Ticket #8250: gdb-vf_colorconstancy_282

File gdb-vf_colorconstancy_282, 15.0 KB (added by Suhwan, 7 years ago)
Line 
1GNU gdb (Ubuntu 8.1-0ubuntu3) 8.1.0.20180409-git
2Copyright (C) 2018 Free Software Foundation, Inc.
3License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html>
4This is free software: you are free to change and redistribute it.
5There is NO WARRANTY, to the extent permitted by law. Type "show copying"
6and "show warranty" for details.
7This GDB was configured as "x86_64-linux-gnu".
8Type "show configuration" for configuration details.
9For bug reporting instructions, please see:
10<http://www.gnu.org/software/gdb/bugs/>.
11Find the GDB manual and other documentation resources online at:
12<http://www.gnu.org/software/gdb/documentation/>.
13For help, type "help".
14Type "apropos word" to search for commands related to "word"...
15Reading symbols from ../ffmpeg/ffmpeg_g...done.
16(gdb) r
17Starting program: ffmpeg/ffmpeg_g -t 2 -y -r 38 -i samples/tmp3/tmp-184.bmp -filter_complex greyedge -target dv -loglevel 99 -map 0 -c:v:102 sgi -disposition:a:131 pam -disposition:s:1 vc2 -r 100 -ab 579k -ar 48000 output/tmp.avs2
18[Thread debugging using libthread_db enabled]
19Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1".
20ffmpeg version N-95314-g1331e00179 Copyright (c) 2000-2019 the FFmpeg developers
21 built with clang version 6.0.0-1ubuntu2 (tags/RELEASE_600/final)
22 configuration: --cc=clang --cxx=clang++ --ld=clang --enable-debug --toolchain=clang-asan
23 libavutil 56. 35.100 / 56. 35.100
24 libavcodec 58. 59.102 / 58. 59.102
25 libavformat 58. 33.100 / 58. 33.100
26 libavdevice 58. 9.100 / 58. 9.100
27 libavfilter 7. 62.100 / 7. 62.100
28 libswscale 5. 6.100 / 5. 6.100
29 libswresample 3. 6.100 / 3. 6.100
30Splitting the commandline.
31Reading option '-t' ... matched as option 't' (record or transcode "duration" seconds of audio/video) with argument '2'.
32Reading option '-y' ... matched as option 'y' (overwrite output files) with argument '1'.
33Reading option '-r' ... matched as option 'r' (set frame rate (Hz value, fraction or abbreviation)) with argument '38'.
34Reading option '-i' ... matched as input url with argument 'samples/tmp3/tmp-184.bmp'.
35Reading option '-filter_complex' ... matched as option 'filter_complex' (create a complex filtergraph) with argument 'greyedge'.
36Reading option '-target' ... matched as option 'target' (specify target file type ("vcd", "svcd", "dvd", "dv" or "dv50" with optional prefixes "pal-", "ntsc-" or "film-")) with argument 'dv'.
37Reading option '-loglevel' ... matched as option 'loglevel' (set logging level) with argument '99'.
38Reading option '-map' ... matched as option 'map' (set input stream mapping) with argument '0'.
39Reading option '-c:v:102' ... matched as option 'c' (codec name) with argument 'sgi'.
40Reading option '-disposition:a:131' ... matched as option 'disposition' (disposition) with argument 'pam'.
41Reading option '-disposition:s:1' ... matched as option 'disposition' (disposition) with argument 'vc2'.
42Reading option '-r' ... matched as option 'r' (set frame rate (Hz value, fraction or abbreviation)) with argument '100'.
43Reading option '-ab' ... matched as option 'ab' (audio bitrate (please use -b:a)) with argument '579k'.
44Reading option '-ar' ... matched as option 'ar' (set audio sampling rate (in Hz)) with argument '48000'.
45Reading option 'output/tmp.avs2' ... matched as output url.
46Finished splitting the commandline.
47Parsing a group of options: global .
48Applying option y (overwrite output files) with argument 1.
49Applying option filter_complex (create a complex filtergraph) with argument greyedge.
50Applying option loglevel (set logging level) with argument 99.
51Successfully parsed a group of options.
52Parsing a group of options: input url samples/tmp3/tmp-184.bmp.
