Possible use of uninitialised memory

[agoodm]

Summary of the bug:

Possible use of uninitialised memory discovered after a number of weeks fuzzing.

Initially discovered with ffmpeg built like this:
./configure --cc=/usr/bin/afl-clang-fast --cxx=/usr/bin/afl-clang-fast++ --disable-everything --disable-network --disable-autodetect --enable-demuxer=mov,m4v,matroska --enable-encoder=pam --enable-decoder=h264,mpeg4 --enable-muxer=rawvideo --enable-protocol=file --enable-filter=scale

Further tested using valgrind on distro version and above compiled version from git master.

How to reproduce:

ffmpeg -threads 1 -y -i 29357tmin -vframes 1 -vcodec pam -f rawvideo -threads 1 /dev/null

$ valgrind ffmpeg -v 9 -loglevel 99 -threads 1 -y -i 29357tmin -vframes 1 -vcodec pam -f rawvideo -threads 1 /dev/null
==1701344== Memcheck, a memory error detector
==1701344== Copyright (C) 2002-2017, and GNU GPL'd, by Julian Seward et al.
==1701344== Using Valgrind-3.18.1 and LibVEX; rerun with -h for copyright info
==1701344== Command: ffmpeg -v 9 -loglevel 99 -threads 1 -y -i 29357tmin -vframes 1 -vcodec pam -f rawvideo -threads 1 /dev/null
==1701344==
ffmpeg version 4.4.2-0ubuntu0.22.04.1 Copyright (c) 2000-2021 the FFmpeg developers

built with gcc 11 (Ubuntu 11.2.0-19ubuntu1)
configuration: --prefix=/usr --extra-version=0ubuntu0.22.04.1 --toolchain=hardened --libdir=/usr/lib/x86_64-linux-gnu --incdir=/usr/include/x86_64-linux-gnu --arch=amd64 --enable-gpl --disable-stripping --enable-gnutls --enable-ladspa --enable-libaom --enable-libass --enable-libbluray --enable-libbs2b --enable-libcaca --enable-libcdio --enable-libcodec2 --enable-libdav1d --enable-libflite --enable-libfontconfig --enable-libfreetype --enable-libfribidi --enable-libgme --enable-libgsm --enable-libjack --enable-libmp3lame --enable-libmysofa --enable-libopenjpeg --enable-libopenmpt --enable-libopus --enable-libpulse --enable-librabbitmq --enable-librubberband --enable-libshine --enable-libsnappy --enable-libsoxr --enable-libspeex --enable-libsrt --enable-libssh --enable-libtheora --enable-libtwolame --enable-libvidstab --enable-libvorbis --enable-libvpx --enable-libwebp --enable-libx265 --enable-libxml2 --enable-libxvid --enable-libzimg --enable-libzmq --enable-libzvbi --enable-lv2 --enable-omx --enable-openal --enable-opencl --enable-opengl --enable-sdl2 --enable-pocketsphinx --enable-librsvg --enable-libmfx --enable-libdc1394 --enable-libdrm --enable-libiec61883 --enable-chromaprint --enable-frei0r --enable-libx264 --enable-shared
libavutil 56. 70.100 / 56. 70.100
libavcodec 58.134.100 / 58.134.100
libavformat 58. 76.100 / 58. 76.100
libavdevice 58. 13.100 / 58. 13.100
libavfilter 7.110.100 / 7.110.100
libswscale 5. 9.100 / 5. 9.100
libswresample 3. 9.100 / 3. 9.100
libpostproc 55. 9.100 / 55. 9.100

