Segmentation fault (signal 11 (SIGSEGV)) during long duration video call

```
a) Before posting your issue you MUST answer to the questions otherwise it
will be rejected (invalid status) by us
b) Please check the issue tacker to avoid duplication
c) Please provide network capture (wireshark) or Android log (DDMS output)
if you want quick response

What steps will reproduce the problem?
1. Make video call by setting H264 BP30 and run about 30 minutes (or
longer)until IMSdroid crashes
2. capture the log by using adb logcat >video_crash.log

What is the expected output? What do you see instead?
I expected the video call can be run much longer without issues. However it can
only run about half an hour then it crashed. This issue is reproduceable very
easily.

What version of the product are you using? On what operating system?
IMSdroid official version by using the following links to download the source
files:
svn checkout http://imsdroid.googlecode.com/svn/trunk/imsdroid-read-only
svn checkout http://doubango.googlecode.com/svn/trunk/doubango-read-only

Please provide any additional information below.
This issue always happened after the following issue happened.
E/tinyWRAP(12013): ***ERROR: function: "tdav_session_audio_rtp_cb()"
E/tinyWRAP(12013): file: "src/audio/tdav_session_audio.c"
E/tinyWRAP(12013): line: "84"
E/tinyWRAP(12013): MSG: 8 is not a valid payload for this session

A segmentation fault issue happened following the above issue, here is the
logging info of the SIGSEGV:

I/DEBUG ( 974): Build fingerprint:
'nvidia/harmony/harmony/smba1004:2.2/FRF91/20110504.154021:eng/test-keys'
I/DEBUG ( 974): pid: 12013, tid: 15061 >>> org.doubango.imsdroid <<<
I/DEBUG ( 974): signal 11 (SIGSEGV), fault addr 00000008
I/DEBUG ( 974): r0 00332690 r1 003d2868 r2 00000140 r3 00332970
I/DEBUG ( 974): r4 00332920 r5 8133a300 r6 00000000 r7 003d2868
I/DEBUG ( 974): r8 00000140 r9 440e2f4c 10 440e2f38 fp 003d2be8
I/DEBUG ( 974): ip 000d4d30 sp 5122eb28 lr 81209294 pc 00000008 cpsr
20000030
I/DEBUG ( 974): d0 4480000044800000 d1 0000000045800000
I/DEBUG ( 974): d2 425c000041c80000 d3 0000000000000000
I/DEBUG ( 974): d4 0000000000000000 d5 8000000000000000
I/DEBUG ( 974): d6 0000040000000000 d7 000004003e800000
I/DEBUG ( 974): d8 40a0000041f00000 d9 0000000000000000
I/DEBUG ( 974): d10 0000000000000000 d11 0000000000000000
I/DEBUG ( 974): d12 0000000000000000 d13 0000000000000000
I/DEBUG ( 974): d14 0000000000000000 d15 0000000000000000
I/DEBUG ( 974): scr 80000012
I/DEBUG ( 974):
E/tinyWRAP(12013): ***ERROR: function: "tdav_session_audio_rtp_cb()"
E/tinyWRAP(12013): file: "src/audio/tdav_session_audio.c"
E/tinyWRAP(12013): line: "84"
E/tinyWRAP(12013): MSG: 8 is not a valid payload for this session
E/tinyWRAP(12013): ***ERROR: function: "tdav_session_audio_rtp_cb()"
E/tinyWRAP(12013): file: "src/audio/tdav_session_audio.c"
E/tinyWRAP(12013): line: "84"
E/tinyWRAP(12013): MSG: 8 is not a valid payload for this session
