Ticket #8248: gdb-vf_minterpolate_304

File gdb-vf_minterpolate_304, 16.9 KB (added by Suhwan, 7 years ago)
Line 
1GNU gdb (Ubuntu 8.1-0ubuntu3) 8.1.0.20180409-git
2Copyright (C) 2018 Free Software Foundation, Inc.
3License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html>
4This is free software: you are free to change and redistribute it.
5There is NO WARRANTY, to the extent permitted by law. Type "show copying"
6and "show warranty" for details.
7This GDB was configured as "x86_64-linux-gnu".
8Type "show configuration" for configuration details.
9For bug reporting instructions, please see:
10<http://www.gnu.org/software/gdb/bugs/>.
11Find the GDB manual and other documentation resources online at:
12<http://www.gnu.org/software/gdb/documentation/>.
13For help, type "help".
14Type "apropos word" to search for commands related to "word"...
15Reading symbols from ../ffmpeg/ffmpeg_g...done.
16(gdb) r
17Starting program: ffmpeg/ffmpeg_g -stream_loop 17 -y -r 94 -i samples/bmp/top-to-bottom-16x16-4bpp.bmp -filter_complex minterpolate -target vcd -loglevel 99 -c:s:18 pcm_alaw -c:a:103 sonicls -vframes 85 -aframes 36 -strict 0 output/tmp.gif
18[Thread debugging using libthread_db enabled]
19Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1".
20ffmpeg version N-95314-g1331e00179 Copyright (c) 2000-2019 the FFmpeg developers
21 built with clang version 6.0.0-1ubuntu2 (tags/RELEASE_600/final)
22 configuration: --cc=clang --cxx=clang++ --ld=clang --enable-debug --toolchain=clang-asan
23 libavutil 56. 35.100 / 56. 35.100
24 libavcodec 58. 59.102 / 58. 59.102
25 libavformat 58. 33.100 / 58. 33.100
26 libavdevice 58. 9.100 / 58. 9.100
27 libavfilter 7. 62.100 / 7. 62.100
28 libswscale 5. 6.100 / 5. 6.100
29 libswresample 3. 6.100 / 3. 6.100
30Splitting the commandline.
31Reading option '-stream_loop' ... matched as option 'stream_loop' (set number of times input stream shall be looped) with argument '17'.
32Reading option '-y' ... matched as option 'y' (overwrite output files) with argument '1'.
33Reading option '-r' ... matched as option 'r' (set frame rate (Hz value, fraction or abbreviation)) with argument '94'.
34Reading option '-i' ... matched as input url with argument 'samples/bmp/top-to-bottom-16x16-4bpp.bmp'.
35Reading option '-filter_complex' ... matched as option 'filter_complex' (create a complex filtergraph) with argument 'minterpolate'.
36Reading option '-target' ... matched as option 'target' (specify target file type ("vcd", "svcd", "dvd", "dv" or "dv50" with optional prefixes "pal-", "ntsc-" or "film-")) with argument 'vcd'.
37Reading option '-loglevel' ... matched as option 'loglevel' (set logging level) with argument '99'.
38Reading option '-c:s:18' ... matched as option 'c' (codec name) with argument 'pcm_alaw'.
39Reading option '-c:a:103' ... matched as option 'c' (codec name) with argument 'sonicls'.
40Reading option '-vframes' ... matched as option 'vframes' (set the number of video frames to output) with argument '85'.
41Reading option '-aframes' ... matched as option 'aframes' (set the number of audio frames to output) with argument '36'.
42Reading option '-strict' ...Routing option strict to both codec and muxer layer
43 matched as AVOption 'strict' with argument '0'.
44Reading option 'output/tmp.gif' ... matched as output url.
45Finished splitting the commandline.
46Parsing a group of options: global .
47Applying option y (overwrite output files) with argument 1.
48Applying option filter_complex (create a complex filtergraph) with argument minterpolate.
49Applying option loglevel (set logging level) with argument 99.
50Successfully parsed a group of options.
