Bug #238
Crash when tuning to channel
0%
Description
If my tvheadend server is idle for some time and then tunes into or switches between channels, it crashes with a SIGSEGV. I attached the complete log output from valgrind.
Files
History
Updated by George - over 14 years ago
I have the same problem since the last few builds... (using svn on a daily basis on 10.04 Ubuntu)
Updated by Andreas Smas about 14 years ago
I need a gdb backtrack to figure this out
See tvheadendcrash
Updated by RoboSK - about 14 years ago
[INFO]:subscription: "192.168.1.102 [ XBMC Media Center ]" unsubscribing from "STV3"
[INFO]:subscription: "192.168.1.102 [ XBMC Media Center ]" subscribing on "STV2", weight: 150, adapter: "Tevii S660 USB", network: "Skylink", mux: "Skylink: 12,565,000 kHz Horizontal (Port 1, Universal LNB - Astra 23.5)", provider: "Skylink", service: "STV2", quality: 100
[INFO]:cwc: Obtained key for for service "STV2" in 9 ms
tvheadend: malloc.c:3574: mremap_chunk: Assertion @((size + offset) & (mp_.pagesize-1)) == 0' failed.
Program received signal SIGABRT, Aborted.
[Switching to Thread 0xb65b8b70 (LWP 1701)]
0xb7fe1424 in +kernel_vsyscall ()
(gdb) bt full
#0 0xb7fe1424 in +kernel_vsyscall ()
No symbol table info available.
#1 0xb7e34d61 in raise () from /lib/libc.so.6
No symbol table info available.
#2 0xb7e365ee in abort () from /lib/libc.so.6
No symbol table info available.
#3 0xb7e769c4 in ?? () from /lib/libc.so.6
No symbol table info available.
#4 0xb7e79ec5 in ?? () from /lib/libc.so.6
No symbol table info available.
#5 0xb7e7b3aa in realloc () from /lib/libc.so.6
No symbol table info available.
#6 0x0804ba08 in ?? ()
No symbol table info available.
#7 0x0805acff in ?? ()
No symbol table info available.
#8 0x0805d2cf in ?? ()
No symbol table info available.
#9 0x0806f410 in ?? ()
No symbol table info available.
#10 0x0805d765 in ?? ()
No symbol table info available.
#11 0x0807de48 in ?? ()
---Type <return> to continue, or q <return> to quit---
No symbol table info available.
#12 0xb7f5be60 in start_thread () from /lib/libpthread.so.0
No symbol table info available.
#13 0xb7ed920e in clone () from /lib/libc.so.6
No symbol table info available.
(gdb)
Updated by RoboSK - about 14 years ago
- glibc detected * /usr/bin/tvheadend: realloc(): invalid old size: 0x0840e920 *
tcp_server: epoll_wait: Interrupted system call