53Applying option t (record or transcode "duration" seconds of audio/video) with argument 2.
54Applying option r (set frame rate (Hz value, fraction or abbreviation)) with argument 38.
55Successfully parsed a group of options.
56Opening an input file: samples/tmp3/tmp-184.bmp.
57[NULL @ 0x61b000000080] Opening 'samples/tmp3/tmp-184.bmp' for reading
58[file @ 0x610000000140] Setting default whitelist 'file,crypto'
59Probing image2 score:50 size:2048
60Probing mp3 score:1 size:2048
61Probing bmp_pipe score:51 size:2048
62[bmp_pipe @ 0x61b000000080] Format bmp_pipe probed with size=2048 and score=51
63[bmp_pipe @ 0x61b000000080] Before avformat_find_stream_info() pos: 0 bytes read:14538 seeks:0 nb_streams:1
64[bmp_pipe @ 0x61b000000080] stream 0: start_time: -368934881474191040.000 duration: -368934881474191040.000
65[bmp_pipe @ 0x61b000000080] format: start_time: -9223372036854.775 duration: -9223372036854.775 (estimate from bit rate) bitrate=0 kb/s
66[bmp_pipe @ 0x61b000000080] After avformat_find_stream_info() pos: 14538 bytes read:14538 seeks:0 frames:1
67Input #0, bmp_pipe, from 'samples/tmp3/tmp-184.bmp':
68 Duration: N/A, bitrate: N/A
69 Stream #0:0, 1, 1/25: Video: bmp, 1 reference frame, bgra, 60x60, 0/1, 25 tbr, 25 tbn, 25 tbc
70Successfully opened the file.
71Parsing a group of options: output url output/tmp.avs2.
72Applying option target (specify target file type ("vcd", "svcd", "dvd", "dv" or "dv50" with optional prefixes "pal-", "ntsc-" or "film-")) with argument dv.
73Assuming PAL for target.
74Applying option map (set input stream mapping) with argument 0.
75Applying option c:v:102 (codec name) with argument sgi.
76Applying option disposition:a:131 (disposition) with argument pam.
77Applying option disposition:s:1 (disposition) with argument vc2.
78Applying option r (set frame rate (Hz value, fraction or abbreviation)) with argument 100.
79Applying option ab (audio bitrate (please use -b:a)) with argument 579k.
80Applying option ar (set audio sampling rate (in Hz)) with argument 48000.
81Successfully parsed a group of options.
82Opening an output file: output/tmp.avs2.
83Codec AVOption b (set bitrate (in bits/s)) specified for output file #0 (output/tmp.avs2) has not been used for any stream. The most likely reason is either wrong type (e.g. a video option with no video streams) or that it is a private option of some encoder which was not actually used for any stream.
84[file @ 0x610000000840] Setting default whitelist 'file,crypto'
85Successfully opened the file.
86Stream mapping:
87 Stream #0:0 (bmp) -> greyedge
88 greyedge -> Stream #0:0 (dvvideo)
89Press [q] to stop, [?] for help
90cur_dts is invalid st:0 (0) [init:0 i_done:0 finish:0] (this is harmless if it occurs once at the start per stream)
91detected 48 logical cores
92[New Thread 0x7ffff172d700 (LWP 35745)]
93[New Thread 0x7ffff0f2c700 (LWP 35746)]
94[New Thread 0x7ffff072b700 (LWP 35748)]
95[New Thread 0x7fffeff2a700 (LWP 35749)]
96[New Thread 0x7fffef729700 (LWP 35750)]
97[New Thread 0x7fffeef28700 (LWP 35752)]
98[New Thread 0x7fffee727700 (LWP 35755)]
99[New Thread 0x7fffedf26700 (LWP 35756)]
100[New Thread 0x7fffed725700 (LWP 35759)]
101[New Thread 0x7fffecf24700 (LWP 35760)]
