Opened 11 years ago
Closed 11 years ago
#2906 closed defect (fixed)
ffv1: invalid write
Reported by: | ami_stuff | Owned by: | |
---|---|---|---|
Priority: | important | Component: | avcodec |
Version: | git-master | Keywords: | ffv1 crash SIGSEGV regression |
Cc: | Blocked By: | ||
Blocking: | Reproduced by developer: | yes | |
Analyzed by developer: | no |
Description
http://www.datafilehost.com/d/81fa2282
(gdb) r -i ffv1_fuzz.avi -f null - The program being debugged has been started already. Start it from the beginning? (y or n) y Starting program: /media/sdb1/ffmpeg-HEAD-abe76b8/ffmpeg_g -i ffv1_fuzz.avi -f null - [Thread debugging using libthread_db enabled] Using host libthread_db library "/lib/i386-linux-gnu/libthread_db.so.1". ffmpeg version 2.0-abe76b8 Copyright (c) 2000-2013 the FFmpeg developers built on Aug 26 2013 21:18:21 with gcc 4.7 (Debian 4.7.2-5) configuration: --disable-yasm --disable-ffserver --disable-ffprobe --enable-gpl libavutil 52. 42.100 / 52. 42.100 libavcodec 55. 29.100 / 55. 29.100 libavformat 55. 14.102 / 55. 14.102 libavdevice 55. 3.100 / 55. 3.100 libavfilter 3. 82.102 / 3. 82.102 libswscale 2. 5.100 / 2. 5.100 libswresample 0. 17.103 / 0. 17.103 libpostproc 52. 3.100 / 52. 3.100 Input #0, avi, from 'ffv1_fuzz.avi': Metadata: encoder : Lavf55.14.102 Duration: 00:00:12.68, start: 0.000000, bitrate: 1962 kb/s Stream #0:0: Video: ffv1 (FFV1 / 0x31564646), yuv420p, 160x120, SAR 1:1 DAR 4:3, 23.98 tbr, 23.98 tbn, 23.98 tbc [New Thread 0xb7df8b70 (LWP 23508)] [New Thread 0xb75f8b70 (LWP 23509)] [New Thread 0xb6df8b70 (LWP 23510)] [New Thread 0xb65f8b70 (LWP 23511)] [New Thread 0xb5df8b70 (LWP 23512)] [New Thread 0xb55f8b70 (LWP 23513)] [New Thread 0xb4df8b70 (LWP 23514)] [New Thread 0xb45f8b70 (LWP 23515)] [New Thread 0xb3df8b70 (LWP 23516)] [New Thread 0xb35f8b70 (LWP 23517)] [New Thread 0xb2df8b70 (LWP 23518)] [New Thread 0xb25f8b70 (LWP 23519)] [New Thread 0xb1df8b70 (LWP 23520)] [New Thread 0xb15f8b70 (LWP 23521)] [New Thread 0xb0df8b70 (LWP 23522)] [New Thread 0xb05f8b70 (LWP 23523)] [New Thread 0xafdf8b70 (LWP 23524)] [New Thread 0xaf5f8b70 (LWP 23525)] Output #0, null, to 'pipe:': Metadata: encoder : Lavf55.14.102 Stream #0:0: Video: rawvideo (I420 / 0x30323449), yuv420p, 160x120 [SAR 1:1 DAR 4:3], q=2-31, 200 kb/s, 90k tbn, 23.98 tbc Stream mapping: Stream #0:0 -> #0:0 (ffv1 -> rawvideo) Press [q] to stop, [?] for help [null @ 0x91091a0] Encoder did not produce proper pts, making some up. [ffv1 @ 0x90f4020] read_quant_table error [ffv1 @ 0x90f45c0] Cannot decode non-keyframe without valid keyframe [ffv1 @ 0x90f4b60] Cannot decode non-keyframe without valid keyframe [ffv1 @ 0x90f5100] Cannot decode non-keyframe without valid keyframe [ffv1 @ 0x90f56a0] Cannot decode non-keyframe without valid keyframe [ffv1 @ 0x90f5c40] Cannot decode non-keyframe without valid keyframe [ffv1 @ 0x910bbe0] Cannot decode non-keyframe without valid keyframe Error while decoding stream #0:0: Invalid data found when processing input [ffv1 @ 0x910c160] Cannot decode non-keyframe without valid keyframe Error while decoding stream #0:0: Invalid data found when processing input [ffv1 @ 0x910dc20] Cannot decode non-keyframe without valid keyframe Error while decoding stream #0:0: Invalid data found when processing input [ffv1 @ 0x90f4020] Cannot decode non-keyframe without valid keyframe Error while decoding stream #0:0: Invalid data found when processing input [ffv1 @ 0x90f45c0] Cannot decode non-keyframe without valid keyframe Error while decoding stream #0:0: Invalid data found when processing input Last message repeated 6 times [ffv1 @ 0x90f4020] read_quant_table error [ffv1 @ 0x90f45c0] Cannot decode non-keyframe without valid keyframe [ffv1 @ 0x90f4b60] Cannot decode non-keyframe without valid keyframe [ffv1 @ 0x90f5100] Cannot decode non-keyframe without valid keyframe [ffv1 @ 0x90f56a0] Cannot decode non-keyframe without valid keyframe [ffv1 @ 0x90f5c40] Cannot decode non-keyframe without valid keyframe [ffv1 @ 0x910bbe0] Cannot decode non-keyframe without valid keyframe Error while decoding stream #0:0: Invalid data found when processing input [ffv1 @ 0x910c160] Cannot decode non-keyframe without valid keyframe [ffv1 @ 0x910dc20] Cannot decode non-keyframe without valid keyframe Error while decoding stream #0:0: Invalid data found when processing input Error while decoding stream #0:0: Invalid data found when processing input Last message repeated 6 times [ffv1 @ 0x90f4020] read_quant_table error [ffv1 @ 0x90f45c0] Cannot decode non-keyframe without valid keyframe [ffv1 @ 0x90f4b60] Cannot decode non-keyframe without valid keyframe [ffv1 @ 0x90f5100] Cannot decode non-keyframe without valid keyframe [ffv1 @ 0x90f56a0] Cannot decode non-keyframe without valid keyframe [ffv1 @ 0x90f5c40] Cannot decode non-keyframe without valid keyframe [ffv1 @ 0x910bbe0] Cannot decode non-keyframe without valid keyframe Error while decoding stream #0:0: Invalid data found when processing input [ffv1 @ 