51Parsing a group of options: input url samples/bmp/top-to-bottom-16x16-4bpp.bmp.
52Applying option stream_loop (set number of times input stream shall be looped) with argument 17.
53Applying option r (set frame rate (Hz value, fraction or abbreviation)) with argument 94.
54Successfully parsed a group of options.
55Opening an input file: samples/bmp/top-to-bottom-16x16-4bpp.bmp.
56[NULL @ 0x61b000000080] Opening 'samples/bmp/top-to-bottom-16x16-4bpp.bmp' for reading
57[file @ 0x611000000180] Setting default whitelist 'file,crypto'
58Probing image2 score:50 size:246
59Probing mp3 score:1 size:246
60Probing bmp_pipe score:51 size:246
61[bmp_pipe @ 0x61b000000080] Format bmp_pipe probed with size=2048 and score=51
62[bmp_pipe @ 0x61b000000080] Before avformat_find_stream_info() pos: 0 bytes read:246 seeks:0 nb_streams:1
63[bmp_pipe @ 0x61b000000080] stream 0: start_time: -368934881474191040.000 duration: -368934881474191040.000
64[bmp_pipe @ 0x61b000000080] format: start_time: -9223372036854.775 duration: -9223372036854.775 (estimate from bit rate) bitrate=0 kb/s
65[bmp_pipe @ 0x61b000000080] After avformat_find_stream_info() pos: 246 bytes read:246 seeks:0 frames:1
66Input #0, bmp_pipe, from 'samples/bmp/top-to-bottom-16x16-4bpp.bmp':
67 Duration: N/A, bitrate: N/A
68 Stream #0:0, 1, 1/25: Video: bmp, 1 reference frame, pal8, 16x16, 0/1, 25 tbr, 25 tbn, 25 tbc
69Successfully opened the file.
70Parsing a group of options: output url output/tmp.gif.
71Applying option target (specify target file type ("vcd", "svcd", "dvd", "dv" or "dv50" with optional prefixes "pal-", "ntsc-" or "film-")) with argument vcd.
72Assuming PAL for target.
73Applying option c:s:18 (codec name) with argument pcm_alaw.
74Applying option c:a:103 (codec name) with argument sonicls.
75Applying option vframes (set the number of video frames to output) with argument 85.
76Applying option aframes (set the number of audio frames to output) with argument 36.
77Successfully parsed a group of options.
78Opening an output file: output/tmp.gif.
79[file @ 0x610000000540] Setting default whitelist 'file,crypto'
80Successfully opened the file.
81Stream mapping:
82 Stream #0:0 (bmp) -> minterpolate
83 minterpolate -> Stream #0:0 (mpeg1video)
84Press [q] to stop, [?] for help
85cur_dts is invalid st:0 (0) [init:0 i_done:0 finish:0] (this is harmless if it occurs once at the start per stream)
86detected 48 logical cores
87[New Thread 0x7ffff172d700 (LWP 19069)]
88[New Thread 0x7ffff0f2c700 (LWP 19072)]
89[New Thread 0x7ffff072b700 (LWP 19073)]
90[New Thread 0x7fffeff2a700 (LWP 19076)]
91[New Thread 0x7fffef729700 (LWP 19077)]
92[New Thread 0x7fffeef28700 (LWP 19078)]
93[New Thread 0x7fffee727700 (LWP 19079)]
94[New Thread 0x7fffedf26700 (LWP 19080)]
95[New Thread 0x7fffed725700 (LWP 19081)]
96[New Thread 0x7fffecf24700 (LWP 19082)]
97[New Thread 0x7fffec723700 (LWP 19084)]
