Context Navigation

#5210 closed defect (fixed)

cfhd: crash with fuzzed file 3

Reported by:	ami_stuff	Owned by:
Priority:	important	Component:	avcodec
Version:	git-master	Keywords:	cfhd crash SIGSEGV
Cc:		Blocked By:
Blocking:		Reproduced by developer:	yes
Analyzed by developer:	no

Description

http://www.datafilehost.com/d/c66d399c

aaa@aaa-VirtualBox /media/sdb1 $ valgrind --leak-check=full ffmpeg/ffmpeg_g -i cfhd_q_higherhd_fuzz.avi -f null -
==24127== Memcheck, a memory error detector
==24127== Copyright (C) 2002-2013, and GNU GPL'd, by Julian Seward et al.
==24127== Using Valgrind-3.10.1 and LibVEX; rerun with -h for copyright info
==24127== Command: ffmpeg/ffmpeg_g -i cfhd_q_higherhd_fuzz.avi -f null -
==24127== 
ffmpeg version 2.8.git Copyright (c) 2000-2016 the FFmpeg developers
  built with gcc 4.8 (Ubuntu 4.8.4-2ubuntu1~14.04)
  configuration: --disable-ffplay --disable-ffprobe --disable-ffserver --enable-gpl
  libavutil      55. 17.100 / 55. 17.100
  libavcodec     57. 24.101 / 57. 24.101
  libavformat    57. 23.101 / 57. 23.101
  libavdevice    57.  0.101 / 57.  0.101
  libavfilter     6. 28.100 /  6. 28.100
  libswscale      4.  0.100 /  4.  0.100
  libswresample   2.  0.101 /  2.  0.101
  libpostproc    54.  0.100 / 54.  0.100
==24127== Conditional jump or move depends on uninitialised value(s)
==24127==    at 0x83808EE: av_clip_uintp2_c (common.h:231)
==24127==    by 0x83808EE: filter (cfhd.c:113)
==24127==    by 0x83808EE: horiz_filter_clip (cfhd.c:130)
==24127==    by 0x83808EE: cfhd_decode (cfhd.c:715)
==24127==    by 0x8717EE5: avcodec_decode_video2 (utils.c:2125)
==24127==    by 0x83183D7: try_decode_frame (utils.c:2760)
==24127==    by 0x83231EB: avformat_find_stream_info (utils.c:3416)
==24127==    by 0x80CDAE2: open_input_file (ffmpeg_opt.c:970)
==24127==    by 0x80D309A: open_files (ffmpeg_opt.c:3006)
==24127==    by 0x80D309A: ffmpeg_parse_options (ffmpeg_opt.c:3043)
==24127==    by 0x80C16F9: main (ffmpeg.c:4297)
==24127== 
==24127== Conditional jump or move depends on uninitialised value(s)
==24127==    at 0x838092D: av_clip_uintp2_c (common.h:231)
==24127==    by 0x838092D: filter (cfhd.c:118)
==24127==    by 0x838092D: horiz_filter_clip (cfhd.c:130)
==24127==    by 0x838092D: cfhd_decode (cfhd.c:715)
==24127==    by 0x8717EE5: avcodec_decode_video2 (utils.c:2125)
==24127==    by 0x83183D7: try_decode_frame (utils.c:2760)
==24127==    by 0x83231EB: avformat_find_stream_info (utils.c:3416)
==24127==    by 0x80CDAE2: open_input_file (ffmpeg_opt.c:970)
==24127==    by 0x80D309A: open_files (ffmpeg_opt.c:3006)
==24127==    by 0x80D309A: ffmpeg_parse_options (ffmpeg_opt.c:3043)
==24127==    by 0x80C16F9: main (ffmpeg.c:4297)
==24127== 
==24127== Conditional jump or move depends on uninitialised value(s)
==24127==    at 0x83812B9: av_clip_uintp2_c (common.h:231)
==24127==    by 0x83812B9: filter (cfhd.c:103)
==24127==    by 0x83812B9: horiz_filter_clip (cfhd.c:130)
==24127==    by 0x83812B9: cfhd_decode (cfhd.c:715)
==24127==    by 0x8717EE5: avcodec_decode_video2 (utils.c:2125)
==24127==    by 0x83183D7: try_decode_frame (utils.c:2760)
==24127==    by 0x83231EB: avformat_find_stream_info (utils.c:3416)
==24127==    by 0x80CDAE2: open_input_file (ffmpeg_opt.c:970)
==24127==    by 0x80D309A: open_files (ffmpeg_opt.c:3006)
==24127==    by 0x80D309A: ffmpeg_parse_options (ffmpeg_opt.c:3043)
==24127==    by 0x80C16F9: main (ffmpeg.c:4297)
==24127== 
==24127== Conditional jump or move depends on uninitialised value(s)
==24127==    at 0x8381306: av_clip_uintp2_c (common.h:231)
==24127==    by 0x8381306: filter (cfhd.c:108)
==24127==    by 0x8381306: horiz_filter_clip (cfhd.c:130)
==24127==    by 0x8381306: cfhd_decode (cfhd.c:715)
==24127==    by 0x8717EE5: avcodec_decode_video2 (utils.c:2125)
==24127==    by 0x83183D7: try_decode_frame (utils.c:2760)
==24127==    by 0x83231EB: avformat_find_stream_info (utils.c:3416)
==24127==    by 0x80CDAE2: open_input_file (ffmpeg_opt.c:970)
==24127==    by 0x80D309A: open_files (ffmpeg_opt.c:3006)
==24127==    by 0x80D309A: ffmpeg_parse_options (ffmpeg_opt.c:3043)
==24127==    by 0x80C16F9: main (ffmpeg.c:4297)
==24127== 
==24127== Conditional jump or move depends on uninitialised value(s)
==24127==    at 0x8381353: av_clip_uintp2_c (common.h:231)
==24127==    by 0x8381353: filter (cfhd.c:93)
==24127==    by 0x8381353: horiz_filter_clip (cfhd.c:130)
==24127==    by 0x8381353: cfhd_decode (cfhd.c:715)
==24127==    by 0x8717EE5: avcodec_decode_video2 (utils.c:2125)
==24127==    by 0x83183D7: try_decode_frame (utils.c:2760)
==24127==    by 0x83231EB: avformat_find_stream_info (utils.c:3416)
==24127==    by 0x80CDAE2: open_input_file (ffmpeg_opt.c:970)
==24127==    by 0x80D309A: open_files (ffmpeg_opt.c:3006)
==24127==    by 0x80D309A: ffmpeg_parse_options (ffmpeg_opt.c:3043)
==24127==    by 0x80C16F9: main (ffmpeg.c:4297)
==24127== 
==24127== Conditional jump or move depends on uninitialised value(s)
==24127==    at 0x8381394: av_clip_uintp2_c (common.h:231)
==24127==    by 0x8381394: filter (cfhd.c:98)
==24127==    by 0x8381394: horiz_filter_clip (cfhd.c:130)
==24127==    by 0x8381394: cfhd_decode (cfhd.c:715)
==24127==    by 0x8717EE5: avcodec_decode_video2 (utils.c:2125)
==24127==    by 0x83183D7: try_decode_frame (utils.c:2760)
==24127==    by 0x83231EB: avformat_find_stream_info (utils.c:3416)
==24127==    by 0x80CDAE2: open_input_file (ffmpeg_opt.c:970)
==24127==    by 0x80D309A: open_files (ffmpeg_opt.c:3006)
==24127==    by 0x80D309A: ffmpeg_parse_options (ffmpeg_opt.c:3043)
==24127==    by 0x80C16F9: main (ffmpeg.c:4297)
==24127== 
Input #0, avi, from 'cfhd_q_higherhd_fuzz.avi':
  Duration: 00:00:12.64, start: 0.000000, bitrate: 5896 kb/s
    Stream #0:0: Video: cfhd (CFHD / 0x44484643), yuv422p10le, 320x240, 5905 kb/s, 23.97 fps, 23.97 tbr, 23.97 tbn, 23.97 tbc
Output #0, null, to 'pipe:':
  Metadata:
    encoder         : Lavf57.23.101
    Stream #0:0: Video: wrapped_avframe, yuv422p10le, 320x240, q=2-31, 200 kb/s, 23.97 fps, 23.97 tbn, 23.97 tbc
    Metadata:
      encoder         : Lavc57.24.101 wrapped_avframe
Stream mapping:
  Stream #0:0 -> #0:0 (cfhd (native) -> wrapped_avframe (native))
Press [q] to stop, [?] for help
==24127== Thread 7:
==24127== Conditional jump or move depends on uninitialised value(s)
==24127==    at 0x83808EE: av_clip_uintp2_c (common.h:231)
==24127==    by 0x83808EE: filter (cfhd.c:113)
==24127==    by 0x83808EE: horiz_filter_clip (cfhd.c:130)
==24127==    by 0x83808EE: cfhd_decode (cfhd.c:715)
==24127==    by 0x8661EC1: frame_worker_thread (pthread_frame.c:147)
==24127==    by 0x409BF6F: start_thread (pthread_create.c:312)
==24127==    by 0x419CBED: clone (clone.S:129)
==24127== 
==24127== Conditional jump or move depends on uninitialised value(s)
==24127==    at 0x838092D: av_clip_uintp2_c (common.h:231)
==24127==    by 0x838092D: filter (cfhd.c:118)
==24127==    by 0x838092D: horiz_filter_clip (cfhd.c:130)
==24127==    by 0x838092D: cfhd_decode (cfhd.c:715)
==24127==    by 0x8661EC1: frame_worker_thread (pthread_frame.c:147)
==24127==    by 0x409BF6F: start_thread (pthread_create.c:312)
==24127==    by 0x419CBED: clone (clone.S:129)
==24127== 
==24127== Conditional jump or move depends on uninitialised value(s)
==24127==    at 0x83812B9: av_clip_uintp2_c (common.h:231)
==24127==    by 0x83812B9: filter (cfhd.c:103)
==24127==    by 0x83812B9: horiz_filter_clip (cfhd.c:130)
==24127==    by 0x83812B9: cfhd_decode (cfhd.c:715)
==24127==    by 0x8661EC1: frame_worker_thread (pthread_frame.c:147)
==24127==    by 0x409BF6F: start_thread (pthread_create.c:312)
==24127==    by 0x419CBED: clone (clone.S:129)
==24127== 
==24127== Conditional jump or move depends on uninitialised value(s)
==24127==    at 0x8381306: av_clip_uintp2_c (common.h:231)
==24127==    by 0x8381306: filter (cfhd.c:108)
==24127==    by 0x8381306: horiz_filter_clip (cfhd.c:130)
==24127==    by 0x8381306: cfhd_decode (cfhd.c:715)
==24127==    by 0x8661EC1: frame_worker_thread (pthread_frame.c:147)
==24127==    by 0x409BF6F: start_thread (pthread_create.c:312)
==24127==    by 0x419CBED: clone (clone.S:129)
==24127== 
==24127== Conditional jump or move depends on uninitialised value(s)
==24127==    at 0x8381353: av_clip_uintp2_c (common.h:231)
==24127==    by 0x8381353: filter (cfhd.c:93)
==24127==    by 0x8381353: horiz_filter_clip (cfhd.c:130)
==24127==    by 0x8381353: cfhd_decode (cfhd.c:715)
==24127==    by 0x8661EC1: frame_worker_thread (pthread_frame.c:147)
==24127==    by 0x409BF6F: start_thread (pthread_create.c:312)
==24127==    by 0x419CBED: clone (clone.S:129)
==24127== 
==24127== Conditional jump or move depends on uninitialised value(s)
==24127==    at 0x8381394: av_clip_uintp2_c (common.h:231)
==24127==    by 0x8381394: filter (cfhd.c:98)
==24127==    by 0x8381394: horiz_filter_clip (cfhd.c:130)
==24127==    by 0x8381394: cfhd_decode (cfhd.c:715)
==24127==    by 0x8661EC1: frame_worker_thread (pthread_frame.c:147)
==24127==    by 0x409BF6F: start_thread (pthread_create.c:312)
==24127==    by 0x419CBED: clone (clone.S:129)
==24127== 
[cfhd @ 0x442da80] Escape codeword not found, probably corrupt data
[cfhd @ 0x4438820] Escape codeword not found, probably corrupt data
Error while decoding stream #0:0: Invalid argument
    Last message repeated 1 times
[cfhd @ 0x4422cc0] Escape codeword not found, probably corrupt data
Error while decoding stream #0:0: Invalid argument
[cfhd @ 0x44435c0] Escape codeword not found, probably corrupt data
[cfhd @ 0x4422cc0] Escape codeword not found, probably corrupt data
[cfhd @ 0x442da80] Escape codeword not found, probably corrupt data
Error while decoding stream #0:0: Invalid argument
[cfhd @ 0x4438820] Escape codeword not found, probably corrupt data
[cfhd @ 0x44435c0] Escape codeword not found, probably corrupt data
Error while decoding stream #0:0: Invalid argument
[cfhd @ 0x4402ce0] Escape codeword not found, probably corrupt data
Error while decoding stream #0:0: Invalid argument
[cfhd @ 0x4422cc0] Escape codeword not found, probably corrupt data
Error while decoding stream #0:0: Invalid argument
    Last message repeated 3 times
[cfhd @ 0x44435c0] Escape codeword not found, probably corrupt data
[cfhd @ 0x4438820] Escape codeword not found, probably corrupt data
[cfhd @ 0x4402ce0] Escape codeword not found, probably corrupt data
[cfhd @ 0x442da80] Escape codeword not found, probably corrupt data
Error while decoding stream #0:0: Invalid argument
[cfhd @ 0x4422cc0] Escape codeword not found, probably corrupt data
Error while decoding stream #0:0: Invalid argument
[cfhd @ 0x4438820] Escape codeword not found, probably corrupt data
[cfhd @ 0x442da80] Escape codeword not found, probably corrupt data
Error while decoding stream #0:0: Invalid argument
    Last message repeated 1 times
[cfhd @ 0x44435c0] Escape codeword not found, probably corrupt data
Error while decoding stream #0:0: Invalid argument
[cfhd @ 0x4402ce0] Escape codeword not found, probably corrupt data
Error while decoding stream #0:0: Invalid argument
    Last message repeated 1 times
[cfhd @ 0x442da80] Escape codeword not found, probably corrupt data
Error while decoding stream #0:0: Invalid argument
    Last message repeated 1 times
[cfhd @ 0x4438820] Escape codeword not found, probably corrupt data
[cfhd @ 0x4422cc0] Escape codeword not found, probably corrupt data
Error while decoding stream #0:0: Invalid argument
    Last message repeated 2 times
[cfhd @ 0x44435c0] Escape codeword not found, probably corrupt data
Error while decoding stream #0:0: Invalid argument
[cfhd @ 0x442da80] Escape codeword not found, probably corrupt data
[cfhd @ 0x4438820] Escape codeword not found, probably corrupt data
[cfhd @ 0x44435c0] Escape codeword not found, probably corrupt data
[cfhd @ 0x4402ce0] Escape codeword not found, probably corrupt dataeed=2.49x    
Error while decoding stream #0:0: Invalid argument
[cfhd @ 0x4422cc0] Escape codeword not found, probably corrupt data
Error while decoding stream #0:0: Invalid argument
[cfhd @ 0x442da80] Escape codeword not found, probably corrupt data
[cfhd @ 0x4438820] Escape codeword not found, probably corrupt data
Error while decoding stream #0:0: Invalid argument
[cfhd @ 0x44435c0] Escape codeword not found, probably corrupt data
Error while decoding stream #0:0: Invalid argument
    Last message repeated 3 times
[cfhd @ 0x442da80] Escape codeword not found, probably corrupt data
Error while decoding stream #0:0: Invalid argument
[cfhd @ 0x4422cc0] Escape codeword not found, probably corrupt data
[cfhd @ 0x44435c0] Escape codeword not found, probably corrupt data
[cfhd @ 0x4402ce0] Escape codeword not found, probably corrupt data
Error while decoding stream #0:0: Invalid argument
    Last message repeated 1 times
[cfhd @ 0x4422cc0] Escape codeword not found, probably corrupt data
[cfhd @ 0x442da80] Escape codeword not found, probably corrupt data
Error while decoding stream #0:0: Invalid argument
    Last message repeated 2 times
[cfhd @ 0x4438820] Escape codeword not found, probably corrupt data
Error while decoding stream #0:0: Invalid argument
[cfhd @ 0x4402ce0] Escape codeword not found, probably corrupt data
[cfhd @ 0x4422cc0] Escape codeword not found, probably corrupt data
Error while decoding stream #0:0: Invalid argument
[cfhd @ 0x442da80] Escape codeword not found, probably corrupt data
Error while decoding stream #0:0: Invalid argument
    Last message repeated 2 times
[cfhd @ 0x4422cc0] Escape codeword not found, probably corrupt data
[cfhd @ 0x4402ce0] Escape codeword not found, probably corrupt data
[cfhd @ 0x44435c0] Escape codeword not found, probably corrupt data
Error while decoding stream #0:0: Invalid argument
    Last message repeated 1 times
[cfhd @ 0x4422cc0] Escape codeword not found, probably corrupt data
[cfhd @ 0x4402ce0] Escape codeword not found, probably corrupt data
[cfhd @ 0x442da80] Escape codeword not found, probably corrupt data
Error while decoding stream #0:0: Invalid argument
[cfhd @ 0x442da80] Escape codeword not found, probably corrupt data
Error while decoding stream #0:0: Invalid argument
    Last message repeated 1 times
[cfhd @ 0x44435c0] Escape codeword not found, probably corrupt data
Error while decoding stream #0:0: Invalid argument
    Last message repeated 1 times
[cfhd @ 0x442da80] Escape codeword not found, probably corrupt data
[cfhd @ 0x4438820] Escape codeword not found, probably corrupt data
Error while decoding stream #0:0: Invalid argument
    Last message repeated 1 times
[cfhd @ 0x4438820] Escape codeword not found, probably corrupt data
[cfhd @ 0x4402ce0] Escape codeword not found, probably corrupt dataeed=2.56x    
Error while decoding stream #0:0: Invalid argument
    Last message repeated 1 times
[cfhd @ 0x442da80] Escape codeword not found, probably corrupt data
Error while decoding stream #0:0: Invalid argument
[cfhd @ 0x44435c0] Escape codeword not found, probably corrupt data
[cfhd @ 0x4402ce0] Escape codeword not found, probably corrupt data
Error while decoding stream #0:0: Invalid argument
    Last message repeated 1 times
[cfhd @ 0x4438820] Escape codeword not found, probably corrupt data
Error while decoding stream #0:0: Invalid argument
[cfhd @ 0x4402ce0] Escape codeword not found, probably corrupt data
[cfhd @ 0x442da80] Escape codeword not found, probably corrupt data
[cfhd @ 0x44435c0] Escape codeword not found, probably corrupt data
Error while decoding stream #0:0: Invalid argument
    Last message repeated 3 times
[cfhd @ 0x4422cc0] Escape codeword not found, probably corrupt data
[cfhd @ 0x442da80] Escape codeword not found, probably corrupt data
[cfhd @ 0x44435c0] Escape codeword not found, probably corrupt data
[cfhd @ 0x4438820] Escape codeword not found, probably corrupt data
Error while decoding stream #0:0: Invalid argument
    Last message repeated 3 times
[cfhd @ 0x44435c0] Escape codeword not found, probably corrupt data
[cfhd @ 0x4438820] Escape codeword not found, probably corrupt data
[cfhd @ 0x4422cc0] Escape codeword not found, probably corrupt data
Error while decoding stream #0:0: Invalid argument
[cfhd @ 0x4402ce0] Escape codeword not found, probably corrupt data
Error while decoding stream #0:0: Invalid argument
    Last message repeated 1 times
[cfhd @ 0x4438820] Escape codeword not found, probably corrupt data
Error while decoding stream #0:0: Invalid argument
[cfhd @ 0x442da80] Escape codeword not found, probably corrupt data
[cfhd @ 0x4402ce0] Escape codeword not found, probably corrupt data
Error while decoding stream #0:0: Invalid argument
[cfhd @ 0x44435c0] Escape codeword not found, probably corrupt data
Error while decoding stream #0:0: Invalid argument
    Last message repeated 2 times
[cfhd @ 0x44435c0] Escape codeword not found, probably corrupt data
[cfhd @ 0x4438820] Escape codeword not found, probably corrupt data
[cfhd @ 0x4402ce0] Escape codeword not found, probably corrupt data
Error while decoding stream #0:0: Invalid argument
    Last message repeated 2 times
[cfhd @ 0x442da80] Escape codeword not found, probably corrupt dataeed=2.65x    
[cfhd @ 0x44435c0] Escape codeword not found, probably corrupt data
Error while decoding stream #0:0: Invalid argument
[cfhd @ 0x442da80] Escape codeword not found, probably corrupt data
Error while decoding stream #0:0: Invalid argument
[cfhd @ 0x4422cc0] Escape codeword not found, probably corrupt data
[cfhd @ 0x4438820] Escape codeword not found, probably corrupt data
Error while decoding stream #0:0: Invalid argument
[cfhd @ 0x4402ce0] Escape codeword not found, probably corrupt data
Error while decoding stream #0:0: Invalid argument
    Last message repeated 1 times
[cfhd @ 0x4438820] Escape codeword not found, probably corrupt data
Error while decoding stream #0:0: Invalid argument
[cfhd @ 0x44435c0] Escape codeword not found, probably corrupt data
[cfhd @ 0x4422cc0] Escape codeword not found, probably corrupt data
Error while decoding stream #0:0: Invalid argument
    Last message repeated 1 times
[cfhd @ 0x44435c0] Escape codeword not found, probably corrupt data
[cfhd @ 0x4438820] Escape codeword not found, probably corrupt data
[cfhd @ 0x442da80] Escape codeword not found, probably corrupt data
Error while decoding stream #0:0: Invalid argument
    Last message repeated 1 times
[cfhd @ 0x4422cc0] Escape codeword not found, probably corrupt data
Error while decoding stream #0:0: Invalid argument
    Last message repeated 1 times
[cfhd @ 0x4438820] Escape codeword not found, probably corrupt data
[cfhd @ 0x4402ce0] Escape codeword not found, probably corrupt data
Error while decoding stream #0:0: Invalid argument
    Last message repeated 1 times
[cfhd @ 0x4422cc0] Escape codeword not found, probably corrupt data
Error while decoding stream #0:0: Invalid argument
[cfhd @ 0x442da80] Escape codeword not found, probably corrupt data
[cfhd @ 0x4438820] Escape codeword not found, probably corrupt data
[cfhd @ 0x44435c0] Escape codeword not found, probably corrupt data
Error while decoding stream #0:0: Invalid argument
    Last message repeated 3 times
[cfhd @ 0x4402ce0] Escape codeword not found, probably corrupt data
[cfhd @ 0x4438820] Escape codeword not found, probably corrupt data
Error while decoding stream #0:0: Invalid argument
[cfhd @ 0x4402ce0] Escape codeword not found, probably corrupt data
[cfhd @ 0x44435c0] Escape codeword not found, probably corrupt data
[cfhd @ 0x442da80] Escape codeword not found, probably corrupt data
Error while decoding stream #0:0: Invalid argument
    Last message repeated 3 times
[cfhd @ 0x44435c0] Escape codeword not found, probably corrupt data
[cfhd @ 0x4402ce0] Escape codeword not found, probably corrupt data
[cfhd @ 0x442da80] Escape codeword not found, probably corrupt data
[cfhd @ 0x4422cc0] Escape codeword not found, probably corrupt data
Error while decoding stream #0:0: Invalid argument
Error while decoding stream #0:0: Invalid argument50 bitrate=N/A speed= 2.6x    
    Last message repeated 1 times
[cfhd @ 0x442da80] Escape codeword not found, probably corrupt data
Error while decoding stream #0:0: Invalid argument
[cfhd @ 0x4422cc0] Escape codeword not found, probably corrupt data
[cfhd @ 0x4438820] Escape codeword not found, probably corrupt data
Error while decoding stream #0:0: Invalid argument
    Last message repeated 2 times
[cfhd @ 0x442da80] Escape codeword not found, probably corrupt data
[cfhd @ 0x4402ce0] Escape codeword not found, probably corrupt data
Error while decoding stream #0:0: Invalid argument
[cfhd @ 0x4402ce0] Escape codeword not found, probably corrupt data
Error while decoding stream #0:0: Invalid argument
[cfhd @ 0x44435c0] Escape codeword not found, probably corrupt data
[cfhd @ 0x4438820] Escape codeword not found, probably corrupt data
[cfhd @ 0x4422cc0] Escape codeword not found, probably corrupt data
Error while decoding stream #0:0: Invalid argument
    Last message repeated 2 times
[cfhd @ 0x44435c0] Escape codeword not found, probably corrupt data
[cfhd @ 0x4422cc0] Escape codeword not found, probably corrupt data
[cfhd @ 0x4402ce0] Escape codeword not found, probably corrupt data
Error while decoding stream #0:0: Invalid argument
    Last message repeated 1 times
[cfhd @ 0x4438820] Escape codeword not found, probably corrupt data
Error while decoding stream #0:0: Invalid argument
    Last message repeated 1 times
[cfhd @ 0x44435c0] Too many highpass coefficents
[cfhd @ 0x4402ce0] Escape codeword not found, probably corrupt data
Error while decoding stream #0:0: Invalid argument
    Last message repeated 2 times
[cfhd @ 0x4402ce0] Escape codeword not found, probably corrupt data
[cfhd @ 0x4438820] Escape codeword not found, probably corrupt data
[cfhd @ 0x44435c0] Escape codeword not found, probably corrupt data
Error while decoding stream #0:0: Invalid argument
    Last message repeated 1 times
[cfhd @ 0x4438820] Escape codeword not found, probably corrupt data
Error while decoding stream #0:0: Invalid argument
[cfhd @ 0x442da80] Escape codeword not found, probably corrupt data
[cfhd @ 0x44435c0] Escape codeword not found, probably corrupt data
[cfhd @ 0x4402ce0] Escape codeword not found, probably corrupt data
Error while decoding stream #0:0: Invalid argument
    Last message repeated 1 times
[cfhd @ 0x4422cc0] Escape codeword not found, probably corrupt data
Error while decoding stream #0:0: Invalid argument
    Last message repeated 1 times
Error while decoding stream #0:0: Invalid argument96 bitrate=N/A speed=2.64x    
[cfhd @ 0x442da80] Escape codeword not found, probably corrupt data
Error while decoding stream #0:0: Invalid argument
[cfhd @ 0x44435c0] Escape codeword not found, probably corrupt data
[cfhd @ 0x4438820] Escape codeword not found, probably corrupt data
Error while decoding stream #0:0: Invalid argument
    Last message repeated 1 times
[cfhd @ 0x4438820] Escape codeword not found, probably corrupt data
[cfhd @ 0x44435c0] Escape codeword not found, probably corrupt data
[cfhd @ 0x4422cc0] Escape codeword not found, probably corrupt data
Error while decoding stream #0:0: Invalid argument
    Last message repeated 1 times
[cfhd @ 0x4402ce0] Escape codeword not found, probably corrupt data
Error while decoding stream #0:0: Invalid argument
[cfhd @ 0x44435c0] Escape codeword not found, probably corrupt data
[cfhd @ 0x4438820] Escape codeword not found, probably corrupt data
Error while decoding stream #0:0: Invalid argument
[cfhd @ 0x4402ce0] Escape codeword not found, probably corrupt data
[cfhd @ 0x442da80] Escape codeword not found, probably corrupt data
Error while decoding stream #0:0: Invalid argument
    Last message repeated 2 times
[cfhd @ 0x442da80] Escape codeword not found, probably corrupt data
Error while decoding stream #0:0: Invalid argument
[cfhd @ 0x44435c0] Escape codeword not found, probably corrupt data
Error while decoding stream #0:0: Invalid argument
[cfhd @ 0x4422cc0] Escape codeword not found, probably corrupt data
Error while decoding stream #0:0: Invalid argument
[cfhd @ 0x442da80] Escape codeword not found, probably corrupt data
[cfhd @ 0x44435c0] Invalid subband number
Error while decoding stream #0:0: Invalid argument
    Last message repeated 1 times
[cfhd @ 0x442da80] Escape codeword not found, probably corrupt data
Error while decoding stream #0:0: Invalid argument
Input stream #0:0 frame changed from size:320x240 fmt:yuv422p10le to size:324x240 fmt:yuv422p10le
==24127== Thread 11:
==24127== Invalid write of size 2
==24127==    at 0x837FC58: cfhd_decode (cfhd.c:523)
==24127==    by 0x8661EC1: frame_worker_thread (pthread_frame.c:147)
==24127==    by 0x409BF6F: start_thread (pthread_create.c:312)
==24127==    by 0x419CBED: clone (clone.S:129)
==24127==  Address 0x18 is not stack'd, malloc'd or (recently) free'd
==24127== 
==24127== 
==24127== Process terminating with default action of signal 11 (SIGSEGV)
==24127==  Access not within mapped region at address 0x18
==24127==    at 0x837FC58: cfhd_decode (cfhd.c:523)
==24127==    by 0x8661EC1: frame_worker_thread (pthread_frame.c:147)
==24127==    by 0x409BF6F: start_thread (pthread_create.c:312)
==24127==    by 0x419CBED: clone (clone.S:129)
==24127==  If you believe this happened as a result of a stack
==24127==  overflow in your program's main thread (unlikely but
==24127==  possible), you can try to increase the size of the
==24127==  main thread stack using the --main-stacksize= flag.
==24127==  The main thread stack size used in this run was 8388608.
==24127== 
==24127== HEAP SUMMARY:
==24127==     in use at exit: 7,235,766 bytes in 253 blocks
==24127==   total heap usage: 3,998 allocs, 3,745 frees, 16,326,111 bytes allocated
==24127== 
==24127== Thread 1:
==24127== 680 bytes in 5 blocks are possibly lost in loss record 79 of 102
==24127==    at 0x402C109: calloc (in /usr/lib/valgrind/vgpreload_memcheck-x86-linux.so)
==24127==    by 0x401117E: allocate_dtv (dl-tls.c:296)
==24127==    by 0x40118EB: _dl_allocate_tls (dl-tls.c:460)
==24127==    by 0x409C7A2: allocate_stack (allocatestack.c:589)
==24127==    by 0x409C7A2: pthread_create@@GLIBC_2.1 (pthread_create.c:500)
==24127==    by 0x810D2A9: thread_init_internal (pthread.c:180)
==24127==    by 0x810D2A9: ff_graph_thread_init (pthread.c:211)
==24127==    by 0x81004A7: avfilter_graph_alloc_filter (avfiltergraph.c:182)
==24127==    by 0x810B535: create_filter (graphparser.c:114)
==24127==    by 0x810B535: parse_filter (graphparser.c:176)
==24127==    by 0x810BF9C: avfilter_graph_parse2 (graphparser.c:411)
==24127==    by 0x80D5F6E: configure_filtergraph (ffmpeg_filter.c:1002)
==24127==    by 0x80DF30A: transcode_init (ffmpeg.c:3042)
==24127==    by 0x80E34FD: transcode (ffmpeg.c:4099)
==24127==    by 0x80C1754: main (ffmpeg.c:4319)
==24127== 
==24127== 680 bytes in 5 blocks are possibly lost in loss record 80 of 102
==24127==    at 0x402C109: calloc (in /usr/lib/valgrind/vgpreload_memcheck-x86-linux.so)
==24127==    by 0x401117E: allocate_dtv (dl-tls.c:296)
==24127==    by 0x40118EB: _dl_allocate_tls (dl-tls.c:460)
==24127==    by 0x409C7A2: allocate_stack (allocatestack.c:589)
==24127==    by 0x409C7A2: pthread_create@@GLIBC_2.1 (pthread_create.c:500)
==24127==    by 0x8662FF3: ff_frame_thread_init (pthread_frame.c:706)
==24127==    by 0x871C0FE: avcodec_open2 (utils.c:1330)
==24127==    by 0x80DDD04: init_input_stream (ffmpeg.c:2548)
==24127==    by 0x80DDD04: transcode_init (ffmpeg.c:3206)
==24127==    by 0x80E34FD: transcode (ffmpeg.c:4099)
==24127==    by 0x80C1754: main (ffmpeg.c:4319)
==24127== 
==24127== LEAK SUMMARY:
==24127==    definitely lost: 0 bytes in 0 blocks
==24127==    indirectly lost: 0 bytes in 0 blocks
==24127==      possibly lost: 1,360 bytes in 10 blocks
==24127==    still reachable: 7,234,406 bytes in 243 blocks
==24127==         suppressed: 0 bytes in 0 blocks
==24127== Reachable blocks (those to which a pointer was found) are not shown.
==24127== To see them, rerun with: --leak-check=full --show-leak-kinds=all
==24127== 
==24127== For counts of detected and suppressed errors, rerun with: -v
==24127== Use --track-origins=yes to see where uninitialised values come from
==24127== ERROR SUMMARY: 14560 errors from 15 contexts (suppressed: 0 from 0)
Killed