0x910c160] Cannot decode non-keyframe without valid keyframe [ffv1 @ 0x910dc20] Cannot decode non-keyframe without valid keyframe Error while decoding stream #0:0: Invalid data found when processing input Error while decoding stream #0:0: Invalid data found when processing input [ffv1 @ 0x90f4020] Cannot decode non-keyframe without valid keyframe Error while decoding stream #0:0: Invalid data found when processing input [ffv1 @ 0x90f45c0] Cannot decode non-keyframe without valid keyframe Error while decoding stream #0:0: Invalid data found when processing input [ffv1 @ 0x90f4b60] read_quant_table error Error while decoding stream #0:0: Invalid data found when processing input [ffv1 @ 0x90f5100] Cannot decode non-keyframe without valid keyframe Error while decoding stream #0:0: Invalid data found when processing input [ffv1 @ 0x90f56a0] Cannot decode non-keyframe without valid keyframe Error while decoding stream #0:0: Invalid data found when processing input [ffv1 @ 0x90f5c40] Cannot decode non-keyframe without valid keyframe Error while decoding stream #0:0: Invalid data found when processing input [ffv1 @ 0x910bbe0] Cannot decode non-keyframe without valid keyframe Error while decoding stream #0:0: Invalid data found when processing input [ffv1 @ 0x910c160] Cannot decode non-keyframe without valid keyframe Error while decoding stream #0:0: Invalid data found when processing input [ffv1 @ 0x910dc20] Cannot decode non-keyframe without valid keyframe Error while decoding stream #0:0: Invalid data found when processing input [ffv1 @ 0x90f4020] Cannot decode non-keyframe without valid keyframe Error while decoding stream #0:0: Invalid data found when processing input [ffv1 @ 0x90f45c0] Cannot decode non-keyframe without valid keyframe Error while decoding stream #0:0: Invalid data found when processing input [ffv1 @ 0x90f4b60] Cannot decode non-keyframe without valid keyframe Error while decoding stream #0:0: Invalid data found when processing input [ffv1 @ 0x90f5100] Cannot decode non-keyframe without valid keyframe Error while decoding stream #0:0: Invalid data found when processing input [ffv1 @ 0x90f56a0] Cannot decode non-keyframe without valid keyframe Error while decoding stream #0:0: Invalid data found when processing input Last message repeated 6 times [ffv1 @ 0x90f4b60] read_quant_table error [ffv1 @ 0x90f5100] Cannot decode non-keyframe without valid keyframe [ffv1 @ 0x90f56a0] Cannot decode non-keyframe without valid keyframe [ffv1 @ 0x90f5c40] Cannot decode non-keyframe without valid keyframe [ffv1 @ 0x910bbe0] Cannot decode non-keyframe without valid keyframe [ffv1 @ 0x910c160] Cannot decode non-keyframe without valid keyframe [ffv1 @ 0x910dc20] Cannot decode non-keyframe without valid keyframe Error while decoding stream #0:0: Invalid data found when processing input [ffv1 @ 0x90f4020] Cannot decode non-keyframe without valid keyframe [ffv1 @ 0x90f45c0] Cannot decode non-keyframe without valid keyframe Error while decoding stream #0:0: Invalid data found when processing input Error while decoding stream #0:0: Invalid data found when processing input Last message repeated 6 times [ffv1 @ 0x90f4020] format not supported [ffv1 @ 0x90f45c0] Cannot decode non-keyframe without valid keyframe [ffv1 @ 0x90f4b60] Cannot decode non-keyframe without valid keyframe [ffv1 @ 0x90f5100] Cannot decode non-keyframe without valid keyframe [ffv1 @ 0x90f56a0] Cannot decode non-keyframe without valid keyframe [ffv1 @ 0x90f5c40] Cannot decode non-keyframe without valid keyframe [ffv1 @ 0x910bbe0] Cannot decode non-keyframe without valid keyframe Error while decoding stream #0:0: Function not implemented [ffv1 @ 0x910c160] Cannot decode non-keyframe without valid keyframe [ffv1 @ 0x910dc20] Cannot decode non-keyframe without valid keyframe Error while decoding stream #0:0: Invalid data found when processing input [ffv1 @ 0x90f4020] Cannot decode non-keyframe without valid keyframe Error while decoding stream #0:0: Invalid data found when processing input Error while decoding stream #0:0: Invalid data found when processing input [ffv1 @ 0x90f45c0] Cannot decode non-keyframe without valid keyframe Error while decoding stream #0:0: Invalid data found when processing input [ffv1 @ 0x90f4b60] Cannot decode non-keyframe without valid keyframe Error while decoding stream #0:0: Invalid data found when processing input [ffv1 @ 0x90f5100] Cannot decode non-keyframe without valid keyframe Error while decoding stream #0:0: Invalid data found when processing input [ffv1 @ 0x90f56a0] Cannot decode non-keyframe without valid keyframe Error while decoding stream #0:0: Invalid data found when processing input [ffv1 @ 0x90f5c40] Cannot decode non-keyframe without valid keyframe Error while decoding stream #0:0: Invalid data found when processing input [ffv1 @ 0x910bbe0] Cannot decode non-keyframe without valid keyframe Error while decoding stream #0:0: Invalid data found when processing input [ffv1 @ 0x910c160] Cannot decode non-keyframe without