Segmentation fault (signal 11 (SIGSEGV)) during long duration video call

GoogleCodeExporter commented 9 years ago

a) Before posting your issue you MUST answer to the questions otherwise it
will be rejected (invalid status) by us
b) Please check the issue tacker to avoid duplication
c) Please provide network capture (wireshark) or Android log (DDMS output)
if you want quick response

What steps will reproduce the problem?
1. Make video call by setting H264 BP30 and run about 30 minutes (or 
longer)until IMSdroid crashes
2. capture the log by using adb logcat >video_crash.log

What is the expected output? What do you see instead?
I expected the video call can be run much longer without issues. However it can 
only run about half an hour then it crashed. This issue is reproduceable very 
easily. 

What version of the product are you using? On what operating system?
IMSdroid official version by using the following links to download the source 
files:
svn checkout http://imsdroid.googlecode.com/svn/trunk/imsdroid-read-only
svn checkout http://doubango.googlecode.com/svn/trunk/doubango-read-only

Please provide any additional information below.
This issue always happened after the following issue happened.
E/tinyWRAP(12013): ***ERROR: function: "tdav_session_audio_rtp_cb()" 
E/tinyWRAP(12013): file: "src/audio/tdav_session_audio.c" 
E/tinyWRAP(12013): line: "84" 
E/tinyWRAP(12013): MSG: 8 is not a valid payload for this session

A segmentation fault issue happened following the above issue, here is the 
logging info of the SIGSEGV:

