June 2024 - FFmpeg-trac - lists.ffmpeg.org

#11030(undetermined:new): Remuxing a damaged MP4 increases file size noticeably
by FFmpeg 11 Jun '24

11 Jun '24

#11030: Remuxing a damaged MP4 increases file size noticeably -------------------------------------+------------------------------------- Reporter: PumaD | Type: defect Status: new | Priority: normal Component: | Version: git- undetermined | master Keywords: | Blocked By: Blocking: | Reproduced by developer: 0 Analyzed by developer: 0 | -------------------------------------+------------------------------------- Got a slightly damaged 1.9 GiB MP4 file. When remuxing with ffmpeg the resulting file is a whole 224 MiB larger than before (from 1.9 GiB to 2.2 GiB). Remuxing the file with mkvtoolnix instead reduces the file size marginally. (https://gitlab.com/mbunkus/mkvtoolnix; `mkvmerge --output out.mkv slightly-damaged-audio-stops-at-00-43-05.mp4`) The effect on the sample below is a much more modest increase of ~30 MiB, but it does illustrate the problem. Sample (from #11028): https://streams.videolan.org/ffmpeg/incoming/11028/slightly-damaged- audio-stops-at-00-43-05.mp4 (~ 1 GiB) Note: NSFW How to reproduce: {{{ $ ffmpeg -i slightly-damaged-audio-stops-at-00-43-05.mp4 -c copy out.mkv ffmpeg version N-115363-g3146b77a7d Copyright (c) 2000-2024 the FFmpeg developers built with gcc 14.1.1 (GCC) 20240507 configuration: libavutil 59. 19.100 / 59. 19.100 libavcodec 61. 5.104 / 61. 5.104 libavformat 61. 3.103 / 61. 3.103 libavdevice 61. 2.100 / 61. 2.100 libavfilter 10. 2.102 / 10. 2.102 libswscale 8. 2.100 / 8. 2.100 libswresample 5. 2.100 / 5. 2.100 [mov,mp4,m4a,3gp,3g2,mj2 @ 0x624f2ebf8840] Sample size 3043950162 is too large [h264 @ 0x624f2ebf9800] concealing 1691 DC, 1691 AC, 1691 MV errors in I frame Input #0, mov,mp4,m4a,3gp,3g2,mj2, from 'slightly-damaged-audio-stops- at-00-43-05.mp4': Metadata: major_brand : isom minor_version : 512 compatible_brands: isomiso2avc1mp41 encoder : Lavf57.62.100 Duration: 01:28:36.03, start: 0.000000, bitrate: 1577 kb/s Stream #0:0[0x1](und): Video: h264 (Main) (avc1 / 0x31637661), yuv420p(progressive), 960x720 [SAR 1:1 DAR 4:3], 3028 kb/s, 29.93 fps, 30 tbr, 90k tbn (default) Metadata: handler_name : VideoHandler vendor_id : [0][0][0][0] Stream #0:1[0x2](und): Audio: aac (LC) (mp4a / 0x6134706D), 44100 Hz, stereo, fltp, 93 kb/s (default) Metadata: handler_name : SoundHandler vendor_id : [0][0][0][0] Stream mapping: Stream #0:0 -> #0:0 (copy) Stream #0:1 -> #0:1 (copy) Output #0, matroska, to 'out.mkv': Metadata: major_brand : isom minor_version : 512 compatible_brands: isomiso2avc1mp41 encoder : Lavf61.3.103 Stream #0:0(und): Video: h264 (Main) (avc1 / 0x31637661), yuv420p(progressive), 960x720 [SAR 1:1 DAR 4:3], q=2-31, 3028 kb/s, 29.93 fps, 30 tbr, 1k tbn (default) Metadata: handler_name : VideoHandler vendor_id : [0][0][0][0] Stream #0:1(und): Audio: aac (LC) ([255][0][0][0] / 0x00FF), 44100 Hz, stereo, fltp, 93 kb/s (default) Metadata: handler_name : SoundHandler vendor_id : [0][0][0][0] Press [q] to stop, [?] for help [h264 @ 0x624f2ef99e00] Invalid NAL unit size (-720787532 > 47705). [h264 @ 0x624f2ef99e00] missing picture in access unit with size 47709 [h264 @ 0x624f2ef99e00] Invalid NAL unit size (1049218 > 11473).31e+03x [h264 @ 0x624f2ef99e00] missing picture in access unit with size 11477 [h264 @ 0x624f2ef99e00] Invalid NAL unit size (722808771 > 10603). [h264 @ 0x624f2ef99e00] missing picture in access unit with size 10607 [h264 @ 0x624f2ef99e00] Invalid NAL unit size (526767940 > 14657).+03x [h264 @ 0x624f2ef99e00] missing picture in access unit with size 14661 [h264 @ 0x624f2ef99e00] Invalid NAL unit size (1063190835 > 51). [h264 @ 0x624f2ef99e00] missing picture in access unit with size 6615 Truncating packet of size 268435713 to 355012330kbits/s speed=1.48e+03x [mov,mp4,m4a,3gp,3g2,mj2 @ 0x624f2ebf8840] Packet corrupt (stream = 1, dts = 113707010). [in#0/mov,mp4,m4a,3gp,3g2,mj2 @ 0x624f2ebf8580] corrupt input packet in stream 1 [mov,mp4,m4a,3gp,3g2,mj2 @ 0x624f2ebf8840] Packet corrupt (stream = 0, dts = 240368850). [h264 @ 0x624f2ef99e00] Invalid NAL unit size (15412 > 629). [h264 @ 0x624f2ef99e00] missing picture in access unit with size 639 [in#0/mov,mp4,m4a,3gp,3g2,mj2 @ 0x624f2ebf8580] corrupt input packet in stream 0 [mov,mp4,m4a,3gp,3g2,mj2 @ 0x624f2ebf8840] stream 0, offset 0x3e803ab9: partial file [out#0/matroska @ 0x624f2ebfabc0] video:988025KiB audio:64471KiB subtitle:0KiB other streams:0KiB global headers:0KiB muxing overhead: 0.138273% size= 1053952KiB time=00:44:30.79 bitrate=3232.7kbits/s speed=1.45e+03x }}} -- Ticket URL: <https://trac.ffmpeg.org/ticket/11030> FFmpeg <https://ffmpeg.org> FFmpeg issue tracker

