Bug #283

tvheadend segfault

Added by Jouk Hettema - almost 9 years ago. Updated over 8 years ago.

Target version:
Start date:
Due date:
% Done:


Estimated time:
Found in version:
Affected Versions:


running tvheadend svn-5341. Think every 12 hours it segfaults. I have attached the binary (for Fedora 13 i386, and the tvheadend log file (rsyslog filter).

I started running the binary in gdb, hopefully this'll give a more detailed report.

tvheadend.log (2.9 MB) tvheadend.log Jouk Hettema -, 2010-09-11 21:04
tvheadend-5341 (2.89 MB) tvheadend-5341 Jouk Hettema -, 2010-09-11 21:05


#1 Updated by Jouk Hettema - over 8 years ago

I have upgraded the binary to the newest SVN version (5400) and the segfault stays. I was recording 2 or more channels concurrently on the same mux while it segfaulted. Below the output of gdb:

[WARNING]:cwc: Got unexpected ECM reply (seqno: 240)
[WARNING]:cwc: Got unexpected ECM reply (seqno: 244)
[WARNING]:cwc: Got unexpected ECM reply (seqno: 245)
[WARNING]:cwc: Got unexpected ECM reply (seqno: 246)
[WARNING]:cwc: Got unexpected ECM reply (seqno: 247)
[WARNING]:cwc: Got unexpected ECM reply (seqno: 249)
[WARNING]:cwc: Got unexpected ECM reply (seqno: 250)
[WARNING]:cwc: Got unexpected ECM reply (seqno: 251)
[WARNING]:cwc: Got unexpected ECM reply (seqno: 248)
[WARNING]:cwc: Got unexpected ECM reply (seqno: 252)
[WARNING]:cwc: Got unexpected ECM reply (seqno: 253)
[WARNING]:cwc: Got unexpected ECM reply (seqno: 254)
[WARNING]:cwc: Got unexpected ECM reply (seqno: 255)
[DEBUG]:cwc: Received ECM reply for service "RTL7" even: 52.06.4f.a7.32.94.19.df odd: 43.9c.78.57.c3.07.2d.f7 (seqno: 257 Req delay: 5786 ms)
[DEBUG]:cwc: Received ECM reply for service "Discovery" even: d8.a4.77.f3.68.87.03.f2 odd: 14.3f.1e.71.d7.07.65.43 (seqno: 258 Req delay: 5786 ms)
[DEBUG]:cwc: Received ECM reply for service "Animal Planet" even: e0.1b.98.93.f8.4c.72.b6 odd: (seqno: 259 Req delay: 5786 ms)
[DEBUG]:cwc: Received NOK for service "RTL7" (seqno: 256 Req delay: 5788 ms)

Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 0xb5ffeb70 (LWP 13717)]
0x0805b232 in parse_sc (t=0x823ec48, st=0x823efb0, data=0x830a354 "", len=184, vp=0x805b4e0 <parse_mpeg2video>) at /usr/src/tvheadend/src/parsers.c:345
345             st->st_buf.sb_data[st->st_buf.sb_ptr++] = sc >> 24;
Missing separate debuginfos, use: debuginfo-install glibc-2.12-3.i686 nss-softokn-freebl-3.12.6-3.fc13.i686

(gdb) info reg
eax            0x0      0
ecx            0x0      0
edx            0x0      0
ebx            0x823efb0        136572848
esp            0xb5ffd940       0xb5ffd940
ebp            0xb5ffd998       0xb5ffd998
esi            0x1f     31
edi            0x100    256
eip            0x805b232        0x805b232 <parse_sc+418>
eflags         0x10246  [ PF ZF IF RF ]
cs             0x73     115
ss             0x7b     123
ds             0x7b     123
es             0x7b     123
fs             0x0      0
gs             0x33     51

(gdb) disassemble $pc-32,$pc+32
Dump of assembler code from 0x805b212 to 0x805b252:
   0x0805b212 <parse_sc+386>:   mov    $0x0,%dl
   0x0805b214 <parse_sc+388>:   add    %al,(%eax)
   0x0805b216 <parse_sc+390>:   mov    -0x20(%ebp),%eax
   0x0805b219 <parse_sc+393>:   mov    %eax,(%esp)
   0x0805b21c <parse_sc+396>:   call   0x804bab0 <sbuf_reset>
   0x0805b221 <parse_sc+401>:   mov    0xac(%ebx),%edx
   0x0805b227 <parse_sc+407>:   mov    %edi,%eax
   0x0805b229 <parse_sc+409>:   mov    0xa8(%ebx),%ecx
   0x0805b22f <parse_sc+415>:   shr    $0x18,%eax
=> 0x0805b232 <parse_sc+418>:   mov    %al,(%ecx,%edx,1)
   0x0805b235 <parse_sc+421>:   mov    0xa8(%ebx),%ecx
   0x0805b23b <parse_sc+427>:   mov    %edi,%eax
   0x0805b23d <parse_sc+429>:   shr    $0x10,%eax
   0x0805b240 <parse_sc+432>:   mov    %al,0x1(%ecx,%edx,1)
   0x0805b244 <parse_sc+436>:   mov    0xa8(%ebx),%ecx
   0x0805b24a <parse_sc+442>:   mov    %edi,%eax
   0x0805b24c <parse_sc+444>:   shr    $0x8,%eax
   0x0805b24f <parse_sc+447>:   mov    %al,0x2(%ecx,%edx,1)
End of assembler dump.

