Ticket #8246: gdb-vf_vmafmotion179

File gdb-vf_vmafmotion179, 15.0 KB (added by Suhwan, 7 years ago)
Line 
1GNU gdb (Ubuntu 8.1-0ubuntu3) 8.1.0.20180409-git
2Copyright (C) 2018 Free Software Foundation, Inc.
3License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html>
4This is free software: you are free to change and redistribute it.
5There is NO WARRANTY, to the extent permitted by law. Type "show copying"
6and "show warranty" for details.
7This GDB was configured as "x86_64-linux-gnu".
8Type "show configuration" for configuration details.
9For bug reporting instructions, please see:
10<http://www.gnu.org/software/gdb/bugs/>.
11Find the GDB manual and other documentation resources online at:
12<http://www.gnu.org/software/gdb/documentation/>.
13For help, type "help".
14Type "apropos word" to search for commands related to "word"...
15Reading symbols from ../ffmpeg/ffmpeg_g...done.
16(gdb) r
17Starting program: ffmpeg/ffmpeg_g -t 1 -y -r 98 -i samples/hello/queue/id:000504,orig:opaque.bmp -filter_complex vmafmotion -target vcd -loglevel 99 -c:a:23 pcm_s32be -disposition:v:174 g722 -disposition:v:232 cljr -aframes 7 -r 26 -ar 48000 -ac 16 -strict 2 output/tmp.anm
18[Thread debugging using libthread_db enabled]
19Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1".
20ffmpeg version N-95314-g1331e00179 Copyright (c) 2000-2019 the FFmpeg developers
21 built with clang version 6.0.0-1ubuntu2 (tags/RELEASE_600/final)
22 configuration: --cc=clang --cxx=clang++ --ld=clang --enable-debug --toolchain=clang-asan
23 libavutil 56. 35.100 / 56. 35.100
24 libavcodec 58. 59.102 / 58. 59.102
25 libavformat 58. 33.100 / 58. 33.100
26 libavdevice 58. 9.100 / 58. 9.100
27 libavfilter 7. 62.100 / 7. 62.100
28 libswscale 5. 6.100 / 5. 6.100
29 libswresample 3. 6.100 / 3. 6.100
30Splitting the commandline.
31Reading option '-t' ... matched as option 't' (record or transcode "duration" seconds of audio/video) with argument '1'.
32Reading option '-y' ... matched as option 'y' (overwrite output files) with argument '1'.
33Reading option '-r' ... matched as option 'r' (set frame rate (Hz value, fraction or abbreviation)) with argument '98'.
34Reading option '-i' ... matched as input url with argument 'samples/hello/queue/id:000504,orig:opaque.bmp'.
35Reading option '-filter_complex' ... matched as option 'filter_complex' (create a complex filtergraph) with argument 'vmafmotion'.
36Reading option '-target' ... matched as option 'target' (specify target file type ("vcd", "svcd", "dvd", "dv" or "dv50" with optional prefixes "pal-", "ntsc-" or "film-")) with argument 'vcd'.
37Reading option '-loglevel' ... matched as option 'loglevel' (set logging level) with argument '99'.
38Reading option '-c:a:23' ... matched as option 'c' (codec name) with argument 'pcm_s32be'.
39Reading option '-disposition:v:174' ... matched as option 'disposition' (disposition) with argument 'g722'.
40Reading option '-disposition:v:232' ... matched as option 'disposition' (disposition) with argument 'cljr'.
41Reading option '-aframes' ... matched as option 'aframes' (set the number of audio frames to output) with argument '7'.
42Reading option '-r' ... matched as option 'r' (set frame rate (Hz value, fraction or abbreviation)) with argument '26'.
43Reading option '-ar' ... matched as option 'ar' (set audio sampling rate (in Hz)) with argument '48000'.
44Reading option '-ac' ... matched as option 'ac' (set number of audio channels) with argument '16'.
45Reading option '-strict' ...Routing option strict to both codec and muxer layer
46 matched as AVOption 'strict' with argument '2'.
47Reading option 'output/tmp.anm' ... matched as output url.
48Finished splitting the commandline.
49Parsing a group of options: global .
50Applying option y (overwrite output files) with argument 1.
51Applying option filter_complex (create a complex filtergraph) with argument vmafmotion.