1 20

#10244(ffmpeg:new): stack-buffer-overflow in ffmpeg (libavcodec/options.c:4)
by FFmpeg 11 Jun '24

11 Jun '24

#10244: stack-buffer-overflow in ffmpeg (libavcodec/options.c:4) -------------------------------------+------------------------------------- Reporter: Youngseok | Type: defect Choi | Status: new | Priority: normal Component: ffmpeg | Version: git- | master Keywords: | Blocked By: Blocking: | Reproduced by developer: 0 Analyzed by developer: 0 | -------------------------------------+------------------------------------- Hello, we are developing a new fuzzing technique, and it found a stack- buffer-overflow in ffmpeg. How to reproduce: {{{ % ./ffmpeg -discard "" -i <input_file> }}} <input_file> is available at https://github.com/3-24/oss-fuzz- reports/raw/master/ffmpeg/poc_4/poc_file. Stack Trace: {{{ ==16401==ERROR: AddressSanitizer: stack-buffer-overflow on address 0x7ffce3a8f980 at pc 0x558c3518c716 bp 0x7ffce3a8ce00 sp 0x7ffce3a8cdf0 READ of size 8 at 0x7ffce3a8f980 thread T0 #0 0x558c3518c715 in context_to_name libavcodec/options.c:44 #1 0x558c36928c38 in format_line libavutil/log.c:309 #2 0x558c369295e3 in av_log_default_callback libavutil/log.c:368 #3 0x558c3692a147 in av_vlog libavutil/log.c:434 #4 0x558c36929d8d in av_log libavutil/log.c:413 #5 0x558c3690685f in parse_primary libavutil/eval.c:387 #6 0x558c369094a3 in parse_pow libavutil/eval.c:522 #7 0x558c36909770 in parse_dB libavutil/eval.c:537 #8 0x558c369098c9 in parse_factor libavutil/eval.c:544 #9 0x558c36909e78 in parse_term libavutil/eval.c:571 #10 0x558c3690a295 in parse_subexpr libavutil/eval.c:595 #11 0x558c3690a6bb in parse_expr libavutil/eval.c:623 #12 0x558c3690b33f in av_expr_parse libavutil/eval.c:716 #13 0x558c3690be8e in av_expr_parse_and_eval libavutil/eval.c:783 #14 0x558c36936994 in set_string_number libavutil/opt.c:307 #15 0x558c36938720 in av_opt_eval_int libavutil/opt.c:602 #16 0x558c336bcabc in add_input_streams fftools/ffmpeg_demux.c:784 #17 0x558c336c2932 in ifile_open fftools/ffmpeg_demux.c:1165 #18 0x558c337072f4 in open_files fftools/ffmpeg_opt.c:1244 #19 0x558c33707669 in ffmpeg_parse_options fftools/ffmpeg_opt.c:1283 #20 0x558c337450df in main fftools/ffmpeg.c:4160 #21 0x7fc525d28c86 in __libc_start_main (/lib/x86_64-linux- gnu/libc.so.6+0x21c86) #22 0x558c336b0499 in _start (/home/youngseok/latest- subjects/ffmpeg/ffmpeg+0x52f499) }}} Environment: - OS: Ubuntu 18.04 - gcc: 7.5.0 - ffmpeg: version N-109968-gcc76e8340d (git-master) Note that I built ffmpeg with address sanitizer. {{{ ./configure --extra-cflags="-fsanitize=address -g -O0" \ --extra-cxxflags="-fsanitize=address -g -O0" --extra- ldflags="-fsanitize=address -g -O0" \ --disable-optimizations --disable-stripping }}} -- Ticket URL: <https://trac.ffmpeg.org/ticket/10244> FFmpeg <https://ffmpeg.org> FFmpeg issue tracker