tcp_server: epoll_wait: Interrupted system call
h7. Backtrace:
/lib/libc.so.6(+0x6c7b1)[0xb7e767b1]
/lib/libc.so.6(+0x6fd9d)[0xb7e79d9d]
/lib/libc.so.6(realloc+0xe9)[0xb7e7b329]
/usr/bin/tvheadend[0x804ba08]
/usr/bin/tvheadend[0x805acff]
/usr/bin/tvheadend[0x805d2cf]
/usr/bin/tvheadend[0x806f410]
/usr/bin/tvheadend[0x805d765]
/usr/bin/tvheadend[0x807de48]
/lib/libpthread.so.0(+0x5e60)[0xb7f5be60]
/lib/libc.so.6(clone+0x5e)[0xb7ed920e]
h7. Memory map:
08048000-081e6000 r-xp 00000000 08:01 2741 /usr/bin/tvheadend
081e6000-081e8000 rw-p 0019d000 08:01 2741 /usr/bin/tvheadend
081e8000-0841d000 rw-p 00000000 00:00 0 [heap]
b0c00000-b0c21000 rw-p 00000000 00:00 0
b0c21000-b0d00000 ---p 00000000 00:00 0
b0d5c000-b0d77000 r-xp 00000000 08:01 16712 /usr/lib/libgcc_s.so.1
b0d77000-b0d78000 rw-p 0001a000 08:01 16712 /usr/lib/libgcc_s.so.1
b0d94000-b0d95000 ---p 00000000 00:00 0
b0d95000-b1595000 rw-p 00000000 00:00 0
b1595000-b1596000 ---p 00000000 00:00 0
b1596000-b1d96000 rw-p 00000000 00:00 0
b1d96000-b1d97000 ---p 00000000 00:00 0
b1d97000-b2597000 rw-p 00000000 00:00 0
b2597000-b2598000 ---p 00000000 00:00 0
b2598000-b2d98000 rw-p 00000000 00:00 0
b2d98000-b2d99000 ---p 00000000 00:00 0
b2d99000-b3599000 rw-p 00000000 00:00 0
b3599000-b359a000 ---p 00000000 00:00 0
b359a000-b3d9a000 rw-p 00000000 00:00 0
b3d9a000-b3d9b000 ---p 00000000 00:00 0
b3d9b000-b459b000 rw-p 00000000 00:00 0
b459b000-b459c000 ---p 00000000 00:00 0
b459c000-b4d9c000 rw-p 00000000 00:00 0
b4d9c000-b4d9d000 ---p 00000000 00:00 0
b4d9d000-b559d000 rw-p 00000000 00:00 0
b559d000-b55a1000 r-xp 00000000 08:01 2938 /usr/lib/gconv/ISO_6937.so
b55a1000-b55a2000 r--p 00003000 08:01 2938 /usr/lib/gconv/ISO_6937.so
b55a2000-b55a3000 rw-p 00004000 08:01 2938 /usr/lib/gconv/ISO_6937.so
b55a3000-b55a5000 r-xp 00000000 08:01 3031 /usr/lib/gconv/ISO8859-15.so
b55a5000-b55a6000 r--p 00001000 08:01 3031 /usr/lib/gconv/ISO8859-15.so
b55a6000-b55a7000 rw-p 00002000 08:01 3031 /usr/lib/gconv/ISO8859-15.so
b55a7000-b55a9000 r-xp 00000000 08:01 3081 /usr/lib/gconv/ISO8859-14.so
b55a9000-b55aa000 r--p 00001000 08:01 3081 /usr/lib/gconv/ISO8859-14.so
b55aa000-b55ab000 rw-p 00002000 08:01 3081 /usr/lib/gconv/ISO8859-14.so
b55ab000-b55ad000 r-xp 00000000 08:01 2847 /usr/lib/gconv/ISO8859-10.so
b55ad000-b55ae000 r--p 00001000 08:01 2847 /usr/lib/gconv/ISO8859-10.so
b55ae000-b55af000 rw-p 00002000 08:01 2847 /usr/lib/gconv/ISO8859-10.so
