Bug 7302

Summary:	mplayer, VLC & totem crash immediately upon startup
Product:	Mageia	Reporter:	Shlomi Fish <shlomif>
Component:	RPM Packages	Assignee:	Funda Wang <fundawang>
Status:	RESOLVED FIXED	QA Contact:
Severity:	critical
Priority:	Normal	CC:	eatdirt, mageia, thierry.vignaud
Version:	Cauldron
Target Milestone:	---
Hardware:	x86_64
OS:	Linux
Whiteboard:
Source RPM:	trousers-0.3.9-1.mga3.src.rpm	CVE:
Status comment:
Attachments:	Ad-hoc patch for gnutls that fixes the problem

Description Shlomi Fish 2012-09-03 08:27:14 CEST

Description of problem:
shlomif@telaviv1:~$ mplayer
Segmentation fault
shlomif@telaviv1:~$ gdb mplayer
GNU gdb (GDB) 7.5-1.mga3 (Mageia release 3)
Copyright (C) 2012 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html>
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.  Type "show copying"
and "show warranty" for details.
This GDB was configured as "x86_64-mageia-linux-gnu".
For bug reporting instructions, please see:
<http://www.gnu.org/software/gdb/bugs/>...
Reading symbols from /usr/bin/mplayer...Reading symbols from /usr/lib/debug/usr/bin/mplayer.debug...done.
done.
(gdb) r
Starting program: /usr/bin/mplayer 
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib64/libthread_db.so.1".

Program received signal SIGSEGV, Segmentation fault.
host_table_init () at rpc/hosttable.c:27
27              ht = calloc(1, sizeof(struct host_table));
(gdb) bt
#0  host_table_init () at rpc/hosttable.c:27
#1  0x00007fffe248dc4b in my_init () at rpc/hosttable.c:45
#2  0x00007ffff7dec4d6 in call_init (l=l@entry=0x7ffff7fa5990, argc=argc@entry=
    1, argv=argv@entry=0x7fffffffce78, env=env@entry=0x7fffffffce88)
    at dl-init.c:84
#3  0x00007ffff7dec590 in call_init (env=0x7fffffffce88, argv=0x7fffffffce78, 
    argc=1, l=0x7ffff7fa5990) at dl-init.c:55
#4  _dl_init (main_map=0x7ffff7ffe1e8, argc=1, argv=0x7fffffffce78, env=
    0x7fffffffce88) at dl-init.c:133
#5  0x00007ffff7ddf59a in _dl_start_user () from /lib64/ld-linux-x86-64.so.2
#6  0x0000000000000001 in ?? ()
#7  0x00007fffffffd3e6 in ?? ()
#8  0x0000000000000000 in ?? ()
(gdb) q
A debugging session is active.

        Inferior 1 [process 3797] will be killed.

Quit anyway? (y or n) y
shlomif@telaviv1:~$ 

A similar problem happens with running "vlc". I'm on Mageia Linux Cauldron on x86-64 on Core i3 with the Intel Grahpics video driver. gst123 appears to be able to play the sound fine (but does not display the video).

Comment 1 Shlomi Fish 2012-09-03 08:48:35 CEST

Created attachment 2731 [details]
Ad-hoc patch for gnutls that fixes the problem

This is an ad-hoc patch for gnutls that fixes the problem (assuming the libtspi-devel package is uninstalled). I wouldn't recommend applying it as is, but it does point at the problem.

Comment 2 Thierry Vignaud 2012-09-04 08:48:17 CEST

Indeed trousers-0.3.9-1.mga3 makes VLC & mplayer to crash

CC: (none) => thierry.vignaud
Assignee: bugsquad => fundawang

Thierry Vignaud 2012-09-04 08:49:57 CEST

Summary: mplayer and VLC crash immediately upon startup on Cauldron => mplayer, VLC & totem crash immediately upon startup

Comment 3 Funda Wang 2012-09-04 09:05:27 CEST

Maybe we should report this issue into gnutls upstream.

Comment 4 Funda Wang 2012-09-04 10:46:47 CEST

Please try lib64tspi1-0.3.9-2.mga3.

Status: NEW => ASSIGNED

Comment 5 Shlomi Fish 2012-09-04 11:53:38 CEST

(In reply to comment #4)
> Please try lib64tspi1-0.3.9-2.mga3.

OK, I'm going to try it and let you know.

Regards,

-- Shlomi Fish

Comment 6 Shlomi Fish 2012-09-04 12:19:30 CEST

(In reply to comment #4)
> Please try lib64tspi1-0.3.9-2.mga3.

OK, now they appear to be working nicely. Thanks for the fix.