102[New Thread 0x7fffec723700 (LWP 35761)]
103[New Thread 0x7fffebf22700 (LWP 35763)]
104[New Thread 0x7fffeb721700 (LWP 35764)]
105[New Thread 0x7fffeaf20700 (LWP 35767)]
106[New Thread 0x7fffea71f700 (LWP 35768)]
107[New Thread 0x7fffe9f1e700 (LWP 35770)]
108[New Thread 0x7fffe971d700 (LWP 35772)]
109[New Thread 0x7fffe8f1c700 (LWP 35773)]
110[New Thread 0x7fffe871b700 (LWP 35774)]
111[New Thread 0x7fffe7f1a700 (LWP 35775)]
112[New Thread 0x7fffe7719700 (LWP 35776)]
113[New Thread 0x7fffe6f18700 (LWP 35778)]
114[New Thread 0x7fffe6717700 (LWP 35780)]
115[New Thread 0x7fffe5f00700 (LWP 35781)]
116[New Thread 0x7fffe56e9700 (LWP 35782)]
117[New Thread 0x7fffe4ed2700 (LWP 35783)]
118[New Thread 0x7fffe46bb700 (LWP 35784)]
119[New Thread 0x7fffe3ea4700 (LWP 35785)]
120[New Thread 0x7fffe368d700 (LWP 35786)]
121[New Thread 0x7fffe2e76700 (LWP 35787)]
122[New Thread 0x7fffe265f700 (LWP 35790)]
123[New Thread 0x7fffe1e48700 (LWP 35791)]
124[New Thread 0x7fffe1631700 (LWP 35793)]
125[New Thread 0x7fffe0e1a700 (LWP 35798)]
126[New Thread 0x7fffe0603700 (LWP 35801)]
127[New Thread 0x7fffdfdec700 (LWP 35804)]
128[New Thread 0x7fffdf5d5700 (LWP 35806)]
129[New Thread 0x7fffdedbe700 (LWP 35812)]
130[New Thread 0x7fffde5a7700 (LWP 35813)]
131[New Thread 0x7fffddd90700 (LWP 35814)]
132[New Thread 0x7fffdd579700 (LWP 35815)]
133[New Thread 0x7fffdcd62700 (LWP 35816)]
134[New Thread 0x7fffdc54b700 (LWP 35817)]
135[New Thread 0x7fffdbd34700 (LWP 35819)]
136[New Thread 0x7fffdb51d700 (LWP 35820)]
137[New Thread 0x7fffdad06700 (LWP 35822)]
138[New Thread 0x7fffda4ef700 (LWP 35823)]
139[New Thread 0x7fffd9cd8700 (LWP 35824)]
140[graph 0 input from stream 0:0 @ 0x611000001080] Setting 'video_size' to value '60x60'
141[graph 0 input from stream 0:0 @ 0x611000001080] Setting 'pix_fmt' to value '28'
142[graph 0 input from stream 0:0 @ 0x611000001080] Setting 'time_base' to value '1/38'
143[graph 0 input from stream 0:0 @ 0x611000001080] Setting 'pixel_aspect' to value '0/1'
144[graph 0 input from stream 0:0 @ 0x611000001080] Setting 'sws_param' to value 'flags=2'
145[graph 0 input from stream 0:0 @ 0x611000001080] Setting 'frame_rate' to value '38/1'
146[graph 0 input from stream 0:0 @ 0x611000001080] w:60 h:60 pixfmt:bgra tb:1/38 fr:38/1 sar:0/1 sws_param:flags=2
147[scaler_out_0_0 @ 0x611000001440] Setting 'w' to value '720'
148[scaler_out_0_0 @ 0x611000001440] Setting 'h' to value '576'
149[scaler_out_0_0 @ 0x611000001440] Setting 'flags' to value 'bicubic'
150[scaler_out_0_0 @ 0x611000001440] w:720 h:576 flags:'bicubic' interl:0
151[format @ 0x6110000016c0] Setting 'pix_fmts' to value 'yuv420p'
152[auto_scaler_0 @ 0x611000012b00] w:iw h:ih flags:'bilinear' interl:0
153[trim_in_0_0 @ 0x6110000011c0] auto-inserting filter 'auto_scaler_0' between the filter 'graph 0 input from stream 0:0' and the filter 'trim_in_0_0'
154[AVFilterGraph @ 0x60e000001280] query_formats: 6 queried, 4 merged, 1 already done, 0 delayed
155[swscaler @ 0x62f00000e400] Forcing full internal H chroma due to input having non subsampled chroma
156[auto_scaler_0 @ 0x611000012b00] w:60 h:60 fmt:bgra sar:0/1 -> w:60 h:60 fmt:gbrp sar:0/1 flags:0x2
157[Parsed_greyedge_0 @ 0x611000000f40] Setting 0-d gauss with filtersize = 7.