b55af000-b55b1000 r-xp 00000000 08:01 2981 /usr/lib/gconv/ISO8859-9.so
b55b1000-b55b2000 r--p 00001000 08:01 2981 /usr/lib/gconv/ISO8859-9.so
b55b2000-b55b3000 rw-p 00002000 08:01 2981 /usr/lib/gconv/ISO8859-9.so
b55b3000-b55b5000 r-xp 00000000 08:01 2859 /usr/lib/gconv/ISO8859-8.so
b55b5000-b55b6000 r--p 00001000 08:01 2859 /usr/lib/gconv/ISO8859-8.so
b55b6000-b55b7000 rw-p 00002000 08:01 2859 /usr/lib/gconv/ISO8859-8.so
b55b7000-b55b8000 ---p 00000000 00:00 0
b55b8000-b5db8000 rw-p 00000000 00:00 0
b5db8000-b5db9000 ---p 00000000 00:00 0
b5db9000-b65b9000 rw-p 00000000 00:00 0
b65b9000-b65ba000 ---p 00000000 00:00 0
b65ba000-b6dba000 rw-p 00000000 00:00 0
b6dba000-b6dbb000 ---p 00000000 00:00 0
b6dbb000-b75bb000 rw-p 00000000 00:00 0
b75bb000-b75bc000 ---p 00000000 00:00 0
b75bc000-b7dbc000 rw-p 00000000 00:00 0
b7dbc000-b7dc6000 r-xp 00000000 08:01 2651 /lib/libnss_files-2.12.so
b7dc6000-b7dc7000 r--p 00009000 08:01 2651 /lib/libnss_files-2.12.so
b7dc7000-b7dc8000 rw-p 0000a000 08:01 2651 /lib/libnss_files-2.12.so
b7dc8000-b7dca000 rw-p 00000000 00:00 0
b7dca000-b7dcc000 r-xp 00000000 08:01 2753 /lib/libdl-2.12.so
b7dcc000-b7dcd000 r--p 00001000 08:01 2753 /lib/libdl-2.12.so
b7dcd000-b7dce000 rw-p 00002000 08:01 2753 /lib/libdl-2.12.so
b7dce000-b7e05000 r-xp 00000000 08:01 7984 /usr/lib/libdbus-1.so.3.4.0
b7e05000-b7e06000 r--p 00036000 08:01 7984 /usr/lib/libdbus-1.so.3.4.0
b7e06000-b7e07000 rw-p 00037000 08:01 7984 /usr/lib/libdbus-1.so.3.4.0
b7e07000-b7e09000 r-xp 00000000 08:01 25045 /usr/lib/libssp.so.0.0.0
b7e09000-b7e0a000 rw-p 00001000 08:01 25045 /usr/lib/libssp.so.0.0.0
b7e0a000-b7f4f000 r-xp 00000000 08:01 2736 /lib/libc-2.12.so
b7f4f000-b7f51000 r--p 00145000 08:01 2736 /lib/libc-2.12.so
b7f51000-b7f52000 rw-p 00147000 08:01 2736 /lib/libc-2.12.so
b7f52000-b7f56000 rw-p 00000000 00:00 0
b7f56000-b7f6b000 r-xp 00000000 08:01 2732 /lib/libpthread-2.12.so
b7f6b000-b7f6c000 ---p 00015000 08:01 2732 /lib/libpthread-2.12.so
b7f6c000-b7f6d000 r--p 00015000 08:01 2732 /lib/libpthread-2.12.so
b7f6d000-b7f6e000 rw-p 00016000 08:01 2732 /lib/libpthread-2.12.so
b7f6e000-b7f70000 rw-p 00000000 00:00 0
b7f70000-b7f7e000 r-xp 00000000 08:01 18722 /usr/lib/libavahi-client.so.3.2.5
b7f7e000-b7f7f000 rw-p 0000d000 08:01 18722 /usr/lib/libavahi-client.so.3.2.5
b7f7f000-b7f89000 r-xp 00000000 08:01 18700 /usr/lib/libavahi-common.so.3.5.1