98[New Thread 0x7fffebf22700 (LWP 19085)]
99[New Thread 0x7fffeb721700 (LWP 19086)]
100[New Thread 0x7fffeaf20700 (LWP 19087)]
101[New Thread 0x7fffea71f700 (LWP 19088)]
102[New Thread 0x7fffe9f1e700 (LWP 19089)]
103[New Thread 0x7fffe971d700 (LWP 19090)]
104[New Thread 0x7fffe8f1c700 (LWP 19091)]
105[New Thread 0x7fffe871b700 (LWP 19092)]
106[New Thread 0x7fffe7f1a700 (LWP 19093)]
107[New Thread 0x7fffe7719700 (LWP 19095)]
108[New Thread 0x7fffe6f18700 (LWP 19096)]
109[New Thread 0x7fffe6717700 (LWP 19097)]
110[New Thread 0x7fffe5f16700 (LWP 19099)]
111[New Thread 0x7fffe5715700 (LWP 19104)]
112[New Thread 0x7fffe4f14700 (LWP 19105)]
113[New Thread 0x7fffe4713700 (LWP 19107)]
114[New Thread 0x7fffe3f12700 (LWP 19108)]
115[New Thread 0x7fffe3711700 (LWP 19109)]
116[New Thread 0x7fffe2f08700 (LWP 19110)]
117[New Thread 0x7fffe26f1700 (LWP 19111)]
118[New Thread 0x7fffe1eda700 (LWP 19112)]
119[New Thread 0x7fffe16c3700 (LWP 19114)]
120[New Thread 0x7fffe0eac700 (LWP 19115)]
121[New Thread 0x7fffe0695700 (LWP 19116)]
122[New Thread 0x7fffdfe7e700 (LWP 19117)]
123[New Thread 0x7fffdf667700 (LWP 19118)]
124[New Thread 0x7fffdee50700 (LWP 19119)]
125[New Thread 0x7fffde639700 (LWP 19120)]
126[New Thread 0x7fffdde22700 (LWP 19123)]
127[New Thread 0x7fffdd60b700 (LWP 19126)]
128[New Thread 0x7fffdcdf4700 (LWP 19129)]
129[New Thread 0x7fffdc5dd700 (LWP 19135)]
130[New Thread 0x7fffdbdc6700 (LWP 19137)]
131[New Thread 0x7fffdb5af700 (LWP 19149)]
132[New Thread 0x7fffdad98700 (LWP 19150)]
133[New Thread 0x7fffda581700 (LWP 19152)]
134[New Thread 0x7fffd9d6a700 (LWP 19154)]
135[graph 0 input from stream 0:0 @ 0x6110000011c0] Setting 'video_size' to value '16x16'
136[graph 0 input from stream 0:0 @ 0x6110000011c0] Setting 'pix_fmt' to value '11'
137[graph 0 input from stream 0:0 @ 0x6110000011c0] Setting 'time_base' to value '1/94'
138[graph 0 input from stream 0:0 @ 0x6110000011c0] Setting 'pixel_aspect' to value '0/1'
139[graph 0 input from stream 0:0 @ 0x6110000011c0] Setting 'sws_param' to value 'flags=2'
140[graph 0 input from stream 0:0 @ 0x6110000011c0] Setting 'frame_rate' to value '94/1'
141[graph 0 input from stream 0:0 @ 0x6110000011c0] w:16 h:16 pixfmt:pal8 tb:1/94 fr:94/1 sar:0/1 sws_param:flags=2
142[scaler_out_0_0 @ 0x611000001440] Setting 'w' to value '352'
143[scaler_out_0_0 @ 0x611000001440] Setting 'h' to value '288'
144[scaler_out_0_0 @ 0x611000001440] Setting 'flags' to value 'bicubic'
145[scaler_out_0_0 @ 0x611000001440] w:352 h:288 flags:'bicubic' interl:0
146[format @ 0x6110000016c0] Setting 'pix_fmts' to value 'yuv420p'
147[auto_scaler_0 @ 0x611000011700] w:iw h:ih flags:'bilinear' interl:0
148[Parsed_minterpolate_0 @ 0x611000001080] auto-inserting filter 'auto_scaler_0' between the filter 'graph 0 input from stream 0:0' and the filter 'Parsed_minterpolate_0'
