July 2025 - FFmpeg-trac - lists.ffmpeg.org

#11676(ffmpeg:new): Broken video decoding on Android TV boxes with MediaCodec
by FFmpeg 25 Jul '25

25 Jul '25

#11676: Broken video decoding on Android TV boxes with MediaCodec --------------------------------+------------------------------------ Reporter: bl1nch | Type: defect Status: new | Priority: critical Component: ffmpeg | Version: 7.1 Keywords: | Blocked By: Blocking: | Reproduced by developer: 0 Analyzed by developer: 0 | --------------------------------+------------------------------------ Hello ffmpeg developers. I faced the problem of broken hardware video decoding on Android TV boxes with CPU Amlogic s905w2 and GPU Mali-G31 using MediaCodec. This problem occurs when using any player based on ffmpeg. I tested it with libmpv(https://github.com/mpv-player/mpv) and libmdk(https://github.com/wang-bin/mdk-sdk). I also tested with plugins for Flutter based on these video players (since I am a developer on the Flet(Flutter) framework). In some cases I get video with lags and in some strange green frames. I can give you a video sample with which you can reproduce the error. I also talked to the developers of the MPV player and they confirmed that this is a bug on the part of ffmpeg (https://github.com/mpv-android/mpv-android/issues/1088) I can also assume that this is really the case because I see exactly the same error in the logs and the same video output when using MDK. You can also see additional information here (https://github.com/media-kit /media-kit/issues/614), including an example of a green frame of the video output. I can't reproduce this error by calling ffmpeg from the command line because it happens on an Android TV box. The simplest thing I can offer from myself to reproduce this error is to build a Flutter application using any of the players (for example MDK, i.e. the fvp library (https://pub.dev/packages/fvp)) For this you can simply use the example code (https://pub.dev/packages/video_player#example) and substitute my video sample there. Please pay attention to this problem. I have not been able to figure this out for a year and now I have found out that this is a problem with ffmpeg. I am not the only one experiencing this problem and it makes it impossible to use any player built on ffmpeg on a huge number of Android TV boxes. -- Ticket URL: <https://trac.ffmpeg.org/ticket/11676> FFmpeg <https://ffmpeg.org> FFmpeg issue tracker

1 3

#11582(ffmpeg:new): Please add an option to make the new "elapsed" stat optional
by FFmpeg 25 Jul '25

25 Jul '25

#11582: Please add an option to make the new "elapsed" stat optional -----------------------------------+--------------------------------------- Reporter: Anton1699 | Type: enhancement Status: new | Priority: wish Component: ffmpeg | Version: unspecified Keywords: | Blocked By: Blocking: | Reproduced by developer: 0 Analyzed by developer: 0 | -----------------------------------+--------------------------------------- [https://github.com/FFmpeg/FFmpeg/commit/1a083a4d90bc4cf26f06d3f62d75da3d49a… This commit] added the elapsed time to the output of `-stats`. I would like to propose an option like `-stats_print_elapsed_time <bool>` (enabled by default) to disable this new behavior. I also don't think the elapsed time should be the first data point, it's not as important as the actual progress being made. -- Ticket URL: <https://trac.ffmpeg.org/ticket/11582> FFmpeg <https://ffmpeg.org> FFmpeg issue tracker

1 7

#11446(undetermined:new): Intermittent Vulkan encoding failures with 4060TI(driver 550), Ubuntu 24.04, Vulkan SDK 1.4.304.0
by FFmpeg 24 Jul '25