b7f89000-b7f8a000 rw-p 00009000 08:01 18700 /usr/lib/libavahi-common.so.3.5.1
b7f8a000-b7f92000 r-xp 00000000 08:01 2615 /lib/libcrypt-2.12.so
b7f92000-b7f93000 r--p 00007000 08:01 2615 /lib/libcrypt-2.12.so
b7f93000-b7f94000 rw-p 00008000 08:01 2615 /lib/libcrypt-2.12.so
b7f94000-b7fbb000 rw-p 00000000 00:00 0
b7fbb000-b7fc2000 r-xp 00000000 08:01 2710 /lib/librt-2.12.so
b7fc2000-b7fc3000 r--p 00006000 08:01 2710 /lib/librt-2.12.so
b7fc3000-b7fc4000 rw-p 00007000 08:01 2710 /lib/librt-2.12.so
b7fc5000-b7fc7000 r-xp 00000000 08:01 3078 /usr/lib/gconv/ISO8859-7.so
b7fc7000-b7fc8000 r--p 00001000 08:01 3078 /usr/lib/gconv/ISO8859-7.so
b7fc8000-b7fc9000 rw-p 00002000 08:01 3078 /usr/lib/gconv/ISO8859-7.so
b7fc9000-b7fcb000 r-xp 00000000 08:01 2945 /usr/lib/gconv/ISO8859-6.so
b7fcb000-b7fcc000 r--p 00001000 08:01 2945 /usr/lib/gconv/ISO8859-6.so
b7fcc000-b7fcd000 rw-p 00002000 08:01 2945 /usr/lib/gconv/ISO8859-6.so
b7fcd000-b7fcf000 r-xp 00000000 08:01 2905 /usr/lib/gconv/ISO8859-5.so
b7fcf000-b7fd0000 r--p 00001000 08:01 2905 /usr/lib/gconv/ISO8859-5.so
b7fd0000-b7fd1000 rw-p 00002000 08:01 2905 /usr/lib/gconv/ISO8859-5.so
b7fd1000-b7fd3000 r-xp 00000000 08:01 2954 /usr/lib/gconv/ISO8859-4.so
b7fd3000-b7fd4000 r--p 00001000 08:01 2954 /usr/lib/gconv/ISO8859-4.so
b7fd4000-b7fd5000 rw-p 00002000 08:01 2954 /usr/lib/gconv/ISO8859-4.so
b7fd5000-b7fd7000 r-xp 00000000 08:01 2977 /usr/lib/gconv/ISO8859-3.so
b7fd7000-b7fd8000 r--p 00001000 08:01 2977 /usr/lib/gconv/ISO8859-3.so
b7fd8000-b7fd9000 rw-p 00002000 08:01 2977 /usr/lib/gconv/ISO8859-3.so
b7fd9000-b7fdb000 r-xp 00000000 08:01 2895 /usr/lib/gconv/ISO8859-2.so
b7fdb000-b7fdc000 r--p 00001000 08:01 2895 /usr/lib/gconv/ISO8859-2.so
b7fdc000-b7fdd000 rw-p 00002000 08:01 2895 /usr/lib/gconv/ISO8859-2.so
b7fdd000-b7fde000 r-xp 00000000 08:01 3025 /usr/lib/gconv/ISO8859-1.so
b7fde000-b7fdf000 r--p 00000000 08:01 3025 /usr/lib/gconv/ISO8859-1.so
b7fdf000-b7fe0000 rw-p 00001000 08:01 3025 /usr/lib/gconv/ISO8859-1.so
b7fe0000-b7fe1000 rw-p 00000000 00:00 0
b7fe1000-b7fe2000 r-xp 00000000 00:00 0 [vdso]
b7fe2000-b7ffe000 r-xp 00000000 08:01 2752 /lib/ld-2.12.so
b7ffe000-b7fff000 r--p 0001b000 08:01 2752 /lib/ld-2.12.so
b7fff000-b8000000 rw-p 0001c000 08:01 2752 /lib/ld-2.12.so
bffdf000-c0000000 rw-p 00000000 00:00 0 [stack]
Program received signal SIGABRT, Aborted.
[Switching to Thread 0xb65b8b70 (LWP 1800)]
0xb7fe1424 in +kernel_vsyscall ()
(gdb)
(gdb) info reg
eax 0x0 0
ecx 0x708 1800
edx 0x6 6
ebx 0x700 1792
esp 0xb65b7150 0xb65b7150
ebp 0xb65b7168 0xb65b7168
esi 0x0 0
edi 0xb7f50ff4 -1208676364
eip 0xb7fe1424 0xb7fe1424 <+kernel_vsyscall+16>
eflags 0x206 [ PF IF ]
cs 0x73 115
ss 0x7b 123
ds 0x7b 123
es 0x7b 123
fs 0x0 0
gs 0x33 51
(gdb)
(gdb) disassemble $pc-32,$pc+32
Dump of assembler code from 0xb7fe1404 to 0xb7fe1444:
0xb7fe1404 <+kernel_sigreturn+4>: add %al,(%eax)
0xb7fe1406 <+kernel_sigreturn+6>: int $0x80
0xb7fe1408 <+kernel_sigreturn+8>: nop
0xb7fe1409: lea 0x0(%esi),%esi
0xb7fe140c <+kernel_rt_sigreturn+0>: mov $0xad,%eax
0xb7fe1411 <+kernel_rt_sigreturn+5>: int $0x80
0xb7fe1413 <+kernel_rt_sigreturn+7>: nop
0xb7fe1414 <+kernel_vsyscall+0>: push %ecx
0xb7fe1415 <+kernel_vsyscall+1>: push %edx
0xb7fe1416 <+kernel_vsyscall+2>: push %ebp
0xb7fe1417 <+kernel_vsyscall+3>: mov %esp,%ebp
0xb7fe1419 <+kernel_vsyscall+5>: sysenter
0xb7fe141b <+kernel_vsyscall+7>: nop
0xb7fe141c <+kernel_vsyscall+8>: nop
0xb7fe141d <+kernel_vsyscall+9>: nop
0xb7fe141e <+kernel_vsyscall+10>: nop
0xb7fe141f <+kernel_vsyscall+11>: nop
0xb7fe1420 <+kernel_vsyscall+12>: nop
0xb7fe1421 <+kernel_vsyscall+13>: nop
0xb7fe1422 <+kernel_vsyscall+14>: jmp 0xb7fe1417 <+kernel_vsyscall+3>
=> 0xb7fe1424 <+kernel_vsyscall+16>: pop %ebp
0xb7fe1425 <+kernel_vsyscall+17>: pop %edx
---Type <return> to continue, or q <return> to quit---
0xb7fe1426 <+kernel_vsyscall+18>: pop %ecx
0xb7fe1427 <+kernel_vsyscall+19>: ret
0xb7fe1428: add %ch,(%esi)
0xb7fe142a: jae 0xb7fe1494
0xb7fe142c: jae 0xb7fe14a2
0xb7fe142e: jb 0xb7fe14a4
0xb7fe1430: popa
0xb7fe1431: bound %eax,(%eax)
0xb7fe1433: cs
0xb7fe1434: push $0x687361
0xb7fe1439: cs
0xb7fe143a: fs
0xb7fe143b: jns 0xb7fe14ab
0xb7fe143d: jae 0xb7fe14b8
0xb7fe143f: insl (%dx),%es:(%edi)
0xb7fe1440: add %ch,(%esi)
0xb7fe1442: fs
0xb7fe1443: jns 0xb7fe14b3
End of assembler dump.
(gdb)
(gdb) bt full
#0 0xb7fe1424 in +kernel_vsyscall ()
No symbol table info available.
#1 0xb7e34d61 in raise () from /lib/libc.so.6
No symbol table info available.
#2 0xb7e365ee in abort () from /lib/libc.so.6
No symbol table info available.
#3 0xb7e707ed in ?? () from /lib/libc.so.6
No symbol table info available.
#4 0xb7e767b1 in ?? () from /lib/libc.so.6
No symbol table info available.
#5 0xb7e79d9d in ?? () from /lib/libc.so.6
No symbol table info available.
#6 0xb7e7b329 in realloc () from /lib/libc.so.6
No symbol table info available.
#7 0x0804ba08 in ?? ()
No symbol table info available.
#8 0x0805acff in ?? ()
No symbol table info available.
#9 0x0805d2cf in ?? ()
No symbol table info available.
#10 0x0806f410 in ?? ()
No symbol table info available.
#11 0x0805d765 in ?? ()
---Type <return> to continue, or q <return> to quit---
No symbol table info available.
#12 0x0807de48 in ?? ()
No symbol table info available.
#13 0xb7f5be60 in start_thread () from /lib/libpthread.so.0
No symbol table info available.
#14 0xb7ed920e in clone () from /lib/libc.so.6
No symbol table info available.
(gdb)
Updated by Adam Sutton over 12 years ago
- Status changed from New to Invalid
- Found in version set to unknown
Too old, probably already fixed, if still a problem re-submit.