149[AVFilterGraph @ 0x60e000001600] query_formats: 5 queried, 3 merged, 1 already done, 0 delayed
150[auto_scaler_0 @ 0x611000011700] picking yuv444p out of 15 ref:pal8 alpha:0
151[auto_scaler_0 @ 0x611000011700] w:16 h:16 fmt:pal8 sar:0/1 -> w:16 h:16 fmt:yuv444p sar:0/1 flags:0x2
152[scaler_out_0_0 @ 0x611000001440] w:16 h:16 fmt:yuv444p sar:0/1 -> w:352 h:288 fmt:yuv420p sar:0/1 flags:0x4
153[Parsed_minterpolate_0 @ 0x611000001080] Initializing out pts from input pts 0
154[New Thread 0x7fffd9553700 (LWP 19168)]
155[New Thread 0x7fffd8d3c700 (LWP 19172)]
156[New Thread 0x7fffd8525700 (LWP 19174)]
157[New Thread 0x7fffd7d0e700 (LWP 19177)]
158[New Thread 0x7fffd74f7700 (LWP 19178)]
159[New Thread 0x7fffd6ce0700 (LWP 19185)]
160[New Thread 0x7fffd64c9700 (LWP 19190)]
161[New Thread 0x7fffd5cb2700 (LWP 19192)]
162[New Thread 0x7fffd549b700 (LWP 19193)]
163[New Thread 0x7fffd4c84700 (LWP 19194)]
164[New Thread 0x7fffd446d700 (LWP 19195)]
165[New Thread 0x7fffd3c56700 (LWP 19196)]
166[New Thread 0x7fffd343f700 (LWP 19198)]
167[New Thread 0x7fffd2c28700 (LWP 19205)]
168[New Thread 0x7fffd2411700 (LWP 19207)]
169[mpeg1video @ 0x619000002880] intra_quant_bias = 96 inter_quant_bias = 0
170Output #0, vcd, to 'output/tmp.gif':
171 Metadata:
172 encoder : Lavf58.33.100
173 Stream #0:0, 0, 1/90000: Video: mpeg1video, 1 reference frame, yuv420p, 352x288, 0/1, q=2-31, 1150 kb/s, 25 fps, 90k tbn, 25 tbc
174 Metadata:
175 encoder : Lavc58.59.102 mpeg1video
176 Side data:
177 cpb: bitrate max/min/avg: 1150000/1150000/1150000 buffer size: 327680 vbv_delay: N/A
178cur_dts is invalid st:0 (0) [init:1 i_done:0 finish:0] (this is harmless if it occurs once at the start per stream)
179=================================================================
180==18982==ERROR: AddressSanitizer: heap-use-after-free on address 0x619000004470 at pc 0x000001021720 bp 0x7fffffffa0d0 sp 0x7fffffffa0c8
181READ of size 1 at 0x619000004470 thread T0
182 #0 0x102171f in get_sbad_ob ffmpeg/libavfilter/vf_minterpolate.c:304:21
183 #1 0x1b12270 in ff_me_search_epzs ffmpeg/libavfilter/motion_estimation.c:346:5
184 #2 0x1008839 in search_mv ffmpeg/libavfilter/vf_minterpolate.c:515:13
185 #3 0xfe94eb in bilateral_me ffmpeg/libavfilter/vf_minterpolate.c:585:13
186 #4 0xfe94eb in inject_frame ffmpeg/libavfilter/vf_minterpolate.c:785
187 #5 0xfdfc0d in filter_frame ffmpeg/libavfilter/vf_minterpolate.c:1180:15
188 #6 0x827289 in ff_filter_activate_default ffmpeg/libavfilter/avfilter.c:1071:11
189 #7 0x827289 in ff_filter_activate ffmpeg/libavfilter/avfilter.c:1430
190 #8 0x870182 in push_frame ffmpeg/libavfilter/buffersrc.c:187:15
191 #9 0x870182 in av_buffersrc_add_frame_internal ffmpeg/libavfilter/buffersrc.c:261
192 #10 0x86ebc2 in av_buffersrc_add_frame_flags ffmpeg/libavfilter/buffersrc.c:170:16
193 #11 0x666867 in ifilter_send_frame ffmpeg/fftools/ffmpeg.c:2196:11