24 Jul '25

#11446: Intermittent Vulkan encoding failures with 4060TI(driver 550), Ubuntu 24.04, Vulkan SDK 1.4.304.0 -------------------------------------+------------------------------------- Reporter: Marth64 | Type: defect Status: new | Priority: normal Component: | Version: undetermined | unspecified Keywords: | Blocked By: Blocking: | Reproduced by developer: 0 Analyzed by developer: 0 | -------------------------------------+------------------------------------- Given the following environment - Install NVIDIA RTX 4060TI GPU - Install Xubuntu 24.04 - Install nvidia-driver-550 via Ubuntu Additional Drivers widget - Install Vulkan SDK 1.4.304.0 via apt (from LunarG) - Provide an MPEG-2 source (720x480, 29.9fps) or H264 source (1920x1080, 40fps) [this is only what I have tested with, but 3 diverse ones] - FFmpeg head as of 957eb2323a924aa0b148927889eae581185c367b Then run: {{{ ffmpeg -init_hw_device vulkan=vk:0 -y -i "$IN" -filter:v "format=nv12,hwupload" -c:v h264_vulkan sample_h264_vulkan.mkv }}} Observe that the operation will sometimes work but then intermittently fail with various error codes. I tried to av_err2str() the codes, but only their numeric value is still printed as a fallback since they are not known. The error codes appear to be random, here are a few: -1851303552 -1776594112 -1241304448 -1195352896 -1474912192 -1080228480 {{{ ffmpeg version N-118406-g957eb2323a Copyright (c) 2000-2025 the FFmpeg developers built with gcc 13 (Ubuntu 13.3.0-6ubuntu2~24.04) configuration: --enable-debug=3 --enable-ffplay --enable-gpl --enable- nonfree --enable-ffnvcodec --enable-vulkan --enable-libx264 --enable- libfdk_aac --enable-openssl --enable-version3 --enable-demuxer=dvdvideo --enable-libdvdread --enable-libdvdnav --samples=fate-suite/ libavutil 59. 56.100 / 59. 56.100 libavcodec 61. 32.100 / 61. 32.100 libavformat 61. 9.106 / 61. 9.106 libavdevice 61. 4.100 / 61. 4.100 libavfilter 10. 9.100 / 10. 9.100 libswscale 8. 13.100 / 8. 13.100 libswresample 5. 4.100 / 5. 4.100 libpostproc 58. 4.100 / 58. 4.100 Input #0, matroska,webm, from 'MyDVD.mkv': Metadata: ENCODER : Lavf61.9.106 Duration: 00:06:00.14, start: 0.000000, bitrate: 7790 kb/s Stream #0:0: Video: mpeg2video (Main), yuv420p(tv, smpte170m, progressive), 720x480 [SAR 32:27 DAR 16:9], 29.97 fps, 29.97 tbr, 1k tbn Metadata: DURATION : 00:06:00.143000000 Side data: cpb: bitrate max/min/avg: 9800000/0/0 buffer size: 1835008 vbv_delay: N/A Stream #0:1(eng): Audio: ac3, 48000 Hz, 5.1(side), fltp, 448 kb/s Metadata: DURATION : 00:06:00.006000000 Stream mapping: Stream #0:0 -> #0:0 (mpeg2video (native) -> h264 (h264_vulkan)) Stream #0:1 -> #0:1 (ac3 (native) -> ac3 (native)) Press [q] to stop, [?] for help [h264_vulkan @ 0x64d194ac7540] No rate control settings specified, using fixed QP = 18 Output #0, matroska, to 'sample_h264_vulkan.mkv': Metadata: encoder : Lavf61.9.106 Stream #0:0: Video: h264 (High) (H264 / 0x34363248), vulkan(tv, smpte170m, progressive), 720x480 [SAR 32:27 DAR 16:9], q=2-31, 29.97 fps, 1k tbn Metadata: encoder : Lavc61.32.100 h264_vulkan DURATION : 00:06:00.143000000 Stream #0:1(eng): Audio: ac3 ([0] [0][0] / 0x2000), 48000 Hz, 5.1(side), fltp, 448 kb/s Metadata: encoder : Lavc61.32.100 ac3 DURATION : 00:06:00.006000000 [h264_vulkan @ 0x64d194ac7540] Encode failed: -1851303552. [vost#0:0/h264_vulkan @ 0x64d191a6a380] [enc:h264_vulkan @ 0x64d1918e0e00] Error submitting video frame to the encoder [vost#0:0/h264_vulkan @ 0x64d191a6a380] [enc:h264_vulkan @ 0x64d1918e0e00] Error encoding a frame: Error number -1851303552 occurred [vost#0:0/h264_vulkan @ 0x64d191a6a380] Task finished with error code: -1851303552 (Error number -1851303552 occurred) [vost#0:0/h264_vulkan @ 0x64d191a6a380] Terminating thread with return code -1851303552 (Error number -1851303552 occurred) [out#0/matroska @ 0x64d191a68840] video:0KiB audio:51KiB subtitle:0KiB other streams:0KiB global headers:0KiB muxing overhead: 1.939655% frame= 0 fps=0.0 q=0.0 Lsize= 52KiB time=N/A bitrate=N/A speed=N/A Conversion failed! }}} -- Ticket URL: <https://trac.ffmpeg.org/ticket/11446> FFmpeg <https://ffmpeg.org> FFmpeg issue tracker

1 5

#11682(avcodec:new): The vmix (VMX1) decoder does not decode interlaced files
by FFmpeg 24 Jul '25

24 Jul '25

#11682: The vmix (VMX1) decoder does not decode interlaced files ----------------------------------+-------------------------------------- Reporter: ianshade | Type: defect Status: new | Priority: normal Component: avcodec | Version: git-master Keywords: vmixdec | Blocked By: Blocking: | Reproduced by developer: 0 Analyzed by developer: 0 | ----------------------------------+-------------------------------------- Summary of the bug: When trying to use FFmpeg to transcode a 50i AVI file recorded with vMix's own codec, also known as VMX1, the following error occurs: {{{ Error submitting packet to decoder: Invalid data found when processing input }}} I have tried numerous 1080i50 vMix AVI files, and the results were always the same. Those files are decoded fine by vMix itself. They can also be decoded in other software using a DirectShow filter graph. (Both on a machine where vMix and its codec are installed) A similar file, but recorded in 1080p25 is decoded correctly by FFmpeg - that's why I'm assuming it has something to do with interlacing. How to reproduce: {{{ .\ffmpeg.exe -i .\capture_50i.avi output.mov }}} Version: {{{ ffmpeg version 2025-07-21-git-8cdb47e47a-full_build-www.gyan.dev }}} Files attached (via google drive): 1. capture_50i.avi - sample 50i file that fails to decode in FFmpeg, but decodes fine in vMix 2. still.png - still frame from the file in question, for reference 3. capture_25p.avi - sample 25p file that decodes correctly in FFmpeg, for reference 4. ffmpeg-20250724-121042.log - a log file produced with -report https://drive.google.com/drive/folders/1CLbc7th81_v7nd1wzGsjSlrLedJA1yVg -- Ticket URL: <https://trac.ffmpeg.org/ticket/11682> FFmpeg <https://ffmpeg.org> FFmpeg issue tracker

