Segmentation fault when mjpeg used to convert flv to images

[Kirill]

Summary of the bug:
ffmpeg crashes with segmentation fault on this file ​https://dl.dropboxusercontent.com/u/7460606/seg_fault_during_mjpeg.flv
(Sorry file is that big, any cutting will make it processable)

How to reproduce:

% ffmpeg -y -i input.flv -vcodec mjpeg -qmin 1 -qmax 1 output/%07d.jpg

initially found on 2.6.1, can be reproduced on current master N-71096-g2139e58
built on Debian 7.3

gdb output

(gdb) r -report -v 9 -loglevel 99 -i seg_fault_during_mjpeg.flv -vcodec mjpeg -qmin 1 -qmax 1 screens/0/%07d.jpg
Starting program: /tmp/ffmpeg-install/ffmpeg/ffmpeg -report -v 9 -loglevel 99 -i seg_fault_during_mjpeg.flv -vcodec mjpeg -qmin 1 -qmax 1 screens/0/%07d.jpg
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1".
ffmpeg started on 2015-03-26 at 11:18:28
Report written to "ffmpeg-20150326-111828.log"
ffmpeg version N-71096-g2139e58 Copyright (c) 2000-2015 the FFmpeg developers
  built with gcc 4.7 (Debian 4.7.2-5)
  configuration: --prefix=/usr/local --enable-gpl --enable-libfaac --enable-libmp3lame --enable-libtheora --enable-libvorbis --enable-libvpx --enable-libx264 --enable-nonfree --enable-version3 --enable-libfreetype --enable-debug
  libavutil      54. 20.101 / 54. 20.101
  libavcodec     56. 30.100 / 56. 30.100
  libavformat    56. 26.101 / 56. 26.101
  libavdevice    56.  4.100 / 56.  4.100
  libavfilter     5. 13.101 /  5. 13.101
  libswscale      3.  1.101 /  3.  1.101
  libswresample   1.  1.100 /  1.  1.100
  libpostproc    53.  3.100 / 53.  3.100
Splitting the commandline.
Reading option '-report' ... matched as option 'report' (generate a report) with argument '1'.
Reading option '-v' ... matched as option 'v' (set logging level) with argument '9'.
Reading option '-loglevel' ... matched as option 'loglevel' (set logging level) with argument '99'.
Reading option '-i' ... matched as input file with argument 'seg_fault_during_mjpeg.flv'.
Reading option '-vcodec' ... matched as option 'vcodec' (force video codec ('copy' to copy stream)) with argument 'mjpeg'.
Reading option '-qmin' ... matched as AVOption 'qmin' with argument '1'.
Reading option '-qmax' ... matched as AVOption 'qmax' with argument '1'.
Reading option 'screens/0/%07d.jpg' ... matched as output file.
Finished splitting the commandline.
Parsing a group of options: global .
Applying option report (generate a report) with argument 1.
Applying option v (set logging level) with argument 9.
Successfully parsed a group of options.
Parsing a group of options: input file seg_fault_during_mjpeg.flv.
Successfully parsed a group of options.
Opening an input file: seg_fault_during_mjpeg.flv.
[flv @ 0x1b08020] Format flv probed with size=2048 and score=100
[flv @ 0x1b08020] Before avformat_find_stream_info() pos: 13 bytes read:32768 seeks:0
[flv @ 0x1b08020] Probe buffer size limit of 5000000 bytes reached
[flv @ 0x1b08020] Setting avg frame rate based on r frame rate
[flv @ 0x1b08020] Could not find codec parameters for stream 1 (Audio: none, 0 channels): unknown codec
Consider increasing the value for the 'analyzeduration' and 'probesize' options
[flv @ 0x1b08020] After avformat_find_stream_info() pos: 5156492 bytes read:5254771 seeks:3 frames:18
Input #0, flv, from 'seg_fault_during_mjpeg.flv':
  Duration: 00:00:08.24, start: 0.000000, bitrate: 60964 kb/s
    Stream #0:0, 18, 1/1000: Video: flv1, 1 reference frame, yuv420p, 1280x720, 1/1000, 25 fps, 25 tbr, 1k tbn, 1k tbc
    Stream #0:1, 0, 1/1000: Audio: none, 0 channels
Successfully opened the file.
Parsing a group of options: output file screens/0/%07d.jpg.
Applying option vcodec (force video codec ('copy' to copy stream)) with argument mjpeg.
Successfully parsed a group of options.
Opening an output file: screens/0/%07d.jpg.
Successfully opened the file.
