Skip to content
Snippets Groups Projects

rtspsrc crash on big endian system

    • Closed Issue created by ddimension @ddimension

    Hi!

    On big endian systems the rtspsrc has a bug leading to a segfault. It is on several MIPS-BE systems. The command: gst-launch-1.0 rtspsrc location=rtsp://192.168.203.15:8554/test ! fakesink

    After some seconds, the process segfaults, see attached log. Almost identical MIPS-LE systems do not the show failure, they run flawlessly.

    This is what gdb shows me:

    Thread 2 "task0" received signal SIGSEGV, Segmentation fault.
[Switching to LWP 20702]
0x77fc31b0 in strchrnul () from /lib/ld-musl-mips-sf.so.1
(gdb) bt full
#0  0x77fc31b0 in strchrnul () from /lib/ld-musl-mips-sf.so.1
No symbol table info available.
#1  0x77fc3138 in strchr () from /lib/ld-musl-mips-sf.so.1
No symbol table info available.
#2  0x77d24ebb in g_param_spec_pool_lookup () from /usr/lib/libgobject-2.0.so.0
No symbol table info available.
Backtrace stopped: frame did not save the PC

    I use gstramer 16.2 and also testet the latest patches in the git repo.

    Please help. If more details are needed, please ask.

    log.txt.gz

    Edited

    Designs

      Child items 0

      2. No child items are currently assigned. Use child items to break down this issue into smaller parts.

      Activity

      • ddimension changed the description

        changed the description

      • Sebastian Dröge
        Sebastian Dröge @slomo ·
        Owner

        Can you please get a full backtrace and install debug symbols for the libraries involved?

      • Sebastian Dröge added Awaiting feedback label

        added Awaiting feedback label

      • ddimension
        ddimension @ddimension ·
        Author

        Thanks for taking a look. These information will take some time, I will come back in the next days.

      • ddimension
        ddimension @ddimension ·
        Author

        I've setup a debian inside qemu to replicate the problem. After installing gstreamer and plugins debug symbols I get this:

        Starting program: /usr/bin/gst-launch-1.0 rtspsrc location=rtsp://192.168.203.15:8554/test \! fakesink
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib/mips-linux-gnu/libthread_db.so.1".
[Detaching after fork from child process 3221]
Setting pipeline to PAUSED ...
[New Thread 0x77464490 (LWP 3223)]
Pipeline is live and does not need PREROLL ...
[New Thread 0x76aff490 (LWP 3224)]
Progress: (open) Opening Stream
Progress: (connect) Connecting to rtsp://192.168.203.15:8554/test
[New Thread 0x760ff490 (LWP 3225)]
[New Thread 0x7575b490 (LWP 3226)]
Progress: (open) Retrieving server options
Progress: (open) Retrieving media info
Progress: (request) SETUP stream 0

Thread 2 "task0" received signal SIGSEGV, Segmentation fault.
[Switching to Thread 0x77464490 (LWP 3223)]
0x77ba96f8 in __GI_strchr (s=<optimized out>, c_in=<optimized out>)
    at strchr.c:154
154	strchr.c: No such file or directory.
(gdb) bt full
#0  0x77ba96f8 in __GI_strchr (s=<optimized out>, c_in=<optimized out>)
    at strchr.c:154
        char_ptr = <optimized out>
        longword_ptr = 0x3ec
        longword = <optimized out>
        magic_bits = 2130640639
        charmask = 976894522
        c = 58 ':'
#1  0x77e33c08 in g_param_spec_pool_lookup ()
   from /lib/mips-linux-gnu/libgobject-2.0.so.0
No symbol table info available.
#2  0x77e2db38 in g_object_set_valist ()
   from /lib/mips-linux-gnu/libgobject-2.0.so.0
No symbol table info available.
Backtrace stopped: frame did not save the PC

        This looks a bit different than with musl in openwrt, after I installed some debug symbols there is also the hint with g_param_spec_pool_lookup.

        Hope this helps. If more is needed, I will provide.

