Opened 11 years ago

Closed 11 years ago

#2727 closed defect (fixed)

rv9 crash with low mem

Reported by: ami_stuff Owned by:
Priority: important Component: avcodec
Version: git-master Keywords: crash SIGSEGV rv40
Cc: Blocked By:
Blocking: Reproduced by developer: yes
Analyzed by developer: no

Description

C:\>ffmpeg -max_alloc 34000 -i rv9.rm -an -f null -
ffmpeg version N-54249-gfc736a9 Copyright (c) 2000-2013 the FFmpeg developers
  built on Jun 29 2013 02:23:07 with gcc 4.5.0 (GCC) 20100414 (Fedora MinGW 4.5.
0-1.fc14)
  configuration: --prefix=/var/www/users/research/ffmpeg/snapshots/build --arch=
x86 --target-os=mingw32 --cross-prefix=i686-pc-mingw32- --cc='ccache i686-pc-min
gw32-gcc' --enable-w32threads --enable-memalign-hack --enable-runtime-cpudetect
--enable-cross-compile --enable-static --disable-shared --extra-libs='-lws2_32 -
lwinmm -lpthread' --extra-cflags='--static -I/var/www/users/research/ffmpeg/snap
shots/build/include' --extra-ldflags='-static -L/var/www/users/research/ffmpeg/s
napshots/build/lib' --enable-bzlib --enable-zlib --enable-gpl --enable-version3
--enable-nonfree --enable-libx264 --enable-libspeex --enable-libtheora --enable-
libvorbis --enable-libfaac --enable-libxvid --enable-libopencore-amrnb --enable-
libopencore-amrwb --enable-libmp3lame --enable-libvpx --disable-decoder=libvpx
  libavutil      52. 37.101 / 52. 37.101
  libavcodec     55. 17.100 / 55. 17.100
  libavformat    55. 10.100 / 55. 10.100
  libavdevice    55.  2.100 / 55.  2.100
  libavfilter     3. 77.101 /  3. 77.101
  libswscale      2.  3.100 /  2.  3.100
  libswresample   0. 17.102 /  0. 17.102
  libpostproc    52.  3.100 / 52.  3.100
[rm @ 0x1fff920] Invalid stream index 2 for index at pos 850403
[rv40 @ 0x20de320] Cannot allocate memory.

Attachments (1)

rv9.rm (830.5 KB ) - added by ami_stuff 11 years ago.

Download all attachments as: .zip

Change History (3)

by ami_stuff, 11 years ago

Attachment: rv9.rm added

comment:1 by Carl Eugen Hoyos, 11 years ago

Component: undeterminedavcodec
Keywords: crash SIGSEGV added
Priority: normalimportant
Reproduced by developer: set
Status: newopen
Version: unspecifiedgit-master

http://thread.gmane.org/gmane.comp.video.ffmpeg.devel/165332/focus=165366

(gdb) r -max_alloc 50000 -i rv9.rm
Starting program: ffmpeg_g -max_alloc 50000 -i rv9.rm
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib64/libthread_db.so.1".
ffmpeg version N-54249-gfc736a9 Copyright (c) 2000-2013 the FFmpeg developers
  built on Jun 29 2013 12:22:00 with gcc 4.7 (SUSE Linux)
  configuration:
  libavutil      52. 37.101 / 52. 37.101
  libavcodec     55. 17.100 / 55. 17.100
  libavformat    55. 10.100 / 55. 10.100
  libavdevice    55.  2.100 / 55.  2.100
  libavfilter     3. 77.101 /  3. 77.101
  libswscale      2.  3.100 /  2.  3.100
  libswresample   0. 17.102 /  0. 17.102
[rm @ 0x1623060] Invalid stream index 2 for index at pos 850403
[rv40 @ 0x1623e60] Cannot allocate memory.

Program received signal SIGSEGV, Segmentation fault.
ff_MPV_frame_start (s=s@entry=0x1633860, avctx=0x1623e60) at libavcodec/mpegvideo.c:1513
1513                    &s->picture[i] != s->next_picture_ptr &&
(gdb) bt
#0  ff_MPV_frame_start (s=s@entry=0x1633860, avctx=0x1623e60) at libavcodec/mpegvideo.c:1513
#1  0x0000000000924a11 in ff_rv34_decode_frame (avctx=0x1623e60, data=0x1628920,
    got_picture_ptr=0x7fffffffd16c, avpkt=0x7fffffffd0c0) at libavcodec/rv34.c:1696
#2  0x0000000000998a8b in avcodec_decode_video2 (avctx=0x1623e60, picture=0x1628920,
    got_picture_ptr=got_picture_ptr@entry=0x7fffffffd16c, avpkt=avpkt@entry=0x7fffffffd1a0)
    at libavcodec/utils.c:1947
#3  0x000000000058f20c in try_decode_frame (st=st@entry=0x1623b80,
    avpkt=avpkt@entry=0x1628860, options=0x1626f60) at libavformat/utils.c:2447
#4  0x0000000000596c90 in avformat_find_stream_info (ic=0x1623060, options=0x1626f60)
    at libavformat/utils.c:2880
#5  0x0000000000462289 in open_input_file (o=o@entry=0x7fffffffd750, filename=<optimized out>)
    at ffmpeg_opt.c:814
#6  0x000000000045cd82 in open_files (inout=<optimized out>, inout@entry=0xc08adf "input",
    open_file=open_file@entry=0x461ee0 <open_input_file>, l=<optimized out>,
    l=<optimized out>) at ffmpeg_opt.c:2483
#7  0x0000000000463619 in ffmpeg_parse_options (argc=argc@entry=5,
    argv=argv@entry=0x7fffffffdde8) at ffmpeg_opt.c:2520
#8  0x000000000045a8c8 in main (argc=5, argv=0x7fffffffdde8) at ffmpeg.c:3368
(gdb) print s->picture
$2 = (Picture *) 0x0

comment:2 by Carl Eugen Hoyos, 11 years ago

Keywords: rv40 added
Resolution: fixed
Status: openclosed

Should be fixed in b86651a, thank you for the report!

Note: See TracTickets for help on using tickets.