(gdb) r -i cfhd_q_higherhd_fuzz.avi -f null -
Starting program: /media/sdb1/ffmpeg/ffmpeg_g -i cfhd_q_higherhd_fuzz.avi -f null -
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib/i386-linux-gnu/libthread_db.so.1".
ffmpeg version 2.8.git Copyright (c) 2000-2016 the FFmpeg developers
  built with gcc 4.8 (Ubuntu 4.8.4-2ubuntu1~14.04)
  configuration: --disable-ffplay --disable-ffprobe --disable-ffserver --enable-gpl
  libavutil      55. 17.100 / 55. 17.100
  libavcodec     57. 24.101 / 57. 24.101
  libavformat    57. 23.101 / 57. 23.101
  libavdevice    57.  0.101 / 57.  0.101
  libavfilter     6. 28.100 /  6. 28.100
  libswscale      4.  0.100 /  4.  0.100
  libswresample   2.  0.101 /  2.  0.101
  libpostproc    54.  0.100 / 54.  0.100
Input #0, avi, from 'cfhd_q_higherhd_fuzz.avi':
  Duration: 00:00:12.64, start: 0.000000, bitrate: 5896 kb/s
    Stream #0:0: Video: cfhd (CFHD / 0x44484643), yuv422p10le, 320x240, 5905 kb/s, 23.97 fps, 23.97 tbr, 23.97 tbn, 23.97 tbc
[New Thread 0xb7daeb40 (LWP 26326)]
[New Thread 0xb75adb40 (LWP 26327)]
[New Thread 0xb6dacb40 (LWP 26328)]
[New Thread 0xb65abb40 (LWP 26329)]
[New Thread 0xb5daab40 (LWP 26330)]
[New Thread 0xb55a9b40 (LWP 26331)]
[New Thread 0xb4da8b40 (LWP 26332)]
[New Thread 0xb45a7b40 (LWP 26333)]
[New Thread 0xb3da6b40 (LWP 26334)]
[New Thread 0xb35a5b40 (LWP 26335)]
Output #0, null, to 'pipe:':
  Metadata:
    encoder         : Lavf57.23.101
    Stream #0:0: Video: wrapped_avframe, yuv422p10le, 320x240, q=2-31, 200 kb/s, 23.97 fps, 23.97 tbn, 23.97 tbc
    Metadata:
      encoder         : Lavc57.24.101 wrapped_avframe
Stream mapping:
  Stream #0:0 -> #0:0 (cfhd (native) -> wrapped_avframe (native))
Press [q] to stop, [?] for help
[cfhd @ 0x9673740] Escape codeword not found, probably corrupt data
[cfhd @ 0x9674340] Escape codeword not found, probably corrupt data
[cfhd @ 0x9673d40] Escape codeword not found, probably corrupt data
Error while decoding stream #0:0: Invalid argument
    Last message repeated 1 times
[cfhd @ 0x965b5c0] Escape codeword not found, probably corrupt data
Error while decoding stream #0:0: Invalid argument
[cfhd @ 0x9673740] Escape codeword not found, probably corrupt data
[cfhd @ 0x9673d40] Escape codeword not found, probably corrupt data
Error while decoding stream #0:0: Invalid argument
[cfhd @ 0x9674340] Escape codeword not found, probably corrupt data
[cfhd @ 0x965b5c0] Escape codeword not found, probably corrupt data
Error while decoding stream #0:0: Invalid argument
[cfhd @ 0x9673140] Escape codeword not found, probably corrupt data
[cfhd @ 0x9673740] Escape codeword not found, probably corrupt data
Error while decoding stream #0:0: Invalid argument
    Last message repeated 2 times
[cfhd @ 0x9674340] Escape codeword not found, probably corrupt data
Error while decoding stream #0:0: Invalid argument
[cfhd @ 0x9673d40] Escape codeword not found, probably corrupt data
Error while decoding stream #0:0: Invalid argument
[cfhd @ 0x965b5c0] Escape codeword not found, probably corrupt data
[cfhd @ 0x9673140] Escape codeword not found, probably corrupt data
[cfhd @ 0x9673740] Escape codeword not found, probably corrupt data
Error while decoding stream #0:0: Invalid argument
    Last message repeated 2 times
[cfhd @ 0x9674340] Escape codeword not found, probably corrupt data
Error while decoding stream #0:0: Invalid argument
    Last message repeated 1 times
[cfhd @ 0x9673d40] Escape codeword not found, probably corrupt data
[cfhd @ 0x965b5c0] Escape codeword not found, probably corrupt data
[cfhd @ 0x9673140] Escape codeword not found, probably corrupt data
[cfhd @ 0x9673740] Escape codeword not found, probably corrupt data
Error while decoding stream #0:0: Invalid argument
    Last message repeated 2 times
[cfhd @ 0x9673d40] Escape codeword not found, probably corrupt data
[cfhd @ 0x9674340] Escape codeword not found, probably corrupt data
Error while decoding stream #0:0: Invalid argument
    Last message repeated 1 times
[cfhd @ 0x965b5c0] Escape codeword not found, probably corrupt data
Error while decoding stream #0:0: Invalid argument
    Last message repeated 1 times
[cfhd @ 0x9673d40] Escape codeword not found, probably corrupt data
Error while decoding stream #0:0: Invalid argument
[cfhd @ 0x9674340] Escape codeword not found, probably corrupt data
[cfhd @ 0x965b5c0] Escape codeword not found, probably corrupt data
[cfhd @ 0x9673140] Escape codeword not found, probably corrupt data
Error while decoding stream #0:0: Invalid argument
    Last message repeated 1 times
[cfhd @ 0x9673d40] Escape codeword not found, probably corrupt data
Error while decoding stream #0:0: Invalid argument
[cfhd @ 0x9673740] Escape codeword not found, probably corrupt data
Error while decoding stream #0:0: Invalid argument
[cfhd @ 0x9674340] Escape codeword not found, probably corrupt data
Error while decoding stream #0:0: Invalid argument
[cfhd @ 0x9673740] Escape codeword not found, probably corrupt data
Error while decoding stream #0:0: Invalid argument
    Last message repeated 1 times
[cfhd @ 0x9673d40] Escape codeword not found, probably corrupt data
[cfhd @ 0x965b5c0] Escape codeword not found, probably corrupt data
Error while decoding stream #0:0: Invalid argument
    Last message repeated 1 times
[cfhd @ 0x9673140] Escape codeword not found, probably corrupt data
[cfhd @ 0x9673740] Escape codeword not found, probably corrupt data
Error while decoding stream #0:0: Invalid argument
[cfhd @ 0x965b5c0] Escape codeword not found, probably corrupt data
[cfhd @ 0x9673d40] Escape codeword not found, probably corrupt data
Error while decoding stream #0:0: Invalid argument
[cfhd @ 0x9674340] Escape codeword not found, probably corrupt data
Error while decoding stream #0:0: Invalid argument
    Last message repeated 1 times
[cfhd @ 0x9673140] Escape codeword not found, probably corrupt data
[cfhd @ 0x9673740] Escape codeword not found, probably corrupt data
Error while decoding stream #0:0: Invalid argument
    Last message repeated 1 times
[cfhd @ 0x9673d40] Escape codeword not found, probably corrupt data
Error while decoding stream #0:0: Invalid argument
    Last message repeated 2 times
[cfhd @ 0x9673740] Escape codeword not found, probably corrupt data
[cfhd @ 0x9673140] Escape codeword not found, probably corrupt data
[cfhd @ 0x9673d40] Escape codeword not found, probably corrupt data
Error while decoding stream #0:0: Invalid argument
    Last message repeated 1 times
[cfhd @ 0x965b5c0] Escape codeword not found, probably corrupt data
Error while decoding stream #0:0: Invalid argument
[cfhd @ 0x9673140] Escape codeword not found, probably corrupt data
[cfhd @ 0x9673740] Escape codeword not found, probably corrupt data
[cfhd @ 0x9673d40] Escape codeword not found, probably corrupt data
Error while decoding stream #0:0: Invalid argument
    Last message repeated 1 times
[cfhd @ 0x9674340] Escape codeword not found, probably corrupt data
Error while decoding stream #0:0: Invalid argument
    Last message repeated 1 times
[cfhd @ 0x9673d40] Escape codeword not found, probably corrupt data
Error while decoding stream #0:0: Invalid argument
[cfhd @ 0x9674340] Escape codeword not found, probably corrupt data
[cfhd @ 0x965b5c0] Escape codeword not found, probably corrupt data
Error while decoding stream #0:0: Invalid argument
    Last message repeated 2 times
[cfhd @ 0x9673d40] Escape codeword not found, probably corrupt data
[cfhd @ 0x9673140] Escape codeword not found, probably corrupt data
Error while decoding stream #0:0: Invalid argument
    Last message repeated 1 times
[cfhd @ 0x9673d40] Escape codeword not found, probably corrupt data
[cfhd @ 0x9673140] Escape codeword not found, probably corrupt data
[cfhd @ 0x965b5c0] Escape codeword not found, probably corrupt data
Error while decoding stream #0:0: Invalid argument
    Last message repeated 2 times
[cfhd @ 0x9673740] Escape codeword not found, probably corrupt data
[cfhd @ 0x9673d40] Escape codeword not found, probably corrupt data
[cfhd @ 0x9673140] Escape codeword not found, probably corrupt data
[cfhd @ 0x965b5c0] Escape codeword not found, probably corrupt data
[cfhd @ 0x9674340] Escape codeword not found, probably corrupt data
Error while decoding stream #0:0: Invalid argument
    Last message repeated 4 times
[cfhd @ 0x9673740] Escape codeword not found, probably corrupt data
[cfhd @ 0x965b5c0] Escape codeword not found, probably corrupt data