detected 8 logical cores
[New Thread 0x7ffff3ff4700 (LWP 29682)]
[New Thread 0x7ffff37f3700 (LWP 29684)]
[New Thread 0x7ffff2ff2700 (LWP 29685)]
[New Thread 0x7ffff27f1700 (LWP 29687)]
[New Thread 0x7ffff1ff0700 (LWP 29689)]
[New Thread 0x7ffff17ef700 (LWP 29690)]
[New Thread 0x7ffff0fee700 (LWP 29692)]
[New Thread 0x7ffff07ed700 (LWP 29694)]
[New Thread 0x7fffeffec700 (LWP 29696)]
[graph 0 input from stream 0:0 @ 0x1b09260] Setting 'video_size' to value '1280x720'
[graph 0 input from stream 0:0 @ 0x1b09260] Setting 'pix_fmt' to value '0'
[graph 0 input from stream 0:0 @ 0x1b09260] Setting 'time_base' to value '1/1000'
[graph 0 input from stream 0:0 @ 0x1b09260] Setting 'pixel_aspect' to value '0/1'
[graph 0 input from stream 0:0 @ 0x1b09260] Setting 'sws_param' to value 'flags=2'
[graph 0 input from stream 0:0 @ 0x1b09260] Setting 'frame_rate' to value '25/1'
[graph 0 input from stream 0:0 @ 0x1b09260] w:1280 h:720 pixfmt:yuv420p tb:1/1000 fr:25/1 sar:0/1 sws_param:flags=2
[format @ 0x1afdba0] compat: called with args=[yuvj420p|yuvj422p|yuvj444p]
[format @ 0x1afdba0] Setting 'pix_fmts' to value 'yuvj420p|yuvj422p|yuvj444p'
[auto-inserted scaler 0 @ 0x1b0f5a0] Setting 'flags' to value '0x4'
[auto-inserted scaler 0 @ 0x1b0f5a0] w:iw h:ih flags:'0x4' interl:0
[format @ 0x1afdba0] auto-inserting filter 'auto-inserted scaler 0' between the filter 'Parsed_null_0' and the filter 'format'
[AVFilterGraph @ 0x1b60de0] query_formats: 4 queried, 2 merged, 1 already done, 0 delayed
[auto-inserted scaler 0 @ 0x1b0f5a0] picking yuvj420p out of 3 ref:yuv420p alpha:0
[swscaler @ 0x1afe0c0] deprecated pixel format used, make sure you did set range correctly
[auto-inserted scaler 0 @ 0x1b0f5a0] w:1280 h:720 fmt:yuv420p sar:0/1 -> w:1280 h:720 fmt:yuvj420p sar:0/1 flags:0x4
[mjpeg @ 0x1b0b7c0] Forcing thread count to 1 for MJPEG encoding, use -thread_type slice or a constant quantizer if you want to use multiple cpu cores
[mjpeg @ 0x1b0b7c0] intra_quant_bias = 96 inter_quant_bias = 0
Output #0, image2, to 'screens/0/%07d.jpg':
  Metadata:
    encoder         : Lavf56.26.101
    Stream #0:0, 0, 1/25: Video: mjpeg, 1 reference frame, yuvj420p(pc), 1280x720, 1/25, q=1-1, 200 kb/s, 25 fps, 25 tbn, 25 tbc
    Metadata:
      encoder         : Lavc56.30.100 mjpeg
Stream mapping:
  Stream #0:0 -> #0:0 (flv1 (flv) -> mjpeg (native))
Press [q] to stop, [?] for help
Cliping frame in rate conversion by 0.000008
[AVIOContext @ 0x2135b20] Statistics: 0 seeks, 6 writeouts
[AVIOContext @ 0x20c49e0] Statistics: 0 seeks, 6 writeouts
[AVIOContext @ 0x20c4740] Statistics: 0 seeks, 6 writeouts
[AVIOContext @ 0x20c46a0] Statistics: 0 seeks, 7 writeouts
[AVIOContext @ 0x22876e0] Statistics: 0 seeks, 8 writeouts
*** glibc detected *** /tmp/ffmpeg-install/ffmpeg/ffmpeg: corrupted double-linked list: 0x000000000248cda0 ***
======= Backtrace: =========
/lib/x86_64-linux-gnu/libc.so.6(+0x76a16)[0x7ffff517fa16]
/lib/x86_64-linux-gnu/libc.so.6(+0x76e4d)[0x7ffff517fe4d]
/lib/x86_64-linux-gnu/libc.so.6(+0x79174)[0x7ffff5182174]
/lib/x86_64-linux-gnu/libc.so.6(__libc_malloc+0x70)[0x7ffff51848a0]
/tmp/ffmpeg-install/ffmpeg/ffmpeg[0xeafd4a]
/tmp/ffmpeg-install/ffmpeg/ffmpeg[0x691c93]
/tmp/ffmpeg-install/ffmpeg/ffmpeg[0xb09a78]
/tmp/ffmpeg-install/ffmpeg/ffmpeg[0x488276]
/tmp/ffmpeg-install/ffmpeg/ffmpeg[0x48d8fc]
/tmp/ffmpeg-install/ffmpeg/ffmpeg[0x471a6b]
/lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xfd)[0x7ffff5127ead]
/tmp/ffmpeg-install/ffmpeg/ffmpeg[0x471bdd]
======= Memory map: ========
00400000-01243000 r-xp 00000000 08:05 17036                              /tmp/ffmpeg-install/ffmpeg/ffmpeg
01443000-0147f000 rw-p 00e43000 08:05 17036                              /tmp/ffmpeg-install/ffmpeg/ffmpeg
0147f000-02754000 rw-p 00000000 00:00 0                                  [heap]
7fffe8000000-7fffe8021000 rw-p 00000000 00:00 0
7fffe8021000-7fffec000000 ---p 00000000 00:00 0
