Opened 11 years ago

Closed 11 years ago

#2906 closed defect (fixed)

ffv1: invalid write

Reported by: ami_stuff Owned by:
Priority: important Component: avcodec
Version: git-master Keywords: ffv1 crash SIGSEGV regression
Cc: Blocked By:
Blocking: Reproduced by developer: yes
Analyzed by developer: no

Description

http://www.datafilehost.com/d/81fa2282

(gdb) r -i ffv1_fuzz.avi -f null -
The program being debugged has been started already.
Start it from the beginning? (y or n) y

Starting program: /media/sdb1/ffmpeg-HEAD-abe76b8/ffmpeg_g -i ffv1_fuzz.avi -f null -
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib/i386-linux-gnu/libthread_db.so.1".
ffmpeg version 2.0-abe76b8 Copyright (c) 2000-2013 the FFmpeg developers
  built on Aug 26 2013 21:18:21 with gcc 4.7 (Debian 4.7.2-5)
  configuration: --disable-yasm --disable-ffserver --disable-ffprobe --enable-gpl
  libavutil      52. 42.100 / 52. 42.100
  libavcodec     55. 29.100 / 55. 29.100
  libavformat    55. 14.102 / 55. 14.102
  libavdevice    55.  3.100 / 55.  3.100
  libavfilter     3. 82.102 /  3. 82.102
  libswscale      2.  5.100 /  2.  5.100
  libswresample   0. 17.103 /  0. 17.103
  libpostproc    52.  3.100 / 52.  3.100
Input #0, avi, from 'ffv1_fuzz.avi':
  Metadata:
    encoder         : Lavf55.14.102
  Duration: 00:00:12.68, start: 0.000000, bitrate: 1962 kb/s
    Stream #0:0: Video: ffv1 (FFV1 / 0x31564646), yuv420p, 160x120, SAR 1:1 DAR 4:3, 23.98 tbr, 23.98 tbn, 23.98 tbc
[New Thread 0xb7df8b70 (LWP 23508)]
[New Thread 0xb75f8b70 (LWP 23509)]
[New Thread 0xb6df8b70 (LWP 23510)]
[New Thread 0xb65f8b70 (LWP 23511)]
[New Thread 0xb5df8b70 (LWP 23512)]
[New Thread 0xb55f8b70 (LWP 23513)]
[New Thread 0xb4df8b70 (LWP 23514)]
[New Thread 0xb45f8b70 (LWP 23515)]
[New Thread 0xb3df8b70 (LWP 23516)]
[New Thread 0xb35f8b70 (LWP 23517)]
[New Thread 0xb2df8b70 (LWP 23518)]
[New Thread 0xb25f8b70 (LWP 23519)]
[New Thread 0xb1df8b70 (LWP 23520)]
[New Thread 0xb15f8b70 (LWP 23521)]
[New Thread 0xb0df8b70 (LWP 23522)]
[New Thread 0xb05f8b70 (LWP 23523)]
[New Thread 0xafdf8b70 (LWP 23524)]
[New Thread 0xaf5f8b70 (LWP 23525)]
Output #0, null, to 'pipe:':
  Metadata:
    encoder         : Lavf55.14.102
    Stream #0:0: Video: rawvideo (I420 / 0x30323449), yuv420p, 160x120 [SAR 1:1 DAR 4:3], q=2-31, 200 kb/s, 90k tbn, 23.98 tbc
Stream mapping:
  Stream #0:0 -> #0:0 (ffv1 -> rawvideo)
Press [q] to stop, [?] for help
[null @ 0x91091a0] Encoder did not produce proper pts, making some up.
[ffv1 @ 0x90f4020] read_quant_table error
[ffv1 @ 0x90f45c0] Cannot decode non-keyframe without valid keyframe
[ffv1 @ 0x90f4b60] Cannot decode non-keyframe without valid keyframe
[ffv1 @ 0x90f5100] Cannot decode non-keyframe without valid keyframe
[ffv1 @ 0x90f56a0] Cannot decode non-keyframe without valid keyframe
[ffv1 @ 0x90f5c40] Cannot decode non-keyframe without valid keyframe
[ffv1 @ 0x910bbe0] Cannot decode non-keyframe without valid keyframe
Error while decoding stream #0:0: Invalid data found when processing input
[ffv1 @ 0x910c160] Cannot decode non-keyframe without valid keyframe
Error while decoding stream #0:0: Invalid data found when processing input
[ffv1 @ 0x910dc20] Cannot decode non-keyframe without valid keyframe
Error while decoding stream #0:0: Invalid data found when processing input
[ffv1 @ 0x90f4020] Cannot decode non-keyframe without valid keyframe
Error while decoding stream #0:0: Invalid data found when processing input
[ffv1 @ 0x90f45c0] Cannot decode non-keyframe without valid keyframe
Error while decoding stream #0:0: Invalid data found when processing input
    Last message repeated 6 times
[ffv1 @ 0x90f4020] read_quant_table error
[ffv1 @ 0x90f45c0] Cannot decode non-keyframe without valid keyframe
[ffv1 @ 0x90f4b60] Cannot decode non-keyframe without valid keyframe
[ffv1 @ 0x90f5100] Cannot decode non-keyframe without valid keyframe
[ffv1 @ 0x90f56a0] Cannot decode non-keyframe without valid keyframe
[ffv1 @ 0x90f5c40] Cannot decode non-keyframe without valid keyframe
[ffv1 @ 0x910bbe0] Cannot decode non-keyframe without valid keyframe
Error while decoding stream #0:0: Invalid data found when processing input
[ffv1 @ 0x910c160] Cannot decode non-keyframe without valid keyframe
[ffv1 @ 0x910dc20] Cannot decode non-keyframe without valid keyframe
Error while decoding stream #0:0: Invalid data found when processing input
Error while decoding stream #0:0: Invalid data found when processing input
    Last message repeated 6 times
[ffv1 @ 0x90f4020] read_quant_table error
[ffv1 @ 0x90f45c0] Cannot decode non-keyframe without valid keyframe
[ffv1 @ 0x90f4b60] Cannot decode non-keyframe without valid keyframe
[ffv1 @ 0x90f5100] Cannot decode non-keyframe without valid keyframe
[ffv1 @ 0x90f56a0] Cannot decode non-keyframe without valid keyframe
[ffv1 @ 0x90f5c40] Cannot decode non-keyframe without valid keyframe
[ffv1 @ 0x910bbe0] Cannot decode non-keyframe without valid keyframe
Error while decoding stream #0:0: Invalid data found when processing input
[ffv1 @ 0x910c160] Cannot decode non-keyframe without valid keyframe
[ffv1 @ 0x910dc20] Cannot decode non-keyframe without valid keyframe