52Applying option loglevel (set logging level) with argument 99.
53Successfully parsed a group of options.
54Parsing a group of options: input url samples/hello/queue/id:000504,orig:opaque.bmp.
55Applying option t (record or transcode "duration" seconds of audio/video) with argument 1.
56Applying option r (set frame rate (Hz value, fraction or abbreviation)) with argument 98.
57Successfully parsed a group of options.
58Opening an input file: samples/hello/queue/id:000504,orig:opaque.bmp.
59[NULL @ 0x61b000000080] Opening 'samples/hello/queue/id:000504,orig:opaque.bmp' for reading
60[file @ 0x611000000180] Setting default whitelist 'file,crypto'
61Probing image2 score:50 size:1086
62Probing bmp_pipe score:51 size:1086
63[bmp_pipe @ 0x61b000000080] Format bmp_pipe probed with size=2048 and score=51
64[bmp_pipe @ 0x61b000000080] Before avformat_find_stream_info() pos: 0 bytes read:1086 seeks:0 nb_streams:1
65[bmp_pipe @ 0x61b000000080] stream 0: start_time: -368934881474191040.000 duration: -368934881474191040.000
66[bmp_pipe @ 0x61b000000080] format: start_time: -9223372036854.775 duration: -9223372036854.775 (estimate from bit rate) bitrate=0 kb/s
67[bmp_pipe @ 0x61b000000080] After avformat_find_stream_info() pos: 1086 bytes read:1086 seeks:0 frames:1
68Input #0, bmp_pipe, from 'samples/hello/queue/id:000504,orig:opaque.bmp':
69 Duration: N/A, bitrate: N/A
70 Stream #0:0, 1, 1/25: Video: bmp, 1 reference frame, pal8, 2x2, 0/1, 25 tbr, 25 tbn, 25 tbc
71Successfully opened the file.
72Parsing a group of options: output url output/tmp.anm.
73Applying option target (specify target file type ("vcd", "svcd", "dvd", "dv" or "dv50" with optional prefixes "pal-", "ntsc-" or "film-")) with argument vcd.
74Assuming PAL for target.
75Applying option c:a:23 (codec name) with argument pcm_s32be.
76Applying option disposition:v:174 (disposition) with argument g722.
77Applying option disposition:v:232 (disposition) with argument cljr.
78Applying option aframes (set the number of audio frames to output) with argument 7.
79Applying option r (set frame rate (Hz value, fraction or abbreviation)) with argument 26.
80Applying option ar (set audio sampling rate (in Hz)) with argument 48000.
81Applying option ac (set number of audio channels) with argument 16.
82Successfully parsed a group of options.
83Opening an output file: output/tmp.anm.
84[file @ 0x610000000740] Setting default whitelist 'file,crypto'
85Successfully opened the file.
86Stream mapping:
87 Stream #0:0 (bmp) -> vmafmotion
88 vmafmotion -> Stream #0:0 (mpeg1video)
89Press [q] to stop, [?] for help
90cur_dts is invalid st:0 (0) [init:0 i_done:0 finish:0] (this is harmless if it occurs once at the start per stream)
91detected 48 logical cores
92[New Thread 0x7ffff172d700 (LWP 4152)]
93[New Thread 0x7ffff0f2c700 (LWP 4157)]
94[New Thread 0x7ffff072b700 (LWP 4158)]
95[New Thread 0x7fffeff2a700 (LWP 4164)]
96[New Thread 0x7fffef729700 (LWP 4170)]
97[New Thread 0x7fffeef28700 (LWP 4171)]
98[New Thread 0x7fffee727700 (LWP 4172)]