7fffef4d9000-7fffef4ee000 r-xp 00000000 08:06 654084                     /lib/x86_64-linux-gnu/libgcc_s.so.1
7fffef4ee000-7fffef6ee000 ---p 00015000 08:06 654084                     /lib/x86_64-linux-gnu/libgcc_s.so.1
7fffef6ee000-7fffef6ef000 rw-p 00015000 08:06 654084                     /lib/x86_64-linux-gnu/libgcc_s.so.1
7fffef6ef000-7fffef7ec000 rw-p 00000000 00:00 0
7fffef7ec000-7fffef7ed000 ---p 00000000 00:00 0
7fffef7ed000-7fffeffed000 rw-p 00000000 00:00 0
7fffeffed000-7fffeffee000 ---p 00000000 00:00 0
7fffeffee000-7ffff07ee000 rw-p 00000000 00:00 0
7ffff07ee000-7ffff07ef000 ---p 00000000 00:00 0
7ffff07ef000-7ffff0fef000 rw-p 00000000 00:00 0
7ffff0fef000-7ffff0ff0000 ---p 00000000 00:00 0
7ffff0ff0000-7ffff17f0000 rw-p 00000000 00:00 0
7ffff17f0000-7ffff17f1000 ---p 00000000 00:00 0
7ffff17f1000-7ffff1ff1000 rw-p 00000000 00:00 0
7ffff1ff1000-7ffff1ff2000 ---p 00000000 00:00 0
7ffff1ff2000-7ffff27f2000 rw-p 00000000 00:00 0
7ffff27f2000-7ffff27f3000 ---p 00000000 00:00 0
7ffff27f3000-7ffff2ff3000 rw-p 00000000 00:00 0
7ffff2ff3000-7ffff2ff4000 ---p 00000000 00:00 0
7ffff2ff4000-7ffff37f4000 rw-p 00000000 00:00 0
7ffff37f4000-7ffff37f5000 ---p 00000000 00:00 0
7ffff37f5000-7ffff43c8000 rw-p 00000000 00:00 0
7ffff44bf000-7ffff45bc000 rw-p 00000000 00:00 0
7ffff45bc000-7ffff45be000 r-xp 00000000 08:06 660396                     /lib/x86_64-linux-gnu/libdl-2.13.so
7ffff45be000-7ffff47be000 ---p 00002000 08:06 660396                     /lib/x86_64-linux-gnu/libdl-2.13.so
7ffff47be000-7ffff47bf000 r--p 00002000 08:06 660396                     /lib/x86_64-linux-gnu/libdl-2.13.so
7ffff47bf000-7ffff47c0000 rw-p 00003000 08:06 660396                     /lib/x86_64-linux-gnu/libdl-2.13.so
7ffff47c0000-7ffff47c6000 r-xp 00000000 08:06 541973                     /usr/lib/x86_64-linux-gnu/libogg.so.0.8.0
7ffff47c6000-7ffff49c5000 ---p 00006000 08:06 541973                     /usr/lib/x86_64-linux-gnu/libogg.so.0.8.0
7ffff49c5000-7ffff49c6000 rw-p 00005000 08:06 541973                     /usr/lib/x86_64-linux-gnu/libogg.so.0.8.0
7ffff49c6000-7ffff4afb000 r-xp 00000000 08:06 530729                     /usr/lib/x86_64-linux-gnu/libX11.so.6.3.0
7ffff4afb000-7ffff4cfb000 ---p 00135000 08:06 530729                     /usr/lib/x86_64-linux-gnu/libX11.so.6.3.0
7ffff4cfb000-7ffff4d01000 rw-p 00135000 08:06 530729                     /usr/lib/x86_64-linux-gnu/libX11.so.6.3.0
7ffff4d01000-7ffff4d06000 r-xp 00000000 08:06 530689                     /usr/lib/x86_64-linux-gnu/libXdmcp.so.6.0.0
7ffff4d06000-7ffff4f05000 ---p 00005000 08:06 530689                     /usr/lib/x86_64-linux-gnu/libXdmcp.so.6.0.0
7ffff4f05000-7ffff4f06000 rw-p 00004000 08:06 530689                     /usr/lib/x86_64-linux-gnu/libXdmcp.so.6.0.0
7ffff4f06000-7ffff4f08000 r-xp 00000000 08:06 530677                     /usr/lib/x86_64-linux-gnu/libXau.so.6.0.0
7ffff4f08000-7ffff5108000 ---p 00002000 08:06 530677                     /usr/lib/x86_64-linux-gnu/libXau.so.6.0.0
7ffff5108000-7ffff5109000 rw-p 00002000 08:06 530677                     /usr/lib/x86_64-linux-gnu/libXau.so.6.0.0
7ffff5109000-7ffff528b000 r-xp 00000000 08:06 660393                     /lib/x86_64-linux-gnu/libc-2.13.so
7ffff528b000-7ffff548b000 ---p 00182000 08:06 660393                     /lib/x86_64-linux-gnu/libc-2.13.so
7ffff548b000-7ffff548f000 r--p 00182000 08:06 660393                     /lib/x86_64-linux-gnu/libc-2.13.so
7ffff548f000-7ffff5490000 rw-p 00186000 08:06 660393                     /lib/x86_64-linux-gnu/libc-2.13.so
7ffff5490000-7ffff5495000 rw-p 00000000 00:00 0
7ffff5495000-7ffff549c000 r-xp 00000000 08:06 660408                     /lib/x86_64-linux-gnu/librt-2.13.so
7ffff549c000-7ffff569b000 ---p 00007000 08:06 660408                     /lib/x86_64-linux-gnu/librt-2.13.so
7ffff569b000-7ffff569c000 r--p 00006000 08:06 660408                     /lib/x86_64-linux-gnu/librt-2.13.so
7ffff569c000-7ffff569d000 rw-p 00007000 08:06 660408                     /lib/x86_64-linux-gnu/librt-2.13.so