Splitting the commandline.
Reading option '-v' ... matched as option 'v' (set logging level) with argument '9'.
Reading option '-loglevel' ... matched as option 'loglevel' (set logging level) with argument '99'.
Reading option '-threads' ... matched as AVOption 'threads' with argument '1'.
Reading option '-y' ... matched as option 'y' (overwrite output files) with argument '1'.
Reading option '-i' ... matched as input url with argument '29357tmin'.
Reading option '-vframes' ... matched as option 'vframes' (set the number of video frames to output) with argument '1'.
Reading option '-vcodec' ... matched as option 'vcodec' (force video codec ('copy' to copy stream)) with argument 'pam'.
Reading option '-f' ... matched as option 'f' (force format) with argument 'rawvideo'.
Reading option '-threads' ... matched as AVOption 'threads' with argument '1'.
Reading option '/dev/null' ... matched as output url.
Finished splitting the commandline.
Parsing a group of options: global .
Applying option v (set logging level) with argument 9.
Applying option y (overwrite output files) with argument 1.
Successfully parsed a group of options.
Parsing a group of options: input url 29357tmin.
Successfully parsed a group of options.
Opening an input file: 29357tmin.
[NULL @ 0x120038c0] Opening '29357tmin' for reading
[file @ 0x12004940] Setting default whitelist 'file,crypto,data'
Probing m4v score:5 size:1111

Last message repeated 1 times

[m4v @ 0x120038c0] Format m4v detected only with low score of 5, misdetection possible!
[m4v @ 0x120038c0] Before avformat_find_stream_info() pos: 0 bytes read:1111 seeks:0 nb_streams:1
[mpeg4 @ 0x12017f80] time_increment_bits 0 is invalid in relation to the current bitstream, this is likely caused by a missing VOL header
[mpeg4 @ 0x12017f80] time_increment_bits set to 16 bits, based on bitstream analysis
[mpeg4 @ 0x12017f80] Marker bit missing at 2465 of 5184 before time_increment_resolution
[mpeg4 @ 0x12017f80] Marker bit missing at 2500 of 5184 before width
[mpeg4 @ 0x12017f80] Marker bit missing at 2514 of 5184 before height
[mpeg4 @ 0x12017f80] N-bit not supported
[mpeg4 @ 0x12017f80] quant precision 10
[mpeg4 @ 0x12017f80] time_increment_bits 16 is invalid in relation to the current bitstream, this is likely caused by a missing VOL header
[mpeg4 @ 0x12017f80] time_increment_bits set to 14 bits, based on bitstream analysis
[mpeg4 @ 0x12017f80] Reverting picture dimensions change due to header decoding failure
[mpeg4 @ 0x12017f80] Marker bit missing at 2465 of 5184 before time_increment_resolution
[mpeg4 @ 0x12017f80] Marker bit missing at 2500 of 5184 before width
[mpeg4 @ 0x12017f80] Marker bit missing at 2514 of 5184 before height
[mpeg4 @ 0x12017f80] N-bit not supported
[mpeg4 @ 0x12017f80] quant precision 10
[mpeg4 @ 0x12017f80] Format yuv420p chosen by get_format().
[m4v @ 0x120038c0] All info found
[m4v @ 0x120038c0] stream 0: start_time: 2.61456 duration: NOPTS
[m4v @ 0x120038c0] format: start_time: 2.61456 duration: NOPTS (estimate from bit rate) bitrate=0 kb/s
[m4v @ 0x120038c0] After avformat_find_stream_info() pos: 1024 bytes read:1111 seeks:0 frames:2
Input #0, m4v, from '29357tmin':

Duration: N/A, start: 2.614563, bitrate: N/A
Stream #0:0, 2, 1/1200000: Video: mpeg4, 1 reference frame, yuv420p(left), 40x1, 0/1, 43.84 tbr, 1200k tbn, 43.84 tbc

Successfully opened the file.
Parsing a group of options: output url /dev/null.
Applying option vframes (set the number of video frames to output) with argument 1.
Applying option vcodec (force video codec ('copy' to copy stream)) with argument pam.
Applying option f (force format) with argument rawvideo.
Successfully parsed a group of options.
Opening an output file: /dev/null.
[file @ 0x1203c0c0] Setting default whitelist 'file,crypto,data'
Successfully opened the file.
Stream mapping:

Stream #0:0 -> #0:0 (mpeg4 (native) -> pam (native))

Press [q] to stop, ? for help
cur_dts is invalid st:0 (0) [init:0 i_done:0 finish:0] (this is harmless if it occurs once at the start per stream)

Last message repeated 1 times

[mpeg4 @ 0x12034a80] Marker bit missing at 2465 of 5184 before time_increment_resolution
[mpeg4 @ 0x12034a80] Marker bit missing at 2500 of 5184 before width
[mpeg4 @ 0x12034a80] Marker bit missing at 2514 of 5184 before height
[mpeg4 @ 0x12034a80] N-bit not supported
[mpeg4 @ 0x12034a80] quant precision 10
[mpeg4 @ 0x12034a80] Format yuv420p chosen by get_format().
[mpeg4 @ 0x12034a80] DC corrupted at 2 0
[mpeg4 @ 0x12034a80] marker does not match f_code

Last message repeated 5 times

[mpeg4 @ 0x12034a80] illegal mb_num in video packet (0 3)
[mpeg4 @ 0x12034a80] marker does not match f_code
[mpeg4 @ 0x12034a80] concealing 3 DC, 3 AC, 3 MV errors in I frame
cur_dts is invalid st:0 (0) [init:0 i_done:0 finish:0] (this is harmless if it occurs once at the start per stream)
timestamp discontinuity for stream #0:0 (id=0, type=video): -892048, new offset= -1722515
[mpeg4 @ 0x12034a80] time_increment_bits 16 is invalid in relation to the current bitstream, this is likely caused by a missing VOL header
[mpeg4 @ 0x12034a80] time_increment_bits set to 14 bits, based on bitstream analysis
[mpeg4 @ 0x12034a80] DC corrupted at 0 0
[mpeg4 @ 0x12034a80] marker does not match f_code

Last message repeated 1 times

[mpeg4 @ 0x12034a80] concealing 3 DC, 3 AC, 3 MV errors in I frame
29357tmin: corrupt decoded frame in stream 0
[graph 0 input from stream 0:0 @ 0x120adec0] Setting 'video_size' to value '40x1'
[graph 0 input from stream 0:0 @ 0x120adec0] Setting 'pix_fmt' to value '0'
[graph 0 input from stream 0:0 @ 0x120adec0] Setting 'time_base' to value '1/1200000'
[graph 0 input from stream 0:0 @ 0x120adec0] Setting 'pixel_aspect' to value '0/1'
[graph 0 input from stream 0:0 @ 0x120adec0] Setting 'frame_rate' to value '33800/771'
[graph 0 input from stream 0:0 @ 0x120adec0] w:40 h:1 pixfmt:yuv420p tb:1/1200000 fr:33800/771 sar:0/1
[format @ 0x120aff40] Setting 'pix_fmts' to value 'rgb24|rgba|rgb48be|rgba64be|gray|ya8|gray16be|ya16be|monob'
[auto_scaler_0 @ 0x12121300] Setting 'flags' to value 'bicubic'
[auto_scaler_0 @ 0x12121300] w:iw h:ih flags:'bicubic' interl:0
[format @ 0x120aff40] auto-inserting filter 'auto_scaler_0' between the filter 'Parsed_null_0' and the filter 'format'
[AVFilterGraph @ 0x120ad080] query_formats: 4 queried, 2 merged, 1 already done, 0 delayed
[auto_scaler_0 @ 0x12121300] picking rgb24 out of 9 ref:yuv420p alpha:0
[auto_scaler_0 @ 0x12121300] w:40 h:1 fmt:yuv420p sar:0/1 -> w:40 h:1 fmt:rgb24 sar:0/1 flags:0x4
Output #0, rawvideo, to '/dev/null':