(gdb) bt full
#0  0x0805b232 in parse_sc (t=0x823ec48, st=0x823efb0, data=0x830a354 "", len=184, vp=0x805b4e0 <parse_mpeg2video>) at /usr/src/tvheadend/src/parsers.c:345
        sc = 256
        i = <value optimized out>
        r = <value optimized out>
#1  0x0805d471 in ts_recv_packet0 (t=0x823ec48, st=<value optimized out>, tsb=0x830a350 "GB\003\037") at /usr/src/tvheadend/src/tsdemux.c:123
        off = <value optimized out>
        pusi = 1
        cc = <value optimized out>
        error = 0
#2  0x080702d0 in cwc_descramble (td=0x81fc478, t=0x823ec48, st=0x823efb0, 
    tsb=0xb5ffe0fc "G\002\003\324G\331\354\353\212\333M\264=\212\016\221\341\273U\026%\b\251+\375һ\343\214\024{S2\b \241x\317\[email protected]\335\n!O\377\224xi\223\260\352\006\021\264\364P%\311\301\[email protected]\tuI\320!f\223p\300\215\376\225:#\360ξ\324\366\355\271\002\221F?ɨ5r\236\367Kי\244\016Ebl") at /usr/src/tvheadend/src/cwc.c:1376
        i = <value optimized out>
        t0 = 0x830a350 "GB\003\037" 
        ct = 0x81fc478
        r = 140
        vec = {0x0, 0x830ee38 "", 0x0}
        +PRETTY_FUNCTION+ = "cwc_descramble" 
#3  0x0805d95d in ts_recv_packet1 (t=0x823ec48, 
    tsb=0xb5ffe0fc "G\002\003\324G\331\354\353\212\333M\264=\212\016\221\341\273U\026%\b\251+\375һ\343\214\024{S2\b \241x\317\[email protected]\335\n!O\377\224xi\223\260\352\006\021\264\364P%\311\301\[email protected]\tuI\320!f\223p\300\215\376\225:#\360ξ\324\366\355\271\002\221F?ɨ5r\236\367Kי\244\016Ebl", pcrp=0x0) at /usr/src/tvheadend/src/tsdemux.c:240
        st = 0x823efb0
        n = 1
        m = <value optimized out>
        r = <value optimized out>
        td = 0x81fc478
        error = 0
#4  0x080802f8 in dvb_adapter_input_dvr (aux=0x81f18b8) at /usr/src/tvheadend/src/dvb/dvb_adapter.c:540
        tda = 0x81f18b8
        fd = 12
        i = <value optimized out>
        r = 1880
        tsb = "G\002\003\323\070\071Խ{\325=H\335\336\330Ǎ^\242h\[email protected]\265G\212\267\306\322V\222\060f\205\353\335j;\244\310\017'\206K\345\037ao\325\345\003^p\001r\240\340C\373;\276\270\[email protected]êk\224꺂<\240\063\211\230\345!\267A\002\325L\367\006\345Y0}\004\216\360?\017F%\327z\332B\034R\213*Q\243C>{4!\030V4\353\243\304\364\353\016s\r'\252ɲq\254\032\351p\316\337\035\331L\375\034\206\006\201Uۯ8\256\353\062\070\225\300\314+\255\365\r\367\t\336\062\352v\367\230\201Ʉ\300\006\"X2\320n4\002_\342\333tΟm\277\223<\340qG\002\006\320È\027һ\305\030\341\071\256z\212fOJ\200\320/\311\066\034 \r\273\223hA\031\245\066\a\301\221\021\252\a}\312\312]\266˧\311\f\311\333z6\b\225;\025.Ţ\346\227\017\r\205\020\270s0\021\005\377\207\244*\277;\350\032\001\332}\000\321x#O\246aY\363\300T%\201\374.\306\321\n\001z\[email protected]\212\277\236\\n\240\330MS\245\067\"*\364.)0%~\006cx\275\300\330-\350\r\352MI]G. 6\243\312aΌؤ\230[\367\372\353S\364\204eaM'\231S\232<#\206\236dd"...
        t = 0x823ec48
#5  0x00193919 in start_thread () from /lib/
No symbol table info available.
#6  0x002afcbe in clone () from /lib/
No symbol table info available.

I hope this'll give you some more information. If I need to generate more output, please let me know.

kind regards


#2 Updated by Jouk Hettema - over 8 years ago

  • Found in version set to duplicate

I started a new ticket which has the same cause.

Also available in: Atom PDF