1 0

#11681(undetermined:new): Segmentation fault in binary seek function when processing malformed MPEG files due to null pointer dereference in index_entries array access.
by FFmpeg 24 Jul '25

24 Jul '25

#11681: Segmentation fault in binary seek function when processing malformed MPEG files due to null pointer dereference in index_entries array access. -------------------------------------+------------------------------------- Reporter: xdc | Type: defect Status: new | Priority: normal Component: | Version: undetermined | unspecified Keywords: libav | Blocked By: Blocking: | Reproduced by developer: 0 Analyzed by developer: 0 | -------------------------------------+------------------------------------- ## How to reproduce: ``` % avconv -ss 0.1 -i /workspace/POC/POC_libav_avconv_segfault_mpeg_seek -f null - avconv version 13_dev0, Copyright (c) 2000-2018 the Libav developers built on Jul 19 2025 14:57:50 with Ubuntu clang version 16.0.6 (++20231112100510+7cbf1a259152-1~exp1~20231112100554.106) configuration: --cc=/Fuzzer/OPA++/afl-clang-lto --extra-cflags= --prefix=/workspace/benchmark/program/libav-c464278-Apr16-2019/install --disable-shared --enable-static --disable-x86asm --disable-inline-asm libavutil 56. 8. 0 / 56. 8. 0 libavcodec 58. 12. 1 / 58. 12. 1 libavformat 58. 2. 0 / 58. 2. 0 libavdevice 57. 0. 2 / 57. 0. 2 libavfilter 7. 1. 0 / 7. 1. 0 libavresample 4. 0. 0 / 4. 0. 0 libswscale 5. 0. 1 / 5. 0. 1 [mpeg @ 0x555557165800] Format detected only with low score of 25, misdetection possible! [mpeg @ 0x555557165800] Could not find codec parameters (Video: [0][0][0][0] / 0x0000 none) [mpeg @ 0x555557165800] start time is not set in estimate_timings_from_pts Segmentation fault (core dumped) ``` ## GDB Analysis: ``` Program received signal SIGSEGV, Segmentation fault. 0x0000555555bfd3aa in ff_seek_frame_binary (s=0x555557165800, stream_index=0, target_ts=9000, flags=1) at libavformat/utils.c:1289 1289 e = &st->index_entries[index]; #0 0x0000555555bfd3aa in ff_seek_frame_binary (s=0x555557165800, stream_index=0, target_ts=9000, flags=1) at libavformat/utils.c:1289 #1 0x0000555555bfea54 in seek_frame_internal (stream_index=<optimized out>, timestamp=9000, s=<optimized out>, flags=<optimized out>) at libavformat/utils.c:1556 #2 av_seek_frame (s=0x555557165800, stream_index=<optimized out>, timestamp=<optimized out>, flags=1) at libavformat/utils.c:1567 #3 0x00005555558705b6 in open_input_file (o=0x7fffffffd380, filename=0x7fffffffe071 "/workspace/POC/POC_libav_avconv_segfault_mpeg_seek") at avtools/avconv_opt.c:835 #4 0x0000555555873a5b in open_files (l=0x555557153098, inout=0x5555555d4d9a "input", open_file=0x55555586f940 <open_input_file>) at avtools/avconv_opt.c:2467 #5 0x0000555555893816 in avconv_parse_options (argc=<optimized out>, argv=<optimized out>) at avtools/avconv_opt.c:2504 #6 main (argc=<optimized out>, argv=<optimized out>) at avtools/avconv.c:2953 Disassembly around crash point: 0x0000555555bfd38a <ff_seek_frame_binary+794>: mov $0x11d70,%edx 0x0000555555bfd38f <ff_seek_frame_binary+799>: sub %r8d,%edx 0x0000555555bfd392 <ff_seek_frame_binary+802>: mov (%r11),%rsi 0x0000555555bfd395 <ff_seek_frame_binary+805>: movzbl (%rsi,%rdx,1),%r8d 0x0000555555bfd39a <ff_seek_frame_binary+810>: add $0x1,%r8b 0x0000555555bfd39e <ff_seek_frame_binary+814>: adc $0x0,%r8b 0x0000555555bfd3a2 <ff_seek_frame_binary+818>: mov %r8b,(%rsi,%rdx,1) 0x0000555555bfd3a6 <ff_seek_frame_binary+822>: lea (%rdi,%rdi,2),%rdx => 0x0000555555bfd3aa <ff_seek_frame_binary+826>: mov (%rax,%rdx,8),%rcx <-- CRASH HERE 0x0000555555bfd3ae <ff_seek_frame_binary+830>: mov 0x8(%rax,%rdx,8),%r8 ``` ## Root Cause: The crash occurs in `ff_seek_frame_binary()` function at `libavformat/utils.c:1289` when attempting to access: ```c e = &st->index_entries[index]; ``` The issue is that: 1. The file is detected as MPEG format with low confidence score (25) 2. Codec parameters cannot be determined properly 3. The stream's `index_entries` array is NULL 4. The seek operation tries to access `index_entries[index]` without null checking The malformed file causes the MPEG demuxer to enter an inconsistent state where seeking is attempted on a stream without proper index initialization. ## POC File: The malformed file is available at: `/workspace/POC/POC_libav_avconv_segfault_mpeg_seek`[https://drive.google.com/file/d/1CX1GZUyJVzyDDGLVa8FG58XUt_30kHKT/view?usp=sharing] -- Ticket URL: <https://trac.ffmpeg.org/ticket/11681> FFmpeg <https://ffmpeg.org> FFmpeg issue tracker

