Opened 12 years ago

Closed 12 years ago

#1531 closed defect (fixed)

mss1 crash

Reported by: ami_stuff Owned by:
Priority: important Component: avcodec
Version: git-master Keywords: crash SIGSEGV mss1
Cc: Blocked By:
Blocking: Reproduced by developer: yes
Analyzed by developer: no

Description

Please post gdb output if reproducible.

http://samples.mplayerhq.hu/V-codecs/MSS2/msscreencodec.wmv

C:\>ffmpeg -cpuflags 0 -vcodec mss1 -i msscreencodec.wmv -f null -
ffmpeg version N-42449-g9ca27df Copyright (c) 2000-2012 the FFmpeg developers
  built on Jul 12 2012 02:37:12 with gcc 4.5.0 20100414 (Fedora MinGW 4.5.0-1.fc
14)
  configuration: --prefix=/var/www/users/research/ffmpeg/snapshots/build --arch=
x86 --target-os=mingw32 --cross-prefix=i686-pc-mingw32- --cc='ccache i686-pc-min
gw32-gcc' --enable-w32threads --enable-memalign-hack --enable-runtime-cpudetect
--enable-cross-compile --enable-static --disable-shared --extra-libs='-lws2_32 -
lwinmm -lpthread' --extra-cflags='--static -I/var/www/users/research/ffmpeg/snap
shots/build/include' --extra-ldflags='-static -L/var/www/users/research/ffmpeg/s
napshots/build/lib' --enable-bzlib --enable-zlib --enable-gpl --enable-version3
--enable-nonfree --enable-libx264 --enable-libspeex --enable-libtheora --enable-
libvorbis --enable-libfaac --enable-libxvid --enable-libopencore-amrnb --enable-
libopencore-amrwb --enable-libmp3lame --enable-libvpx --disable-decoder=libvpx
  libavutil      51. 64.100 / 51. 64.100
  libavcodec     54. 34.100 / 54. 34.100
  libavformat    54. 16.104 / 54. 16.104
  libavdevice    54.  1.100 / 54.  1.100
  libavfilter     3.  2.100 /  3.  2.100
  libswscale      2.  1.100 /  2.  1.100
  libswresample   0. 15.100 /  0. 15.100
  libpostproc    52.  0.100 / 52.  0.100
Input #0, asf, from 'msscreencodec.wmv':
  Metadata:
    Encoded by      : Lionizer
    WMFSDKVersion   : 9.00.00.2980
    WMFSDKNeeded    : 0.0.0.0000
    IsVBR           : 0
    title           : Benadryl Pausefisk
    copyright       : Arkena A/S
  Duration: 00:00:16.92, start: 0.000000, bitrate: 334 kb/s
    Stream #0:0(dan): Audio: wmapro (b[1][0][0] / 0x0162), 44100 Hz, stereo, flt
, 128 kb/s
    Stream #0:1(dan): Video: mss1 (MSS2 / 0x3253534D), pal8, 320x240, 163 kb/s,
SAR 1:1 DAR 4:3, 15 tbr, 1k tbn, 1k tbc
[graph 0 input from stream 0:1 @ 0x1e068e0] w:320 h:240 pixfmt:pal8 tb:1/1000 fr
:15/1 sar:1/1 sws_param:flags=2
[graph 1 input from stream 0:0 @ 0x1e07a00] tb:1/44100 samplefmt:flt samplerate:
44100 chlayout:0x3
[auto-inserted resampler 0 @ 0x1e083a0] chl:stereo fmt:flt r:44100Hz -> chl:ster
eo fmt:s16 r:44100Hz
Output #0, null, to 'pipe:':
  Metadata:
    Encoded by      : Lionizer
    WMFSDKVersion   : 9.00.00.2980
    WMFSDKNeeded    : 0.0.0.0000
    IsVBR           : 0
    title           : Benadryl Pausefisk
    copyright       : Arkena A/S
    encoder         : Lavf54.16.104
    Stream #0:0(dan): Video: rawvideo, pal8, 320x240 [SAR 1:1 DAR 4:3], q=2-31,
200 kb/s, 90k tbn, 15 tbc
    Stream #0:1(dan): Audio: pcm_s16le, 44100 Hz, stereo, s16, 1411 kb/s
Stream mapping:
  Stream #0:1 -> #0:0 (mss1 -> rawvideo)
  Stream #0:0 -> #0:1 (wmapro -> pcm_s16le)
Press [q] to stop, [?] for help
Error while decoding stream #0:1: Invalid data found when processing input
[null @ 0x1dfb020] Encoder did not produce proper pts, making some up.
Multiple frames in a packet from stream 0
frame=   27 fps=0.0 q=0.0 size=       0kB time=00:00:00.39 bitrate=   0.0kbits/s
DTS 382, next:391756 st:0 invalid dropping
PTS 382, next:391756 invalid dropping st:0
DTS 530, next:531073 st:0 invalid dropping
PTS 530, next:531073 invalid dropping st:0
DTS 663, next:670390 st:0 invalid dropping
PTS 663, next:670390 invalid dropping st:0
DTS 855, next:856146 st:0 invalid dropping
PTS 855, next:856146 invalid dropping st:0
DTS 988, next:995463 st:0 invalid dropping
PTS 988, next:995463 invalid dropping st:0
DTS 1087, next:1088341 st:0 invalid dropping
PTS 1087, next:1088341 invalid dropping st:0