Metadata:

encoder : Lavf58.76.100

Stream #0:0, 0, 771/33800: Video: pam, 1 reference frame, rgb24(pc, gbr/unknown/unknown, progressive, left), 40x1 (0x0), 0/1, q=2-31, 200 kb/s, 43.84 fps, 43.84 tbn

Metadata:

encoder : Lavc58.134.100 pam

cur_dts is invalid st:0 (0) [init:1 i_done:0 finish:0] (this is harmless if it occurs once at the start per stream)
[NULL @ 0x12017f80] Marker bit missing at 59 of 1960 before video_object_layer_width
[NULL @ 0x12017f80] Marker bit missing at 74 of 1960 before video_object_layer_height
[NULL @ 0x12017f80] Marker bit missing at 129 of 1960 after first_half_bit_rate
[NULL @ 0x12017f80] Marker bit missing at 145 of 1960 after latter_half_bit_rate
[NULL @ 0x12017f80] Marker bit missing at 161 of 1960 after first_half_vbv_buffer_size
[NULL @ 0x12017f80] Marker bit missing at 176 of 1960 after first_half_vbv_buffer_size
[NULL @ 0x12017f80] Marker bit missing at 929 of 1960 after Time_code[47..32]
timestamp discontinuity for stream #0:0 (id=0, type=video): -790916, new offset= -931599
[mpeg4 @ 0x12034a80] Marker bit missing at 59 of 1960 before video_object_layer_width
[mpeg4 @ 0x12034a80] Marker bit missing at 74 of 1960 before video_object_layer_height
[mpeg4 @ 0x12034a80] Marker bit missing at 129 of 1960 after first_half_bit_rate
[mpeg4 @ 0x12034a80] Marker bit missing at 145 of 1960 after latter_half_bit_rate
[mpeg4 @ 0x12034a80] Marker bit missing at 161 of 1960 after first_half_vbv_buffer_size
[mpeg4 @ 0x12034a80] Marker bit missing at 176 of 1960 after first_half_vbv_buffer_size
[mpeg4 @ 0x12034a80] Marker bit missing at 929 of 1960 after Time_code[47..32]
[mpeg4 @ 0x12034a80] warning: first frame is no keyframe
detected 40 logical cores
[graph 0 input from stream 0:0 @ 0x121c6440] Setting 'video_size' to value '2x511'
[graph 0 input from stream 0:0 @ 0x121c6440] Setting 'pix_fmt' to value '77'
[graph 0 input from stream 0:0 @ 0x121c6440] Setting 'time_base' to value '1/1200000'
[graph 0 input from stream 0:0 @ 0x121c6440] Setting 'pixel_aspect' to value '192/34'
[graph 0 input from stream 0:0 @ 0x121c6440] Setting 'frame_rate' to value '33800/771'
[graph 0 input from stream 0:0 @ 0x121c6440] w:2 h:511 pixfmt:gbrp10le tb:1/1200000 fr:33800/771 sar:192/34
[scaler_out_0_0 @ 0x121c7d80] Setting 'w' to value '40'
[scaler_out_0_0 @ 0x121c7d80] Setting 'h' to value '1'
[scaler_out_0_0 @ 0x121c7d80] Setting 'flags' to value 'bicubic'
[scaler_out_0_0 @ 0x121c7d80] w:40 h:1 flags:'bicubic' interl:0
[format @ 0x121c92c0] Setting 'pix_fmts' to value 'rgb24'
[AVFilterGraph @ 0x121bddc0] query_formats: 5 queried, 4 merged, 0 already done, 0 delayed
[swscaler @ 0x12271780] Forcing full internal H chroma due to input having non subsampled chroma
sws: initFilter failed
[scaler_out_0_0 @ 0x121c7d80] w:2 h:511 fmt:gbrp10le sar:192/34 -> w:40 h:1 fmt:rgb24 sar:24/43435 flags:0x4
==1701344== Conditional jump or move depends on uninitialised value(s)
==1701344== at 0x64342E6: ??? (in /usr/lib/x86_64-linux-gnu/libswscale.so.5.9.100)