99[New Thread 0x7fffedf26700 (LWP 4173)]
100[New Thread 0x7fffed725700 (LWP 4185)]
101[New Thread 0x7fffecf24700 (LWP 4187)]
102[New Thread 0x7fffec723700 (LWP 4189)]
103[New Thread 0x7fffebf22700 (LWP 4192)]
104[New Thread 0x7fffeb721700 (LWP 4196)]
105[New Thread 0x7fffeaf20700 (LWP 4198)]
106[New Thread 0x7fffea71f700 (LWP 4200)]
107[New Thread 0x7fffe9f1e700 (LWP 4202)]
108[New Thread 0x7fffe971d700 (LWP 4204)]
109[New Thread 0x7fffe8f1c700 (LWP 4207)]
110[New Thread 0x7fffe871b700 (LWP 4209)]
111[New Thread 0x7fffe7f1a700 (LWP 4211)]
112[New Thread 0x7fffe7719700 (LWP 4214)]
113[New Thread 0x7fffe6f18700 (LWP 4216)]
114[New Thread 0x7fffe6717700 (LWP 4235)]
115[New Thread 0x7fffe5f16700 (LWP 4237)]
116[New Thread 0x7fffe5715700 (LWP 4240)]
117[New Thread 0x7fffe4f14700 (LWP 4242)]
118[New Thread 0x7fffe4713700 (LWP 4244)]
119[New Thread 0x7fffe3f12700 (LWP 4247)]
120[New Thread 0x7fffe3711700 (LWP 4250)]
121[New Thread 0x7fffe2f08700 (LWP 4252)]
122[New Thread 0x7fffe26f1700 (LWP 4257)]
123[New Thread 0x7fffe1eda700 (LWP 4261)]
124[New Thread 0x7fffe16c3700 (LWP 4264)]
125[New Thread 0x7fffe0eac700 (LWP 4265)]
126[New Thread 0x7fffe0695700 (LWP 4266)]
127[New Thread 0x7fffdfe7e700 (LWP 4268)]
128[New Thread 0x7fffdf667700 (LWP 4269)]
129[New Thread 0x7fffdee50700 (LWP 4270)]
130[New Thread 0x7fffde639700 (LWP 4272)]
131[New Thread 0x7fffdde22700 (LWP 4274)]
132[New Thread 0x7fffdd60b700 (LWP 4278)]
133[New Thread 0x7fffdcdf4700 (LWP 4280)]
134[New Thread 0x7fffdc5dd700 (LWP 4285)]
135[New Thread 0x7fffdbdc6700 (LWP 4286)]
136[New Thread 0x7fffdb5af700 (LWP 4288)]
137[New Thread 0x7fffdad98700 (LWP 4294)]
138[New Thread 0x7fffda581700 (LWP 4301)]
139[New Thread 0x7fffd9d6a700 (LWP 4303)]
140[graph 0 input from stream 0:0 @ 0x6110000011c0] Setting 'video_size' to value '2x2'
141[graph 0 input from stream 0:0 @ 0x6110000011c0] Setting 'pix_fmt' to value '11'
142[graph 0 input from stream 0:0 @ 0x6110000011c0] Setting 'time_base' to value '1/98'
143[graph 0 input from stream 0:0 @ 0x6110000011c0] Setting 'pixel_aspect' to value '0/1'
144[graph 0 input from stream 0:0 @ 0x6110000011c0] Setting 'sws_param' to value 'flags=2'
145[graph 0 input from stream 0:0 @ 0x6110000011c0] Setting 'frame_rate' to value '98/1'
146[graph 0 input from stream 0:0 @ 0x6110000011c0] w:2 h:2 pixfmt:pal8 tb:1/98 fr:98/1 sar:0/1 sws_param:flags=2
147[scaler_out_0_0 @ 0x611000001580] Setting 'w' to value '352'
148[scaler_out_0_0 @ 0x611000001580] Setting 'h' to value '288'
149[scaler_out_0_0 @ 0x611000001580] Setting 'flags' to value 'bicubic'
150[scaler_out_0_0 @ 0x611000001580] w:352 h:288 flags:'bicubic' interl:0
151[format @ 0x611000001800] Setting 'pix_fmts' to value 'yuv420p'
152[auto_scaler_0 @ 0x611000012c40] w:iw h:ih flags:'bilinear' interl:0
153[trim_in_0_0 @ 0x611000001300] auto-inserting filter 'auto_scaler_0' between the filter 'graph 0 input from stream 0:0' and the filter 'trim_in_0_0'
154[AVFilterGraph @ 0x60e000001540] query_formats: 6 queried, 4 merged, 1 already done, 0 delayed