DTS 1221, next:1227658 st:0 invalid dropping
PTS 1221, next:1227658 invalid dropping st:0
DTS 1366, next:1366975 st:0 invalid dropping
PTS 1366, next:1366975 invalid dropping st:0
Error while decoding stream #0:1: Invalid data found when processing input
DTS 1546, next:1552731 st:0 invalid dropping
PTS 1546, next:1552731 invalid dropping st:0
DTS 1691, next:1692048 st:0 invalid dropping
PTS 1691, next:1692048 invalid dropping st:0
DTS 1868, next:1877804 st:0 invalid dropping
PTS 1868, next:1877804 invalid dropping st:0
Error while decoding stream #0:1: Invalid data found when processing input
DTS 2259, next:2259756 st:0 invalid dropping
PTS 2259, next:2259756 invalid dropping st:0
DTS 2434, next:2445512 st:0 invalid dropping
PTS 2434, next:2445512 invalid dropping st:0
Error while decoding stream #0:1: Invalid data found when processing input
DTS 2817, next:2817756 st:0 invalid dropping
PTS 2817, next:2817756 invalid dropping st:0
DTS 2957, next:2957073 st:0 invalid dropping
PTS 2957, next:2957073 invalid dropping st:0
DTS 3142, next:3142829 st:0 invalid dropping
PTS 3142, next:3142829 invalid dropping st:0
Error while decoding stream #0:1: Invalid data found when processing input
DTS 3328, next:3328585 st:0 invalid dropping
PTS 3328, next:3328585 invalid dropping st:0
DTS 3653, next:3653756 st:0 invalid dropping
PTS 3653, next:3653756 invalid dropping st:0
Error while decoding stream #0:1: Invalid data found when processing input
DTS 3792, next:3793073 st:0 invalid dropping
PTS 3792, next:3793073 invalid dropping st:0
DTS 4117, next:4118317 st:0 invalid dropping
PTS 4117, next:4118317 invalid dropping st:0
Error while decoding stream #0:1: Invalid data found when processing input
DTS 4303, next:4304073 st:0 invalid dropping
PTS 4303, next:4304073 invalid dropping st:0
DTS 4443, next:4443390 st:0 invalid dropping
PTS 4443, next:4443390 invalid dropping st:0
DTS 4617, next:4629146 st:0 invalid dropping
PTS 4617, next:4629146 invalid dropping st:0
Error while decoding stream #0:1: Invalid data found when processing input
DTS 4768, next:4768463 st:0 invalid dropping
PTS 4768, next:4768463 invalid dropping st:0
DTS 4907, next:4907780 st:0 invalid dropping
PTS 4907, next:4907780 invalid dropping st:0
DTS 5093, next:5093536 st:0 invalid dropping
PTS 5093, next:5093536 invalid dropping st:0
Error while decoding stream #0:1: Invalid data found when processing input
DTS 5232, next:5232853 st:0 invalid dropping
PTS 5232, next:5232853 invalid dropping st:0
DTS 5371, next:5372170 st:0 invalid dropping
PTS 5371, next:5372170 invalid dropping st:0
Error while decoding stream #0:1: Invalid data found when processing input
DTS 5557, next:5557926 st:0 invalid dropping
PTS 5557, next:5557926 invalid dropping st:0
DTS 5697, next:5697243 st:0 invalid dropping
PTS 5697, next:5697243 invalid dropping st:0
Error while decoding stream #0:1: Invalid data found when processing input
DTS 5882, next:5882999 st:0 invalid dropping
PTS 5882, next:5882999 invalid dropping st:0
DTS 6022, next:6022316 st:0 invalid dropping
PTS 6022, next:6022316 invalid dropping st:0
Error while decoding stream #0:1: Invalid data found when processing input
    Last message repeated 1 times
DTS 6196, next:6208072 st:0 invalid dropping
PTS 6196, next:6208072 invalid dropping st:0
DTS 6329, next:6347389 st:0 invalid dropping
PTS 6329, next:6347389 invalid dropping st:0
Error while decoding stream #0:1: Invalid data found when processing input
    Last message repeated 3 times
DTS 6486, next:6486706 st:0 invalid dropping
PTS 6486, next:6486706 invalid dropping st:0
Error while decoding stream #0:1: Invalid data found when processing input
    Last message repeated 2 times
DTS 6671, next:6672462 st:0 invalid dropping
PTS 6671, next:6672462 invalid dropping st:0
DTS 6857, next:6858218 st:0 invalid dropping
PTS 6857, next:6858218 invalid dropping st:0
Error while decoding stream #0:1: Invalid data found when processing input