7ffff569d000-7ffff56b3000 r-xp 00000000 08:06 654170                     /lib/x86_64-linux-gnu/libz.so.1.2.7
7ffff56b3000-7ffff58b2000 ---p 00016000 08:06 654170                     /lib/x86_64-linux-gnu/libz.so.1.2.7
7ffff58b2000-7ffff58b3000 r--p 00015000 08:06 654170                     /lib/x86_64-linux-gnu/libz.so.1.2.7
7ffff58b3000-7ffff58b4000 rw-p 00016000 08:06 654170                     /lib/x86_64-linux-gnu/libz.so.1.2.7
7ffff58b4000-7ffff58c3000 r-xp 00000000 08:06 654108                     /lib/x86_64-linux-gnu/libbz2.so.1.0.4
7ffff58c3000-7ffff5ac2000 ---p 0000f000 08:06 654108                     /lib/x86_64-linux-gnu/libbz2.so.1.0.4
7ffff5ac2000-7ffff5ac3000 r--p 0000e000 08:06 654108                     /lib/x86_64-linux-gnu/libbz2.so.1.0.4
7ffff5ac3000-7ffff5ac4000 rw-p 0000f000 08:06 654108                     /lib/x86_64-linux-gnu/libbz2.so.1.0.4
7ffff5ac4000-7ffff5ae6000 r-xp 00000000 08:06 654112                     /lib/x86_64-linux-gnu/liblzma.so.5.0.0
7ffff5ae6000-7ffff5ce5000 ---p 00022000 08:06 654112                     /lib/x86_64-linux-gnu/liblzma.so.5.0.0
7ffff5ce5000-7ffff5ce6000 r--p 00021000 08:06 654112                     /lib/x86_64-linux-gnu/liblzma.so.5.0.0
7ffff5ce6000-7ffff5ce7000 rw-p 00022000 08:06 654112                     /lib/x86_64-linux-gnu/liblzma.so.5.0.0
7ffff5ce7000-7ffff5d68000 r-xp 00000000 08:06 660397                     /lib/x86_64-linux-gnu/libm-2.13.so
7ffff5d68000-7ffff5f67000 ---p 00081000 08:06 660397                     /lib/x86_64-linux-gnu/libm-2.13.so
7ffff5f67000-7ffff5f68000 r--p 00080000 08:06 660397                     /lib/x86_64-linux-gnu/libm-2.13.so
7ffff5f68000-7ffff5f69000 rw-p 00081000 08:06 660397                     /lib/x86_64-linux-gnu/libm-2.13.so
7ffff5f69000-7ffff5f78000 r-xp 00000000 08:06 542943                     /usr/lib/libfaac.so.0.0.0
7ffff5f78000-7ffff6178000 ---p 0000f000 08:06 542943                     /usr/lib/libfaac.so.0.0.0
7ffff6178000-7ffff617b000 rw-p 0000f000 08:06 542943                     /usr/lib/libfaac.so.0.0.0
7ffff617b000-7ffff6214000 r-xp 00000000 08:06 530433                     /usr/lib/x86_64-linux-gnu/libfreetype.so.6.8.1
7ffff6214000-7ffff6413000 ---p 00099000 08:06 530433                     /usr/lib/x86_64-linux-gnu/libfreetype.so.6.8.1
7ffff6413000-7ffff6419000 r--p 00098000 08:06 530433                     /usr/lib/x86_64-linux-gnu/libfreetype.so.6.8.1
7ffff6419000-7ffff641a000 rw-p 0009e000 08:06 530433                     /usr/lib/x86_64-linux-gnu/libfreetype.so.6.8.1
7ffff641a000-7ffff6474000 r-xp 00000000 08:06 542937                     /usr/lib/x86_64-linux-gnu/libmp3lame.so.0.0.0
7ffff6474000-7ffff6674000 ---p 0005a000 08:06 542937                     /usr/lib/x86_64-linux-gnu/libmp3lame.so.0.0.0
7ffff6674000-7ffff6675000 r--p 0005a000 08:06 542937                     /usr/lib/x86_64-linux-gnu/libmp3lame.so.0.0.0
7ffff6675000-7ffff6676000 rw-p 0005b000 08:06 542937                     /usr/lib/x86_64-linux-gnu/libmp3lame.so.0.0.0
7ffff6676000-7ffff66a4000 rw-p 00000000 00:00 0
7ffff66a4000-7ffff66bf000 r-xp 00000000 08:06 542950                     /usr/lib/x86_64-linux-gnu/libtheoradec.so.1.1.4
7ffff66bf000-7ffff68be000 ---p 0001b000 08:06 542950                     /usr/lib/x86_64-linux-gnu/libtheoradec.so.1.1.4
7ffff68be000-7ffff68bf000 r--p 0001a000 08:06 542950                     /usr/lib/x86_64-linux-gnu/libtheoradec.so.1.1.4
7ffff68bf000-7ffff68c0000 rw-p 0001b000 08:06 542950                     /usr/lib/x86_64-linux-gnu/libtheoradec.so.1.1.4
7ffff68c0000-7ffff68ff000 r-xp 00000000 08:06 542951                     /usr/lib/x86_64-linux-gnu/libtheoraenc.so.1.1.2
7ffff68ff000-7ffff6aff000 ---p 0003f000 08:06 542951                     /usr/lib/x86_64-linux-gnu/libtheoraenc.so.1.1.2
7ffff6aff000-7ffff6b00000 r--p 0003f000 08:06 542951                     /usr/lib/x86_64-linux-gnu/libtheoraenc.so.1.1.2