1 2

#11680(tools:new): Double-free memory corruption in DSS (Digital Speech Standard) format demuxer during cleanup phase, leading to program abort.
by FFmpeg 24 Jul '25

24 Jul '25

#11680: Double-free memory corruption in DSS (Digital Speech Standard) format demuxer during cleanup phase, leading to program abort. -------------------------------+--------------------------------------- Reporter: xdc | Type: defect Status: new | Priority: normal Component: tools | Version: unspecified Keywords: libav | Blocked By: Blocking: | Reproduced by developer: 0 Analyzed by developer: 0 | -------------------------------+--------------------------------------- ## How to reproduce: ``` % avconv -ss 0.1 -i /workspace/POC/POC_libav_avconv_abort_dss_doublefree -f null - avconv version 13_dev0, Copyright (c) 2000-2018 the Libav developers built on Jul 19 2025 14:57:50 with Ubuntu clang version 16.0.6 (++20231112100510+7cbf1a259152-1~exp1~20231112100554.106) configuration: --cc=/Fuzzer/OPA++/afl-clang-lto --extra-cflags= --prefix=/workspace/benchmark/program/libav-c464278-Apr16-2019/install --disable-shared --enable-static --disable-x86asm --disable-inline-asm libavutil 56. 8. 0 / 56. 8. 0 libavcodec 58. 12. 1 / 58. 12. 1 libavformat 58. 2. 0 / 58. 2. 0 libavdevice 57. 0. 2 / 57. 0. 2 libavfilter 7. 1. 0 / 7. 1. 0 libavresample 4. 0. 0 / 4. 0. 0 libswscale 5. 0. 1 / 5. 0. 1 [dss @ 0x555557165800] Estimating duration from bitrate, this may be inaccurate /workspace/POC/POC_libav_avconv_abort_dss_doublefree: could not seek to position 0.100 Input #0, dss, from '/workspace/POC/POC_libav_avconv_abort_dss_doublefree': Metadata: author : �0 date : 2000-32-00T32768:-341855643:-352951808 comment : Duration: N/A, start: 0.000000, bitrate: N/A Stream #0:0: Audio: dss_sp 11025 Hz, mono, s16 Stream mapping: Stream #0:0 -> #0:0 (dss_sp (native) -> pcm_s16le (native)) Press ctrl-c to stop encoding Nothing was written into output file 0 (pipe:), because at least one of its streams received no packets. size= 0kB time=10000000000.00 bitrate= 0.0kbits/s video:0kB audio:0kB other streams:0kB global headers:0kB muxing overhead: unknown free(): invalid pointer Aborted (core dumped) ``` ## GDB Analysis: ``` Program received signal SIGABRT, Aborted. __pthread_kill_implementation (no_tid=0, signo=6, threadid=140737349322624) at ./nptl/pthread_kill.c:44 #0 __pthread_kill_implementation (no_tid=0, signo=6, threadid=140737349322624) at ./nptl/pthread_kill.c:44 #1 __pthread_kill_internal (signo=6, threadid=140737349322624) at ./nptl/pthread_kill.c:78 #2 __GI___pthread_kill (threadid=140737349322624, signo=signo@entry=6) at ./nptl/pthread_kill.c:89 #3 0x00007ffff7baf476 in __GI_raise (sig=sig@entry=6) at ../sysdeps/posix/raise.c:26 #4 0x00007ffff7b957f3 in __GI_abort () at ./stdlib/abort.c:79 #5 0x00007ffff7bf6677 in __libc_message (action=action@entry=do_abort, fmt=fmt@entry=0x7ffff7d48b77 "%s\n") at ../sysdeps/posix/libc_fatal.c:156 #6 0x00007ffff7c0dcfc in malloc_printerr (str=str@entry=0x7ffff7d46744 "free(): invalid pointer") at ./malloc/malloc.c:5664 #7 0x00007ffff7c0fa44 in _int_free (av=<optimized out>, p=<optimized out>, have_lock=0) at ./malloc/malloc.c:4439 #8 0x00007ffff7c12453 in __GI___libc_free (mem=<optimized out>) at ./malloc/malloc.c:3391 #9 0x000055555596822b in av_free (ptr=0x3dc3de) at libavutil/mem.c:189 #10 dss_read_close (s=<optimized out>) at libavformat/dss.c:328 #11 0x000055555589cb30 in avformat_close_input (ps=<optimized out>) at libavformat/utils.c:2751 #12 avconv_cleanup (ret=<optimized out>) at avtools/avconv.c:217 #13 0x0000555555887543 in exit_program (ret=0) at avtools/cmdutils.c:98 #14 0x0000555555896962 in main (argc=<optimized out>, argv=<optimized out>) at avtools/avconv.c:2983 ``` ## Root Cause: The crash occurs in the DSS demuxer's cleanup function `dss_read_close()` at line 328 in `libavformat/dss.c`. The function attempts to free a pointer (0x3dc3de) that has either: 1. Already been freed (double-free) 2. Was never properly allocated 3. Has been corrupted The malformed DSS file triggers incorrect memory management in the DSS format handler, leading to heap corruption. ## POC File: The malformed DSS file is available at: `/workspace/POC/POC_libav_avconv_abort_dss_doublefree`[https://drive.google.com/file/d/1I4VVXGys156UdeSTgya_GGxLZxwuxUPw/view?usp=sharing] -- Ticket URL: <https://trac.ffmpeg.org/ticket/11680> FFmpeg <https://ffmpeg.org> FFmpeg issue tracker