Error while decoding stream #0:0: Invalid data found when processing input
Error while decoding stream #0:0: Invalid data found when processing input
[ffv1 @ 0x90f4020] Cannot decode non-keyframe without valid keyframe
Error while decoding stream #0:0: Invalid data found when processing input
[ffv1 @ 0x90f45c0] Cannot decode non-keyframe without valid keyframe
Error while decoding stream #0:0: Invalid data found when processing input
[ffv1 @ 0x90f4b60] read_quant_table error
Error while decoding stream #0:0: Invalid data found when processing input
[ffv1 @ 0x90f5100] Cannot decode non-keyframe without valid keyframe
Error while decoding stream #0:0: Invalid data found when processing input
[ffv1 @ 0x90f56a0] Cannot decode non-keyframe without valid keyframe
Error while decoding stream #0:0: Invalid data found when processing input
[ffv1 @ 0x90f5c40] Cannot decode non-keyframe without valid keyframe
Error while decoding stream #0:0: Invalid data found when processing input
[ffv1 @ 0x910bbe0] Cannot decode non-keyframe without valid keyframe
Error while decoding stream #0:0: Invalid data found when processing input
[ffv1 @ 0x910c160] Cannot decode non-keyframe without valid keyframe
Error while decoding stream #0:0: Invalid data found when processing input
[ffv1 @ 0x910dc20] Cannot decode non-keyframe without valid keyframe
Error while decoding stream #0:0: Invalid data found when processing input
[ffv1 @ 0x90f4020] Cannot decode non-keyframe without valid keyframe
Error while decoding stream #0:0: Invalid data found when processing input
[ffv1 @ 0x90f45c0] Cannot decode non-keyframe without valid keyframe
Error while decoding stream #0:0: Invalid data found when processing input
[ffv1 @ 0x90f4b60] Cannot decode non-keyframe without valid keyframe
Error while decoding stream #0:0: Invalid data found when processing input
[ffv1 @ 0x90f5100] Cannot decode non-keyframe without valid keyframe
Error while decoding stream #0:0: Invalid data found when processing input
[ffv1 @ 0x90f56a0] Cannot decode non-keyframe without valid keyframe
Error while decoding stream #0:0: Invalid data found when processing input
    Last message repeated 6 times
[ffv1 @ 0x90f4b60] read_quant_table error
[ffv1 @ 0x90f5100] Cannot decode non-keyframe without valid keyframe
[ffv1 @ 0x90f56a0] Cannot decode non-keyframe without valid keyframe
[ffv1 @ 0x90f5c40] Cannot decode non-keyframe without valid keyframe
[ffv1 @ 0x910bbe0] Cannot decode non-keyframe without valid keyframe
[ffv1 @ 0x910c160] Cannot decode non-keyframe without valid keyframe
[ffv1 @ 0x910dc20] Cannot decode non-keyframe without valid keyframe
Error while decoding stream #0:0: Invalid data found when processing input
[ffv1 @ 0x90f4020] Cannot decode non-keyframe without valid keyframe
[ffv1 @ 0x90f45c0] Cannot decode non-keyframe without valid keyframe
Error while decoding stream #0:0: Invalid data found when processing input
Error while decoding stream #0:0: Invalid data found when processing input
    Last message repeated 6 times
[ffv1 @ 0x90f4020] format not supported
[ffv1 @ 0x90f45c0] Cannot decode non-keyframe without valid keyframe
[ffv1 @ 0x90f4b60] Cannot decode non-keyframe without valid keyframe
[ffv1 @ 0x90f5100] Cannot decode non-keyframe without valid keyframe
[ffv1 @ 0x90f56a0] Cannot decode non-keyframe without valid keyframe
[ffv1 @ 0x90f5c40] Cannot decode non-keyframe without valid keyframe
[ffv1 @ 0x910bbe0] Cannot decode non-keyframe without valid keyframe
Error while decoding stream #0:0: Function not implemented
[ffv1 @ 0x910c160] Cannot decode non-keyframe without valid keyframe
[ffv1 @ 0x910dc20] Cannot decode non-keyframe without valid keyframe
Error while decoding stream #0:0: Invalid data found when processing input
[ffv1 @ 0x90f4020] Cannot decode non-keyframe without valid keyframe
Error while decoding stream #0:0: Invalid data found when processing input
Error while decoding stream #0:0: Invalid data found when processing input
[ffv1 @ 0x90f45c0] Cannot decode non-keyframe without valid keyframe
Error while decoding stream #0:0: Invalid data found when processing input
[ffv1 @ 0x90f4b60] Cannot decode non-keyframe without valid keyframe
Error while decoding stream #0:0: Invalid data found when processing input
[ffv1 @ 0x90f5100] Cannot decode non-keyframe without valid keyframe
Error while decoding stream #0:0: Invalid data found when processing input
[ffv1 @ 0x90f56a0] Cannot decode non-keyframe without valid keyframe
Error while decoding stream #0:0: Invalid data found when processing input
[ffv1 @ 0x90f5c40] Cannot decode non-keyframe without valid keyframe
Error while decoding stream #0:0: Invalid data found when processing input
[ffv1 @ 0x910bbe0] Cannot decode non-keyframe without valid keyframe
Error while decoding stream #0:0: Invalid data found when processing input
[ffv1 @ 0x910c160] Cannot decode non-keyframe without valid keyframe
[ffv1 @ 0x910dc20] Cannot decode non-keyframe without valid keyframe
Error while decoding stream #0:0: Invalid data found when processing input
Error while decoding stream #0:0: Invalid data found when processing input
[ffv1 @ 0x90f4020] Cannot decode non-keyframe without valid keyframe
Error while decoding stream #0:0: Invalid data found when processing input
[ffv1 @ 0x90f45c0] Cannot decode non-keyframe without valid keyframe
Error while decoding stream #0:0: Invalid data found when processing input
[ffv1 @ 0x90f4b60] Cannot decode non-keyframe without valid keyframe
Error while decoding stream #0:0: Invalid data found when processing input
    Last message repeated 6 times
Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 0xb1df8b70 (LWP 23520)]
0x0832cb14 in decode_plane (s=s@entry=0x91aa9a0, src=0x0, w=w@entry=160, 
    h=h@entry=120, stride=0, plane_index=plane_index@entry=2)
    at libavcodec/ffv1dec.c:193
193	                src[x + stride * y] = sample[1][x];
(gdb) bt
#0  0x0832cb14 in decode_plane (s=s@entry=0x91aa9a0, src=0x0, w=w@entry=160, 
    h=h@entry=120, stride=0, plane_index=plane_index@entry=2)
    at libavcodec/ffv1dec.c:193
#1  0x083306f9 in decode_slice (c=0x90f4020, arg=0x913de48)
    at libavcodec/ffv1dec.c:406
#2  0x086761d4 in avcodec_default_execute (c=0x90f4020, 
    func=0x832f6c0 <decode_slice>, arg=0x913de48, ret=0x0, count=1, size=4)
    at libavcodec/utils.c:947
#3  0x0832e42e in decode_frame (avctx=0x90f4020, data=0x910490c, 
    got_frame=0x9104ac8, avpkt=0x91048bc) at libavcodec/ffv1dec.c:876
#4  0x085cca5e in frame_worker_thread (arg=0x91047ec)
    at libavcodec/pthread.c:339
#5  0xb7f87954 in start_thread (arg=0xb1df8b70) at pthread_create.c:304
#6  0xb7f0895e in clone () at ../sysdeps/unix/sysv/linux/i386/clone.S:130
(gdb) 
knoppix@Microknoppix:/media/sdb1$ valgrind --leak-check=full ffmpeg-HEAD-abe76b8/ffmpeg_g -i ffv1_fuzz.avi -f null -
==23418== Memcheck, a memory error detector
==23418== Copyright (C) 2002-2011, and GNU GPL'd, by Julian Seward et al.
==23418== Using Valgrind-3.7.0 and LibVEX; rerun with -h for copyright info
==23418== Command: ffmpeg-HEAD-abe76b8/ffmpeg_g -i ffv1_fuzz.avi -f null -
==23418== 
ffmpeg version 2.0-abe76b8 Copyright (c) 2000-2013 the FFmpeg developers
  built on Aug 26 2013 21:18:21 with gcc 4.7 (Debian 4.7.2-5)
  configuration: --disable-yasm --disable-ffserver --disable-ffprobe --enable-gpl
  libavutil      52. 42.100 / 52. 42.100
  libavcodec     55. 29.100 / 55. 29.100
  libavformat    55. 14.102 / 55. 14.102
  libavdevice    55.  3.100 / 55.  3.100
  libavfilter     3. 82.102 /  3. 82.102
  libswscale      2.  5.100 /  2.  5.100
  libswresample   0. 17.103 /  0. 17.103
  libpostproc    52.  3.100 / 52.  3.100
Input #0, avi, from 'ffv1_fuzz.avi':
  Metadata:
    encoder         : Lavf55.14.102
  Duration: 00:00:12.68, start: 0.000000, bitrate: 1962 kb/s
    Stream #0:0: Video: ffv1 (FFV1 / 0x31564646), yuv420p, 160x120, SAR 1:1 DAR 4:3, 23.98 tbr, 23.98 tbn, 23.98 tbc
Output #0, null, to 'pipe:':
  Metadata:
    encoder         : Lavf55.14.102
    Stream #0:0: Video: rawvideo (I420 / 0x30323449), yuv420p, 160x120 [SAR 1:1 DAR 4:3], q=2-31, 200 kb/s, 90k tbn, 23.98 tbc
Stream mapping:
  Stream #0:0 -> #0:0 (ffv1 -> rawvideo)
Press [q] to stop, [?] for help
[null @ 0x4277d60] Encoder did not produce proper pts, making some up.
[ffv1 @ 0x43743e0] read_quant_table error
[ffv1 @ 0x437eb20] Cannot decode non-keyframe without valid keyframe
[ffv1 @ 0x4389280] Cannot decode non-keyframe without valid keyframe
[ffv1 @ 0x43939c0] Cannot decode non-keyframe without valid keyframe
[ffv1 @ 0x439e120] Cannot decode non-keyframe without valid keyframe
[ffv1 @ 0x43a8860] Cannot decode non-keyframe without valid keyframe
[ffv1 @ 0x4353bc0] Cannot decode non-keyframe without valid keyframe
Error while decoding stream #0:0: Invalid data found when processing input
[ffv1 @ 0x435f540] Cannot decode non-keyframe without valid keyframe
Error while decoding stream #0:0: Invalid data found when processing input
[ffv1 @ 0x4369c80] Cannot decode non-keyframe without valid keyframe
Error while decoding stream #0:0: Invalid data found when processing input
[ffv1 @ 0x43743e0] Cannot decode non-keyframe without valid keyframe
Error while decoding stream #0:0: Invalid data found when processing input
[ffv1 @ 0x437eb20] Cannot decode non-keyframe without valid keyframe
Error while decoding stream #0:0: Invalid data found when processing input
    Last message repeated 6 times
frame=   38 fps=0.0 q=0.0 size=N/A time=00:00:01.58 bitrate=N/A dup=12 drop=0   [ffv1 @ 0x43743e0] read_quant_table error
[ffv1 @ 0x437eb20] Cannot decode non-keyframe without valid keyframe
[ffv1 @ 0x4389280] Cannot decode non-keyframe without valid keyframe
[ffv1 @ 0x43939c0] Cannot decode non-keyframe without valid keyframe
[ffv1 @ 0x439e120] Cannot decode non-keyframe without valid keyframe
[ffv1 @ 0x43a8860] Cannot decode non-keyframe without valid keyframe
[ffv1 @ 0x4353bc0] Cannot decode non-keyframe without valid keyframe
Error while decoding stream #0:0: Invalid data found when processing input
[ffv1 @ 0x435f540] Cannot decode non-keyframe without valid keyframe
Error while decoding stream #0:0: Invalid data found when processing input
[ffv1 @ 0x4369c80] Cannot decode non-keyframe without valid keyframe
Error while decoding stream #0:0: Invalid data found when processing input
