Segfault when decoding 4xm zzufed file

[Oana Stratulat]

use this file to reproduce the crash

[Oana Stratulat]

Patch for this bug.

[Carl Eugen Hoyos]

(gdb) r -i crash4XM -f null -
Starting program: ffmpeg_g -i crash4XM -f null -
[Thread debugging using libthread_db enabled]
ffmpeg version N-36492-g7f83db3, Copyright (c) 2000-2012 the FFmpeg developers
  built on Jan  5 2012 06:49:27 with gcc 4.5.3
  configuration: --cc=/usr/local/gcc-4.5.3/bin/gcc
  libavutil      51. 34.100 / 51. 34.100
  libavcodec     53. 53.100 / 53. 53.100
  libavformat    53. 29.100 / 53. 29.100
  libavdevice    53.  4.100 / 53.  4.100
  libavfilter     2. 57.101 /  2. 57.101
  libswscale      2.  1.100 /  2.  1.100
  libswresample   0.  5.100 /  0.  5.100
[4xm @ 0x13c97a0] Estimating duration from bitrate, this may be inaccurate
Input #0, 4xm, from 'crash4XM':
  Duration: 00:00:13.17, start: 0.000000, bitrate: 705 kb/s
    Stream #0:0: Audio: pcm_s16le, 22050 Hz, 2 channels, s16, 705 kb/s
Output #0, null, to 'pipe:':
  Metadata:
    encoder         : Lavf53.29.100
    Stream #0:0: Audio: pcm_s16le, 22050 Hz, 2 channels, s16, 705 kb/s
Stream mapping:
  Stream #0:0 -> #0:0 (pcm_s16le -> pcm_s16le)
Press [q] to stop, [?] for help

Program received signal SIGSEGV, Segmentation fault.
0x00007ffff68b9a37 in memcpy () from /lib64/libc.so.6
(gdb) bt
#0  0x00007ffff68b9a37 in memcpy () from /lib64/libc.so.6
#1  0x00000000007d926d in pcm_encode_frame (avctx=<value optimized out>,
    frame=0x7fff91673040 "pfrm\340K", buf_size=<value optimized out>, data=0x7fffd56a1040)
    at libavcodec/pcm.c:171
#2  0x0000000000873217 in avcodec_encode_audio (avctx=0x13d0a40, buf=<value optimized out>,
    buf_size=<value optimized out>, samples=<value optimized out>) at libavcodec/utils.c:866
#3  0x000000000040b48c in do_audio_out (ist=0x13c9f40, ost=0x13d0f50, s=0x13d0280,
    decoded_frame=<value optimized out>) at ffmpeg.c:1230
#4  transcode_audio (ist=0x13c9f40, ost=0x13d0f50, s=0x13d0280, decoded_frame=<value optimized out>)
    at ffmpeg.c:2008
#5  output_packet (ist=0x13c9f40, ost=0x13d0f50, s=0x13d0280, decoded_frame=<value optimized out>)
    at ffmpeg.c:2228
#6  0x000000000040e0b4 in transcode (output_files=0x13d1220, nb_output_files=1, input_files=0x13c9d10,
    nb_input_files=0) at ffmpeg.c:3003
#7  0x0000000000412469 in main (argc=<value optimized out>, argv=<value optimized out>) at ffmpeg.c:5086