1 2

#11679(tools:new): Segmentation fault when processing malformed AVI files with CFHD codec due to null function pointer call in buffer management.
by FFmpeg 24 Jul '25

24 Jul '25

#11679: Segmentation fault when processing malformed AVI files with CFHD codec due to null function pointer call in buffer management. -------------------------------+--------------------------------------- Reporter: xdc | Type: defect Status: new | Priority: normal Component: tools | Version: unspecified Keywords: libav | Blocked By: Blocking: | Reproduced by developer: 0 Analyzed by developer: 0 | -------------------------------+--------------------------------------- Summary of the bug: ## How to reproduce: ``` % avconv -i /workspace/POC/POC_libav_avconv_segfault_avi_cfhd -f null - avconv version 13_dev0, Copyright (c) 2000-2018 the Libav developers built on Jul 19 2025 14:57:50 with Ubuntu clang version 16.0.6 (++20231112100510+7cbf1a259152-1~exp1~20231112100554.106) configuration: --cc=/Fuzzer/OPA++/afl-clang-lto --extra-cflags= --prefix=/workspace/benchmark/program/libav-c464278-Apr16-2019/install --disable-shared --enable-static --disable-x86asm --disable-inline-asm libavutil 56. 8. 0 / 56. 8. 0 libavcodec 58. 12. 1 / 58. 12. 1 libavformat 58. 2. 0 / 58. 2. 0 libavdevice 57. 0. 2 / 57. 0. 2 libavfilter 7. 1. 0 / 7. 1. 0 libavresample 4. 0. 0 / 4. 0. 0 libswscale 5. 0. 1 / 5. 0. 1 Input #0, avi, from '/workspace/POC/POC_libav_avconv_segfault_avi_cfhd': Metadata: encoder : Lavf57.7.1 Duration: 00:00:00.33, start: 0.000000, bitrate: 13103 kb/s Stream #0:0: Video: cfhd [CFHD / 0x44484643] yuv422p10le, 720x480 29.97 fps, 29.97 tbn Stream mapping: Stream #0:0 -> #0:0 (cfhd (native) -> wrapped_avframe (native)) Press ctrl-c to stop encoding Output #0, null, to 'pipe:': Metadata: encoder : Lavf58.2.0 Stream #0:0: Video: wrapped_avframe yuv422p10le, 720x480, q=2-31, 200 kb/s 29.97 tbn Metadata: encoder : Lavc58.12.1 wrapped_avframe Segmentation fault (core dumped) ``` ## GDB Analysis: ``` Program received signal SIGSEGV, Segmentation fault. 0x0000000000000000 in ?? () #0 0x0000000000000000 in ?? () #1 0x00005555568275bf in av_buffer_unref (buf=0x5555573257c8) at libavutil/buffer.c:117 #2 av_frame_unref (frame=0x5555573256a0) at libavutil/frame.c:302 #3 0x000055555675313e in av_frame_free (frame=<optimized out>) at libavutil/frame.c:86 #4 wrapped_avframe_release_buffer (unused=<optimized out>, data=0x0) at libavcodec/wrapped_avframe.c:39 #5 0x00005555558aa68d in av_buffer_unref (buf=0x7fffffffd160) at libavutil/buffer.c:117 #6 av_packet_unref (pkt=0x7fffffffd160) at libavcodec/avpacket.c:351 #7 av_interleaved_write_frame (s=0x555557168480, pkt=0x0) at libavformat/mux.c:686 #8 write_packet (of=<optimized out>, pkt=<optimized out>, ost=<optimized out>) at avtools/avconv.c:358 #9 0x00005555558a6b8d in do_video_out (of=0x55555716d880, ost=0x555557168de0, in_picture=<optimized out>, frame_size=<optimized out>) at avtools/avconv.c:607 #10 poll_filter (ost=0x555557168de0) at avtools/avconv.c:729 #11 poll_filters () at avtools/avconv.c:803 #12 0x0000555555898d16 in transcode () at avtools/avconv.c:2806 #13 main (argc=<optimized out>, argv=<optimized out>) at avtools/avconv.c:2975 ``` ## Root Cause: The crash occurs when a buffer's release function pointer is NULL (0x0000000000000000) but still gets called during cleanup. This happens in the wrapped_avframe codec when processing malformed AVI files with CFHD video codec. The buffer management system fails to properly validate function pointers before calling them. ## POC File: The malformed AVI file is available at: `[/workspace/POC/POC_libav_avconv_segfault_avi_cfhd][https://drive.google.com/file/d/1OwDNHuTbZFNTDX9afmvez_old3oRC7dM/view?usp=sharing]` -- Ticket URL: <https://trac.ffmpeg.org/ticket/11679> FFmpeg <https://ffmpeg.org> FFmpeg issue tracker

