Tvheadend

Could you run valgrind on the process?

valgrind --leak-check=full --show-reachable=yes ./build.linux/tvheadend

The problem is that I cannot reproduce this behaviour here and I just don't see any error in the bisected commit. It must be something obvious :-(
I added assert to the current code. Could you test it ?

No changes whatsoever. I don't think your asserts fired.

What could cause a pointer to have this strange "0x500000000" value, in your opinion?

(gdb) bt
#0 mpegts_network_scan_queue_add (mm=mm@entry=0x500000000, weight=weight@entry=2, flags=flags@entry=8192, delay=delay@entry=0)
at src/input/mpegts/mpegts_network_scan.c:214
#1 0x00000000004a40f0 in mpegts_network_class_idlescan_notify (p=0x7fffb40017e0, lang=<optimized out>)
at src/input/mpegts/mpegts_network.c:121
#2 0x0000000000414bf5 in prop_write_values (obj=obj@entry=0x7fffb40017e0, pl=<optimized out>, m=m@entry=0x7fffb4002a00,
optmask=optmask@entry=2, updated=updated@entry=0x0) at src/prop.c:235
#3 0x000000000040eefd in idnode_class_write_values (self=self@entry=0x7fffb40017e0, c=c@entry=0x7fffb4002a00,
optmask=optmask@entry=2, idc=<optimized out>, idc=<optimized out> at src/idnode.c:1066
#4 0x000000000040eee7 in idnode_class_write_values (self=self@entry=0x7fffb40017e0, c=c@entry=0x7fffb4002a00,
optmask=optmask@entry=2, idc=<optimized out>, idc=<optimized out> at src/idnode.c:1065
#5 0x000000000040eee7 in idnode_class_write_values (self=self@entry=0x7fffb40017e0, c=c@entry=0x7fffb4002a00,
optmask=optmask@entry=2, idc=<optimized out>, idc=<optimized out> at src/idnode.c:1065
#6 0x0000000000413c91 in idnode_write0 (self=self@entry=0x7fffb40017e0, c=c@entry=0x7fffb4002a00, optmask=optmask@entry=2,
dosave=dosave@entry=0) at src/idnode.c:1088
#7 0x00000000004a0f63 in mpegts_input_create0 (mi=mi@entry=0x7fffb40017e0, class=class@entry=0x55d920 <dvb_network_dvbt_class>,
uuid=uuid@entry=0x7fffb4002730 "26baa2ee9613f14c91f510127e86b454", c=c@entry=0x7fffb4002a00)
at src/input/mpegts/mpegts_input.c:1688
#8 0x00000000004d3b75 in satip_frontend_create (conf=0x7fffb4002a00, conf@entry=0x7fffb4003e40, sd=sd@entry=0x7fffb4001040,
type=<optimized out>, type@entry=DVB_TYPE_T, v2=v2@entry=0, num=num@entry=1) at src/input/mpegts/satip/satip_frontend.c:1726
#9 0x0000000000409d0b in satip_device_create (info=info@entry=0x7fffe140e390) at src/input/mpegts/satip/satip.c:606
#10 0x00000000004cfdd1 in satip_discovery_http_closed (hc=0xae9b20, errn=<optimized out> at src/input/mpegts/satip/satip.c:930
#11 0x0000000000452a8b in http_client_shutdown (hc=0xae9b20, force=<optimized out>, reconnect=0) at src/httpc.c:157
#12 0x000000000045437c in http_client_finish (hc=hc@entry=0xae9b20) at src/httpc.c:680
#13 0x0000000000454825 in http_client_run (hc=hc@entry=0xae9b20) at src/httpc.c:1046
#14 0x0000000000455013 in http_client_thread (p=<optimized out> at src/httpc.c:1337
#15 0x00000000004165c7 in thread_wrapper (p=0x840f00) at src/wrappers.c:177
#16 0x00007ffff4cbd60a in start_thread () from /lib64/libpthread.so.0
#17 0x00007ffff44edbbd in clone () from /lib64/libc.so.6

Mario D has mm = 0x400000000 instead. Still a very round number..