1 1

#10242(ffmpeg:new): heap overflow in ffmpeg (base64.c:133)
by FFmpeg 11 Jun '24

11 Jun '24

#10242: heap overflow in ffmpeg (base64.c:133) -------------------------------------+------------------------------------- Reporter: Youngseok | Type: defect Choi | Status: new | Priority: normal Component: ffmpeg | Version: git- | master Keywords: | Blocked By: Blocking: | Reproduced by developer: 0 Analyzed by developer: 0 | -------------------------------------+------------------------------------- Hi, while running afl++ on ffmpeg, I found heap overflow in ffmpeg. How to reproduce: {{{ % ./ffmpeg -i "data:/;;,doubleweend" }}} Stack Trace: {{{ ==19450==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x609000000407 at pc 0x55838811cade bp 0x7ffd42d3c400 sp 0x7ffd42d3c3f0 WRITE of size 1 at 0x609000000407 thread T0 #0 0x55838811cadd in av_base64_decode libavutil/base64.c:133 #1 0x558385eb5f9e in data_open libavformat/data_uri.c:79 #2 0x5583859af0ef in ffurl_connect libavformat/avio.c:209 #3 0x5583859b015c in ffurl_open_whitelist libavformat/avio.c:347 #4 0x5583859ba239 in ffio_open_whitelist libavformat/aviobuf.c:1230 #5 0x558385d0c9d0 in io_open_default libavformat/options.c:151 #6 0x558385a061c4 in init_input libavformat/demux.c:174 #7 0x558385a06c66 in avformat_open_input libavformat/demux.c:254 #8 0x558384ef1532 in ifile_open fftools/ffmpeg_demux.c:1051 #9 0x558384f372f4 in open_files fftools/ffmpeg_opt.c:1244 #10 0x558384f37669 in ffmpeg_parse_options fftools/ffmpeg_opt.c:1283 #11 0x558384f750df in main fftools/ffmpeg.c:4160 #12 0x7fcc4980fc86 in __libc_start_main (/lib/x86_64-linux- gnu/libc.so.6+0x21c86) #13 0x558384ee0499 in _start (/home/youngseok/latest- subjects/ffmpeg/ffmpeg+0x52f499) }}} Environment: - OS: Ubuntu 18.04 - gcc: 7.5.0 - ffmpeg: version N-109968-gcc76e8340d (git-master) Note that I built ffmpeg with address sanitizer. {{{ ./configure --extra-cflags="-fsanitize=address -g -O0" \ --extra-cxxflags="-fsanitize=address -g -O0" --extra- ldflags="-fsanitize=address -g -O0" \ --disable-optimizations --disable-stripping }}} -- Ticket URL: <https://trac.ffmpeg.org/ticket/10242> FFmpeg <https://ffmpeg.org> FFmpeg issue tracker

1 1

#11049(ffmpeg:new): Ffmpeg unable to process prores input file (Value 234.000000 for parameter 'colorspace' out of range [0 - 14])
by FFmpeg 10 Jun '24

