April 2011 - FFmpeg-trac - lists.ffmpeg.org

#20(FFmpeg:new): Crash when encoding to tif with high value for -ss
by FFmpeg 27 Sep '12

27 Sep '12

#20: Crash when encoding to tif with high value for -ss ------------------------+--------------------- Reporter: cehoyos | Owner: michael Type: defect | Status: new Priority: important | Component: FFmpeg Version: git | Keywords: Blocked By: | Blocking: Reproduced: 1 | Analyzed: 0 ------------------------+--------------------- (issue 2658) Reproducible with (m)any files, I used fate- suite/svq3/Vertical400kbit.sorenson3.mov {{{ (gdb) r -i Vertical400kbit.sorenson3.mov -ss 40 out.tif Starting program: ffmpeg_g -i Vertical400kbit.sorenson3.mov -ss 40 out.tif FFmpeg version git-N-28634-g0bfe349, Copyright (c) 2000-2011 the FFmpeg developers built on Mar 25 2011 20:50:13 with gcc 4.5.2 configuration: --cc='/usr/local/gcc-4.5.2/bin/gcc -m32' --enable-gpl libavutil 50. 40. 0 / 50. 40. 0 libavcodec 52.114. 1 / 52.114. 1 libavformat 52.103. 0 / 52.103. 0 libavdevice 52. 3. 0 / 52. 3. 0 libavfilter 1. 76. 0 / 1. 76. 0 libswscale 0. 12. 0 / 0. 12. 0 [mov,mp4,m4a,3gp,3g2,mj2 @ 0x8beb6a0] max_analyze_duration reached Seems stream 0 codec frame rate differs from container frame rate: 600.00 (600/1) -> 30.00 (30/1) Input #0, mov,mp4,m4a,3gp,3g2,mj2, from 'Vertical400kbit.sorenson3.mov': Metadata: creation_time : 2001-03-20 16:17:18 title : Vertical Online SV3 Demo title-eng : Vertical Online SV3 Demo artist : Logan Kelsey artist-eng : Logan Kelsey copyright : © Vertical Online 2001 copyright-eng : © Vertical Online 2001 encoder : Sorenson Video 3 encoder-eng : Sorenson Video 3 Duration: 00:00:43.57, start: 0.000000, bitrate: 580 kb/s Stream #0.0(eng): Video: svq3, yuvj420p, 320x240, 391 kb/s, 30.02 fps, 30 tbr, 600 tbn, 600 tbc Metadata: creation_time : 2001-03-20 16:17:18 Stream #0.1(eng): Audio: adpcm_ima_qt, 44100 Hz, 1 channels, s16 Metadata: creation_time : 2001-03-20 16:17:18 [buffer @ 0x8bf05b0] w:320 h:240 pixfmt:yuvj420p [ffsink @ 0x8bfd730] auto-inserting filter 'auto-inserted scaler 0' between the filter 'src' and the filter 'out' [scale @ 0x8bfd9e0] w:320 h:240 fmt:yuvj420p -> w:320 h:240 fmt:rgb24 flags:0xa0000004 Output #0, image2, to 'out.tif': Metadata: creation_time : 2001-03-20 16:17:18 title : Vertical Online SV3 Demo title-eng : Vertical Online SV3 Demo artist : Logan Kelsey artist-eng : Logan Kelsey copyright : © Vertical Online 2001 copyright-eng : © Vertical Online 2001 encoder-eng : Sorenson Video 3 encoder : Lavf52.103.0 Stream #0.0(eng): Video: tiff, rgb24, 320x240, q=2-31, 200 kb/s, 90k tbn, 30 tbc Metadata: creation_time : 2001-03-20 16:17:18 Stream mapping: Stream #0.0 -> #0.0 Press ctrl-c to stop encoding [buffer @ 0x8bf05b0] Buffering several frames is not supported. Please consume all available frames before adding a new one. Last message repeated 1049 times Program received signal SIGSEGV, Segmentation fault. print_report (ost_table=0x8bf4020, nb_ostreams=1, is_last_report=0, output_files=0x86a5ac0) at ffmpeg.c:1334 1334 snprintf(buf + strlen(buf), sizeof(buf) - strlen(buf), "frame=%5d fps=%3d q=%3.1f ", (gdb) bt #0 print_report (ost_table=0x8bf4020, nb_ostreams=1, is_last_report=0, output_files=0x86a5ac0) at ffmpeg.c:1334 #1 0x08053156 in transcode (nb_output_files=1, nb_input_files=1, stream_maps=0x0, nb_stream_maps=0, input_files=0x86a5c60, output_files=0x86a5ac0) at ffmpeg.c:2618 #2 0x08057d39 in main (argc=6, argv=0xffffcfe4) at ffmpeg.c:4345 (gdb) disass $pc-32 $pc+32 Dump of assembler code from 0x8050130 to 0x8050170: 0x08050130 <print_report+704>: in (%dx),%al 0x08050131 <print_report+705>: add %al,(%eax) 0x08050133 <print_report+707>: add %cl,-0x7376bbb0(%ebx) 0x08050139 <print_report+713>: and $0xa0,%al 0x0805013b <print_report+715>: add %al,(%eax) 0x0805013d <print_report+717>: add %al,0x42850fd2(%ebp) 0x08050143 <print_report+723>: add (%eax),%al 0x08050145 <print_report+725>: add %cl,-0x748fdb94(%ebx) 0x0805014b <print_report+731>: test %edx,-0x24ffffff(%eax) 0x08050151 <print_report+737>: inc %eax 0x08050152 <print_report+738>: dec %eax 0x08050153 <print_report+739>: fstps 0xec(%esp) 0x0805015a <print_report+746>: flds 0xec(%esp) 0x08050161 <print_report+753>: fdivs 0x8562178 0x08050167 <print_report+759>: fstpl 0xe0(%esp) 0x0805016e <print_report+766>: fldl 0xe0(%esp) End of assembler dump. (gdb) info registers eax 0x0 0 ecx 0x0 0 edx 0x0 0 ebx 0xffffbd00 -17152 esp 0xffffbc10 0xffffbc10 ebp 0x8bf3b20 0x8bf3b20 esi 0x0 0 edi 0x8bfcc90 146787472 eip 0x8050150 0x8050150 <print_report+736> eflags 0x210246 [ PF ZF IF RF ID ] cs 0x23 35 ss 0x2b 43 ds 0x2b 43 es 0x2b 43 fs 0x0 0 gs 0x63 99 }}} {{{ $ valgrind ffmpeg_g -i Vertical400kbit.sorenson3.mov -ss 40 out.tif ==16721== Memcheck, a memory error detector ==16721== Copyright (C) 2002-2009, and GNU GPL'd, by Julian Seward et al. ==16721== Using Valgrind-3.5.0 and LibVEX; rerun with -h for copyright info ==16721== Command: ffmpeg_g -i Vertical400kbit.sorenson3.mov -ss 40 out.tif ==16721== FFmpeg version git-N-28634-g0bfe349, Copyright (c) 2000-2011 the FFmpeg developers built on Mar 25 2011 20:50:13 with gcc 4.5.2 configuration: --cc='/usr/local/gcc-4.5.2/bin/gcc -m32' --enable-gpl libavutil 50. 40. 0 / 50. 40. 0 libavcodec 52.114. 1 / 52.114. 1 libavformat 52.103. 0 / 52.103. 0 libavdevice 52. 3. 0 / 52. 3. 0 libavfilter 1. 76. 0 / 1. 76. 0 libswscale 0. 12. 0 / 0. 12. 0 [mov,mp4,m4a,3gp,3g2,mj2 @ 0x7be28c0] max_analyze_duration reached Seems stream 0 codec frame rate differs from container frame rate: 600.00 (600/1) -> 30.00 (30/1) Input #0, mov,mp4,m4a,3gp,3g2,mj2, from 'Vertical400kbit.sorenson3.mov': Metadata: creation_time : 2001-03-20 16:17:18 title : Vertical Online SV3 Demo title-eng : Vertical Online SV3 Demo artist : Logan Kelsey artist-eng : Logan Kelsey copyright : © Vertical Online 2001 copyright-eng : © Vertical Online 2001 encoder : Sorenson Video 3 encoder-eng : Sorenson Video 3 Duration: 00:00:43.57, start: 0.000000, bitrate: 580 kb/s Stream #0.0(eng): Video: svq3, yuvj420p, 320x240, 391 kb/s, 30.02 fps, 30 tbr, 600 tbn, 600 tbc Metadata: creation_time : 2001-03-20 16:17:18 Stream #0.1(eng): Audio: adpcm_ima_qt, 44100 Hz, 1 channels, s16 Metadata: creation_time : 2001-03-20 16:17:18 [buffer @ 0x7cef550] w:320 h:240 pixfmt:yuvj420p [ffsink @ 0x7cef910] auto-inserting filter 'auto-inserted scaler 0' between the filter 'src' and the filter 'out' [scale @ 0x7cefff0] w:320 h:240 fmt:yuvj420p -> w:320 h:240 fmt:rgb24 flags:0xa0000004 Output #0, image2, to 'out.tif': Metadata: creation_time : 2001-03-20 16:17:18 title : Vertical Online SV3 Demo title-eng : Vertical Online SV3 Demo artist : Logan Kelsey artist-eng : Logan Kelsey copyright : © Vertical Online 2001 copyright-eng : © Vertical Online 2001 encoder-eng : Sorenson Video 3 encoder : Lavf52.103.0 Stream #0.0(eng): Video: tiff, rgb24, 320x240, q=2-31, 200 kb/s, 90k tbn, 30 tbc Metadata: creation_time : 2001-03-20 16:17:18 Stream mapping: Stream #0.0 -> #0.0 Press ctrl-c to stop encoding [buffer @ 0x7cef550] Buffering several frames is not supported. Please consume all available frames before adding a new one. ==16721== Invalid read of size 4 ==16721== at 0x8050150: print_report.clone.13 (ffmpeg.c:1334) ==16721== Address 0x48 is not stack'd, malloc'd or (recently) free'd ==16721== ==16721== ==16721== Process terminating with default action of signal 11 (SIGSEGV) ==16721== Access not within mapped region at address 0x48 ==16721== at 0x8050150: print_report.clone.13 (ffmpeg.c:1334) ==16721== If you believe this happened as a result of a stack ==16721== overflow in your program's main thread (unlikely but ==16721== possible), you can try to increase the size of the ==16721== main thread stack using the --main-stacksize= flag. ==16721== The main thread stack size used in this run was 8388608. ==16721== ==16721== HEAP SUMMARY: ==16721== in use at exit: 1,650,946 bytes in 407 blocks ==16721== total heap usage: 1,098 allocs, 691 frees, 2,254,669 bytes allocated ==16721== ==16721== LEAK SUMMARY: ==16721== definitely lost: 0 bytes in 0 blocks ==16721== indirectly lost: 0 bytes in 0 blocks ==16721== possibly lost: 0 bytes in 0 blocks ==16721== still reachable: 1,650,946 bytes in 407 blocks ==16721== suppressed: 0 bytes in 0 blocks ==16721== Rerun with --leak-check=full to see details of leaked memory ==16721== ==16721== For counts of detected and suppressed errors, rerun with: -v ==16721== ERROR SUMMARY: 1 errors from 1 contexts (suppressed: 3 from 3) }}} -- Ticket URL: <http://avcodec.org/trac/ffmpeg/ticket/20> FFmpeg <http://ffmpeg.org> FFmpeg issue tracker

1 2

#34(FFmpeg:new): Crash when using bframes
by FFmpeg 27 Sep '12

27 Sep '12

#34: Crash when using bframes ------------------------+--------------------- Reporter: cehoyos | Owner: michael Type: defect | Status: new Priority: important | Component: FFmpeg Version: git | Keywords: Blocked By: | Blocking: Reproduced: 1 | Analyzed: 0 ------------------------+--------------------- (issue 2018) Current FFmpeg git HEAD crashes for some samples when encoding with b-frames, To produce a sample: {{{ ffmpeg -i fate-suite/svq3/Vertical400kbit.sorenson3.mov -s 354x364 -qscale 2 -an out.mkv }}} {{{ (gdb) r -i out.mkv -bf 1 out2.mkv FFmpeg version git-N-28742-g1caa412, Copyright (c) 2000-2011 the FFmpeg developers built on Mar 31 2011 13:34:23 with gcc 4.4.1 [gcc-4_4-branch revision 150839] configuration: --enable-libtheora libavutil 50. 40. 0 / 50. 40. 0 libavcodec 52.116. 0 / 52.116. 0 libavformat 52.104. 0 / 52.104. 0 libavdevice 52. 4. 0 / 52. 4. 0 libavfilter 1. 76. 0 / 1. 76. 0 libswscale 0. 13. 0 / 0. 13. 0 [matroska,webm @ 0x122a650] Estimating duration from bitrate, this may be inaccurate Input #0, matroska,webm, from 'out.mkv': Metadata: title : Vertical Online SV3 Demo CREATION_TIME : 2001-03-20 16:17:18 TITLE-eng : Vertical Online SV3 Demo ARTIST : Logan Kelsey ARTIST-eng : Logan Kelsey COPYRIGHT : © Vertical Online 2001 COPYRIGHT-eng : © Vertical Online 2001 ENCODER-eng : Sorenson Video 3 ENCODER : Lavf52.104.0 Duration: 00:00:43.60, start: 0.000000, bitrate: N/A Stream #0.0(eng): Video: mpeg4, yuv420p, 354x364 [PAR 1:1 DAR 177:182], 30 fps, 30 tbr, 1k tbn, 30 tbc (default) Metadata: CREATION_TIME : 2001-03-20 16:17:18 LANGUAGE : eng [buffer @ 0x1230ff0] w:354 h:364 pixfmt:yuv420p [setdar @ 0x12314d0] a:71/73 [setdar @ 0x12314d0] w:354 h:364 -> dar:71/73 sar:1/1 Output #0, matroska, to 'out2.mkv': Metadata: title : Vertical Online SV3 Demo CREATION_TIME : 2001-03-20 16:17:18 TITLE-eng : Vertical Online SV3 Demo ARTIST : Logan Kelsey ARTIST-eng : Logan Kelsey COPYRIGHT : © Vertical Online 2001 COPYRIGHT-eng : © Vertical Online 2001 ENCODER-eng : Sorenson Video 3 encoder : Lavf52.104.0 Stream #0.0(eng): Video: mpeg4, yuv420p, 354x364 [PAR 1:1 DAR 177:182], q=2-31, 200 kb/s, 1k tbn, 30 tbc (default) Metadata: CREATION_TIME : 2001-03-20 16:17:18 LANGUAGE : eng Stream mapping: Stream #0.0 -> #0.0 Press [q] to stop encoding Program received signal SIGSEGV, Segmentation fault. 0x0000000000832b49 in sad16_sse2 (v=0x0, blk2=0x1415832 '\030' <repeats 71 times>, "\031\032\033\033\033\032\032\033\033\033\033\033\033\033\033", '\030' <repeats 95 times>, "\031\032\032\033\033\033\032\032\031\030\030\030\030\030\030\030\030\030\030"..., blk1=0x7ffff7e8fa82 '\030' <repeats 87 times>, "\031\032\033\033\033\033\032\033\033\033\033\033\033\033\032", '\030' <repeats 95 times>, "\031\032\032"..., stride=400, h=16) at libavcodec/x86/motion_est_mmx.c:96 96 __asm__ volatile( (gdb) bt #0 0x0000000000832b49 in sad16_sse2 (v=0x0, blk2=0x1415832 '\030' <repeats 71 times>, "\031\032\033\033\033\032\032\033\033\033\033\033\033\033\033", '\030' <repeats 95 times>, "\031\032\032\033\033\033\032\032\031\030\030\030\030\030\030\030\030\030\030"..., blk1=0x7ffff7e8fa82 '\030' <repeats 87 times>, "\031\032\033\033\033\033\032\033\033\033\033\033\033\033\032", '\030' <repeats 95 times>, "\031\032\032"..., stride=400, h=16) at libavcodec/x86/motion_est_mmx.c:96 #1 0x000000000065fb14 in mpeg4_encode_mb (s=0x1243aa0, block=0x1280a10, motion_x=<value optimized out>, motion_y=<value optimized out>) at libavcodec/mpeg4videoenc.c:670 #2 0x00000000006a17f5 in encode_mb_internal (mb_block_count=<value optimized out>, s=<value optimized out>, mb_block_height=<value optimized out>, motion_y=<value optimized out>, motion_x=<value optimized out>) at libavcodec/mpegvideo_enc.c:1761 #3 encode_mb (mb_block_count=<value optimized out>, s=<value optimized out>, mb_block_height=<value optimized out>, motion_y=<value optimized out>, motion_x=<value optimized out>) at libavcodec/mpegvideo_enc.c:1797 #4 encode_thread (mb_block_count=<value optimized out>, s=<value optimized out>, mb_block_height=<value optimized out>, motion_y=<value optimized out>, motion_x=<value optimized out>) at libavcodec/mpegvideo_enc.c:2619 #5 0x0000000000753bff in avcodec_default_execute (c=0x122efd0, func=0x69ed50 <encode_thread>, arg=0x7ffff7e8fa82, ret=0x190, count=16, size=1) at libavcodec/utils.c:433 #6 0x00000000006901b7 in encode_picture (picture_number=<value optimized out>, s=<value optimized out>) at libavcodec/mpegvideo_enc.c:2982 #7 MPV_encode_picture (picture_number=<value optimized out>, s=<value optimized out>) at libavcodec/mpegvideo_enc.c:1270 #8 0x00000000007549b6 in avcodec_encode_video (avctx=0x122efd0, buf=0x7ffff7f10010 "", buf_size=773336, pict=0x7fffffffca10) at libavcodec/utils.c:618 #9 0x0000000000408adb in do_video_out (frame_size=<value optimized out>, in_picture=<value optimized out>, ist=<value optimized out>, ost=<value optimized out>, s=<value optimized out>) at ffmpeg.c:1267 #10 output_packet (frame_size=<value optimized out>, in_picture=<value optimized out>, ist=<value optimized out>, ost=<value optimized out>, s=<value optimized out>) at ffmpeg.c:1689 #11 0x000000000040ca96 in transcode (nb_output_files=<value optimized out>, nb_input_files=<value optimized out>, stream_maps=<value optimized out>, nb_stream_maps=<value optimized out>, input_files=<value optimized out>, output_files=<value optimized out>) at ffmpeg.c:2658 #12 0x000000000040d383 in main (argc=6, argv=<value optimized out>) at ffmpeg.c:4403 (gdb) disass $pc-25 $pc+32 Dump of assembler code from 0x832b30 to 0x832b69: 0x0000000000832b30 <sad16_sse2+0>: movslq %ecx,%rcx 0x0000000000832b33 <sad16_sse2+3>: pxor %xmm2,%xmm2 0x0000000000832b37 <sad16_sse2+7>: nopw 0x0(%rax,%rax,1) 0x0000000000832b40 <sad16_sse2+16>: movdqu (%rdx),%xmm0 0x0000000000832b44 <sad16_sse2+20>: movdqu (%rdx,%rcx,1),%xmm1 0x0000000000832b49 <sad16_sse2+25>: psadbw (%rsi),%xmm0 0x0000000000832b4d <sad16_sse2+29>: psadbw (%rsi,%rcx,1),%xmm1 0x0000000000832b52 <sad16_sse2+34>: paddw %xmm0,%xmm2 0x0000000000832b56 <sad16_sse2+38>: paddw %xmm1,%xmm2 0x0000000000832b5a <sad16_sse2+42>: lea (%rdx,%rcx,2),%rdx 0x0000000000832b5e <sad16_sse2+46>: lea (%rsi,%rcx,2),%rsi 0x0000000000832b62 <sad16_sse2+50>: sub $0x2,%r8d 0x0000000000832b66 <sad16_sse2+54>: jg 0x832b40 <sad16_sse2+16> 0x0000000000832b68 <sad16_sse2+56>: movhlps %xmm2,%xmm0 (gdb) info all-registers rax 0x1259610 19240464 rbx 0x1243aa0 19151520 rcx 0x190 400 rdx 0x7ffff7e8fa82 140737352628866 rsi 0x1415832 21059634 rdi 0x0 0 rbp 0x152 0x152 rsp 0x7ffffffefa88 0x7ffffffefa88 r8 0x10 16 r9 0x1 1 r10 0x1 1 r11 0x0 0 r12 0x1415832 21059634 r13 0x1280a10 19401232 r14 0x0 0 r15 0x10 16 rip 0x832b49 0x832b49 <sad16_sse2+25> eflags 0x10246 [ PF ZF IF RF ] cs 0x33 51 ss 0x2b 43 ds 0x0 0 es 0x0 0 fs 0x0 0 gs 0x0 0 fctrl 0x37f 895 fstat 0x0 0 ftag 0xaaaa 43690 fiseg 0x0 0 fioff 0x0 0 foseg 0x0 0 fooff 0x0 0 fop 0x0 0 xmm0 {v4_float = {0x0, 0x0, 0x0, 0x0}, v2_double = {0x0, 0x0}, v16_int8 = {0x18 <repeats 16 times>}, v8_int16 = {0x1818, 0x1818, 0x1818, 0x1818, 0x1818, 0x1818, 0x1818, 0x1818}, v4_int32 = {0x18181818, 0x18181818, 0x18181818, 0x18181818}, v2_int64 = {0x1818181818181818, 0x1818181818181818}, uint128 = 0x18181818181818181818181818181818} xmm1 {v4_float = {0x0, 0x0, 0x0, 0x0}, v2_double = {0x0, 0x0}, v16_int8 = {0x18 <repeats 16 times>}, v8_int16 = {0x1818, 0x1818, 0x1818, 0x1818, 0x1818, 0x1818, 0x1818, 0x1818}, v4_int32 = {0x18181818, 0x18181818, 0x18181818, 0x18181818}, v2_int64 = {0x1818181818181818, 0x1818181818181818}, uint128 = 0x18181818181818181818181818181818} xmm2 {v4_float = {0x0, 0x0, 0x0, 0x0}, v2_double = {0x0, 0x0}, v16_int8 = {0x0 <repeats 16 times>}, v8_int16 = {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, v4_int32 = {0x0, 0x0, 0x0, 0x0}, v2_int64 = {0x0, 0x0}, uint128 = 0x00000000000000000000000000000000} xmm3 {v4_float = {0x0, 0x0, 0x0, 0x0}, v2_double = {0x0, 0x0}, v16_int8 = {0x1a <repeats 16 times>}, v8_int16 = {0x1a1a, 0x1a1a, 0x1a1a, 0x1a1a, 0x1a1a, 0x1a1a, 0x1a1a, 0x1a1a}, v4_int32 = {0x1a1a1a1a, 0x1a1a1a1a, 0x1a1a1a1a, 0x1a1a1a1a}, v2_int64 = {0x1a1a1a1a1a1a1a1a, 0x1a1a1a1a1a1a1a1a}, uint128 = 0x1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a} xmm4 {v4_float = {0x0, 0x0, 0x0, 0x0}, v2_double = {0x0, 0x0}, v16_int8 = {0x0 <repeats 16 times>}, v8_int16 = {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, v4_int32 = {0x0, 0x0, 0x0, 0x0}, v2_int64 = {0x0, 0x0}, uint128 = 0x00000000000000000000000000000000} xmm5 {v4_float = {0x0, 0x1, 0x0, 0x0}, v2_double = {0x1, 0x0}, v16_int8 = {0xc6, 0x4b, 0x37, 0x89, 0x41, 0x0, 0xfe, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, v8_int16 = {0x4bc6, 0x8937, 0x41, 0x3ffe, 0x0, 0x0, 0x0, 0x0}, v4_int32 = {0x89374bc6, 0x3ffe0041, 0x0, 0x0}, v2_int64 = {0x3ffe004189374bc6, 0x0}, uint128 = 0x00000000000000003ffe004189374bc6} xmm6 {v4_float = {0x0, 0x3, 0x0, 0x0}, v2_double = {0x1fb, 0x0}, v16_int8 = {0x0, 0x0, 0x0, 0xa0, 0x8f, 0xb6, 0x7f, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, v8_int16 = {0x0, 0xa000, 0xb68f, 0x407f, 0x0, 0x0, 0x0, 0x0}, v4_int32 = {0xa0000000, 0x407fb68f, 0x0, 0x0}, v2_int64 = {0x407fb68fa0000000, 0x0}, uint128 = 0x0000000000000000407fb68fa0000000} xmm7 {v4_float = {0x0, 0x1, 0x0, 0x0}, v2_double = {0x1, 0x0}, v16_int8 = {0x0, 0x0, 0x0, 0x60, 0x9e, 0xa0, 0xf6, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, v8_int16 = {0x0, 0x6000, 0xa09e, 0x3ff6, 0x0, 0x0, 0x0, 0x0}, v4_int32 = {0x60000000, 0x3ff6a09e, 0x0, 0x0}, v2_int64 = {0x3ff6a09e60000000, 0x0}, uint128 = 0x00000000000000003ff6a09e60000000} xmm8 {v4_float = {0x0, 0x0, 0x0, 0x0}, v2_double = {0x0, 0x0}, v16_int8 = {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, v8_int16 = {0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0}, v4_int32 = { 0x0, 0x80000000, 0x0, 0x0}, v2_int64 = {0x8000000000000000, 0x0}, uint128 = 0x00000000000000008000000000000000} xmm9 {v4_float = {0x0, 0x1, 0x0, 0x0}, v2_double = {0x0, 0x0}, v16_int8 = {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, v8_int16 = {0x0, 0x0, 0x0, 0x3fe0, 0x0, 0x0, 0x0, 0x0}, v4_int32 = { 0x0, 0x3fe00000, 0x0, 0x0}, v2_int64 = {0x3fe0000000000000, 0x0}, uint128 = 0x00000000000000003fe0000000000000} xmm10 {v4_float = {0x0, 0x0, 0x0, 0x0}, v2_double = {0x0, 0x0}, v16_int8 = {0x0 <repeats 16 times>}, v8_int16 = {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, v4_int32 = {0x0, 0x0, 0x0, 0x0}, v2_int64 = {0x0, 0x0}, uint128 = 0x00000000000000000000000000000000} xmm11 {v4_float = {0x0, 0x0, 0x0, 0x0}, v2_double = {0x0, 0x0}, v16_int8 = {0xbf, 0x2c, 0x42, 0x32, 0xef, 0xfc, 0x59, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, v8_int16 = {0x2cbf, 0x3242, 0xfcef, 0x3e59, 0x0, 0x0, 0x0, 0x0}, v4_int32 = {0x32422cbf, 0x3e59fcef, 0x0, 0x0}, v2_int64 = {0x3e59fcef32422cbf, 0x0}, uint128 = 0x00000000000000003e59fcef32422cbf} xmm12 {v4_float = {0x0, 0x1, 0x0, 0x0}, v2_double = {0x1, 0x0}, v16_int8 = {0xfe, 0x82, 0x2b, 0x65, 0x47, 0x15, 0xf7, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, v8_int16 = {0x82fe, 0x652b, 0x1547, 0x3ff7, 0x0, 0x0, 0x0, ---Type <return> to continue, or q <return> to quit--- 0x0}, v4_int32 = {0x652b82fe, 0x3ff71547, 0x0, 0x0}, v2_int64 = {0x3ff71547652b82fe, 0x0}, uint128 = 0x00000000000000003ff71547652b82fe} xmm13 {v4_float = {0x0, 0x0, 0x0, 0x0}, v2_double = {0x0, 0x0}, v16_int8 = {0xdc, 0xe8, 0x34, 0x76, 0xa6, 0x4b, 0x20, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, v8_int16 = {0xe8dc, 0x7634, 0x4ba6, 0x3c20, 0x0, 0x0, 0x0, 0x0}, v4_int32 = {0x7634e8dc, 0x3c204ba6, 0x0, 0x0}, v2_int64 = {0x3c204ba67634e8dc, 0x0}, uint128 = 0x00000000000000003c204ba67634e8dc} xmm14 {v4_float = {0x0, 0x0, 0x0, 0x0}, v2_double = {0x0, 0x0}, v16_int8 = {0x0, 0x0, 0x0, 0x90, 0x34, 0x37, 0xb9, 0x3d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, v8_int16 = {0x0, 0x9000, 0x3734, 0x3db9, 0x0, 0x0, 0x0, 0x0}, v4_int32 = {0x90000000, 0x3db93734, 0x0, 0x0}, v2_int64 = {0x3db9373490000000, 0x0}, uint128 = 0x00000000000000003db9373490000000} xmm15 {v4_float = {0x0, 0x0, 0x0, 0x0}, v2_double = {0x0, 0x0}, v16_int8 = {0x0 <repeats 16 times>}, v8_int16 = {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, v4_int32 = {0x0, 0x0, 0x0, 0x0}, v2_int64 = {0x0, 0x0}, uint128 = 0x00000000000000000000000000000000} mxcsr 0x1fa0 [ PE IM DM ZM OM UM PM ] }}} -- Ticket URL: <https://avcodec.org/trac/ffmpeg/ticket/34> FFmpeg <http://ffmpeg.org> FFmpeg issue tracker