Could you compile tvh with -Og (replace -O2 with -Og in Makefile) and provide the above backtrace again ?

I had tried this yesterday already but:

CC src/dbus.o
src/descrambler/capmt.c: In function ‘capmt_pid_flush_adapter’:
src/descrambler/capmt.c:430:14: error: ‘ca’ may be used uninitialized in this function [-Werror=maybe-uninitialized]

Hoped that -Og would do the trick, but no.

Will try again removing the -Werror..

Fixed now.

And here you go:

(gdb) bt
#0 mpegts_network_scan_queue_add (mm=mm@entry=0x500000000, weight=weight@entry=2, flags=flags@entry=8192, delay=delay@entry=0)
at src/input/mpegts/mpegts_network_scan.c:214
#1 0x00000000004956eb in mpegts_network_class_idlescan_notify (p=0x7fffb40017e0, lang=<optimized out>)
at src/input/mpegts/mpegts_network.c:121
#2 0x000000000041247a in prop_write_values (obj=obj@entry=0x7fffb40017e0, pl=<optimized out>, m=m@entry=0x7fffb4002a00,
optmask=optmask@entry=2, updated=updated@entry=0x0) at src/prop.c:235
#3 0x000000000040d796 in idnode_class_write_values (self=self@entry=0x7fffb40017e0, idc=0x545e60 <mpegts_network_class>,
c=c@entry=0x7fffb4002a00, optmask=optmask@entry=2) at src/idnode.c:1066
#4 0x000000000040d773 in idnode_class_write_values (self=self@entry=0x7fffb40017e0, idc=0x54b660 <dvb_network_class>,
c=c@entry=0x7fffb4002a00, optmask=optmask@entry=2) at src/idnode.c:1065
#5 0x000000000040d773 in idnode_class_write_values (self=self@entry=0x7fffb40017e0, idc=0x54b520 <dvb_network_dvbt_class>,
c=c@entry=0x7fffb4002a00, optmask=optmask@entry=2) at src/idnode.c:1065
#6 0x000000000041138d in idnode_write0 (self=self@entry=0x7fffb40017e0, c=c@entry=0x7fffb4002a00, optmask=optmask@entry=2,
dosave=dosave@entry=0) at src/idnode.c:1088
#7 0x0000000000492dce in mpegts_input_create0 (mi=mi@entry=0x7fffb40017e0, class=class@entry=0x54b520 <dvb_network_dvbt_class>,
uuid=uuid@entry=0x7fffb4002730 "26baa2ee9613f14c91f510127e86b454", c=c@entry=0x7fffb4002a00)
at src/input/mpegts/mpegts_input.c:1688
#8 0x00000000004c2e08 in satip_frontend_create (conf=0x7fffb4002a00, conf@entry=0x7fffb4003e40, sd=sd@entry=0x7fffb4001040,
type=type@entry=DVB_TYPE_T, v2=v2@entry=0, num=num@entry=1) at src/input/mpegts/satip/satip_frontend.c:1726
#9 0x00000000004be8e8 in satip_device_create (info=info@entry=0x7fffe140e3a0) at src/input/mpegts/satip/satip.c:606
#10 0x00000000004bf046 in satip_discovery_http_closed (hc=0xd53bc0, errn=<optimized out> at src/input/mpegts/satip/satip.c:930
#11 0x0000000000448861 in http_client_shutdown (hc=hc@entry=0xd53bc0, force=force@entry=0, reconnect=reconnect@entry=0)
at src/httpc.c:157
#12 0x000000000044a901 in http_client_finish (hc=hc@entry=0xd53bc0) at src/httpc.c:680
#13 0x000000000044ac56 in http_client_run (hc=hc@entry=0xd53bc0) at src/httpc.c:939
#14 0x000000000044b4db in http_client_thread (p=<optimized out> at src/httpc.c:1337
#15 0x00000000004137c1 in thread_wrapper (p=0x830f00) at src/wrappers.c:177
#16 0x00007ffff4cbd60a in start_thread () from /lib64/libpthread.so.0
#17 0x00007ffff44edbbd in clone () from /lib64/libc.so.6

full:

(gdb) bt full
#0 mpegts_network_scan_queue_add (mm=mm@entry=0x500000000, weight=weight@entry=2, flags=flags@entry=8192, delay=delay@entry=0)
at src/input/mpegts/mpegts_network_scan.c:214
reload = 0
buf = "\220\037\000\264\377\177\000\000\220\037\000\264\377\177\000\000\220\027\000\264\377\177\000\000QoC\000\000\000\000\000\220\037\000\264\377\177\000\000\220\027\000\264\377\177\000\000\005\000\000\000\000\000\000\061\320\334@\341\377\177\000\000\217\340@\341\377\177\000\000\320\334@\341\377\177\000\000\017\000\000\000\000\000\000\000\"\352T\000\000\000\000\000\070\336@\341\377\177\000\000\000\000\000\000\000\000\000\000\005\000\000\000\000\000\000\000@\335@\341\377\177\000\000@\000\000\000\000\000\000\000P\335@\341\377\177\000\000!\000\000\000\000\000\000\000\200\340@\341\377\177\000\000\301\"\277\036\000\200\377\377?\335@\341\377\177\000\000\001\000\000\000\000\000\000\000\005\000\000\000\061", '\000' <repeats 19 times>...
buf2 = "P\341@\341\377\177\000\000 \000\264\377\177\000\000\300\037\000\264\377\177\000\000\300\037\000\264\377\177\000\000\005\000\000\000\000\000\000\000\360\333@\341\377\177\000\000@\000\000\000\000\000\000\000\001\000\000\000\000\000\000\000\003\000\000\000\000\000\000\000\314\353F\364\377\177\000\000\021$\277\036\000\200\377\377\357\333@\341\377\177\000\000\001\000\000\000\000\000\000\000\005\000\000\000\061", '\000' <repeats 19 times>, "\005\000\000\000n\000\000\000P\334@\341\377\177\000\000@\000\000\000\000\000\000\000w\000\000\000|\000\000\000\360\037\000\264\377\177\000\000;\236C\000\000\000\000\000\261#\277\036\000\200\377\377O\334@\341\377\177\000\000\001\000\000\000\000\000\000\000"...
mn = <optimized out>
#1 0x00000000004956eb in mpegts_network_class_idlescan_notify (p=0x7fffb40017e0, lang=<optimized out>)
at src/input/mpegts/mpegts_network.c:121
mn = 0x7fffb40017e0
mm = 0x500000000
#2 0x000000000041247a in prop_write_values (obj=obj@entry=0x7fffb40017e0, pl=<optimized out>, m=m@entry=0x7fffb4002a00,
optmask=optmask@entry=2, updated=updated@entry=0x0) at src/prop.c:235
save = <optimized out>
save2 = 1
f = <optimized out>
p = 0x546060 <__compound_literal.0+384>
cur = 0x7fffb4001910
new = 0x7fffe140ddf4
dbl = 0
i = 1
s64 = 4420071
u32 = 24
u16 = 46080
tm = 140736213294112
PRETTY_FUNCTION = "prop_write_values"
#3 0x000000000040d796 in idnode_class_write_values (self=self@entry=0x7fffb40017e0, idc=0x545e60 <mpegts_network_class>,
c=c@entry=0x7fffb4002a00, optmask=optmask@entry=2) at src/idnode.c:1066
save = 0
#4 0x000000000040d773 in idnode_class_write_values (self=self@entry=0x7fffb40017e0, idc=0x54b660 <dvb_network_class>,
c=c@entry=0x7fffb4002a00, optmask=optmask@entry=2) at src/idnode.c:1065
save = 0
#5 0x000000000040d773 in idnode_class_write_values (self=self@entry=0x7fffb40017e0, idc=0x54b520 <dvb_network_dvbt_class>,
c=c@entry=0x7fffb4002a00, optmask=optmask@entry=2) at src/idnode.c:1065
save = 0
---Type <return> to continue, or q <return> to quit---
#6 0x000000000041138d in idnode_write0 (self=self@entry=0x7fffb40017e0, c=c@entry=0x7fffb4002a00, optmask=optmask@entry=2,