    Last message repeated 6 times
[ffv1 @ 0x43743e0] read_quant_table error
[ffv1 @ 0x437eb20] Cannot decode non-keyframe without valid keyframe
[ffv1 @ 0x4389280] Cannot decode non-keyframe without valid keyframe
[ffv1 @ 0x43939c0] Cannot decode non-keyframe without valid keyframe
[ffv1 @ 0x439e120] Cannot decode non-keyframe without valid keyframe
[ffv1 @ 0x43a8860] Cannot decode non-keyframe without valid keyframe
[ffv1 @ 0x4353bc0] Cannot decode non-keyframe without valid keyframe
Error while decoding stream #0:0: Invalid data found when processing input
[ffv1 @ 0x435f540] Cannot decode non-keyframe without valid keyframe
Error while decoding stream #0:0: Invalid data found when processing input
[ffv1 @ 0x4369c80] Cannot decode non-keyframe without valid keyframe
Error while decoding stream #0:0: Invalid data found when processing input
[ffv1 @ 0x43743e0] Cannot decode non-keyframe without valid keyframe
Error while decoding stream #0:0: Invalid data found when processing input
[ffv1 @ 0x437eb20] Cannot decode non-keyframe without valid keyframe
Error while decoding stream #0:0: Invalid data found when processing input
[ffv1 @ 0x4389280] read_quant_table error
Error while decoding stream #0:0: Invalid data found when processing input
[ffv1 @ 0x43939c0] Cannot decode non-keyframe without valid keyframe
Error while decoding stream #0:0: Invalid data found when processing input
[ffv1 @ 0x439e120] Cannot decode non-keyframe without valid keyframe
Error while decoding stream #0:0: Invalid data found when processing input
[ffv1 @ 0x43a8860] Cannot decode non-keyframe without valid keyframe
Error while decoding stream #0:0: Invalid data found when processing input
[ffv1 @ 0x4353bc0] Cannot decode non-keyframe without valid keyframe
Error while decoding stream #0:0: Invalid data found when processing input
[ffv1 @ 0x435f540] Cannot decode non-keyframe without valid keyframe
Error while decoding stream #0:0: Invalid data found when processing input
[ffv1 @ 0x4369c80] Cannot decode non-keyframe without valid keyframe
Error while decoding stream #0:0: Invalid data found when processing input
[ffv1 @ 0x43743e0] Cannot decode non-keyframe without valid keyframe
Error while decoding stream #0:0: Invalid data found when processing input
[ffv1 @ 0x437eb20] Cannot decode non-keyframe without valid keyframe
Error while decoding stream #0:0: Invalid data found when processing input
[ffv1 @ 0x4389280] Cannot decode non-keyframe without valid keyframe
Error while decoding stream #0:0: Invalid data found when processing input
[ffv1 @ 0x43939c0] Cannot decode non-keyframe without valid keyframe
Error while decoding stream #0:0: Invalid data found when processing input
[ffv1 @ 0x439e120] Cannot decode non-keyframe without valid keyframe
Error while decoding stream #0:0: Invalid data found when processing input
    Last message repeated 6 times
frame=   76 fps= 75 q=0.0 size=N/A time=00:00:03.16 bitrate=N/A dup=21 drop=0   [ffv1 @ 0x4389280] read_quant_table error
[ffv1 @ 0x43939c0] Cannot decode non-keyframe without valid keyframe
[ffv1 @ 0x439e120] Cannot decode non-keyframe without valid keyframe
[ffv1 @ 0x43a8860] Cannot decode non-keyframe without valid keyframe
[ffv1 @ 0x4353bc0] Cannot decode non-keyframe without valid keyframe
[ffv1 @ 0x435f540] Cannot decode non-keyframe without valid keyframe
[ffv1 @ 0x4369c80] Cannot decode non-keyframe without valid keyframe
Error while decoding stream #0:0: Invalid data found when processing input
frame=  141 fps= 93 q=0.0 size=N/A time=00:00:05.88 bitrate=N/A dup=44 drop=0   [ffv1 @ 0x43743e0] Cannot decode non-keyframe without valid keyframe
Error while decoding stream #0:0: Invalid data found when processing input
[ffv1 @ 0x437eb20] Cannot decode non-keyframe without valid keyframe
Error while decoding stream #0:0: Invalid data found when processing input
    Last message repeated 6 times
[ffv1 @ 0x43743e0] format not supported
[ffv1 @ 0x437eb20] Cannot decode non-keyframe without valid keyframe
[ffv1 @ 0x4389280] Cannot decode non-keyframe without valid keyframe
[ffv1 @ 0x43939c0] Cannot decode non-keyframe without valid keyframe
[ffv1 @ 0x439e120] Cannot decode non-keyframe without valid keyframe
[ffv1 @ 0x43a8860] Cannot decode non-keyframe without valid keyframe
[ffv1 @ 0x4353bc0] Cannot decode non-keyframe without valid keyframe
Error while decoding stream #0:0: Function not implemented
[ffv1 @ 0x435f540] Cannot decode non-keyframe without valid keyframe
Error while decoding stream #0:0: Invalid data found when processing input
[ffv1 @ 0x4369c80] Cannot decode non-keyframe without valid keyframe
Error while decoding stream #0:0: Invalid data found when processing input
[ffv1 @ 0x43743e0] Cannot decode non-keyframe without valid keyframe
Error while decoding stream #0:0: Invalid data found when processing input
[ffv1 @ 0x437eb20] Cannot decode non-keyframe without valid keyframe
Error while decoding stream #0:0: Invalid data found when processing input
[ffv1 @ 0x4389280] Cannot decode non-keyframe without valid keyframe
Error while decoding stream #0:0: Invalid data found when processing input