158[Parsed_greyedge_0 @ 0x611000000f40] Setting 1-d gauss with filtersize = 7.
159[scaler_out_0_0 @ 0x611000001440] w:60 h:60 fmt:gbrp sar:0/1 -> w:720 h:576 fmt:yuv420p sar:0/1 flags:0x4
160[Parsed_greyedge_0 @ 0x611000000f40] Allocating 2 buffer(s) for grey edge.
161=================================================================
162==35623==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x60a000000a38 at pc 0x000000b2885c bp 0x7ffff172cb60 sp 0x7ffff172cb58
163READ of size 8 at 0x60a000000a38 thread T1
164 #0 0xb2885b in slice_get_derivative ffmpeg/libavfilter/vf_colorconstancy.c:282:53
165 #1 0x9429d9 in worker_func ffmpeg/libavfilter/pthread.c:50:15
166 #2 0x8658de2 in run_jobs ffmpeg/libavutil/slicethread.c:61:9
167 #3 0x865674d in thread_worker ffmpeg/libavutil/slicethread.c:85:13
168 #4 0x4eb9de in __asan::AsanThread::ThreadStart(unsigned long, __sanitizer::atomic_uintptr_t*) (ffmpeg/ffmpeg_g+0x4eb9de)
169 #5 0x7ffff668e6da in start_thread (/lib/x86_64-linux-gnu/libpthread.so.0+0x76da)
170 #6 0x7ffff5d9388e in clone /build/glibc-OTsEL5/glibc-2.27/misc/../sysdeps/unix/sysv/linux/x86_64/clone.S:95
171
1720x60a000000a38 is located 8 bytes to the left of 56-byte region [0x60a000000a40,0x60a000000a78)
173allocated by thread T0 here:
174 #0 0x4de9e8 in posix_memalign (ffmpeg/ffmpeg_g+0x4de9e8)
175 #1 0x8565daa in av_malloc ffmpeg/libavutil/mem.c:87:9
176 #2 0x8565daa in av_mallocz ffmpeg/libavutil/mem.c:238
177 #3 0x8565daa in av_mallocz_array ffmpeg/libavutil/mem.c:195
178 #4 0xb1cdc0 in set_gauss ffmpeg/libavfilter/vf_colorconstancy.c:119:23
179 #5 0xb1cdc0 in config_props ffmpeg/libavfilter/vf_colorconstancy.c:666
180
181Thread T1 created by T0 here:
182 #0 0x436f80 in pthread_create (ffmpeg/ffmpeg_g+0x436f80)
183 #1 0x8655939 in avpriv_slicethread_create ffmpeg/libavutil/slicethread.c:147:19
184
185SUMMARY: AddressSanitizer: heap-buffer-overflow ffmpeg/libavfilter/vf_colorconstancy.c:282:53 in slice_get_derivative
186Shadow bytes around the buggy address:
187 0x0c147fff80f0: fa fa fa fa fa fa fa fa fd fd fd fd fd fd fd fa
188 0x0c147fff8100: fa fa fa fa fa fa fa fa fd fd fd fd fd fd fd fa
189 0x0c147fff8110: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
190 0x0c147fff8120: fd fd fd fd fd fd fd fa fa fa fa fa fa fa fa fa
191 0x0c147fff8130: 00 00 00 00 00 00 00 fa fa fa fa fa fa fa fa fa
192=>0x0c147fff8140: fa fa fa fa fa fa fa[fa]00 00 00 00 00 00 00 fa
193 0x0c147fff8150: fa fa fa fa fa fa fa fa fd fd fd fd fd fd fd fa
194 0x0c147fff8160: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
195 0x0c147fff8170: fd fd fd fd fd fd fd fa fa fa fa fa fa fa fa fa
196 0x0c147fff8180: fd fd fd fd fd fd fd fa fa fa fa fa fa fa fa fa
197 0x0c147fff8190: fa fa fa fa fa fa fa fa 00 00 00 00 00 00 00 00
198Shadow byte legend (one shadow byte represents 8 application bytes):