I/DEBUG   (  974): Build fingerprint: 
'nvidia/harmony/harmony/smba1004:2.2/FRF91/20110504.154021:eng/test-keys'
I/DEBUG   (  974): pid: 12013, tid: 15061  >>> org.doubango.imsdroid <<<
I/DEBUG   (  974): signal 11 (SIGSEGV), fault addr 00000008
I/DEBUG   (  974):  r0 00332690  r1 003d2868  r2 00000140  r3 00332970
I/DEBUG   (  974):  r4 00332920  r5 8133a300  r6 00000000  r7 003d2868
I/DEBUG   (  974):  r8 00000140  r9 440e2f4c  10 440e2f38  fp 003d2be8
I/DEBUG   (  974):  ip 000d4d30  sp 5122eb28  lr 81209294  pc 00000008  cpsr 
20000030
I/DEBUG   (  974):  d0  4480000044800000  d1  0000000045800000
I/DEBUG   (  974):  d2  425c000041c80000  d3  0000000000000000
I/DEBUG   (  974):  d4  0000000000000000  d5  8000000000000000
I/DEBUG   (  974):  d6  0000040000000000  d7  000004003e800000
I/DEBUG   (  974):  d8  40a0000041f00000  d9  0000000000000000
I/DEBUG   (  974):  d10 0000000000000000  d11 0000000000000000
I/DEBUG   (  974):  d12 0000000000000000  d13 0000000000000000
I/DEBUG   (  974):  d14 0000000000000000  d15 0000000000000000
I/DEBUG   (  974):  scr 80000012
I/DEBUG   (  974): 
E/tinyWRAP(12013): ***ERROR: function: "tdav_session_audio_rtp_cb()" 
E/tinyWRAP(12013): file: "src/audio/tdav_session_audio.c" 
E/tinyWRAP(12013): line: "84" 
E/tinyWRAP(12013): MSG: 8 is not a valid payload for this session
E/tinyWRAP(12013): ***ERROR: function: "tdav_session_audio_rtp_cb()" 
E/tinyWRAP(12013): file: "src/audio/tdav_session_audio.c" 
E/tinyWRAP(12013): line: "84" 
E/tinyWRAP(12013): MSG: 8 is not a valid payload for this session
E/tinyWRAP(12013): ***ERROR: function: "tdav_session_audio_rtp_cb()" 
E/tinyWRAP(12013): file: "src/audio/tdav_session_audio.c" 
E/tinyWRAP(12013): line: "84" 
E/tinyWRAP(12013): MSG: 8 is not a valid payload for this session
I/DEBUG   (  974):          #00  pc 00000008  
I/DEBUG   (  974):          #01  pc 00209290  
/data/data/org.doubango.imsdroid/lib/libtinyWRAP.so
I/DEBUG   (  974):          #02  pc 0025802c  
/data/data/org.doubango.imsdroid/lib/libtinyWRAP.so
I/DEBUG   (  974):          #03  pc 0024ef9c  
/data/data/org.doubango.imsdroid/lib/libtinyWRAP.so
I/DEBUG   (  974):          #04  pc 00016df4  /system/lib/libdvm.so
I/DEBUG   (  974): 
I/DEBUG   (  974): code around pc:
I/DEBUG   (  974): 
I/DEBUG   (  974): code around lr:
I/DEBUG   (  974): 81209274 e2842054 e590c028 e1a01007 e58d2000 
I/DEBUG   (  974): 81209284 e2843050 e1a02008 e1a0e00f e59cf034 
I/DEBUG   (  974): 81209294 e2505000 0a000010 e594304c e3a01ffa 
I/DEBUG   (  974): 812092a4 e5933028 e5930018 e5d3301d e0000093 
I/DEBUG   (  974): 812092b4 ebfe907e e3a0c000 e5941050 e1a03000 
I/DEBUG   (  974): 
I/DEBUG   (  974): stack:
I/DEBUG   (  974):     5122eae8  004f34d8  [heap]
I/DEBUG   (  974):     5122eaec  afd0cd6f  /system/lib/libc.so
I/DEBUG   (  974):     5122eaf0  00000000  
I/DEBUG   (  974):     5122eaf4  000000c7  
I/DEBUG   (  974):     5122eaf8  0000000a  
I/DEBUG   (  974):     5122eafc  50e2f684  /dev/ashmem/AudioFlinger::Client 
(deleted)
I/DEBUG   (  974):     5122eb00  a90440b6  /system/lib/libmedia.so
I/DEBUG   (  974):     5122eb04  0000000a  
I/DEBUG   (  974):     5122eb08  003d2be8  [heap]
I/DEBUG   (  974):     5122eb0c  00000001  
I/DEBUG   (  974):     5122eb10  00000007  
I/DEBUG   (  974):     5122eb14  4ac89268  /dev/ashmem/mspace/dalvik-heap/2 
(deleted)
I/DEBUG   (  974):     5122eb18  5122eb90  
I/DEBUG   (  974):     5122eb1c  8084dcff  /system/lib/libdvm.so
I/DEBUG   (  974):     5122eb20  df002777  
I/DEBUG   (  974):     5122eb24  e3a070ad  
I/DEBUG   (  974): #01 5122eb28  00332974  [heap]
I/DEBUG   (  974):     5122eb2c  80845765  /system/lib/libdvm.so
I/DEBUG   (  974):     5122eb30  003d2be8  [heap]
I/DEBUG   (  974):     5122eb34  808a13f4  /system/lib/libdvm.so
I/DEBUG   (  974):     5122eb38  00000140  
I/DEBUG   (  974):     5122eb3c  003d2868  [heap]
I/DEBUG   (  974):     5122eb40  00000140  
I/DEBUG   (  974):     5122eb44  00332a08  [heap]
I/DEBUG   (  974):     5122eb48  4aa73558  /dev/ashmem/mspace/dalvik-heap/2 
(deleted)
I/DEBUG   (  974):     5122eb4c  440e2f64  
I/DEBUG   (  974):     5122eb50  5122eb90  
I/DEBUG   (  974):     5122eb54  440e2f4c  
I/DEBUG   (  974):     5122eb58  440e2f38  
I/DEBUG   (  974):     5122eb5c  81258030  
/data/data/org.doubango.imsdroid/lib/libtinyWRAP.so

The following is the function backtrace for the SIGSEGV issue:
??:0
/sandbox/IMSDROID/doubango-read-only/tinyDAV/src/audio/tdav_session_audio.c:180
/sandbox/IMSDROID/doubango-read-only/bindings/java/android/../../_common/ProxyPr
oducer.cxx:197
/sandbox/IMSDROID/doubango-read-only/bindings/java/android/tinyWRAP_wrap.cxx:590
5

I searched out the issue list did not find similar issue with this one.

Original issue reported on code.google.com by tsj...@gmail.com on 10 Aug 2011 at 2:52

Attachments:

video_crash.log

GoogleCodeExporter commented 9 years ago

This issue happened on both imsdroid 1.2.366 and version 2 downloaded from 
http://imsdroid.googlecode.com/svn/branches/2.0/tests-apk/

Original comment by tsj...@gmail.com on 10 Aug 2011 at 5:49

Added labels: ****
Removed labels: ****

GoogleCodeExporter commented 9 years ago

Please use the latest version from the download page: 
http://code.google.com/p/imsdroid/downloads/list

Original comment by boss...@yahoo.fr on 10 Aug 2011 at 6:00

Changed state: Accepted
Added labels: ****
Removed labels: ****

GoogleCodeExporter commented 9 years ago

Thanks for the quick response!