7ffff6b00000-7ffff6b01000 rw-p 00040000 08:06 542951                     /usr/lib/x86_64-linux-gnu/libtheoraenc.so.1.1.2
7ffff6b01000-7ffff6b2d000 r-xp 00000000 08:06 541977                     /usr/lib/x86_64-linux-gnu/libvorbis.so.0.4.5
7ffff6b2d000-7ffff6d2c000 ---p 0002c000 08:06 541977                     /usr/lib/x86_64-linux-gnu/libvorbis.so.0.4.5
7ffff6d2c000-7ffff6d2d000 r--p 0002b000 08:06 541977                     /usr/lib/x86_64-linux-gnu/libvorbis.so.0.4.5
7ffff6d2d000-7ffff6d2e000 rw-p 0002c000 08:06 541977                     /usr/lib/x86_64-linux-gnu/libvorbis.so.0.4.5
7ffff6d2e000-7ffff6fe1000 r-xp 00000000 08:06 542964                     /usr/lib/x86_64-linux-gnu/libvorbisenc.so.2.0.8
7ffff6fe1000-7ffff71e0000 ---p 002b3000 08:06 542964                     /usr/lib/x86_64-linux-gnu/libvorbisenc.so.2.0.8
7ffff71e0000-7ffff71fc000 r--p 002b2000 08:06 542964                     /usr/lib/x86_64-linux-gnu/libvorbisenc.so.2.0.8
7ffff71fc000-7ffff71fd000 rw-p 002ce000 08:06 542964                     /usr/lib/x86_64-linux-gnu/libvorbisenc.so.2.0.8
7ffff71fd000-7ffff7299000 r-xp 00000000 08:06 543039                     /usr/lib/x86_64-linux-gnu/libvpx.so.1.1.0
7ffff7299000-7ffff7498000 ---p 0009c000 08:06 543039                     /usr/lib/x86_64-linux-gnu/libvpx.so.1.1.0
7ffff7498000-7ffff749a000 rw-p 0009b000 08:06 543039                     /usr/lib/x86_64-linux-gnu/libvpx.so.1.1.0
7ffff749a000-7ffff749c000 rw-p 00000000 00:00 0
7ffff749c000-7ffff74b3000 r-xp 00000000 08:06 660043                     /lib/x86_64-linux-gnu/libpthread-2.13.so
7ffff74b3000-7ffff76b2000 ---p 00017000 08:06 660043                     /lib/x86_64-linux-gnu/libpthread-2.13.so
7ffff76b2000-7ffff76b3000 r--p 00016000 08:06 660043                     /lib/x86_64-linux-gnu/libpthread-2.13.so
7ffff76b3000-7ffff76b4000 rw-p 00017000 08:06 660043                     /lib/x86_64-linux-gnu/libpthread-2.13.so
7ffff76b4000-7ffff76b8000 rw-p 00000000 00:00 0
7ffff76b8000-7ffff777d000 r-xp 00000000 08:06 543055                     /usr/lib/libx264.so.118
7ffff777d000-7ffff797c000 ---p 000c5000 08:06 543055                     /usr/lib/libx264.so.118
7ffff797c000-7ffff797f000 rw-p 000c4000 08:06 543055                     /usr/lib/libx264.so.118
7ffff797f000-7ffff79ba000 rw-p 00000000 00:00 0
7ffff79ba000-7ffff79bc000 r-xp 00000000 08:06 541965                     /usr/lib/x86_64-linux-gnu/libxcb-shm.so.0.0.0
7ffff79bc000-7ffff7bbb000 ---p 00002000 08:06 541965                     /usr/lib/x86_64-linux-gnu/libxcb-shm.so.0.0.0
7ffff7bbb000-7ffff7bbc000 r--p 00001000 08:06 541965                     /usr/lib/x86_64-linux-gnu/libxcb-shm.so.0.0.0
7ffff7bbc000-7ffff7bbd000 rw-p 00002000 08:06 541965                     /usr/lib/x86_64-linux-gnu/libxcb-shm.so.0.0.0
7ffff7bbd000-7ffff7bdc000 r-xp 00000000 08:06 530699                     /usr/lib/x86_64-linux-gnu/libxcb.so.1.1.0
7ffff7bdc000-7ffff7ddb000 ---p 0001f000 08:06 530699                     /usr/lib/x86_64-linux-gnu/libxcb.so.1.1.0
7ffff7ddb000-7ffff7ddc000 r--p 0001e000 08:06 530699                     /usr/lib/x86_64-linux-gnu/libxcb.so.1.1.0
7ffff7ddc000-7ffff7ddd000 rw-p 0001f000 08:06 530699                     /usr/lib/x86_64-linux-gnu/libxcb.so.1.1.0
7ffff7ddd000-7ffff7dfd000 r-xp 00000000 08:06 660390                     /lib/x86_64-linux-gnu/ld-2.13.so
7ffff7ee4000-7ffff7fec000 rw-p 00000000 00:00 0
7ffff7ff8000-7ffff7ffb000 rw-p 00000000 00:00 0
7ffff7ffb000-7ffff7ffc000 r-xp 00000000 00:00 0                          [vdso]
7ffff7ffc000-7ffff7ffd000 r--p 0001f000 08:06 660390                     /lib/x86_64-linux-gnu/ld-2.13.so
7ffff7ffd000-7ffff7ffe000 rw-p 00020000 08:06 660390                     /lib/x86_64-linux-gnu/ld-2.13.so
7ffff7ffe000-7ffff7fff000 rw-p 00000000 00:00 0
7ffffffde000-7ffffffff000 rw-p 00000000 00:00 0                          [stack]
ffffffffff600000-ffffffffff601000 r-xp 00000000 00:00 0                  [vsyscall]

Program received signal SIGABRT, Aborted.
