Description of problem:
Segment fault happens when play a Face.ogg vedio.

Version-Release number of selected component (if applicable):
gstreamer-plugins-base-0.10.20-3.0.1.el5_3
gstreamer-tools-0.10.20-3.el5
gstreamer-plugins-good-0.10.9-1.el5_3.1
gstreamer-plugins-base-debuginfo-0.10.20-3.0.1.el5_3
gstreamer-plugins-base-devel-0.10.20-3.0.1.el5_3
gstreamer-plugins-good-debuginfo-0.10.9-1.el5_3.1
gstreamer-plugins-good-debuginfo-0.10.9-1.el5_3.1
gstreamer-devel-0.10.20-3.el5
gstreamer-devel-0.10.20-3.el5
gstreamer-plugins-good-devel-0.10.9-1.el5_3.1
gstreamer-debuginfo-0.10.20-3.el5
gstreamer-plugins-good-devel-0.10.9-1.el5_3.1
gstreamer-debuginfo-0.10.20-3.el5
gstreamer-plugins-base-0.10.20-3.0.1.el5_3
totem-2.16.7-6.el5
gstreamer-plugins-base-devel-0.10.20-3.0.1.el5_3
totem-2.16.7-6.el5


How reproducible:
100%

Steps to Reproduce:
1. Login in to s390x-5s-v1.z900.redhat.com as an ordinary user
2. Get Face.ogg from the attached URL
3. Start totem and play the Face.ogg, it will be played normally, but after about 2 minutes it will get a segmentation fault. 
Note: Please do not drag the progress bar, just wait :) , this vedio costs about 3 minutes in total
  
Actual results:

Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 0x2000aa3d950 (LWP 29680)]
0x000002000926603c in ?? () from /usr/lib64/libtheora.so.0
(gdb) bt
#0  0x000002000926603c in ?? () from /usr/lib64/libtheora.so.0
#1  0x000002000927e03c in theora_decode_packetin ()
   from /usr/lib64/libtheora.so.0
#2  0x000002000924e274 in theora_handle_data_packet (
    dec=<value optimized out>, packet=0x2000aa3c968, outtime=76200000000)
    at theoradec.c:1064
#3  0x000002000924f2e4 in theora_dec_decode_buffer (dec=0x8060e2c0, 
    buf=0x2000c69c4b0) at theoradec.c:1271
#4  0x000002000924ffd0 in theora_dec_chain (pad=<value optimized out>, 
    buf=0x2000c69c4b0) at theoradec.c:1438
#5  0x000000444aaeb00c in gst_pad_chain_unchecked (pad=<value optimized out>, 
    buffer=<value optimized out>) at gstpad.c:3576
#6  0x000000444aaeb760 in gst_pad_push (pad=<value optimized out>, 
    buffer=<value optimized out>) at gstpad.c:3744
#7  0x0000020006c5f27c in gst_queue_loop (pad=<value optimized out>)
    at gstqueue.c:1028
#8  0x000000444ab0b7b8 in gst_task_func (task=<value optimized out>, 
    tclass=<value optimized out>) at gsttask.c:192
#9  0x0000004449e6d26c in g_thread_pool_thread_proxy (
    data=<value optimized out>) at gthreadpool.c:265
#10 0x0000004449e6b352 in g_thread_create_proxy (data=<value optimized out>)
    at gthread.c:553
#11 0x0000020000121974 in start_thread (arg=<value optimized out>)
---Type <return> to continue, or q <return> to quit---
    at pthread_create.c:299
#12 0x0000020000229d96 in thread_start () from /lib64/libc.so.6


Expected results:
The vedio played normally and none fault happen.

Additional info: