[FFmpeg-trac] #689(avcodec:open): invalid reads in iff.c (was: iff ilbm: possible invalid reads)

[FFmpeg]

#689: invalid reads in iff.c
------------------------------------+-----------------------------------
             Reporter:  ami_stuff   |                    Owner:
                 Type:  defect      |                   Status:  open
             Priority:  normal      |                Component:  avcodec
              Version:  git-master  |               Resolution:
             Keywords:  iff         |               Blocked By:
             Blocking:              |  Reproduced by developer:  1
Analyzed by developer:  0           |
------------------------------------+-----------------------------------
Changes (by cehoyos):

 * status:  new => open
 * reproduced:  0 => 1
 * component:  undetermined => avcodec
 * version:  unspecified => git-master
 * keywords:   => iff


Comment:

 {{{
 ==14526== Memcheck, a memory error detector
 ==14526== Copyright (C) 2002-2009, and GNU GPL'd, by Julian Seward et al.
 ==14526== Using Valgrind-3.5.0 and LibVEX; rerun with -h for copyright
 info
 ==14526== Command: ffmpeg_g -i A4000T_HAM8.IFF -f null -
 ==14526==
 ffmpeg version N-35183-gcb8db64, Copyright (c) 2000-2011 the FFmpeg
 developers
   built on Nov 26 2011 18:27:19 with gcc 4.5.3
   configuration: --cc='/usr/local/gcc-4.5.3/bin/gcc -m32'
   libavutil    51. 29. 1 / 51. 29. 1
   libavcodec   53. 37. 1 / 53. 37. 1
   libavformat  53. 21. 0 / 53. 21. 0
   libavdevice  53.  4. 0 / 53.  4. 0
   libavfilter   2. 50. 0 /  2. 50. 0
   libswscale    2.  1. 0 /  2.  1. 0
 [IFF @ 0x6cf0cc0] Estimating duration from bitrate, this may be inaccurate
 Input #0, IFF, from 'A4000T_HAM8.IFF':
   Metadata:
     comment         : $VER: Written by ASDG's Art Department Professional
 IFF3.0.1 (03.19.93)
   Duration: N/A, bitrate: N/A
     Stream #0:0: Video: iff_byterun1 (ILBM / 0x4D424C49), rgba, 628x512,
 SAR 1:1 DAR 157:128, 90k tbr, 90k tbn, 90k tbc
 [null @ 0x6d4fde0] Frame rate very high for a muxer not effciciently
 supporting it.
 Please consider specifiying a lower framerate, a different muxer or -vsync
 2
 [buffer @ 0x6d5b780] w:628 h:512 pixfmt:rgba tb:1/1000000 sar:1/1
 sws_param:
 Output #0, null, to 'pipe:':
   Metadata:
     comment         : $VER: Written by ASDG's Art Department Professional
 IFF3.0.1 (03.19.93)
     encoder         : Lavf53.21.0
     Stream #0:0: Video: rawvideo (RGBA / 0x41424752), rgba, 628x512 [SAR
 1:1 DAR 157:128], q=2-31, 200 kb/s, 90k tbn, 90k tbc
 Stream mapping:
   Stream #0:0 -> #0:0 (iff_byterun1 -> rawvideo)
 Press [q] to stop, [?] for help
 ==14526== Use of uninitialised value of size 4
 ==14526==    at 0x8369E51: decode_ham_plane32 (iff.c:378)
 ==14526==
 ==14526== Use of uninitialised value of size 4
 ==14526==    at 0x8369E5B: decode_ham_plane32 (iff.c:378)
 ==14526==
 ==14526== Use of uninitialised value of size 4
 ==14526==    at 0x8369E6D: decode_ham_plane32 (iff.c:379)
 ==14526==
 ==14526== Use of uninitialised value of size 4
 ==14526==    at 0x8369E77: decode_ham_plane32 (iff.c:379)
 ==14526==
 ==14526== Use of uninitialised value of size 4
 ==14526==    at 0x8369E0E: decode_ham_plane32 (iff.c:380)
 ==14526==
 ==14526== Use of uninitialised value of size 4
 ==14526==    at 0x8369E1D: decode_ham_plane32 (iff.c:376)
 ==14526==
 ==14526== Use of uninitialised value of size 4
 ==14526==    at 0x8369E23: decode_ham_plane32 (iff.c:376)
 ==14526==
 ==14526== Use of uninitialised value of size 4
 ==14526==    at 0x8369E35: decode_ham_plane32 (iff.c:377)
 ==14526==
 ==14526== Use of uninitialised value of size 4
 ==14526==    at 0x8369E3F: decode_ham_plane32 (iff.c:377)
 ==14526==
 frame=    1 fps=  0 q=0.0 Lsize=      -0kB time=00:00:00.00
 bitrate=-16000.0kbits/s
 video:1256kB audio:0kB global headers:0kB muxing overhead -100.001711%
 ==14526==
 ==14526== HEAP SUMMARY:
 ==14526==     in use at exit: 132 bytes in 1 blocks
 ==14526==   total heap usage: 144 allocs, 143 frees, 6,866,955 bytes
 allocated
 ==14526==
 ==14526== LEAK SUMMARY:
 ==14526==    definitely lost: 132 bytes in 1 blocks
 ==14526==    indirectly lost: 0 bytes in 0 blocks
 ==14526==      possibly lost: 0 bytes in 0 blocks
 ==14526==    still reachable: 0 bytes in 0 blocks
 ==14526==         suppressed: 0 bytes in 0 blocks
 ==14526== Rerun with --leak-check=full to see details of leaked memory
 ==14526==
 ==14526== For counts of detected and suppressed errors, rerun with: -v
 ==14526== Use --track-origins=yes to see where uninitialised values come
 from
 ==14526== ERROR SUMMARY: 6656 errors from 9 contexts (suppressed: 3 from
 3)
 }}}

-- 
Ticket URL: <https://ffmpeg.org/trac/ffmpeg/ticket/689#comment:1>
FFmpeg <http://ffmpeg.org>
FFmpeg issue tracker