dosave=dosave@entry=0) at src/idnode.c:1088
save = 0
idc = <optimized out>
#7 0x0000000000492dce in mpegts_input_create0 (mi=mi@entry=0x7fffb40017e0, class=class@entry=0x54b520 <dvb_network_dvbt_class>,
uuid=uuid@entry=0x7fffb4002730 "26baa2ee9613f14c91f510127e86b454", c=c@entry=0x7fffb4002a00)
at src/input/mpegts/mpegts_input.c:1688
No locals.
#8 0x00000000004c2e08 in satip_frontend_create (conf=0x7fffb4002a00, conf@entry=0x7fffb4003e40, sd=sd@entry=0x7fffb4001040,
type=type@entry=DVB_TYPE_T, v2=v2@entry=0, num=num@entry=1) at src/input/mpegts/satip/satip_frontend.c:1726
idc = 0x54b520 <dvb_network_dvbt_class>
uuid = 0x7fffb4002730 "26baa2ee9613f14c91f510127e86b454"
override = 0x0
id = "DVB-T #1\000r #1\000\000"
lname = "1 \277\036\000\200\377\377\317\337@\341\377\177\000\000\000\000\000\000\000\000\000\000\002\000\000\000\060", '\000' <repeats 19 times>, "[\000\000\000n", '\000' <repeats 19 times>, "P\027\000\264\377\177\000\000\000\000\000\000\000\000\000\000P\027\000\264\377\177\000\000\000\000\000\000\000\000\000\000\240\343@\341\377\177\000\000N\022\000\264\377\177\000\000 \024\000\264\377\177\000\000\000\000\000\000\000\000\000\000\240\343@\341\377\177\000\000N\022\000\264\377\177\000\000d\021\000\264\377\177\000\000\200\026\000\264\377\177\000\000\314\353F\364\377\177\000\000\000\000\000\000\000\000\000\000\223\210G\364\377\177\000\000\000\000\000\000\000\000\000\000"...
nname = "\005\000\000\000\000\000\000\000\300\337@\341\377\177\000\000\002\000\000\000\000\200\377\377\320\337@\341\377\177\000\000\t\000\000\000\000\000\000\000\002\000\000\000\060", '\000' <repeats 14 times>
lfe = 0x7fffb40017e0
master = 0
def_positions = 4
#9 0x00000000004be8e8 in satip_device_create (info=info@entry=0x7fffe140e3a0) at src/input/mpegts/satip/satip.c:606
sd = 0x7fffb4001040
uuid = {{bin = "f13f8fad284fee97", hex = "f13f8fad284fee9788cdbf6c11898382"}}
conf = <optimized out>
feconf = <optimized out>
argv = {0x7fffe140e0d0 "DVBT-3", 0x284fee97f13f8fad <error: Cannot access memory at address 0x284fee97f13f8fad>,
0x1189838288cdbf6c <error: Cannot access memory at address 0x1189838288cdbf6c>,
0x1201947690e <error: Cannot access memory at address 0x1201947690e>, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}
tunercfg = <optimized out>
i = 0
j = 0
n = <optimized out>
m = 3
fenum = 1
v2 = 0
save = <optimized out>
type = DVB_TYPE_T
buf2 = "\377\177\000\000\340\341@\341\377\177\000\000|\341@\341\377\177\000\000`\341@\341\377\177\000\000s\263x\367\377\177\000\000\060\025\000\264\377\177\000\000\340\341@\341\377\177\000\000\000\025\000\264\377\177\000"
---Type <return> to continue, or q <return> to quit---
#10 0x00000000004bf046 in satip_discovery_http_closed (hc=0xd53bc0, errn=<optimized out> at src/input/mpegts/satip/satip.c:930
d = 0x7fffc8001310
s = <optimized out>
xml = 0x0
tags = <optimized out>
root = <optimized out>
device = <optimized out>
friendlyname = 0x7fffb400111a ""
manufacturer = 0x7fffb4001140 "\320\026"
manufacturerURL = 0x7fffb4001164 "\377\177"
modeldesc = 0x7fffb40011ad ""
modelname = 0x7fffb40011de ""
modelnum = 0x7fffb4001200 ""