[ffv1 @ 0x43939c0] Cannot decode non-keyframe without valid keyframe
Error while decoding stream #0:0: Invalid data found when processing input
[ffv1 @ 0x439e120] Cannot decode non-keyframe without valid keyframe
Error while decoding stream #0:0: Invalid data found when processing input
[ffv1 @ 0x43a8860] Cannot decode non-keyframe without valid keyframe
Error while decoding stream #0:0: Invalid data found when processing input
[ffv1 @ 0x4353bc0] Cannot decode non-keyframe without valid keyframe
Error while decoding stream #0:0: Invalid data found when processing input
[ffv1 @ 0x435f540] Cannot decode non-keyframe without valid keyframe
Error while decoding stream #0:0: Invalid data found when processing input
[ffv1 @ 0x4369c80] Cannot decode non-keyframe without valid keyframe
Error while decoding stream #0:0: Invalid data found when processing input
[ffv1 @ 0x43743e0] Cannot decode non-keyframe without valid keyframe
Error while decoding stream #0:0: Invalid data found when processing input
[ffv1 @ 0x437eb20] Cannot decode non-keyframe without valid keyframe
Error while decoding stream #0:0: Invalid data found when processing input
[ffv1 @ 0x4389280] Cannot decode non-keyframe without valid keyframe
Error while decoding stream #0:0: Invalid data found when processing input
==23418== Thread 14:eated 6 times
==23418== Invalid read of size 2
==23418==    at 0x832D028: decode_plane (ffv1dec.c:74)
==23418==    by 0x83306F8: decode_slice (ffv1dec.c:406)
==23418==    by 0x86761D3: avcodec_default_execute (utils.c:947)
==23418==    by 0x832E42D: decode_frame (ffv1dec.c:876)
==23418==    by 0x85CCA5D: frame_worker_thread (pthread.c:339)
==23418==    by 0x407B953: start_thread (pthread_create.c:304)
==23418==    by 0x416395D: clone (clone.S:130)
==23418==  Address 0xf366962 is 1 bytes after a block of size 1 alloc'd
==23418==    at 0x40268A4: memalign (vg_replace_malloc.c:694)
==23418==    by 0x402695E: posix_memalign (vg_replace_malloc.c:835)
==23418==    by 0x886D357: av_malloc (mem.c:93)
==23418==    by 0x886D33B: av_malloc (mem.c:132)
==23418==    by 0x832FF3E: decode_slice (ffv1dec.c:360)
==23418==    by 0x86761D3: avcodec_default_execute (utils.c:947)
==23418==    by 0x832E42D: decode_frame (ffv1dec.c:876)
==23418==    by 0x85CCA5D: frame_worker_thread (pthread.c:339)
==23418==    by 0x407B953: start_thread (pthread_create.c:304)
==23418==    by 0x416395D: clone (clone.S:130)
==23418== 
==23418== Invalid read of size 1
==23418==    at 0x832D02C: decode_plane (ffv1dec.c:72)
==23418==    by 0x83306F8: decode_slice (ffv1dec.c:406)
==23418==    by 0x86761D3: avcodec_default_execute (utils.c:947)
==23418==    by 0x832E42D: decode_frame (ffv1dec.c:876)
==23418==    by 0x85CCA5D: frame_worker_thread (pthread.c:339)
==23418==    by 0x407B953: start_thread (pthread_create.c:304)
==23418==    by 0x416395D: clone (clone.S:130)
==23418==  Address 0xf366965 is 4 bytes after a block of size 1 alloc'd
==23418==    at 0x40268A4: memalign (vg_replace_malloc.c:694)
==23418==    by 0x402695E: posix_memalign (vg_replace_malloc.c:835)
==23418==    by 0x886D357: av_malloc (mem.c:93)
==23418==    by 0x886D33B: av_malloc (mem.c:132)
==23418==    by 0x832FF3E: decode_slice (ffv1dec.c:360)
==23418==    by 0x86761D3: avcodec_default_execute (utils.c:947)
==23418==    by 0x832E42D: decode_frame (ffv1dec.c:876)
==23418==    by 0x85CCA5D: frame_worker_thread (pthread.c:339)
==23418==    by 0x407B953: start_thread (pthread_create.c:304)
==23418==    by 0x416395D: clone (clone.S:130)
==23418== 
==23418== Invalid read of size 2
==23418==    at 0x832D0E7: decode_plane (ffv1dec.c:87)
==23418==    by 0x83306F8: decode_slice (ffv1dec.c:406)
==23418==    by 0x86761D3: avcodec_default_execute (utils.c:947)
==23418==    by 0x832E42D: decode_frame (ffv1dec.c:876)
==23418==    by 0x85CCA5D: frame_worker_thread (pthread.c:339)
==23418==    by 0x407B953: start_thread (pthread_create.c:304)
==23418==    by 0x416395D: clone (clone.S:130)
==23418==  Address 0xf366960 is 0 bytes inside a block of size 1 alloc'd
==23418==    at 0x40268A4: memalign (vg_replace_malloc.c:694)
==23418==    by 0x402695E: posix_memalign (vg_replace_malloc.c:835)
==23418==    by 0x886D357: av_malloc (mem.c:93)
==23418==    by 0x886D33B: av_malloc (mem.c:132)
==23418==    by 0x832FF3E: decode_slice (ffv1dec.c:360)
==23418==    by 0x86761D3: avcodec_default_execute (utils.c:947)
==23418==    by 0x832E42D: decode_frame (ffv1dec.c:876)
==23418==    by 0x85CCA5D: frame_worker_thread (pthread.c:339)
==23418==    by 0x407B953: start_thread (pthread_create.c:304)
==23418==    by 0x416395D: clone (clone.S:130)
==23418== 
==23418== Invalid read of size 1
==23418==    at 0x832D0EA: decode_plane (ffv1dec.c:87)
==23418==    by 0x83306F8: decode_slice (ffv1dec.c:406)
==23418==    by 0x86761D3: avcodec_default_execute (utils.c:947)
==23418==    by 0x832E42D: decode_frame (ffv1dec.c:876)
==23418==    by 0x85CCA5D: frame_worker_thread (pthread.c:339)
==23418==    by 0x407B953: start_thread (pthread_create.c:304)
==23418==    by 0x416395D: clone (clone.S:130)
==23418==  Address 0xf366965 is 4 bytes after a block of size 1 alloc'd