    Last message repeated 2 times
DTS 7229, next:7229756 st:0 invalid dropping
PTS 7229, next:7229756 invalid dropping st:0
Error while decoding stream #0:1: Invalid data found when processing input
DTS 7368, next:7369073 st:0 invalid dropping
PTS 7368, next:7369073 invalid dropping st:0
Error while decoding stream #0:1: Invalid data found when processing input
    Last message repeated 2 times
DTS 7542, next:7554829 st:0 invalid dropping
PTS 7542, next:7554829 invalid dropping st:0
Error while decoding stream #0:1: Invalid data found when processing input
    Last message repeated 1 times
DTS 7740, next:7740585 st:0 invalid dropping
PTS 7740, next:7740585 invalid dropping st:0
Error while decoding stream #0:1: Invalid data found when processing input
    Last message repeated 2 times
DTS 7879, next:7879902 st:0 invalid dropping
PTS 7879, next:7879902 invalid dropping st:0
Error while decoding stream #0:1: Invalid data found when processing input
DTS 8065, next:8065658 st:0 invalid dropping
PTS 8065, next:8065658 invalid dropping st:0
Error while decoding stream #0:1: Invalid data found when processing input
DTS 8204, next:8204975 st:0 invalid dropping
PTS 8204, next:8204975 invalid dropping st:0
Error while decoding stream #0:1: Invalid data found when processing input
    Last message repeated 3 times
DTS 8390, next:8390731 st:0 invalid dropping
PTS 8390, next:8390731 invalid dropping st:0
DTS 8576, next:8576487 st:0 invalid dropping
PTS 8576, next:8576487 invalid dropping st:0
Error while decoding stream #0:1: Invalid data found when processing input
    Last message repeated 3 times
frame=   83 fps=0.0 q=0.0 size=       0kB time=00:00:05.53 bitrate=   0.0kbits/s
DTS 8715, next:8715804 st:0 invalid dropping
PTS 8715, next:8715804 invalid dropping st:0
DTS 8900, next:8901560 st:0 invalid dropping
PTS 8900, next:8901560 invalid dropping st:0
Error while decoding stream #0:1: Invalid data found when processing input
DTS 9040, next:9040877 st:0 invalid dropping
PTS 9040, next:9040877 invalid dropping st:0
Error while decoding stream #0:1: Invalid data found when processing input
    Last message repeated 1 times
DTS 9226, next:9226633 st:0 invalid dropping
PTS 9226, next:9226633 invalid dropping st:0
Error while decoding stream #0:1: Invalid data found when processing input
    Last message repeated 1 times
DTS 9411, next:9412389 st:0 invalid dropping
PTS 9411, next:9412389 invalid dropping st:0
Error while decoding stream #0:1: Invalid data found when processing input
    Last message repeated 1 times
DTS 9598, next:9598145 st:0 invalid dropping
PTS 9598, next:9598145 invalid dropping st:0
Error while decoding stream #0:1: Invalid data found when processing input
DTS 9783, next:9783901 st:0 invalid dropping
PTS 9783, next:9783901 invalid dropping st:0
Error while decoding stream #0:1: Invalid data found when processing input
DTS 9969, next:9969657 st:0 invalid dropping
PTS 9969, next:9969657 invalid dropping st:0
Error while decoding stream #0:1: Invalid data found when processing input
    Last message repeated 3 times
DTS 10294, next:10294756 st:0 invalid dropping
PTS 10294, next:10294756 invalid dropping st:0
Error while decoding stream #0:1: Invalid data found when processing input
DTS 10480, next:10480512 st:0 invalid dropping
PTS 10480, next:10480512 invalid dropping st:0
Error while decoding stream #0:1: Invalid data found when processing input
DTS 10665, next:10666268 st:0 invalid dropping
PTS 10665, next:10666268 invalid dropping st:0
Error while decoding stream #0:1: Invalid data found when processing input
    Last message repeated 1 times
DTS 10898, next:10898463 st:0 invalid dropping
PTS 10898, next:10898463 invalid dropping st:0
Error while decoding stream #0:1: Invalid data found when processing input
DTS 11176, next:11177097 st:0 invalid dropping
PTS 11176, next:11177097 invalid dropping st:0
DTS 11409, next:11409292 st:0 invalid dropping
PTS 11409, next:11409292 invalid dropping st:0