194 #12 0x666867 in send_frame_to_filters ffmpeg/fftools/ffmpeg.c:2270
195 #13 0x6075f7 in decode_video ffmpeg/fftools/ffmpeg.c:2469:11
196 #14 0x6075f7 in process_input_packet ffmpeg/fftools/ffmpeg.c:2623
197 #15 0x64ab67 in process_input ffmpeg/fftools/ffmpeg.c:4518:5
198 #16 0x5e7157 in transcode_step ffmpeg/fftools/ffmpeg.c:4638:11
199 #17 0x5e7157 in transcode ffmpeg/fftools/ffmpeg.c:4692
200 #18 0x5db65b in main ffmpeg/fftools/ffmpeg.c:4894:9
201 #19 0x7ffff5c93b96 in __libc_start_main /build/glibc-OTsEL5/glibc-2.27/csu/../csu/libc-start.c:310
202 #20 0x41def9 in _start (ffmpeg/ffmpeg_g+0x41def9)
203
2040x619000004470 is located 752 bytes inside of 1064-byte region [0x619000004180,0x6190000045a8)
205freed by thread T0 here:
206 #0 0x4ddbe0 in __interceptor_free.localalias.0 (ffmpeg/ffmpeg_g+0x4ddbe0)
207 #1 0x1d67a88 in dump_stream_format ffmpeg/libavformat/dump.c:492:5
208 #2 0x1d6571e in av_dump_format ffmpeg/libavformat/dump.c:659:13
209
210previously allocated by thread T0 here:
211 #0 0x4de9e8 in posix_memalign (ffmpeg/ffmpeg_g+0x4de9e8)
212 #1 0x8564fb1 in av_malloc ffmpeg/libavutil/mem.c:87:9
213 #2 0x46096ba in avcodec_alloc_context3 ffmpeg/libavcodec/options.c:158:28
214 #3 0x1d6571e in av_dump_format ffmpeg/libavformat/dump.c:659:13
215
216SUMMARY: AddressSanitizer: heap-use-after-free ffmpeg/libavfilter/vf_minterpolate.c:304:21 in get_sbad_ob
217Shadow bytes around the buggy address:
218 0x0c327fff8830: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
219 0x0c327fff8840: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
220 0x0c327fff8850: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
221 0x0c327fff8860: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
222 0x0c327fff8870: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
223=>0x0c327fff8880: fd fd fd fd fd fd fd fd fd fd fd fd fd fd[fd]fd
224 0x0c327fff8890: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
225 0x0c327fff88a0: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
226 0x0c327fff88b0: fd fd fd fd fd fa fa fa fa fa fa fa fa fa fa fa
227 0x0c327fff88c0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
228 0x0c327fff88d0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
229Shadow byte legend (one shadow byte represents 8 application bytes):
230 Addressable: 00
231 Partially addressable: 01 02 03 04 05 06 07
232 Heap left redzone: fa
233 Freed heap region: fd
234 Stack left redzone: f1
235 Stack mid redzone: f2
236 Stack right redzone: f3
237 Stack after return: f5
238 Stack use after scope: f8
239 Global redzone: f9
240 Global init order: f6
241 Poisoned by user: f7
242 Container overflow: fc
243 Array cookie: ac
244 Intra object redzone: bb
245 ASan internal: fe
246 Left alloca redzone: ca
247 Right alloca redzone: cb
248==18982==ABORTING
249[Thread 0x7fffd2411700 (LWP 19207) exited]
250[Thread 0x7fffd2c28700 (LWP 19205) exited]