==1701344== by 0x647C001: ??? (in /usr/lib/x86_64-linux-gnu/libswscale.so.5.9.100)
==1701344== by 0x6461FD0: ??? (in /usr/lib/x86_64-linux-gnu/libswscale.so.5.9.100)
==1701344== by 0x646312C: sws_scale (in /usr/lib/x86_64-linux-gnu/libswscale.so.5.9.100)
==1701344== by 0x6463710: sws_scale (in /usr/lib/x86_64-linux-gnu/libswscale.so.5.9.100)
==1701344== by 0x4B19B44: ??? (in /usr/lib/x86_64-linux-gnu/libavfilter.so.7.110.100)
==1701344== by 0x4B1A36E: ??? (in /usr/lib/x86_64-linux-gnu/libavfilter.so.7.110.100)
==1701344== by 0x4B1A479: ??? (in /usr/lib/x86_64-linux-gnu/libavfilter.so.7.110.100)
==1701344== by 0x49D3508: ??? (in /usr/lib/x86_64-linux-gnu/libavfilter.so.7.110.100)
==1701344== by 0x49D830F: av_buffersrc_add_frame_flags (in /usr/lib/x86_64-linux-gnu/libavfilter.so.7.110.100)
==1701344== by 0x13A12C: ??? (in /usr/bin/ffmpeg)
==1701344== by 0x13B31C: ??? (in /usr/bin/ffmpeg)
==1701344==
==1701344== Conditional jump or move depends on uninitialised value(s)
==1701344== at 0x64342E6: ??? (in /usr/lib/x86_64-linux-gnu/libswscale.so.5.9.100)
==1701344== by 0x647C7CD: ??? (in /usr/lib/x86_64-linux-gnu/libswscale.so.5.9.100)
==1701344== by 0x6461FD0: ??? (in /usr/lib/x86_64-linux-gnu/libswscale.so.5.9.100)
==1701344== by 0x646312C: sws_scale (in /usr/lib/x86_64-linux-gnu/libswscale.so.5.9.100)
==1701344== by 0x6463710: sws_scale (in /usr/lib/x86_64-linux-gnu/libswscale.so.5.9.100)
==1701344== by 0x4B19B44: ??? (in /usr/lib/x86_64-linux-gnu/libavfilter.so.7.110.100)
==1701344== by 0x4B1A36E: ??? (in /usr/lib/x86_64-linux-gnu/libavfilter.so.7.110.100)
==1701344== by 0x4B1A479: ??? (in /usr/lib/x86_64-linux-gnu/libavfilter.so.7.110.100)
==1701344== by 0x49D3508: ??? (in /usr/lib/x86_64-linux-gnu/libavfilter.so.7.110.100)
==1701344== by 0x49D830F: av_buffersrc_add_frame_flags (in /usr/lib/x86_64-linux-gnu/libavfilter.so.7.110.100)
==1701344== by 0x13A12C: ??? (in /usr/bin/ffmpeg)
==1701344== by 0x13B31C: ??? (in /usr/bin/ffmpeg)
==1701344==
==1701344== Conditional jump or move depends on uninitialised value(s)
==1701344== at 0x64342E6: ??? (in /usr/lib/x86_64-linux-gnu/libswscale.so.5.9.100)
==1701344== by 0x647C80C: ??? (in /usr/lib/x86_64-linux-gnu/libswscale.so.5.9.100)
==1701344== by 0x6461FD0: ??? (in /usr/lib/x86_64-linux-gnu/libswscale.so.5.9.100)
==1701344== by 0x646312C: sws_scale (in /usr/lib/x86_64-linux-gnu/libswscale.so.5.9.100)
==1701344== by 0x6463710: sws_scale (in /usr/lib/x86_64-linux-gnu/libswscale.so.5.9.100)
==1701344== by 0x4B19B44: ??? (in /usr/lib/x86_64-linux-gnu/libavfilter.so.7.110.100)
==1701344== by 0x4B1A36E: ??? (in /usr/lib/x86_64-linux-gnu/libavfilter.so.7.110.100)
==1701344== by 0x4B1A479: ??? (in /usr/lib/x86_64-linux-gnu/libavfilter.so.7.110.100)
==1701344== by 0x49D3508: ??? (in /usr/lib/x86_64-linux-gnu/libavfilter.so.7.110.100)
==1701344== by 0x49D830F: av_buffersrc_add_frame_flags (in /usr/lib/x86_64-linux-gnu/libavfilter.so.7.110.100)
==1701344== by 0x13A12C: ??? (in /usr/bin/ffmpeg)
==1701344== by 0x13B31C: ??? (in /usr/bin/ffmpeg)
==1701344==