==23418==    at 0x40268A4: memalign (vg_replace_malloc.c:694)
==23418==    by 0x402695E: posix_memalign (vg_replace_malloc.c:835)
==23418==    by 0x886D357: av_malloc (mem.c:93)
==23418==    by 0x886D33B: av_malloc (mem.c:132)
==23418==    by 0x832FF3E: decode_slice (ffv1dec.c:360)
==23418==    by 0x86761D3: avcodec_default_execute (utils.c:947)
==23418==    by 0x832E42D: decode_frame (ffv1dec.c:876)
==23418==    by 0x85CCA5D: frame_worker_thread (pthread.c:339)
==23418==    by 0x407B953: start_thread (pthread_create.c:304)
==23418==    by 0x416395D: clone (clone.S:130)
==23418== 
==23418== Invalid read of size 1
==23418==    at 0x832D0FF: decode_plane (ffv1dec.c:90)
==23418==    by 0x83306F8: decode_slice (ffv1dec.c:406)
==23418==    by 0x86761D3: avcodec_default_execute (utils.c:947)
==23418==    by 0x832E42D: decode_frame (ffv1dec.c:876)
==23418==    by 0x85CCA5D: frame_worker_thread (pthread.c:339)
==23418==    by 0x407B953: start_thread (pthread_create.c:304)
==23418==    by 0x416395D: clone (clone.S:130)
==23418==  Address 0xf366964 is 3 bytes after a block of size 1 alloc'd
==23418==    at 0x40268A4: memalign (vg_replace_malloc.c:694)
==23418==    by 0x402695E: posix_memalign (vg_replace_malloc.c:835)
==23418==    by 0x886D357: av_malloc (mem.c:93)
==23418==    by 0x886D33B: av_malloc (mem.c:132)
==23418==    by 0x832FF3E: decode_slice (ffv1dec.c:360)
==23418==    by 0x86761D3: avcodec_default_execute (utils.c:947)
==23418==    by 0x832E42D: decode_frame (ffv1dec.c:876)
==23418==    by 0x85CCA5D: frame_worker_thread (pthread.c:339)
==23418==    by 0x407B953: start_thread (pthread_create.c:304)
==23418==    by 0x416395D: clone (clone.S:130)
==23418== 
==23418== Invalid write of size 2
==23418==    at 0x832D129: decode_plane (ffv1.h:189)
==23418==    by 0x83306F8: decode_slice (ffv1dec.c:406)
==23418==    by 0x86761D3: avcodec_default_execute (utils.c:947)
==23418==    by 0x832E42D: decode_frame (ffv1dec.c:876)
==23418==    by 0x85CCA5D: frame_worker_thread (pthread.c:339)
==23418==    by 0x407B953: start_thread (pthread_create.c:304)
==23418==    by 0x416395D: clone (clone.S:130)
==23418==  Address 0xf366962 is 1 bytes after a block of size 1 alloc'd
==23418==    at 0x40268A4: memalign (vg_replace_malloc.c:694)
==23418==    by 0x402695E: posix_memalign (vg_replace_malloc.c:835)
==23418==    by 0x886D357: av_malloc (mem.c:93)
==23418==    by 0x886D33B: av_malloc (mem.c:132)
==23418==    by 0x832FF3E: decode_slice (ffv1dec.c:360)
==23418==    by 0x86761D3: avcodec_default_execute (utils.c:947)
==23418==    by 0x832E42D: decode_frame (ffv1dec.c:876)
==23418==    by 0x85CCA5D: frame_worker_thread (pthread.c:339)
==23418==    by 0x407B953: start_thread (pthread_create.c:304)
==23418==    by 0x416395D: clone (clone.S:130)
==23418== 
==23418== Conditional jump or move depends on uninitialised value(s)
==23418==    at 0x832D140: decode_plane (ffv1.h:199)
==23418==    by 0x83306F8: decode_slice (ffv1dec.c:406)
==23418==    by 0x86761D3: avcodec_default_execute (utils.c:947)
==23418==    by 0x832E42D: decode_frame (ffv1dec.c:876)
==23418==    by 0x85CCA5D: frame_worker_thread (pthread.c:339)
==23418==    by 0x407B953: start_thread (pthread_create.c:304)
==23418==    by 0x416395D: clone (clone.S:130)
==23418== 
==23418== Invalid write of size 1
==23418==    at 0x832D159: decode_plane (ffv1.h:201)
==23418==    by 0x83306F8: decode_slice (ffv1dec.c:406)
==23418==    by 0x86761D3: avcodec_default_execute (utils.c:947)
==23418==    by 0x832E42D: decode_frame (ffv1dec.c:876)
==23418==    by 0x85CCA5D: frame_worker_thread (pthread.c:339)
==23418==    by 0x407B953: start_thread (pthread_create.c:304)
==23418==    by 0x416395D: clone (clone.S:130)
==23418==  Address 0xf366964 is 3 bytes after a block of size 1 alloc'd
==23418==    at 0x40268A4: memalign (vg_replace_malloc.c:694)
==23418==    by 0x402695E: posix_memalign (vg_replace_malloc.c:835)
==23418==    by 0x886D357: av_malloc (mem.c:93)
==23418==    by 0x886D33B: av_malloc (mem.c:132)
==23418==    by 0x832FF3E: decode_slice (ffv1dec.c:360)
==23418==    by 0x86761D3: avcodec_default_execute (utils.c:947)
==23418==    by 0x832E42D: decode_frame (ffv1dec.c:876)
==23418==    by 0x85CCA5D: frame_worker_thread (pthread.c:339)
==23418==    by 0x407B953: start_thread (pthread_create.c:304)
==23418==    by 0x416395D: clone (clone.S:130)
==23418== 
==23418== Conditional jump or move depends on uninitialised value(s)
==23418==    at 0x832D162: decode_plane (ffv1.h:204)
==23418==    by 0x83306F8: decode_slice (ffv1dec.c:406)
==23418==    by 0x86761D3: avcodec_default_execute (utils.c:947)
==23418==    by 0x832E42D: decode_frame (ffv1dec.c:876)
==23418==    by 0x85CCA5D: frame_worker_thread (pthread.c:339)
==23418==    by 0x407B953: start_thread (pthread_create.c:304)
==23418==    by 0x416395D: clone (clone.S:130)
==23418== 
==23418== Invalid write of size 2
==23418==    at 0x832D173: decode_plane (ffv1.h:215)
==23418==    by 0x83306F8: decode_slice (ffv1dec.c:406)
==23418==    by 0x86761D3: avcodec_default_execute (utils.c:947)
==23418==    by 0x832E42D: decode_frame (ffv1dec.c:876)
==23418==    by 0x85CCA5D: frame_worker_thread (pthread.c:339)
