Bug#731661: linphone: segfault with Asterisk video calls

[Eric Cooper]

Package: linphone
Version: 3.6.1-2.1
Followup-For: Bug #731661

Linphone always crashes when making a video call, but sometimes I see
this instead of the segfault I reported above:

*** Error in `/usr/bin/linphone': free(): invalid pointer: 0x00007fffd75f7810 ***

Here is the backtrace in gdb:

Program received signal SIGABRT, Aborted.
[Switching to Thread 0x7fffd75f8700 (LWP 27118)]
0x00007fffef3fd1d5 in __GI_raise (sig=sig at entry=6) at ../nptl/sysdeps/unix/sysv/linux/raise.c:56
56		   ../nptl/sysdeps/unix/sysv/linux/raise.c: No such file or directory.
(gdb) bt
#0  0x00007fffef3fd1d5 in __GI_raise (sig=sig at entry=6) at ../nptl/sysdeps/unix/sysv/linux/raise.c:56
#1  0x00007fffef400388 in __GI_abort () at abort.c:90
#2  0x00007fffef4387bb in __libc_message (do_abort=do_abort at entry=2, 
    fmt=fmt at entry=0x7fffef535368 "*** Error in `%s': %s: 0x%s ***\n") at ../sysdeps/unix/sysv/linux/libc_fatal.c:199
#3  0x00007fffef442a16 in malloc_printerr (action=3, str=0x7fffef53130a "free(): invalid pointer", ptr=<optimized out>)
    at malloc.c:4923
#4  0x00007fffef443793 in _int_free (av=<optimized out>, p=0x7fffd75f7800, have_lock=0) at malloc.c:3779
#5  0x00007ffff4b7f23c in av_freep () from /usr/lib/x86_64-linux-gnu/libavutil.so.52
#6  0x00007ffff50efff3 in avcodec_get_frame_defaults () from /usr/lib/x86_64-linux-gnu/libavcodec.so.54
#7  0x00007ffff74debb4 in process_frame (f=0x918930, inm=0x7fffbc047a10) at videofilters/videoenc.c:777
#8  0x00007ffff74deea0 in enc_process (f=0x918930) at videofilters/videoenc.c:826
#9  0x00007ffff728903b in ms_filter_process (f=0x918930) at base/msfilter.c:303
#10 0x00007ffff728a6ca in call_process (f=0x918930) at base/msticker.c:228
#11 0x00007ffff728a757 in run_graph (f=0x918930, s=0x911ae0, unschedulable=0x7fffd75f7b70, force_schedule=0 '\000')
    at base/msticker.c:242
#12 0x00007ffff728a79f in run_graph (f=0xb1d410, s=0x911ae0, unschedulable=0x7fffd75f7b70, force_schedule=0 '\000')
    at base/msticker.c:247
#13 0x00007ffff728a79f in run_graph (f=0xafdf10, s=0x911ae0, unschedulable=0x7fffd75f7b70, force_schedule=0 '\000')
    at base/msticker.c:247
#14 0x00007ffff728a79f in run_graph (f=0x9d77c0, s=0x911ae0, unschedulable=0x7fffd75f7b70, force_schedule=0 '\000')
    at base/msticker.c:247
#15 0x00007ffff728a79f in run_graph (f=0x94f4f0, s=0x911ae0, unschedulable=0x7fffd75f7b70, force_schedule=0 '\000')
    at base/msticker.c:247
#16 0x00007ffff728a816 in run_graphs (s=0x911ae0, execution_list=0xafc6c0, force_schedule=0 '\000')
    at base/msticker.c:261
#17 0x00007ffff728ad18 in ms_ticker_run (arg=0x911ae0) at base/msticker.c:440
#18 0x00007ffff2ba7e0e in start_thread (arg=0x7fffd75f8700) at pthread_create.c:311
#19 0x00007fffef4b10fd in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113