Regards,

-- Shlomi Fish

Comment 7 Funda Wang 2012-09-04 12:20:09 CEST

Then close.

Status: ASSIGNED => RESOLVED
Resolution: (none) => FIXED

Comment 8 Thierry Vignaud 2012-09-04 17:04:31 CEST

*** Bug 7336 has been marked as a duplicate of this bug. ***

CC: (none) => mageia

Comment 9 Chris Denice 2012-09-10 11:06:09 CEST

Hi guys,
I have the same problem with "motion"; which is segfaulting only since that patched have been added, together with a few other programs actually. Here the output of gdb.
Let me know if you need other info!


(gdb) run
Starting program: /usr/bin/motion 
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib64/libthread_db.so.1".
[New Thread 0x7fffec032700 (LWP 24588)]
[Thread 0x7fffec032700 (LWP 24588) exited]
[6713360] [NTC] [ALL] conf_load: Processing thread 0 - config file /etc/motion.conf
[6713360] [NTC] [ALL] motion_startup: Motion Git-8619d7c17ce112e7196975905c6e840f345141ba Started with SDL support
[6713360] [NTC] [ALL] motion_startup: Logging to syslog
[6713360] [NTC] [ALL] motion_startup: Using log type (ALL) log level (NTC)
Detaching after fork from child process 24589.
[6713360] [NTC] [ALL] become_daemon: Motion going to daemon mode

Program received signal SIGSEGV, Segmentation fault.
__GI___pthread_mutex_lock (mutex=0x8) at pthread_mutex_lock.c:50
50        unsigned int type = PTHREAD_MUTEX_TYPE (mutex);
(gdb) up
#1  0x00007fffeda9ea84 in host_table_final () at rpc/hosttable.c:54
54              MUTEX_LOCK(ht->lock);
(gdb) up
#2  0x00007ffff7decb7f in _dl_fini () at dl-fini.c:253
253                             ((fini_t) array[i]) ();
(gdb) down
#1  0x00007fffeda9ea84 in host_table_final () at rpc/hosttable.c:54
54              MUTEX_LOCK(ht->lock);
(gdb) down
#0  __GI___pthread_mutex_lock (mutex=0x8) at pthread_mutex_lock.c:50
50        unsigned int type = PTHREAD_MUTEX_TYPE (mutex);
(gdb) bt
#0  __GI___pthread_mutex_lock (mutex=0x8) at pthread_mutex_lock.c:50
#1  0x00007fffeda9ea84 in host_table_final () at rpc/hosttable.c:54
#2  0x00007ffff7decb7f in _dl_fini () at dl-fini.c:253
#3  0x00007ffff54fb5b1 in __run_exit_handlers (status=status@entry=0, 
    listp=0x7ffff586a5c8 <__exit_funcs>, run_list_atexit=run_list_atexit@entry=true)
    at exit.c:77
#4  0x00007ffff54fb635 in __GI_exit (status=status@entry=0) at exit.c:99
#5  0x00000000004083ef in become_daemon () at motion.c:2289
#6  motion_startup (daemonize=daemonize@entry=1, argc=argc@entry=1, 
    argv=argv@entry=0x7fffffffdb58) at motion.c:2512
#7  0x00000000004065c6 in main (argc=1, argv=0x7fffffffdb58) at motion.c:2662

Status: RESOLVED => REOPENED
CC: (none) => dirteat
Resolution: FIXED => (none)

Comment 10 Shlomi Fish 2012-09-10 11:53:11 CEST

Hi Chris,

(In reply to comment #9)
> Hi guys,
> I have the same problem with "motion"; which is segfaulting only since that
> patched have been added, together with a few other programs actually. Here the
> output of gdb.
> Let me know if you need other info!
> 

mplayer, VLC and totem no longer crash, and this problem with motion seems unrelated to it. Please file a new bug with this issue and don't conflate the two issues.

Status: REOPENED => RESOLVED
Resolution: (none) => FIXED

Comment 11 Chris Denice 2012-09-10 12:01:56 CEST

All right, but knowing that the error starts from:
#1  0x00007fffeda9ea84 in host_table_final () at rpc/hosttable.c:54

and that this is precisely what have been addressed by that patch, it looks to me that this is related...

do you want me to open for trousers instead?

Comment 12 Shlomi Fish 2012-09-10 16:56:31 CEST

(In reply to comment #11)
> All right, but knowing that the error starts from:
> #1  0x00007fffeda9ea84 in host_table_final () at rpc/hosttable.c:54
> 
> and that this is precisely what have been addressed by that patch, it looks to
> me that this is related...
> 
> do you want me to open for trousers instead?

Sorry for the late response. Please open a new bug for trousers or whatever.

Regards,

-- Shlomi Fish