1 2

#11678(undetermined:new): "dvdsub" should be "dvd_subtitle"
by FFmpeg 23 Jul '25

23 Jul '25

#11678: "dvdsub" should be "dvd_subtitle" -------------------------------------+------------------------------------- Reporter: markfilipak | Type: defect Status: new | Priority: normal Component: | Version: undetermined | unspecified Keywords: | Blocked By: Blocking: | Reproduced by developer: 0 Analyzed by developer: 0 | -------------------------------------+------------------------------------- At https://ffmpeg.org/ffplay-all.html#dvdsub, "10.4 dvdsub "This codec ..." That is incorrect. The name of the codec is "dvd_subtitle". -- Ticket URL: <https://trac.ffmpeg.org/ticket/11678> FFmpeg <https://ffmpeg.org> FFmpeg issue tracker

1 3

#11675(undetermined:new): ffplay causes amdgpu driver crash
by FFmpeg 23 Jul '25

23 Jul '25

#11675: ffplay causes amdgpu driver crash -------------------------------------+------------------------------------- Reporter: Maxim | Type: defect Cournoyer | Status: new | Priority: normal Component: | Version: undetermined | unspecified Keywords: crash | Blocked By: Blocking: | Reproduced by developer: 0 Analyzed by developer: 0 | -------------------------------------+------------------------------------- Summary of the bug: ffplay causes amdgpu driver crash How to reproduce: {{{ % ffplay -hwaccel vaapi test.mp4 ffmpeg version 7.1.1 built with GNU Guix (GNU/Linux) }}} Full context available on the Mesa tracker: https://gitlab.freedesktop.org/mesa/mesa/-/issues/7026#note_3020001 The Guix package definition for the build looks like: {{{ (define-public ffmpeg-7 (package (name "ffmpeg") (version "7.0.2") (source (origin (method url-fetch) (uri (string-append "https://ffmpeg.org/releases/ffmpeg-" version ".tar.xz")) (sha256 (base32 "1c837agaw8ljhjx6ndp2w7hffi2mkb22vnmb8v0fbfqdbqwq8fbk")))) (outputs '("out" "debug")) (build-system gnu-build-system) (inputs (append (if (supported-package? rav1e) (list rav1e) '()) (list dav1d fontconfig freetype frei0r-plugins gnutls opus ladspa lame libaom libass libbluray libcaca libcdio-paranoia libdrm libtheora libva libvdpau libvorbis libvpx libwebp libx11 libx264 mesa openal pulseaudio shaderc sdl2 soxr speex spirv-tools srt svt-av1 twolame vidstab vulkan-loader x265 xvid zlib))) (native-inputs (list bc perl pkg-config texinfo speex vulkan-headers yasm)) (arguments (list #:test-target "fate" #:configure-flags ;; possible additional inputs: ;; --enable-avisynth enable reading of AviSynth script ;; files [no] ;; --enable-libaacplus enable AAC+ encoding via libaacplus [no] ;; --enable-libcelt enable CELT decoding via libcelt [no] ;; --enable-libdc1394 enable IIDC-1394 grabbing using libdc1394 ;; and libraw1394 [no] ;; --enable-libfdk-aac enable AAC de/encoding via libfdk-aac [no] ;; --enable-libflite enable flite (voice synthesis) support via ;; libflite [no] ;; --enable-libgme enable Game Music Emu via libgme [no] ;; --enable-libgsm enable GSM de/encoding via libgsm [no] ;; --enable-libiec61883 enable iec61883 via libiec61883 [no] ;; --enable-libilbc enable iLBC de/encoding via libilbc [no] ;; --enable-libmodplug enable ModPlug via libmodplug [no] ;; --enable-libnut enable NUT (de)muxing via libnut, ;; native (de)muxer exists [no] ;; --enable-libopencore-amrnb enable AMR-NB de/encoding via ;; libopencore-amrnb [no] ;; --enable-libopencore-amrwb enable AMR-WB decoding via ;; libopencore-amrwb [no] ;; --enable-libopencv enable video filtering via libopencv [no] ;; --enable-libopenjpeg enable JPEG 2000 de/encoding via ;; OpenJPEG [no] ;; --enable-librtmp enable RTMP[E] support via librtmp [no] ;; --enable-libschroedinger enable Dirac de/encoding via ;; libschroedinger [no] ;; --enable-libshine enable fixed-point MP3 encoding via ;; libshine [no] ;; --enable-libssh enable SFTP protocol via libssh [no] ;; (libssh2 does not