E/tinyWRAP(12013): ***ERROR: function: "tdav_session_audio_rtp_cb()"
E/tinyWRAP(12013): file: "src/audio/tdav_session_audio.c"
E/tinyWRAP(12013): line: "84"
E/tinyWRAP(12013): MSG: 8 is not a valid payload for this session
I/DEBUG ( 974): #00 pc 00000008
I/DEBUG ( 974): #01 pc 00209290
/data/data/org.doubango.imsdroid/lib/libtinyWRAP.so
I/DEBUG ( 974): #02 pc 0025802c
/data/data/org.doubango.imsdroid/lib/libtinyWRAP.so
I/DEBUG ( 974): #03 pc 0024ef9c
/data/data/org.doubango.imsdroid/lib/libtinyWRAP.so
I/DEBUG ( 974): #04 pc 00016df4 /system/lib/libdvm.so
I/DEBUG ( 974):
I/DEBUG ( 974): code around pc:
I/DEBUG ( 974):
I/DEBUG ( 974): code around lr:
I/DEBUG ( 974): 81209274 e2842054 e590c028 e1a01007 e58d2000
I/DEBUG ( 974): 81209284 e2843050 e1a02008 e1a0e00f e59cf034
I/DEBUG ( 974): 81209294 e2505000 0a000010 e594304c e3a01ffa
I/DEBUG ( 974): 812092a4 e5933028 e5930018 e5d3301d e0000093
I/DEBUG ( 974): 812092b4 ebfe907e e3a0c000 e5941050 e1a03000
I/DEBUG ( 974):
I/DEBUG ( 974): stack:
I/DEBUG ( 974): 5122eae8 004f34d8 [heap]
I/DEBUG ( 974): 5122eaec afd0cd6f /system/lib/libc.so
I/DEBUG ( 974): 5122eaf0 00000000
I/DEBUG ( 974): 5122eaf4 000000c7
I/DEBUG ( 974): 5122eaf8 0000000a
I/DEBUG ( 974): 5122eafc 50e2f684 /dev/ashmem/AudioFlinger::Client
(deleted)
I/DEBUG ( 974): 5122eb00 a90440b6 /system/lib/libmedia.so
I/DEBUG ( 974): 5122eb04 0000000a
I/DEBUG ( 974): 5122eb08 003d2be8 [heap]
I/DEBUG ( 974): 5122eb0c 00000001
I/DEBUG ( 974): 5122eb10 00000007
I/DEBUG ( 974): 5122eb14 4ac89268 /dev/ashmem/mspace/dalvik-heap/2
(deleted)
I/DEBUG ( 974): 5122eb18 5122eb90
I/DEBUG ( 974): 5122eb1c 8084dcff /system/lib/libdvm.so
I/DEBUG ( 974): 5122eb20 df002777
I/DEBUG ( 974): 5122eb24 e3a070ad
I/DEBUG ( 974): #01 5122eb28 00332974 [heap]
I/DEBUG ( 974): 5122eb2c 80845765 /system/lib/libdvm.so
I/DEBUG ( 974): 5122eb30 003d2be8 [heap]
I/DEBUG ( 974): 5122eb34 808a13f4 /system/lib/libdvm.so
I/DEBUG ( 974): 5122eb38 00000140
I/DEBUG ( 974): 5122eb3c 003d2868 [heap]
I/DEBUG ( 974): 5122eb40 00000140
I/DEBUG ( 974): 5122eb44 00332a08 [heap]
I/DEBUG ( 974): 5122eb48 4aa73558 /dev/ashmem/mspace/dalvik-heap/2
(deleted)
I/DEBUG ( 974): 5122eb4c 440e2f64
I/DEBUG ( 974): 5122eb50 5122eb90
I/DEBUG ( 974): 5122eb54 440e2f4c
I/DEBUG ( 974): 5122eb58 440e2f38
I/DEBUG ( 974): 5122eb5c 81258030
/data/data/org.doubango.imsdroid/lib/libtinyWRAP.so

The following is the function backtrace for the SIGSEGV issue:
??:0
/sandbox/IMSDROID/doubango-read-only/tinyDAV/src/audio/tdav_session_audio.c:180
/sandbox/IMSDROID/doubango-read-only/bindings/java/android/../../_common/ProxyPr
oducer.cxx:197
/sandbox/IMSDROID/doubango-read-only/bindings/java/android/tinyWRAP_wrap.cxx:590
5

I searched out the issue list did not find similar issue with this one.

```

Original issue reported on code.google.com by `tsj...@gmail.com` on 10 Aug 2011 at 2:52

Attachments:
- [video_crash.log](https://storage.googleapis.com/google-code-attachments/imsdroid/issue-273/comment-0/video_crash.log)