        Kind regards,

        André

      • Sebastian Dröge
        Sebastian Dröge @slomo ·
        Owner

        You don't have any debug symbols for GLib and probably also not GStreamer and gst-plugins-base/good installed. The main question here is where this actually is called from, which we can't possibly know here :)

      • ddimension
        ddimension @ddimension ·
        Author

        Hi!

        These are the debug symbol packages installed:

        gstreamer1.0-plugins-base-dbg
gstreamer1.0-plugins-good-dbg
libgstreamer1.0-0-dbg
gstreamer1.0-rtsp-dbg
libgstrtspserver-1.0-0-dbg
libc..

        I just search for glib debug symbols, but they are missing. Damn. But shouldn't that be enough, usually? Do you have an idea what I could do to retrieve the missing information?

        Kind regards, André

        Edited by ddimension
      • Sebastian Dröge
        Sebastian Dröge @slomo ·
        Owner

        Install libglib2.0-0-dbgsym from deb http://debug.mirrors.debian.org/debian-debug/ unstable-debug main

      • ddimension
        ddimension @ddimension ·
        Author

        Thanks for the hint. Always something new to learn. Finally the full backtrace:

        #0  0x77ba96f8 in __GI_strchr (s=<optimized out>, c_in=<optimized out>)
    at strchr.c:154
        char_ptr = <optimized out>
        longword_ptr = 0x3ec
        longword = <optimized out>
        magic_bits = 2130640639
        charmask = 976894522
        c = 58 ':'
#1  0x77e33c08 in g_param_spec_pool_lookup (pool=0x55577080, 
    param_name=0x3e8 <error: Cannot access memory at address 0x3e8>, 
    owner_type=1991398376, walk_ancestors=1) at ../../../gobject/gparam.c:1071
        pspec = <optimized out>
        delim = <optimized out>
        __FUNCTION__ = "g_param_spec_pool_lookup"
#2  0x77e2db38 in g_object_set_valist (object=0x76b2b070, 
    first_property_name=<optimized out>, var_args=0x774639b0)
    at ../../../gobject/gobject.c:2289
        value = {g_type = 0, data = {{v_int = 0, v_uint = 0, v_long = 0, 
              v_ulong = 0, v_int64 = 0, v_uint64 = 0, v_float = 0, 
              v_double = 0, v_pointer = 0x0}, {v_int = 0, v_uint = 0, 
              v_long = 0, v_ulong = 0, v_int64 = 0, v_uint64 = 0, v_float = 0, 
              v_double = 0, v_pointer = 0x0}}}
        pspec = <optimized out>
        error = 0x0
        nqueue = <optimized out>
        name = <optimized out>
        __FUNCTION__ = "g_object_set_valist"
#3  0x77e2e8b4 in g_object_set (_object=0x76b2b070, first_property_name=0x7799e7fc "max-rtcp-rtp-time-diff") at ../../../gobject/gobject.c:2473
        object = 0x76b2b070
        var_args = 0x774639a8
        __FUNCTION__ = "g_object_set"
#4  0x7798b03c in gst_rtspsrc_stream_configure_manager (transport=0x77463a30, stream=0x76b203e8, src=0x5562a0d8) at gstrtspsrc.c:3546
        klass = 0x76b25a78
        manager = 0x7792b1a0 "rtpbin"
        ret = <optimized out>
        name = <optimized out>
        manager = <optimized out>
        name = <optimized out>
        ret = <optimized out>
        __func__ = "gst_rtspsrc_stream_configure_manager"
        _g_boolean_var_ = <optimized out>
        klass = <optimized out>
        max_ts_offset = <optimized out>
        _g_boolean_var_ = <optimized out>
        rtpsession = <optimized out>
        rtp_profile = <optimized out>