==1701344== Conditional jump or move depends on uninitialised value(s)
==1701344== at 0x64402E6: ??? (in /usr/lib/x86_64-linux-gnu/libswscale.so.5.9.100)
==1701344== by 0x647C5A1: ??? (in /usr/lib/x86_64-linux-gnu/libswscale.so.5.9.100)
==1701344== by 0x6461FD0: ??? (in /usr/lib/x86_64-linux-gnu/libswscale.so.5.9.100)
==1701344== by 0x646312C: sws_scale (in /usr/lib/x86_64-linux-gnu/libswscale.so.5.9.100)
==1701344== by 0x6463749: sws_scale (in /usr/lib/x86_64-linux-gnu/libswscale.so.5.9.100)
==1701344== by 0x4B19B44: ??? (in /usr/lib/x86_64-linux-gnu/libavfilter.so.7.110.100)
==1701344== by 0x4B1A36E: ??? (in /usr/lib/x86_64-linux-gnu/libavfilter.so.7.110.100)
==1701344== by 0x4B1A479: ??? (in /usr/lib/x86_64-linux-gnu/libavfilter.so.7.110.100)
==1701344== by 0x49D3508: ??? (in /usr/lib/x86_64-linux-gnu/libavfilter.so.7.110.100)
==1701344== by 0x49D830F: av_buffersrc_add_frame_flags (in /usr/lib/x86_64-linux-gnu/libavfilter.so.7.110.100)
==1701344== by 0x13A12C: ??? (in /usr/bin/ffmpeg)
==1701344== by 0x13B31C: ??? (in /usr/bin/ffmpeg)
==1701344==
==1701344== Conditional jump or move depends on uninitialised value(s)
==1701344== at 0x64402ED: ??? (in /usr/lib/x86_64-linux-gnu/libswscale.so.5.9.100)
==1701344== by 0x647C5A1: ??? (in /usr/lib/x86_64-linux-gnu/libswscale.so.5.9.100)
==1701344== by 0x6461FD0: ??? (in /usr/lib/x86_64-linux-gnu/libswscale.so.5.9.100)
==1701344== by 0x646312C: sws_scale (in /usr/lib/x86_64-linux-gnu/libswscale.so.5.9.100)
==1701344== by 0x6463749: sws_scale (in /usr/lib/x86_64-linux-gnu/libswscale.so.5.9.100)
==1701344== by 0x4B19B44: ??? (in /usr/lib/x86_64-linux-gnu/libavfilter.so.7.110.100)
==1701344== by 0x4B1A36E: ??? (in /usr/lib/x86_64-linux-gnu/libavfilter.so.7.110.100)
==1701344== by 0x4B1A479: ??? (in /usr/lib/x86_64-linux-gnu/libavfilter.so.7.110.100)
==1701344== by 0x49D3508: ??? (in /usr/lib/x86_64-linux-gnu/libavfilter.so.7.110.100)
==1701344== by 0x49D830F: av_buffersrc_add_frame_flags (in /usr/lib/x86_64-linux-gnu/libavfilter.so.7.110.100)
==1701344== by 0x13A12C: ??? (in /usr/bin/ffmpeg)
==1701344== by 0x13B31C: ??? (in /usr/bin/ffmpeg)
==1701344==
==1701344== Conditional jump or move depends on uninitialised value(s)
==1701344== at 0x64402FF: ??? (in /usr/lib/x86_64-linux-gnu/libswscale.so.5.9.100)
==1701344== by 0x647C5A1: ??? (in /usr/lib/x86_64-linux-gnu/libswscale.so.5.9.100)
==1701344== by 0x6461FD0: ??? (in /usr/lib/x86_64-linux-gnu/libswscale.so.5.9.100)
==1701344== by 0x646312C: sws_scale (in /usr/lib/x86_64-linux-gnu/libswscale.so.5.9.100)
==1701344== by 0x6463749: sws_scale (in /usr/lib/x86_64-linux-gnu/libswscale.so.5.9.100)
==1701344== by 0x4B19B44: ??? (in /usr/lib/x86_64-linux-gnu/libavfilter.so.7.110.100)
==1701344== by 0x4B1A36E: ??? (in /usr/lib/x86_64-linux-gnu/libavfilter.so.7.110.100)
==1701344== by 0x4B1A479: ??? (in /usr/lib/x86_64-linux-gnu/libavfilter.so.7.110.100)
==1701344== by 0x49D3508: ??? (in /usr/lib/x86_64-linux-gnu/libavfilter.so.7.110.100)
==1701344== by 0x49D830F: av_buffersrc_add_frame_flags (in /usr/lib/x86_64-linux-gnu/libavfilter.so.7.110.100)
