Opened 9 years ago
Closed 9 years ago
#4510 closed defect (duplicate)
hq_hqa: crash withfuzzed file 3
Reported by: | ami_stuff | Owned by: | |
---|---|---|---|
Priority: | important | Component: | avcodec |
Version: | git-master | Keywords: | hqa crash SIGSEGV regression |
Cc: | Blocked By: | ||
Blocking: | Reproduced by developer: | yes | |
Analyzed by developer: | no |
Description
http://www.datafilehost.com/d/af64df1c
knoppix@Microknoppix:/media/sdb1$ valgrind --leak-check=full ffmpeg/ffmpeg_g -i fuzz9.avi -f null - ==12470== Memcheck, a memory error detector ==12470== Copyright (C) 2002-2011, and GNU GPL'd, by Julian Seward et al. ==12470== Using Valgrind-3.7.0 and LibVEX; rerun with -h for copyright info ==12470== Command: ffmpeg/ffmpeg_g -i fuzz9.avi -f null - ==12470== ffmpeg version 2.6.git Copyright (c) 2000-2015 the FFmpeg developers built with gcc 4.7 (Debian 4.7.2-4) configuration: --disable-ffserver --disable-ffprobe --disable-ffplay --enable-gpl libavutil 54. 23.101 / 54. 23.101 libavcodec 56. 35.101 / 56. 35.101 libavformat 56. 31.100 / 56. 31.100 libavdevice 56. 4.100 / 56. 4.100 libavfilter 5. 14.100 / 5. 14.100 libswscale 3. 1.101 / 3. 1.101 libswresample 1. 1.100 / 1. 1.100 libpostproc 53. 3.100 / 53. 3.100 [avi @ 0x4c2d0e0] Something went wrong during header parsing, I will ignore it and try to continue anyway. [hq_hqa @ 0x4c3f040] Invalid slice size 25116. Input #0, avi, from 'fuzz9.avi': Duration: 00:00:24.80, start: 0.000000, bitrate: 1146 kb/s Stream #0:0: Video: hq_hqa (CUVC / 0x43565543), yuv422p, 720x480 [SAR 9:10 DAR 27:20], 5 fps, 5 tbr, 5 tbn, 5 tbc Output #0, null, to 'pipe:': Metadata: encoder : Lavf56.31.100 Stream #0:0: Video: rawvideo (Y42B / 0x42323459), yuv422p, 720x480 [SAR 9:10 DAR 27:20], q=2-31, 200 kb/s, 5 fps, 5 tbn, 5 tbc Metadata: encoder : Lavc56.35.101 rawvideo Stream mapping: Stream #0:0 -> #0:0 (hq_hqa (native) -> rawvideo (native)) Press [q] to stop, [?] for help [hq_hqa @ 0x4d01c20] Invalid slice size 25116. [null @ 0x4d02940] Encoder did not produce proper pts, making some up. [hq_hqa @ 0x4d01c20] Not a HQ/HQA frame. Error while decoding stream #0:0: Invalid data found when processing input [hq_hqa @ 0x4d01c20] Invalid slice size 24696. [hq_hqa @ 0x4d01c20] Not a HQ/HQA frame. Error while decoding stream #0:0: Invalid data found when processing input [hq_hqa @ 0x4d01c20] Invalid slice size 28844. [hq_hqa @ 0x4d01c20] HQ Profile 33 is not implemented. Update your FFmpeg version to the newest one from Git. If the problem still occurs, it means that your file has a feature which has not been implemented. [hq_hqa @ 0x4d01c20] If you want to help, upload a sample of this file to ftp://upload.ffmpeg.org/incoming/ and contact the ffmpeg-devel mailing list. (ffmpeg-devel@ffmpeg.org) [hq_hqa @ 0x4d01c20] Invalid slice size 29958. Input stream #0:0 frame changed from size:720x480 fmt:yuv422p to size:160x120 fmt:yuv422p [hq_hqa @ 0x4d01c20] Invalid INFO size (268435480). Error while decoding stream #0:0: Invalid data found when processing input [hq_hqa @ 0x4d01c20] Invalid slice size 1077982. Input stream #0:0 frame changed from size:160x120 fmt:yuv422p to size:720x480 fmt:yuv422p [hq_hqa @ 0x4d01c20] Invalid INFO size (524304). Error while decoding stream #0:0: Invalid data found when processing input [hq_hqa @ 0x4d01c20] Invalid INFO size (536870936). bitrate=N/A Error while decoding stream #0:0: Invalid data found when processing input [hq_hqa @ 0x4d01c20] Not a HQ/HQA frame. Error while decoding stream #0:0: Invalid data found when processing input [hq_hqa @ 0x4d01c20] Not a HQ/HQA frame. Error while decoding stream #0:0: Invalid data found when processing input [hq_hqa @ 0x4d01c20] Not a HQ/HQA frame. Error while decoding stream #0:0: Invalid data found when processing input [hq_hqa @ 0x4d01c20] Invalid INFO size (671089688). Error while decoding stream #0:0: Invalid data found when processing input [hq_hqa @ 0x4d01c20] Not a HQ/HQA frame. Error while decoding stream #0:0: Invalid data found when processing input [hq_hqa @ 0x4d01c20] Invalid slice size 28612. [hq_hqa @ 0x4d01c20] Error decoding macroblock 0 at slice 5. [hq_hqa @ 0x4d01c20] Error decoding frame. Error while decoding stream #0:0: Invalid data found when processing input [hq_hqa @ 0x4d01c20] Invalid slice size 29198. [hq_hqa @ 0x4d01c20] Invalid slice size 29732. [hq_hqa @ 0x4d01c20] Not a HQ/HQA frame. Error while decoding stream #0:0: Invalid data found when processing input [hq_hqa @ 0x4d01c20] Not a HQ/HQA frame. Error while decoding stream #0:0: Invalid data found when processing input [hq_hqa @ 0x4d01c20] Invalid slice size 26448. [hq_hqa @ 0x4d01c20] Not a HQ/HQA frame. Error while decoding stream #0:0: Invalid data found when processing input [hq_hqa @ 0x4d01c20] Not a HQ/HQA frame. Error while decoding stream #0:0: Invalid data found when processing input [hq_hqa @ 0x4d01c20] Not a HQ/HQA frame. Error while decoding stream #0:0: Invalid data found when processing input [hq_hqa @ 0x4d01c20] Not a HQ/HQA frame. Error while decoding stream #0:0: Invalid data found when processing input [hq_hqa @ 0x4d01c20] Invalid slice size 26390. [hq_hqa @ 0x4d01c20] Not a HQ/HQA frame. Error while decoding stream #0:0: Invalid data found when processing input [hq_hqa @ 0x4d01c20] Invalid slice size 30368. [hq_hqa @ 0x4d01c20] Invalid slice size 30150. ==12470== Invalid write of size 4 ==12470== at 0x85A3FD7: hq_hqa_decode_frame (hq_hqa.c:344) ==12470== by 0xD0C9B6: ??? ==12470== Address 0x49c3f is not stack'd, malloc'd or (recently) free'd ==12470== ==12470== ==12470== Process terminating with default action of signal 11 (SIGSEGV) ==12470== Access not within mapped region at address 0x49C3F ==12470== at 0x85A3FD7: hq_hqa_decode_frame (hq_hqa.c:344) ==12470== by 0xD0C9B6: ??? ==12470== If you believe this happened as a result of a stack ==12470== overflow in your program's main thread (unlikely but ==12470== possible), you can try to increase the size of the ==12470== main thread stack using the --main-stacksize= flag. ==12470== The main thread stack size used in this run was 8388608. ==12470== ==12470== HEAP SUMMARY: ==12470== in use at exit: 1,571,873 bytes in 160 blocks ==12470== total heap usage: 4,138 allocs, 3,978 frees, 8,001,376 bytes allocated ==12470== ==12470== LEAK SUMMARY: ==12470== definitely lost: 0 bytes in 0 blocks ==12470== indirectly lost: 0 bytes in 0 blocks ==12470== possibly lost: 0 bytes in 0 blocks ==12470== still reachable: 1,571,873 bytes in 160 blocks ==12470== suppressed: 0 bytes in 0 blocks ==12470== Reachable blocks (those to which a pointer was found) are not shown. ==12470== To see them, rerun with: --leak-check=full --show-reachable=yes ==12470== ==12470== For counts of detected and suppressed errors, rerun with: -v ==12470== ERROR SUMMARY: 1 errors from 1 contexts (suppressed: 95 from 6) Segmentation fault