        _g_boolean_var_ = <optimized out>
        _g_boolean_var_ = <optimized out>
        _g_boolean_var_ = <optimized out>
        _g_boolean_var_ = <optimized out>
        _g_boolean_var_ = <optimized out>
        _g_boolean_var_ = <optimized out>
        _g_boolean_var_ = <optimized out>
#5  gst_rtspsrc_stream_configure_transport (transport=0x77463a30, stream=0x76b203e8) at gstrtspsrc.c:4272
        outpad = 0x0
        template = <optimized out>
        src = 0x5562a0d8
        media_type = 0x7792b18c "application/x-rtp"
        name = <optimized out>
        i = <optimized out>
        len = <optimized out>
        src = <optimized out>
        outpad = <optimized out>
        template = <optimized out>
        name = <optimized out>
        media_type = <optimized out>
        i = <optimized out>
        len = <optimized out>
        __func__ = "gst_rtspsrc_stream_configure_transport"
        _g_boolean_var_ = <optimized out>
        _g_boolean_var_ = <optimized out>
        s = <optimized out>
        item = <optimized out>
        _g_boolean_var_ = <optimized out>
        _g_boolean_var_ = <optimized out>
        _g_boolean_var_ = <optimized out>
        _g_boolean_var_ = <optimized out>
#6  gst_rtsp_src_setup_stream_from_response (src=<optimized out>, stream=0x76b203e8, response=0x77463bd4, protocols=<optimized out>, retry=0, rtpport=0x77463b8c, rtcpport=0x77463b90) at gstrtspsrc.c:6563
        resptrans = 0x76b157a0 "RTP/AVP;unicast;client_port=51426-51427;server_port=46628-46629;ssrc=C6EB13B6;mode=\"PLAY\""
        transport = {trans = GST_RTSP_TRANS_RTP, profile = GST_RTSP_PROFILE_AVP, lower_transport = GST_RTSP_LOWER_TRANS_UDP, destination = 0x0, source = 0x0, layers = 0, mode_play = 1, mode_record = 0, append = 0, interleaved = {min = -1, max = -1}, ttl = 0, port = {min = -1, max = -1}, client_port = {min = 51426, max = 51427}, server_port = {min = 46628, max = 46629}, ssrc = 3337294774, _gst_reserved = {0x0, 0x0, 0x0, 0x0}}
        __func__ = "gst_rtsp_src_setup_stream_from_response"
#7  0x7798dd78 in gst_rtspsrc_setup_streams_start (src=<optimized out>, async=1) at gstrtspsrc.c:6927
        conninfo = 0x5562a3c0
        transports = 0x76b22d10 "RTP/AVP;unicast;client_port=51426-51427"
        mask = 0
        retry = 0
        selected = 1
        caps = <optimized out>
        walk = 0x76b14600
        res = GST_RTSP_OK
        request = {type = GST_RTSP_MESSAGE_REQUEST, type_data = {request = {method = GST_RTSP_SETUP, uri = 0x76b204e0 "rtsp://192.168.203.15:8554/test/stream=0", version = GST_RTSP_VERSION_1_0}, response = {code = 256, reason = 0x76b204e0 "rtsp://192.168.203.15:8554/test/stream=0", version = GST_RTSP_VERSION_1_0}, data = {channel = 0 '\000'}}, hdr_fields = 0x76b1ff80, body = 0x0, body_size = 0, _gst_reserved = {0x0, 0x0, 0x0, 0x0}}
        response = {type = GST_RTSP_MESSAGE_RESPONSE, type_data = {request = {method = (GST_RTSP_OPTIONS | GST_RTSP_RECORD | GST_RTSP_REDIRECT), uri = 0x76b23540 "OK", version = GST_RTSP_VERSION_1_0}, response = {code = GST_RTSP_STS_OK, reason = 0x76b23540 "OK", version = GST_RTSP_VERSION_1_0}, data = {channel = 0 '\000'}}, hdr_fields = 0x76b1ffc0, body = 0x0, body_size = 0, _gst_reserved = {0x0, 0x0, 0x0, 0x0}}
        stream = 0x76b203e8
        protocols = GST_RTSP_LOWER_TRANS_UDP
        code = GST_RTSP_STS_OK
        unsupported_real = 0
        rtpport = 0