10 Jun '24

#11049: Ffmpeg unable to process prores input file (Value 234.000000 for parameter 'colorspace' out of range [0 - 14]) -------------------------------------+------------------------------------- Reporter: DanMalik | Type: defect Status: new | Priority: important Component: ffmpeg | Version: 7.0 Keywords: colorspace | Blocked By: prores mp4 | Blocking: | Reproduced by developer: 0 Analyzed by developer: 0 | -------------------------------------+------------------------------------- Summary of the bug: {{{ I'm trying to convert the video to mp4, but it seems that ffmpeg is not able to infer colorspace value (could be something else too), which seems to be "unknown". I've attached the file containing metadeta details. I'm not an expert, but I've tried explicitly setting the color values (color_space, color_primaries, color_transfer), but still faced the same issue. Faced similar issue with some other videos too. }}} How to reproduce: {{{ % ffmpeg -y -i https://d3rka4syouiwkp.cloudfront.net/extra/testVideo.mov -crf 23 -vcodec h264 -acodec aac -ar 44100 -b:a 192k -pix_fmt yuv420p -strict -2 -vf "pad=ceil(iw/2)*2:ceil(ih/2)*2:color=white@0.0" -movflags +faststart output.mp4 }}} ffmpeg version {{{ built on 7.0.1 }}} Platform {{{ mac }}} Output: {{{ ffmpeg version 7.0.1 Copyright (c) 2000-2024 the FFmpeg developers built with Apple clang version 15.0.0 (clang-1500.3.9.4) configuration: --prefix=/opt/homebrew/Cellar/ffmpeg/7.0.1 --enable- shared --enable-pthreads --enable-version3 --cc=clang --host-cflags= --host-ldflags='-Wl,-ld_classic' --enable-ffplay --enable-gnutls --enable- gpl --enable-libaom --enable-libaribb24 --enable-libbluray --enable- libdav1d --enable-libharfbuzz --enable-libjxl --enable-libmp3lame --enable-libopus --enable-librav1e --enable-librist --enable-librubberband --enable-libsnappy --enable-libsrt --enable-libssh --enable-libsvtav1 --enable-libtesseract --enable-libtheora --enable-libvidstab --enable- libvmaf --enable-libvorbis --enable-libvpx --enable-libwebp --enable- libx264 --enable-libx265 --enable-libxml2 --enable-libxvid --enable-lzma --enable-libfontconfig --enable-libfreetype --enable-frei0r --enable- libass --enable-libopencore-amrnb --enable-libopencore-amrwb --enable- libopenjpeg --enable-libspeex --enable-libsoxr --enable-libzmq --enable- libzimg --disable-libjack --disable-indev=jack --enable-videotoolbox --enable-audiotoolbox --enable-neon libavutil 59. 8.100 / 59. 8.100 libavcodec 61. 3.100 / 61. 3.100 libavformat 61. 1.100 / 61. 1.100 libavdevice 61. 1.100 / 61. 1.100 libavfilter 10. 1.100 / 10. 1.100 libswscale 8. 1.100 / 8. 1.100 libswresample 5. 1.100 / 5. 1.100 libpostproc 58. 1.100 / 58. 1.100 Input #0, mov,mp4,m4a,3gp,3g2,mj2, from 'https://d3rka4syouiwkp.cloudfront.net/extra/testVideo.mov': Metadata: major_brand : qt minor_version : 0 compatible_brands: qt creation_time : 2024-06-08T05:18:31.000000Z encoder : Lavf61.1.100 Duration: 00:00:01.01, start: 0.000000, bitrate: 950910 kb/s Stream #0:0[0x1](und): Video: prores (HQ) (apch / 0x68637061), yuv422p10le(progressive), 3840x2160, 926658 kb/s, SAR 1:1 DAR 16:9, 29.97 fps, 29.97 tbr, 30k tbn (default) Metadata: creation_time : 2024-06-08T05:18:31.000000Z handler_name : Core Media Video vendor_id : FFMP timecode : 00:00:00:00 Stream #0:1[0x2](eng): Data: none (tmcd / 0x64636D74), 0 kb/s Metadata: creation_time : 2024-06-08T05:18:31.000000Z handler_name : Core Media Time Code timecode : 00:00:00:00 [out#0/mp4 @ 0x600001e58180] Codec AVOption b (set bitrate (in bits/s)) has not been used for any stream. The most likely reason is either wrong type (e.g. a video option with no video streams) or that it is a private option of some encoder which was not actually used for any stream. Stream mapping: Stream #0:0 -> #0:0 (prores (native) -> h264 (libx264)) Press [q] to stop, [?] for help [graph 0 input from stream 0:0 @ 0x600001c40000] Value 234.000000 for parameter 'colorspace' out of range [0 - 14] [graph 0 input from stream 0:0 @ 0x600001c40000] Error setting option colorspace to value 234. [graph 0 input from stream 0:0 @ 0x600001c40000] Error applying generic filter options. [vf#0:0 @ 0x60000195c000] Error reinitializing filters! [vf#0:0 @ 0x60000195c000] Task finished with error code: -34 (Result too large) [vf#0:0 @ 0x60000195c000] Terminating thread with return code -34 (Result too large) [vost#0:0/libx264 @ 0x123e065a0] Could not open encoder before EOF [vost#0:0/libx264 @ 0x123e065a0] Task finished with error code: -22 (Invalid argument) [vost#0:0/libx264 @ 0x123e065a0] Terminating thread with return code -22 (Invalid argument) [out#0/mp4 @ 0x600001e58180] Nothing was written into output file, because at least one of its streams received no packets. frame= 0 fps=0.0 q=0.0 Lsize= 0KiB time=N/A bitrate=N/A speed=N/A Conversion failed! }}} -- Ticket URL: <https://trac.ffmpeg.org/ticket/11049> FFmpeg <https://ffmpeg.org> FFmpeg issue tracker

1 3

#11044(undetermined:new): padding is very frustrating.
by FFmpeg 10 Jun '24

10 Jun '24

#11044: padding is very frustrating. -------------------------------------+------------------------------------- Reporter: elias | Type: defect tsolis | Status: new | Priority: normal Component: | Version: undetermined | unspecified Keywords: | Blocked By: Blocking: | Reproduced by developer: 0 Analyzed by developer: 0 | -------------------------------------+------------------------------------- I found it very frustrating to center a video the original dimensions was: Width 1920 pixels and Height : 1080 pixels. I wanted to make new dimensions with padding as: (h)3840x(w)2160 I found these problems if i put height/2 or iw/2 or ow/2 are not recognised. I could not understand when iw ow or height can be interpret and when not. There are not taken automatically from videofile? I must define explicity somewhere these variables? What is the diff between "=" and ":"? for eg. this works "pad=width=2160:height=3840:x=3840/2:y=2160/2:color=red" this does not work "pad=width=2160:height=3840:x=width/2:y=height/2:color=red" "pad=width=2160:height=3840:x=iw/2:y=ih/2:color=red" "pad=iw=2160:ih=3840:x=iw/2:y=ih/2:color=red" "pad=iw:2160:ih:3840:x=iw/2:y=ih/2:color=red" This was very frustrated for me. you explicity says in your manual: "in_w in_h The input video width and height. iw ih These are the same as in_w and in_h. " Also i cant understand when to use "()" for expressions and when not. You must explicity explain in your manual these things. I spent almost 4 hours+ to nothing. This works: {{{ rm a_t.mp4; for vids in *.mkv; do ffmpeg -i "$vids" -ss 0:00:00 -to 00:00:01 -vf "pad=width=2160:height=3840:x=3840/2:y=2160/2:color=red" -video_track_timescale 90000 -crf 19 -vcodec libx265 -an "a_${vids/.*}.mp4"; done; this does not: rm a_t.mp4; for vids in *.mkv; do ffmpeg -i "$vids" -ss 0:00:00 -to 00:00:01 -vf "pad=width=2160:height=3840:x=height/2:y=width/2:color=red" -video_track_timescale 90000 -crf 19 -vcodec libx265 -an "a_${vids/.*}.mp4"; done; }}} {{{ ffmpeg --version ffmpeg version N-115575-g4e120fbbbd Copyright (c) 2000-2024 the FFmpeg developers built with gcc 13 (Debian 13.2.0-25) configuration: --prefix=/home/eros/ffmpeg_build --pkg-config- flags=--static --extra-cflags=-I/home/eros/ffmpeg_build/include --extra- ldflags=-L/home/eros/ffmpeg_build/lib --extra-libs='-lpthread -lm' --ld=g++ --bindir=/home/eros/bin --enable-gpl --enable-gnutls --enable- libaom --enable-libass --enable-libfreetype --enable-libmp3lame --enable- libopus --enable-libsvtav1 --enable-libdav1d --enable-libvorbis --enable- libvpx --enable-libx264 --enable-libx265 --enable-nonfree libavutil 59. 21.100 / 59. 21.100 libavcodec 61. 6.100 / 61. 6.100 libavformat 61. 3.104 / 61. 3.104 libavdevice 61. 2.100 / 61. 2.100 libavfilter 10. 2.102 / 10. 2.102 libswscale 8. 2.100 / 8. 2.100 libswresample 5. 2.100 / 5. 2.100 libpostproc 58. 2.100 / 58. 2.100 }}} -- Ticket URL: <https://trac.ffmpeg.org/ticket/11044> FFmpeg <https://ffmpeg.org> FFmpeg issue tracker

1 7

#11005(undetermined:new): Damaged MP4 rejected by ffmpeg, mkvtoolnix can read it fine
by FFmpeg 10 Jun '24

10 Jun '24

#11005: Damaged MP4 rejected by ffmpeg, mkvtoolnix can read it fine -------------------------------------+------------------------------------- Reporter: PumaD | Type: defect Status: new | Priority: normal Component: | Version: git- undetermined | master Keywords: | Blocked By: Blocking: | Reproduced by developer: 0 Analyzed by developer: 0 | -------------------------------------+------------------------------------- Got a multi GiB file which is unfortunately damaged and all players I tested refuse to play. I almost deleted it but then had the idea to run it though mkvtoolnix. It managed to salvage it almost completely with just minor visual artifacts during playback. Would be great if ffmpeg could do the same. How to reproduce: {{{ $ ffmpeg -i slightly-damaged.mp4 out.mp4 ffmpeg version N-115112-g39ce8a9695 Copyright (c) 2000-2024 the FFmpeg developers built with gcc 13.2.1 (GCC) 20240417 configuration: libavutil 59. 17.100 / 59. 17.100 libavcodec 61. 5.103 / 61. 5.103 libavformat 61. 3.103 / 61. 3.103 libavdevice 61. 2.100 / 61. 2.100 libavfilter 10. 2.101 / 10. 2.101 libswscale 8. 2.100 / 8. 2.100 libswresample 5. 2.100 / 5. 2.100 [mov,mp4,m4a,3gp,3g2,mj2 @ 0x609423feb840] Invalid sample size -1251017134 [mov,mp4,m4a,3gp,3g2,mj2 @ 0x609423feb840] error reading header [in#0 @ 0x609423feb580] Error opening input: Invalid data found when processing input Error opening input file slightly-damaged.mp4. Error opening input files: Invalid data found when processing input }}} Tested with ffmpeg 6.1.1 as well as git master from yesterday. -- Ticket URL: <https://trac.ffmpeg.org/ticket/11005> FFmpeg <https://ffmpeg.org> FFmpeg issue tracker

1 26

#11050(ffmpeg:new): Change in frame rate detection in dvvideo in v6
by FFmpeg 08 Jun '24

08 Jun '24

#11050: Change in frame rate detection in dvvideo in v6 -----------------------------------+---------------------------------- Reporter: Ian Young | Type: defect Status: new | Priority: normal Component: ffmpeg | Version: 6.1.1 Keywords: dvvideo | Blocked By: Blocking: | Reproduced by developer: 0 Analyzed by developer: 0 | -----------------------------------+---------------------------------- I have a workflow that involves working with some very old `.dv` files. With newer versions of `ffmpeg`, it isn't working. Testing with the `linuxserver/ffmpeg` images, I can see the following in versions 4.4, 5.1 and 6.0: {{{ ffprobe clip.dv ffprobe version 6.0 Copyright (c) 2007-2023 the FFmpeg developers built with gcc 11 (Ubuntu 11.4.0-1ubuntu1~22.04) configuration: --disable-debug --disable-doc --disable-ffplay --enable- cuvid --enable-ffprobe --enable-gpl --enable-libaom --enable-libass --enable-libfdk_aac --enable-libfreetype --enable-libkvazaar --enable- libmp3lame --enable-libopencore-amrnb --enable-libopencore-amrwb --enable- libopenjpeg --enable-libopus --enable-libsvtav1 --enable-libtheora --enable-libv4l2 --enable-libvidstab --enable-libvmaf --enable-libvorbis --enable-libvpl --enable-libvpx --enable-libwebp --enable-libx264 --enable-libx265 --enable-libxml2 --enable-libxvid --enable-nonfree --enable-nvdec --enable-nvenc --enable-opencl --enable-openssl --enable- stripping --enable-vaapi --enable-vdpau --enable-version3 libavutil 58. 2.100 / 58. 2.100 libavcodec 60. 3.100 / 60. 3.100 libavformat 60. 3.100 / 60. 3.100 libavdevice 60. 1.100 / 60. 1.100 libavfilter 9. 3.100 / 9. 3.100 libswscale 7. 1.100 / 7. 1.100 libswresample 4. 10.100 / 4. 10.100 libpostproc 57. 1.100 / 57. 1.100 [dv @ 0x5634ce7c8340] Estimating duration from bitrate, this may be inaccurate Input #0, dv, from 'clip.dv': Metadata: timecode : 00:00:21:04 Duration: 01:01:20.72, start: 0.000000, bitrate: 28800 kb/s Stream #0:0: Video: dvvideo, yuv420p, 720x576 [SAR 64:45 DAR 16:9], 25000 kb/s, 25 fps, 25 tbr, 25 tbn Stream #0:1: Audio: pcm_s16le, 48000 Hz, stereo, s16, 1536 kb/s }}} Specifically: `25 fps, 25 tbr, 25 tbn` Now the same under v6.1 and later (also tested under 7.0.1): {{{ ffprobe clip.dv ffprobe version 6.1.1 Copyright (c) 2007-2023 the FFmpeg developers built with gcc 11 (Ubuntu 11.4.0-1ubuntu1~22.04) configuration: --disable-debug --disable-doc --disable-ffplay --enable- alsa --enable-cuvid --enable-ffprobe --enable-gpl --enable-libaom --enable-libass --enable-libfdk_aac --enable-libfreetype --enable- libkvazaar --enable-libmp3lame --enable-libopencore-amrnb --enable- libopencore-amrwb --enable-libopenjpeg --enable-libopus --enable- libplacebo --enable-librav1e --enable-libshaderc --enable-libsvtav1 --enable-libtheora --enable-libv4l2 --enable-libvidstab --enable-libvmaf --enable-libvorbis --enable-libvpl --enable-libvpx --enable-libwebp --enable-libx264 --enable-libx265 --enable-libxml2 --enable-libxvid --enable-libzimg --enable-nonfree --enable-nvdec --enable-nvenc --enable- cuda-llvm --enable-opencl --enable-openssl --enable-stripping --enable- vaapi --enable-vdpau --enable-version3 --enable-vulkan libavutil 58. 29.100 / 58. 29.100 libavcodec 60. 31.102 / 60. 31.102 libavformat 60. 16.100 / 60. 16.100 libavdevice 60. 3.100 / 60. 3.100 libavfilter 9. 12.100 / 9. 12.100 libswscale 7. 5.100 / 7. 5.100 libswresample 4. 12.100 / 4. 12.100 libpostproc 57. 3.100 / 57. 3.100 [dv @ 0x5566f329db40] Estimating duration from bitrate, this may be inaccurate Input #0, dv, from 'clip.dv': Metadata: timecode : 00:00:21:04 Duration: 01:01:20.72, start: 0.000000, bitrate: 28800 kb/s Stream #0:0: Video: dvvideo, yuv420p, 720x576 [SAR 64:45 DAR 16:9], 28800 kb/s, 60k fps, 25 tbr, 60k tbn Stream #0:1: Audio: pcm_s16le, 48000 Hz, stereo, s16, 1536 kb/s }}} Difference: `60k fps, 25 tbr, 60k tbn` In my actual workflow, there's an error when `ffmpeg` attempts to write 60000 into the trailer of a `.mov` file, but the above seems to indicate where that value is coming from. The files in question are around 13GB each, but the above behaviour shows up in the first 10MB so I'll try and attach one of those. -- Ticket URL: <https://trac.ffmpeg.org/ticket/11050> FFmpeg <https://ffmpeg.org> FFmpeg issue tracker

1 2

#11048(ffplay:new): Feature Request: Start ffplay in paused mode
by FFmpeg 08 Jun '24

08 Jun '24

#11048: Feature Request: Start ffplay in paused mode --------------------------------+--------------------------------------- Reporter: geegee | Type: enhancement Status: new | Priority: normal Component: ffplay | Version: git-master Keywords: | Blocked By: Blocking: | Reproduced by developer: 0 Analyzed by developer: 0 | --------------------------------+--------------------------------------- I would like to request the addition of a global option for ffplay, called something like `-start_paused`, which will normally open the input but pause on the first frame until the pause key (space in ffplay) is pressed again, or the `s` key is pressed to advance and pause on the next frame. This would be very useful for viewing CBZ and CBR files, which are nothing but ZIP and RAR files, respectively, with different extension names and which contain a collection of picture files such as .jpg, .bmp, gif, and png. The current problem is that opening such zip/rar files directly with ffmpeg/ffplay, to the best of my knowledge, isn't supported. Thus, something like the following command can be used to circumvent this limitation and to allow viewing all compressed pictures in ffplay, which pipes extracted files to ffplay: {{{ 7z e -so input.zip | ffplay -hide_banner -infbuf -fs -i pipe: }}} The problem with the approach above is that ffplay will display the contents at 25 fps, with each frame being one picture file from the compressed archive. Thus, manual pausing (or the `s` key) needs to be used to control how fast ffplay displays each frame. Using manual pause is also imperfect because, typically, human reaction will be too slow to pause right on the first frame, and thus a few initial frames will have been displayed too fast. On top of that, the ability to rewind or seek to previous frames is not possible with this command. Therefore, once again, my proposed solution would be to add a global option for ffplay, called something like `-start_paused`, which will normally open the input but pause on the first frame until the pause key (space in ffplay) is pressed again or the `s` key is pressed to advance and pause on the next frame. The problem of not being able to go to the previous frame or rewind to the very first frame would still remain, but this seems to be a problem with how piping works. A further solution to that would be to also introduce a way to buffer input frames, I tried to achieve this using `-infbuf` but that did not seem to change anything regarding seeking past frames. While I was experimenting with possible solutions, I noticed that ffplay will sometimes be able to read directly from zip files to my very own surprise, but with some limitations it seems. For example, `ffplay -i file.zip` surprisingly works as long as the contents are .jpg files, but will fail if the contents are .png (`-loglevel trace` seems to indicate that ffplay tries to open .png's in the .zip file as mp3's instead of `png_pipe`). Thus, I worked around this by using the piping command I mentioned previously, but that came at the cost of losing the ability of seeking previous frames with the arrow keys. Thank you very much for considering my suggestion and for the amazing work you do! -- Ticket URL: <https://trac.ffmpeg.org/ticket/11048> FFmpeg <https://ffmpeg.org> FFmpeg issue tracker

1 1

#11032(avformat:new): Memory Leak Vulnerability in avformat_open_input
by FFmpeg 06 Jun '24

06 Jun '24

#11032: Memory Leak Vulnerability in avformat_open_input -------------------------------------+------------------------------------- Reporter: safa | Type: defect karakus | Status: new | Priority: normal Component: avformat | Version: | unspecified Keywords: | Blocked By: Blocking: | Reproduced by developer: 0 Analyzed by developer: 0 | -------------------------------------+------------------------------------- A memory leak vulnerability has been identified in the FFmpeg library, specifically in the avformat_open_input function. This vulnerability can lead to the unintended exposure of sensitive data stored in memory. The issue arises due to improper handling and freeing of allocated memory within the avformat_open_input and related functions. {{{ #include <stdint.h> #include <stddef.h> #include <stdio.h> #include <stdlib.h> #include <string.h> #include "libavformat/avformat.h" #include "libavcodec/avcodec.h" #include "libavutil/avutil.h" #include "libavutil/imgutils.h" void leak_memory_information(const char *filename) { AVFormatContext *fmt_ctx = avformat_alloc_context(); if (!fmt_ctx) { fprintf(stderr, "Could not allocate context\n"); return; } printf("Attempting to open file: %s\n", filename); int ret = avformat_open_input(&fmt_ctx, filename, NULL, NULL); if (ret < 0) { char err_buf[256]; av_strerror(ret, err_buf, sizeof(err_buf)); fprintf(stderr, "Could not open input file: %s. Error: %s\n", filename, err_buf); avformat_free_context(fmt_ctx); return; } if (avformat_find_stream_info(fmt_ctx, NULL) < 0) { fprintf(stderr, "Could not find stream information\n"); avformat_close_input(&fmt_ctx); avformat_free_context(fmt_ctx); return; } // Stream bilgilerini al for (unsigned int i = 0; i < fmt_ctx->nb_streams; i++) { AVCodecParameters *codecpar = fmt_ctx->streams[i]->codecpar; const AVCodec *codec = avcodec_find_decoder(codecpar->codec_id); if (!codec) { continue; } AVCodecContext *codec_ctx = avcodec_alloc_context3(codec); if (!codec_ctx) { continue; } if (avcodec_parameters_to_context(codec_ctx, codecpar) < 0) { avcodec_free_context(&codec_ctx); continue; } if (avcodec_open2(codec_ctx, codec, NULL) < 0) { avcodec_free_context(&codec_ctx); continue; } AVFrame *frame = av_frame_alloc(); AVPacket *packet = av_packet_alloc(); if (!frame || !packet) { av_frame_free(&frame); av_packet_free(&packet); avcodec_free_context(&codec_ctx); continue; } // Paketleri oku ve işleyerek bellek sızıntısını tetikle while (av_read_frame(fmt_ctx, packet) >= 0) { if (packet->stream_index == i) { int ret = avcodec_send_packet(codec_ctx, packet); if (ret < 0) { break; } ret = avcodec_receive_frame(codec_ctx, frame); if (ret == AVERROR(EAGAIN) || ret == AVERROR_EOF) { continue; } else if (ret < 0) { break; } // Bellek sızıntısına neden olacak işlemler for (int y = 0; y < frame->height; y++) { for (int x = 0; x < frame->width; x++) { int offset = y * frame->linesize[0] + x * 4; // Örnek olarak 4 byte per pixel (RGBA) if (offset < frame->linesize[0] * frame->height) { volatile uint8_t val = frame->data[0][offset]; (void)val; } } } av_frame_unref(frame); } av_packet_unref(packet); } av_frame_free(&frame); av_packet_free(&packet); avcodec_free_context(&codec_ctx); } // Bellek içeriğini sızdırma char *leaked_memory = (char *)malloc(100); if (leaked_memory) { snprintf(leaked_memory, 100, "Leaked memory content at %p: %s\n", fmt_ctx, (char *)fmt_ctx); printf("%s", leaked_memory); free(leaked_memory); } avformat_close_input(&fmt_ctx); avformat_free_context(fmt_ctx); // Bu satır bellek sızıntısını önlemek için eklenebilir } int main(int argc, char *argv[]) { if (argc != 2) { fprintf(stderr, "Usage: %s <input file>\n", argv[0]); return 1; } const char *filename = argv[1]; // Bellek ve bilgi sızıntısını tetiklemek için fonksiyonu çağır leak_memory_information(filename); return 0; } }}} {{{ Attempting to open file: test.mp4 Leaked memory content at 0x5ae0d4e34080: ��FH�| }}} {{{ ==3878783==ERROR: LeakSanitizer: detected memory leaks Direct leak of 48 byte(s) in 2 object(s) allocated from: #0 0x5e23f8521e07 in posix_memalign (/home/sazak/fuzz_project/ffmpeg-7.0/use_after_fuzz/memleak_test/memor_sanitize+0xa1e07) (BuildId: 07d05b4f8da1d513c1a0b32d7f7abdeaf6de5ecc) #1 0x73665d2419e4 in av_malloc (/lib/x86_64-linux- gnu/libavutil.so.56+0x419e4) (BuildId: abc6b699a880017e212d717fb86a1c6ea0e022e8) Indirect leak of 9467 byte(s) in 4 object(s) allocated from: #0 0x5e23f8521e07 in posix_memalign (/home/sazak/fuzz_project/ffmpeg-7.0/use_after_fuzz/memleak_test/memor_sanitize+0xa1e07) (BuildId: 07d05b4f8da1d513c1a0b32d7f7abdeaf6de5ecc) #1 0x73665d2419e4 in av_malloc (/lib/x86_64-linux- gnu/libavutil.so.56+0x419e4) (BuildId: abc6b699a880017e212d717fb86a1c6ea0e022e8) SUMMARY: AddressSanitizer: 9515 byte(s) leaked in 6 allocation(s). }}} Patches should be submitted to the ffmpeg-devel mailing list and not this bug tracker. -- Ticket URL: <https://trac.ffmpeg.org/ticket/11032> FFmpeg <https://ffmpeg.org> FFmpeg issue tracker

1 6

#11046(avfilter:new): aresample hangs indefinitely
by FFmpeg 05 Jun '24

05 Jun '24

#11046: aresample hangs indefinitely ----------------------------------+---------------------------------- Reporter: fabi123 | Type: defect Status: new | Priority: normal Component: avfilter | Version: 6.1.1 Keywords: | Blocked By: Blocking: | Reproduced by developer: 0 Analyzed by developer: 0 | ----------------------------------+---------------------------------- Summary of the bug: How to reproduce: {{{ % yt-dlp -f 251 https://www.youtube.com/watch\?v\=qMzlXzuUENY -o SATTA.webm ... % ./ffmpeg -y -i SATTA.webm -af "loudnorm=I=-16.0:TP=-1.0:LRA=20.0:measured_I=-19.18:measured_LRA=10.20:measured_TP=-2.89:measured_thresh=-30.09:offset=-1.81:linear=true,aresample=resampler=soxr:out_sample_rate=48000:precision=33,aformat=channel_layouts=stereo" -c:a libopus SATTA.opus ffmpeg version N-111340-ga196d02e86 Copyright (c) 2000-2023 the FFmpeg developers built with gcc 13 (Ubuntu 13.2.0-23ubuntu4) configuration: --enable-libsoxr --enable-libopus libavutil 58. 14.100 / 58. 14.100 libavcodec 60. 22.100 / 60. 22.100 libavformat 60. 10.100 / 60. 10.100 libavdevice 60. 2.101 / 60. 2.101 libavfilter 9. 8.102 / 9. 8.102 libswscale 7. 3.100 / 7. 3.100 libswresample 4. 11.100 / 4. 11.100 Input #0, matroska,webm, from 'SATTA.webm': Metadata: encoder : google/video-file Duration: 00:03:10.02, start: -0.007000, bitrate: 124 kb/s Stream #0:0(eng): Audio: opus, 48000 Hz, stereo, fltp (default) Stream mapping: Stream #0:0 -> #0:0 (opus (native) -> opus (libopus)) Press [q] to stop, [?] for help [libopus @ 0x5e2b180430c0] No bit rate set. Defaulting to 96000 bps. Output #0, opus, to '13 - SÁTTA.opus': Metadata: encoder : Lavf60.10.100 Stream #0:0(eng): Audio: opus, 48000 Hz, stereo, flt, 96 kb/s (default) Metadata: encoder : Lavc60.22.100 libopus [out#0/opus @ 0x5e2b18003d00] video:0kB audio:2065kB subtitle:0kB other streams:0kB global headers:0kB muxing overhead: 0.713519% size= 2080kB time=00:03:07.08 bitrate= 91.1kbits/s speed=26.6x Exiting normally, received signal 2. }}} I first encountered this issue on 6.1. By bisecting with 6.0 I came to the conclusion that it broke after commit a196d02e866909e0e632a3f4edfffa0eee82bc51. If I run this on master, it throws an assertion error `Assertion best_input >= 0 failed at fftools/ffmpeg_filter.c:2075.` -- Ticket URL: <https://trac.ffmpeg.org/ticket/11046> FFmpeg <https://ffmpeg.org> FFmpeg issue tracker

1 1