uint64 = 0, 
        v_float = 0, v_double = 0, v_pointer = 0x0}, {v_int = -1342177248, 
        v_uint = 2952790048, v_long = 46912585596960, 
        v_ulong = 46912585596960, v_int64 = 46912585596960, 
        v_uint64 = 46912585596960, v_float = -4.65663064e-10, 
        v_double = 2.3177896901044803e-310, v_pointer = 0x2aaab0000020}}}, {
    g_type = 76109776, data = {{v_int = 34309968, v_uint = 34309968, 
        v_long = 34309968, v_ulong = 34309968, v_int64 = 34309968, 
        v_uint64 = 34309968, v_float = 1.025094e-37, 
        v_double = 1.6951376498712502e-316, v_pointer = 0x20b8750}, {
        v_int = 1591625570, v_uint = 1591625570, v_long = 1591625570, 
        v_ulong = 1591625570, v_int64 = 1591625570, v_uint64 = 1591625570, 
        v_float = 8.00843918e+18, v_double = 7.8636751517949216e-315, 
        v_pointer = 0x5ede4762}}}, {g_type = 140736404117214, data = {{
        v_int = 0, v_uint = 0, v_long = 0, v_ulong = 0, v_int64 = 0, 
        v_uint64 = 0, v_float = 0, v_double = 0, v_pointer = 0x0}, {
        v_int = 44251152, v_uint = 44251152, v_long = 44251152, 
        v_ulong = 44251152, v_int64 = 44251152, v_uint64 = 44251152, 
        v_float = 2.39828757e-37, v_double = 2.1862973992099169e-316, 
        v_pointer = 0x2a33810}}}}
        free_me = (GValue *) 0x0
        signal_return_type = 4
        param_values = (GValue *) 0x7fffbf5d9ad8
        node = (SignalNode *) 0x2976c50
        i = 2
        n_params = 2
        __PRETTY_FUNCTION__ = "IA__g_signal_emit_valist"
#13 0x00002af7ef074773 in IA__g_signal_emit (instance=0x52a9, signal_id=21161, 
    detail=6) at gsignal.c:2243
        var_args = {{gp_offset = 40, fp_offset = 48, 
    overflow_arg_area = 0x7fffbf5d9e20, reg_save_area = 0x7fffbf5d9d60}}
#14 0x00002aaaaf9b0478 in swfdec_iterate_dispatch (
    source_=<value optimized out>, callback=<value optimized out>, 
    user_data=<value optimized out>) at swfdec_source.c:109
        source = (SwfdecIterateSource *) 0x3949d40
        diff = 0
#15 0x00002af7ef2c6db4 in IA__g_main_context_dispatch (context=0x76c4f0)
    at gmain.c:2061
No locals.
#16 0x00002af7ef2ca09d in g_main_context_iterate (context=0x76c4f0, block=1, 
    dispatch=1, self=<value optimized out>) at gmain.c:2694
        got_ownership = <value optimized out>
        max_priority = 0
        timeout = 0
        some_ready = 1
        nfds = <value optimized out>
        allocated_nfds = <value optimized out>
        fds = (GPollFD *) 0x29947b0
        __PRETTY_FUNCTION__ = "g_main_context_iterate"
#17 0x00002af7ef2ca397 in IA__g_main_loop_run (loop=0x11be8c0) at gmain.c:2898
        got_ownership = <value optimized out>
        self = (GThread *) 0x730080
        __PRETTY_FUNCTION__ = "IA__g_main_loop_run"
#18 0x00002af7ecf74bc3 in IA__gtk_main () at gtkmain.c:1146
        tmp_list = (GList *) 0x79d070
        functions = (GList *) 0x0
        init = (GtkInitFunction *) 0x78b540
        loop = (GMainLoop *) 0x11be8c0
#19 0x000000000043eedc in main (argc=<value optimized out>, 
    argv=0x7fffbf5db288) at ephy-main.c:723
        uri = <value optimized out>
        path = 0x27 <Address 0x27 out of bounds>
        rpath = "�����*\000\000\000\020;��*\000\000�����*\000\000�\024;��*\000\000\000\000\211��*\000\000\220\031;��*\000\000\000\000w��*\000\000\000@\t��*\000\000�D\t��*\000\000�\005���*\000\000�yj��*\000\000\230I\t��*\000\000\000\220���*\000\000�t���*\000\000\220y���*\000\000\000 m��*\000\000\000p���*\000\000�\004V��*\000\000\000\000\000\000\000\000\000\000�:\n��*\000\000\000\000\000\000\000\000\000\0000�]��\177\000\000\f\000\000\000\000\000\000\000\000\000�@�~��\000\000�\031\233��U"...
        i = <value optimized out>
        program = <value optimized out>
        option_context = (GOptionContext *) 0x27
        option_group = <value optimized out>
        proxy = <value optimized out>
        error = (GError *) 0x0
        user_time = 2942811886
        env = <value optimized out>
        enable_pango = <value optimized out>
(gdb) 
(gdb) q
Comment 1 Pekka Lampila 2007-12-11 00:07:54 UTC
Confirmed
Comment 2 Benjamin Otte 2007-12-11 02:45:32 UTC
fixed as of git 6495efaab49bd9a19b57c11a4b23e1db00fdd868

Use of freedesktop.org services, including Bugzilla, is subject to our Code of Conduct. How we collect and use information is described in our Privacy Policy.