valid keyframe [ffv1 @ 0x910dc20] Cannot decode non-keyframe without valid keyframe Error while decoding stream #0:0: Invalid data found when processing input Error while decoding stream #0:0: Invalid data found when processing input [ffv1 @ 0x90f4020] Cannot decode non-keyframe without valid keyframe Error while decoding stream #0:0: Invalid data found when processing input [ffv1 @ 0x90f45c0] Cannot decode non-keyframe without valid keyframe Error while decoding stream #0:0: Invalid data found when processing input [ffv1 @ 0x90f4b60] Cannot decode non-keyframe without valid keyframe Error while decoding stream #0:0: Invalid data found when processing input Last message repeated 6 times Program received signal SIGSEGV, Segmentation fault. [Switching to Thread 0xb1df8b70 (LWP 23520)] 0x0832cb14 in decode_plane (s=s@entry=0x91aa9a0, src=0x0, w=w@entry=160, h=h@entry=120, stride=0, plane_index=plane_index@entry=2) at libavcodec/ffv1dec.c:193 193 src[x + stride * y] = sample[1][x]; (gdb) bt #0 0x0832cb14 in decode_plane (s=s@entry=0x91aa9a0, src=0x0, w=w@entry=160, h=h@entry=120, stride=0, plane_index=plane_index@entry=2) at libavcodec/ffv1dec.c:193 #1 0x083306f9 in decode_slice (c=0x90f4020, arg=0x913de48) at libavcodec/ffv1dec.c:406 #2 0x086761d4 in avcodec_default_execute (c=0x90f4020, func=0x832f6c0 <decode_slice>, arg=0x913de48, ret=0x0, count=1, size=4) at libavcodec/utils.c:947 #3 0x0832e42e in decode_frame (avctx=0x90f4020, data=0x910490c, got_frame=0x9104ac8, avpkt=0x91048bc) at libavcodec/ffv1dec.c:876 #4 0x085cca5e in frame_worker_thread (arg=0x91047ec) at libavcodec/pthread.c:339 #5 0xb7f87954 in start_thread (arg=0xb1df8b70) at pthread_create.c:304 #6 0xb7f0895e in clone () at ../sysdeps/unix/sysv/linux/i386/clone.S:130 (gdb)
knoppix@Microknoppix:/media/sdb1$ valgrind --leak-check=full ffmpeg-HEAD-abe76b8/ffmpeg_g -i ffv1_fuzz.avi -f null - ==23418== Memcheck, a memory error detector ==23418== Copyright (C) 2002-2011, and GNU GPL'd, by Julian Seward et al. ==23418== Using Valgrind-3.7.0 and LibVEX; rerun with -h for copyright info ==23418== Command: ffmpeg-HEAD-abe76b8/ffmpeg_g -i ffv1_fuzz.avi -f null - ==23418== ffmpeg version 2.0-abe76b8 Copyright (c) 2000-2013 the FFmpeg developers built on Aug 26 2013 21:18:21 with gcc 4.7 (Debian 4.7.2-5) configuration: --disable-yasm --disable-ffserver --disable-ffprobe --enable-gpl libavutil 52. 42.100 / 52. 42.100 libavcodec 55. 29.100 / 55. 29.100 libavformat 55. 14.102 / 55. 14.102 libavdevice 55. 3.100 / 55. 3.100 libavfilter 3. 82.102 / 3. 82.102 libswscale 2. 5.100 / 2. 5.100 libswresample 0. 17.103 / 0. 17.103 libpostproc 52. 3.100 / 52. 3.100 Input #0, avi, from 'ffv1_fuzz.avi': Metadata: encoder : Lavf55.14.102 Duration: 00:00:12.68, start: 0.000000, bitrate: 1962 kb/s Stream #0:0: Video: ffv1 (FFV1 / 0x31564646), yuv420p, 160x120, SAR 1:1 DAR 4:3, 23.98 tbr, 23.98 tbn, 23.98 tbc Output #0, null, to 'pipe:': Metadata: encoder : Lavf55.14.102 Stream #0:0: Video: rawvideo (I420 / 0x30323449), yuv420p, 160x120 [SAR 1:1 DAR 4:3], q=2-31, 200 kb/s, 90k tbn, 23.98 tbc Stream mapping: Stream #0:0 -> #0:0 (ffv1 -> rawvideo) Press [q] to stop, [?] for help [null @ 0x4277d60] Encoder did not produce proper pts, making some up. [ffv1 @ 0x43743e0] read_quant_table error [ffv1 @ 0x437eb20] Cannot decode non-keyframe without valid keyframe [ffv1 @ 0x4389280] Cannot decode non-keyframe without valid keyframe [ffv1 @ 0x43939c0] Cannot decode non-keyframe without valid keyframe [ffv1 @ 0x439e120] Cannot decode non-keyframe without valid keyframe [ffv1 @ 0x43a8860] Cannot decode non-keyframe without valid keyframe [ffv1 @ 0x4353bc0] Cannot decode non-keyframe without valid keyframe Error while decoding stream #0:0: Invalid data found when processing input [ffv1 @ 0x435f540] Cannot decode non-keyframe without valid keyframe Error while decoding stream #0:0: Invalid data found when processing input [ffv1 @ 0x4369c80] Cannot decode non-keyframe without valid keyframe Error while decoding stream #0:0: Invalid data found when processing input [ffv1 @ 0x43743e0] Cannot decode non-keyframe without valid keyframe Error while decoding stream #0:0: Invalid data found when processing input [ffv1 @ 0x437eb20] Cannot decode non-keyframe without valid keyframe Error while decoding stream #0:0: Invalid data found when processing input Last message repeated 6 times frame= 38 fps=0.0 q=0.0 size=N/A time=00:00:01.58 bitrate=N/A dup=12 drop=0 [ffv1 @ 0x43743e0] read_quant_table error [ffv1 @ 0x437eb20] Cannot decode non-keyframe without valid keyframe [ffv1 @ 0x4389280] Cannot decode non-keyframe without valid keyframe [ffv1 @ 0x43939c0] Cannot decode non-keyframe without valid keyframe [ffv1 @ 0x439e120] Cannot decode non-keyframe without valid keyframe [ffv1 @ 0x43a8860] Cannot decode non-keyframe without valid keyframe [ffv1 @ 0x4353bc0] Cannot decode non-keyframe without valid keyframe Error while decoding stream #0:0: Invalid data found when processing input [ffv1 @ 0x435f540] Cannot