0x00007ffff513b165 in raise () from /lib/x86_64-linux-gnu/libc.so.6
(gdb) bt
#0  0x00007ffff513b165 in raise () from /lib/x86_64-linux-gnu/libc.so.6
#1  0x00007ffff513e3e0 in abort () from /lib/x86_64-linux-gnu/libc.so.6
#2  0x00007ffff51761cb in ?? () from /lib/x86_64-linux-gnu/libc.so.6
#3  0x00007ffff517fa16 in ?? () from /lib/x86_64-linux-gnu/libc.so.6
#4  0x00007ffff517fe4d in ?? () from /lib/x86_64-linux-gnu/libc.so.6
#5  0x00007ffff5182174 in ?? () from /lib/x86_64-linux-gnu/libc.so.6
#6  0x00007ffff51848a0 in malloc () from /lib/x86_64-linux-gnu/libc.so.6
#7  0x0000000000eafd4a in ?? ()
#8  0x0000000000691c93 in ?? ()
#9  0x0000000000b09a78 in ?? ()
#10 0x0000000000488276 in ?? ()
#11 0x000000000048d8fc in ?? ()
#12 0x0000000000471a6b in ?? ()
#13 0x00007ffff5127ead in __libc_start_main () from /lib/x86_64-linux-gnu/libc.so.6
#14 0x0000000000471bdd in ?? ()
#15 0x00007fffffffe848 in ?? ()
#16 0x000000000000001c in ?? ()
#17 0x000000000000000f in ?? ()
#18 0x00007fffffffeb36 in ?? ()
#19 0x00007fffffffeb58 in ?? ()
#20 0x00007fffffffeb60 in ?? ()
#21 0x00007fffffffeb63 in ?? ()
#22 0x00007fffffffeb65 in ?? ()
#23 0x00007fffffffeb6f in ?? ()
#24 0x00007fffffffeb72 in ?? ()
#25 0x00007fffffffeb75 in ?? ()
#26 0x00007fffffffeb90 in ?? ()
#27 0x00007fffffffeb98 in ?? ()
#28 0x00007fffffffeb9e in ?? ()
#29 0x00007fffffffeba4 in ?? ()
#30 0x00007fffffffeba6 in ?? ()
#31 0x00007fffffffebac in ?? ()
#32 0x00007fffffffebae in ?? ()
#33 0x0000000000000000 in ?? ()
(gdb) disass $pc-32,$pc+32
Dump of assembler code from 0x7ffff513b145 to 0x7ffff513b185:
   0x00007ffff513b145 <raise+21>:	mov    $0xf000000,%edx
   0x00007ffff513b14a <raise+26>:	add    $0x8964c689,%eax
   0x00007ffff513b14f <raise+31>:	add    $0x25,%al
   0x00007ffff513b151 <raise+33>:	rolb   (%rdx)
   0x00007ffff513b153 <raise+35>:	add    %al,(%rax)
   0x00007ffff513b155 <raise+37>:	movslq %edi,%rdx
   0x00007ffff513b158 <raise+40>:	movslq %esi,%rsi
   0x00007ffff513b15b <raise+43>:	movslq %eax,%rdi
   0x00007ffff513b15e <raise+46>:	mov    $0xea,%eax
   0x00007ffff513b163 <raise+51>:	syscall
=> 0x00007ffff513b165 <raise+53>:	cmp    $0xfffffffffffff000,%rax
   0x00007ffff513b16b <raise+59>:	ja     0x7ffff513b182 <raise+82>
   0x00007ffff513b16d <raise+61>:	repz retq
   0x00007ffff513b16f <raise+63>:	nop
   0x00007ffff513b170 <raise+64>:	test   %eax,%eax
   0x00007ffff513b172 <raise+66>:	jg     0x7ffff513b155 <raise+37>
   0x00007ffff513b174 <raise+68>:	test   $0x7fffffff,%eax
   0x00007ffff513b179 <raise+73>:	jne    0x7ffff513b192 <raise+98>
   0x00007ffff513b17b <raise+75>:	mov    %esi,%eax
   0x00007ffff513b17d <raise+77>:	nopl   (%rax)
   0x00007ffff513b180 <raise+80>:	jmp    0x7ffff513b155 <raise+37>
   0x00007ffff513b182 <raise+82>:	mov    0x353c8f(%rip),%rdx        # 0x7ffff548ee18
End of assembler dump.