[cfhd @ 0x9674340] Escape codeword not found, probably corrupt data
Error while decoding stream #0:0: Invalid argument
    Last message repeated 2 times
[cfhd @ 0x965b5c0] Escape codeword not found, probably corrupt data
[cfhd @ 0x9674340] Escape codeword not found, probably corrupt data
Error while decoding stream #0:0: Invalid argument
[cfhd @ 0x9673d40] Escape codeword not found, probably corrupt data
Error while decoding stream #0:0: Invalid argument
[cfhd @ 0x965b5c0] Escape codeword not found, probably corrupt data
[cfhd @ 0x9674340] Escape codeword not found, probably corrupt data
[cfhd @ 0x9673140] Escape codeword not found, probably corrupt data
Error while decoding stream #0:0: Invalid argument
    Last message repeated 3 times
[cfhd @ 0x965b5c0] Escape codeword not found, probably corrupt data
[cfhd @ 0x9674340] Escape codeword not found, probably corrupt data
[cfhd @ 0x9673140] Escape codeword not found, probably corrupt data
Error while decoding stream #0:0: Invalid argument
    Last message repeated 2 times
[cfhd @ 0x9673d40] Escape codeword not found, probably corrupt data
[cfhd @ 0x965b5c0] Escape codeword not found, probably corrupt data
[cfhd @ 0x9673140] Escape codeword not found, probably corrupt data
Error while decoding stream #0:0: Invalid argument
    Last message repeated 1 times
[cfhd @ 0x9673d40] Escape codeword not found, probably corrupt data
Error while decoding stream #0:0: Invalid argument
[cfhd @ 0x9673740] Escape codeword not found, probably corrupt data
[cfhd @ 0x9674340] Escape codeword not found, probably corrupt data
Error while decoding stream #0:0: Invalid argument
    Last message repeated 2 times
[cfhd @ 0x965b5c0] Escape codeword not found, probably corrupt data
[cfhd @ 0x9674340] Escape codeword not found, probably corrupt data
[cfhd @ 0x9673140] Escape codeword not found, probably corrupt data
Error while decoding stream #0:0: Invalid argument
    Last message repeated 1 times
[cfhd @ 0x9673d40] Escape codeword not found, probably corrupt data
Error while decoding stream #0:0: Invalid argument
[cfhd @ 0x9673740] Escape codeword not found, probably corrupt data
[cfhd @ 0x9674340] Escape codeword not found, probably corrupt data
Error while decoding stream #0:0: Invalid argument
[cfhd @ 0x9673140] Escape codeword not found, probably corrupt data
Error while decoding stream #0:0: Invalid argument
    Last message repeated 1 times
[cfhd @ 0x9674340] Escape codeword not found, probably corrupt data
[cfhd @ 0x9673740] Escape codeword not found, probably corrupt data
[cfhd @ 0x965b5c0] Escape codeword not found, probably corrupt data
Error while decoding stream #0:0: Invalid argument
    Last message repeated 3 times
[cfhd @ 0x9673740] Escape codeword not found, probably corrupt data
[cfhd @ 0x9673d40] Escape codeword not found, probably corrupt data
[cfhd @ 0x965b5c0] Escape codeword not found, probably corrupt data
[cfhd @ 0x9674340] Escape codeword not found, probably corrupt data
Error while decoding stream #0:0: Invalid argument
    Last message repeated 3 times
[cfhd @ 0x9673d40] Escape codeword not found, probably corrupt data
[cfhd @ 0x9674340] Escape codeword not found, probably corrupt data
[cfhd @ 0x9673140] Escape codeword not found, probably corrupt data
Error while decoding stream #0:0: Invalid argument
    Last message repeated 1 times
[cfhd @ 0x9673140] Escape codeword not found, probably corrupt data
[cfhd @ 0x9673740] Escape codeword not found, probably corrupt data
[cfhd @ 0x965b5c0] Escape codeword not found, probably corrupt data
Error while decoding stream #0:0: Invalid argument
[cfhd @ 0x9673d40] Escape codeword not found, probably corrupt data
Error while decoding stream #0:0: Invalid argument
    Last message repeated 3 times
[cfhd @ 0x9673140] Escape codeword not found, probably corrupt data
[cfhd @ 0x9674340] Escape codeword not found, probably corrupt data
[cfhd @ 0x965b5c0] Escape codeword not found, probably corrupt data
[cfhd @ 0x9673740] Escape codeword not found, probably corrupt data
Error while decoding stream #0:0: Invalid argument
    Last message repeated 1 times
[cfhd @ 0x9673d40] Escape codeword not found, probably corrupt data
Error while decoding stream #0:0: Invalid argument
    Last message repeated 1 times
[cfhd @ 0x9673140] Escape codeword not found, probably corrupt data
Error while decoding stream #0:0: Invalid argument
[cfhd @ 0x9673d40] Escape codeword not found, probably corrupt data
Error while decoding stream #0:0: Invalid argument
    Last message repeated 1 times
[cfhd @ 0x9673140] Escape codeword not found, probably corrupt data
[cfhd @ 0x9674340] Escape codeword not found, probably corrupt data
[cfhd @ 0x965b5c0] Escape codeword not found, probably corrupt data
Error while decoding stream #0:0: Invalid argument
    Last message repeated 1 times
[cfhd @ 0x9673140] Escape codeword not found, probably corrupt data
[cfhd @ 0x965b5c0] Escape codeword not found, probably corrupt data
[cfhd @ 0x9673740] Escape codeword not found, probably corrupt data
Error while decoding stream #0:0: Invalid argument
[cfhd @ 0x9673740] Escape codeword not found, probably corrupt data
Error while decoding stream #0:0: Invalid argument
    Last message repeated 3 times
[cfhd @ 0x9674340] Escape codeword not found, probably corrupt data
[cfhd @ 0x965b5c0] Too many highpass coefficents
Error while decoding stream #0:0: Invalid argument
    Last message repeated 1 times
[cfhd @ 0x9673140] Escape codeword not found, probably corrupt data
[cfhd @ 0x9674340] Escape codeword not found, probably corrupt data
Error while decoding stream #0:0: Invalid argument
[cfhd @ 0x965b5c0] Escape codeword not found, probably corrupt data
[cfhd @ 0x9673140] Escape codeword not found, probably corrupt data
Error while decoding stream #0:0: Invalid argument
    Last message repeated 1 times
[cfhd @ 0x9673d40] Escape codeword not found, probably corrupt data
Error while decoding stream #0:0: Invalid argument
[cfhd @ 0x9674340] Escape codeword not found, probably corrupt data
[cfhd @ 0x965b5c0] Escape codeword not found, probably corrupt data
[cfhd @ 0x9673140] Escape codeword not found, probably corrupt data
Error while decoding stream #0:0: Invalid argument
    Last message repeated 1 times
[cfhd @ 0x9673d40] Escape codeword not found, probably corrupt data
Error while decoding stream #0:0: Invalid argument
[cfhd @ 0x9673740] Escape codeword not found, probably corrupt data
Error while decoding stream #0:0: Invalid argument
    Last message repeated 1 times
[cfhd @ 0x965b5c0] Escape codeword not found, probably corrupt data
[cfhd @ 0x9674340] Escape codeword not found, probably corrupt data
Error while decoding stream #0:0: Invalid argument
    Last message repeated 1 times
[cfhd @ 0x9673740] Escape codeword not found, probably corrupt data
Error while decoding stream #0:0: Invalid argument
[cfhd @ 0x965b5c0] Escape codeword not found, probably corrupt data
[cfhd @ 0x9674340] Escape codeword not found, probably corrupt data
Error while decoding stream #0:0: Invalid argument
    Last message repeated 2 times
[cfhd @ 0x965b5c0] Escape codeword not found, probably corrupt data
[cfhd @ 0x9673d40] Escape codeword not found, probably corrupt data
[cfhd @ 0x9674340] Escape codeword not found, probably corrupt data
[cfhd @ 0x9673140] Escape codeword not found, probably corrupt data
Error while decoding stream #0:0: Invalid argument
[cfhd @ 0x9673140] Escape codeword not found, probably corrupt data
Error while decoding stream #0:0: Invalid argument
    Last message repeated 3 times
[cfhd @ 0x965b5c0] Escape codeword not found, probably corrupt data
[cfhd @ 0x9673740] Escape codeword not found, probably corrupt data
[cfhd @ 0x9673d40] Escape codeword not found, probably corrupt data
Error while decoding stream #0:0: Invalid argument
    Last message repeated 1 times
[cfhd @ 0x9673d40] Escape codeword not found, probably corrupt data
[cfhd @ 0x965b5c0] Invalid subband number
Error while decoding stream #0:0: Invalid argument
    Last message repeated 2 times
[cfhd @ 0x9673d40] Escape codeword not found, probably corrupt data
Input stream #0:0 frame changed from size:320x240 fmt:yuv422p10le to size:324x240 fmt:yuv422p10le
[Thread 0xb5daab40 (LWP 26330) exited]
[Thread 0xb65abb40 (LWP 26329) exited]
[Thread 0xb6dacb40 (LWP 26328) exited]
[Thread 0xb75adb40 (LWP 26327) exited]

Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 0xb35a5b40 (LWP 26335)]
cfhd_decode (avctx=0x965b5c0, data=0x965b9c0, got_frame=0x96730d8, 
    avpkt=0x9673090) at libavcodec/cfhd.c:523
523	                            *coeff_data++ = coeff;
(gdb) bt
#0  cfhd_decode (avctx=0x965b5c0, data=0x965b9c0, got_frame=0x96730d8, 
    avpkt=0x9673090) at libavcodec/cfhd.c:523
#1  0x08661ec2 in frame_worker_thread (arg=0x9672fc0)
    at libavcodec/pthread_frame.c:147
#2  0xb7f65f70 in start_thread (arg=0xb35a5b40) at pthread_create.c:312
#3  0xb7e9bbee in clone () at ../sysdeps/unix/sysv/linux/i386/clone.S:129
(gdb)

Change History (3)

comment:1 by ami_stuff, 9 years ago

Summary:	cfhd: crash with uzzed file 3 → cfhd: crash with fuzzed file 3

comment:2 by Carl Eugen Hoyos, 9 years ago

Component:	undetermined → avcodec
Keywords:	cfhd crash SIGSEGV added
Priority:	normal → important
Reproduced by developer:	set
Status:	new → open
Version:	unspecified → git-master

comment:3 by Carl Eugen Hoyos, 9 years ago

Resolution:	→ fixed
Status:	open → closed

Fixed by Andreas Cadhalpun in 916da13d6dac8b0d3e8f7b1cb87fa37801cee3f8

Note: See TracTickets for help on using tickets.

Download in other formats: