Opened 3 years ago

Closed 3 years ago

#2723 closed defect (fixed)

vc1 crash with low mem

Reported by: ami_stuff Owned by:
Priority: important Component: avcodec
Version: git-master Keywords: crash SIGSEGV vc1
Cc: Blocked By:
Blocking: Reproduced by developer: yes
Analyzed by developer: no

Description

http://www1.datafilehost.com/d/22730b1f

knoppix@Microknoppix:/media/sdb1$ ulimit -Sv 21700 
knoppix@Microknoppix:/media/sdb1$ ./ffmpeg3 -i wmv9adv.wmv -f null - 
ffmpeg version 1.1.git Copyright (c) 2000-2013 the FFmpeg developers 
  built on Jun 28 2013 16:46:26 with gcc 4.7 (Debian 4.7.2-4) 
  configuration: --disable-asm --enable-gpl --disable-ffprobe 
  libavutil      52. 37.101 / 52. 37.101 
  libavcodec     55. 17.100 / 55. 17.100 
  libavformat    55. 10.100 / 55. 10.100 
  libavdevice    55.  2.100 / 55.  2.100 
  libavfilter     3. 77.101 /  3. 77.101 
  libswscale      2.  3.100 /  2.  3.100 
  libswresample   0. 17.102 /  0. 17.102 
  libpostproc    52.  3.100 / 52.  3.100 
Input #0, asf, from 'wmv9adv.wmv': 
  Metadata: 
    SfOriginalFPS   : 250000 
    WMFSDKVersion   : 11.0.5721.5275 
    WMFSDKNeeded    : 0.0.0.0000 
    IsVBR           : 0 
    DeviceConformanceTemplate: AP@L1 
  Duration: 00:00:12.68, bitrate: 1684 kb/s 
    Stream #0:0(pol): Video: vc1 (Advanced) (WVC1 / 0x31435657), yuv420p, 320x240, 3145 kb/s, 25 tbr, 1k tbn, 1k tbc 
Output #0, null, to 'pipe:': 
  Metadata: 
    SfOriginalFPS   : 250000 
    WMFSDKVersion   : 11.0.5721.5275 
    WMFSDKNeeded    : 0.0.0.0000 
    IsVBR           : 0 
    DeviceConformanceTemplate: AP@L1 
    encoder         : Lavf55.10.100 
    Stream #0:0(pol): Video: rawvideo (I420 / 0x30323449), yuv420p, 320x240, q=2-31, 200 kb/s, 90k tbn, 25 tbc 
Stream mapping: 
  Stream #0:0 -> #0:0 (vc1 -> rawvideo) 
Press [q] to stop, [?] for help 
[vc1 @ 0x905d8f0] Error allocating a picture. 
Error while decoding stream #0:0: Operation not permitted 
[vc1 @ 0x905d8f0] Error allocating a picture. 
Error while decoding stream #0:0: Operation not permitted 
Segmentation fault 
knoppix@Microknoppix:/media/sdb1$

Change History (2)

comment:1 Changed 3 years ago by cehoyos

  • Component changed from undetermined to avcodec
  • Keywords crash SIGSEGV vc1 added
  • Priority changed from normal to important
  • Reproduced by developer set
  • Status changed from new to open
  • Version changed from unspecified to git-master

Patch sent.

Core was generated by `ffmpeg -i wmv9adv.wmv -f null -'.
Program terminated with signal 11, Segmentation fault.
#0  vc1_unescape_buffer (dst=0x0, size=5953, src=0x3368200 "") at libavcodec/vc1.h:436
436                 dst[dsize++] = *src;
(gdb) bt
#0  vc1_unescape_buffer (dst=0x0, size=5953, src=0x3368200 "") at libavcodec/vc1.h:436
#1  vc1_decode_frame (avctx=0x334dac0, data=0x3348100, got_frame=0x7fff2118433c, avpkt=<optimiz
#2  0x0000000000998a8b in avcodec_decode_video2 (avctx=0x334dac0, picture=picture@entry=0x33481
    at libavcodec/utils.c:1947
#3  0x00000000004695c0 in decode_video (ist=ist@entry=0x3606aa0, pkt=pkt@entry=0x7fff211845a0,
#4  0x000000000046c2b7 in output_packet (pkt=0x7fff21184540, ist=0x3606aa0) at ffmpeg.c:1852
#5  process_input (file_index=<optimized out>) at ffmpeg.c:3064
#6  0x000000000045af10 in transcode_step () at ffmpeg.c:3160
#7  transcode () at ffmpeg.c:3212
#8  main (argc=<optimized out>, argv=<optimized out>) at ffmpeg.c:3390
(gdb) print dst
$1 = (uint8_t *) 0x0

comment:2 Changed 3 years ago by cehoyos

  • Resolution set to fixed
  • Status changed from open to closed

Should be fixed, thank you for the report!

Note: See TracTickets for help on using tickets.