I tried the two versions from http://code.google.com/p/imsdroid/downloads/list. 
Unfortunately neither one works on my device. 

The following issue was encountered when tried to execute those latest versions:

I/DEBUG   (  958): signal 4 (SIGILL), fault addr 81264464

I/DEBUG   (  958):  r0 0000aa48  r1 4a9d8c28  r2 4410bc34  r3 45aaa15c

I/DEBUG   (  958):  r4 befbbb40  r5 00000003  r6 4a9d8c28  r7 4410bc00

I/DEBUG   (  958):  r8 befbbb20  r9 4410bbf8  10 4410bbe4  fp 00000000

I/DEBUG   (  958):  ip 81264460  sp befbbb08  lr 80816df8  pc 81264464  cpsr 
a0000010

I/DEBUG   (  958):  d0  0000004a42940000  d1  3ff0000042940000

I/DEBUG   (  958):  d2  000000003f000000  d3  000000003f000000

I/DEBUG   (  958):  d4  0000000000000000  d5  3fe999999999999a

I/DEBUG   (  958):  d6  3fe8000000000000  d7  3eaaaaab3f800000

I/DEBUG   (  958):  d8  0000000000000000  d9  0000000000000000

I/DEBUG   (  958):  d10 0000000000000000  d11 0000000000000000

I/DEBUG   (  958):  d12 0000000000000000  d13 0000000000000000

I/DEBUG   (  958):  d14 0000000000000000  d15 0000000000000000

I/DEBUG   (  958):  scr 80000012

I/DEBUG   (  958): 

I/DEBUG   (  958):          #00  pc 00264464  
/data/data/org.doubango.imsdroid/lib/libtinyWRAP.so

I/DEBUG   (  958):          #01  pc 00016df4  /system/lib/libdvm.so

I/DEBUG   (  958):          #02  pc 00044974  /system/lib/libdvm.so

I/DEBUG   (  958):          #03  pc 0004a0d6  /system/lib/libdvm.so

I/DEBUG   (  958):          #04  pc 0001bd58  /system/lib/libdvm.so

I/DEBUG   (  958):          #05  pc 00022744  /system/lib/libdvm.so

I/DEBUG   (  958):          #06  pc 000215e0  /system/lib/libdvm.so

I/DEBUG   (  958):          #07  pc 0005bcb6  /system/lib/libdvm.so

I/DEBUG   (  958):          #08  pc 0005bee8  /system/lib/libdvm.so

I/DEBUG   (  958):          #09  pc 00067b48  /system/lib/libdvm.so

I/DEBUG   (  958):          #10  pc 000694d2  /system/lib/libdvm.so

I/DEBUG   (  958):          #11  pc 00018c28  /system/lib/libdvm.so

I/DEBUG   (  958):          #12  pc 00022744  /system/lib/libdvm.so

I/DEBUG   (  958):          #13  pc 000215e0  /system/lib/libdvm.so

I/DEBUG   (  958):          #14  pc 0005bcb6  /system/lib/libdvm.so

I/DEBUG   (  958):          #15  pc 0005bee8  /system/lib/libdvm.so

I/DEBUG   (  958):          #16  pc 00067b48  /system/lib/libdvm.so

I/DEBUG   (  958):          #17  pc 000694d2  /system/lib/libdvm.so

I/DEBUG   (  958):          #18  pc 00018c28  /system/lib/libdvm.so

I/DEBUG   (  958):          #19  pc 00022744  /system/lib/libdvm.so

I/DEBUG   (  958):          #20  pc 000215e0  /system/lib/libdvm.so

I/DEBUG   (  958):          #21  pc 0005bcb6  /system/lib/libdvm.so

I/DEBUG   (  958):          #22  pc 0005bee8  /system/lib/libdvm.so

I/DEBUG   (  958):          #23  pc 0006311e  /system/lib/libdvm.so

I/DEBUG   (  958):          #24  pc 0001bd58  /system/lib/libdvm.so

I/DEBUG   (  958):          #25  pc 00022744  /system/lib/libdvm.so

I/DEBUG   (  958):          #26  pc 000215e0  /system/lib/libdvm.so

I/DEBUG   (  958):          #27  pc 0005be78  /system/lib/libdvm.so

I/DEBUG   (  958):          #28  pc 000643fe  /system/lib/libdvm.so

I/DEBUG   (  958):          #29  pc 0001bd58  /system/lib/libdvm.so

I/DEBUG   (  958):          #30  pc 00022744  /system/lib/libdvm.so

I/DEBUG   (  958):          #31  pc 000215e0  /system/lib/libdvm.so

I/DEBUG   (  958): 