==1701344== by 0x13A12C: ??? (in /usr/bin/ffmpeg)
==1701344== by 0x13B31C: ??? (in /usr/bin/ffmpeg)
==1701344==
==1701344== Conditional jump or move depends on uninitialised value(s)
==1701344== at 0x6440312: ??? (in /usr/lib/x86_64-linux-gnu/libswscale.so.5.9.100)
==1701344== by 0x647C5A1: ??? (in /usr/lib/x86_64-linux-gnu/libswscale.so.5.9.100)
==1701344== by 0x6461FD0: ??? (in /usr/lib/x86_64-linux-gnu/libswscale.so.5.9.100)
==1701344== by 0x646312C: sws_scale (in /usr/lib/x86_64-linux-gnu/libswscale.so.5.9.100)
==1701344== by 0x6463749: sws_scale (in /usr/lib/x86_64-linux-gnu/libswscale.so.5.9.100)
==1701344== by 0x4B19B44: ??? (in /usr/lib/x86_64-linux-gnu/libavfilter.so.7.110.100)
==1701344== by 0x4B1A36E: ??? (in /usr/lib/x86_64-linux-gnu/libavfilter.so.7.110.100)
==1701344== by 0x4B1A479: ??? (in /usr/lib/x86_64-linux-gnu/libavfilter.so.7.110.100)
==1701344== by 0x49D3508: ??? (in /usr/lib/x86_64-linux-gnu/libavfilter.so.7.110.100)
==1701344== by 0x49D830F: av_buffersrc_add_frame_flags (in /usr/lib/x86_64-linux-gnu/libavfilter.so.7.110.100)
==1701344== by 0x13A12C: ??? (in /usr/bin/ffmpeg)
==1701344== by 0x13B31C: ??? (in /usr/bin/ffmpeg)
==1701344==
Not duplicating 3 initial frames
* dropping frame 0 from stream 0 at ts -37
No more output streams to write to, finishing.
==1701344== Syscall param write(buf) points to uninitialised byte(s)
==1701344== at 0x696DA6F: libc_write (write.c:26)
==1701344== by 0x696DA6F: write (write.c:24)
==1701344== by 0x4DCFD7C: ??? (in /usr/lib/x86_64-linux-gnu/libavformat.so.58.76.100)
==1701344== by 0x4DA3DF3: ??? (in /usr/lib/x86_64-linux-gnu/libavformat.so.58.76.100)
==1701344== by 0x4DA4406: ??? (in /usr/lib/x86_64-linux-gnu/libavformat.so.58.76.100)
==1701344== by 0x4DA5DD9: avio_flush (in /usr/lib/x86_64-linux-gnu/libavformat.so.58.76.100)
==1701344== by 0x4E7346A: av_write_trailer (in /usr/lib/x86_64-linux-gnu/libavformat.so.58.76.100)
==1701344== by 0x13E797: ??? (in /usr/bin/ffmpeg)
==1701344== by 0x115E66: main (in /usr/bin/ffmpeg)
==1701344== Address 0x1203c63c is 60 bytes inside a block of size 262,144 alloc'd
==1701344== at 0x484DE30: memalign (in /usr/libexec/valgrind/vgpreload_memcheck-amd64-linux.so)
==1701344== by 0x484DF92: posix_memalign (in /usr/libexec/valgrind/vgpreload_memcheck-amd64-linux.so)
==1701344== by 0x64FA9E4: av_malloc (in /usr/lib/x86_64-linux-gnu/libavutil.so.56.70.100)
==1701344== by 0x4DA7CE5: ??? (in /usr/lib/x86_64-linux-gnu/libavformat.so.58.76.100)
==1701344== by 0x4DA7EF7: ??? (in /usr/lib/x86_64-linux-gnu/libavformat.so.58.76.100)
==1701344== by 0x4DA7F51: avio_open2 (in /usr/lib/x86_64-linux-gnu/libavformat.so.58.76.100)
==1701344== by 0x1248E8: ??? (in /usr/bin/ffmpeg)
==1701344== by 0x115DD8: main (in /usr/bin/ffmpeg)
==1701344==
frame= 1 fps=0.5 q=-0.0 Lsize= 0kB time=00:00:00.09 bitrate= 15.8kbits/s dup=0 drop=1 speed=0.0424x
video:0kB audio:0kB subtitle:0kB other streams:0kB global headers:0kB muxing overhead: 0.000000%
Input file #0 (29357tmin):