251[Thread 0x7fffd343f700 (LWP 19198) exited]
252[Thread 0x7fffd3c56700 (LWP 19196) exited]
253[Thread 0x7fffd446d700 (LWP 19195) exited]
254[Thread 0x7fffd4c84700 (LWP 19194) exited]
255[Thread 0x7fffd549b700 (LWP 19193) exited]
256[Thread 0x7fffd5cb2700 (LWP 19192) exited]
257[Thread 0x7fffd64c9700 (LWP 19190) exited]
258[Thread 0x7fffd6ce0700 (LWP 19185) exited]
259[Thread 0x7fffd74f7700 (LWP 19178) exited]
260[Thread 0x7fffd7d0e700 (LWP 19177) exited]
261[Thread 0x7fffd8525700 (LWP 19174) exited]
262[Thread 0x7fffd8d3c700 (LWP 19172) exited]
263[Thread 0x7fffd9553700 (LWP 19168) exited]
264[Thread 0x7fffd9d6a700 (LWP 19154) exited]
265[Thread 0x7fffda581700 (LWP 19152) exited]
266[Thread 0x7fffdad98700 (LWP 19150) exited]
267[Thread 0x7fffdb5af700 (LWP 19149) exited]
268[Thread 0x7fffdbdc6700 (LWP 19137) exited]
269[Thread 0x7fffdc5dd700 (LWP 19135) exited]
270[Thread 0x7fffdcdf4700 (LWP 19129) exited]
271[Thread 0x7fffdd60b700 (LWP 19126) exited]
272[Thread 0x7fffdde22700 (LWP 19123) exited]
273[Thread 0x7fffde639700 (LWP 19120) exited]
274[Thread 0x7fffdee50700 (LWP 19119) exited]
275[Thread 0x7fffdf667700 (LWP 19118) exited]
276[Thread 0x7fffdfe7e700 (LWP 19117) exited]
277[Thread 0x7fffe0695700 (LWP 19116) exited]
278[Thread 0x7fffe0eac700 (LWP 19115) exited]
279[Thread 0x7fffe16c3700 (LWP 19114) exited]
280[Thread 0x7fffe1eda700 (LWP 19112) exited]
281[Thread 0x7fffe26f1700 (LWP 19111) exited]
282[Thread 0x7fffe2f08700 (LWP 19110) exited]
283[Thread 0x7fffe3711700 (LWP 19109) exited]
284[Thread 0x7fffe3f12700 (LWP 19108) exited]
285[Thread 0x7fffe4713700 (LWP 19107) exited]
286[Thread 0x7fffe4f14700 (LWP 19105) exited]
287[Thread 0x7fffe5715700 (LWP 19104) exited]
288[Thread 0x7fffe5f16700 (LWP 19099) exited]
289[Thread 0x7fffe6717700 (LWP 19097) exited]
290[Thread 0x7fffe6f18700 (LWP 19096) exited]
291[Thread 0x7fffe7719700 (LWP 19095) exited]
292[Thread 0x7fffe7f1a700 (LWP 19093) exited]
293[Thread 0x7fffe871b700 (LWP 19092) exited]
294[Thread 0x7fffe8f1c700 (LWP 19091) exited]
295[Thread 0x7fffe971d700 (LWP 19090) exited]
296[Thread 0x7fffe9f1e700 (LWP 19089) exited]
297[Thread 0x7fffea71f700 (LWP 19088) exited]
298[Thread 0x7fffeaf20700 (LWP 19087) exited]
299[Thread 0x7fffeb721700 (LWP 19086) exited]
300[Thread 0x7fffebf22700 (LWP 19085) exited]
301[Thread 0x7fffec723700 (LWP 19084) exited]
302[Thread 0x7fffecf24700 (LWP 19082) exited]
303[Thread 0x7fffed725700 (LWP 19081) exited]
304[Thread 0x7fffedf26700 (LWP 19080) exited]
305[Thread 0x7fffee727700 (LWP 19079) exited]
306[Thread 0x7fffef729700 (LWP 19077) exited]
307[Thread 0x7fffeff2a700 (LWP 19076) exited]
308[Thread 0x7ffff072b700 (LWP 19073) exited]
309[Thread 0x7ffff0f2c700 (LWP 19072) exited]
310[Thread 0x7ffff172d700 (LWP 19069) exited]
311[Thread 0x7ffff7fb6780 (LWP 18982) exited]
312[Inferior 1 (process 18982) exited with code 01]
313