I/DEBUG   (  958): code around pc:

I/DEBUG   (  958): 81264444 e1a00004 e59d1004 e28dd00c e8bd8030 

I/DEBUG   (  958): 81264454 e320f000 00000000 00000000 e92d4037 

I/DEBUG   (  958): 81264464 eddf0b0b e1a05000 edcd0b00 e3a00018 

I/DEBUG   (  958): 81264474 ebf7bd69 e1a01005 e1a04000 ebfff686 

I/DEBUG   (  958): 81264484 e1a00004 e59d1004 e28dd00c e8bd8030 

I/DEBUG   (  958): 

I/DEBUG   (  958): code around lr:

I/DEBUG   (  958): 80816dd8 3497c004 3488c004 3afffff9 e2888004 

I/DEBUG   (  958): 80816de8 eafffff9 e899000c e594c008 e12fff3c 

I/DEBUG   (  958): 80816df8 e3550000 1594c00c 188c0003 e914a3f0 

I/DEBUG   (  958): 80816e08 e1a05e22 e5946004 e3a02000 e4d6c001 

I/DEBUG   (  958): 80816e18 e35c0000 0a000007 e2822001 e35c0044 

I/DEBUG   (  958): 

I/DEBUG   (  958): stack:

I/DEBUG   (  958):     befbbac8  00000001  

I/DEBUG   (  958):     befbbacc  0000a000  [heap]

I/DEBUG   (  958):     befbbad0  80816fc0  /system/lib/libdvm.so

I/DEBUG   (  958):     befbbad4  0000ccc8  [heap]

I/DEBUG   (  958):     befbbad8  4410bbe4  

I/DEBUG   (  958):     befbbadc  afd0be23  /system/lib/libc.so

I/DEBUG   (  958):     befbbae0  0012f8a8  [heap]

I/DEBUG   (  958):     befbbae4  00128a40  [heap]

I/DEBUG   (  958):     befbbae8  00001400  

I/DEBUG   (  958):     befbbaec  0000ccc8  [heap]

I/DEBUG   (  958):     befbbaf0  4410bbe4  

I/DEBUG   (  958):     befbbaf4  0012f8a8  [heap]

I/DEBUG   (  958):     befbbaf8  00000000  

I/DEBUG   (  958):     befbbafc  00000000  

I/DEBUG   (  958):     befbbb00  df002777  

I/DEBUG   (  958):     befbbb04  e3a070ad  

I/DEBUG   (  958): #00 befbbb08  0000aa48  [heap]

I/DEBUG   (  958):     befbbb0c  4a9d8c28  /dev/ashmem/mspace/dalvik-heap/2 
(deleted)

I/DEBUG   (  958):     befbbb10  4410bc34  

I/DEBUG   (  958):     befbbb14  befbbb40  [stack]

I/DEBUG   (  958):     befbbb18  00000003  

I/DEBUG   (  958):     befbbb1c  80816df8  /system/lib/libdvm.so

I/DEBUG   (  958): #01 befbbb20  0000ccc8  [heap]

I/DEBUG   (  958):     befbbb24  443208a4  /dev/ashmem/dalvik-LinearAlloc 
(deleted)

I/DEBUG   (  958):     befbbb28  4a9d8c28  /dev/ashmem/mspace/dalvik-heap/2 
(deleted)

I/DEBUG   (  958):     befbbb2c  4410bbf8  

I/DEBUG   (  958):     befbbb30  80816fc0  /system/lib/libdvm.so

I/DEBUG   (  958):     befbbb34  0000ccc8  [heap]

I/DEBUG   (  958):     befbbb38  befbbb40  [stack]

I/DEBUG   (  958):     befbbb3c  80844977  /system/lib/libdvm.so

Attached please find the log files for both 2.0.431 and 2.0.448

BTW, my tab CPU info is as follows:
Nvidia Tegra 2 T20 Dual ARM Cortex -A9 (1Ghz)
3D acceleration GPU Flash 10.1

More detailed info about my tablet can be found at 
http://www.merimobiles.com/Malata_T8_9_7_IPS_MultiTouch_Tegra_1_2GHz_Dual_p/meri
0581.htm

Original comment by tsj...@gmail.com on 10 Aug 2011 at 1:15

Added labels: ****
Removed labels: ****

Attachments:

tabskie / imsdroid

Segmentation fault (signal 11 (SIGSEGV)) during long duration video call #273