Opened 11 years ago

Closed 11 years ago

#2747 closed defect (fixed)

svq1 enc: Invalid free() / delete / delete[] / realloc()

Reported by: ami_stuff Owned by:
Priority: important Component: undetermined
Version: git-master Keywords: crash regression
Cc: Blocked By:
Blocking: Reproduced by developer: yes
Analyzed by developer: no

Description

http://ffmpeg.org/trac/ffmpeg/raw-attachment/ticket/2744/test.avi

knoppix@Microknoppix:/media/sdb1$ valgrind --leak-check=full ./ffmpeg_g -i test.avi -an -y -vcodec svq1 -strict -2 -t 1 out.mov
==2845== Memcheck, a memory error detector
==2845== Copyright (C) 2002-2011, and GNU GPL'd, by Julian Seward et al.
==2845== Using Valgrind-3.7.0 and LibVEX; rerun with -h for copyright info
==2845== Command: ./ffmpeg_g -i test.avi -an -y -vcodec svq1 -strict -2 -t 1 out.mov
==2845== 
ffmpeg version 1.1.git Copyright (c) 2000-2013 the FFmpeg developers
  built on Jul  2 2013 13:07:10 with gcc 4.7 (Debian 4.7.2-4)
  configuration: --disable-asm --disable-ffprobe --disable-ffserver --enable-gpl
  libavutil      52. 38.100 / 52. 38.100
  libavcodec     55. 18.100 / 55. 18.100
  libavformat    55. 10.101 / 55. 10.101
  libavdevice    55.  2.100 / 55.  2.100
  libavfilter     3. 77.101 /  3. 77.101
  libswscale      2.  3.100 /  2.  3.100
  libswresample   0. 17.102 /  0. 17.102
  libpostproc    52.  3.100 / 52.  3.100
Input #0, avi, from 'test.avi':
  Duration: 00:00:14.07, start: 0.000000, bitrate: 872 kb/s
    Stream #0:0: Video: indeo3 (IV32 / 0x32335649), yuv410p, 352x288, 15 tbr, 15 tbn, 15 tbc
Output #0, mov, to 'out.mov':
  Metadata:
    encoder         : Lavf55.10.101
    Stream #0:0: Video: svq1 (SVQ1 / 0x31515653), yuv410p, 352x288, q=2-31, 200 kb/s, 15360 tbn, 15 tbc
Stream mapping:
  Stream #0:0 -> #0:0 (indeo3 -> svq1)
Press [q] to stop, [?] for help
frame=    2 fps=1.8 q=0.0 size=      47kB time=00:00:00.13 bitrate=2905.7kbits/sframe=    3 fps=1.4 q=0.0 size=      76kB time=00:00:00.20 bitrate=3132.5kbits/sframe=    4 fps=1.2 q=0.0 size=      98kB time=00:00:00.26 bitrate=3006.8kbits/sframe=    5 fps=1.2 q=0.0 size=     129kB time=00:00:00.33 bitrate=3178.3kbits/sframe=    6 fps=1.1 q=0.0 size=     156kB time=00:00:00.40 bitrate=3193.7kbits/sframe=    7 fps=1.1 q=0.0 size=     180kB time=00:00:00.46 bitrate=3163.9kbits/sframe=    8 fps=1.1 q=0.0 size=     205kB time=00:00:00.53 bitrate=3143.8kbits/sframe=    9 fps=1.1 q=0.0 size=     235kB time=00:00:00.60 bitrate=3213.5kbits/sframe=   10 fps=1.0 q=0.0 size=     259kB time=00:00:00.66 bitrate=3186.0kbits/sframe=   11 fps=1.0 q=0.0 size=     285kB time=00:00:00.73 bitrate=3184.8kbits/sframe=   12 fps=1.0 q=0.0 size=     310kB time=00:00:00.80 bitrate=3170.6kbits/sframe=   13 fps=1.0 q=0.0 size=     334kB time=00:00:00.86 bitrate=3159.7kbits/sframe=   14 fps=1.0 q=0.0 size=     364kB time=00:00:00.93 bitrate=3198.8kbits/sframe=   15 fps=1.0 q=0.0 size=     391kB time=00:00:01.00 bitrate=3201.0kbits/sframe=   15 fps=0.9 q=0.0 size=     391kB time=-577014:-32:-22.-77 bitrate=N/A  frame=   15 fps=0.9 q=0.0 Lsize=     392kB time=00:00:01.00 bitrate=3207.2kbits/s    
video:391kB audio:0kB subtitle:0 global headers:0kB muxing overhead 0.202455%
==2845== Invalid free() / delete / delete[] / realloc()
==2845==    at 0x402750C: free (vg_replace_malloc.c:427)
==2845==    by 0x8811161: av_freep (mem.c:210)
==2845==    by 0x41B4E15: (below main) (libc-start.c:228)
==2845==  Address 0x4365df4 is 12,756 bytes inside a block of size 13,448 alloc'd
==2845==    at 0x40268A4: memalign (vg_replace_malloc.c:694)
==2845==    by 0x402695E: posix_memalign (vg_replace_malloc.c:835)
==2845==    by 0x88111D7: av_mallocz (mem.c:93)
==2845==    by 0x85A31C0: avcodec_get_context_defaults3 (options.c:129)
==2845==    by 0x80A44A8: new_output_stream (ffmpeg_opt.c:1028)
==2845==    by 0x80A4F58: new_video_stream (ffmpeg_opt.c:1174)
==2845==    by 0x80A73C7: open_output_file (ffmpeg_opt.c:1694)
==2845==    by 0x80A2408: open_files.isra.7 (ffmpeg_opt.c:2483)
==2845==    by 0x41B4E15: (below main) (libc-start.c:228)
==2845== 
==2845== 
==2845== HEAP SUMMARY:
==2845==     in use at exit: 0 bytes in 0 blocks
==2845==   total heap usage: 2,160 allocs, 2,162 frees, 6,626,085 bytes allocated
==2845== 
==2845== All heap blocks were freed -- no leaks are possible
==2845== 
==2845== For counts of detected and suppressed errors, rerun with: -v
==2845== ERROR SUMMARY: 2 errors from 1 contexts (suppressed: 23 from 6)
knoppix@Microknoppix:/media/sdb1$

Change History (2)

comment:1 by Carl Eugen Hoyos, 11 years ago

Keywords: crash regression added
Priority: normalimportant
Reproduced by developer: set
Status: newopen
Version: unspecifiedgit-master

Regression since 80e9e63 / 759001c

comment:2 by Michael Niedermayer, 11 years ago

Resolution: fixed
Status: openclosed
Note: See TracTickets for help on using tickets.