199 Addressable: 00
200 Partially addressable: 01 02 03 04 05 06 07
201 Heap left redzone: fa
202 Freed heap region: fd
203 Stack left redzone: f1
204 Stack mid redzone: f2
205 Stack right redzone: f3
206 Stack after return: f5
207 Stack use after scope: f8
208 Global redzone: f9
209 Global init order: f6
210 Poisoned by user: f7
211 Container overflow: fc
212 Array cookie: ac
213 Intra object redzone: bb
214 ASan internal: fe
215 Left alloca redzone: ca
216 Right alloca redzone: cb
217==35623==ABORTING
218[Thread 0x7fffd9cd8700 (LWP 35824) exited]
219[Thread 0x7fffda4ef700 (LWP 35823) exited]
220[Thread 0x7fffdad06700 (LWP 35822) exited]
221[Thread 0x7fffdb51d700 (LWP 35820) exited]
222[Thread 0x7fffdbd34700 (LWP 35819) exited]
223[Thread 0x7fffdc54b700 (LWP 35817) exited]
224[Thread 0x7fffdcd62700 (LWP 35816) exited]
225[Thread 0x7fffdd579700 (LWP 35815) exited]
226[Thread 0x7fffddd90700 (LWP 35814) exited]
227[Thread 0x7fffde5a7700 (LWP 35813) exited]
228[Thread 0x7fffdedbe700 (LWP 35812) exited]
229[Thread 0x7fffdf5d5700 (LWP 35806) exited]
230[Thread 0x7fffdfdec700 (LWP 35804) exited]
231[Thread 0x7fffe0603700 (LWP 35801) exited]
232[Thread 0x7fffe0e1a700 (LWP 35798) exited]
233[Thread 0x7fffe1631700 (LWP 35793) exited]
234[Thread 0x7fffe1e48700 (LWP 35791) exited]
235[Thread 0x7fffe265f700 (LWP 35790) exited]
236[Thread 0x7fffe2e76700 (LWP 35787) exited]
237[Thread 0x7fffe368d700 (LWP 35786) exited]
238[Thread 0x7fffe3ea4700 (LWP 35785) exited]
239[Thread 0x7fffe46bb700 (LWP 35784) exited]
240[Thread 0x7fffe4ed2700 (LWP 35783) exited]
241[Thread 0x7fffe56e9700 (LWP 35782) exited]
242[Thread 0x7fffe5f00700 (LWP 35781) exited]
243[Thread 0x7fffe6717700 (LWP 35780) exited]
244[Thread 0x7fffe6f18700 (LWP 35778) exited]
245[Thread 0x7fffe7719700 (LWP 35776) exited]
246[Thread 0x7fffe7f1a700 (LWP 35775) exited]
247[Thread 0x7fffe871b700 (LWP 35774) exited]
248[Thread 0x7fffe8f1c700 (LWP 35773) exited]
249[Thread 0x7fffe971d700 (LWP 35772) exited]
250[Thread 0x7fffe9f1e700 (LWP 35770) exited]
251[Thread 0x7fffea71f700 (LWP 35768) exited]
252[Thread 0x7fffeaf20700 (LWP 35767) exited]
253[Thread 0x7fffeb721700 (LWP 35764) exited]
254[Thread 0x7fffebf22700 (LWP 35763) exited]
255[Thread 0x7fffec723700 (LWP 35761) exited]
256[Thread 0x7fffecf24700 (LWP 35760) exited]
257[Thread 0x7fffedf26700 (LWP 35756) exited]
258[Thread 0x7fffee727700 (LWP 35755) exited]
259[Thread 0x7fffeef28700 (LWP 35752) exited]
260[Thread 0x7fffef729700 (LWP 35750) exited]
261[Thread 0x7fffeff2a700 (LWP 35749) exited]
262[Thread 0x7ffff072b700 (LWP 35748) exited]
263[Thread 0x7ffff0f2c700 (LWP 35746) exited]
264[Thread 0x7ffff172d700 (LWP 35745) exited]
265[Thread 0x7ffff7fb6780 (LWP 35623) exited]
266[Inferior 1 (process 35623) exited with code 01]
267
268