Opened 5 years ago

Closed 3 years ago

#8218 closed defect (fixed)

Division by zero at libavcodec/aaccoder.c

Reported by: Suhwan Owned by:
Priority: normal Component: undetermined
Version: git-master Keywords: ubsan
Cc: Blocked By:
Blocking: Reproduced by developer: no
Analyzed by developer: no

Description

Summary of the bug:
There are three Division by zero at libavcodec/aaccoder.c.
Division by zero at aaccoder.c:852 is new.
​ref:ticket8177

libavcodec/aaccoder.c:852:60: runtime error: division by zero
SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior libavcodec/aaccoder.c:852:60 in 

libavcodec/aaccoder.c:858:60: runtime error: division by zero
SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior libavcodec/aaccoder.c:858:60 in 
libavcodec/aaccoder.c:864:62: runtime error: division by zero
SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior libavcodec/aaccoder.c:864:62 in

How to reproduce:

% ffmpeg_g -t 3 -y -r 37 -i $PoC -loglevel 0 -map 0 -c:a:87 h264_v4l2m2m -disposition:v:103 h264_v4l2m2m -vframes 8 -ab 906k -ar 48000 -strict 1 tmp.m4a

ffmpeg version N-95199-g9847380f5f Copyright (c) 2000-2019 the FFmpeg developers
  built with clang version 6.0.0-1ubuntu2 (tags/RELEASE_600/final)
  configuration: --cc=clang --cxx=clang++ --ld=clang --enable-debug --toolchain=clang-usan

Attachments (2)

gdb-aaccoder​ (11.3 KB ) - added by Suhwan 5 years ago.
PoC_aaccoder.mp3​ (312.0 KB ) - added by Suhwan 5 years ago.
poc

Download all attachments as: .zip

Change History (3)

by Suhwan, 5 years ago

Attachment: gdb-aaccoder​ added

by Suhwan, 5 years ago

Attachment: PoC_aaccoder.mp3​ added

poc

comment:1 by Elon Musk, 3 years ago

Resolution: → fixed
Status: new → closed

Fixed in 75a099fc734a4ee2b1347d0a3d8c53d883b95174

Note: See TracTickets for help on using tickets.