155[auto_scaler_0 @ 0x611000012c40] picking yuv444p out of 28 ref:pal8 alpha:0
156[auto_scaler_0 @ 0x611000012c40] w:2 h:2 fmt:pal8 sar:0/1 -> w:2 h:2 fmt:yuv444p sar:0/1 flags:0x2
157[scaler_out_0_0 @ 0x611000001580] w:2 h:2 fmt:yuv444p sar:0/1 -> w:352 h:288 fmt:yuv420p sar:0/1 flags:0x4
158=================================================================
159==4009==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x60a000000ca0 at pc 0x0000013c6187 bp 0x7fffffffa590 sp 0x7fffffffa588
160WRITE of size 2 at 0x60a000000ca0 thread T0
161 #0 0x13c6186 in convolution_y_8bit ffmpeg/libavfilter/vf_vmafmotion.c:179:1
162 #1 0x13bcaf8 in ff_vmafmotion_process ffmpeg/libavfilter/vf_vmafmotion.c:192:5
163 #2 0x13c68f8 in do_vmafmotion ffmpeg/libavfilter/vf_vmafmotion.c:225:13
164 #3 0x13c68f8 in filter_frame ffmpeg/libavfilter/vf_vmafmotion.c:300
165 #4 0x827289 in ff_filter_activate_default ffmpeg/libavfilter/avfilter.c:1071:11
166 #5 0x827289 in ff_filter_activate ffmpeg/libavfilter/avfilter.c:1430
167 #6 0x870182 in push_frame ffmpeg/libavfilter/buffersrc.c:187:15
168 #7 0x870182 in av_buffersrc_add_frame_internal ffmpeg/libavfilter/buffersrc.c:261
169 #8 0x86ebc2 in av_buffersrc_add_frame_flags ffmpeg/libavfilter/buffersrc.c:170:16
170 #9 0x666867 in ifilter_send_frame ffmpeg/fftools/ffmpeg.c:2196:11
171 #10 0x666867 in send_frame_to_filters ffmpeg/fftools/ffmpeg.c:2270
172 #11 0x6075f7 in decode_video ffmpeg/fftools/ffmpeg.c:2469:11
173 #12 0x6075f7 in process_input_packet ffmpeg/fftools/ffmpeg.c:2623
174 #13 0x64ab67 in process_input ffmpeg/fftools/ffmpeg.c:4518:5
175 #14 0x5e7157 in transcode_step ffmpeg/fftools/ffmpeg.c:4638:11
176 #15 0x5e7157 in transcode ffmpeg/fftools/ffmpeg.c:4692
177 #16 0x5db65b in main ffmpeg/fftools/ffmpeg.c:4894:9
178 #17 0x7ffff5c93b96 in __libc_start_main /build/glibc-OTsEL5/glibc-2.27/csu/../csu/libc-start.c:310
179 #18 0x41def9 in _start (ffmpeg/ffmpeg_g+0x41def9)
180
1810x60a000000ca0 is located 32 bytes to the left of 64-byte region [0x60a000000cc0,0x60a000000d00)
182allocated by thread T0 here:
183 #0 0x4de9e8 in posix_memalign (ffmpeg/ffmpeg_g+0x4de9e8)
184 #1 0x8564fb1 in av_malloc ffmpeg/libavutil/mem.c:87:9
185 #2 0x13be241 in ff_vmafmotion_init ffmpeg/libavfilter/vf_vmafmotion.c:248:29
186
187SUMMARY: AddressSanitizer: heap-buffer-overflow ffmpeg/libavfilter/vf_vmafmotion.c:179:1 in convolution_y_8bit
188Shadow bytes around the buggy address:
189 0x0c147fff8140: fa fa fa fa fa fa fa fa fd fd fd fd fd fd fd fd
190 0x0c147fff8150: fa fa fa fa fa fa fa fa fd fd fd fd fd fd fd fd
191 0x0c147fff8160: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
192 0x0c147fff8170: 00 00 00 00 00 00 00 00 fa fa fa fa fa fa fa fa
193 0x0c147fff8180: 00 00 00 00 00 00 00 00 fa fa fa fa fa fa fa fa
194=>0x0c147fff8190: fa fa fa fa[fa]fa fa fa 00 00 00 00 00 00 00 00
195 0x0c147fff81a0: fa fa fa fa fa fa fa fa fd fd fd fd fd fd fd fa
196 0x0c147fff81b0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