==23418==    by 0x407B953: start_thread (pthread_create.c:304)
==23418==    by 0x416395D: clone (clone.S:130)
==23418==  Address 0xf366960 is 0 bytes inside a block of size 1 alloc'd
==23418==    at 0x40268A4: memalign (vg_replace_malloc.c:694)
==23418==    by 0x402695E: posix_memalign (vg_replace_malloc.c:835)
==23418==    by 0x886D357: av_malloc (mem.c:93)
==23418==    by 0x886D33B: av_malloc (mem.c:132)
==23418==    by 0x832FF3E: decode_slice (ffv1dec.c:360)
==23418==    by 0x86761D3: avcodec_default_execute (utils.c:947)
==23418==    by 0x832E42D: decode_frame (ffv1dec.c:876)
==23418==    by 0x85CCA5D: frame_worker_thread (pthread.c:339)
==23418==    by 0x407B953: start_thread (pthread_create.c:304)
==23418==    by 0x416395D: clone (clone.S:130)
==23418== 
==23418== Invalid write of size 1
==23418==    at 0x832D176: decode_plane (ffv1.h:216)
==23418==    by 0x83306F8: decode_slice (ffv1dec.c:406)
==23418==    by 0x86761D3: avcodec_default_execute (utils.c:947)
==23418==    by 0x832E42D: decode_frame (ffv1dec.c:876)
==23418==    by 0x85CCA5D: frame_worker_thread (pthread.c:339)
==23418==    by 0x407B953: start_thread (pthread_create.c:304)
==23418==    by 0x416395D: clone (clone.S:130)
==23418==  Address 0xf366965 is 4 bytes after a block of size 1 alloc'd
==23418==    at 0x40268A4: memalign (vg_replace_malloc.c:694)
==23418==    by 0x402695E: posix_memalign (vg_replace_malloc.c:835)
==23418==    by 0x886D357: av_malloc (mem.c:93)
==23418==    by 0x886D33B: av_malloc (mem.c:132)
==23418==    by 0x832FF3E: decode_slice (ffv1dec.c:360)
==23418==    by 0x86761D3: avcodec_default_execute (utils.c:947)
==23418==    by 0x832E42D: decode_frame (ffv1dec.c:876)
==23418==    by 0x85CCA5D: frame_worker_thread (pthread.c:339)
==23418==    by 0x407B953: start_thread (pthread_create.c:304)
==23418==    by 0x416395D: clone (clone.S:130)
==23418== 
==23418== Conditional jump or move depends on uninitialised value(s)
==23418==    at 0x832D179: decode_plane (ffv1dec.c:148)
==23418==    by 0x83306F8: decode_slice (ffv1dec.c:406)
==23418==    by 0x86761D3: avcodec_default_execute (utils.c:947)
==23418==    by 0x832E42D: decode_frame (ffv1dec.c:876)
==23418==    by 0x85CCA5D: frame_worker_thread (pthread.c:339)
==23418==    by 0x407B953: start_thread (pthread_create.c:304)
==23418==    by 0x416395D: clone (clone.S:130)
==23418== 
==23418== Use of uninitialised value of size 4
==23418==    at 0x832C8C5: decode_plane (ffv1.h:180)
==23418==    by 0x83306F8: decode_slice (ffv1dec.c:406)
==23418==    by 0x86761D3: avcodec_default_execute (utils.c:947)
==23418==    by 0x832E42D: decode_frame (ffv1dec.c:876)
==23418==    by 0x85CCA5D: frame_worker_thread (pthread.c:339)
==23418==    by 0x407B953: start_thread (pthread_create.c:304)
==23418==    by 0x416395D: clone (clone.S:130)
==23418== 
==23418== Conditional jump or move depends on uninitialised value(s)
==23418==    at 0x832CAA5: decode_plane (mathops.h:106)
==23418==    by 0x83306F8: decode_slice (ffv1dec.c:406)
==23418==    by 0x86761D3: avcodec_default_execute (utils.c:947)
==23418==    by 0x832E42D: decode_frame (ffv1dec.c:876)
==23418==    by 0x85CCA5D: frame_worker_thread (pthread.c:339)
==23418==    by 0x407B953: start_thread (pthread_create.c:304)
==23418==    by 0x416395D: clone (clone.S:130)
==23418== 
==23418== Conditional jump or move depends on uninitialised value(s)
==23418==    at 0x832CB62: decode_plane (mathops.h:112)
==23418==    by 0x83306F8: decode_slice (ffv1dec.c:406)
==23418==    by 0x86761D3: avcodec_default_execute (utils.c:947)
==23418==    by 0x832E42D: decode_frame (ffv1dec.c:876)
==23418==    by 0x85CCA5D: frame_worker_thread (pthread.c:339)
==23418==    by 0x407B953: start_thread (pthread_create.c:304)
==23418==    by 0x416395D: clone (clone.S:130)
==23418== 
==23418== Conditional jump or move depends on uninitialised value(s)
==23418==    at 0x832CB6C: decode_plane (mathops.h:112)
==23418==    by 0x83306F8: decode_slice (ffv1dec.c:406)
==23418==    by 0x86761D3: avcodec_default_execute (utils.c:947)
==23418==    by 0x832E42D: decode_frame (ffv1dec.c:876)
==23418==    by 0x85CCA5D: frame_worker_thread (pthread.c:339)
==23418==    by 0x407B953: start_thread (pthread_create.c:304)
==23418==    by 0x416395D: clone (clone.S:130)
==23418== 
==23418== Invalid write of size 1
==23418==    at 0x832DEF3: decode_plane (ffv1.h:208)
==23418==    by 0x83306F8: decode_slice (ffv1dec.c:406)
==23418==    by 0x86761D3: avcodec_default_execute (utils.c:947)
==23418==    by 0x832E42D: decode_frame (ffv1dec.c:876)
==23418==    by 0x85CCA5D: frame_worker_thread (pthread.c:339)
==23418==    by 0x407B953: start_thread (pthread_create.c:304)
==23418==    by 0x416395D: clone (clone.S:130)
==23418==  Address 0xf366964 is 3 bytes after a block of size 1 alloc'd
==23418==    at 0x40268A4: memalign (vg_replace_malloc.c:694)
==23418==    by 0x402695E: posix_memalign (vg_replace_malloc.c:835)
==23418==    by 0x886D357: av_malloc (mem.c:93)
==23418==    by 0x886D33B: av_malloc (mem.c:132)
==23418==    by 0x832FF3E: decode_slice (ffv1dec.c:360)
==23418==    by 0x86761D3: avcodec_default_execute (utils.c:947)