decode non-keyframe without valid keyframe Error while decoding stream #0:0: Invalid data found when processing input [ffv1 @ 0x4369c80] Cannot decode non-keyframe without valid keyframe Error while decoding stream #0:0: Invalid data found when processing input Last message repeated 6 times [ffv1 @ 0x43743e0] read_quant_table error [ffv1 @ 0x437eb20] Cannot decode non-keyframe without valid keyframe [ffv1 @ 0x4389280] Cannot decode non-keyframe without valid keyframe [ffv1 @ 0x43939c0] Cannot decode non-keyframe without valid keyframe [ffv1 @ 0x439e120] Cannot decode non-keyframe without valid keyframe [ffv1 @ 0x43a8860] Cannot decode non-keyframe without valid keyframe [ffv1 @ 0x4353bc0] Cannot decode non-keyframe without valid keyframe Error while decoding stream #0:0: Invalid data found when processing input [ffv1 @ 0x435f540] Cannot decode non-keyframe without valid keyframe Error while decoding stream #0:0: Invalid data found when processing input [ffv1 @ 0x4369c80] Cannot decode non-keyframe without valid keyframe Error while decoding stream #0:0: Invalid data found when processing input [ffv1 @ 0x43743e0] Cannot decode non-keyframe without valid keyframe Error while decoding stream #0:0: Invalid data found when processing input [ffv1 @ 0x437eb20] Cannot decode non-keyframe without valid keyframe Error while decoding stream #0:0: Invalid data found when processing input [ffv1 @ 0x4389280] read_quant_table error Error while decoding stream #0:0: Invalid data found when processing input [ffv1 @ 0x43939c0] Cannot decode non-keyframe without valid keyframe Error while decoding stream #0:0: Invalid data found when processing input [ffv1 @ 0x439e120] Cannot decode non-keyframe without valid keyframe Error while decoding stream #0:0: Invalid data found when processing input [ffv1 @ 0x43a8860] Cannot decode non-keyframe without valid keyframe Error while decoding stream #0:0: Invalid data found when processing input [ffv1 @ 0x4353bc0] Cannot decode non-keyframe without valid keyframe Error while decoding stream #0:0: Invalid data found when processing input [ffv1 @ 0x435f540] Cannot decode non-keyframe without valid keyframe Error while decoding stream #0:0: Invalid data found when processing input [ffv1 @ 0x4369c80] Cannot decode non-keyframe without valid keyframe Error while decoding stream #0:0: Invalid data found when processing input [ffv1 @ 0x43743e0] Cannot decode non-keyframe without valid keyframe Error while decoding stream #0:0: Invalid data found when processing input [ffv1 @ 0x437eb20] Cannot decode non-keyframe without valid keyframe Error while decoding stream #0:0: Invalid data found when processing input [ffv1 @ 0x4389280] Cannot decode non-keyframe without valid keyframe Error while decoding stream #0:0: Invalid data found when processing input [ffv1 @ 0x43939c0] Cannot decode non-keyframe without valid keyframe Error while decoding stream #0:0: Invalid data found when processing input [ffv1 @ 0x439e120] Cannot decode non-keyframe without valid keyframe Error while decoding stream #0:0: Invalid data found when processing input Last message repeated 6 times frame= 76 fps= 75 q=0.0 size=N/A time=00:00:03.16 bitrate=N/A dup=21 drop=0 [ffv1 @ 0x4389280] read_quant_table error [ffv1 @ 0x43939c0] Cannot decode non-keyframe without valid keyframe [ffv1 @ 0x439e120] Cannot decode non-keyframe without valid keyframe [ffv1 @ 0x43a8860] Cannot decode non-keyframe without valid keyframe [ffv1 @ 0x4353bc0] Cannot decode non-keyframe without valid keyframe [ffv1 @ 0x435f540] Cannot decode non-keyframe without valid keyframe [ffv1 @ 0x4369c80] Cannot decode non-keyframe without valid keyframe Error while decoding stream #0:0: Invalid data found when processing input frame= 141 fps= 93 q=0.0 size=N/A time=00:00:05.88 bitrate=N/A dup=44 drop=0 [ffv1 @ 0x43743e0] Cannot decode non-keyframe without valid keyframe Error while decoding stream #0:0: Invalid data found when processing input [ffv1 @ 0x437eb20] Cannot decode non-keyframe without valid keyframe Error while decoding stream #0:0: Invalid data found when processing input Last message repeated 6 times [ffv1 @ 0x43743e0] format not supported [ffv1 @ 0x437eb20] Cannot decode non-keyframe without valid keyframe [ffv1 @ 0x4389280] Cannot decode non-keyframe without valid keyframe [ffv1 @ 0x43939c0] Cannot decode non-keyframe without valid keyframe [ffv1 @ 0x439e120] Cannot decode non-keyframe without valid keyframe [ffv1 @ 0x43a8860] Cannot decode non-keyframe without valid keyframe [ffv1 @ 0x4353bc0] Cannot decode non-keyframe without valid keyframe Error while decoding stream #0:0: Function not implemented [ffv1 @ 0x435f540] Cannot decode non-keyframe without valid keyframe Error while decoding stream #0:0: Invalid data found when processing input [ffv1 @ 0x4369c80] Cannot decode non-keyframe without valid keyframe Error while decoding stream #0:0: Invalid data found when processing input [ffv1 @ 0x43743e0] Cannot decode non-keyframe without valid