Opened 3 years ago

Closed 10 months ago

#8268 closed defect (fixed)

outside the range of int at libavfilter/vf_ciescope.c

Reported by: Suhwan Owned by:
Priority: normal Component: undetermined
Version: git-master Keywords: ubsan
Cc: Blocked By:
Blocking: Reproduced by developer: no
Analyzed by developer: no

Description

Summary of the bug:
There are 2 outside the range of int and 2 integer division by zero at libavfilter/vf_ciescope.c

I compiled ffmpeg with "--toolchain=clang-usan" to check the undefined-behaviours and attached log file.
How to reproduce:

% ffmpeg_g -y -i $PoC -filter_complex ciescope -target dv -loglevel 0 tmp.bit

ffmpeg version N-95343-ge835a9d302 Copyright (c) 2000-2019 the FFmpeg developers
built with clang version 6.0.0-1ubuntu2 (tags/RELEASE_600/final)
configuration: --cc=clang --cxx=clang++ --ld=clang --enable-debug --toolchain=clang-usan

Here's UBSAN log

libavfilter/vf_ciescope.c:853:13: runtime error: division by zero
SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior libavfilter/vf_ciescope.c:853:13 in 
libavfilter/vf_ciescope.c:854:13: runtime error: division by zero
SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior libavfilter/vf_ciescope.c:854:13 in 
libavfilter/vf_ciescope.c:1405:18: runtime error: -nan is outside the range of representable values of type 'int'
SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior libavfilter/vf_ciescope.c:1405:18 in 
libavfilter/vf_ciescope.c:1406:18: runtime error: -nan is outside the range of representable values of type 'int'
SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior libavfilter/vf_ciescope.c:1406:18 in 

Please confirm.
Thanks

Attachments (2)

log_vf_ciescope (13.8 KB ) - added by Suhwan 3 years ago.
PoC_vf_ciescope.dpx (11.8 KB ) - added by Suhwan 3 years ago.
poc

Download all attachments as: .zip

Change History (3)

by Suhwan, 3 years ago

Attachment: log_vf_ciescope added

by Suhwan, 3 years ago

Attachment: PoC_vf_ciescope.dpx added

poc

comment:1 by Elon Musk, 10 months ago

Resolution: fixed
Status: newclosed
Note: See TracTickets for help on using tickets.