1 2

#67(undetermined:new): grey images (and video) when using -ss
by FFmpeg 27 Sep '12

27 Sep '12

#67: grey images (and video) when using -ss --------------------------+-------------------------- Reporter: aphid | Type: defect Status: new | Priority: normal Component: undetermined | Version: unspecified Keywords: | Blocked By: Blocking: | Reproduced: 0 Analyzed: 0 | --------------------------+-------------------------- I'm splitting mpeg2 video, as captured from a capture card (and will ultimately be applying some libavfilter stuff for trademark obfuscation, but that is peripheral to this report). I've recently upgraded from ffmpeg that was probably 1.5 years or so old, and splitting fine both for still images and video, to git. When creating images with -ss, output is solid grey unless -ss happens to fall exactly on a keyframe. When creating video, it starts gray, transitions to gray+artifacts and then looks fine after the first keyframe. This appears to be the same issue referenced here: https://roundup.libav.org/issue2019 Output for the following command/paste can be found here (content is public domain): http://metavidstorage02.ucsc.edu/raw_mpeg2/imagedump/ {{{ ffmpeg -ss 10992 -i senate_proceeding_04-08-11.mpeg -t 10 /video/metavid/raw_mpeg2/imagedump/img%d.jpg FFmpeg version git-N-29131-gf4bc923, Copyright (c) 2000-2011 the FFmpeg developers built on Apr 18 2011 12:22:16 with gcc 4.4.3 configuration: --enable-gpl --enable-version3 --enable-nonfree --enable-postproc --enable-libfaac --enable-libopencore-amrnb --enable- libopencore-amrwb --enable-libtheora --enable-libvorbis --enable-libx264 --enable-libxvid --enable-x11grab --enable-libvpx --enable-libfreetype libavutil 50. 40. 1 / 50. 40. 1 libavcodec 52.119. 1 / 52.119. 1 libavformat 52.108. 0 / 52.108. 0 libavdevice 52. 4. 0 / 52. 4. 0 libavfilter 1. 78. 0 / 1. 78. 0 libswscale 0. 13. 0 / 0. 13. 0 libpostproc 51. 2. 0 / 51. 2. 0 [mpeg @ 0x13d0650] max_analyze_duration reached Input #0, mpeg, from 'senate_proceeding_04-08-11.mpeg': Duration: 18:47:49.66, start: 0.338522, bitrate: 6544 kb/s Stream #0.0[0x1e0]: Video: mpeg2video (Main), yuv420p, 720x480 [PAR 8:9 DAR 4:3], 8000 kb/s, 29.97 fps, 29.97 tbr, 90k tbn, 59.94 tbc Stream #0.1[0x1c0]: Audio: mp2, 48000 Hz, stereo, s16, 224 kb/s Incompatible pixel format 'yuv420p' for codec 'mjpeg', auto-selecting format 'yuvj420p' [buffer @ 0x13d5490] w:720 h:480 pixfmt:yuv420p [ffsink @ 0x13d22b0] auto-inserting filter 'auto-inserted scaler 0' between the filter 'src' and the filter 'out' [scale @ 0x13d2590] w:720 h:480 fmt:yuv420p -> w:720 h:480 fmt:yuvj420p flags:0xa0000004 Output #0, image2, to '/video/metavid/raw_mpeg2/imagedump/img%d.jpg': Metadata: encoder : Lavf52.108.0 Stream #0.0: Video: mjpeg, yuvj420p, 720x480 [PAR 8:9 DAR 4:3], q=2-31, 200 kb/s, 90k tbn, 29.97 tbc Stream mapping: Stream #0.0 -> #0.0 Press [q] to stop encoding [mpeg2video @ 0x13d3100] warning: first frame is no keyframe frame= 298 fps= 52 q=24.8 Lsize= -0kB time=9.94 bitrate= -0.0kbits/s dup=3 drop=0 video:5531kB audio:0kB global headers:0kB muxing overhead -100.000388% }}} -- Ticket URL: <https://ffmpeg.org/trac/ffmpeg/ticket/67> FFmpeg <http://ffmpeg.org> FFmpeg issue tracker