197 0x0c147fff81c0: fd fd fd fd fd fd fd fa fa fa fa fa fa fa fa fa
198 0x0c147fff81d0: fd fd fd fd fd fd fd fa fa fa fa fa fa fa fa fa
199 0x0c147fff81e0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
200Shadow byte legend (one shadow byte represents 8 application bytes):
201 Addressable: 00
202 Partially addressable: 01 02 03 04 05 06 07
203 Heap left redzone: fa
204 Freed heap region: fd
205 Stack left redzone: f1
206 Stack mid redzone: f2
207 Stack right redzone: f3
208 Stack after return: f5
209 Stack use after scope: f8
210 Global redzone: f9
211 Global init order: f6
212 Poisoned by user: f7
213 Container overflow: fc
214 Array cookie: ac
215 Intra object redzone: bb
216 ASan internal: fe
217 Left alloca redzone: ca
218 Right alloca redzone: cb
219==4009==ABORTING
220[Thread 0x7fffd9d6a700 (LWP 4303) exited]
221[Thread 0x7fffda581700 (LWP 4301) exited]
222[Thread 0x7fffdad98700 (LWP 4294) exited]
223[Thread 0x7fffdb5af700 (LWP 4288) exited]
224[Thread 0x7fffdbdc6700 (LWP 4286) exited]
225[Thread 0x7fffdc5dd700 (LWP 4285) exited]
226[Thread 0x7fffdcdf4700 (LWP 4280) exited]
227[Thread 0x7fffdd60b700 (LWP 4278) exited]
228[Thread 0x7fffde639700 (LWP 4272) exited]
229[Thread 0x7fffdee50700 (LWP 4270) exited]
230[Thread 0x7fffdf667700 (LWP 4269) exited]
231[Thread 0x7fffdfe7e700 (LWP 4268) exited]
232[Thread 0x7fffe0695700 (LWP 4266) exited]
233[Thread 0x7fffe0eac700 (LWP 4265) exited]
234[Thread 0x7fffe16c3700 (LWP 4264) exited]
235[Thread 0x7fffe1eda700 (LWP 4261) exited]
236[Thread 0x7fffe26f1700 (LWP 4257) exited]
237[Thread 0x7fffe2f08700 (LWP 4252) exited]
238[Thread 0x7fffe3711700 (LWP 4250) exited]
239[Thread 0x7fffe3f12700 (LWP 4247) exited]
240[Thread 0x7fffe4713700 (LWP 4244) exited]
241[Thread 0x7fffe4f14700 (LWP 4242) exited]
242[Thread 0x7fffe5715700 (LWP 4240) exited]
243[Thread 0x7fffe5f16700 (LWP 4237) exited]
244[Thread 0x7fffe6717700 (LWP 4235) exited]
245[Thread 0x7fffe6f18700 (LWP 4216) exited]
246[Thread 0x7fffe7719700 (LWP 4214) exited]
247[Thread 0x7fffe7f1a700 (LWP 4211) exited]
248[Thread 0x7fffe871b700 (LWP 4209) exited]
249[Thread 0x7fffe8f1c700 (LWP 4207) exited]
250[Thread 0x7fffe971d700 (LWP 4204) exited]
251[Thread 0x7fffe9f1e700 (LWP 4202) exited]
252[Thread 0x7fffea71f700 (LWP 4200) exited]
253[Thread 0x7fffeaf20700 (LWP 4198) exited]
254[Thread 0x7fffeb721700 (LWP 4196) exited]
255[Thread 0x7fffebf22700 (LWP 4192) exited]
256[Thread 0x7fffec723700 (LWP 4189) exited]
257[Thread 0x7fffecf24700 (LWP 4187) exited]
258[Thread 0x7fffed725700 (LWP 4185) exited]
259[Thread 0x7fffedf26700 (LWP 4173) exited]
260[Thread 0x7fffee727700 (LWP 4172) exited]
261[Thread 0x7fffeef28700 (LWP 4171) exited]
262[Thread 0x7fffef729700 (LWP 4170) exited]
263[Thread 0x7fffeff2a700 (LWP 4164) exited]
264[Thread 0x7ffff072b700 (LWP 4158) exited]
265[Thread 0x7ffff0f2c700 (LWP 4157) exited]
266[Thread 0x7ffff172d700 (LWP 4152) exited]
267[Thread 0x7ffff7fb6780 (LWP 4009) exited]
268[Inferior 1 (process 4009) exited with code 01]
269