[Q] Getting IOMX interface - Galaxy Tab 10.1 Q&A, Help & Troubleshooting

Hi,
I am trying to get access to the IOMX interface for use in a video decoding app.
I realize the API's I am using are non public and subject to change but the public API are not good enough for me.
I need access to the compressed and decoded data and so this seems to the way to go.
I found some sample code on the net that shows how to get the IOMX pointer.
(tried to post the link but it won't let me since, apparently I am a noob :cyclops
So I tried running that and I get a crash.
This is the code:
Code:
sp<IServiceManager> sm = defaultServiceManager();
Vector<String16> vec = sm->listServices();
sp<IBinder> binder = sm->getService(String16("media.player"));
sp<IMediaPlayerService> service = interface_cast<IMediaPlayerService>(binder);
[COLOR="Red"]sp<IOMX> mOMX = service->getOMX();[/COLOR]
And the crash occurrs on the last line (red) - start of dump below.
All I want is to be able to enumerate the OMX components for now. When that works I expect I can continue.
Should I be initializing anything before running the above code? OMX? Stagefright?
Thank you in advance,
Tomer
06-25 10:02:40.300: I/DEBUG(13769): *** *** *** *** *** *** *** *** *** *** *** *** *** *** *** ***
06-25 10:02:40.300: I/DEBUG(13769): Build fingerprint: 'samsung/GT-P7500/GT-P7500:3.2/HTJ85B/JJKK3:user/release-keys'
06-25 10:02:40.300: I/DEBUG(13769): pid: 15347, tid: 15359 >>> com.ai.playcast <<<
06-25 10:02:40.300: I/DEBUG(13769): signal 11 (SIGSEGV), code 1 (SEGV_MAPERR), fault addr ae684e99
06-25 10:02:40.300: I/DEBUG(13769): r0 ae684e99 r1 ae684e99 r2 00000001 r3 00000008
06-25 10:02:40.300: I/DEBUG(13769): r4 5c55e914 r5 ae684e99 r6 5c55e9d8 r7 00268910
06-25 10:02:40.300: I/DEBUG(13769): r8 a90388f5 r9 ae684e99 10 00268048 fp fffffe90
06-25 10:02:40.300: I/DEBUG(13769): ip a81233dc sp 5c55e8c0 lr a811aafd pc aff14aec cpsr 00000010

---

Questions go in the Q&A section

---

I have some updates on this that may make this less opaque.
I looked into the implementation of getOMX().
It seems straight forward enough so I copied it to my own code instead of calling getOMX(). This time it didn't crash - this is becoming a little voodoo.
However I got the handle to the IOMX object.
So then I tried enumerating the components but the list comes back empty.
Anyone has any idea why?
Here is my original crashing code (crashing on the red line):
Code:
android::ProcessState::self()->startThreadPool();
sp<IServiceManager> sm = defaultServiceManager();
sp<IBinder> binder = sm->getService(String16("media.player"));
sp<IMediaPlayerService> service = interface_cast<IMediaPlayerService>(binder);
[COLOR="Red"]sp<IOMX> mOMX = service->getOMX();[/COLOR]
This is my non-crashing code that returns an empty component list:
Code:
android::ProcessState::self()->startThreadPool();
sp<IServiceManager> sm = defaultServiceManager();
sp<IBinder> binder = sm->getService(String16("media.player"));
sp<IMediaPlayerService> service = interface_cast<IMediaPlayerService>(binder);
sp<IOMX> mOMX;
{
Parcel data, reply;
data.writeInterfaceToken(service->getInterfaceDescriptor());
binder->transact(6, data, &reply);
mOMX = interface_cast<IOMX>(reply.readStrongBinder());
}
List<IOMX::ComponentInfo> componenInfos;
status_t err = mOMX->listNodes(&componenInfos);
if (componenInfos.size() == 0)
[COLOR="red"]log_err("no components found %d", err);[/COLOR]
I've also tried calling OMX_Init() before all this but it didn't help.
Please, if anyone has any idea what's going on I would greatly appreciate it.
Thank you in advance