April 2023 - FFmpeg-trac - lists.ffmpeg.org

#10313(undetermined:new): Live CSTAR dailymotion is very choppy with ffplay; smooth with VLC
by FFmpeg 08 Apr '23

08 Apr '23

#10313: Live CSTAR dailymotion is very choppy with ffplay; smooth with VLC -------------------------------------+------------------------------------- Reporter: joaopa | Type: defect Status: new | Priority: normal Component: | Version: undetermined | unspecified Keywords: | Blocked By: Blocking: | Reproduced by developer: 0 Analyzed by developer: 0 | -------------------------------------+------------------------------------- Summary of the bug: How to reproduce: {{{ Be careful the site is geoblocked Go to the site https://www.dailymotion.com/video/x5gv5v0 with firefox open inpstecor/network. And copy the url looking like https://stream-04.sv4.dailymotion.com/sec(3uHXKsK7_- J9YIYIiNPgOATzv7tm50ViU2YsR28h_U3ObFO0LrbFbHq4PD9Yuq25)/p/dm/3/x5gv5v0/d/live-2.m3u ffmpeg version built on [cplayer] built on Fri Mar 10 04:45:53 2023 [cplayer] FFmpeg library versions: [cplayer] libavutil 58.2.100 [cplayer] libavcodec 60.3.100 [cplayer] libavformat 60.3.100 [cplayer] libswscale 7.1.100 [cplayer] libavfilter 9.3.100 [cplayer] libswresample 4.10.100 [cplayer] FFmpeg version: 6.0 }}} -- Ticket URL: <https://trac.ffmpeg.org/ticket/10313> FFmpeg <https://ffmpeg.org> FFmpeg issue tracker

1 2

#10303(undetermined:new): https a lot of reconnects/206 requests with particular files
by FFmpeg 06 Apr '23

06 Apr '23

#10303: https a lot of reconnects/206 requests with particular files -------------------------------------+------------------------------------- Reporter: maclin | Type: defect Status: new | Priority: normal Component: | Version: undetermined | unspecified Keywords: | Blocked By: Blocking: | Reproduced by developer: 0 Analyzed by developer: 0 | -------------------------------------+------------------------------------- Summary of the bug: How to reproduce: {{{ ffmpeg version 4.2.8 Copyright (c) 2000-2022 the FFmpeg developers built with gcc 9 (Ubuntu 9.4.0-1ubuntu1~20.04.1) configuration: --disable-debug --disable-doc --disable-ffplay --enable- avresample --enable-cuda --enable-cuvid --enable-fontconfig --enable-gpl --enable-libaom --enable-libaribb24 --enable-libass --enable-libbluray --enable-libfdk_aac --enable-libfreetype --enable-libkvazaar --enable- libmp3lame --enable-libnpp --enable-libopencore-amrnb --enable- libopencore-amrwb --enable-libopenjpeg --enable-libopus --enable-libsrt --enable-libtheora --enable-libvidstab --enable-libvorbis --enable-libvpx --enable-libwebp --enable-libx264 --enable-libx265 --enable-libxcb --enable-libxvid --enable-libzmq --enable-nonfree --enable-nvenc --enable- openssl --enable-postproc --enable-shared --enable-small --enable-version3 --extra-cflags='-I/opt/ffmpeg/include -I/opt/ffmpeg/include/ffnvcodec -I/usr/local/cuda/include/' --extra-ldflags='-L/opt/ffmpeg/lib -L/usr/local/cuda/lib64 -L/usr/local/cuda/lib32/' --extra-libs=-ldl --extra-libs=-lpthread --prefix=/opt/ffmpeg libavutil 56. 31.100 / 56. 31.100 libavcodec 58. 54.100 / 58. 54.100 libavformat 58. 29.100 / 58. 29.100 libavdevice 58. 8.100 / 58. 8.100 libavfilter 7. 57.100 / 7. 57.100 libavresample 4. 0. 0 / 4. 0. 0 libswscale 5. 5.100 / 5. 5.100 libswresample 3. 5.100 / 3. 5.100 libpostproc 55. 5.100 / 55. 5.100 ffmpeg -v verbose -xerror -progress progressbar_1_pass1_350 -reconnect 1 -reconnect_delay_max 60 -timeout 60000 -i https://storage.local/input/2023-03-31-20-26-17.mxf -an -pass 1 -passlogfile passlog_1 -threads 0 -codec:v libx264 -b:v 350k -flags +loop+mv4 -cmp 256 -partitions +parti4x4+parti8x8+partp4x4+partp8x8+partb8x8 -me_method hex -subq 7 -trellis 1 -refs 5 -bf 3 -x264opts b-pyramid=normal:weightb:mixed_refs:8x8dct -coder 1 -me_range 16 -g 25 -keyint_min 25 -r 25 -sc_threshold 0 -i_qfactor 0.71 -qmin 0 -qmax 40 -qdiff 4 -s 640x360 -aspect 16:9 -pix_fmt yuv420p -movflags +faststart -f rawvideo -y /dev/null }}} On output i see this (small part of it): {{{ [tcp @ 0x56217ca91180] Starting connection attempt to 10.100.0.90 port 443 [tcp @ 0x56217ca91180] Successfully connected to 10.100.0.90 port 443 [tcp @ 0x56217ca009c0] Starting connection attempt to 10.100.0.90 port 443 [tcp @ 0x56217ca009c0] Successfully connected to 10.100.0.90 port 443 [tcp @ 0x56217cfbd0c0] Starting connection attempt to 10.100.0.90 port 443 [tcp @ 0x56217cfbd0c0] Successfully connected to 10.100.0.90 port 443 [tcp @ 0x56217ca8c300] Starting connection attempt to 10.100.0.90 port 443 [tcp @ 0x56217ca8c300] Successfully connected to 10.100.0.90 port 443 [tcp @ 0x56217c9eeb00] Starting connection attempt to 10.100.0.90 port 443 [tcp @ 0x56217c9eeb00] Successfully connected to 10.100.0.90 port 443 [tcp @ 0x56217ca00cc0] Starting connection attempt to 10.100.0.90 port 443 [tcp @ 0x56217ca00cc0] Successfully connected to 10.100.0.90 port 443 [tcp @ 0x56217ca944c0] Starting connection attempt to 10.100.0.90 port 443 [tcp @ 0x56217ca944c0] Successfully connected to 10.100.0.90 port 443 }}} And on nginx logs i see this (small part of it): {{{ 10.100.0.91 - - [03/Apr/2023:07:58:10 +0000] "GET /input/2023-03-31-20-26-17.mxf HTTP/1.1" 206 4 "-" "Lavf/58.29.100" "-" "LOCATION_NAME=" "REQ_TIME=0.000" "CONN_TIME=0.004" 10.100.0.91 - - [03/Apr/2023:07:58:10 +0000] "GET /input/2023-03-31-20-26-17.mxf HTTP/1.1" 206 114362 "-" "Lavf/58.29.100" "-" "LOCATION_NAME=" "REQ_TIME=0.010" "CONN_TIME=0.014" 10.100.0.91 - - [03/Apr/2023:07:58:10 +0000] "GET /input/2023-03-31-20-26-17.mxf HTTP/1.1" 206 96 "-" "Lavf/58.29.100" "-" "LOCATION_NAME=" "REQ_TIME=0.000" "CONN_TIME=0.004" 10.100.0.91 - - [03/Apr/2023:07:58:10 +0000] "GET /input/2023-03-31-20-26-17.mxf HTTP/1.1" 206 130746 "-" "Lavf/58.29.100" "-" "LOCATION_NAME=" "REQ_TIME=0.010" "CONN_TIME=0.015" 10.100.0.91 - - [03/Apr/2023:07:58:10 +0000] "GET /input/2023-03-31-20-26-17.mxf HTTP/1.1" 206 1120 "-" "Lavf/58.29.100" "-" "LOCATION_NAME=" "REQ_TIME=0.000" "CONN_TIME=0.005" 10.100.0.91 - - [03/Apr/2023:07:58:10 +0000] "GET /input/2023-03-31-20-26-17.mxf HTTP/1.1" 206 130742 "-" "Lavf/58.29.100" "-" "LOCATION_NAME=" "REQ_TIME=0.009" "CONN_TIME=0.014" 10.100.0.91 - - [03/Apr/2023:07:58:10 +0000] "GET /input/2023-03-31-20-26-17.mxf HTTP/1.1" 206 114356 "-" "Lavf/58.29.100" "-" "LOCATION_NAME=" "REQ_TIME=0.010" "CONN_TIME=0.014" 10.100.0.91 - - [03/Apr/2023:07:58:10 +0000] "GET /input/2023-03-31-20-26-17.mxf HTTP/1.1" 206 114355 "-" "Lavf/58.29.100" "-" "LOCATION_NAME=" "REQ_TIME=0.010" "CONN_TIME=0.015" 10.100.0.91 - - [03/Apr/2023:07:58:10 +0000] "GET /input/2023-03-31-20-26-17.mxf HTTP/1.1" 206 97971 "-" "Lavf/58.29.100" "-" "LOCATION_NAME=" "REQ_TIME=0.010" "CONN_TIME=0.014" 10.100.0.91 - - [03/Apr/2023:07:58:10 +0000] "GET /input/2023-03-31-20-26-17.mxf HTTP/1.1" 206 6782646 "-" "Lavf/58.29.100" "-" "LOCATION_NAME=" "REQ_TIME=0.226" "CONN_TIME=0.231" 10.100.0.91 - - [03/Apr/2023:07:58:10 +0000] "GET /input/2023-03-31-20-26-17.mxf HTTP/1.1" 206 1425076 "-" "Lavf/58.29.100" "-" "LOCATION_NAME=" "REQ_TIME=0.045" "CONN_TIME=0.048" 10.100.0.91 - - [03/Apr/2023:07:58:10 +0000] "GET /input/2023-03-31-20-26-17.mxf HTTP/1.1" 206 1392308 "-" "Lavf/58.29.100" "-" "LOCATION_NAME=" "REQ_TIME=0.043" "CONN_TIME=0.047" 10.100.0.91 - - [03/Apr/2023:07:58:10 +0000] "GET /input/2023-03-31-20-26-17.mxf HTTP/1.1" 206 1408692 "-" "Lavf/58.29.100" "-" "LOCATION_NAME=" "REQ_TIME=0.052" "CONN_TIME=0.056" 10.100.0.91 - - [03/Apr/2023:07:58:10 +0000] "GET /input/2023-03-31-20-26-17.mxf HTTP/1.1" 206 1425076 "-" "Lavf/58.29.100" "-" "LOCATION_NAME=" "REQ_TIME=0.045" "CONN_TIME=0.049" 10.100.0.91 - - [03/Apr/2023:07:58:10 +0000] "GET /input/2023-03-31-20-26-17.mxf HTTP/1.1" 206 1425076 "-" "Lavf/58.29.100" "-" "LOCATION_NAME=" "REQ_TIME=0.043" "CONN_TIME=0.047" 10.100.0.91 - - [03/Apr/2023:07:58:11 +0000] "GET /input/2023-03-31-20-26-17.mxf HTTP/1.1" 206 1425075 "-" "Lavf/58.29.100" "-" "LOCATION_NAME=" "REQ_TIME=0.039" "CONN_TIME=0.043" 10.100.0.91 - - [03/Apr/2023:07:58:11 +0000] "GET /input/2023-03-31-20-26-17.mxf HTTP/1.1" 206 1408691 "-" "Lavf/58.29.100" "-" "LOCATION_NAME=" "REQ_TIME=0.042" "CONN_TIME=0.045" 10.100.0.91 - - [03/Apr/2023:07:58:11 +0000] "GET /input/2023-03-31-20-26-17.mxf HTTP/1.1" 206 1441459 "-" "Lavf/58.29.100" "-" "LOCATION_NAME=" "REQ_TIME=0.041" "CONN_TIME=0.044" 10.100.0.91 - - [03/Apr/2023:07:58:11 +0000] "GET /input/2023-03-31-20-26-17.mxf HTTP/1.1" 206 1425075 "-" "Lavf/58.29.100" "-" "LOCATION_NAME=" "REQ_TIME=0.040" "CONN_TIME=0.043" 10.100.0.91 - - [03/Apr/2023:07:58:11 +0000] "GET /input/2023-03-31-20-26-17.mxf HTTP/1.1" 206 1392307 "-" "Lavf/58.29.100" "-" "LOCATION_NAME=" "REQ_TIME=0.040" "CONN_TIME=0.044" 10.100.0.91 - - [03/Apr/2023:07:58:11 +0000] "GET /input/2023-03-31-20-26-17.mxf HTTP/1.1" 206 1408691 "-" "Lavf/58.29.100" "-" "LOCATION_NAME=" "REQ_TIME=0.039" "CONN_TIME=0.043" 10.100.0.91 - - [03/Apr/2023:07:58:11 +0000] "GET /input/2023-03-31-20-26-17.mxf HTTP/1.1" 206 1425075 "-" "Lavf/58.29.100" "-" "LOCATION_NAME=" "REQ_TIME=0.042" "CONN_TIME=0.045" 10.100.0.91 - - [03/Apr/2023:07:58:11 +0000] "GET /input/2023-03-31-20-26-17.mxf HTTP/1.1" 206 1752755 "-" "Lavf/58.29.100" "-" "LOCATION_NAME=" "REQ_TIME=0.049" "CONN_TIME=0.053" 10.100.0.91 - - [03/Apr/2023:07:58:11 +0000] "GET /input/2023-03-31-20-26-17.mxf HTTP/1.1" 206 1392307 "-" "Lavf/58.29.100" "-" "LOCATION_NAME=" "REQ_TIME=0.040" "CONN_TIME=0.044" 10.100.0.91 - - [03/Apr/2023:07:58:11 +0000] "GET /input/2023-03-31-20-26-17.mxf HTTP/1.1" 206 1408691 "-" "Lavf/58.29.100" "-" "LOCATION_NAME=" "REQ_TIME=0.048" "CONN_TIME=0.052" 10.100.0.91 - - [03/Apr/2023:07:58:11 +0000] "GET /input/2023-03-31-20-26-17.mxf HTTP/1.1" 206 1719987 "-" "Lavf/58.29.100" "-" "LOCATION_NAME=" "REQ_TIME=0.050" "CONN_TIME=0.053" 10.100.0.91 - - [03/Apr/2023:07:58:11 +0000] "GET /input/2023-03-31-20-26-17.mxf HTTP/1.1" 206 1425075 "-" "Lavf/58.29.100" "-" "LOCATION_NAME=" "REQ_TIME=0.040" "CONN_TIME=0.044" }}} If i change input from http to https - then i see fast encoding (6x instead of 1-2x) and no reconnects. On nginx side i see last big 206 request {{{ 10.100.0.91 - - [03/Apr/2023:08:01:03 +0000] "GET /input/2023-03-31-20-26-17.mxf HTTP/1.1" 206 4 "-" "Lavf/58.29.100" "-" "LOCATION_NAME=" "REQ_TIME=0.000" "CONN_TIME=0.000" 10.100.0.91 - - [03/Apr/2023:08:01:03 +0000] "GET /input/2023-03-31-20-26-17.mxf HTTP/1.1" 206 109722 "-" "Lavf/58.29.100" "-" "LOCATION_NAME=" "REQ_TIME=0.006" "CONN_TIME=0.005" 10.100.0.91 - - [03/Apr/2023:08:01:03 +0000] "GET /input/2023-03-31-20-26-17.mxf HTTP/1.1" 206 96 "-" "Lavf/58.29.100" "-" "LOCATION_NAME=" "REQ_TIME=0.000" "CONN_TIME=0.000" 10.100.0.91 - - [03/Apr/2023:08:01:03 +0000] "GET /input/2023-03-31-20-26-17.mxf HTTP/1.1" 206 1120 "-" "Lavf/58.29.100" "-" "LOCATION_NAME=" "REQ_TIME=0.000" "CONN_TIME=0.000" 10.100.0.91 - - [03/Apr/2023:08:01:03 +0000] "GET /input/2023-03-31-20-26-17.mxf HTTP/1.1" 206 286378 "-" "Lavf/58.29.100" "-" "LOCATION_NAME=" "REQ_TIME=0.006" "CONN_TIME=0.006" 10.100.0.91 - - [03/Apr/2023:08:01:03 +0000] "GET /input/2023-03-31-20-26-17.mxf HTTP/1.1" 206 109716 "-" "Lavf/58.29.100" "-" "LOCATION_NAME=" "REQ_TIME=0.005" "CONN_TIME=0.005" 10.100.0.91 - - [03/Apr/2023:08:01:03 +0000] "GET /input/2023-03-31-20-26-17.mxf HTTP/1.1" 206 109715 "-" "Lavf/58.29.100" "-" "LOCATION_NAME=" "REQ_TIME=0.004" "CONN_TIME=0.004" 10.100.0.91 - - [03/Apr/2023:08:01:03 +0000] "GET /input/2023-03-31-20-26-17.mxf HTTP/1.1" 206 109715 "-" "Lavf/58.29.100" "-" "LOCATION_NAME=" "REQ_TIME=0.005" "CONN_TIME=0.005" 10.100.0.91 - - [03/Apr/2023:08:01:08 +0000] "GET /input/2023-03-31-20-26-17.mxf HTTP/1.1" 206 193128032 "-" "Lavf/58.29.100" "-" "LOCATION_NAME=" "REQ_TIME=4.264" "CONN_TIME=4.264" }}} Nginx conf is here: {{{ server{ listen 10.100.0.90:443 ssl; listen 10.100.0.90:80 default_server; server_name storage.local; ssl_certificate /etc/nginx/crt/local.crt; ssl_certificate_key /etc/nginx/crt/local.key; sendfile on; tcp_nodelay on; tcp_nopush on; directio 500m; keepalive_timeout 30; client_max_body_size 10G; open_file_cache off; location ~* ^/(input)\/.* { root /storage/; location ~* (mp4|mpeg|mpg|mxf|ts)$ { add_header Content-disposition "attachment"; } } }}} File 2023-03-31-20-26-17.mxf example can be taken here: https://pixeldrain.com/u/2DqLPpAp https://disk.yandex.ru/d/DF5PoWO3qTPQIQ P.s. this behaviour with https is only with this kind of mxf file. If i change file for another mp4 file - it does not matter http or https, no reconnects and pretty speedy converting. P.p.s. ffmpeg and nginx are in dockers conatiners, im sure this is not an issue, just in case highlited it. -- Ticket URL: <https://trac.ffmpeg.org/ticket/10303> FFmpeg <https://ffmpeg.org> FFmpeg issue tracker

1 4

#10293(undetermined:new): FFMpeg ignores -shortest and goes on forever filling all the RAM available in a system (Avisynth input)
by FFmpeg 06 Apr '23

06 Apr '23

#10293: FFMpeg ignores -shortest and goes on forever filling all the RAM available in a system (Avisynth input) -------------------------------------+------------------------------------- Reporter: Francesco | Type: defect Bucciantini | Status: new | Priority: normal Component: | Version: git- undetermined | master Keywords: avisynth | Blocked By: Blocking: | Reproduced by developer: 0 Analyzed by developer: 0 | -------------------------------------+------------------------------------- Summary of the bug: Hi there, I faced a pretty big issue in production when indexing a .thm image. Source: {{{ General Complete name : GX010047.THM Format : JPEG File size : 8.48 KiB Image Format : JPEG Width : 160 pixels Height : 120 pixels Color space : YUV Chroma subsampling : 4:2:0 Bit depth : 8 bits Compression mode : Lossy Stream size : 8.48 KiB (100%) }}} Such an image is decoded automatically into an H.264 lossless file muxed in .mkv {{{ General Unique ID : 6999799334518796533026371963913070697 (0x5441CC0A15B8899800EED4347C56869) Complete name : 20230330-1055-1159-3e30-adfd0282de64\1-24-24~177276031~14840~20170208-151013-452-316F559DBA2D~dec_avmedia_v1.mkv Format : Matroska Format version : Version 4 File size : 9.30 KiB Duration : 40 ms Overall bit rate : 1 904 kb/s Frame rate : 25.000 FPS Writing application : Lavf59.29.100 Writing library : Lavf59.29.100 ErrorDetectionType : Per level 1 Video ID : 1 Format : AVC Format/Info : Advanced Video Codec Format profile : High 4:4:4 Intra(a)L1.1 Format settings, CABAC : No Codec ID : V_MPEG4/ISO/AVC Duration : 40 ms Width : 160 pixels Height : 120 pixels Display aspect ratio : 4:3 Frame rate mode : Constant Frame rate : 25.000 FPS Color space : YUV Chroma subsampling : 4:2:0 Bit depth : 8 bits Scan type : Progressive Writing library : x264 core 164 r3095 baee400 Encoding settings : cabac=0 / ref=1 / deblock=0:0:0 / analyse=0:0 / me=dia / subme=0 / psy=0 / mixed_ref=0 / me_range=16 / chroma_me=1 / trellis=0 / 8x8dct=0 / cqm=0 / deadzone=21,11 / fast_pskip=0 / chroma_qp_offset=0 / threads=4 / lookahead_threads=1 / sliced_threads=0 / nr=0 / decimate=1 / interlaced=0 / bluray_compat=0 / constrained_intra=0 / bframes=0 / weightp=0 / keyint=1 / keyint_min=1 / scenecut=0 / intra_refresh=0 / rc=cqp / mbtree=0 / qp=0 Default : No Forced : No Color range : Full Matrix coefficients : BT.470 System B/G }}} then a logic creates the following script automatically as part of a workflow: {{{ _ffas_video = "\\Media Ingest\Avisynth_Server1\Node2\Avisynth_in\D3 GOPRO\GOMMONE\GX010047.THM" _ffas_audio = "\\Media Ingest\Avisynth_Server1\Node2\Avisynth_in\D3 GOPRO\GOMMONE\GX010047.THM" _ffas_width = 160 _ffas_height = 120 _ffas_work_fdr = "\\avisynth\TempFiles\20200505-1441-4178-0e32-00746ba87035\20230330-1055-1159-3e30-adfd0282de64" Import("\\avisynth\processors\AVS_plugins\avsi\mtmodes.avsi") LoadPlugin("\\avisynth\processors\AVS_plugins\ffms2\x64\ffms2.dll") LoadPlugin("\\avisynth\processors\AVS_plugins\ffms2\x64\BestAudioSource.dll") LoadPlugin("\\avisynth\processors\AVS_plugins\JPSDR\x64\Release_W7\plugins_JPSDR.dll") FFIndex("\\avisynth\TempFiles\20200505-1441-4178-0e32-00746ba87035\20230330-1055-1159-3e30-adfd0282de64\1-24-24~177276031~14840~20170208-151013-452-316F559DBA2D~dec_avmedia_v1.mkv", cachefile = "\\avisynth\TempFiles\20200505-1441-4178-0e32-00746ba87035\20230330-1055-1159-3e30-adfd0282de64\1-24-24~230330105708426~14840~20170208-151013-452-316F559DBA2D~dec_avmedia~ffindex.dat") video = FFVideoSource("\\avisynth\TempFiles\20200505-1441-4178-0e32-00746ba87035\20230330-1055-1159-3e30-adfd0282de64\1-24-24~177276031~14840~20170208-151013-452-316F559DBA2D~dec_avmedia_v1.mkv", 0, cachefile = "\\avisynth\TempFiles\20200505-1441-4178-0e32-00746ba87035\20230330-1055-1159-3e30-adfd0282de64\1-24-24~230330105708426~14840~20170208-151013-452-316F559DBA2D~dec_avmedia~ffindex.dat", fpsnum=25000, fpsden=1000, seekmode = 1) audio_null = BlankClip(length=0, width=160, height=120, color=$000000, channels=1, audio_rate=48000, fps=25) audio = audio_null Global m_clip = AudioDub(video, audio) m_clip = ConvertToYUV422(m_clip) m_clip = ConvertBits(m_clip, 10) m_clip = AssumeFieldBased(m_clip) m_clip = propClearAll(m_clip) #node_name:ChannelMapper, id:20180910-180019-976-6b94d948b31c audio_null = GetChannel(m_clip, 1).Amplify(0) m_clip = MergeChannels(m_clip, audio_null) m_clip = GetChannel(m_clip, 1,1,1,1,1,1,1,1) #node_name:Loudness Correction, id:20180910-180715-507-dc0f7fbfc53f # Variables: # # m_clip = The last returned AviSynth media # # Do NOT change any of the following variables!!! # _ffas_video = <original video> # _ffas_audio = <original audio> # _ffas_height = <source height> # _ffas_width = <source width> # _m_clip_a_channels = <total channels> # _ffas_work_fdr = Working folder for the workflow # r=ResampleAudio(m_clip, 48000) n=Normalize(r, 0.22) m_clip=ConvertAudioTo24bit(n) # The following MUST be the last line of your script #node_name:Safe Color Limiter, id:20180701-081456-730-68c5351dabf5 Import("\\avisynth\processors\AVS_plugins\avsi\SafeColorLimiter.avsi") m_clip = SafeColorLimiter(m_clip) Return m_clip }}} When I index the original image with {{{ ImageSource("A:\MEDIA\temp\GX010047.THM") }}} everything is fine. Same goes when I index the .mkv decoded file with FFVideoSource() in AVSPmod mod. VirtualDub is also working just fine, BUT not FFMpeg... Running this command in FFMpeg: {{{ ffmpeg.exe -stats_period 1.2 -hide_banner -i "1-24-24~230330134143483~4044~20211117-1743-5495-7a75-f1d9f457e51c~enc_av_xdcamhd.avs" -f lavfi -i "aevalsrc=0" -f lavfi -i "color=color=black:size=1920x1080" -shortest -map_metadata -1 -map 0:0 -filter_complex "[0:1]pan=1|c0=c0[a1],[0:1]pan=1|c0=c1[a2],[0:1]pan=1|c0=c2[a3],[0:1]pan=1|c0=c3[a4],[0:1]pan=1|c0=c4[a5],[0:1]pan=1|c0=c5[a6],[0:1]pan=1|c0=c6[a7],[0:1]pan=1|c0=c7[a8],[a1]amerge=1,apad[astr1],[a2]amerge=1,apad[astr2],[a3]amerge=1,apad[astr3],[a4]amerge=1,apad[astr4],[a5]amerge=1,apad[astr5],[a6]amerge=1,apad[astr6],[a7]amerge=1,apad[astr7],[a8]amerge=1,apad[astr8]" -map "[astr1]" -c:a:0 pcm_s24le -ar:a:0 48000 -map "[astr2]" -c:a:1 pcm_s24le -ar:a:1 48000 -map "[astr3]" -c:a:2 pcm_s24le -ar:a:2 48000 -map "[astr4]" -c:a:3 pcm_s24le -ar:a:3 48000 -map "[astr5]" -c:a:4 pcm_s24le -ar:a:4 48000 -map "[astr6]" -c:a:5 pcm_s24le -ar:a:5 48000 -map "[astr7]" -c:a:6 pcm_s24le -ar:a:6 48000 -map "[astr8]" -c:a:7 pcm_s24le -ar:a:7 48000 -vf "sidedata=delete,metadata=delete,colorspace=fast=1:ispace=bt470bg:itrc=bt709:iprimaries=bt709:all=bt709:format=yuv422p:irange=pc:range=pc,scale=w=1440:h=1080:flags=lanczos:sws_dither=ed:in_color_matrix=bt709ut_color_matrix=bt709:in_range=pcut_range=pc,pad=w=1920:h=1080:x=240:y=0,setfield=tff,setdar=16/9,setsar=1" -timecode 00:00:00:00 -c:v mpeg2video -r 25 -pix_fmt yuv422p -aspect 16:9 -b:v 50000000 -minrate 50000000 -maxrate 50000000 -intra_vlc 1 -dc 8 -g 12 -bf 2 -mpv_flags +strict_gop -qmin 5 -qmax 28 -qsquish 99 -color_primaries bt709 -color_trc bt709 -colorspace bt709 -color_range tv -seq_disp_ext 1 -video_format component -chroma_sample_location topleft -signal_standard 4 -field_order tt -top 1 -alternate_scan 1 -flags +ildct+ilme+cgop -sc_threshold 1000000000 -intra_matrix 8,10,22,27,29,37,37,40,9,12,14,28,29,37,39,40,9,14,27,31,34,37,40,48,12,22,27,29,34,37,40,58,26,27,29,34,37,38,48,58,26,27,29,36,38,38,48,69,18,27,34,36,38,38,48,69,26,26,34,34,38,40,58,79 -inter_matrix 16,20,22,26,28,32,32,36,18,20,22,28,28,32,34,36,18,22,26,30,30,32,36,38,20,22,26,28,30,32,36,42,24,26,28,30,32,34,38,40,24,26,28,32,34,34,38,42,24,26,30,32,34,34,38,42,24,24,30,30,34,36,40,44 -non_linear_quant 1 -f mxf -max_muxing_queue_size 700 -map_metadata -1 -metadata "creation_time=now" -y "test.mxf" pause }}} generates the issue, in fact FFMpeg keeps going and going and going forever, filling up the whole RAM and then the whole paging files until Windows itself crashes: [[Image(https://i.imgur.com/wHcPFOU.png)]] you can see from the screenshot that although it's not producing any frames in output, it's already filling and filling and filling the RAM as it reached 3 hours already and it would keep going. This is what happened on a server: [[Image(https://i.imgur.com/FXBXDiY.png)]] As you can see, it filled the whole 128 GB of RAM first and then it started filling the whole 545 GB of paging files on the SSD before making Windows itself crash (literally, Windows rebooted itself automatically after crashing, badly). Here's a package with the whole thing: https://we.tl/t-N6uwUeBWZc (link available for 7 days only) and here's an extract of the output of FFMpeg: https://pastebin.com/5FanUB6E This has been tested and verified with both Avisynth 3.7.2 stable and Avisynth 3.7.3 Beta 9, x64 of course. For the sake of debugging, commenting out SafeColorLimiter() which is my own function changes nothing. Anyway, given that AVSPmod mod plays nicely [[Image(https://i.imgur.com/FvKJINF.png)]] and that VirtualDub also plays nicely: [[Image(https://i.imgur.com/aDbIax9.png)]] and it can output a file just fine: [[Image(https://i.imgur.com/O4MJprA.png)]] The discriminant here appears to be FFMpeg... To double check this, I tried with x264 (but given that it can't read 10bit planar, I changed ConvertBits from 10 to 16): [[Image(https://i.imgur.com/C9ERh8L.png)]] Surprise surprise, x264 using Jean Philippe Scotto di Rinaldi's build worked and encoded just that one frame. So... in a nutshell, it looks like it's an FFMpeg bug after all... Given that the source is 4 frames and that -shortest is there, FFMpeg should read it and use the SHORTEST source available, instead, it goes on forever and ever. For more info: https://forum.doom9.org/showthread.php?p=1985231 -- Ticket URL: <https://trac.ffmpeg.org/ticket/10293> FFmpeg <https://ffmpeg.org> FFmpeg issue tracker

1 7

#5360(avcodec:new): Errors shown when correctly decoding jpeg2000 frames
by FFmpeg 05 Apr '23

05 Apr '23

#5360: Errors shown when correctly decoding jpeg2000 frames -------------------------------------+------------------------------------- Reporter: cehoyos | Owner: Type: defect | Status: new Priority: minor | Component: avcodec Version: git- | Keywords: j2k master | regression Blocked By: | Blocking: Reproduced by developer: 0 | Analyzed by developer: 0 -------------------------------------+------------------------------------- Errors are shown when decoding jpeg2000 frames since a85b02dcf70f62a6a433a607143f1f78fa5648bb {{{ $ ffmpeg -f lavfi -i testsrc=d=1 -pred 1 -vframes 1 out.j2k }}} {{{ $ ffmpeg -i out.j2k -f crc - ffmpeg version N-79105-gdf34b70 Copyright (c) 2000-2016 the FFmpeg developers built with gcc 4.7 (SUSE Linux) configuration: --enable-gpl libavutil 55. 19.100 / 55. 19.100 libavcodec 57. 28.103 / 57. 28.103 libavformat 57. 28.102 / 57. 28.102 libavdevice 57. 0.101 / 57. 0.101 libavfilter 6. 39.102 / 6. 39.102 libswscale 4. 0.100 / 4. 0.100 libswresample 2. 0.101 / 2. 0.101 libpostproc 54. 0.100 / 54. 0.100 [jpeg2000 @ 0x2011960] bpno became negative Last message repeated 365 times Input #0, j2k_pipe, from 'out.j2k': Duration: N/A, bitrate: N/A Stream #0:0: Video: jpeg2000 (JPEG 2000 codestream restriction 0), rgb24, 320x240, lossless, 25 tbr, 25 tbn, 25 tbc Output #0, crc, to 'pipe:': Metadata: encoder : Lavf57.28.102 Stream #0:0: Video: rawvideo (RGB[24] / 0x18424752), rgb24, 320x240, q=2-31, 200 kb/s, 25 fps, 25 tbn, 25 tbc Metadata: encoder : Lavc57.28.103 rawvideo Stream mapping: Stream #0:0 -> #0:0 (jpeg2000 (native) -> rawvideo (native)) Press [q] to stop, [?] for help [jpeg2000 @ 0x202e0a0] bpno became negative Last message repeated 365 times CRC=0x0d00d19b frame= 1 fps=0.0 q=-0.0 Lsize= 0kB time=00:00:00.04 bitrate= 3.0kbits/s speed=1.74x video:225kB audio:0kB subtitle:0kB other streams:0kB global headers:0kB muxing overhead: unknown }}} Decoding is still bit-exact. -- Ticket URL: <https://trac.ffmpeg.org/ticket/5360> FFmpeg <https://ffmpeg.org> FFmpeg issue tracker

1 3

#10061(undetermined:new): jpeg2000: crash with forced libopenjpeg decoder and image2 demuxer
by FFmpeg 05 Apr '23

05 Apr '23

#10061: jpeg2000: crash with forced libopenjpeg decoder and image2 demuxer -------------------------------------+------------------------------------- Reporter: ami_stuff | Type: defect Status: new | Priority: normal Component: | Version: undetermined | unspecified Keywords: | Blocked By: Blocking: | Reproduced by developer: 0 Analyzed by developer: 0 | -------------------------------------+------------------------------------- https://github.com/openpreserve/jpylyzer-test- files/raw/master/palettedImage.jp2 {{{ (gdb) r -vcodec libopenjpeg -f image2 -i palettedImage.jp2 -f null - Starting program: ffmpeg_g -vcodec libopenjpeg -f image2 -i palettedImage.jp2 -f null - [Thread debugging using libthread_db enabled] Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1". ffmpeg version N-109101-g822da7a317 Copyright (c) 2000-2022 the FFmpeg developers built with gcc 9 (Ubuntu 9.4.0-1ubuntu1~20.04.1) configuration: --enable-libopenjpeg libavutil 57. 42.100 / 57. 42.100 libavcodec 59. 52.102 / 59. 52.102 libavformat 59. 34.101 / 59. 34.101 libavdevice 59. 8.101 / 59. 8.101 libavfilter 8. 50.100 / 8. 50.100 libswscale 6. 8.112 / 6. 8.112 libswresample 4. 9.100 / 4. 9.100 Input #0, image2, from 'palettedImage.jp2': Duration: 00:00:00.04, start: 0.000000, bitrate: N/A Stream #0:0: Video: jpeg2000, gray, 1024x1024, 25 fps, 25 tbr, 25 tbn [New Thread 0x7ffff6b37700 (LWP 33350)] [New Thread 0x7ffff6336700 (LWP 33351)] [New Thread 0x7ffff5b35700 (LWP 33352)] [New Thread 0x7ffff5334700 (LWP 33353)] [New Thread 0x7ffff4b33700 (LWP 33354)] [New Thread 0x7ffff4332700 (LWP 33355)] [New Thread 0x7ffff3b31700 (LWP 33356)] [New Thread 0x7ffff3330700 (LWP 33357)] [New Thread 0x7ffff2b2f700 (LWP 33358)] Stream mapping: Stream #0:0 -> #0:0 (jpeg2000 (libopenjpeg) -> wrapped_avframe (native)) Press [q] to stop, [?] for help [New Thread 0x7ffff232e700 (LWP 33359)] [Thread 0x7ffff232e700 (LWP 33359) exited] free(): invalid pointer Thread 2 "av:libopen:df0" received signal SIGABRT, Aborted. [Switching to Thread 0x7ffff6b37700 (LWP 33350)] __GI_raise (sig=sig@entry=6) at ../sysdeps/unix/sysv/linux/raise.c:50 50 ../sysdeps/unix/sysv/linux/raise.c (gdb) bt #0 __GI_raise (sig=sig@entry=6) at ../sysdeps/unix/sysv/linux/raise.c:50 #1 0x00007ffff7616859 in __GI_abort () at abort.c:79 #2 0x00007ffff768126e in __libc_message (action=action@entry=do_abort, fmt=fmt@entry=0x7ffff77ab298 "%s\n") at ../sysdeps/posix/libc_fatal.c:155 #3 0x00007ffff76892fc in malloc_printerr ( str=str@entry=0x7ffff77a94c1 "free(): invalid pointer") at malloc.c:5347 #4 0x00007ffff768ab2c in _int_free (av=<optimized out>, p=<optimized out>, have_lock=0) at malloc.c:4173 #5 0x00007ffff784721b in ?? () from /lib/x86_64-linux-gnu/libopenjp2.so.7 #6 0x00007ffff78205e5 in ?? () from /lib/x86_64-linux-gnu/libopenjp2.so.7 #7 0x00007ffff782864c in ?? () from /lib/x86_64-linux-gnu/libopenjp2.so.7 #8 0x00007ffff782b123 in opj_destroy_codec () from /lib/x86_64-linux-gnu/libopenjp2.so.7 #9 0x0000555555d4d6ea in libopenjpeg_decode_frame (avctx=<optimized out>, picture=<optimized out>, got_frame=0x5555571535d0, avpkt=<optimized out>) at libavcodec/libopenjpegdec.c:483 #10 0x0000555555e47266 in frame_worker_thread (arg=0x5555571534c0) at libavcodec/pthread_frame.c:241 #11 0x00007ffff77ee609 in start_thread (arg=<optimized out>) at pthread_create.c:477 #12 0x00007ffff7713133 in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95 }}} {{{ ==33417== Invalid write of size 1 ==33417== at 0x901DE1: libopenjpeg_copy_to_packed8 (libopenjpegdec.c:250) ==33417== by 0x901DE1: libopenjpeg_decode_frame (libopenjpegdec.c:445) ==33417== by 0x76E951: decode_simple_internal (decode.c:307) ==33417== by 0x76E951: decode_simple_receive_frame (decode.c:563) ==33417== by 0x76E951: decode_receive_frame_internal (decode.c:584) ==33417== by 0x76F4FF: avcodec_send_packet (decode.c:665) ==33417== by 0x56BB02: try_decode_frame (demux.c:2054) ==33417== by 0x570D98: avformat_find_stream_info (demux.c:2747) ==33417== by 0x2A3CA8: ifile_open (ffmpeg_demux.c:953) ==33417== by 0x2B3B41: open_files.isra.0 (ffmpeg_opt.c:1248) ==33417== by 0x2B4FDE: ffmpeg_parse_options (ffmpeg_opt.c:1287) ==33417== by 0x29F149: main (ffmpeg.c:4035) ==33417== Address 0x5ef254f is 0 bytes after a block of size 1,048,655 alloc'd ==33417== at 0x483E0F0: memalign (in /usr/lib/x86_64-linux-gnu/valgrind /vgpreload_memcheck-amd64-linux.so) ==33417== by 0x483E212: posix_memalign (in /usr/lib/x86_64-linux- gnu/valgrind/vgpreload_memcheck-amd64-linux.so) ==33417== by 0x1071DD4: av_malloc (mem.c:105) ==33417== by 0x105E6D9: av_buffer_alloc (buffer.c:82) ==33417== by 0x105E753: av_buffer_allocz (buffer.c:95) ==33417== by 0x105EEBC: pool_alloc_buffer (buffer.c:363) ==33417== by 0x105EEBC: av_buffer_pool_get (buffer.c:401) ==33417== by 0x82C173: video_get_buffer (get_buffer.c:262) ==33417== by 0x82C173: avcodec_default_get_buffer2 (get_buffer.c:298) ==33417== by 0x770BC2: ff_get_buffer (decode.c:1505) ==33417== by 0x9FADD4: thread_get_buffer_internal (pthread_frame.c:993) ==33417== by 0x9FADD4: ff_thread_get_buffer (pthread_frame.c:1074) ==33417== by 0x9018BB: libopenjpeg_decode_frame (libopenjpegdec.c:418) ==33417== by 0x76E951: decode_simple_internal (decode.c:307) ==33417== by 0x76E951: decode_simple_receive_frame (decode.c:563) ==33417== by 0x76E951: decode_receive_frame_internal (decode.c:584) ==33417== by 0x76F4FF: avcodec_send_packet (decode.c:665) ==33417== ==33417== Invalid free() / delete / delete[] / realloc() ==33417== at 0x483CA3F: free (in /usr/lib/x86_64-linux-gnu/valgrind /vgpreload_memcheck-amd64-linux.so) ==33417== by 0x4FF439A: ??? (in /usr/lib/x86_64-linux- gnu/libopenjp2.so.2.3.1) ==33417== by 0x4FF21DC: ??? (in /usr/lib/x86_64-linux- gnu/libopenjp2.so.2.3.1) ==33417== by 0x4FCB5E4: ??? (in /usr/lib/x86_64-linux- gnu/libopenjp2.so.2.3.1) ==33417== by 0x4FD364B: ??? (in /usr/lib/x86_64-linux- gnu/libopenjp2.so.2.3.1) ==33417== by 0x4FD6122: opj_destroy_codec (in /usr/lib/x86_64-linux- gnu/libopenjp2.so.2.3.1) ==33417== by 0x9016E9: libopenjpeg_decode_frame (libopenjpegdec.c:483) ==33417== by 0x76E951: decode_simple_internal (decode.c:307) ==33417== by 0x76E951: decode_simple_receive_frame (decode.c:563) ==33417== by 0x76E951: decode_receive_frame_internal (decode.c:584) ==33417== by 0x76F4FF: avcodec_send_packet (decode.c:665) ==33417== by 0x56BB02: try_decode_frame (demux.c:2054) ==33417== by 0x570D98: avformat_find_stream_info (demux.c:2747) ==33417== by 0x2A3CA8: ifile_open (ffmpeg_demux.c:953) ==33417== Address 0xf15000b0f00090d is not stack'd, malloc'd or (recently) free'd ==33417== ==33417== Invalid free() / delete / delete[] / realloc() ==33417== at 0x483CA3F: free (in /usr/lib/x86_64-linux-gnu/valgrind /vgpreload_memcheck-amd64-linux.so) ==33417== by 0x4FF439A: ??? (in /usr/lib/x86_64-linux- gnu/libopenjp2.so.2.3.1) ==33417== by 0x4FF21ED: ??? (in /usr/lib/x86_64-linux- gnu/libopenjp2.so.2.3.1) ==33417== by 0x4FCB5E4: ??? (in /usr/lib/x86_64-linux- gnu/libopenjp2.so.2.3.1) ==33417== by 0x4FD364B: ??? (in /usr/lib/x86_64-linux- gnu/libopenjp2.so.2.3.1) ==33417== by 0x4FD6122: opj_destroy_codec (in /usr/lib/x86_64-linux- gnu/libopenjp2.so.2.3.1) ==33417== by 0x9016E9: libopenjpeg_decode_frame (libopenjpegdec.c:483) ==33417== by 0x76E951: decode_simple_internal (decode.c:307) ==33417== by 0x76E951: decode_simple_receive_frame (decode.c:563) ==33417== by 0x76E951: decode_receive_frame_internal (decode.c:584) ==33417== by 0x76F4FF: avcodec_send_packet (decode.c:665) ==33417== by 0x56BB02: try_decode_frame (demux.c:2054) ==33417== by 0x570D98: avformat_find_stream_info (demux.c:2747) ==33417== by 0x2A3CA8: ifile_open (ffmpeg_demux.c:953) ==33417== Address 0xd12000c11000b0f is not stack'd, malloc'd or (recently) free'd ==33417== Assertion (frame->private_ref && frame->private_ref->size == sizeof(FrameDecodeData)) || !(avctx->codec->capabilities & (1 << 1)) failed at libavcodec/decode.c:615 ==33417== ==33417== Process terminating with default action of signal 6 (SIGABRT) ==33417== at 0x507200B: raise (raise.c:51) ==33417== by 0x5051858: abort (abort.c:79) ==33417== by 0x76F37F: decode_simple_internal (decode.c:502) ==33417== by 0x76F37F: decode_simple_receive_frame (decode.c:563) ==33417== by 0x76F37F: decode_receive_frame_internal (decode.c:584) ==33417== by 0x76F4FF: avcodec_send_packet (decode.c:665) ==33417== by 0x56BB02: try_decode_frame (demux.c:2054) ==33417== by 0x570D98: avformat_find_stream_info (demux.c:2747) ==33417== by 0x2A3CA8: ifile_open (ffmpeg_demux.c:953) ==33417== by 0x2B3B41: open_files.isra.0 (ffmpeg_opt.c:1248) ==33417== by 0x2B4FDE: ffmpeg_parse_options (ffmpeg_opt.c:1287) ==33417== by 0x29F149: main (ffmpeg.c:4035) }}} -- Ticket URL: <https://trac.ffmpeg.org/ticket/10061> FFmpeg <https://ffmpeg.org> FFmpeg issue tracker

1 2

#10058(undetermined:new): jpeg2000: support paletted images
by FFmpeg 05 Apr '23

05 Apr '23

#10058: jpeg2000: support paletted images -------------------------------------+------------------------------------- Reporter: ami_stuff | Type: defect Status: new | Priority: normal Component: | Version: undetermined | unspecified Keywords: | Blocked By: Blocking: | Reproduced by developer: 0 Analyzed by developer: 0 | -------------------------------------+------------------------------------- https://github.com/openpreserve/jpylyzer-test- files/raw/master/palettedImage.jp2 openjpeg decodes it with palette there are also some other unsupported jpeg2000 files marked as valid here: https://github.com/openpreserve/jpylyzer-test-files {{{ ./ffmpeg -i palettedImage.jp2 -y out.bmp ffmpeg version N-109101-g822da7a317 Copyright (c) 2000-2022 the FFmpeg developers built with gcc 9 (Ubuntu 9.4.0-1ubuntu1~20.04.1) configuration: libavutil 57. 42.100 / 57. 42.100 libavcodec 59. 52.102 / 59. 52.102 libavformat 59. 34.101 / 59. 34.101 libavdevice 59. 8.101 / 59. 8.101 libavfilter 8. 50.100 / 8. 50.100 libswscale 6. 8.112 / 6. 8.112 libswresample 4. 9.100 / 4. 9.100 [jpeg2000 @ 0x5647e8d3cd40] SOC marker not present Input #0, j2k_pipe, from 'palettedImage.jp2': Duration: N/A, bitrate: N/A Stream #0:0: Video: jpeg2000, pal8, 1024x1024, 25 fps, 25 tbr, 25 tbn Stream mapping: Stream #0:0 -> #0:0 (jpeg2000 (native) -> bmp (native)) Press [q] to stop, [?] for help [jpeg2000 @ 0x5647e8d4f640] SOC marker not present Error while decoding stream #0:0: Invalid data found when processing input [jpeg2000 @ 0x5647e8d50bc0] Progression order RPCL Output #0, image2, to 'out.bmp': Metadata: encoder : Lavf59.34.101 Stream #0:0: Video: bmp, gray(progressive), 1024x1024, q=2-31, 200 kb/s, 25 fps, 25 tbn Metadata: encoder : Lavc59.52.102 bmp frame= 0 fps=0.0 q=-0.0 size= 0kB time=00:00:00.04 bitrate= 0.0kbits/[image2 @ 0x5647e8d3e0c0] The specified filename 'out.bmp' does not contain an image sequence pattern or a pattern is invalid. [image2 @ 0x5647e8d3e0c0] Use a pattern such as %03d for an image sequence or use the -update option (with -frames:v 1 if needed) to write a single image. frame= 1 fps=0.0 q=-0.0 Lsize=N/A time=00:00:00.04 bitrate=N/A speed=0.322x video:1025kB audio:0kB subtitle:0kB other streams:0kB global headers:0kB muxing overhead: unknown }}} -- Ticket URL: <https://trac.ffmpeg.org/ticket/10058> FFmpeg <https://ffmpeg.org> FFmpeg issue tracker

1 13

#10203(avformat:new): ASS encoder inserts null character into middle of output
by FFmpeg 05 Apr '23

05 Apr '23

#10203: ASS encoder inserts null character into middle of output -------------------------------------+------------------------------------- Reporter: Tim Angus | Type: defect Status: new | Priority: normal Component: avformat | Version: | unspecified Keywords: ass assenc | Blocked By: Blocking: | Reproduced by developer: 0 Analyzed by developer: 0 | -------------------------------------+------------------------------------- Summary of the bug: Some matroska files embed ASS format subtitles. The header for said subtitles include the header for the subtitle stream in the "codec private data" section. It's not clear whether the last byte of this data is supposed to be 0, i.e. a null terminator for the string data. Among other tools, older versions of Handbrake do include the null terminator and there are many files out in the wild created using Handbrake. Using ffmpeg to extract subtitles for such a file, this header is copied directly to the output file, including the null terminator, if it was present. This results in a file in which there is a null terminator after the header, but preceeding the actual content of the subtitle file. Obviously this is not correct. As a data point, of the ~600 mkvs I have locally, 22 of them have ASS subtitles, and of them 20 include the null terminator, so it doesn't appear to be a rare phenomenon. As another data point, the tool mkvextract from mkvtoolnix avoids the ambiguity by first assuming that the source buffer is *not* null terminated, and then manually adding a (possibly second) null terminator. The buffer is then interpreted as a null terminated string and processed that way. (https://gitlab.com/mbunkus/mkvtoolnix/-/blob/main/src/extract/xtr_textsubs.…) A small test file that exhibits the problem may be found here: https://0x0.st/oFTT.mkv Patch available here, that essentially replicates how mkvtoolnix does things: http://ffmpeg.org/pipermail/ffmpeg-devel/2023-January/306017.html How to reproduce: {{{ % ffmpeg -y -i oFTT.mkv -copyts -an -vn -c:s copy out.ass }}} Use xxd or a text viewer that shows special characters, and observe the '\0' between the end of the [V4+ Styles] section and the start of the [Events] section. -- Ticket URL: <https://trac.ffmpeg.org/ticket/10203> FFmpeg <https://ffmpeg.org> FFmpeg issue tracker

1 3

#10311(undetermined:new): libsvtav1 mjpeg image conversion with errors the process does not terminate and remains pending
by FFmpeg 04 Apr '23

04 Apr '23

#10311: libsvtav1 mjpeg image conversion with errors the process does not terminate and remains pending -------------------------------------+------------------------------------- Reporter: Matteo | Type: defect Secchi | Status: new | Priority: normal Component: | Version: git- undetermined | master Keywords: libsvtav1 | Blocked By: mjpeg | Blocking: | Reproduced by developer: 0 Analyzed by developer: 0 | -------------------------------------+------------------------------------- Summary of the bug: libsvtav1 mjpeg image conversion with errors the process does not terminate and remains pending How to reproduce: {{{ % .\ffmpeg.exe -hwaccel auto -v 9 -loglevel 99 -stats -i .\P8200411_exclude.JPG -c:v libsvtav1 .\out.avif -y -report }}} Patches should be submitted to the ffmpeg-devel mailing list and not this bug tracker. ffmpeg version {{{ ffmpeg version 2023-04-03-git-6941788d24-full_build-www.gyan.dev Copyright (c) 2000-2023 the FFmpeg developers built with gcc 12.2.0 (Rev10, Built by MSYS2 project) configuration: --enable-gpl --enable-version3 --enable-static --disable- w32threads --disable-autodetect --enable-fontconfig --enable-iconv --enable-gnutls --enable-libxml2 --enable-gmp --enable-bzlib --enable-lzma --enable-libsnappy --enable-zlib --enable-librist --enable-libsrt --enable-libssh --enable-libzmq --enable-avisynth --enable-libbluray --enable-libcaca --enable-sdl2 --enable-libaribb24 --enable-libdav1d --enable-libdavs2 --enable-libuavs3d --enable-libzvbi --enable-librav1e --enable-libsvtav1 --enable-libwebp --enable-libx264 --enable-libx265 --enable-libxavs2 --enable-libxvid --enable-libaom --enable-libjxl --enable-libopenjpeg --enable-libvpx --enable-mediafoundation --enable- libass --enable-frei0r --enable-libfreetype --enable-libfribidi --enable- liblensfun --enable-libvidstab --enable-libvmaf --enable-libzimg --enable- amf --enable-cuda-llvm --enable-cuvid --enable-ffnvcodec --enable-nvdec --enable-nvenc --enable-d3d11va --enable-dxva2 --enable-libvpl --enable- libshaderc --enable-vulkan --ena libavutil 58. 5.100 / 58. 5.100 libavcodec 60. 9.100 / 60. 9.100 libavformat 60. 4.101 / 60. 4.101 libavdevice 60. 2.100 / 60. 2.100 libavfilter 9. 5.100 / 9. 5.100 libswscale 7. 2.100 / 7. 2.100 libswresample 4. 11.100 / 4. 11.100 libpostproc 57. 2.100 / 57. 2.100 }}} full output {{{ ffmpeg started on 2023-04-04 at 15:06:49 Report written to "ffmpeg-20230404-150649.log" Log level: 99 Command line: "C:\\prg\\ffmpeg\\ffmpeg.exe" -hwaccel auto -v 9 -loglevel 99 -stats -i ".\\P8200411_exclude.JPG" -c:v libsvtav1 ".\\out.avif" -y -report ffmpeg version 2023-04-03-git-6941788d24-full_build-www.gyan.dev Copyright (c) 2000-2023 the FFmpeg developers built with gcc 12.2.0 (Rev10, Built by MSYS2 project) configuration: --enable-gpl --enable-version3 --enable-static --disable- w32threads --disable-autodetect --enable-fontconfig --enable-iconv --enable-gnutls --enable-libxml2 --enable-gmp --enable-bzlib --enable-lzma --enable-libsnappy --enable-zlib --enable-librist --enable-libsrt --enable-libssh --enable-libzmq --enable-avisynth --enable-libbluray --enable-libcaca --enable-sdl2 --enable-libaribb24 --enable-libdav1d --enable-libdavs2 --enable-libuavs3d --enable-libzvbi --enable-librav1e --enable-libsvtav1 --enable-libwebp --enable-libx264 --enable-libx265 --enable-libxavs2 --enable-libxvid --enable-libaom --enable-libjxl --enable-libopenjpeg --enable-libvpx --enable-mediafoundation --enable- libass --enable-frei0r --enable-libfreetype --enable-libfribidi --enable- liblensfun --enable-libvidstab --enable-libvmaf --enable-libzimg --enable- amf --enable-cuda-llvm --enable-cuvid --enable-ffnvcodec --enable-nvdec --enable-nvenc --enable-d3d11va --enable-dxva2 --enable-libvpl --enable- libshaderc --enable-vulkan --ena libavutil 58. 5.100 / 58. 5.100 libavcodec 60. 9.100 / 60. 9.100 libavformat 60. 4.101 / 60. 4.101 libavdevice 60. 2.100 / 60. 2.100 libavfilter 9. 5.100 / 9. 5.100 libswscale 7. 2.100 / 7. 2.100 libswresample 4. 11.100 / 4. 11.100 libpostproc 57. 2.100 / 57. 2.100 Splitting the commandline. Reading option '-hwaccel' ... matched as option 'hwaccel' (use HW accelerated decoding) with argument 'auto'. Reading option '-v' ... matched as option 'v' (set logging level) with argument '9'. Reading option '-loglevel' ... matched as option 'loglevel' (set logging level) with argument '99'. Reading option '-stats' ... matched as option 'stats' (print progress report during encoding) with argument '1'. Reading option '-i' ... matched as input url with argument '.\P8200411_exclude.JPG'. Reading option '-c:v' ... matched as option 'c' (codec name) with argument 'libsvtav1'. Reading option '.\out.avif' ... matched as output url. Reading option '-y' ... matched as option 'y' (overwrite output files) with argument '1'. Reading option '-report' ... matched as option 'report' (generate a report) with argument '1'. Finished splitting the commandline. Parsing a group of options: global . Applying option v (set logging level) with argument 9. Applying option loglevel (set logging level) with argument 99. Applying option stats (print progress report during encoding) with argument 1. Applying option y (overwrite output files) with argument 1. Applying option report (generate a report) with argument 1. Successfully parsed a group of options. Parsing a group of options: input url .\P8200411_exclude.JPG. Applying option hwaccel (use HW accelerated decoding) with argument auto. Successfully parsed a group of options. Opening an input file: .\P8200411_exclude.JPG. [NULL @ 000002bee8a06940] Opening '.\P8200411_exclude.JPG' for reading [file @ 000002bee8a06d80] Setting default whitelist 'file,crypto,data' Probing image2 score:50 size:2048 Probing jpeg_pipe score:7 size:2048 [image2 @ 000002bee8a06940] Format image2 probed with size=2048 and score=50 [image2 @ 000002bee8a06940] Before avformat_find_stream_info() pos: 0 bytes read:32768 seeks:0 nb_streams:1 [mjpeg @ 000002bee8a17b40] marker=d8 avail_size_in_buf=4034397 [mjpeg @ 000002bee8a17b40] marker parser used 0 bytes (0 bits) [mjpeg @ 000002bee8a17b40] marker=e1 avail_size_in_buf=4034395 [mjpeg @ 000002bee8a17b40] marker parser used 16065 bytes (128520 bits) [mjpeg @ 000002bee8a17b40] marker=db avail_size_in_buf=4018327 [mjpeg @ 000002bee8a17b40] index=0 [mjpeg @ 000002bee8a17b40] qscale[0]: 0 [mjpeg @ 000002bee8a17b40] index=1 [mjpeg @ 000002bee8a17b40] qscale[1]: 0 [mjpeg @ 000002bee8a17b40] marker parser used 132 bytes (1056 bits) [mjpeg @ 000002bee8a17b40] marker=c0 avail_size_in_buf=4018193 [mjpeg @ 000002bee8a17b40] Changing bps from 0 to 8 [mjpeg @ 000002bee8a17b40] sof0: picture: 4608x3456 [mjpeg @ 000002bee8a17b40] component 0 2:1 id: 1 quant:0 [mjpeg @ 000002bee8a17b40] component 1 1:1 id: 2 quant:1 [mjpeg @ 000002bee8a17b40] component 2 1:1 id: 3 quant:1 [mjpeg @ 000002bee8a17b40] pix fmt id 21111100 [mjpeg @ 000002bee8a17b40] Format yuvj422p chosen by get_format(). [mjpeg @ 000002bee8a17b40] marker parser used 17 bytes (136 bits) [mjpeg @ 000002bee8a17b40] marker=c4 avail_size_in_buf=4018174 [mjpeg @ 000002bee8a17b40] marker parser used 0 bytes (0 bits) [mjpeg @ 000002bee8a17b40] escaping removed 1043867 bytes [mjpeg @ 000002bee8a17b40] marker=da avail_size_in_buf=4017754 [mjpeg @ 000002bee8a17b40] marker parser used 2973887 bytes (23791096 bits) [mjpeg @ 000002bee8a17b40] marker=df avail_size_in_buf=1037557 [mjpeg @ 000002bee8a17b40] marker parser used 0 bytes (0 bits) [mjpeg @ 000002bee8a17b40] marker=df avail_size_in_buf=1037137 [mjpeg @ 000002bee8a17b40] marker parser used 0 bytes (0 bits) [mjpeg @ 000002bee8a17b40] marker=f4 avail_size_in_buf=1037120 [mjpeg @ 000002bee8a17b40] marker parser used 0 bytes (0 bits) [mjpeg @ 000002bee8a17b40] marker=dd avail_size_in_buf=1036888 [mjpeg @ 000002bee8a17b40] marker parser used 0 bytes (0 bits) [mjpeg @ 000002bee8a17b40] marker=eb avail_size_in_buf=1036886 [mjpeg @ 000002bee8a17b40] marker parser used 39187 bytes (313496 bits) [mjpeg @ 000002bee8a17b40] marker=d8 avail_size_in_buf=997663 [mjpeg @ 000002bee8a17b40] marker parser used 0 bytes (0 bits) [mjpeg @ 000002bee8a17b40] marker=e5 avail_size_in_buf=997328 [mjpeg @ 000002bee8a17b40] marker parser used 59443 bytes (475544 bits) [mjpeg @ 000002bee8a17b40] marker=dd avail_size_in_buf=937767 [mjpeg @ 000002bee8a17b40] marker parser used 0 bytes (0 bits) [mjpeg @ 000002bee8a17b40] marker=fa avail_size_in_buf=937609 [mjpeg @ 000002bee8a17b40] marker parser used 0 bytes (0 bits) [mjpeg @ 000002bee8a17b40] marker=dc avail_size_in_buf=937485 [mjpeg @ 000002bee8a17b40] marker parser used 0 bytes (0 bits) [mjpeg @ 000002bee8a17b40] marker=ed avail_size_in_buf=937000 [mjpeg @ 000002bee8a17b40] marker parser used 29813 bytes (238504 bits) [mjpeg @ 000002bee8a17b40] marker=ee avail_size_in_buf=906492 [mjpeg @ 000002bee8a17b40] marker parser used 54320 bytes (434560 bits) [mjpeg @ 000002bee8a17b40] marker=cd avail_size_in_buf=852046 [mjpeg @ 000002bee8a17b40] marker parser used 0 bytes (0 bits) [mjpeg @ 000002bee8a17b40] marker=ef avail_size_in_buf=852015 [mjpeg @ 000002bee8a17b40] marker parser used 60472 bytes (483776 bits) [mjpeg @ 000002bee8a17b40] marker=dc avail_size_in_buf=791272 [mjpeg @ 000002bee8a17b40] marker parser used 0 bytes (0 bits) [mjpeg @ 000002bee8a17b40] marker=e3 avail_size_in_buf=790891 [mjpeg @ 000002bee8a17b40] marker parser used 61397 bytes (491176 bits) [mjpeg @ 000002bee8a17b40] marker=c8 avail_size_in_buf=726295 [mjpeg @ 000002bee8a17b40] marker parser used 0 bytes (0 bits) [mjpeg @ 000002bee8a17b40] marker=e5 avail_size_in_buf=726185 [mjpeg @ 000002bee8a17b40] marker parser used 56549 bytes (452392 bits) [mjpeg @ 000002bee8a17b40] marker=c9 avail_size_in_buf=669441 [mjpeg @ 000002bee8a17b40] marker parser used 0 bytes (0 bits) [mjpeg @ 000002bee8a17b40] marker=f7 avail_size_in_buf=669107 [mjpeg @ 000002bee8a17b40] bits 63 is invalid [image2 @ 000002bee8a06940] stream 0: start_time: 0 duration: 0.04 [image2 @ 000002bee8a06940] format: start_time: 0 duration: 0.04 (estimate from stream) bitrate=806879 kb/s [image2 @ 000002bee8a06940] After avformat_find_stream_info() pos: 4034399 bytes read:4034399 seeks:0 frames:1 Input #0, image2, from '.\P8200411_exclude.JPG': Duration: 00:00:00.04, start: 0.000000, bitrate: 806879 kb/s Stream #0:0, 1, 1/25: Video: mjpeg (JPEG LS), 1 reference frame, yuvj422p(pc, bt470bg/unknown/unknown, center), 4608x3456, 0/1, lossless, 25 fps, 25 tbr, 25 tbn Successfully opened the file. Parsing a group of options: output url .\out.avif. Applying option c:v (codec name) with argument libsvtav1. Successfully parsed a group of options. Opening an output file: .\out.avif. [file @ 000002bee8a11780] Setting default whitelist 'file,crypto,data' Successfully opened the file. [AVHWDeviceContext @ 000002bee89ee000] Cannot load nvcuda.dll [AVHWDeviceContext @ 000002bee89ee000] Could not dynamically load CUDA Device creation failed: -1. Auto hwaccel disabled: no device found. Stream mapping: Stream #0:0 -> #0:0 (mjpeg (native) -> av1 (libsvtav1)) Press [q] to stop, [?] for help [vost#0:0/libsvtav1 @ 000002bee8a10300] cur_dts is invalid [init:0 i_done:0 finish:0] (this is harmless if it occurs once at the start per stream) [in#0/image2 @ 000002bee8a04a00] EOF while reading input [in#0/image2 @ 000002bee8a04a00] Terminating demuxer thread [mjpeg @ 000002bee8a18200] marker=d8 avail_size_in_buf=4034397 [mjpeg @ 000002bee8a18200] marker parser used 0 bytes (0 bits) [mjpeg @ 000002bee8a18200] marker=e1 avail_size_in_buf=4034395 [mjpeg @ 000002bee8a18200] marker parser used 16065 bytes (128520 bits) [mjpeg @ 000002bee8a18200] marker=db avail_size_in_buf=4018327 [mjpeg @ 000002bee8a18200] index=0 [mjpeg @ 000002bee8a18200] qscale[0]: 0 [mjpeg @ 000002bee8a18200] index=1 [mjpeg @ 000002bee8a18200] qscale[1]: 0 [mjpeg @ 000002bee8a18200] marker parser used 132 bytes (1056 bits) [mjpeg @ 000002bee8a18200] marker=c0 avail_size_in_buf=4018193 [mjpeg @ 000002bee8a18200] sof0: picture: 4608x3456 [mjpeg @ 000002bee8a18200] component 0 2:1 id: 1 quant:0 [mjpeg @ 000002bee8a18200] component 1 1:1 id: 2 quant:1 [mjpeg @ 000002bee8a18200] component 2 1:1 id: 3 quant:1 [mjpeg @ 000002bee8a18200] pix fmt id 21111100 [mjpeg @ 000002bee8a18200] Format yuvj422p chosen by get_format(). [mjpeg @ 000002bee8a18200] marker parser used 17 bytes (136 bits) [mjpeg @ 000002bee8a18200] marker=c4 avail_size_in_buf=4018174 [mjpeg @ 000002bee8a18200] class=0 index=0 nb_codes=12 [mjpeg @ 000002bee8a18200] class=1 index=0 nb_codes=162 [mjpeg @ 000002bee8a18200] class=0 index=1 nb_codes=12 [mjpeg @ 000002bee8a18200] class=1 index=1 nb_codes=162 [mjpeg @ 000002bee8a18200] marker parser used 418 bytes (3344 bits) [mjpeg @ 000002bee8a18200] escaping removed 1043867 bytes [mjpeg @ 000002bee8a18200] marker=da avail_size_in_buf=4017754 [mjpeg @ 000002bee8a18200] component: 1 [mjpeg @ 000002bee8a18200] component: 2 [mjpeg @ 000002bee8a18200] component: 3 [mjpeg @ 000002bee8a18200] error count: 64 [mjpeg @ 000002bee8a18200] error y=332 x=221 [mjpeg @ 000002bee8a18200] marker parser used 2960096 bytes (23680761 bits) [mjpeg @ 000002bee8a18200] marker=df avail_size_in_buf=1037557 [mjpeg @ 000002bee8a18200] marker parser used 0 bytes (0 bits) [mjpeg @ 000002bee8a18200] marker=df avail_size_in_buf=1037137 [mjpeg @ 000002bee8a18200] marker parser used 0 bytes (0 bits) [mjpeg @ 000002bee8a18200] marker=f4 avail_size_in_buf=1037120 [mjpeg @ 000002bee8a18200] marker parser used 0 bytes (0 bits) [mjpeg @ 000002bee8a18200] marker=dd avail_size_in_buf=1036888 Error while decoding stream #0:0: Invalid data found when processing input [vost#0:0/libsvtav1 @ 000002bee8a10300] cur_dts is invalid [init:0 i_done:0 finish:0] (this is harmless if it occurs once at the start per stream) [vost#0:0/libsvtav1 @ 000002bee8a10300] cur_dts is invalid [init:0 i_done:0 finish:0] (this is harmless if it occurs once at the start per stream) detected 8 logical cores [graph 0 input from stream 0:0 @ 000002bee8a683c0] Setting 'video_size' to value '4608x3456' [graph 0 input from stream 0:0 @ 000002bee8a683c0] Setting 'pix_fmt' to value '13' [graph 0 input from stream 0:0 @ 000002bee8a683c0] Setting 'time_base' to value '1/25' [graph 0 input from stream 0:0 @ 000002bee8a683c0] Setting 'pixel_aspect' to value '0/1' [graph 0 input from stream 0:0 @ 000002bee8a683c0] Setting 'frame_rate' to value '25/1' [graph 0 input from stream 0:0 @ 000002bee8a683c0] w:4608 h:3456 pixfmt:yuvj422p tb:1/25 fr:25/1 sar:0/1 [format @ 000002bee8a6bd40] Setting 'pix_fmts' to value 'yuv420p|yuv420p10le' [auto_scale_0 @ 000002bee8a6cfc0] w:iw h:ih flags:'' interl:0 [format @ 000002bee8a6bd40] auto-inserting filter 'auto_scale_0' between the filter 'Parsed_null_0' and the filter 'format' [AVFilterGraph @ 000002bee8a19e40] query_formats: 4 queried, 3 merged, 1 already done, 0 delayed [auto_scale_0 @ 000002bee8a6cfc0] picking yuv420p out of 2 ref:yuvj422p alpha:0 [swscaler @ 000002bee8a7b2c0] deprecated pixel format used, make sure you did set range correctly [auto_scale_0 @ 000002bee8a6cfc0] w:4608 h:3456 fmt:yuvj422p sar:0/1 -> w:4608 h:3456 fmt:yuv420p sar:0/1 flags:0x00000004 [out_0_0 @ 000002bee8a6bb80] EOF on sink link out_0_0:default. Output #0, avif, to '.\out.avif': Metadata: encoder : Lavf60.4.101 Stream #0:0, 0, 1/12800: Video: av1, 1 reference frame (av01 / 0x31307661), yuv420p, 4608x3456 (0x0), 0/1, q=2-31, 25 fps, 12800 tbn (default) Metadata: encoder : Lavc60.9.100 libsvtav1 frame= 0 fps=0.0 q=0.0 size= 0kB time=-577014:32:22.77 bitrate= -0.0kbits/s speed=N/A No more output streams to write to, finishing. }}} It is written ... "No more output streams to write to, finishing." ... but the process remains pending and does not continue! -- Ticket URL: <https://trac.ffmpeg.org/ticket/10311> FFmpeg <https://ffmpeg.org> FFmpeg issue tracker

1 0

#10310(undetermined:new): stack-buffer-overflow in FFmpeg (fftools/ffmpeg_mux_init.c:610 in new_output_stream)
by FFmpeg 04 Apr '23

04 Apr '23

#10310: stack-buffer-overflow in FFmpeg (fftools/ffmpeg_mux_init.c:610 in new_output_stream) -------------------------------------+------------------------------------- Reporter: Youngseok | Type: defect Choi | Status: new | Priority: normal Component: | Version: git- undetermined | master Keywords: fuzzing, | Blocked By: stack-overflow | Blocking: | Reproduced by developer: 0 Analyzed by developer: 0 | -------------------------------------+------------------------------------- Our fuzzer found a new stack overflow bug. **Command Input** {{{ ffmpeg -i poc_file -aac_pred true .mpd }}} poc_file is attached. **Command Output** {{{ libavutil 58. 5.100 / 58. 5.100 libavcodec 60. 9.100 / 60. 9.100 libavformat 60. 4.101 / 60. 4.101 libavdevice 60. 2.100 / 60. 2.100 libavfilter 9. 5.100 / 9. 5.100 libswscale 7. 2.100 / 7. 2.100 libswresample 4. 11.100 / 4. 11.100 [amr @ 0x617000000080] Estimating duration from bitrate, this may be inaccurate Input #0, amr, from '/home/youngseok/data/230327/asan_inter_30_30_shrink5_1_230308/ffmpeg/5_id:012265/poc_file': Duration: 00:00:00.03, bitrate: 14 kb/s Stream #0:0: Audio: amr_nb (samr / 0x726D6173), 8000 Hz, mono, fltp, 12 kb/s }}} **Stack Trace** {{{ ==21207==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x602000000470 at pc 0x555555ab684c bp 0x7fffffffb8f0 sp 0x7fffffffb8e0 READ of size 4 at 0x602000000470 thread T0 #0 0x555555ab684b in new_output_stream fftools/ffmpeg_mux_init.c:610 #1 0x555555ac20a6 in new_audio_stream fftools/ffmpeg_mux_init.c:952 #2 0x555555ac72ae in map_auto_audio fftools/ffmpeg_mux_init.c:1230 #3 0x555555ac9214 in create_streams fftools/ffmpeg_mux_init.c:1432 #4 0x555555ad2482 in of_open fftools/ffmpeg_mux_init.c:2274 #5 0x555555adb403 in open_files fftools/ffmpeg_opt.c:1244 #6 0x555555adb820 in ffmpeg_parse_options fftools/ffmpeg_opt.c:1297 #7 0x555555b195ba in main fftools/ffmpeg.c:4165 #8 0x7ffff5601c86 in __libc_start_main (/lib/x86_64-linux- gnu/libc.so.6+0x21c86) #9 0x555555a84499 in _start (/home/youngseok/subjects/latest_asan_install/ffmpeg/bin/ffmpeg+0x530499) }}} **Environment** OS: Ubuntu 18.04 GCC: 7.5.0 FFmpeg: version N-110167-g97c95961f0, configured with following flags: {{{ --extra-cflags='-fsanitize=address -g -O0' --extra- cxxflags='-fsanitize=address -g -O0' --extra-ldflags='-fsanitize=address -g -O0' --disable-optimizations --disable-stripping }}} -- Ticket URL: <https://trac.ffmpeg.org/ticket/10310> FFmpeg <https://ffmpeg.org> FFmpeg issue tracker

1 3

#10307(undetermined:new): Segmentation Violation (dct_quantize_refine in libavcodec/mpegvideo_enc.c:4436)
by FFmpeg 04 Apr '23

04 Apr '23

#10307: Segmentation Violation (dct_quantize_refine in libavcodec/mpegvideo_enc.c:4436) -------------------------------------+------------------------------------- Reporter: Youngseok | Type: defect Choi | Status: new | Priority: normal Component: | Version: undetermined | unspecified Keywords: fuzzing, | Blocked By: SIGSEGV | Blocking: | Reproduced by developer: 0 Analyzed by developer: 0 | -------------------------------------+------------------------------------- Our fuzzer found a new SEGV bug in FFmpeg. **Command Input** {{{ ffmpeg -lowres E -i poc_file -mbd 1 -alternate_scan true -s +6x580 -quantizer_noise_shaping 1 .mp4 }}} poc_file is attached. **Command Output in gdb** {{{ [h263 @ 0x617000000080] Format h263 detected only with low score of 25, misdetection possible! Input #0, h263, from '/home/youngseok/data/230327/asan_inter_30_30_shrink5_1_230308/ffmpeg/1_id:023624/poc_file': Duration: N/A, bitrate: N/A Stream #0:0: Video: h263, yuv420p, 128x96 [SAR 12:11 DAR 16:11], 29.97 fps, 29.97 tbr, 1200k tbn Stream mapping: Stream #0:0 -> #0:0 (h263 (native) -> mpeg4 (native)) Press [q] to stop, [?] for help [New Thread 0x7ffff1cff700 (LWP 2506)] [h263 @ 0x619000002380] warning: first frame is no keyframe [h263 @ 0x619000002380] Error at MB: 2 [New Thread 0x7ffff14fe700 (LWP 2507)] [New Thread 0x7ffff0cfd700 (LWP 2508)] [New Thread 0x7ffff04fc700 (LWP 2509)] [New Thread 0x7fffefcfb700 (LWP 2510)] [New Thread 0x7fffef4fa700 (LWP 2511)] [New Thread 0x7fffeecf9700 (LWP 2512)] [New Thread 0x7fffee4f8700 (LWP 2513)] [New Thread 0x7fffedcf7700 (LWP 2514)] [New Thread 0x7fffed4f6700 (LWP 2515)] [New Thread 0x7fffeccf5700 (LWP 2516)] [New Thread 0x7fffec4f4700 (LWP 2517)] [New Thread 0x7fffebcf3700 (LWP 2518)] [New Thread 0x7fffeb4f2700 (LWP 2519)] [New Thread 0x7fffeacf1700 (LWP 2520)] [New Thread 0x7fffea4f0700 (LWP 2521)] [New Thread 0x7fffe9cef700 (LWP 2522)] [New Thread 0x7fffe94ee700 (LWP 2523)] [New Thread 0x7fffe8ced700 (LWP 2524)] [New Thread 0x7fffe84ec700 (LWP 2525)] [New Thread 0x7fffe7ceb700 (LWP 2526)] [New Thread 0x7fffe74ea700 (LWP 2527)] [New Thread 0x7fffe6ce9700 (LWP 2528)] [New Thread 0x7fffe64e8700 (LWP 2529)] [New Thread 0x7fffe5ce7700 (LWP 2530)] [New Thread 0x7fffe54e6700 (LWP 2531)] [New Thread 0x7fffe4ce5700 (LWP 2532)] [New Thread 0x7fffe44e4700 (LWP 2533)] [New Thread 0x7fffe3ce3700 (LWP 2534)] [New Thread 0x7fffe34e2700 (LWP 2535)] [New Thread 0x7fffe2ce1700 (LWP 2536)] [New Thread 0x7fffe24e0700 (LWP 2537)] [New Thread 0x7fffe1cdf700 (LWP 2538)] [New Thread 0x7fffe14de700 (LWP 2539)] [New Thread 0x7fffe0cdd700 (LWP 2540)] [New Thread 0x7fffe04dc700 (LWP 2541)] [New Thread 0x7fffdfcdb700 (LWP 2542)] [New Thread 0x7fffdf4da700 (LWP 2543)] [New Thread 0x7fffdecd9700 (LWP 2544)] [New Thread 0x7fffde4d8700 (LWP 2545)] [New Thread 0x7fffddcd7700 (LWP 2546)] [New Thread 0x7fffdd4d6700 (LWP 2547)] [New Thread 0x7fffdccd5700 (LWP 2548)] [New Thread 0x7fffdc4d4700 (LWP 2549)] [New Thread 0x7fffdbcd3700 (LWP 2550)] [New Thread 0x7fffdb4d2700 (LWP 2551)] [mpeg4 @ 0x619000003780] Invalid pixel aspect ratio 4640/33, limit is 255/255 reducing Output #0, mp4, to '.mp4': Metadata: encoder : Lavf60.4.101 Stream #0:0: Video: mpeg4 (mp4v / 0x7634706D), yuv420p(tv, progressive), 6x580 [SAR 141:1 DAR 423:290], q=2-31, 200 kb/s, SAR 4640:33 DAR 16:11, 29.97 fps, 30k tbn Metadata: encoder : Lavc60.9.100 mpeg4 Side data: cpb: bitrate max/min/avg: 0/0/200000 buffer size: 0 vbv_delay: N/A [New Thread 0x7fffdacd1700 (LWP 2552)] [h263 @ 0x619000002380] Reverting picture dimensions change due to header decoding failure [h263 @ 0x619000002380] header damaged Error while decoding stream #0:0: Invalid data found when processing input [Thread 0x7ffff1cff700 (LWP 2506) exited] [h263 @ 0x619000002380] illegal ac vlc code at 6x1 [h263 @ 0x619000002380] Error at MB: 15 Thread 34 "ffmpeg_g" received signal SIGSEGV, Segmentation fault. [Switching to Thread 0x7fffe1cdf700 (LWP 2538)] 0x00005555574cabcf in dct_quantize_refine (s=0x62500008c100, block=0x61f000000280, weight=0x7fffe1cd2b40, orig=0x7fffe1cd3160, n=4, qscale=2) at libavcodec/mpegvideo_enc.c:4436 4436 int next_level= block[ perm_scantable[next_i] ] + 64; }}} **Backtrace** {{{ #0 0x00005555574cabcf in dct_quantize_refine (s=0x62500008c100, block=0x61f000000280, weight=0x7fffe1cd2b40, orig=0x7fffe1cd3160, n=4, qscale=2) at libavcodec/mpegvideo_enc.c:4436 #1 0x000055555749957f in encode_mb_internal (chroma_format=1, chroma_y_shift=1, chroma_x_shift=1, mb_block_count=6, mb_block_width=8, mb_block_height=8, motion_y=0, motion_x=0, s=0x62500008c100) at libavcodec/mpegvideo_enc.c:2405 #2 encode_mb (motion_y=0, motion_x=0, s=0x62500008c100) at libavcodec/mpegvideo_enc.c:2504 #3 encode_mb_hq (s=0x62500008c100, backup=0x7fffe1cdcbf0, best=0x7fffe1cdaa10, pb=0x7fffe1cd3c10, pb2=0x7fffe1cd3c90, tex_pb=0x7fffe1cd3d10, dmin=0x7fffe1cd3970, next_block=0x7fffe1cd39b0, motion_x=0, motion_y=0) at libavcodec/mpegvideo_enc.c:2602 #4 0x00005555574aad51 in encode_thread (c=0x619000003780, arg=0x6250000053e0) at libavcodec/mpegvideo_enc.c:3071 #5 0x0000555557629a3d in worker_func (priv=0x619000003780, jobnr=1, threadnr=1, nb_jobs=16, nb_threads=16) at libavcodec/pthread_slice.c:77 #6 0x0000555558d98052 in run_jobs (ctx=0x611000024080) at libavutil/slicethread.c:65 #7 0x0000555558d98224 in thread_worker (v=0x61c0000010f0) at libavutil/slicethread.c:89 #8 0x00007ffff59d86db in start_thread (arg=0x7fffe1cdf700) at pthread_create.c:463 #9 0x00007ffff570161f in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95 }}} **Assembley code around pc** {{{ Dump of assembler code from 0x5555574cabaf to 0x5555574cabef: 0x00005555574cabaf <dct_quantize_refine+6491>: test %dl,%dl 0x00005555574cabb1 <dct_quantize_refine+6493>: setne %sil 0x00005555574cabb5 <dct_quantize_refine+6497>: mov %rax,%rdi 0x00005555574cabb8 <dct_quantize_refine+6500>: and $0x7,%edi 0x00005555574cabbb <dct_quantize_refine+6503>: cmp %dl,%dil 0x00005555574cabbe <dct_quantize_refine+6506>: setge %dl 0x00005555574cabc1 <dct_quantize_refine+6509>: and %esi,%edx 0x00005555574cabc3 <dct_quantize_refine+6511>: test %dl,%dl 0x00005555574cabc5 <dct_quantize_refine+6513>: je 0x5555574cabcf <dct_quantize_refine+6523> 0x00005555574cabc7 <dct_quantize_refine+6515>: mov %rax,%rdi 0x00005555574cabca <dct_quantize_refine+6518>: callq 0x555555a83bd0 <__asan_report_load1@plt> => 0x00005555574cabcf <dct_quantize_refine+6523>: movzbl (%rcx),%eax 0x00005555574cabd2 <dct_quantize_refine+6526>: movzbl %al,%eax 0x00005555574cabd5 <dct_quantize_refine+6529>: lea (%rax,%rax,1),%rdx 0x00005555574cabd9 <dct_quantize_refine+6533>: mov -0x3c0(%rbp),%rax 0x00005555574cabe0 <dct_quantize_refine+6540>: lea (%rdx,%rax,1),%rcx 0x00005555574cabe4 <dct_quantize_refine+6544>: mov %rcx,%rax 0x00005555574cabe7 <dct_quantize_refine+6547>: mov %rax,%rdx 0x00005555574cabea <dct_quantize_refine+6550>: shr $0x3,%rdx 0x00005555574cabee <dct_quantize_refine+6554>: add $0x7fff8000,%rdx End of assembler dump. }}} **Register Info** {{{ rax 0x625058064814 108097213712404 rbx 0x7fffe1cd0bb0 140736981699504 rcx 0x625058064814 108097213712404 rdx 0x0 0 rsi 0x0 0 rdi 0x4 4 rbp 0x7fffe1cd0bd0 0x7fffe1cd0bd0 rsp 0x7fffe1cd07f0 0x7fffe1cd07f0 r8 0x555559cb4ea0 93825067077280 r9 0x2 2 r10 0x616000031280 107064944956032 r11 0x7fffe1cd3250 140736981709392 r12 0xffffc39a122 17592122712354 r13 0x7fffe1cd0910 140736981698832 r14 0x7fffe1cd0910 140736981698832 r15 0x8 8 rip 0x5555574cabcf 0x5555574cabcf <dct_quantize_refine+6523> eflags 0x10246 [ PF ZF IF RF ] cs 0x33 51 ss 0x2b 43 ds 0x0 0 es 0x0 0 fs 0x0 0 gs 0x0 0 st0 <invalid float value> (raw 0xffff0000253e000003b2) st1 <invalid float value> (raw 0xffff00009b0a00001f02) st2 <invalid float value> (raw 0xffff0000000000000094) st3 <invalid float value> (raw 0xffff0003010000060542) st4 <invalid float value> (raw 0xffff0000000000000000) st5 <invalid float value> (raw 0xffff00a000a000a000a0) st6 <invalid float value> (raw 0xffff2d7b2d7b0000e174) st7 <invalid float value> (raw 0xffff0b5f03bb000043bb) fctrl 0x37f 895 fstat 0x0 0 ftag 0xaaaa 43690 fiseg 0x0 0 fioff 0x0 0 foseg 0x0 0 fooff 0x0 0 fop 0x0 0 mxcsr 0x1fa8 [ OE PE IM DM ZM OM UM PM ] ymm0 {v8_float = {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, v4_double = {0x8000000000000000, 0x0, 0x0, 0x0}, v32_int8 = {0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0x0 <repeats 24 times>}, v16_int16 = {0xffff, 0xffff, 0xffff, 0xffff, 0x0 <repeats 12 times>}, v8_int32 = { 0xffffffff, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, v4_int64 = {0xffffffffffffffff, 0x0, 0x0, 0x0}, v2_int128 = {0xffffffffffffffff, 0x0}} ymm1 {v8_float = {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, v4_double = {0x0, 0x0, 0x0, 0x0}, v32_int8 = {0x1, 0x0, 0x3, 0x0, 0x2, 0x0 <repeats 27 times>}, v16_int16 = {0x1, 0x3, 0x2, 0x0 <repeats 13 times>}, v8_int32 = {0x30001, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, v4_int64 = { 0x200030001, 0x0, 0x0, 0x0}, v2_int128 = {0x200030001, 0x0}} ymm2 {v8_float = {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, v4_double = {0x0, 0x0, 0x0, 0x0}, v32_int8 = {0x0, 0x0, 0x0, 0x0, 0x84, 0xec, 0x0, 0x0, 0xe0, 0xf0, 0x2, 0x0, 0x5e, 0x47, 0x2, 0x0 <repeats 17 times>}, v16_int16 = {0x0, 0x0, 0xec84, 0x0, 0xf0e0, 0x2, 0x475e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, v8_int32 = {0x0, 0xec84, 0x2f0e0, 0x2475e, 0x0, 0x0, 0x0, 0x0}, v4_int64 = {0xec8400000000, 0x2475e0002f0e0, 0x0, 0x0}, v2_int128 = {0x2475e0002f0e00000ec8400000000, 0x0}} ymm3 {v8_float = {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, v4_double = {0x0, 0x0, 0x0, 0x0}, v32_int8 = {0x0 <repeats 32 times>}, v16_int16 = {0x0 <repeats 16 times>}, v8_int32 = {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, v4_int64 = {0x0, 0x0, 0x0, 0x0}, v2_int128 = {0x0, 0x0}} ymm4 {v8_float = {0xc24b42, 0x88000000, 0x0, 0xfffff904, 0x0, 0x0, 0x0, 0x0}, v4_double = {0x7fffffffffffffff, 0x8000000000000000, 0x0, 0x0}, v32_int8 = {0x42, 0x4b, 0x42, 0x4b, 0x62, 0x68, 0x7e, 0x58, 0x46, 0xd7, 0xac, 0x9d, 0x9e, 0x97, 0xdf, 0xc4, 0x0 <repeats 16 times>}, v16_int16 = {0x4b42, 0x4b42, 0x6862, 0x587e, 0xd746, 0x9dac, 0x979e, 0xc4df, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, v8_int32 = {0x4b424b42, 0x587e6862, 0x9dacd746, 0xc4df979e, 0x0, 0x0, 0x0, 0x0}, v4_int64 = {0x587e68624b424b42, 0xc4df979e9dacd746, 0x0, 0x0}, v2_int128 = { 0xc4df979e9dacd746587e68624b424b42, 0x0}} ymm5 {v8_float = {0xc24b42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, v4_double = {0x0, 0x8000000000000000, 0x0, 0x0}, v32_int8 = {0x42, 0x4b, 0x42, 0x4b, 0x21, 0x3b, 0xc3, 0x14, 0x54, 0x62, 0xba, 0x28, 0x7e, 0x58, 0x3d, 0xeb, 0x0 <repeats 16 times>}, v16_int16 = {0x4b42, 0x4b42, 0x3b21, 0x14c3, 0x6254, 0x28ba, 0x587e, 0xeb3d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, v8_int32 = {0x4b424b42, 0x14c33b21, 0x28ba6254, 0xeb3d587e, 0x0, 0x0, 0x0, 0x0}, v4_int64 = {0x14c33b214b424b42, 0xeb3d587e28ba6254, 0x0, 0x0}, v2_int128 = {0xeb3d587e28ba625414c33b214b424b42, 0x0}} ymm6 {v8_float = {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, v4_double = {0x0, 0x0, 0x0, 0x0}, v32_int8 = {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0 <repeats 17 times>}, v16_int16 = {0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, v8_int32 = {0x10000, 0x10000, 0x10000, 0x10000, 0x0, 0x0, 0x0, 0x0}, v4_int64 = {0x1000000010000, 0x1000000010000, 0x0, 0x0}, v2_int128 = {0x10000000100000001000000010000, 0x0}} ymm7 {v8_float = {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, v4_double = {0x8000000000000000, 0x0, 0x0, 0x0}, v32_int8 = {0x84, 0x96, 0x0, 0x0, 0xbc, 0x66, 0xff, 0xff, 0x1c, 0x16, 0x1, 0x0, 0xf8, 0x61, 0x1, 0x0 <repeats 17 times>}, v16_int16 = {0x9684, 0x0, 0x66bc, 0xffff, 0x161c, 0x1, 0x61f8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, v8_int32 = {0x9684, 0xffff66bc, 0x1161c, 0x161f8, 0x0, 0x0, 0x0, 0x0}, v4_int64 = { 0xffff66bc00009684, 0x161f80001161c, 0x0, 0x0}, v2_int128 = {0x161f80001161cffff66bc00009684, 0x0}} ymm8 {v8_float = {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, v4_double = {0x0, 0x0, 0x0, 0x0}, v32_int8 = {0x4, 0x0, 0xfd, 0xff, 0xfa, 0xff, 0x0, 0x0, 0x0, 0x0, 0xff, 0xff, 0xfd, 0xff, 0x0 <repeats 18 times>}, v16_int16 = {0x4, 0xfffd, 0xfffa, 0x0, 0x0, 0xffff, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, v8_int32 = {0xfffd0004, 0xfffa, 0xffff0000, 0xfffd, 0x0, 0x0, 0x0, 0x0}, v4_int64 = {0xfffafffd0004, 0xfffdffff0000, 0x0, 0x0}, v2_int128 = {0xfffdffff00000000fffafffd0004, 0x0}} ymm9 {v8_float = {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, v4_double = {0x0, 0x0, 0x0, 0x0}, v32_int8 = {0x51, 0x0, 0x9, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0 <repeats 19 times>}, v16_int16 = {0x51, 0x9, 0x9, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, v8_int32 = {0x90051, 0x9, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0}, v4_int64 = {0x900090051, 0x200000000, 0x0, 0x0}, v2_int128 = { 0x2000000000000000900090051, 0x0}} ymm10 {v8_float = {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, v4_double = {0x0, 0x0, 0x0, 0x0}, v32_int8 = {0x5a, 0x4, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5a, 0x3, 0x2, 0x0, 0x2, 0x0 <repeats 19 times>}, v16_int16 = {0x45a, 0x2, 0x2, 0x0, 0x35a, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, v8_int32 = {0x2045a, 0x2, 0x2035a, 0x2, 0x0, 0x0, 0x0, 0x0}, v4_int64 = {0x20002045a, 0x20002035a, 0x0, 0x0}, v2_int128 = { 0x20002035a000000020002045a, 0x0}} ymm11 {v8_float = {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, v4_double = {0x0, 0x8000000000000000, 0x0, 0x0}, v32_int8 = {0x5a, 0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfe, 0xff, 0x0, 0x0, 0xff, 0xff, 0x0 <repeats 16 times>}, v16_int16 = {0x5a, 0x3, 0x2, 0x0, 0x2, 0xfffe, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, v8_int32 = {0x3005a, 0x2, 0xfffe0002, 0xffff0000, 0x0, 0x0, 0x0, 0x0}, v4_int64 = {0x20003005a, 0xffff0000fffe0002, 0x0, 0x0}, v2_int128 = {0xffff0000fffe0002000000020003005a, 0x0}} ymm12 {v8_float = {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, v4_double = {0x0, 0x0, 0x0, 0x0}, v32_int8 = {0x56, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x55, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0 <repeats 17 times>}, v16_int16 = {0x156, 0x1, 0x2, 0x1, 0x155, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, v8_int32 = {0x10156, 0x10002, 0x10155, 0x10002, 0x0, 0x0, 0x0, 0x0}, v4_int64 = {0x1000200010156, 0x1000200010155, 0x0, 0x0}, v2_int128 = {0x10002000101550001000200010156, 0x0}} ymm13 {v8_float = {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, v4_double = {0x0, 0x0, 0x0, 0x0}, v32_int8 = {0x57, 0x2, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x56, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0 <repeats 17 times>}, v16_int16 = {0x257, 0x1, 0x2, 0x1, 0x156, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, v8_int32 = {0x10257, 0x10002, 0x10156, 0x10002, 0x0, 0x0, 0x0, 0x0}, v4_int64 = {0x1000200010257, 0x1000200010156, 0x0, 0x0}, v2_int128 = {0x10002000101560001000200010257, 0x0}} ymm14 {v8_float = {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, v4_double = {0x0, 0x0, 0x0, 0x0}, v32_int8 = {0x4d, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0 <repeats 19 times>}, v16_int16 = {0x4d, 0x6, 0x8, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, v8_int32 = {0x6004d, 0x8, 0x20000, 0x3, 0x0, 0x0, 0x0, 0x0}, v4_int64 = {0x80006004d, 0x300020000, 0x0, 0x0}, v2_int128 = { 0x300020000000000080006004d, 0x0}} ymm15 {v8_float = {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, v4_double = {0x0, 0x0, 0x0, 0x0}, v32_int8 = {0x4c, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0 <repeats 19 times>}, v16_int16 = {0x4c, 0x6, 0x8, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, v8_int32 = {0x6004c, 0x8, 0x20000, 0x3, 0x0, 0x0, 0x0, 0x0}, v4_int64 = {0x80006004c, 0x300020000, 0x0, 0x0}, v2_int128 = { 0x300020000000000080006004c, 0x0}} }}} **Environment** Note that we used address sanitizer. {{{ ffmpeg version N-110167-g97c95961f0 Copyright (c) 2000-2023 the FFmpeg developers built with gcc 7 (Ubuntu 7.5.0-3ubuntu1~18.04) configuration: --prefix=/home/youngseok/subjects/latest_asan_install/ffmpeg --extra- cflags='-fsanitize=address -g -O0' --extra-cxxflags='-fsanitize=address -g -O0' --extra-ldflags='-fsanitize=address -g -O0' --disable-optimizations --disable-stripping }}} -- Ticket URL: <https://trac.ffmpeg.org/ticket/10307> FFmpeg <https://ffmpeg.org> FFmpeg issue tracker

1 2