Input stream #0:0 (video): 4 packets read (1107 bytes); 3 frames decoded;
Total: 4 packets (1107 bytes) demuxed

Output file #0 (/dev/null):

Output stream #0:0 (video): 1 frames encoded; 1 packets muxed (180 bytes);
Total: 1 packets (180 bytes) muxed

3 frames successfully decoded, 0 decoding errors
[AVIOContext @ 0x1207c6c0] Statistics: 0 seeks, 1 writeouts
[AVIOContext @ 0x1200d300] Statistics: 1111 bytes read, 0 seeks
==1701344==
==1701344== HEAP SUMMARY:
==1701344== in use at exit: 51,580 bytes in 277 blocks
==1701344== total heap usage: 6,983 allocs, 6,706 frees, 3,200,392 bytes allocated
==1701344==
==1701344== LEAK SUMMARY:
==1701344== definitely lost: 0 bytes in 0 blocks
==1701344== indirectly lost: 0 bytes in 0 blocks
==1701344== possibly lost: 0 bytes in 0 blocks
==1701344== still reachable: 49,564 bytes in 256 blocks
==1701344== suppressed: 0 bytes in 0 blocks
==1701344== Rerun with --leak-check=full to see details of leaked memory
==1701344==
==1701344== Use --track-origins=yes to see where uninitialised values come from
==1701344== For lists of detected and suppressed errors, rerun with: -s
==1701344== ERROR SUMMARY: 369 errors from 8 contexts (suppressed: 0 from 0)