Change History (2)

comment:1 by Carl Eugen Hoyos, 12 years ago

Component: undeterminedavcodec
Keywords: crash SIGSEGV mss1 added
Priority: normalimportant
Reproduced by developer: set
Status: newopen
Version: unspecifiedgit-master
(gdb) bt
#0  0xb79ca1f7 in memset () from /lib/libc.so.6
#1  0x084e1659 in decode_region_intra (ctx=<value optimized out>,
    acoder=0xbfc932bc, x=319, y=<value optimized out>, width=-1, height=2)
    at libavcodec/mss1.c:600
#2  0x084e1ae9 in decode_intra (ctx=0xb77a6020, acoder=0xbfc932bc, x=319, y=0,
    width=1, height=2) at libavcodec/mss1.c:634
#3  0x084e1a77 in decode_intra (ctx=0xb77a6020, acoder=0xbfc932bc, x=319, y=0,
    width=1, height=3) at libavcodec/mss1.c:625
#4  0x084e1a77 in decode_intra (ctx=0xb77a6020, acoder=0xbfc932bc, x=319, y=0,
    width=1, height=240) at libavcodec/mss1.c:625
#5  0x084e1a9f in decode_intra (ctx=0xb77a6020, acoder=0xbfc932bc, x=0, y=0,
    width=1, height=240) at libavcodec/mss1.c:636
#6  0x084e2a7c in mss1_decode_frame (avctx=0x90437a0, data=0x903bb00,
    data_size=0xbfc936e4, avpkt=0xbfc93320) at libavcodec/mss1.c:738
#7  0x08595805 in avcodec_decode_video2 (avctx=0x90437a0, picture=0x903bb00,
    got_picture_ptr=0xbfc935c4, avpkt=0xf) at libavcodec/utils.c:1520
#8  0x08059592 in output_packet (ist=0x90445e0, pkt=0xbfc939ec)
    at ffmpeg.c:2481
#9  0x0805b906 in main (argc=Cannot access memory at address 0x3ffc35f7
) at ffmpeg.c:3684

comment:2 by Elon Musk, 12 years ago

Resolution: fixed
Status: openclosed

Should be fixed. Thanks Carl for providing bt.

Note: See TracTickets for help on using tickets.