zzuf .mov crashes FFMPEG segfault

[Oana Stratulat]

==20371== Memcheck, a memory error detector
==20371== Copyright (C) 2002-2010, and GNU GPL'd, by Julian Seward et al.
==20371== Using Valgrind-3.6.1-Debian and LibVEX; rerun with -h for copyright info
==20371== Command: ffmpeg -i corruptfile -f null -
==20371==
ffmpeg version N-35989-gaa1c590, Copyright (c) 2000-2011 the FFmpeg developers

built on Dec 20 2011 14:30:54 with gcc 4.6.1
configuration:
libavutil 51. 32. 0 / 51. 32. 0
libavcodec 53. 46. 1 / 53. 46. 1
libavformat 53. 27. 0 / 53. 27. 0
libavdevice 53. 4. 0 / 53. 4. 0
libavfilter 2. 53. 0 / 2. 53. 0
libswscale 2. 1. 0 / 2. 1. 0

Truncating packet of size 268438539 to 55597

Seems stream 0 codec frame rate differs from container frame rate: 600.00 (600/1) -> 10.00 (10/1)
Input #0, mov,mp4,m4a,3gp,3g2,mj2, from 'corruptfile':

Metadata:

creation_time : 1998-03-06 17:52:26

Duration: 00:06:53.60, start: 0.000000, bitrate: 2 kb/s

Stream #0:0(eng): Video: indeo3 (IV32 / 0x32335649), yuv410p, 160x120, 5194 kb/s, SAR 1:33 DAR 4:99, 10 fps, 10 tbr, 600 tbn, 600 tbc
Metadata:

creation_time : 1998-03-06 17:52:26

[buffer @ 0x58f3ee0] w:160 h:120 pixfmt:yuv410p tb:1/1000000 sar:1/33 sws_param:
Output #0, null, to 'pipe:':

Metadata:

creation_time : 1998-03-06 17:52:26
encoder : Lavf53.27.0
Stream #0:0(eng): Video: rawvideo (YUV9 / 0x39565559), yuv410p, 160x120 [SAR 1:33 DAR 4:99], q=2-31, 200 kb/s, 90k tbn, 10 tbc
Metadata:

creation_time : 1998-03-06 17:52:26

Stream mapping:

Stream #0:0 -> #0:0 (indeo3 -> rawvideo)

Press [q] to stop, ? for help
[indeo3 @ 0x58a4520] OS header checksum mismatch!
Error while decoding stream #0:0
[indeo3 @ 0x58a4520] Mode 0: invalid VQ data
Error while decoding stream #0:0
[indeo3 @ 0x58a4520] Mode 0: invalid VQ data
Error while decoding stream #0:0
[indeo3 @ 0x58a4520] Mode 10: invalid VQ data
Error while decoding stream #0:0
[indeo3 @ 0x58a4520] OS header checksum mismatch!
Error while decoding stream #0:0
[indeo3 @ 0x58a4520] Mode 0: invalid VQ data
Error while decoding stream #0:0
[indeo3 @ 0x58a4520] Mode 0: invalid VQ data
Error while decoding stream #0:0
[indeo3 @ 0x58a4520] Mode 10: invalid VQ data
Error while decoding stream #0:0
[indeo3 @ 0x58a4520] Mode 0: invalid VQ data
Error while decoding stream #0:0
[indeo3 @ 0x58a4520] OS header checksum mismatch!
Error while decoding stream #0:0

Last message repeated 1 times

[indeo3 @ 0x58a4520] OS header checksum mismatch!
Error while decoding stream #0:0
[indeo3 @ 0x58a4520] OS header checksum mismatch!
Error while decoding stream #0:0
[indeo3 @ 0x58a4520] Mode 0: invalid VQ data
Error while decoding stream #0:0
[indeo3 @ 0x58a4520] Unsupported coding mode: 6
Error while decoding stream #0:0
[indeo3 @ 0x58a4520] Mode 10: invalid VQ data
Error while decoding stream #0:0
[indeo3 @ 0x58a4520] Invalid VQ_NULL code: 3
Error while decoding stream #0:0
==20371== Invalid read of size 1
==20371== at 0x74A5EE: ??? (in /usr/local/bin/ffmpeg)
==20371== by 0x74B375: ??? (in /usr/local/bin/ffmpeg)
==20371== by 0x74B11A: ??? (in /usr/local/bin/ffmpeg)
==20371== by 0x74B11A: ??? (in /usr/local/bin/ffmpeg)
==20371== by 0x74B11A: ??? (in /usr/local/bin/ffmpeg)
==20371== by 0x74B11A: ??? (in /usr/local/bin/ffmpeg)
==20371== by 0x74B11A: ??? (in /usr/local/bin/ffmpeg)
==20371== by 0x74B999: ??? (in /usr/local/bin/ffmpeg)
==20371== by 0x74BC47: ??? (in /usr/local/bin/ffmpeg)
==20371== by 0x88F716: ??? (in /usr/local/bin/ffmpeg)
==20371== by 0x43DF46: ??? (in /usr/local/bin/ffmpeg)
==20371== by 0x442890: ??? (in /usr/local/bin/ffmpeg)
==20371== Address 0x26 is not stack'd, malloc'd or (recently) free'd
==20371==
==20371==
==20371== Process terminating with default action of signal 11 (SIGSEGV)
==20371== Access not within mapped region at address 0x26
==20371== at 0x74A5EE: ??? (in /usr/local/bin/ffmpeg)
==20371== by 0x74B375: ??? (in /usr/local/bin/ffmpeg)
==20371== by 0x74B11A: ??? (in /usr/local/bin/ffmpeg)
==20371== by 0x74B11A: ??? (in /usr/local/bin/ffmpeg)
==20371== by 0x74B11A: ??? (in /usr/local/bin/ffmpeg)
==20371== by 0x74B11A: ??? (in /usr/local/bin/ffmpeg)
==20371== by 0x74B11A: ??? (in /usr/local/bin/ffmpeg)
==20371== by 0x74B999: ??? (in /usr/local/bin/ffmpeg)
==20371== by 0x74BC47: ??? (in /usr/local/bin/ffmpeg)
==20371== by 0x88F716: ??? (in /usr/local/bin/ffmpeg)
==20371== by 0x43DF46: ??? (in /usr/local/bin/ffmpeg)
==20371== by 0x442890: ??? (in /usr/local/bin/ffmpeg)
==20371== If you believe this happened as a result of a stack
==20371== overflow in your program's main thread (unlikely but
==20371== possible), you can try to increase the size of the
==20371== main thread stack using the --main-stacksize= flag.
==20371== The main thread stack size used in this run was 8388608.
==20371==
==20371== HEAP SUMMARY:
==20371== in use at exit: 528,056 bytes in 116 blocks
==20371== total heap usage: 197 allocs, 81 frees, 738,103 bytes allocated
==20371==
==20371== LEAK SUMMARY:
==20371== definitely lost: 0 bytes in 0 blocks
==20371== indirectly lost: 0 bytes in 0 blocks
==20371== possibly lost: 0 bytes in 0 blocks
==20371== still reachable: 528,056 bytes in 116 blocks
==20371== suppressed: 0 bytes in 0 blocks
==20371== Rerun with --leak-check=full to see details of leaked memory
==20371==
==20371== For counts of detected and suppressed errors, rerun with: -v
==20371== ERROR SUMMARY: 1 errors from 1 contexts (suppressed: 4 from 4)