FFv1 deadlock

[Kieran Kunhya]

File: ​http://www.obe.tv/Downloads/fuzz/ffv1_fuzz7.avi

Script started on Fri 16 Oct 2015 21:57:33 BST
gdb]0;avdev@avdev: ~/ffmpegavdev@avdev:~/ffmpeg$ gdb ./ffmpeg_g
GNU gdb (Ubuntu/Linaro 7.4-2012.04-0ubuntu2.1) 7.4-2012.04
Copyright (C) 2012 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later <​http://gnu.org/licenses/gpl.html>
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law. Type "show copying"
and "show warranty" for details.
This GDB was configured as "x86_64-linux-gnu".
For bug reporting instructions, please see:
<​http://bugs.launchpad.net/gdb-linaro/>...
Reading symbols from /home/avdev/ffmpeg/ffmpeg_g...run -idone.
(gdb) run -i ffv1_fuzz7.avi -f null -
Starting program: /home/avdev/ffmpeg/ffmpeg_g -i ffv1_fuzz7.avi -f null -
warning: no loadable sections found in added symbol-file system-supplied DSO at 0x7ffff7ffa000
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1".
ffmpeg version N-76056-g5063a18 Copyright (c) 2000-2015 the FFmpeg developers

built with gcc 4.6 (Ubuntu/Linaro 4.6.3-1ubuntu5)
configuration:
libavutil 55. 4.100 / 55. 4.100
libavcodec 57. 7.100 / 57. 7.100
libavformat 57. 8.100 / 57. 8.100
libavdevice 57. 0.100 / 57. 0.100
libavfilter 6. 11.100 / 6. 11.100
libswscale 4. 0.100 / 4. 0.100
libswresample 2. 0.100 / 2. 0.100

[0;35m[avi @ 0x1bb2380] [0m[1;31mSomething went wrong during header parsing, I will ignore it and try to continue anyway.
[0m[0;36m[ffv1 @ 0x1bb3280] [0m[1;31mCRC mismatch 3B2D9423![0m[1;31mat 0.000000 seconds
[0m[0;36m[ffv1 @ 0x1bb3280] [0m[1;31mCRC mismatch 15A2C581![0m[1;31mat 0.000000 seconds
[0m[0;36m[ffv1 @ 0x1bb3280] [0m[1;31mCRC mismatch 19A8C3F![0m[1;31mat 0.000000 seconds
[0m[0;36m[ffv1 @ 0x1bb3280] [0m[1;31mCRC mismatch B77527F![0m[1;31mat 0.000000 seconds
[0mInput #0, avi, from 'ffv1_fuzz7.avi':

Duration: 00:00:02.00, start: 0.000000, bitrate: 80438 kb/s

Stream #0:0: Video: ffv1 (FFV1 / 0x31564646), yuv422p, 4816x608, SAR 608:405 DAR 4816:405, 25 fps, 25 tbr, 25 tbn, 25 tbc

[New Thread 0x7ffff72fa700 (LWP 17650)]
[New Thread 0x7ffff6af9700 (LWP 17653)]
[New Thread 0x7ffff62f8700 (LWP 17654)]
[New Thread 0x7ffff5af7700 (LWP 17655)]
[New Thread 0x7ffff52f6700 (LWP 17656)]
[New Thread 0x7ffff4af5700 (LWP 17657)]
[New Thread 0x7ffff42f4700 (LWP 17658)]
[New Thread 0x7ffff3af3700 (LWP 17659)]
[New Thread 0x7ffff32f2700 (LWP 17660)]
[New Thread 0x7ffff2af1700 (LWP 17661)]
[New Thread 0x7ffff22f0700 (LWP 17662)]
[New Thread 0x7ffff1aef700 (LWP 17663)]
[New Thread 0x7ffff12ee700 (LWP 17673)]
[New Thread 0x7ffff0aed700 (LWP 17674)]
[New Thread 0x7ffff02ec700 (LWP 17675)]
[New Thread 0x7fffefaeb700 (LWP 17676)]
[New Thread 0x7fffef2ea700 (LWP 17678)]
[New Thread 0x7fffeeae9700 (LWP 17680)]
Output #0, null, to 'pipe:':

Metadata:

encoder : Lavf57.8.100
Stream #0:0: Video: wrapped_avframe, yuv422p, 4816x608 [SAR 608:405 DAR 4816:405], q=2-31, 200 kb/s, 25 fps, 25 tbn, 25 tbc
Metadata:

encoder : Lavc57.7.100 wrapped_avframe

Stream mapping:

Stream #0:0 -> #0:0 (ffv1 (native) -> wrapped_avframe (native))

Press [q] to stop, ? for help
[0;36m[ffv1 @ 0x1bb9d00] [0m[1;31mCRC mismatch 3B2D9423![0m[1;31mat 0.000000 seconds
[0m[0;36m[ffv1 @ 0x1bb9d00] [0m[1;31mCRC mismatch 15A2C581![0m[1;31mat 0.000000 seconds
[0m[0;36m[ffv1 @ 0x1bb9d00] [0m[1;31mCRC mismatch 19A8C3F![0m[1;31mat 0.000000 seconds
[0m[0;36m[ffv1 @ 0x1bb9d00] [0m[1;31mCRC mismatch B77527F![0m[1;31mat 0.000000 seconds
[0m[0;36m[ffv1 @ 0x1bba3a0] [0m[1;31mCRC mismatch 8ABFE746![0m[1;31mat 0.040000 seconds
[0m[0;36m[ffv1 @ 0x1bba3a0] [0m[1;31mCRC mismatch A4F0A9EA![0m[1;31mat 0.040000 seconds
[0m[0;36m[ffv1 @ 0x1bba3a0] [0m[1;31mCRC mismatch C7ECFF8E![0m[1;31mat 0.040000 seconds
[0m[0;36m[ffv1 @ 0x1bba3a0] [0m[1;31mCRC mismatch 83C8D458![0m[1;31mat 0.040000 seconds
[0m[0;36m[ffv1 @ 0x1bba3a0] [0m[0;33mignoring invalid SAR: 669/1
[0m[0;36m[ffv1 @ 0x1d89c80] [0m[1;31mCRC mismatch C8AFC313![0m[1;31mat 0.080000 seconds
[0m[0;36m[ffv1 @ 0x1d89c80] [0m[1;31mCRC mismatch 644DC9A7![0m[1;31mat 0.080000 seconds
[0m[0;36m[ffv1 @ 0x1d89c80] [0m[1;31mCRC mismatch 615CC3D7![0m[1;31mat 0.080000 seconds
[0m[0;36m[ffv1 @ 0x1d89c80] [0m[1;31mCRC mismatch 7153E4C4![0m[1;31mat 0.080000 seconds
[0m[0;36m[ffv1 @ 0x1e6dd80] [0m[1;31mCRC mismatch D047D7D4![0m[1;31mat 0.120000 seconds
[0m[0;36m[ffv1 @ 0x1e6dd80] [0m[1;31mCRC mismatch 975839EC![0m[1;31mat 0.120000 seconds
[0m[0;36m[ffv1 @ 0x1f51e80] [0m[1;31mCRC mismatch C64B1CC3![0m[1;31mat 0.160000 seconds
[0m[0;36m[ffv1 @ 0x1f51e80] [0m[1;31mCRC mismatch 277BB30B![0m[1;31mat 0.160000 seconds
[0m[0;36m[ffv1 @ 0x20360a0] [0m[1;31mCRC mismatch FB046FC![0m[1;31mat 0.200000 seconds
[0m[0;36m[ffv1 @ 0x20360a0] [0m[1;31mCRC mismatch 5F2465D0![0m[1;31mat 0.200000 seconds
[0m[0;36m[ffv1 @ 0x20360a0] [0m[1;31mCRC mismatch D5A8D280![0m[1;31mat 0.200000 seconds
[0m[0;36m[ffv1 @ 0x211a2c0] [0m[1;31mCRC mismatch B08CB4CA![0m[1;31mat 0.240000 seconds
[0m[0;36m[ffv1 @ 0x21fe540] [0m[1;31mCRC mismatch CECA0854![0m[1;31mat 0.280000 seconds
[0m[0;36m[ffv1 @ 0x21fe540] [0m[1;31mCRC mismatch A990E1AC![0m[1;31mat 0.280000 seconds
[0m[0;36m[ffv1 @ 0x21fe540] [0m[1;31mCRC mismatch FF24243F![0m[1;31mat 0.280000 seconds
[0m[0;36m[ffv1 @ 0x21fe540] [0m[1;31mCRC mismatch 47765966![0m[1;31mat 0.280000 seconds
[0m[0;36m[ffv1 @ 0x22e27c0] [0m[1;31mCRC mismatch EFB84A48![0m[1;31mat 0.320000 seconds
[0m[0;36m[ffv1 @ 0x22e27c0] [0m[1;31mCRC mismatch 7C8EF546![0m[1;31mat 0.320000 seconds
[0m[0;36m[ffv1 @ 0x22e27c0] [0m[1;31mCRC mismatch 230EF003![0m[1;31mat 0.320000 seconds
[0m[0;36m[ffv1 @ 0x22e27c0] [0m[1;31mCRC mismatch 68964F3B![0m[1;31mat 0.320000 seconds
[0m[0;36m[ffv1 @ 0x1bb9d00] [0m[1;31mCRC mismatch 2A6BB18E![0m[1;31mat 0.360000 seconds
[0m[0;36m[ffv1 @ 0x1bb9d00] [0m[1;31mCRC mismatch 30381D4B![0m[1;31mat 0.360000 seconds
[0m[0;36m[ffv1 @ 0x1bb9d00] [0m[1;31mCRC mismatch BC05DE51![0m[1;31mat 0.360000 seconds
[0m[0;36m[ffv1 @ 0x1bb9d00] [0m[1;31mCRC mismatch 844CC2D![0m[1;31mat 0.360000 seconds
[0m[0;36m[ffv1 @ 0x1bb9d00] [0m[0;33mignoring invalid SAR: 623/0
[0m[0;36m[ffv1 @ 0x1f51e80] [0m[1;31mquant_table_index out of range
[0m[0;36m[ffv1 @ 0x1bba3a0] [0m[1;31mCRC mismatch A5F8ED17![0m[1;31mat 0.400000 seconds
[0m[0;36m[ffv1 @ 0x1d89c80] [0m[1;31mCRC mismatch D7859454![0m[1;31mat 0.440000 seconds
[0m[0;36m[ffv1 @ 0x1d89c80] [0m[1;31mCRC mismatch 293E4609![0m[1;31mat 0.440000 seconds
[0m[0;36m[ffv1 @ 0x1d89c80] [0m[1;31mCRC mismatch 81C5FA8B![0m[1;31mat 0.440000 seconds
[0m[0;36m[ffv1 @ 0x1d89c80] [0m[1;31mCRC mismatch 2C0967DE![0m[1;31mat 0.440000 seconds
[0m[0;36m[ffv1 @ 0x1bba3a0] [0m[1;31mCRC mismatch A3F11DA8![0m[1;31mat 0.400000 seconds
[0m[0;36m[ffv1 @ 0x1bba3a0] [0m[1;31mCRC mismatch A77027D2![0m[1;31mat 0.400000 seconds
[0m[0;36m[ffv1 @ 0x1bba3a0] [0m[1;31mCRC mismatch 403BE666![0m[1;31mat 0.400000 seconds
[0m
Program received signal SIGINT, Interrupt.
pthread_cond_wait@@GLIBC_2.3.2 () at ../nptl/sysdeps/unix/sysv/linux/x86_64/pthread_cond_wait.S:162
162 ../nptl/sysdeps/unix/sysv/linux/x86_64/pthread_cond_wait.S: No such file or directory.
(gdb) quit
A debugging session is active.

Inferior 1 [process 17369] will be killed.

Quit anyway? (y or n) y
]0;avdev@avdev: ~/ffmpegavdev@avdev:~/ffmpeg$
Script done on Fri 16 Oct 2015 21:57:45 BST

[Michael Niedermayer]

Fixed in a878dfa4f57d068eb69fb6614f7a4a20f769ee7b