Actions
Bug #283
closedtvheadend segfault
Start date:
Due date:
% Done:
0%
Estimated time:
Found in version:
Affected Versions:
Description
running tvheadend svn-5341. Think every 12 hours it segfaults. I have attached the binary (for Fedora 13 i386, 2.6.33.6-147.2.4.fc13.i686) and the tvheadend log file (rsyslog filter).
I started running the binary in gdb, hopefully this'll give a more detailed report.
Files
Updated by Jouk Hettema - about 15 years ago
I have upgraded the binary to the newest SVN version (5400) and the segfault stays. I was recording 2 or more channels concurrently on the same mux while it segfaulted. Below the output of gdb:
[WARNING]:cwc: Got unexpected ECM reply (seqno: 240)
[WARNING]:cwc: Got unexpected ECM reply (seqno: 244)
[WARNING]:cwc: Got unexpected ECM reply (seqno: 245)
[WARNING]:cwc: Got unexpected ECM reply (seqno: 246)
[WARNING]:cwc: Got unexpected ECM reply (seqno: 247)
[WARNING]:cwc: Got unexpected ECM reply (seqno: 249)
[WARNING]:cwc: Got unexpected ECM reply (seqno: 250)
[WARNING]:cwc: Got unexpected ECM reply (seqno: 251)
[WARNING]:cwc: Got unexpected ECM reply (seqno: 248)
[WARNING]:cwc: Got unexpected ECM reply (seqno: 252)
[WARNING]:cwc: Got unexpected ECM reply (seqno: 253)
[WARNING]:cwc: Got unexpected ECM reply (seqno: 254)
[WARNING]:cwc: Got unexpected ECM reply (seqno: 255)
[DEBUG]:cwc: Received ECM reply for service "RTL7" even: 52.06.4f.a7.32.94.19.df odd: 43.9c.78.57.c3.07.2d.f7 (seqno: 257 Req delay: 5786 ms)
[DEBUG]:cwc: Received ECM reply for service "Discovery" even: d8.a4.77.f3.68.87.03.f2 odd: 14.3f.1e.71.d7.07.65.43 (seqno: 258 Req delay: 5786 ms)
[DEBUG]:cwc: Received ECM reply for service "Animal Planet" even: e0.1b.98.93.f8.4c.72.b6 odd: 51.04.97.ec.56.51.bb.62 (seqno: 259 Req delay: 5786 ms)
[DEBUG]:cwc: Received NOK for service "RTL7" (seqno: 256 Req delay: 5788 ms)
Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 0xb5ffeb70 (LWP 13717)]
0x0805b232 in parse_sc (t=0x823ec48, st=0x823efb0, data=0x830a354 "", len=184, vp=0x805b4e0 <parse_mpeg2video>) at /usr/src/tvheadend/src/parsers.c:345
345 st->st_buf.sb_data[st->st_buf.sb_ptr++] = sc >> 24;
Missing separate debuginfos, use: debuginfo-install glibc-2.12-3.i686 nss-softokn-freebl-3.12.6-3.fc13.i686
(gdb)
----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
(gdb) info reg
eax 0x0 0
ecx 0x0 0
edx 0x0 0
ebx 0x823efb0 136572848
esp 0xb5ffd940 0xb5ffd940
ebp 0xb5ffd998 0xb5ffd998
esi 0x1f 31
edi 0x100 256
eip 0x805b232 0x805b232 <parse_sc+418>
eflags 0x10246 [ PF ZF IF RF ]
cs 0x73 115
ss 0x7b 123
ds 0x7b 123
es 0x7b 123
fs 0x0 0
gs 0x33 51
(gdb)
----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
(gdb) disassemble $pc-32,$pc+32
Dump of assembler code from 0x805b212 to 0x805b252:
0x0805b212 <parse_sc+386>: mov $0x0,%dl
0x0805b214 <parse_sc+388>: add %al,(%eax)
0x0805b216 <parse_sc+390>: mov -0x20(%ebp),%eax
0x0805b219 <parse_sc+393>: mov %eax,(%esp)
0x0805b21c <parse_sc+396>: call 0x804bab0 <sbuf_reset>
0x0805b221 <parse_sc+401>: mov 0xac(%ebx),%edx
0x0805b227 <parse_sc+407>: mov %edi,%eax
0x0805b229 <parse_sc+409>: mov 0xa8(%ebx),%ecx
0x0805b22f <parse_sc+415>: shr $0x18,%eax
=> 0x0805b232 <parse_sc+418>: mov %al,(%ecx,%edx,1)
0x0805b235 <parse_sc+421>: mov 0xa8(%ebx),%ecx
0x0805b23b <parse_sc+427>: mov %edi,%eax
0x0805b23d <parse_sc+429>: shr $0x10,%eax
0x0805b240 <parse_sc+432>: mov %al,0x1(%ecx,%edx,1)
0x0805b244 <parse_sc+436>: mov 0xa8(%ebx),%ecx
0x0805b24a <parse_sc+442>: mov %edi,%eax
0x0805b24c <parse_sc+444>: shr $0x8,%eax
0x0805b24f <parse_sc+447>: mov %al,0x2(%ecx,%edx,1)
End of assembler dump.
(gdb)
----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
(gdb) bt full
#0 0x0805b232 in parse_sc (t=0x823ec48, st=0x823efb0, data=0x830a354 "", len=184, vp=0x805b4e0 <parse_mpeg2video>) at /usr/src/tvheadend/src/parsers.c:345
sc = 256
i = <value optimized out>
r = <value optimized out>
#1 0x0805d471 in ts_recv_packet0 (t=0x823ec48, st=<value optimized out>, tsb=0x830a350 "GB\003\037") at /usr/src/tvheadend/src/tsdemux.c:123
off = <value optimized out>
pusi = 1
cc = <value optimized out>
error = 0
#2 0x080702d0 in cwc_descramble (td=0x81fc478, t=0x823ec48, st=0x823efb0,
tsb=0xb5ffe0fc "G\002\003\324G\331\354\353\212\333M\264=\212\016\221\341\273U\026%\b\251+\375һ\343\214\024{S2\b \241x\317\036@\335\n!O\377\224xi\223\260\352\006\021\264\364P%\311\301\331V@\tuI\320!f\223p\300\215\376\225:#\360ξ\324\366\355\271\002\221F?ɨ5r\236\367Kי\244\016Ebl") at /usr/src/tvheadend/src/cwc.c:1376
i = <value optimized out>
t0 = 0x830a350 "GB\003\037"
ct = 0x81fc478
r = 140
vec = {0x0, 0x830ee38 "", 0x0}
+PRETTY_FUNCTION+ = "cwc_descramble"
#3 0x0805d95d in ts_recv_packet1 (t=0x823ec48,
tsb=0xb5ffe0fc "G\002\003\324G\331\354\353\212\333M\264=\212\016\221\341\273U\026%\b\251+\375һ\343\214\024{S2\b \241x\317\036@\335\n!O\377\224xi\223\260\352\006\021\264\364P%\311\301\331V@\tuI\320!f\223p\300\215\376\225:#\360ξ\324\366\355\271\002\221F?ɨ5r\236\367Kי\244\016Ebl", pcrp=0x0) at /usr/src/tvheadend/src/tsdemux.c:240
st = 0x823efb0
n = 1
m = <value optimized out>
r = <value optimized out>
td = 0x81fc478
error = 0
#4 0x080802f8 in dvb_adapter_input_dvr (aux=0x81f18b8) at /usr/src/tvheadend/src/dvb/dvb_adapter.c:540
tda = 0x81f18b8
fd = 12
i = <value optimized out>
r = 1880
tsb = "G\002\003\323\070\071Խ{\325=H\335\336\330Ǎ^\242h\t@\265G\212\267\306\322V\222\060f\205\353\335j;\244\310\017'\206K\345\037ao\325\345\003^p\001r\240\340C\373;\276\270\370@Vêk\224꺂<\240\063\211\230\345!\267A\002\325L\367\006\345Y0}\004\216\360?\017F%\327z\332B\034R\213*Q\243C>{4!\030V4\353\243\304\364\353\016s\r'\252ɲq\254\032\351p\316\337\035\331L\375\034\206\006\201Uۯ8\256\353\062\070\225\300\314+\255\365\r\367\t\336\062\352v\367\230\201Ʉ\300\006\"X2\320n4\002_\342\333tΟm\277\223<\340qG\002\006\320È\027һ\305\030\341\071\256z\212fOJ\200\320/\311\066\034 \r\273\223hA\031\245\066\a\301\221\021\252\a}\312\312]\266˧\311\f\311\333z6\b\225;\025.Ţ\346\227\017\r\205\020\270s0\021\005\377\207\244*\277;\350\032\001\332}\000\321x#O\246aY\363\300T%\201\374.\306\321\n\001z\315@\212\277\236\\n\240\330MS\245\067\"*\364.)0%~\006cx\275\300\330-\350\r\352MI]G. 6\243\312aΌؤ\230[\367\372\353S\364\204eaM'\231S\232<#\206\236dd"...
t = 0x823ec48
#5 0x00193919 in start_thread () from /lib/libpthread.so.0
No symbol table info available.
#6 0x002afcbe in clone () from /lib/libc.so.6
No symbol table info available.
(gdb)
I hope this'll give you some more information. If I need to generate more output, please let me know.
kind regards
Jouk
Updated by Jouk Hettema - about 15 years ago
- Found in version set to duplicate
I started a new ticket which has the same cause. http://trac.lonelycoder.com/hts/ticket/315
Actions