keyframe Error while decoding stream #0:0: Invalid data found when processing input [ffv1 @ 0x437eb20] Cannot decode non-keyframe without valid keyframe Error while decoding stream #0:0: Invalid data found when processing input [ffv1 @ 0x4389280] Cannot decode non-keyframe without valid keyframe Error while decoding stream #0:0: Invalid data found when processing input [ffv1 @ 0x43939c0] Cannot decode non-keyframe without valid keyframe Error while decoding stream #0:0: Invalid data found when processing input [ffv1 @ 0x439e120] Cannot decode non-keyframe without valid keyframe Error while decoding stream #0:0: Invalid data found when processing input [ffv1 @ 0x43a8860] Cannot decode non-keyframe without valid keyframe Error while decoding stream #0:0: Invalid data found when processing input [ffv1 @ 0x4353bc0] Cannot decode non-keyframe without valid keyframe Error while decoding stream #0:0: Invalid data found when processing input [ffv1 @ 0x435f540] Cannot decode non-keyframe without valid keyframe Error while decoding stream #0:0: Invalid data found when processing input [ffv1 @ 0x4369c80] Cannot decode non-keyframe without valid keyframe Error while decoding stream #0:0: Invalid data found when processing input [ffv1 @ 0x43743e0] Cannot decode non-keyframe without valid keyframe Error while decoding stream #0:0: Invalid data found when processing input [ffv1 @ 0x437eb20] Cannot decode non-keyframe without valid keyframe Error while decoding stream #0:0: Invalid data found when processing input [ffv1 @ 0x4389280] Cannot decode non-keyframe without valid keyframe Error while decoding stream #0:0: Invalid data found when processing input ==23418== Thread 14:eated 6 times ==23418== Invalid read of size 2 ==23418== at 0x832D028: decode_plane (ffv1dec.c:74) ==23418== by 0x83306F8: decode_slice (ffv1dec.c:406) ==23418== by 0x86761D3: avcodec_default_execute (utils.c:947) ==23418== by 0x832E42D: decode_frame (ffv1dec.c:876) ==23418== by 0x85CCA5D: frame_worker_thread (pthread.c:339) ==23418== by 0x407B953: start_thread (pthread_create.c:304) ==23418== by 0x416395D: clone (clone.S:130) ==23418== Address 0xf366962 is 1 bytes after a block of size 1 alloc'd ==23418== at 0x40268A4: memalign (vg_replace_malloc.c:694) ==23418== by 0x402695E: posix_memalign (vg_replace_malloc.c:835) ==23418== by 0x886D357: av_malloc (mem.c:93) ==23418== by 0x886D33B: av_malloc (mem.c:132) ==23418== by 0x832FF3E: decode_slice (ffv1dec.c:360) ==23418== by 0x86761D3: avcodec_default_execute (utils.c:947) ==23418== by 0x832E42D: decode_frame (ffv1dec.c:876) ==23418== by 0x85CCA5D: frame_worker_thread (pthread.c:339) ==23418== by 0x407B953: start_thread (pthread_create.c:304) ==23418== by 0x416395D: clone (clone.S:130) ==23418== ==23418== Invalid read of size 1 ==23418== at 0x832D02C: decode_plane (ffv1dec.c:72) ==23418== by 0x83306F8: decode_slice (ffv1dec.c:406) ==23418== by 0x86761D3: avcodec_default_execute (utils.c:947) ==23418== by 0x832E42D: decode_frame (ffv1dec.c:876) ==23418== by 0x85CCA5D: frame_worker_thread (pthread.c:339) ==23418== by 0x407B953: start_thread (pthread_create.c:304) ==23418== by 0x416395D: clone (clone.S:130) ==23418== Address 0xf366965 is 4 bytes after a block of size 1 alloc'd ==23418== at 0x40268A4: memalign (vg_replace_malloc.c:694) ==23418== by 0x402695E: posix_memalign (vg_replace_malloc.c:835) ==23418== by 0x886D357: av_malloc (mem.c:93) ==23418== by 0x886D33B: av_malloc (mem.c:132) ==23418== by 0x832FF3E: decode_slice (ffv1dec.c:360) ==23418== by 0x86761D3: avcodec_default_execute (utils.c:947) ==23418== by 0x832E42D: decode_frame (ffv1dec.c:876) ==23418== by 0x85CCA5D: frame_worker_thread (pthread.c:339) ==23418== by 0x407B953: start_thread (pthread_create.c:304) ==23418== by 0x416395D: clone (clone.S:130) ==23418== ==23418== Invalid read of size 2 ==23418== at 0x832D0E7: decode_plane (ffv1dec.c:87) ==23418== by 0x83306F8: decode_slice (ffv1dec.c:406) ==23418== by 0x86761D3: avcodec_default_execute (utils.c:947) ==23418== by 0x832E42D: decode_frame (ffv1dec.c:876) ==23418== by 0x85CCA5D: frame_worker_thread (pthread.c:339) ==23418== by 0x407B953: start_thread (pthread_create.c:304) ==23418== by 0x416395D: clone (clone.S:130) ==23418== Address 0xf366960 is 0 bytes inside a block of size 1 alloc'd ==23418== at 0x40268A4: memalign (vg_replace_malloc.c:694) ==23418== by 0x402695E: posix_memalign (vg_replace_malloc.c:835) ==23418== by 0x886D357: av_malloc (mem.c:93) ==23418== by 0x886D33B: av_malloc (mem.c:132) ==23418== by 0x832FF3E: decode_slice (ffv1dec.c:360) ==23418== by 0x86761D3: avcodec_default_execute (utils.c:947) ==23418== by 0x832E42D: decode_frame (ffv1dec.c:876) ==23418== by 0x85CCA5D: frame_worker_thread (pthread.c:339) ==23418== by 0x407B953: start_thread (pthread_create.c:304) ==23418== by 0x416395D: clone (clone.S:130) ==23418== ==23418== Invalid read of size 1 ==23418== at 0x832D0EA: decode_plane (ffv1dec.c:87) ==23418== by 0x83306F8: decode_slice (ffv1dec.c:406) ==23418== by 0x86761D3: avcodec_default_execute (utils.c:947) ==23418== by 0x832E42D: decode_frame (ffv1dec.c:876) ==23418== by 0x85CCA5D: frame_worker_thread (pthread.c:339) ==23418== by 0x407B953: start_thread (pthread_create.c:304) ==23418== by 0x416395D: clone (clone.S:130) ==23418== Address 0xf366965 is 4 bytes after a block of size 1 alloc'd ==23418== at 0x40268A4: memalign (vg_replace_malloc.c:694) ==23418== by 0x402695E: posix_memalign (vg_replace_malloc.c:835) ==23418== by 0x886D357: av_malloc (mem.c:93) ==23418== by 0x886D33B: av_malloc (mem.c:132) ==23418== by 0x832FF3E: decode_slice (ffv1dec.c:360) ==23418== by 0x86761D3: avcodec_default_execute (utils.c:947) ==23418== by 0x832E42D: decode_frame (ffv1dec.c:876) ==23418== by 0x85CCA5D: frame_worker_thread (pthread.c:339) ==23418== by 0x407B953: start_thread (pthread_create.c:304) ==23418== by 0x416395D: clone (clone.S:130) ==23418== ==23418== Invalid read of size 1 ==23418== at 0x832D0FF: decode_plane (ffv1dec.c:90) ==23418== by 0x83306F8: decode_slice (ffv1dec.c:406) ==23418== by 0x86761D3: avcodec_default_execute (utils.c:947) ==23418== by 0x832E42D: decode_frame (ffv1dec.c:876) ==23418== by 0x85CCA5D: frame_worker_thread (pthread.c:339) ==23418== by 0x407B953: start_thread (pthread_create.c:304) ==23418== by 0x416395D: clone (clone.S:130) ==23418== Address 0xf366964 is 3 bytes after a block of size 1 alloc'd ==23418== at 0x40268A4: memalign (vg_replace_malloc.c:694) ==23418== by 0x402695E: posix_memalign (vg_replace_malloc.c:835) ==23418== by 0x886D357: av_malloc (mem.c:93) ==23418== by 0x886D33B: av_malloc (mem.c:132) ==23418== by 0x832FF3E: decode_slice (ffv1dec.c:360) ==23418== by 0x86761D3: avcodec_default_execute (utils.c:947) ==23418== by 0x832E42D: decode_frame (ffv1dec.c:876) ==23418== by 0x85CCA5D: frame_worker_thread (pthread.c:339) ==23418== by 0x407B953: start_thread (pthread_create.c:304) ==23418== by 0x416395D: clone (clone.S:130) ==23418== ==23418== Invalid write of size 2 ==23418== at 0x832D129: decode_plane (ffv1.h:189) ==23418== by 0x83306F8: decode_slice (ffv1dec.c:406) ==23418== by 0x86761D3: avcodec_default_execute (utils.c:947) ==23418== by 0x832E42D: decode_frame (ffv1dec.c:876) ==23418== by 0x85CCA5D: frame_worker_thread (pthread.c:339) ==23418== by 0x407B953: start_thread (pthread_create.c:304) ==23418== by 0x416395D: clone (clone.S:130) ==23418== Address 0xf366962 is 1 bytes after a block of size 1 alloc'd ==23418== at 0x40268A4: memalign (vg_replace_malloc.c:694) ==23418== by 0x402695E: posix_memalign (vg_replace_malloc.c:835) ==23418== by 0x886D357: av_malloc (mem.c:93) ==23418== by 0x886D33B: av_malloc (mem.c:132) ==23418== by 0x832FF3E: decode_slice (ffv1dec.c:360) ==23418== by 0x86761D3: avcodec_default_execute (utils.c:947) ==23418== by 0x832E42D: decode_frame (ffv1dec.c:876) ==23418== by 0x85CCA5D: frame_worker_thread (pthread.c:339) ==23418== by 0x407B953: start_thread (pthread_create.c:304) ==23418== by 0x416395D: clone (clone.S:130) ==23418== ==23418== Conditional jump or move depends on uninitialised value(s) ==23418== at 0x832D140: decode_plane (ffv1.h:199) ==23418== by 0x83306F8: decode_slice (ffv1dec.c:406) ==23418== by 0x86761D3: avcodec_default_execute (utils.c:947) ==23418== by 0x832E42D: decode_frame (ffv1dec.c:876) ==23418== by 0x85CCA5D: frame_worker_thread (pthread.c:339) ==23418== by 0x407B953: start_thread (pthread_create.c:304) ==23418== by 0x416395D: clone (clone.S:130) ==23418== ==23418== Invalid write of size 1 ==23418== at 0x832D159: decode_plane (ffv1.h:201) ==23418== by 0x83306F8: decode_slice (ffv1dec.c:406) ==23418== by 0x86761D3: avcodec_default_execute (utils.c:947) ==23418== by 0x832E42D: decode_frame (ffv1dec.c:876) ==23418== by 0x85CCA5D: frame_worker_thread (pthread.c:339) ==23418== by 0x407B953: start_thread (pthread_create.c:304) ==23418== by 0x416395D: clone (clone.S:130) ==23418== Address 0xf366964 is 3 bytes after a block of size 1 alloc'd ==23418== at 0x40268A4: memalign (vg_replace_malloc.c:694) ==23418== by 0x402695E: posix_memalign (vg_replace_malloc.c:835) ==23418== by 0x886D357: av_malloc (mem.c:93) ==23418== by 0x886D33B: av_malloc (mem.c:132) ==23418== by 0x832FF3E: decode_slice (ffv1dec.c:360) ==23418== by 0x86761D3: avcodec_default_execute (utils.c:947) ==23418== by 0x832E42D: decode_frame (ffv1dec.c:876) ==23418== by 0x85CCA5D: frame_worker_thread (pthread.c:339) ==23418== by 0x407B953: start_thread (pthread_create.c:304) ==23418== by 0x416395D: clone (clone.S:130) ==23418== ==23418== Conditional jump or move depends on uninitialised value(s) ==23418== at 0x832D162: decode_plane (ffv1.h:204) ==23418== by 0x83306F8: decode_slice (ffv1dec.c:406) ==23418== by 0x86761D3: avcodec_default_execute (utils.c:947) ==23418== by 0x832E42D: decode_frame (ffv1dec.c:876) ==23418== by 0x85CCA5D: frame_worker_thread (pthread.c:339) ==23418== by 0x407B953: start_thread (pthread_create.c:304) ==23418== by 0x416395D: clone (clone.S:130) ==23418== ==23418== Invalid write of size 2 ==23418== at 0x832D173: decode_plane (ffv1.h:215) ==23418== by 0x83306F8: decode_slice (ffv1dec.c:406) ==23418== by 0x86761D3: avcodec_default_execute (utils.c:947) ==23418== by 0x832E42D: decode_frame (ffv1dec.c:876) ==23418== by 0x85CCA5D: frame_worker_thread (pthread.c:339) ==23418== by 0x407B953: start_thread (pthread_create.c:304) ==23418== by 0x416395D: clone (clone.S:130) ==23418== Address 0xf366960 is 0 bytes inside a block of size 1 alloc'd ==23418== at 0x40268A4: memalign (vg_replace_malloc.c:694) ==23418== by 0x402695E: posix_memalign (vg_replace_malloc.c:835) ==23418== by 0x886D357: av_malloc (mem.c:93) ==23418== by 0x886D33B: av_malloc (mem.c:132) ==23418== by 0x832FF3E: decode_slice (ffv1dec.c:360) ==23418== by 0x86761D3: avcodec_default_execute (utils.c:947) ==23418== by 0x832E42D: decode_frame (ffv1dec.c:876) ==23418== by 0x85CCA5D: frame_worker_thread (pthread.c:339) ==23418== by 0x407B953: start_thread (pthread_create.c:304) ==23418== by 0x416395D: clone (clone.S:130) ==23418== ==23418== Invalid write of size 1 ==23418== at 0x832D176: decode_plane (ffv1.h:216) ==23418== by 0x83306F8: decode_slice (ffv1dec.c:406) ==23418== by 0x86761D3: avcodec_default_execute (utils.c:947) ==23418== by 0x832E42D: decode_frame (ffv1dec.c:876) ==23418== by 0x85CCA5D: frame_worker_thread (pthread.c:339) ==23418== by 0x407B953: start_thread (pthread_create.c:304) ==23418== by 0x416395D: clone (clone.S:130) ==23418== Address 0xf366965 is 4 bytes after a block of size 1 alloc'd ==23418== at 0x40268A4: memalign (vg_replace_malloc.c:694) ==23418== by 0x402695E: posix_memalign (vg_replace_malloc.c:835) ==23418== by 0x886D357: av_malloc (mem.c:93) ==23418== by 0x886D33B: av_malloc (mem.c:132) ==23418== by 0x832FF3E: decode_slice (ffv1dec.c:360) ==23418== by 0x86761D3: avcodec_default_execute (utils.c:947) ==23418== by 0x832E42D: decode_frame (ffv1dec.c:876) ==23418== by 0x85CCA5D: frame_worker_thread (pthread.c:339) ==23418== by 0x407B953: start_thread (pthread_create.c:304) ==23418== by 0x416395D: clone (clone.S:130) ==23418== ==23418== Conditional jump or move depends on uninitialised value(s) ==23418== at 0x832D179: decode_plane (ffv1dec.c:148) ==23418== by 0x83306F8: decode_slice (ffv1dec.c:406) ==23418== by 0x86761D3: avcodec_default_execute (utils.c:947) ==23418== by 0x832E42D: decode_frame (ffv1dec.c:876) ==23418== by 0x85CCA5D: frame_worker_thread (pthread.c:339) ==23418== by 0x407B953: start_thread (pthread_create.c:304) ==23418== by 0x416395D: clone (clone.S:130) ==23418== ==23418== Use of uninitialised value of size 4 ==23418== at 0x832C8C5: decode_plane (ffv1.h:180) ==23418== by 0x83306F8: decode_slice (ffv1dec.c:406) ==23418== by 0x86761D3: avcodec_default_execute (utils.c:947) ==23418== by 0x832E42D: decode_frame (ffv1dec.c:876) ==23418== by 0x85CCA5D: frame_worker_thread (pthread.c:339) ==23418== by 0x407B953: start_thread (pthread_create.c:304) ==23418== by 0x416395D: clone (clone.S:130) ==23418== ==23418== Conditional jump or move depends on uninitialised value(s) ==23418== at 0x832CAA5: decode_plane (mathops.h:106) ==23418== by 0x83306F8: decode_slice (ffv1dec.c:406) ==23418== by 0x86761D3: avcodec_default_execute (utils.c:947) ==23418== by 0x832E42D: decode_frame (ffv1dec.c:876) ==23418== by 0x85CCA5D: frame_worker_thread (pthread.c:339) ==23418== by 0x407B953: start_thread (pthread_create.c:304) ==23418== by 0x416395D: clone (clone.S:130) ==23418== ==23418== Conditional jump or move depends on uninitialised value(s) ==23418== at 0x832CB62: decode_plane (mathops.h:112) ==23418== by 0x83306F8: decode_slice (ffv1dec.c:406) ==23418== by 0x86761D3: avcodec_default_execute (utils.c:947) ==23418== by 0x832E42D: decode_frame (ffv1dec.c:876) ==23418== by 0x85CCA5D: frame_worker_thread (pthread.c:339) ==23418== by 0x407B953: start_thread (pthread_create.c:304) ==23418== by 0x416395D: clone (clone.S:130) ==23418== ==23418== Conditional jump or move depends on uninitialised value(s) ==23418== at 0x832CB6C: decode_plane (mathops.h:112) ==23418== by 0x83306F8: decode_slice (ffv1dec.c:406) ==23418== by 0x86761D3: avcodec_default_execute (utils.c:947) ==23418== by 0x832E42D: decode_frame (ffv1dec.c:876) ==23418== by 0x85CCA5D: frame_worker_thread (pthread.c:339) ==23418== by 0x407B953: start_thread (pthread_create.c:304) ==23418== by 0x416395D: clone (clone.S:130) ==23418== ==23418== Invalid write of size 1 ==23418== at 0x832DEF3: decode_plane (ffv1.h:208) ==23418== by 0x83306F8: decode_slice (ffv1dec.c:406) ==23418== by 0x86761D3: avcodec_default_execute (utils.c:947) ==23418== by 0x832E42D: decode_frame (ffv1dec.c:876) ==23418== by 0x85CCA5D: frame_worker_thread (pthread.c:339) ==23418== by 0x407B953: start_thread (pthread_create.c:304) ==23418== by 0x416395D: clone (clone.S:130) ==23418== Address 0xf366964 is 3 bytes after a block of size 1 alloc'd ==23418== at 0x40268A4: memalign (vg_replace_malloc.c:694) ==23418== by 0x402695E: posix_memalign (vg_replace_malloc.c:835) ==23418== by 0x886D357: av_malloc (mem.c:93) ==23418== by 0x886D33B: av_malloc (mem.c:132) ==23418== by 0x832FF3E: decode_slice (ffv1dec.c:360) ==23418== by 0x86761D3: avcodec_default_execute (utils.c:947) ==23418== by 0x832E42D: decode_frame (ffv1dec.c:876) ==23418== by 0x85CCA5D: frame_worker_thread (pthread.c:339) ==23418== by 0x407B953: start_thread (pthread_create.c:304) ==23418== by 0x416395D: clone (clone.S:130) ==23418== ==23418== Invalid write of size 2 ==23418== at 0x832E081: decode_plane (ffv1.h:195) ==23418== by 0x83306F8: decode_slice (ffv1dec.c:406) ==23418== by 0x86761D3: avcodec_default_execute (utils.c:947) ==23418== by 0x832E42D: decode_frame (ffv1dec.c:876) ==23418== by 0x85CCA5D: frame_worker_thread (pthread.c:339) ==23418== by 0x407B953: start_thread (pthread_create.c:304) ==23418== by 0x416395D: clone (clone.S:130) ==23418== Address 0xf366962 is 1 bytes after a block of size 1 alloc'd ==23418== at 0x40268A4: memalign (vg_replace_malloc.c:694) ==23418== by 0x402695E: posix_memalign (vg_replace_malloc.c:835) ==23418== by 0x886D357: av_malloc (mem.c:93) ==23418== by 0x886D33B: av_malloc (mem.c:132) ==23418== by 0x832FF3E: decode_slice (ffv1dec.c:360) ==23418== by 0x86761D3: avcodec_default_execute (utils.c:947) ==23418== by 0x832E42D: decode_frame (ffv1dec.c:876) ==23418== by 0x85CCA5D: frame_worker_thread (pthread.c:339) ==23418== by 0x407B953: start_thread (pthread_create.c:304) ==23418== by 0x416395D: clone (clone.S:130) ==23418== ==23418== Invalid write of size 1 ==23418== at 0x832CB14: decode_plane (ffv1dec.c:193) ==23418== by 0x83306F8: decode_slice (ffv1dec.c:406) ==23418== by 0x86761D3: avcodec_default_execute (utils.c:947) ==23418== by 0x832E42D: decode_frame (ffv1dec.c:876) ==23418== by 0x85CCA5D: frame_worker_thread (pthread.c:339) ==23418== by 0x407B953: start_thread (pthread_create.c:304) ==23418== by 0x416395D: clone (clone.S:130) ==23418== Address 0x0 is not stack'd, malloc'd or (recently) free'd ==23418== ==23418== ==23418== Process terminating with default action of signal 11 (SIGSEGV) ==23418== Access not within mapped region at address 0x0 ==23418== at 0x832CB14: decode_plane (ffv1dec.c:193) ==23418== by 0x83306F8: decode_slice (ffv1dec.c:406) ==23418== by 0x86761D3: avcodec_default_execute (utils.c:947) ==23418== by 0x832E42D: decode_frame (ffv1dec.c:876) ==23418== by 0x85CCA5D: frame_worker_thread (pthread.c:339) ==23418== by 0x407B953: start_thread (pthread_create.c:304) ==23418== by 0x416395D: clone (clone.S:130) ==23418== If you believe this happened as a result of a stack ==23418== overflow in your program's main thread (unlikely but ==23418== possible), you can try to increase the size of the ==23418== main thread stack using the --main-stacksize= flag. ==23418== The main thread stack size used in this run was 8388608. ==23418== ==23418== HEAP SUMMARY: ==23418== in use at exit: 1,401,463 bytes in 368 blocks ==23418== total heap usage: 5,734 allocs, 5,366 frees, 6,187,039 bytes allocated ==23418== ==23418== Thread 1: ==23418== 1,296 bytes in 9 blocks are possibly lost in loss record 107 of 129 ==23418== at 0x4026A68: calloc (vg_replace_malloc.c:566) ==23418== by 0x40111FB: _dl_allocate_tls (dl-tls.c:300) ==23418== by 0x407C2A8: pthread_create@@GLIBC_2.1 (allocatestack.c:580) ==23418== by 0x80D9441: ff_graph_thread_init (pthread.c:180) ==23418== by 0x80CD3B7: avfilter_graph_alloc_filter (avfiltergraph.c:186) ==23418== by 0x80D7FF4: create_filter (graphparser.c:112) ==23418== by 0x80D8A49: avfilter_graph_parse2 (graphparser.c:169) ==23418== ==23418== 1,296 bytes in 9 blocks are possibly lost in loss record 108 of 129 ==23418== at 0x4026A68: calloc (vg_replace_malloc.c:566) ==23418== by 0x40111FB: _dl_allocate_tls (dl-tls.c:300) ==23418== by 0x407C2A8: pthread_create@@GLIBC_2.1 (allocatestack.c:580) ==23418== by 0x85CE9DE: ff_thread_init (pthread.c:872) ==23418== by 0x867BFAD: avcodec_open2 (utils.c:1222) ==23418== by 0x80B9E36: transcode_init (ffmpeg.c:1983) ==23418== by 0x80A231F: main (ffmpeg.c:3204) ==23418== ==23418== LEAK SUMMARY: ==23418== definitely lost: 0 bytes in 0 blocks ==23418== indirectly lost: 0 bytes in 0 blocks ==23418== possibly lost: 2,592 bytes in 18 blocks ==23418== still reachable: 1,398,871 bytes in 350 blocks ==23418== suppressed: 0 bytes in 0 blocks ==23418== Reachable blocks (those to which a pointer was found) are not shown. ==23418== To see them, rerun with: --leak-check=full --show-reachable=yes ==23418== ==23418== For counts of detected and suppressed errors, rerun with: -v ==23418== Use --track-origins=yes to see where uninitialised values come from ==23418== ERROR SUMMARY: 1928 errors from 21 contexts (suppressed: 59 from 6) Killed
Change History (3)
comment:1 by , 11 years ago
Component: | undetermined → avcodec |
---|---|
Keywords: | ffv1 crash SIGSEGV regression added |
Reproduced by developer: | set |
Status: | new → open |
Version: | unspecified → git-master |
comment:2 by , 11 years ago
Priority: | normal → important |
---|
Note:
See TracTickets
for help on using tickets.
Regression since a3264b4