(gdb) info all-registers
rax            0x0	0
rbx            0x0	0
rcx            0xffffffffffffffff	-1
rdx            0x6	6
rsi            0x73cc	29644
rdi            0x73cc	29644
rbp            0x7fffffffdc70	0x7fffffffdc70
rsp            0x7fffffffd228	0x7fffffffd228
r8             0x0	0
r9             0x400d30	4197680
r10            0x8	8
r11            0x206	518
r12            0xa	10
r13            0x7fffffffd550	140737488344400
r14            0x6f	111
r15            0x7	7
rip            0x7ffff513b165	0x7ffff513b165 <raise+53>
eflags         0x206	[ PF IF ]
cs             0x33	51
ss             0x2b	43
ds             0x0	0
es             0x0	0
fs             0x0	0
gs             0x0	0
st0            -nan(0x81008100810081)	(raw 0xffff0081008100810081)
st1            -nan(0x8100000081)	(raw 0xffff0000008100000081)
st2            -nan(0x8100000081)	(raw 0xffff0000008100000081)
st3            -inf	(raw 0xffff0000000000000000)
st4            -nan(0x81008100810081)	(raw 0xffff0081008100810081)
st5            -nan(0xc0013fffc0013fff)	(raw 0xffffc0013fffc0013fff)
st6            -nan(0x4000400040004)	(raw 0xffff0004000400040004)
st7            -nan(0x22a3539f22a3539f)	(raw 0xffff22a3539f22a3539f)
fctrl          0x37f	895
fstat          0x0	0
ftag           0xffff	65535
fiseg          0x0	0
fioff          0x0	0
foseg          0x0	0
fooff          0x0	0
fop            0x0	0
mxcsr          0x1fa8	[ OE PE IM DM ZM OM UM PM ]
ymm0           {v8_float = {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, v4_double = {0x0, 0x0, 0x0, 0x0}, v32_int8 = {0x0 <repeats 32 times>},
  v16_int16 = {0x0 <repeats 16 times>}, v8_int32 = {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, v4_int64 = {0x0, 0x0, 0x0, 0x0}, v2_int128 = {
    0x00000000000000000000000000000000, 0x00000000000000000000000000000000}}
ymm1           {v8_float = {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, v4_double = {0x8000000000000000, 0x8000000000000000, 0x0, 0x0},
  v32_int8 = {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0 <repeats 16 times>}, v16_int16 = {0x0, 0x0,
    0x0, 0xff00, 0x0, 0x0, 0x0, 0xff00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, v8_int32 = {0x0, 0xff000000, 0x0, 0xff000000, 0x0, 0x0, 0x0,
    0x0}, v4_int64 = {0xff00000000000000, 0xff00000000000000, 0x0, 0x0}, v2_int128 = {0xff00000000000000ff00000000000000,
    0x00000000000000000000000000000000}}
ymm2           {v8_float = {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, v4_double = {0x0, 0x0, 0x0, 0x0}, v32_int8 = {0x0 <repeats 32 times>},
---Type <return> to continue, or q <return> to quit---
  v16_int16 = {0x0 <repeats 16 times>}, v8_int32 = {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, v4_int64 = {0x0, 0x0, 0x0, 0x0}, v2_int128 = {
    0x00000000000000000000000000000000, 0x00000000000000000000000000000000}}
ymm3           {v8_float = {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, v4_double = {0x0, 0x0, 0x0, 0x0}, v32_int8 = {0x0 <repeats 32 times>},
  v16_int16 = {0x0 <repeats 16 times>}, v8_int32 = {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, v4_int64 = {0x0, 0x0, 0x0, 0x0}, v2_int128 = {
    0x00000000000000000000000000000000, 0x00000000000000000000000000000000}}
ymm4           {v8_float = {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, v4_double = {0x0, 0x0, 0x0, 0x0}, v32_int8 = {0x0 <repeats 32 times>},
  v16_int16 = {0x0 <repeats 16 times>}, v8_int32 = {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, v4_int64 = {0x0, 0x0, 0x0, 0x0}, v2_int128 = {
    0x00000000000000000000000000000000, 0x00000000000000000000000000000000}}
ymm5           {v8_float = {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, v4_double = {0x0, 0x0, 0x0, 0x0}, v32_int8 = {0xaa, 0xa, 0xaa, 0xa, 0x0,
    0x8, 0x0, 0x8, 0x66, 0x6, 0x92, 0x4, 0x0, 0x4, 0x33, 0x3, 0x0 <repeats 16 times>}, v16_int16 = {0xaaa, 0xaaa, 0x800, 0x800, 0x666, 0x492,
    0x400, 0x333, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, v8_int32 = {0xaaa0aaa, 0x8000800, 0x4920666, 0x3330400, 0x0, 0x0, 0x0, 0x0},
  v4_int64 = {0x80008000aaa0aaa, 0x333040004920666, 0x0, 0x0}, v2_int128 = {0x0333040004920666080008000aaa0aaa,
    0x00000000000000000000000000000000}}
ymm6           {v8_float = {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, v4_double = {0x0, 0x0, 0x0, 0x0}, v32_int8 = {0x9, 0x0, 0x9, 0x0, 0xc,
    0x0, 0xc, 0x0, 0xf, 0x0, 0x15, 0x0, 0x18, 0x0, 0x1e, 0x0 <repeats 17 times>}, v16_int16 = {0x9, 0x9, 0xc, 0xc, 0xf, 0x15, 0x18, 0x1e, 0x0,
    0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, v8_int32 = {0x90009, 0xc000c, 0x15000f, 0x1e0018, 0x0, 0x0, 0x0, 0x0}, v4_int64 = {0xc000c00090009,