1 3

#44(undetermined:new): seeking in .dv file with lowres enabled crashes ffplay
by FFmpeg 27 Sep '12

27 Sep '12

#44: seeking in .dv file with lowres enabled crashes ffplay --------------------------+-------------------------- Reporter: ami_stuff | Type: defect Status: new | Priority: normal Component: undetermined | Version: unspecified Keywords: | Blocked By: Blocking: | Reproduced: 0 Analyzed: 0 | --------------------------+-------------------------- issue 2511 http://samples.mplayerhq.hu/DV-raw/small_test2.dv C:\>C:\MinGW2\bin\gdb.exe ffplay GNU gdb (GDB) 7.2 Copyright (C) 2010 Free Software Foundation, Inc. License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html> This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law. Type "show copying" and "show warranty" for details. This GDB was configured as "mingw32". For bug reporting instructions, please see: <http://www.gnu.org/software/gdb/bugs/>... Reading symbols from C:\ffplay.exe...(no debugging symbols found)...done. (gdb) run -lowres 1 C:\small_test2.dv Starting program: C:\ffplay.exe -lowres 1 C:\small_test2.dv [New Thread 2184.0x850] FFplay version SVN-r26400, Copyright (c) 2003-2011 the FFmpeg developers built on Jan 18 2011 04:09:28 with gcc 4.4.2 configuration: --enable-gpl --enable-version3 --enable-libgsm --enable- libvorb is --enable-libtheora --enable-libspeex --enable-libmp3lame --enable- libopenjpeg --enable-libschroedinger --enable-libopencore_amrwb --enable- libopencore_amrnb --enable-libvpx --disable-decoder=libvpx --arch=x86 --enable-runtime- cpudetect - -enable-libxvid --enable-libx264 --enable-librtmp --extra-libs='-lrtmp -lpolarss l -lws2_32 -lwinmm' --target-os=mingw32 --enable-avisynth --enable- w32threads -- cross-prefix=i686-mingw32- --cc='ccache i686-mingw32-gcc' --enable- memalign-hack --enable-shared --disable-static libavutil 50.36. 0 / 50.36. 0 libavcore 0.16. 1 / 0.16. 1 libavcodec 52.108. 0 / 52.108. 0 libavformat 52.93. 0 / 52.93. 0 libavdevice 52. 2. 3 / 52. 2. 3 libavfilter 1.74. 0 / 1.74. 0 libswscale 0.12. 0 / 0.12. 0 [New Thread 2184.0xecc] [New Thread 2184.0x9f4] [dv @ 01090050] Estimating duration from bitrate, this may be inaccurate Input #0, dv, from 'C:\small_test2.dv': Duration: 00:00:02.84, start: 0.000000, bitrate: 28800 kb/s Stream #0.0: Video: dvvideo, yuv420p, 720x576, 28800 kb/s, PAR 16:15 DAR 4:3 , 25 tbr, 25 tbn, 25 tbc Stream #0.1: Audio: pcm_s16le, 32000 Hz, 2 channels, s16, 1024 kb/s Stream #0.2: Audio: pcm_s16le, 32000 Hz, 2 channels, s16, 1024 kb/s [pcm_s16le @ 010a1b40] The maximum value for lowres supported by the decoder is 0 [New Thread 2184.0x410] [New Thread 2184.0x7e4] Seek to 52% ( 0:00:01) of total duration ( 0:00:02) f=0/0 0/0 Program received signal SIGSEGV, Segmentation fault. [Switching to Thread 2184.0x9f4] 0x6495ef02 in dv_init_demux () from C:\avformat-52.dll (gdb) bt #0 0x6495ef02 in dv_init_demux () from C:\avformat-52.dll #1 0x00000000 in ?? () (gdb) -- Ticket URL: <https://ffmpeg.org/trac/ffmpeg/ticket/44> FFmpeg <http://ffmpeg.org> FFmpeg issue tracker

1 7

#46(undetermined:new): mpeg2video in ea is played at double speed (Issue 2290)
by FFmpeg 27 Sep '12

27 Sep '12

#46: mpeg2video in ea is played at double speed (Issue 2290) --------------------------+--------------------- Reporter: DJX | Type: defect Status: new | Priority: normal Component: undetermined | Version: git Keywords: | Blocked By: Blocking: | Reproduced: 0 Analyzed: 0 | --------------------------+--------------------- Just importing this issue from the old roundup because I'm still waiting for a fix. Cehoyos confirmed this. ffmpeg -acodec adpcm_ea_r1 -i c:\temp\demo.mpc -vcodec mpeg2video -sameq -acodec mp2 -ab 384K c:\temp\out.mpg FFmpeg version git-N-28915-g454fab7, Copyright (c) 2000-2011 the FFmpeg develope rs built on Apr 7 2011 02:22:47 with gcc 4.5.0 20100414 (Fedora MinGW 4.5.0-1.fc 14) configuration: --prefix=/var/www/users/research/ffmpeg/snapshots/build --arch= x86 --target-os=mingw32 --cross-prefix=i686-pc-mingw32- --cc='ccache i686 -pc-min gw32-gcc' --enable-w32threads --enable-memalign-hack --enable-runtime- cpudetect --enable-cross-compile --enable-static --disable-shared --extra- libs='-lws2_32 - lwinmm' --extra-cflags='--static -I/var/www/users/research/ffmpeg/snapshots/buil d/include' --extra-ldflags='-static -L/var/www/users/research/ffmpeg/snapshots/b uild/lib' --enable-bzlib --enable-zlib --enable-gpl --enable-version3 --enable-n onfree --enable-libx264 --enable-libspeex --enable-libtheora --enable- libvorbis --enable-libfaac --enable-libxvid --enable-libopencore-amrnb --enable- libopencor e-amrwb --enable-libmp3lame --enable-libvpx --disable-decoder=libvpx libavutil 50. 40. 1 / 50. 40. 1 libavcodec 52.117. 0 / 52.117. 0 libavformat 52.106. 0 / 52.106. 0 libavdevice 52. 4. 0 / 52. 4. 0 libavfilter 1. 77. 1 / 1. 77. 1 libswscale 0. 13. 0 / 0. 13. 0 [ea @ 0x14cf270] max_analyze_duration reached [ea @ 0x14cf270] Estimating duration from bitrate, this may be inaccurate Seems stream 0 codec frame rate differs from container frame rate: 59.94 (60000/ 1001) -> 29.97 (60000/2002) Input #0, ea, from 'c:\temp\demo.mpc': Duration: 00:01:01.85, start: 0.000000, bitrate: 4235 kb/s Stream #0.0: Video: mpeg2video (Main), yuv420p, 640x448 [PAR 1:1 DAR 10:7], 3851 kb/s, 29.97 tbr, 90k tbn, 59.94 tbc Stream #0.1: Audio: adpcm_ea_r1, 48000 Hz, 2 channels, s16, 384 kb/s [buffer @ 0x37de40] w:640 h:448 pixfmt:yuv420p [mp2 @ 0x37d9f0] The requested thread algorithm is not supported with this threa d library. [mpeg @ 0x3cd6ab0] VBV buffer size not set, muxing may fail Output #0, mpeg, to 'c:\temp\out.mpg': Metadata: encoder : Lavf52.106.0 Stream #0.0: Video: mpeg2video, yuv420p, 640x448 [PAR 1:1 DAR 10:7], q=2-31, 200 kb/s, 90k tbn, 29.97 tbc Stream #0.1: Audio: mp2, 48000 Hz, 2 channels, s16, 384 kb/s Stream mapping: Stream #0.0 -> #0.0 Stream #0.1 -> #0.1 Press [q] to stop encoding frame= 112 fps= 0 q=0.0 size= 1004kB time=3.70 bitrate=2220.7kbits/s dup=0 frame= 192 fps=186 q=0.0 size= 1884kB time=6.37 bitrate=2421.7kbits/s dup=0 frame= 271 fps=175 q=0.0 size= 2660kB time=9.01 bitrate=2418.8kbits/s dup=0 frame= 332 fps=161 q=0.0 size= 4016kB time=11.04 bitrate=2978.8kbits/s dup=0 frame= 385 fps=150 q=0.0 size= 5488kB time=12.81 bitrate=3508.8kbits/s dup=0 frame= 439 fps=142 q=0.0 size= 7100kB time=14.61 bitrate=3979.8kbits/s dup=0 frame= 492 fps=137 q=0.0 size= 8378kB time=16.38 bitrate=4189.2kbits/s dup=0 frame= 545 fps=132 q=0.0 size= 9822kB time=18.15 bitrate=4432.8kbits/s dup=0 frame= 597 fps=129 q=0.0 size= 11288kB time=19.89 bitrate=4649.9kbits/s dup=0 frame= 648 fps=126 q=0.0 size= 12990kB time=21.59 bitrate=4929.3kbits/s dup=0 frame= 711 fps=126 q=0.0 size= 14176kB time=23.69 bitrate=4902.0kbits/s dup=0 frame= 769 fps=124 q=0.0 size= 15670kB time=25.63 bitrate=5009.4kbits/s dup=0 frame= 822 fps=123 q=0.0 size= 17122kB time=27.39 bitrate=5120.2kbits/s dup=0 frame= 875 fps=121 q=0.0 size= 18370kB time=29.16 bitrate=5160.3kbits/s dup=0 frame= 949 fps=123 q=0.0 size= 20352kB time=31.63 bitrate=5270.8kbits/s dup=0 frame= 1023 fps=116 q=0.0 Lsize= 22286kB time=34.10 bitrate=5353.8kbits/s dup= 0 drop=1020 video:18968kB audio:3196kB global headers:0kB muxing overhead 0.548581% Audio codec is incorrectly identified as adpcm_ea_r2 (should be adpcm_ea_r1). From Cehoyos: Original sample should play ~68 seconds (not 34 seconds as provided output shows), sound is played correctly (if codec is forced, see issue 2291), video plays at double speed, every second frame is dropped by ffmpeg to keep the (correct) frame-rate of ~30. -- Ticket URL: <https://ffmpeg.org/trac/ffmpeg/ticket/46> FFmpeg <http://ffmpeg.org> FFmpeg issue tracker

1 3

#50(FFplay:new): ffplay - bar at the right side of the video with -vlowres option enabled (mpeg4 codec)
by FFmpeg 27 Sep '12

27 Sep '12

#50: ffplay - bar at the right side of the video with -vlowres option enabled (mpeg4 codec) --------------------------+--------------------- Reporter: ami_stuff | Owner: michael Type: defect | Status: new Priority: normal | Component: FFplay Version: unspecified | Keywords: Blocked By: | Blocking: Reproduced: 0 | Analyzed: 0 --------------------------+--------------------- issue 2506 FFplay doesn't crash anymore with mpeg4 codec and -vlowres option enabled, but the displayed video is visually incorrect (bar at the right side of the display). This problem is not reproductible with FFmpeg. ffplay -vlowres 1 CDR-Dinner_LAN_800k.mp4 http://samples.mplayerhq.hu/MPEG-4/CDR-Dinner_LAN_800k.mp4 -------- C:\>ffmpeg -i C:\CDR-Dinner_LAN_800k.mp4 FFmpeg version git-N-28934-g610b963, Copyright (c) 2000-2011 the FFmpeg develope rs built on Apr 8 2011 00:01:49 with gcc 4.5.2 configuration: --arch=x86 --cross-prefix=i686-pc-mingw32- --target- os=mingw32 --prefix=/ffmpeg/builds/git-N-28934-g610b963-static --enable-memalign-hack --dis able-shared --enable-static --enable-w32threads --disable-debug --enable- gpl --e nable-version3 --enable-runtime-cpudetect --enable-zlib --enable-bzlib --enable- avisynth --enable-postproc --enable-libmp3lame --enable-libx264 --enable- libvorb is --enable-libtheora --enable-libspeex --enable-libopencore-amrnb --enable-libo pencore-amrwb --enable-libxvid --enable-libgsm --enable-libvpx --disable- decoder =libvpx --enable-librtmp --enable-libopenjpeg --enable-frei0r --enable- libxavs - -cc='ccache i686-pc-mingw32-gcc' libavutil 50. 40. 1 / 50. 40. 1 libavcodec 52.117. 0 / 52.117. 0 libavformat 52.106. 0 / 52.106. 0 libavdevice 52. 4. 0 / 52. 4. 0 libavfilter 1. 77. 1 / 1. 77. 1 libswscale 0. 13. 0 / 0. 13. 0 libpostproc 51. 2. 0 / 51. 2. 0 [mov,mp4,m4a,3gp,3g2,mj2 @ 0221f270] max_analyze_duration reached Seems stream 3 codec frame rate differs from container frame rate: 30000.00 (300 00/1) -> 29.97 (30000/1001) Input #0, mov,mp4,m4a,3gp,3g2,mj2, from 'C:\CDR-Dinner_LAN_800k.mp4': Metadata: creation_time : 2001-11-07 22:41:51 Duration: 00:00:30.06, start: 0.000000, bitrate: 664 kb/s Stream #0.0(und): Data: mp4s / 0x7334706D Metadata: creation_time : 2001-11-07 22:41:51 Stream #0.1(und): Data: mp4s / 0x7334706D Metadata: creation_time : 2001-11-07 22:41:51 Stream #0.2(und): Audio: aac, 44100 Hz, mono, s16, 64 kb/s Metadata: creation_time : 2001-11-07 22:41:51 Stream #0.3(und): Video: mpeg4, yuv420p, 352x242 [PAR 1:1 DAR 16:11], 594 kb /s, 24.25 fps, 29.97 tbr, 1k tbn, 30k tbc Metadata: creation_time : 2001-11-07 22:41:51 At least one output file must be specified -- Ticket URL: <https://ffmpeg.org/trac/ffmpeg/ticket/50> FFmpeg <http://ffmpeg.org> FFmpeg issue tracker

1 4

#64(avcodec:new): Crash when change resolution
by FFmpeg 27 Sep '12

27 Sep '12

#64: Crash when change resolution ----------------------+------------------------ Reporter: ivigasin | Type: defect Status: new | Priority: important Component: avcodec | Version: git Keywords: | Blocked By: Blocking: | Reproduced: 0 Analyzed: 0 | ----------------------+------------------------ Using latest version from GIT I try to decode H.264 file and FFmpeg crashes every time. The file contains several frames with ~900x700 resolution and one frame 1920x1080 (which does not to contradict to H.264 specification). Some time ago there was similar issue (issue2393 in old tracker) and it was successfully fixed. The bug was introduced again after git revision aecd0a4 (probably with ffmpeg-mt merge). If it is required I'll find the exact revision when the bug was introduced. Platform is WIN32. The command line is: ffmpeg -i all_filese_together.264 -f null out.raw Input file and FFmpeg information: C:\sdk\ffmpeg-git-mingw-release\bin>ffmpeg -v 9 -loglevel 99 -i all_filese_together.264 FFmpeg version git-N-29122-gb8a4444, Copyright (c) 2000-2011 the FFmpeg developers built on Apr 14 2011 05:02:24 with gcc 4.4.2 configuration: --target-os=mingw32 --cross-prefix=i686-mingw32- --disable-debug --cc='ccache i686-mingw32-gcc-4.4' --prefix=/home/ivan/opt /ffmpeg-git-mingw-release --enable-cross-compile --disable-hwaccels --disable-decoder=ass --enable-memalign-hack --arch=x86 --enable-gpl --e nable-version3 --enable-runtime-cpudetect --enable-ffplay --enable-shared --disable-static --disable-indevs --disable-network --enable-pthre ads libavutil 50. 40. 1 / 50. 40. 1 libavcodec 52.119. 0 / 52.119. 0 libavformat 52.107. 0 / 52.107. 0 libavdevice 52. 4. 0 / 52. 4. 0 libavfilter 1. 78. 0 / 1. 78. 0 libswscale 0. 13. 0 / 0. 13. 0 [NULL @ 0077f270] Probed with size=2048 and score=51 [h264 @ 00780280] Unsupported bit depth: 0 [h264 @ 00780280] missing picture in access unit [h264 @ 0077f270] Estimating duration from bitrate, this may be inaccurate Debugger information: (gdb) run ... ..... Seems stream 0 codec frame rate differs from container frame rate: 50.00 (50/1) -> 25.00 (50/2) Input #0, h264, from 'all_filese_together.264': Duration: N/A, bitrate: N/A Stream #0.0, 19, 1/1200000: Video: h264 (Baseline), yuv420p, 960x544, 1/50, 25 fps, 25 tbr, 1200k tbn, 50 tbc At least one output file must be specified libavfilter 1. 78. 0 / 1. 78. 0 libswscale 0. 13. 0 / 0. 13. 0 [h264 @ 008404c0] missing picture in access unit [h264 @ 0083f280] Estimating duration from bitrate, this may be inaccurate Seems stream 0 codec frame rate differs from container frame rate: 50.00 (50/1) -> 25.00 (50/2) Input #0, h264, from 'all_filese_together.264': Duration: N/A, bitrate: N/A Stream #0.0: Video: h264 (Baseline), yuv420p, 960x544, 25 fps, 25 tbr, 1200k tbn, 50 tbc [buffer @ 006bfe40] w:960 h:544 pixfmt:yuv420p Output #0, null, to 'out.raw': Metadata: encoder : Lavf52.107.0 Stream #0.0: Video: rawvideo, yuv420p, 960x544, q=2-31, 200 kb/s, 90k tbn, 25 tbc Stream mapping: Stream #0.0 -> #0.0 Press [q] to stop encoding Program received signal SIGSEGV, Segmentation fault. 0x6d78aeb9 in av_vsrc_buffer_add_frame2 (buffer_filter=0x6bfe40, frame=0x28eea8, pts=680000, pixel_aspect={num = 0, den = 1}, width=1920, height=1088, pix_fmt=PIX_FMT_YUV420P, sws_param=0x41a8d2 "0:0") at /home/ivan/sdk/ffmpeg-git/libavfilter/vsrc_buffer.c:60 60 av_log(buffer_filter, AV_LOG_INFO, "Changing filter graph input to accept %dx%d %d (%d %d)\n", (gdb) bt #0 0x6d78aeb9 in av_vsrc_buffer_add_frame2 (buffer_filter=0x6bfe40, frame=0x28eea8, pts=680000, pixel_aspect={num = 0, den = 1}, width=1920, height=1088, pix_fmt=PIX_FMT_YUV420P, sws_param=0x41a8d2 "0:0") at /home/ivan/sdk/ffmpeg-git/libavfilter/vsrc_buffer.c:60 #1 0x00406148 in output_packet (ist=<value optimized out>, ist_index=<value optimized out>, ost_table=0x8acf20, nb_ostreams=1, pkt=0x28f190) at /home/ivan/sdk/ffmpeg-git/ffmpeg.c:1638 #2 0x0040951a in transcode (nb_output_files=<value optimized out>, nb_input_files=<value optimized out>, stream_maps=<value optimized out>, nb_stream_maps=0) at /home/ivan/sdk /ffmpeg-git/ffmpeg.c:2709 #3 0x0040a8b3 in main (argc=6, argv=0x6b29f8) at /home/ivan/sdk/ffmpeg- git/ffmpeg.c:4459 (gdb) disass $pc-32 $pc+32 Dump of assembler code from 0x6d78ae99 to 0x6d78aed9: 0x6d78ae99 <av_vsrc_buffer_add_frame2+89>: mov 0x10c(%ebx),%ecx 0x6d78ae9f <av_vsrc_buffer_add_frame2+95>: mov 0x70(%esp),%edx 0x6d78aea3 <av_vsrc_buffer_add_frame2+99>: mov 0x20(%edx),%eax 0x6d78aea6 <av_vsrc_buffer_add_frame2+102>: mov 0x88(%esp),%edx 0x6d78aead <av_vsrc_buffer_add_frame2+109>: mov (%eax),%eax 0x6d78aeaf <av_vsrc_buffer_add_frame2+111>: mov 0x8(%eax),%eax 0x6d78aeb2 <av_vsrc_buffer_add_frame2+114>: mov %eax,0x4c(%esp) 0x6d78aeb6 <av_vsrc_buffer_add_frame2+118>: mov 0x20(%eax),%eax 0x6d78aeb9 <av_vsrc_buffer_add_frame2+121>: mov (%eax),%eax 0x6d78aebb <av_vsrc_buffer_add_frame2+123>: mov 0x38(%eax),%eax 0x6d78aebe <av_vsrc_buffer_add_frame2+126>: mov %ecx,0x18(%esp) 0x6d78aec2 <av_vsrc_buffer_add_frame2+130>: mov 0x90(%esp),%ecx 0x6d78aec9 <av_vsrc_buffer_add_frame2+137>: mov %edx,0xc(%esp) 0x6d78aecd <av_vsrc_buffer_add_frame2+141>: movl $0x6d79dfdc,0x8(%esp) 0x6d78aed5 <av_vsrc_buffer_add_frame2+149>: mov %eax,0x1c(%esp) End of assembler dump. (gdb) info all-registers eax 0x0 0 ecx 0x0 0 edx 0x780 1920 ebx 0xa30010 10682384 esp 0x28ec70 0x28ec70 ebp 0x28eea8 0x28eea8 esi 0x0 0 edi 0x1 1 eip 0x6d78aeb9 0x6d78aeb9 <av_vsrc_buffer_add_frame2+121> eflags 0x210283 [ CF SF IF RF ID ] cs 0x23 35 ss 0x2b 43 ds 0x2b 43 es 0x2b 43 fs 0x53 83 gs 0x2b 43 st0 -nan(0x707070707070707) (raw 0xffff0707070707070707) st1 -nan(0x707070707070707) (raw 0xffff0707070707070707) st2 -nan(0x8080808082828282) (raw 0xffff8080808082828282) st3 -nan(0x8080808082828282) (raw 0xffff8080808082828282) st4 -nan(0x8080808082828282) (raw 0xffff8080808082828282) st5 -nan(0x8080808082828282) (raw 0xffff8080808082828282) st6 1e+100 (raw 0x414b924d692ca61be800) st7 0 (raw 0x00000000000000000000) fctrl 0x37f 895 fstat 0x20 32 ftag 0xffff 65535 fiseg 0x23 35 fioff 0x406569 4220265 foseg 0x2b 43 fooff 0x8402fc 8651516 fop 0x0 0 xmm0 {v4_float = {0x0, 0x0, 0x0, 0x0}, v2_double = {0x0, 0x0}, v16_int8 = {0x0 <repeats 16 times>}, v8_int16 = {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, v4_int32 = {0x0, 0x0, 0x0, 0x0}, v2_int64 = {0x0, 0x0}, uint128 = 0x00000000000000000000000000000000} xmm1 {v4_float = {0x0, 0x0, 0x0, 0x0}, v2_double = {0x0, 0x0}, v16_int8 = {0x79, 0x0, 0x41, 0x0, 0x1, 0x0, 0x7b, 0x0, 0x21, 0x0, 0xff, 0xff, 0x1, 0x0, 0x4, 0x0}, v8_int16 = {0x79, 0x41, 0x1, 0x7b, 0x21, 0xffff, 0x1, 0x4}, v4_int32 = {0x410079, 0x7b0001, 0xffff0021, 0x40001}, v2_int64 = {0x7b000100410079, 0x40001ffff0021}, uint128 = 0x00040001ffff0021007b000100410079} xmm2 {v4_float = {0x0, 0x0, 0x0, 0x0}, v2_double = {0x0, 0x0}, v16_int8 = {0x7b, 0x0, 0x42, 0x0, 0xfe, 0xff, 0x79, 0x0, 0x1b, 0x0, 0xfb, 0xff, 0x0, 0x0, 0x5, 0x0}, v8_int16 = {0x7b, 0x42, 0xfffe, 0x79, 0x1b, 0xfffb, 0x0, 0x5}, v4_int32 = {0x42007b, 0x79fffe, 0xfffb001b, 0x50000}, v2_int64 = {0x79fffe0042007b, 0x50000fffb001b}, uint128 = 0x00050000fffb001b0079fffe0042007b} xmm3 {v4_float = {0x0, 0x0, 0x0, 0x0}, v2_double = {0x0, 0x0}, v16_int8 = {0x7d, 0x0, 0x41, 0x0, 0x1, 0x0, 0x7f, 0x0, 0x36, 0x0, 0x3, 0x0, 0x1, 0x0, 0x3, 0x0}, v8_int16 = {0x7d, 0x41, 0x1, 0x7f, 0x36, 0x3, 0x1, 0x3}, v4_int32 = {0x41007d, 0x7f0001, 0x30036, 0x30001}, v2_int64 = {0x7f00010041007d, 0x3000100030036}, uint128 = 0x0003000100030036007f00010041007d} xmm4 {v4_float = {0x0, 0x0, 0x0, 0x0}, v2_double = {0x0, 0x0}, v16_int8 = {0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0x0, 0x2, 0x0, 0x5, 0x0, 0x5, 0x0}, v8_int16 = {0x5, 0x4, 0x0, 0x3, 0x7, 0x2, 0x5, 0x5}, v4_int32 = {0x40005, 0x30000, 0x20007, 0x50005}, v2_int64 = {0x3000000040005, 0x5000500020007}, uint128 = 0x00050005000200070003000000040005} xmm5 {v4_float = {0x0, 0x0, 0x0, 0x0}, v2_double = {0x0, 0x0}, v16_int8 = {0x7d, 0x44, 0x0, 0x7b, 0x1d, 0x0, 0x2, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, v8_int16 = {0x447d, 0x7b00, 0x1d, 0x702, 0x0, 0x0, 0x0, 0x0}, v4_int32 = {0x7b00447d, 0x702001d, 0x0, 0x0}, v2_int64 = {0x702001d7b00447d, 0x0}, uint128 = 0x00000000000000000702001d7b00447d} st7 0 (raw 0x00000000000000000000) fctrl 0x37f 895 fstat 0x20 32 ftag 0xffff 65535 fiseg 0x23 35 fioff 0x406569 4220265 foseg 0x2b 43 fooff 0x8402fc 8651516 fop 0x0 0 xmm0 {v4_float = {0x0, 0x0, 0x0, 0x0}, v2_double = {0x0, 0x0}, v16_int8 = {0x0 <repeats 16 times>}, v8_int16 = {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, v4_int32 = {0x0, 0x0, 0x0, 0x0}, v2_int64 = {0x0, 0x0}, uint128 = 0x00000000000000000000000000000000} xmm1 {v4_float = {0x0, 0x0, 0x0, 0x0}, v2_double = {0x0, 0x0}, v16_int8 = {0x79, 0x0, 0x41, 0x0, 0x1, 0x0, 0x7b, 0x0, 0x21, 0x0, 0xff, 0xff, 0x1, 0x0, 0x4, 0x0}, v8_int16 = {0x79, 0x41, 0x1, 0x7b, 0x21, 0xffff, 0x1, 0x4}, v4_int32 = {0x410079, 0x7b0001, 0xffff0021, 0x40001}, v2_int64 = {0x7b000100410079, 0x40001ffff0021}, uint128 = 0x00040001ffff0021007b000100410079} xmm2 {v4_float = {0x0, 0x0, 0x0, 0x0}, v2_double = {0x0, 0x0}, v16_int8 = {0x7b, 0x0, 0x42, 0x0, 0xfe, 0xff, 0x79, 0x0, 0x1b, 0x0, 0xfb, 0xff, 0x0, 0x0, 0x5, 0x0}, v8_int16 = {0x7b, 0x42, 0xfffe, 0x79, 0x1b, 0xfffb, 0x0, 0x5}, v4_int32 = {0x42007b, 0x79fffe, 0xfffb001b, 0x50000}, v2_int64 = {0x79fffe0042007b, 0x50000fffb001b}, uint128 = 0x00050000fffb001b0079fffe0042007b} xmm3 {v4_float = {0x0, 0x0, 0x0, 0x0}, v2_double = {0x0, 0x0}, v16_int8 = {0x7d, 0x0, 0x41, 0x0, 0x1, 0x0, 0x7f, 0x0, 0x36, 0x0, 0x3, 0x0, 0x1, 0x0, 0x3, 0x0}, v8_int16 = {0x7d, 0x41, 0x1, 0x7f, 0x36, 0x3, 0x1, 0x3}, v4_int32 = {0x41007d, 0x7f0001, 0x30036, 0x30001}, v2_int64 = {0x7f00010041007d, 0x3000100030036}, uint128 = 0x0003000100030036007f00010041007d} xmm4 {v4_float = {0x0, 0x0, 0x0, 0x0}, v2_double = {0x0, 0x0}, v16_int8 = {0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0x0, 0x2, 0x0, 0x5, 0x0, 0x5, 0x0}, v8_int16 = {0x5, 0x4, 0x0, 0x3, 0x7, 0x2, 0x5, 0x5}, v4_int32 = {0x40005, 0x30000, 0x20007, 0x50005}, v2_int64 = {0x3000000040005, 0x5000500020007}, uint128 = 0x00050005000200070003000000040005} xmm5 {v4_float = {0x0, 0x0, 0x0, 0x0}, v2_double = {0x0, 0x0}, v16_int8 = {0x7d, 0x44, 0x0, 0x7b, 0x1d, 0x0, 0x2, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, v8_int16 = {0x447d, 0x7b00, 0x1d, 0x702, 0x0, 0x0, 0x0, 0x0}, v4_int32 = {0x7b00447d, 0x702001d, 0x0, 0x0}, v2_int64 = {0x702001d7b00447d, 0x0}, uint128 = 0x00000000000000000702001d7b00447d} ---Type <return> to continue, or q <return> to quit--- xmm6 {v4_float = {0x244582, 0x0, 0x0, 0x0}, v2_double = {0x0, 0x0}, v16_int8 = {0x9, 0x16, 0x11, 0x4a, 0x16, 0x0, 0x1c, 0x14, 0xe, 0x1c, 0xb, 0x8, 0x11, 0xb, 0x23, 0x5}, v8_int16 = {0x1609, 0x4a11, 0x16, 0x141c, 0x1c0e, 0x80b, 0xb11, 0x523}, v4_int32 = { 0x4a111609, 0x141c0016, 0x80b1c0e, 0x5230b11}, v2_int64 = {0x141c00164a111609, 0x5230b11080b1c0e}, uint128 = 0x05230b11080b1c0e141c00164a111609} xmm7 {v4_float = {0x0, 0x0, 0x0, 0x0}, v2_double = {0x0, 0x0}, v16_int8 = {0x0 <repeats 16 times>}, v8_int16 = {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, v4_int32 = {0x0, 0x0, 0x0, 0x0}, v2_int64 = {0x0, 0x0}, uint128 = 0x00000000000000000000000000000000} mxcsr 0x1f80 [ IM DM ZM OM UM PM ] mm0 {uint64 = 0x707070707070707, v2_int32 = {0x7070707, 0x7070707}, v4_int16 = {0x707, 0x707, 0x707, 0x707}, v8_int8 = {0x7, 0x7, 0x7, 0x7, 0x7, 0x7, 0x7, 0x7}} mm1 {uint64 = 0x707070707070707, v2_int32 = {0x7070707, 0x7070707}, v4_int16 = {0x707, 0x707, 0x707, 0x707}, v8_int8 = {0x7, 0x7, 0x7, 0x7, 0x7, 0x7, 0x7, 0x7}} mm2 {uint64 = 0x8080808082828282, v2_int32 = {0x82828282, 0x80808080}, v4_int16 = {0x8282, 0x8282, 0x8080, 0x8080}, v8_int8 = { 0x82, 0x82, 0x82, 0x82, 0x80, 0x80, 0x80, 0x80}} mm3 {uint64 = 0x8080808082828282, v2_int32 = {0x82828282, 0x80808080}, v4_int16 = {0x8282, 0x8282, 0x8080, 0x8080}, v8_int8 = { 0x82, 0x82, 0x82, 0x82, 0x80, 0x80, 0x80, 0x80}} mm4 {uint64 = 0x8080808082828282, v2_int32 = {0x82828282, 0x80808080}, v4_int16 = {0x8282, 0x8282, 0x8080, 0x8080}, v8_int8 = { 0x82, 0x82, 0x82, 0x82, 0x80, 0x80, 0x80, 0x80}} mm5 {uint64 = 0x8080808082828282, v2_int32 = {0x82828282, 0x80808080}, v4_int16 = {0x8282, 0x8282, 0x8080, 0x8080}, v8_int8 = { 0x82, 0x82, 0x82, 0x82, 0x80, 0x80, 0x80, 0x80}} mm6 {uint64 = 0x924d692ca61be800, v2_int32 = {0xa61be800, 0x924d692c}, v4_int16 = {0xe800, 0xa61b, 0x692c, 0x924d}, v8_int8 = { 0x0, 0xe8, 0x1b, 0xa6, 0x2c, 0x69, 0x4d, 0x92}} mm7 {uint64 = 0x0, v2_int32 = {0x0, 0x0}, v4_int16 = {0x0, 0x0, 0x0, 0x0}, v8_int8 = {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}} Thank you and kind regards, Ivan. -- Ticket URL: <https://ffmpeg.org/trac/ffmpeg/ticket/64> FFmpeg <http://ffmpeg.org> FFmpeg issue tracker

1 2

#69(avcodec:new): Crash on flic files with invalid frame size
by FFmpeg 27 Sep '12

27 Sep '12

#69: Crash on flic files with invalid frame size ------------------------+--------------------- Reporter: cehoyos | Owner: Type: defect | Status: new Priority: important | Component: avcodec Version: git | Keywords: flic Blocked By: | Blocking: Reproduced: 1 | Analyzed: 0 ------------------------+--------------------- (issue 2520) {{{ (gdb) r -i fli_invalid_framesize.fli -f null - FFmpeg version git-N-29196-ge61b83d, Copyright (c) 2000-2011 the FFmpeg developers built on Apr 19 2011 18:30:07 with gcc 4.5.2 configuration: --enable-gpl --cc=/usr/local/gcc-4.5.2/bin/gcc libavutil 50. 40. 1 / 50. 40. 1 libavcodec 52.120. 0 / 52.120. 0 libavformat 52.108. 0 / 52.108. 0 libavdevice 52. 4. 0 / 52. 4. 0 libavfilter 1. 79. 1 / 1. 79. 1 libswscale 0. 13. 0 / 0. 13. 0 [flic @ 0x128d660] Estimating duration from bitrate, this may be inaccurate Input #0, flic, from 'fli_invalid_framesize.fli': Duration: N/A, start: 0.000000, bitrate: N/A Stream #0.0: Video: flic, pal8, 320x200, 35 tbr, 35 tbn, 35 tbc [buffer @ 0x12955d0] w:320 h:200 pixfmt:pal8 Output #0, null, to 'pipe:': Metadata: encoder : Lavf52.108.0 Stream #0.0: Video: rawvideo, pal8, 320x200, q=2-31, 200 kb/s, 90k tbn, 35 tbc Stream mapping: Stream #0.0 -> #0.0 Press [q] to stop encoding Program received signal SIGSEGV, Segmentation fault. 0x00000000005dd327 in flic_decode_frame_8BPP (buf_size=13186, buf=0x1290af0 "\202\063", data_size=0x7fffffffccfc, data=0x7fffffffc9f0, avctx=0x1290040) at libavcodec/flicvideo.c:183 183 chunk_size = AV_RL32(&buf[stream_ptr]); (gdb) bt #0 0x00000000005dd327 in flic_decode_frame_8BPP (buf_size=13186, buf=0x1290af0 "\202\063", data_size=0x7fffffffccfc, data=0x7fffffffc9f0, avctx=0x1290040) at libavcodec/flicvideo.c:183 #1 flic_decode_frame (buf_size=13186, buf=0x1290af0 "\202\063", data_size=0x7fffffffccfc, data=0x7fffffffc9f0, avctx=0x1290040) at libavcodec/flicvideo.c:713 #2 0x00000000007adbb8 in avcodec_decode_video2 (avctx=0x1290040, picture=0x7fffffffc9f0, got_picture_ptr=0x7fffffffccfc, avpkt=0x7fffffffcba0) at libavcodec/utils.c:719 #3 0x00000000004089d4 in output_packet (ist=<value optimized out>, ist_index=0, ost_table=0x1290a80, nb_ostreams=1, pkt=<value optimized out>) at ffmpeg.c:1578 #4 0x000000000040b560 in transcode (nb_output_files=1, nb_input_files=1, stream_maps=0x0, nb_stream_maps=0, input_files=0xd1b3c0, output_files=0xd1b0a0) at ffmpeg.c:2719 #5 0x00000000004100ed in main (argc=6, argv=<value optimized out>) at ffmpeg.c:4463 (gdb) disass $pc-32 $pc+32 Dump of assembler code from 0x5dd307 to 0x5dd347: 0x00000000005dd307 <flic_decode_frame_8BPP+1887>: rorb %cl,(%rdi) 0x00000000005dd309 <flic_decode_frame_8BPP+1889>: test %ch,(%rax) 0x00000000005dd30b <flic_decode_frame_8BPP+1891>: or %eax,(%rax) 0x00000000005dd30d <flic_decode_frame_8BPP+1893>: add %cl,-0x73(%rcx) 0x00000000005dd310 <flic_decode_frame_8BPP+1896>: pop %rdi 0x00000000005dd311 <flic_decode_frame_8BPP+1897>: add %eax,-0x43befe16(%rbx) 0x00000000005dd317 <flic_decode_frame+2167>: adc %al,(%rax) 0x00000000005dd319 <flic_decode_frame+2169>: add %al,(%rax) 0x00000000005dd31b <flic_decode_frame_8BPP+1907>: mov %edx,0x4c(%rsp) 0x00000000005dd31f <flic_decode_frame_8BPP+1911>: mov %rbx,0x68(%rsp) 0x00000000005dd324 <flic_decode_frame_8BPP+1916>: movslq %r12d,%rax 0x00000000005dd327 <flic_decode_frame_8BPP+1919>: mov (%r15,%rax,1),%eax 0x00000000005dd32b <flic_decode_frame_8BPP+1923>: mov %eax,0x40(%rsp) 0x00000000005dd32f <flic_decode_frame_8BPP+1927>: lea 0x4(%r12),%eax 0x00000000005dd334 <flic_decode_frame_8BPP+1932>: add $0x6,%r12d 0x00000000005dd338 <flic_decode_frame_8BPP+1936>: cltq 0x00000000005dd33a <flic_decode_frame_8BPP+1938>: movzwl (%r15,%rax,1),%edx 0x00000000005dd33f <flic_decode_frame_8BPP+1943>: movzwl %dx,%eax 0x00000000005dd342 <flic_decode_frame_8BPP+1946>: sub $0x4,%edx 0x00000000005dd345 <flic_decode_frame_8BPP+1949>: cmp $0xe,%dx End of assembler dump. (gdb) info register rax 0x20031a 2097946 rbx 0x1 1 rcx 0x2 2 rdx 0x200301 2097921 rsi 0x100 256 rdi 0x100 256 rbp 0xff 0xff rsp 0x7fffffffc680 0x7fffffffc680 r8 0x100 256 r9 0x1 1 r10 0x1 1 r11 0x20031a 2097946 r12 0x20031a 2097946 r13 0x7fffffffc9f0 140737488341488 r14 0x1295a60 19487328 r15 0x1290af0 19466992 rip 0x5dd327 0x5dd327 <flic_decode_frame_8BPP+1919> eflags 0x10202 [ IF RF ] cs 0x33 51 ss 0x2b 43 ds 0x0 0 es 0x0 0 fs 0x0 0 gs 0x0 0 fctrl 0x37f 895 fstat 0x0 0 ftag 0xffff 65535 fiseg 0x0 0 fioff 0x0 0 foseg 0x0 0 fooff 0x0 0 fop 0x0 0 mxcsr 0x1fa0 [ PE IM DM ZM OM UM PM ] }}} -- Ticket URL: <https://avcodec.org/trac/ffmpeg/ticket/69> FFmpeg <http://ffmpeg.org> FFmpeg issue tracker

1 2

#136(undetermined:new): lowres with wmv2 crashes ffmpeg
by FFmpeg 27 Sep '12

27 Sep '12

#136: lowres with wmv2 crashes ffmpeg --------------------------+-------------------------- Reporter: ami_stuff | Type: defect Status: new | Priority: normal Component: undetermined | Version: unspecified Keywords: | Blocked By: Blocking: | Reproduced: 0 Analyzed: 0 | --------------------------+-------------------------- issue 2510 {{{ C:\>ffmpeg -i C:\WMV-WMV8_WMA8.wmv FFmpeg version git-N-29181-ga304071, Copyright (c) 2000-2011 the FFmpeg develope rs built on Apr 18 2011 21:24:03 with gcc 4.5.2 configuration: --enable-gpl --enable-version3 --enable-runtime-cpudetect --ena ble-memalign-hack --enable-avisynth --enable-bzlib --enable-frei0r --enable-libo pencore-amrnb --enable-libopencore-amrwb --enable-libfreetype --enable- libgsm -- enable-libmp3lame --enable-libopenjpeg --enable-librtmp --enable- libschroedinger --enable-libspeex --enable-libtheora --enable-libvorbis --enable-libvpx --enabl e-libx264 --enable-libxavs --enable-libxvid --enable-zlib --cross- prefix=i686-w6 4-mingw32- --target-os=mingw32 --arch=x86_32 --extra- cflags=-I/home/kyle/softwar e/ffmpeg/external-libraries/win32/include --extra- ldflags=-L/home/kyle/software/ ffmpeg/external-libraries/win32/lib --pkg-config=pkg-config libavutil 50. 40. 1 / 50. 40. 1 libavcodec 52.120. 0 / 52.120. 0 libavformat 52.108. 0 / 52.108. 0 libavdevice 52. 4. 0 / 52. 4. 0 libavfilter 1. 79. 0 / 1. 79. 0 libswscale 0. 13. 0 / 0. 13. 0 Seems stream 1 codec frame rate differs from container frame rate: 1000.00 (1000 /1) -> 24.00 (24/1) Input #0, asf, from 'C:\WMV-WMV8_WMA8.wmv': Metadata: title : artist : copyright : comment : WMFSDKVersion : 7.01.00.3055 WMFSDKNeeded : 0.0.0.0000 Duration: 00:00:06.44, start: 0.000000, bitrate: 146 kb/s Stream #0.0: Audio: wmav2, 16000 Hz, 2 channels, s16, 16 kb/s Stream #0.1: Video: wmv2, yuv420p, 160x120, 24 tbr, 1k tbn, 1k tbc At least one output file must be specified }}} -- Ticket URL: <https://ffmpeg.org/trac/ffmpeg/ticket/136> FFmpeg <http://ffmpeg.org> FFmpeg issue tracker

1 2

#71(avcodec:new): Segmentation fault with interlaced MPEG2 sample
by FFmpeg 27 Sep '12

27 Sep '12

#71: Segmentation fault with interlaced MPEG2 sample ------------------------+--------------------- Reporter: cehoyos | Owner: Type: defect | Status: new Priority: important | Component: avcodec Version: git | Keywords: Blocked By: | Blocking: Reproduced: 1 | Analyzed: 0 ------------------------+--------------------- (issue 2367) Attached interlaced MPEG2 sample from Optelecom Siqura C-60 E-MC crashes FFmpeg {{{ (gdb) r -i exploit.bin FFmpeg version git-N-29196-ge61b83d, Copyright (c) 2000-2011 the FFmpeg developers built on Apr 19 2011 19:44:16 with gcc 4.4.5 configuration: --cc='/usr/local/gcc-4.4.5/bin/gcc -m32' --disable-asm libavutil 50. 40. 1 / 50. 40. 1 libavcodec 52.120. 0 / 52.120. 0 libavformat 52.108. 0 / 52.108. 0 libavdevice 52. 4. 0 / 52. 4. 0 libavfilter 1. 79. 1 / 1. 79. 1 libswscale 0. 13. 0 / 0. 13. 0 Program received signal SIGSEGV, Segmentation fault. 0x081781e0 in put_pixels8_8_c (h=<value optimized out>, line_size=<value optimized out>, pixels=<value optimized out>, block=<value optimized out>) at libavcodec/dsputil_internal.h:756 756 PIXOP2(put, op_put) (gdb) bt #0 0x081781e0 in put_pixels8_8_c (h=<value optimized out>, line_size=<value optimized out>, pixels=<value optimized out>, block=<value optimized out>) at libavcodec/dsputil_internal.h:756 #1 put_pixels16_8_c (h=<value optimized out>, line_size=<value optimized out>, pixels=<value optimized out>, block=<value optimized out>) at libavcodec/dsputil_internal.h:756 #2 0x083a6ace in mpeg_motion_internal (mb_y=<value optimized out>, is_mpeg12=<value optimized out>, h=<value optimized out>, motion_y=<value optimized out>, motion_x=<value optimized out>, pix_op=<value optimized out>, ref_picture=<value optimized out>, field_select=<value optimized out>, bottom_field=<value optimized out>, field_based=<value optimized out>, dest_cr=<value optimized out>, dest_cb=<value optimized out>, dest_y=<value optimized out>, s=<value optimized out>) at libavcodec/mpegvideo_common.h:352 #3 mpeg_motion (mb_y=<value optimized out>, is_mpeg12=<value optimized out>, h=<value optimized out>, motion_y=<value optimized out>, motion_x=<value optimized out>, pix_op=<value optimized out>, ref_picture=<value optimized out>, field_select=<value optimized out>, bottom_field=<value optimized out>, field_based=<value optimized out>, dest_cr=<value optimized out>, dest_cb=<value optimized out>, dest_y=<value optimized out>, s=<value optimized out>) at libavcodec/mpegvideo_common.h:375 #4 MPV_motion_internal (mb_y=<value optimized out>, is_mpeg12=<value optimized out>, h=<value optimized out>, motion_y=<value optimized out>, motion_x=<value optimized out>, pix_op=<value optimized out>, ref_picture=<value optimized out>, field_select=<value optimized out>, bottom_field=<value optimized out>, field_based=<value optimized out>, dest_cr=<value optimized out>, dest_cb=<value optimized out>, dest_y=<value optimized out>, s=<value optimized out>) at libavcodec/mpegvideo_common.h:823 #5 MPV_motion (mb_y=<value optimized out>, is_mpeg12=<value optimized out>, h=<value optimized out>, motion_y=<value optimized out>, motion_x=<value optimized out>, pix_op=<value optimized out>, ref_picture=<value optimized out>, field_select=<value optimized out>, bottom_field=<value optimized out>, field_based=<value optimized out>, dest_cr=<value optimized out>, dest_cb=<value optimized out>, dest_y=<value optimized out>, s=<value optimized out>) at libavcodec/mpegvideo_common.h:892 #6 0x083afec1 in MPV_decode_mb_internal (is_mpeg12=<value optimized out>, lowres_flag=<value optimized out>, block=<value optimized out>, s=<value optimized out>) at libavcodec/mpegvideo.c:2117 #7 MPV_decode_mb (is_mpeg12=<value optimized out>, lowres_flag=<value optimized out>, block=<value optimized out>, s=<value optimized out>) at libavcodec/mpegvideo.c:2253 #8 0x0836070b in mpeg_decode_slice (s1=0x8c69c50, mb_y=<value optimized out>, buf=<value optimized out>, buf_size=501) at libavcodec/mpeg12.c:1843 #9 0x08366d18 in decode_chunks (avctx=<value optimized out>, picture=<value optimized out>, data_size=<value optimized out>, buf=0x8c77e60 "", buf_size=11505) at libavcodec/mpeg12.c:2535 #10 0x08367240 in mpeg_decode_frame (avctx=0x8c69690, data=0xffffcbc4, data_size=0xffffcd8c, avpkt=0x8c6f880) at libavcodec/mpeg12.c:2323 #11 0x08479077 in avcodec_decode_video2 (avctx=0x8c69690, picture=0xffffcbc4, got_picture_ptr=0xffffcd8c, avpkt=0x8c6f880) at libavcodec/utils.c:719 #12 0x08119231 in try_decode_frame (avpkt=<value optimized out>, st=<value optimized out>) at libavformat/utils.c:2127 #13 av_find_stream_info (avpkt=<value optimized out>, st=<value optimized out>) at libavformat/utils.c:2417 #14 0x0804d7d6 in opt_input_file (filename=0xffffd28b "exploit.bin") at ffmpeg.c:3303 #15 0x08059e85 in parse_options (argc=3, argv=0xffffd024, options=0x85c7800, parse_arg_function=0x8056790 <opt_output_file>) at cmdutils.c:222 #16 0x08055c51 in main (argc=3, argv=0xffffd024) at ffmpeg.c:4443 (gdb) disass $pc-12 $pc+32 Dump of assembler code from 0x81781d4 to 0x8178200: 0x081781d4 <put_pixels8_8_c+0>: test %esi,%esi 0x081781d6 <put_pixels8_8_c+2>: jle 0x8178219 <put_pixels16_8_c+89> 0x081781d8 <put_pixels8_8_c+4>: xor %eax,%eax 0x081781da <put_pixels8_8_c+6>: xor %ebx,%ebx 0x081781dc <put_pixels8_8_c+8>: lea 0x0(%esi,%eiz,1),%esi 0x081781e0 <put_pixels8_8_c+12>: mov (%ecx,%eax,1),%ebp 0x081781e3 <put_pixels8_8_c+15>: add $0x1,%ebx 0x081781e6 <put_pixels8_8_c+18>: mov %ebp,(%edx,%eax,1) 0x081781e9 <put_pixels8_8_c+21>: mov 0x4(%ecx,%eax,1),%ebp 0x081781ed <put_pixels8_8_c+25>: mov %ebp,0x4(%edx,%eax,1) 0x081781f1 <put_pixels8_8_c+29>: add %edi,%eax 0x081781f3 <put_pixels8_8_c+31>: cmp %esi,%ebx 0x081781f5 <put_pixels8_8_c+33>: jne 0x81781e0 <put_pixels8_8_c+12> 0x081781f7 <put_pixels8_8_c+35>: xor %eax,%eax 0x081781f9 <put_pixels8_8_c+37>: xor %ebx,%ebx 0x081781fb <put_pixels8_8_c+39>: nop 0x081781fc <put_pixels8_8_c+40>: lea 0x0(%esi,%eiz,1),%esi End of assembler dump. (gdb) info register eax 0x0 0 ecx 0x2f0 752 edx 0xf7c9c220 -137772512 ebx 0x0 0 esp 0xffffc67c 0xffffc67c ebp 0x10 0x10 esi 0x10 16 edi 0x5e0 1504 eip 0x81781e0 0x81781e0 <put_pixels8_8_c+12> eflags 0x10246 [ PF ZF IF RF ] cs 0x23 35 ss 0x2b 43 ds 0x2b 43 es 0x2b 43 fs 0x0 0 gs 0x63 99 }}} -- Ticket URL: <https://avcodec.org/trac/ffmpeg/ticket/71> FFmpeg <http://ffmpeg.org> FFmpeg issue tracker

1 2