[dvblast-devel] dvblast svn crashes on Nagravision channel (glibc detected: free(): invalid next size (fast) )

[Jakub Paweł Głazik]

2010/8/11 Jakub Paweł Głazik <zytek-lists at nuxi.pl>:
> 2010/8/10 Christophe Massiot <cmassiot at openheadend.tv>:
>> Le 10 août 2010 à 15:40, Jakub Paweł Głazik a écrit :
>>
>>> Hi, i just encountered problem with Nagravision encrypted channels.
>>> Latest dvblast crashes, where 1.2 works fine with the same setup.
>>>
>>> It happens on all (10) cards with Nagravision CAMs. Cards are
>>> Technotrend S-3200 on debian with 2.6.34 kernel. Other setups (FTA and
>>> other CAM systems) work fine on dvblast from SVN.
>>>
>>> I checked also revision 145 (before buffering) and it also crashes.
>>
>> So I suppose the problem is in changeset [144]. At first glance I don't see which free() could be wrong. In my local copy I have a lot of uncommitted changes that may be related, which I intend to check in soon ; if it doesn't help, I would love to have a gdb backtrace.
>
> I'll try to debug this issue a little more tommorow morning. Will post results.

revision 143 works ok.

revision 144 backtrace after fail:

*** glibc detected *** /root/dvblast/trunk/dvblast: free(): invalid
next size (fast): 0x0966ad10 ***
[New Thread 0xb76716c0 (LWP 1798)]
======= Backtrace: =========
/lib/tls/i686/cmov/libc.so.6[0xb76e1604]
/lib/tls/i686/cmov/libc.so.6(cfree+0x96)[0xb76e35b6]
/root/dvblast/trunk/dvblast[0x80563e0]
======= Memory map: ========
08048000-0805b000 r-xp 00000000 00:0e 819349     /root/dvblast/trunk/dvblast
0805b000-0805c000 r--p 00012000 00:0e 819349     /root/dvblast/trunk/dvblast
0805c000-0805d000 rw-p 00013000 00:0e 819349     /root/dvblast/trunk/dvblast
0805d000-0808e000 rw-p 00000000 00:00 0
09668000-09689000 rw-p 00000000 00:00 0          [heap]
b7500000-b7521000 rw-p 00000000 00:00 0
b7521000-b7600000 ---p 00000000 00:00 0
b7662000-b766f000 r-xp 00000000 00:0e 3606945    /lib/libgcc_s.so.1
b766f000-b7670000 r--p 0000c000 00:0e 3606945    /lib/libgcc_s.so.1
b7670000-b7671000 rw-p 0000d000 00:0e 3606945    /lib/libgcc_s.so.1
b7671000-b7672000 rw-p 00000000 00:00 0
b7672000-b77ce000 r-xp 00000000 00:0e 3629649    /lib/tls/i686/cmov/libc-2.9.so
b77ce000-b77cf000 ---p 0015c000 00:0e 3629649    /lib/tls/i686/cmov/libc-2.9.so
b77cf000-b77d1000 r--p 0015c000 00:0e 3629649    /lib/tls/i686/cmov/libc-2.9.so
b77d1000-b77d2000 rw-p 0015e000 00:0e 3629649    /lib/tls/i686/cmov/libc-2.9.so
b77d2000-b77d5000 rw-p 00000000 00:00 0
b77d5000-b77dc000 r-xp 00000000 00:0e 3629665    /lib/tls/i686/cmov/librt-2.9.so
b77dc000-b77dd000 r--p 00006000 00:0e 3629665    /lib/tls/i686/cmov/librt-2.9.so
b77dd000-b77de000 rw-p 00007000 00:0e 3629665    /lib/tls/i686/cmov/librt-2.9.so
b77de000-b77df000 rw-p 00000000 00:00 0
b77df000-b77f4000 r-xp 00000000 00:0e 3629663
/lib/tls/i686/cmov/libpthread-2.9.so
b77f4000-b77f5000 r--p 00014000 00:0e 3629663
/lib/tls/i686/cmov/libpthread-2.9.so
b77f5000-b77f6000 rw-p 00015000 00:0e 3629663
/lib/tls/i686/cmov/libpthread-2.9.so
b77f6000-b77f8000 rw-p 00000000 00:00 0
b77f8000-b7803000 r-xp 00000000 00:0e 2851413    /usr/lib/libdvbpsi.so.5.0.0
b7803000-b7805000 rw-p 0000a000 00:0e 2851413    /usr/lib/libdvbpsi.so.5.0.0
b7811000-b7813000 rw-p 00000000 00:00 0
b7813000-b7814000 r-xp 00000000 00:00 0          [vdso]
b7814000-b7830000 r-xp 00000000 00:0e 3606925    /lib/ld-2.9.so
b7830000-b7831000 r--p 0001b000 00:0e 3606925    /lib/ld-2.9.so
b7831000-b7832000 rw-p 0001c000 00:0e 3606925    /lib/ld-2.9.so
bfad3000-bfaf4000 rw-p 00000000 00:00 0          [stack]

Program received signal SIGABRT, Aborted.
[Switching to Thread 0xb76716c0 (LWP 1798)]
0xb7813424 in __kernel_vsyscall ()
(gdb) bt
#0  0xb7813424 in __kernel_vsyscall ()
#1  0xb769d6d0 in raise () from /lib/tls/i686/cmov/libc.so.6
#2  0xb769f098 in abort () from /lib/tls/i686/cmov/libc.so.6
#3  0xb76db24d in ?? () from /lib/tls/i686/cmov/libc.so.6
#4  0xb76e1604 in ?? () from /lib/tls/i686/cmov/libc.so.6
#5  0xb76e35b6 in free () from /lib/tls/i686/cmov/libc.so.6
#6  0x080563e0 in TPDURecv (p_access=0x0) at en50221.c:421
#7  0x0804e1ad in dvb_Read () at dvb.c:164
#8  0x0805064d in demux_Run () at demux.c:153
#9  0x0804afb5 in main (i_argc=-1079038732, pp_argv=0x0) at dvblast.c:730

-- 
.: Jakub Paweł Głazik,
.: email & jabber: zytek<at>nuxi.pl