work) ;; --enable-libstagefright-h264 enable H.264 decoding via ;; libstagefright [no] ;; --enable-libutvideo enable Ut Video encoding and decoding via ;; libutvideo [no] ;; --enable-libv4l2 enable libv4l2/v4l-utils [no] ;; --enable-libvo-aacenc enable AAC encoding via libvo-aacenc [no] ;; --enable-libvo-amrwbenc enable AMR-WB encoding via ;; libvo-amrwbenc [no] ;; --enable-libwavpack enable wavpack encoding via libwavpack [no] ;; --enable-libxavs enable AVS encoding via xavs [no] ;; --enable-libzmq enable message passing via libzmq [no] ;; --enable-libzvbi enable teletext support via libzvbi [no] ;; --enable-opencl enable OpenCL code #~(list #$@(if (target-powerpc?) ;; These tests fail on powerpc64-le (see: ;; https://trac.ffmpeg.org/ticket/9604) '("--ignore-tests=checkasm-sw_scale,filter- scale2ref_keep_aspect") '()) "--enable-gpl" ;enable optional gpl licensed parts "--enable-shared" "--enable-frei0r" "--enable-fontconfig" "--enable-gnutls" "--enable-ladspa" "--enable-libaom" "--enable-libass" "--enable-libbluray" "--enable-libcaca" "--enable-libcdio" "--enable-libdav1d" "--enable-libfreetype" "--enable-libmp3lame" "--enable-libopus" "--enable-libpulse" #$@(if (this-package-input "rav1e") '("--enable-librav1e") '()) "--enable-libshaderc" "--enable-libsoxr" "--enable-libspeex" "--enable-libsrt" "--enable-libsvtav1" "--enable-libtheora" "--enable-libtwolame" "--enable-libvidstab" "--enable-libvorbis" "--enable-libvpx" "--enable-libwebp" "--enable-libxvid" "--enable-libx264" "--enable-libx265" "--enable-openal" "--enable-opengl" "--enable-libdrm" "--enable-vaapi" "--enable-vulkan" "--enable-runtime-cpudetect" ;; The HTML pages take 7.2 MiB "--disable-htmlpages" ;; The static libraries are 23 MiB "--disable-static" "--disable-stripping" #$@(if (target-riscv64?) '("--extra-cflags=-fPIC") '()) ;; Runtime cpu detection is not implemented on ;; MIPS, so we disable some features. "--disable-mips32r2" "--disable-mipsdsp" "--disable-mipsdspr2" "--disable-mipsfpu") #:phases #~(modify-phases %standard-phases #$@(if (target-x86-32?) #~((add-before 'configure 'bypass-openal-check ;; configure fails linking to openal when using binutils ;; >= 2.38 due to openal's usage of protected visibility ;; for its dynamic symbols. Bypass this configure time ;; check for now. See: ;; https://lists.gnu.org/archive/html/guix- devel/2024-08/msg00159.html (lambda _ (substitute* "configure" ;; This string only matches on ffmpeg v6 and above. ;; Replace it with the one defined at ffmpeg-5 which ;; matches on all ffmpeg versions. See #71917. (("alGetError \\|\\|") "alGetError \|\| true \|\|"))))) #~()) (replace 'configure ;; configure does not work followed by "SHELL=..." and ;; "CONFIG_SHELL=..."; set environment variables instead (lambda* (#:key outputs configure-flags #:allow-other-keys) (let ((out (assoc-ref outputs "out"))) (substitute* "configure" (("#! /bin/sh") (string-append "#!" (which "sh")))) (setenv "SHELL" (which "bash")) (setenv "CONFIG_SHELL" (which "bash")) (apply invoke "./configure" (string-append "--prefix=" out) ;; Add $libdir to the RUNPATH of all the binaries. (string-append "--extra-ldflags=-Wl,-rpath=" out "/lib") configure-flags)))) (add-before 'check 'set-ld-library-path (lambda _ ;; Allow $(top_builddir)/ffmpeg to find its dependencies when ;; running tests. (let* ((dso (find-files "." "\\.so$")) (path (string-join (map dirname dso) ":"))) (format #t "setting LD_LIBRARY_PATH to ~s~%" path) (setenv "LD_LIBRARY_PATH" path))))))) (home-page "https://www.ffmpeg.org/") (synopsis "Audio and video framework") (description "FFmpeg is a complete, cross-platform solution to record, convert and stream audio and video. It includes the libavcodec audio/video codec library.") (license license:gpl2+))) }}} -- Ticket URL: <https://trac.ffmpeg.org/ticket/11675> FFmpeg <https://ffmpeg.org> FFmpeg issue tracker

1 5

#11059(undetermined:new): FFmpeg cannot load files with non-latin characters by DirectShowSource2 of AviSynth+
by FFmpeg 23 Jul '25

23 Jul '25

#11059: FFmpeg cannot load files with non-latin characters by DirectShowSource2 of AviSynth+ -------------------------------------+------------------------------------- Reporter: syehoonkim | Type: defect Status: new | Priority: normal Component: | Version: undetermined | unspecified Keywords: | Blocked By: Blocking: | Reproduced by developer: 0 Analyzed by developer: 0 | -------------------------------------+------------------------------------- Summary of the bug: How to reproduce: {{{ % ffmpeg -i input.avs ... output ffmpeg version N-115575-g4e120fbbbd-ffmpeg-windows-build-helpers Copyright (c) 2000-2024 the FFmpeg developers built with gcc 10.2.0 (GCC) configuration: --pkg-config=pkg-config --pkg-config-flags=--static --extra-version=ffmpeg-windows-build-helpers --enable-version3 --disable- debug --disable-w32threads --arch=x86_64 --target-os=mingw32 --cross- prefix=/home/syehoon/repos/ffmpeg-windows-build- helpers/sandbox/cross_compilers/mingw-w64-x86_64/bin/x86_64-w64-mingw32- --enable-libcaca --enable-gray --enable-libtesseract --enable-fontconfig --enable-gmp --enable-libass --enable-libbluray --enable-libbs2b --enable- libflite --enable-libfreetype --enable-libfribidi --enable-libgme --enable-libgsm --enable-libilbc --enable-libmodplug --enable-libmp3lame --enable-libopencore-amrnb --enable-libopencore-amrwb --enable-libopus --enable-libsnappy --enable-libsoxr --enable-libspeex --enable-libtheora --enable-libtwolame --enable-libvo-amrwbenc --enable-libvorbis --enable- libwebp --enable-libzimg --enable-libzvbi --enable-libmysofa --enable- libopenjpeg --enable-libopenh264 --enable-libvmaf --enable-libsrt --enable-libxml2 --enable-opengl --enable-libdav1d --enable-gnutls --enable-libsvtav1 --enable-libvpx --enable-libaom --enable-nvenc --enable-nvdec --extra-libs=-lz --extra-libs=-lpng --extra-libs=-lm --extra-libs=-lfreetype --extra-libs=-lshlwapi --extra-libs=-lmpg123 --extra-libs=-lpthread --extra-cflags=-DLIBTWOLAME_STATIC --extra- cflags=-DMODPLUG_STATIC --extra-cflags=-DCACA_STATIC --enable-amf --enable-libmfx --enable-libaribcaption --enable-gpl --enable-frei0r --enable-librubberband --enable-libvidstab --enable-libx264 --enable- libx265 --enable-avisynth --enable-libaribb24 --enable-libxvid --enable- libdavs2 --enable-libxavs2 --enable-libxavs --extra- cflags='-mtune=generic' --extra-cflags=-O3 --enable-static --disable- shared --prefix=/home/syehoon/repos/ffmpeg-windows-build- helpers/sandbox/cross_compilers/mingw-w64-x86_64/x86_64-w64-mingw32 --enable-nonfree --enable-libfdk-aac --enable-decklink libavutil 59. 21.100 / 59. 21.100 libavcodec 61. 6.100 / 61. 6.100 libavformat 61. 3.104 / 61. 3.104 libavdevice 61. 2.100 / 61. 2.100 libavfilter 10. 2.102 / 10. 2.102 libswscale 8. 2.100 / 8. 2.100 libswresample 5. 2.100 / 5. 2.100 libpostproc 58. 2.100 / 58. 2.100 [avisynth @ 000002488fa24ac0] DSS2: Can't open "D:/sample_video/진신우부장 님/DJI_0077.MOV" Add Source: (80004005) �d�� 7�Դϴ� (frameserver.avs, line 2) [in#0 @ 000002488fa246c0] Error opening input: Unknown error occurred Error opening input file frameserver.avs. Error opening input files: Unknown error occurred }}} The input.avs loads the file by the command {{{ DSS2("D:/sample_video/진신우부장님/DJI_0077.MOV") }}} If I move the file to the directory which doesn't include non-latin characters, FFmpeg works fine. With DirectShowSource() function, there is no problem. I suspect that FFmpeg has some problem on dealing with unicode in processing AviSynth+'s DSS2() function. -- Ticket URL: <https://trac.ffmpeg.org/ticket/11059> FFmpeg <https://ffmpeg.org> FFmpeg issue tracker

1 1