[FFmpeg-trac] #2723(avcodec:open): vc1 crash with low mem

FFmpeg trac at avcodec.org
Sat Jun 29 12:42:37 CEST 2013


#2723: vc1 crash with low mem
-------------------------------------+-------------------------------------
             Reporter:  ami_stuff    |                    Owner:
                 Type:  defect       |                   Status:  open
             Priority:  important    |                Component:  avcodec
              Version:  git-master   |               Resolution:
             Keywords:  crash        |               Blocked By:
  SIGSEGV vc1                        |  Reproduced by developer:  1
             Blocking:               |
Analyzed by developer:  0            |
-------------------------------------+-------------------------------------
Changes (by cehoyos):

 * status:  new => open
 * reproduced:  0 => 1
 * component:  undetermined => avcodec
 * priority:  normal => important
 * version:  unspecified => git-master
 * keywords:   => crash SIGSEGV vc1


Comment:

 Patch sent.
 {{{
 Core was generated by `ffmpeg -i wmv9adv.wmv -f null -'.
 Program terminated with signal 11, Segmentation fault.
 #0  vc1_unescape_buffer (dst=0x0, size=5953, src=0x3368200 "") at
 libavcodec/vc1.h:436
 436                 dst[dsize++] = *src;
 (gdb) bt
 #0  vc1_unescape_buffer (dst=0x0, size=5953, src=0x3368200 "") at
 libavcodec/vc1.h:436
 #1  vc1_decode_frame (avctx=0x334dac0, data=0x3348100,
 got_frame=0x7fff2118433c, avpkt=<optimiz
 #2  0x0000000000998a8b in avcodec_decode_video2 (avctx=0x334dac0,
 picture=picture at entry=0x33481
     at libavcodec/utils.c:1947
 #3  0x00000000004695c0 in decode_video (ist=ist at entry=0x3606aa0,
 pkt=pkt at entry=0x7fff211845a0,
 #4  0x000000000046c2b7 in output_packet (pkt=0x7fff21184540,
 ist=0x3606aa0) at ffmpeg.c:1852
 #5  process_input (file_index=<optimized out>) at ffmpeg.c:3064
 #6  0x000000000045af10 in transcode_step () at ffmpeg.c:3160
 #7  transcode () at ffmpeg.c:3212
 #8  main (argc=<optimized out>, argv=<optimized out>) at ffmpeg.c:3390
 (gdb) print dst
 $1 = (uint8_t *) 0x0
 }}}

-- 
Ticket URL: <https://ffmpeg.org/trac/ffmpeg/ticket/2723#comment:1>
FFmpeg <http://ffmpeg.org>
FFmpeg issue tracker


More information about the FFmpeg-trac mailing list