Opened 4 years ago

Closed 4 years ago

#10176 closed defect (fixed)

wavarc: deadlock with fuzzed file

Reported by: ami_stuff Owned by:
Priority: normal Component: undetermined
Version: unspecified Keywords:
Cc: Blocked By:
Blocking: Reproduced by developer: no
Analyzed by developer: no

Description

(gdb) r -i deadlock.wa
Starting program: ffmpeg_g -i deadlock.wa
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1".
ffmpeg version N-109763-g3b3a321fed Copyright (c) 2000-2023 the FFmpeg developers
  built with gcc 9 (Ubuntu 9.4.0-1ubuntu1~20.04.1)
  configuration: 
  libavutil      57. 44.100 / 57. 44.100
  libavcodec     59. 63.100 / 59. 63.100
  libavformat    59. 38.100 / 59. 38.100
  libavdevice    59.  8.101 / 59.  8.101
  libavfilter     8. 56.100 /  8. 56.100
  libswscale      6.  8.112 /  6.  8.112
  libswresample   4.  9.100 /  4.  9.100
[wavarc @ 0x55555715a640] get_buffer() failed
    Last message repeated 1 times
Program received signal SIGINT, Interrupt.
0x00007ffff76e6836 in __posix_memalign (memptr=memptr@entry=0x7fffffffd390, 
    alignment=alignment@entry=64, size=24) at malloc.c:5359
5359	malloc.c
(gdb) bt
#0  0x00007ffff76e6836 in __posix_memalign (
    memptr=memptr@entry=0x7fffffffd390, alignment=alignment@entry=64, size=24)
    at malloc.c:5359
#1  0x00005555564c93e5 in av_malloc (size=size@entry=24) at libavutil/mem.c:105
#2  0x00005555564c95ae in av_mallocz (size=size@entry=24)
    at libavutil/mem.c:266
#3  0x00005555564b5d92 in av_buffer_ref (buf=0x55555716be40)
    at libavutil/buffer.c:105
#4  0x0000555555b4c0df in av_packet_ref (dst=0x55555715b300, 
    src=src@entry=0x7fffffffd480) at libavcodec/avpacket.c:450
#5  0x0000555555bc8602 in avcodec_send_packet (
    avctx=avctx@entry=0x55555715a640, avpkt=avpkt@entry=0x7fffffffd480)
    at libavcodec/decode.c:623
#6  0x00005555559c4d93 in try_decode_frame (s=s@entry=0x555557159400, 
    st=st@entry=0x55555715a180, avpkt=avpkt@entry=0x55555716cac8, 
    options=<optimized out>) at libavformat/demux.c:2054
#7  0x00005555559ca029 in avformat_find_stream_info (ic=0x555557159400, 
    options=0x55555715ad80) at libavformat/demux.c:2747
#8  0x00005555556f54e1 in ifile_open (o=o@entry=0x7fffffffd850, 
    filename=<optimized out>) at fftools/ffmpeg_demux.c:985
#9  0x0000555555706b92 in open_files (
    inout=inout@entry=0x5555565c0461 "input", 
    open_file=0x5555556f48e0 <ifile_open>, l=<optimized out>, 
    l=<optimized out>) at fftools/ffmpeg_opt.c:1244
--Type <RET> for more, q to quit, c to continue without paging--
#10 0x000055555570802f in ffmpeg_parse_options (argc=<optimized out>, 
    argv=<optimized out>) at fftools/ffmpeg_opt.c:1283
#11 0x00005555556f094a in main (argc=3, argv=0x7fffffffdfb8)
    at fftools/ffmpeg.c:4156

Attachments (1)

deadlock.wa (1.2 MB ) - added by ami_stuff 4 years ago.

Download all attachments as: .zip

Change History (2)

by ami_stuff, 4 years ago

Attachment: deadlock.wa added

comment:1 by Elon Musk, 4 years ago

Resolution: fixed
Status: newclosed
Note: See TracTickets for help on using tickets.