serialnum = 0x7fffb4001234 "\377\177"
presentation = 0x7fffb400146c "http\320\033"
tunercfg = 0x7fffb40014ca ""
udn = 0x7fffb4001249 "84fee9788cdbf6c11898382`"
uuid = 0x7fffb400124e "9788cdbf6c11898382`"
cs = <optimized out>
arg = <optimized out>
info = {myaddr = 0x0, addr = 0x0, uuid = 0x0, bootid = 0x0, configid = 0x0, deviceid = 0x0, location = 0x0,
server = 0x0, friendlyname = 0x0, manufacturer = 0x0, manufacturerURL = 0x0, modeldesc = 0x0, modelname = 0x0,
modelnum = 0x0, serialnum = 0x0, presentation = 0x0, tunercfg = 0x0, rtsp_port = 554, srcs = 4}
errbuf = "\r\000\000\000\000\000\000\000\066\000\000\000=\000\000\000\001", '\000' <repeats 15 times>, "\\\000\000\000n", '\000' <repeats 19 times>, "w\000\000\000|\000\000\000\005\000\000\000\000\000\000\000\360\343@\341\377\177\000\000\061\034\277\036\000\200\377\377\317\343@\341\377\177\000\000\000\000\000"
argv = {0x7fffb4001249 "84fee9788cdbf6c11898382`", 0x7fffb400124e "9788cdbf6c11898382`",
0x36 <error: Cannot access memory at address 0x36>, 0x7fffe140e370 "\005",
0x350 <error: Cannot access memory at address 0x350>, 0x0, 0x7ffff7ffe4a0 "", 0x7fffe140e350 "\\",
0xffff80001ebf1c91 <error: Cannot access memory at address 0xffff80001ebf1c91>, 0x7fffe140e36f ""}
i = <optimized out>
n = <optimized out>
#11 0x0000000000448861 in http_client_shutdown (hc=hc@entry=0xd53bc0, force=force@entry=0, reconnect=reconnect@entry=0)
at src/httpc.c:157
ssl = 0x0
efd = <optimized out>
#12 0x000000000044a901 in http_client_finish (hc=hc@entry=0xd53bc0) at src/httpc.c:680
wcmd = <optimized out>
res = <optimized out>
#13 0x000000000044ac56 in http_client_run (hc=hc@entry=0xd53bc0) at src/httpc.c:939
buf = 0x7fffe140e4c0 "idth>48</width><height>48</height><depth>24</depth><url>/sm.jpg</url></icon><icon><mimetype>image/jpeg</mimetype><width>120</width><height>120</height><depth>24</depth><url>/lr.jpg</url></icon></iconL"...
saveptr = 0x7fffb400096d ""
argv = {0x7fffb40008c0 "HTTP/1.0", 0x7fffb40008c9 "200", 0x7fffb40008cd "OK"}
---Type <return> to continue, or q <return> to quit---
d = <optimized out>
p = <optimized out>
ver = <optimized out>
res = <optimized out>
delimsize = 4
r = 356
len = <optimized out>
limit = <optimized out>
#14 0x000000000044b4db in http_client_thread (p=<optimized out> at src/httpc.c:1337
n = <optimized out>
ev = {fd = -197002464, events = 1, data = {ptr = 0xd53bc0, u64 = 13974464, u32 = 13974464, fd = 13974464}}
hc = 0xd53bc0
c = 0 '\000'
#15 0x00000000004137c1 in thread_wrapper (p=0x830f00) at src/wrappers.c:177
ts = 0x830f00
set = {__val = {16388, 0 <repeats 15 times>}}
r = <optimized out>
#16 0x00007ffff4cbd60a in start_thread () from /lib64/libpthread.so.0
No symbol table info available.
#17 0x00007ffff44edbbd in clone () from /lib64/libc.so.6
No symbol table info available.
(gdb) help bt
Print backtrace of all stack frames, or innermost COUNT frames.
With a negative argument, print outermost -COUNT frames.
Use of the 'full' qualifier also prints the values of the local variables.
Use of the 'no-filters' qualifier prohibits frame filters from executing
on this backtrace.