==23418==    by 0x832E42D: decode_frame (ffv1dec.c:876)
==23418==    by 0x85CCA5D: frame_worker_thread (pthread.c:339)
==23418==    by 0x407B953: start_thread (pthread_create.c:304)
==23418==    by 0x416395D: clone (clone.S:130)
==23418== 
==23418== Invalid write of size 2
==23418==    at 0x832E081: decode_plane (ffv1.h:195)
==23418==    by 0x83306F8: decode_slice (ffv1dec.c:406)
==23418==    by 0x86761D3: avcodec_default_execute (utils.c:947)
==23418==    by 0x832E42D: decode_frame (ffv1dec.c:876)
==23418==    by 0x85CCA5D: frame_worker_thread (pthread.c:339)
==23418==    by 0x407B953: start_thread (pthread_create.c:304)
==23418==    by 0x416395D: clone (clone.S:130)
==23418==  Address 0xf366962 is 1 bytes after a block of size 1 alloc'd
==23418==    at 0x40268A4: memalign (vg_replace_malloc.c:694)
==23418==    by 0x402695E: posix_memalign (vg_replace_malloc.c:835)
==23418==    by 0x886D357: av_malloc (mem.c:93)
==23418==    by 0x886D33B: av_malloc (mem.c:132)
==23418==    by 0x832FF3E: decode_slice (ffv1dec.c:360)
==23418==    by 0x86761D3: avcodec_default_execute (utils.c:947)
==23418==    by 0x832E42D: decode_frame (ffv1dec.c:876)
==23418==    by 0x85CCA5D: frame_worker_thread (pthread.c:339)
==23418==    by 0x407B953: start_thread (pthread_create.c:304)
==23418==    by 0x416395D: clone (clone.S:130)
==23418== 
==23418== Invalid write of size 1
==23418==    at 0x832CB14: decode_plane (ffv1dec.c:193)
==23418==    by 0x83306F8: decode_slice (ffv1dec.c:406)
==23418==    by 0x86761D3: avcodec_default_execute (utils.c:947)
==23418==    by 0x832E42D: decode_frame (ffv1dec.c:876)
==23418==    by 0x85CCA5D: frame_worker_thread (pthread.c:339)
==23418==    by 0x407B953: start_thread (pthread_create.c:304)
==23418==    by 0x416395D: clone (clone.S:130)
==23418==  Address 0x0 is not stack'd, malloc'd or (recently) free'd
==23418== 
==23418== 
==23418== Process terminating with default action of signal 11 (SIGSEGV)
==23418==  Access not within mapped region at address 0x0
==23418==    at 0x832CB14: decode_plane (ffv1dec.c:193)
==23418==    by 0x83306F8: decode_slice (ffv1dec.c:406)
==23418==    by 0x86761D3: avcodec_default_execute (utils.c:947)
==23418==    by 0x832E42D: decode_frame (ffv1dec.c:876)
==23418==    by 0x85CCA5D: frame_worker_thread (pthread.c:339)
==23418==    by 0x407B953: start_thread (pthread_create.c:304)
==23418==    by 0x416395D: clone (clone.S:130)
==23418==  If you believe this happened as a result of a stack
==23418==  overflow in your program's main thread (unlikely but
==23418==  possible), you can try to increase the size of the
==23418==  main thread stack using the --main-stacksize= flag.
==23418==  The main thread stack size used in this run was 8388608.
==23418== 
==23418== HEAP SUMMARY:
==23418==     in use at exit: 1,401,463 bytes in 368 blocks
==23418==   total heap usage: 5,734 allocs, 5,366 frees, 6,187,039 bytes allocated
==23418== 
==23418== Thread 1:
==23418== 1,296 bytes in 9 blocks are possibly lost in loss record 107 of 129
==23418==    at 0x4026A68: calloc (vg_replace_malloc.c:566)
==23418==    by 0x40111FB: _dl_allocate_tls (dl-tls.c:300)
==23418==    by 0x407C2A8: pthread_create@@GLIBC_2.1 (allocatestack.c:580)
==23418==    by 0x80D9441: ff_graph_thread_init (pthread.c:180)
==23418==    by 0x80CD3B7: avfilter_graph_alloc_filter (avfiltergraph.c:186)
==23418==    by 0x80D7FF4: create_filter (graphparser.c:112)
==23418==    by 0x80D8A49: avfilter_graph_parse2 (graphparser.c:169)
==23418== 
==23418== 1,296 bytes in 9 blocks are possibly lost in loss record 108 of 129
==23418==    at 0x4026A68: calloc (vg_replace_malloc.c:566)
==23418==    by 0x40111FB: _dl_allocate_tls (dl-tls.c:300)
==23418==    by 0x407C2A8: pthread_create@@GLIBC_2.1 (allocatestack.c:580)
==23418==    by 0x85CE9DE: ff_thread_init (pthread.c:872)
==23418==    by 0x867BFAD: avcodec_open2 (utils.c:1222)
==23418==    by 0x80B9E36: transcode_init (ffmpeg.c:1983)
==23418==    by 0x80A231F: main (ffmpeg.c:3204)
==23418== 
==23418== LEAK SUMMARY:
==23418==    definitely lost: 0 bytes in 0 blocks
==23418==    indirectly lost: 0 bytes in 0 blocks
==23418==      possibly lost: 2,592 bytes in 18 blocks
==23418==    still reachable: 1,398,871 bytes in 350 blocks
==23418==         suppressed: 0 bytes in 0 blocks
==23418== Reachable blocks (those to which a pointer was found) are not shown.
==23418== To see them, rerun with: --leak-check=full --show-reachable=yes
==23418== 
==23418== For counts of detected and suppressed errors, rerun with: -v
==23418== Use --track-origins=yes to see where uninitialised values come from
==23418== ERROR SUMMARY: 1928 errors from 21 contexts (suppressed: 59 from 6)
Killed

Change History (3)

comment:1 by Carl Eugen Hoyos, 11 years ago

Component: undeterminedavcodec
Keywords: ffv1 crash SIGSEGV regression added
Reproduced by developer: set
Status: newopen
Version: unspecifiedgit-master

Regression since a3264b4

comment:2 by Carl Eugen Hoyos, 11 years ago

Priority: normalimportant

comment:3 by Carl Eugen Hoyos, 11 years ago

Resolution: fixed
Status: openclosed

Fixed by Michael in 547d690

Note: See TracTickets for help on using tickets.