    0x1e00180015000f, 0x0, 0x0}, v2_int128 = {0x001e00180015000f000c000c00090009, 0x00000000000000000000000000000000}}
ymm7           {v8_float = {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, v4_double = {0x0, 0x0, 0x0, 0x0}, v32_int8 = {0x0 <repeats 32 times>},
  v16_int16 = {0x0 <repeats 16 times>}, v8_int32 = {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, v4_int64 = {0x0, 0x0, 0x0, 0x0}, v2_int128 = {
    0x00000000000000000000000000000000, 0x00000000000000000000000000000000}}
ymm8           {v8_float = {0x0, 0xd0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, v4_double = {0x4380663abb8000, 0x0, 0x0, 0x0}, v32_int8 = {0x0, 0xe0,
    0xae, 0x8e, 0x19, 0xe0, 0x50, 0x43, 0x0 <repeats 24 times>}, v16_int16 = {0xe000, 0x8eae, 0xe019, 0x4350, 0x0 <repeats 12 times>},
  v8_int32 = {0x8eaee000, 0x4350e019, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, v4_int64 = {0x4350e0198eaee000, 0x0, 0x0, 0x0}, v2_int128 = {
    0x00000000000000004350e0198eaee000, 0x00000000000000000000000000000000}}
ymm9           {v8_float = {0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, v4_double = {0x50cf9860, 0x0, 0x0, 0x0}, v32_int8 = {0x0, 0x0, 0x0, 0x18,
    0xe6, 0x33, 0xd4, 0x41, 0x0 <repeats 24 times>}, v16_int16 = {0x0, 0x1800, 0x33e6, 0x41d4, 0x0 <repeats 12 times>}, v8_int32 = {0x18000000,
    0x41d433e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, v4_int64 = {0x41d433e618000000, 0x0, 0x0, 0x0}, v2_int128 = {0x000000000000000041d433e618000000,
    0x00000000000000000000000000000000}}
ymm10          {v8_float = {0x0, 0x4b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, v4_double = {0x5ffffffffff, 0x0, 0x0, 0x0}, v32_int8 = {0x2c, 0xfd, 0xff,
    0xff, 0xff, 0xff, 0x97, 0x42, 0x0 <repeats 24 times>}, v16_int16 = {0xfd2c, 0xffff, 0xffff, 0x4297, 0x0 <repeats 12 times>}, v8_int32 = {
    0xfffffd2c, 0x4297ffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, v4_int64 = {0x4297fffffffffd2c, 0x0, 0x0, 0x0}, v2_int128 = {
    0x00000000000000004297fffffffffd2c, 0x00000000000000000000000000000000}}
ymm11          {v8_float = {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, v4_double = {0x0, 0x0, 0x0, 0x0}, v32_int8 = {0xb7, 0x7a, 0x46, 0x3b,
    0xd5, 0x45, 0x7c, 0xbe, 0x0 <repeats 24 times>}, v16_int16 = {0x7ab7, 0x3b46, 0x45d5, 0xbe7c, 0x0 <repeats 12 times>}, v8_int32 = {
    0x3b467ab7, 0xbe7c45d5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, v4_int64 = {0xbe7c45d53b467ab7, 0x0, 0x0, 0x0}, v2_int128 = {
    0x0000000000000000be7c45d53b467ab7, 0x00000000000000000000000000000000}}
ymm12          {v8_float = {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, v4_double = {0x0, 0x0, 0x0, 0x0}, v32_int8 = {0x29, 0xf2, 0x88, 0x6c,
    0xa6, 0x49, 0xde, 0x3e, 0x0 <repeats 24 times>}, v16_int16 = {0xf229, 0x6c88, 0x49a6, 0x3ede, 0x0 <repeats 12 times>}, v8_int32 = {
    0x6c88f229, 0x3ede49a6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, v4_int64 = {0x3ede49a66c88f229, 0x0, 0x0, 0x0}, v2_int128 = {
    0x00000000000000003ede49a66c88f229, 0x00000000000000000000000000000000}}
ymm13          {v8_float = {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, v4_double = {0x0, 0x0, 0x0, 0x0}, v32_int8 = {0xb3, 0x12, 0x58, 0x17,
    0x64, 0x46, 0xe6, 0x3b, 0x0 <repeats 24 times>}, v16_int16 = {0x12b3, 0x1758, 0x4664, 0x3be6, 0x0 <repeats 12 times>}, v8_int32 = {
    0x175812b3, 0x3be64664, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, v4_int64 = {0x3be64664175812b3, 0x0, 0x0, 0x0}, v2_int128 = {
    0x00000000000000003be64664175812b3, 0x00000000000000000000000000000000}}
ymm14          {v8_float = {0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, v4_double = {0x2d, 0x0, 0x0, 0x0}, v32_int8 = {0xc0, 0x9, 0xf2, 0x16,
    0xb5, 0xdf, 0x46, 0x40, 0x0 <repeats 24 times>}, v16_int16 = {0x9c0, 0x16f2, 0xdfb5, 0x4046, 0x0 <repeats 12 times>}, v8_int32 = {
    0x16f209c0, 0x4046dfb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, v4_int64 = {0x4046dfb516f209c0, 0x0, 0x0, 0x0}, v2_int128 = {
    0x00000000000000004046dfb516f209c0, 0x00000000000000000000000000000000}}
ymm15          {v8_float = {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, v4_double = {0x0, 0x0, 0x0, 0x0}, v32_int8 = {0x0 <repeats 32 times>},
  v16_int16 = {0x0 <repeats 16 times>}, v8_int32 = {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, v4_int64 = {0x0, 0x0, 0x0, 0x0}, v2_int128 = {
---Type <return> to continue, or q <return> to quit---
    0x00000000000000000000000000000000, 0x00000000000000000000000000000000}}

[Carl Eugen Hoyos]

Regression since 1441641d

[Michael Niedermayer]

Fixed in c50904fd7899e37516324e711b3b8edfe7214da8