(gdb) r -i fuzz9.avi -f null - Starting program: /media/sdb1/ffmpeg/ffmpeg_g -i fuzz9.avi -f null - [Thread debugging using libthread_db enabled] Using host libthread_db library "/lib/i386-linux-gnu/libthread_db.so.1". ffmpeg version 2.6.git Copyright (c) 2000-2015 the FFmpeg developers built with gcc 4.7 (Debian 4.7.2-4) configuration: --disable-ffserver --disable-ffprobe --disable-ffplay --enable-gpl libavutil 54. 23.101 / 54. 23.101 libavcodec 56. 35.101 / 56. 35.101 libavformat 56. 31.100 / 56. 31.100 libavdevice 56. 4.100 / 56. 4.100 libavfilter 5. 14.100 / 5. 14.100 libswscale 3. 1.101 / 3. 1.101 libswresample 1. 1.100 / 1. 1.100 libpostproc 53. 3.100 / 53. 3.100 [avi @ 0x9557a40] Something went wrong during header parsing, I will ignore it and try to continue anyway. [hq_hqa @ 0x9558260] Invalid slice size 25116. Input #0, avi, from 'fuzz9.avi': Duration: 00:00:24.80, start: 0.000000, bitrate: 1146 kb/s Stream #0:0: Video: hq_hqa (CUVC / 0x43565543), yuv422p, 720x480 [SAR 9:10 DAR 27:20], 5 fps, 5 tbr, 5 tbn, 5 tbc Output #0, null, to 'pipe:': Metadata: encoder : Lavf56.31.100 Stream #0:0: Video: rawvideo (Y42B / 0x42323459), yuv422p, 720x480 [SAR 9:10 DAR 27:20], q=2-31, 200 kb/s, 5 fps, 5 tbn, 5 tbc Metadata: encoder : Lavc56.35.101 rawvideo Stream mapping: Stream #0:0 -> #0:0 (hq_hqa (native) -> rawvideo (native)) Press [q] to stop, [?] for help [hq_hqa @ 0x9558c80] Invalid slice size 25116. [null @ 0x9559bc0] Encoder did not produce proper pts, making some up. [hq_hqa @ 0x9558c80] Not a HQ/HQA frame. Error while decoding stream #0:0: Invalid data found when processing input [hq_hqa @ 0x9558c80] Invalid slice size 24696. [hq_hqa @ 0x9558c80] Not a HQ/HQA frame. Error while decoding stream #0:0: Invalid data found when processing input [hq_hqa @ 0x9558c80] Invalid slice size 28844. [hq_hqa @ 0x9558c80] HQ Profile 33 is not implemented. Update your FFmpeg version to the newest one from Git. If the problem still occurs, it means that your file has a feature which has not been implemented. [hq_hqa @ 0x9558c80] If you want to help, upload a sample of this file to ftp://upload.ffmpeg.org/incoming/ and contact the ffmpeg-devel mailing list. (ffmpeg-devel@ffmpeg.org) [hq_hqa @ 0x9558c80] Invalid slice size 29958. Input stream #0:0 frame changed from size:720x480 fmt:yuv422p to size:160x120 fmt:yuv422p [hq_hqa @ 0x9558c80] Invalid INFO size (268435480). Error while decoding stream #0:0: Invalid data found when processing input [hq_hqa @ 0x9558c80] Invalid slice size 1077982. Input stream #0:0 frame changed from size:160x120 fmt:yuv422p to size:720x480 fmt:yuv422p [hq_hqa @ 0x9558c80] Invalid INFO size (524304). Error while decoding stream #0:0: Invalid data found when processing input [hq_hqa @ 0x9558c80] Invalid INFO size (536870936). Error while decoding stream #0:0: Invalid data found when processing input [hq_hqa @ 0x9558c80] Not a HQ/HQA frame. Error while decoding stream #0:0: Invalid data found when processing input [hq_hqa @ 0x9558c80] Not a HQ/HQA frame. Error while decoding stream #0:0: Invalid data found when processing input [hq_hqa @ 0x9558c80] Not a HQ/HQA frame. Error while decoding stream #0:0: Invalid data found when processing input [hq_hqa @ 0x9558c80] Invalid INFO size (671089688). Error while decoding stream #0:0: Invalid data found when processing input [hq_hqa @ 0x9558c80] Not a HQ/HQA frame. Error while decoding stream #0:0: Invalid data found when processing input [hq_hqa @ 0x9558c80] Invalid slice size 28612. [hq_hqa @ 0x9558c80] Error decoding macroblock 0 at slice 5. [hq_hqa @ 0x9558c80] Error decoding frame. Error while decoding stream #0:0: Invalid data found when processing input [hq_hqa @ 0x9558c80] Invalid slice size 29198. [hq_hqa @ 0x9558c80] Invalid slice size 29732. [hq_hqa @ 0x9558c80] Not a HQ/HQA frame. Error while decoding stream #0:0: Invalid data found when processing input [hq_hqa @ 0x9558c80] Not a HQ/HQA frame. Error while decoding stream #0:0: Invalid data found when processing input [hq_hqa @ 0x9558c80] Invalid slice size 26448. [hq_hqa @ 0x9558c80] Not a HQ/HQA frame. Error while decoding stream #0:0: Invalid data found when processing input [hq_hqa @ 0x9558c80] Not a HQ/HQA frame. Error while decoding stream #0:0: Invalid data found when processing input [hq_hqa @ 0x9558c80] Not a HQ/HQA frame. Error while decoding stream #0:0: Invalid data found when processing input [hq_hqa @ 0x9558c80] Not a HQ/HQA frame. Error while decoding stream #0:0: Invalid data found when processing input [hq_hqa @ 0x9558c80] Invalid slice size 26390. [hq_hqa @ 0x9558c80] Not a HQ/HQA frame. Error while decoding stream #0:0: Invalid data found when processing input [hq_hqa @ 0x9558c80] Invalid slice size 30368. [hq_hqa @ 0x9558c80] Invalid slice size 30150. Program received signal SIGSEGV, Segmentation fault. hq_hqa_decode_frame (avctx=0x610a8, data=0x49beb, got_frame=0xb7d267, avpkt=0x762875) at libavcodec/hq_hqa.c:344 warning: Source file is more recent than executable. 344 pic->key_frame = 1; (gdb) bt #0 hq_hqa_decode_frame (avctx=0x610a8, data=0x49beb, got_frame=0xb7d267, avpkt=0x762875) at libavcodec/hq_hqa.c:344 #1 0x00d0c9b7 in ?? () #2 0x000610a8 in ?? () #3 0x00049beb in ?? () #4 0x00b7d267 in ?? () #5 0x00762875 in ?? () #6 0x00a8dd46 in ?? () #7 0xbffff31c in ?? () Backtrace stopped: previous frame inner to this frame (corrupt stack?) (gdb)
Attachments (1)
Change History (3)
by , 9 years ago
Attachment: | fuzz9_cut.avi added |
---|
comment:1 by , 9 years ago
Component: | undetermined → avcodec |
---|---|
Keywords: | hqa crash SIGSEGV regression added |
Priority: | normal → important |
Reproduced by developer: | set |
Version: | unspecified → git-master |
comment:2 by , 9 years ago
Resolution: | → duplicate |
---|---|
Status: | new → closed |
Duplicate of ticket #4509 - fixed in 653bf3c5a1505bbe2ae8c1c0899e79f4c84bc94a
Note:
See TracTickets
for help on using tickets.
Not reproducible on x86-64.