        rtcpport = 0
        url = 0x76b04e50
        hval = <optimized out>
        pipelined_request_id = 0x0
        __func__ = "gst_rtspsrc_setup_streams_start"
#8  0x77990ff0 in gst_rtspsrc_open_from_sdp (async=1, sdp=<optimized out>, src=0x5562a0d8) at gstrtspsrc.c:7286
        res = <optimized out>
        i = <optimized out>
        n_streams = 1
        res = <optimized out>
        i = <optimized out>
        n_streams = <optimized out>
        __func__ = "gst_rtspsrc_open_from_sdp"
        range = <optimized out>
        gstclock = <optimized out>
        control = <optimized out>
        _g_boolean_var_ = <optimized out>
        _g_boolean_var_ = <optimized out>
#9  gst_rtspsrc_open (src=0x5562a0d8, async=1) at gstrtspsrc.c:7532
        ret = <optimized out>
        __func__ = "gst_rtspsrc_open"
#10 0x77996ee8 in gst_rtspsrc_thread (src=0x5562a0d8) at gstrtspsrc.c:8352
        cmd = 1
        __func__ = "gst_rtspsrc_thread"
#11 0x77f47f60 in gst_task_func (task=0x55633828) at gsttask.c:332
        lock = 0x5562a1d8
        tself = 0x5562ce30
        priv = 0x55633800
        __PRETTY_FUNCTION__ = "gst_task_func"
#12 0x77d6f098 in g_thread_pool_thread_proxy (data=<optimized out>) at ../../../glib/gthreadpool.c:307
        task = 0x55628e18
        pool = 0x55580c00
#13 0x77d6e168 in g_thread_proxy (data=0x5562ce30) at ../../../glib/gthread.c:784
        thread = 0x5562ce30
        __FUNCTION__ = "g_thread_proxy"
        _g_boolean_var_ = <optimized out>
#14 0x77cb9ce8 in start_thread (arg=0x7fffc4d8) at pthread_create.c:486
        ret = <optimized out>
        start = <optimized out>
        pd = 0x7fffc4d8
        unwind_buf = {cancel_jmp_buf = {{jmp_buf = {{__pc = 0x77cb9cb4 <start_thread+180>, __sp = 0x77463f38, __regs = {2001093776, 2147468504, 2147468386, 8388608, 2001093776, 2009980928, 2001094944, 2013260540}, __fp = 0x77463f38, __gp = 0x77cb6e20, __glibc_reserved1 = 0, __fpregs = {-nan(0xfffffffffffff), -nan(0xfffffffffffff), -nan(0xfffffffffffff), -nan(0xfffffffffffff), -nan(0xfffffffffffff), -nan(0xfffffffffffff)}}}, mask_was_saved = 0}}, priv = {pad = {0x0, 0x0, 0x0, 0x0}, data = {prev = 0x0, cleanup = 0x0, canceltype = 0}}}
        not_first_call = <optimized out>
#15 0x77c19528 in __thread_start () at ../sysdeps/unix/sysv/linux/mips/clone.S:135
      • Sebastian Dröge mentioned in commit slomo/gst-plugins-good@459e76a3

        mentioned in commit slomo/gst-plugins-good@459e76a3

      • Sebastian Dröge mentioned in merge request !605 (merged)

        mentioned in merge request !605 (merged)

      • Sebastian Dröge
        Sebastian Dröge @slomo ·
        Owner

        Thanks! !605 (merged) probably fixes it. Can you confirm?

      • ddimension
        ddimension @ddimension ·
        Author

        Wow, that's fast. And it works, rtspsrc does not segfault anymore!

        Thank you very much!

      • ddimension closed

        closed

      • Sebastian Dröge mentioned in commit slomo/gst-plugins-good@b94b9988

        mentioned in commit slomo/gst-plugins-good@b94b9988

      • Sebastian Dröge mentioned in commit tpm/gst-plugins-good@e631c622

        mentioned in commit tpm/gst-plugins-good@e631c622

      • Sebastian Dröge mentioned in commit tpm/gst-plugins-good@68dd1ee9

        mentioned in commit tpm/gst-plugins-good@68dd1ee9

      Please register or sign in to reply