[Live-devel] JPEGVideoRTPSink and Restart markers

[Cristiano Belloni]

Il 10/11/2010 17:50, Ross Finlayson ha scritto:
> fprintf(stderr, "DEBUG: %d = %d - (%d + %d + %d), tbs %d, tba %d, ods 
> %d\n", newPacketStart, fOutBuf->curPacketSize(), rtpHeaderSize, 
> fSpecialHeaderSize, frameSpecificHeaderSize(), 
> fOutBuf->totalBufferSize(), fOutBuf->totalBytesAvailable(), 
> fOutBuf->overflowDataSize());
Dear Ross,
What I get after crashing is:

  DEBUG: 1424 = 1448 - (12 + 12 + 0), tbs 1000568, tba 962228, ods 35806

(I know it seems ok, but I also tried to comment out the Efficiency Hack 
from the latest library, and everything works fine. When I put it back, 
library crashes).
As additional info, here's the traceback of the crash:

*** glibc detected *** ./rtspServer: munmap_chunk(): invalid pointer: 
0x406e5008 ***
======= Backtrace: =========
/lib/libc.so.6[0x40231f3c]
./rtspServer(_ZN15OutPacketBufferD1Ev+0x18)[0x5db3c]
./rtspServer(_ZN18MultiFramedRTPSinkD2Ev+0x3c)[0x6a10c]
./rtspServer(_ZN12VideoRTPSinkD2Ev+0x14)[0x6a410]
./rtspServer(_ZN16JPEGVideoRTPSinkD2Ev+0x14)[0x61c0c]
./rtspServer(_ZN20LiveJPEGVideoRTPSinkD0Ev+0x2c)[0x45e80]
./rtspServer(_ZN16MediaLookupTable6removeEPKc+0x60)[0x47584]
./rtspServer(_ZN11StreamState7reclaimEv+0x24)[0x7cfa8]
./rtspServer(_ZN11StreamStateD0Ev+0x14)[0x7d2cc]
./rtspServer(_ZN29OnDemandServerMediaSubsession12deleteStreamEjRPv+0x78)[0x7d8a0]
./rtspServer(_ZN10RTSPServer17RTSPClientSession19reclaimStreamStatesEv+0x60)[0x6d458]
./rtspServer(_ZN10RTSPServer17RTSPClientSessionD2Ev+0xbc)[0x70b8c]
./rtspServer(_ZN15LimitRTSPServer22LimitRTSPClientSessionD0Ev+0x44)[0x46de8]
./rtspServer(_ZN10RTSPServer17RTSPClientSession18handleRequestBytesEi+0x13c)[0x6e380]
./rtspServer(_ZN10RTSPServer17RTSPClientSession23incomingRequestHandler1Ev+0x48)[0x6e7f4]
./rtspServer(_ZN18BasicTaskScheduler10SingleStepEj+0x1ec)[0x8fcac]
./rtspServer(_ZN19BasicTaskScheduler011doEventLoopEPc+0x20)[0x8f02c]
./rtspServer(_Z8mainLoopP16UsageEnvironmentjjPc+0x614)[0x44930]
./rtspServer(main+0x3c)[0x41030]
/lib/libc.so.6(__libc_start_main+0x120)[0x401ddfd4]

It can happen on the munmap_chunk() or wit a double dealloc, but the 
crash always come in the OutPacketBuffer destructor, presumably after a 
free() is made.

Regards,
Cristiano.

-- 
Belloni Cristiano
Imavis Srl.
www.imavis.com <http://www.imavis.com>
belloni at imavis.com <mailto://belloni@imavis.com>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.live555.com/pipermail/live-devel/attachments/20101110/0cd626ce/attachment.html>