[FFmpeg-trac] #2951(undetermined:new): Crashes when post-processing streams decoded with "mpegvideo"

FFmpeg trac at avcodec.org
Mon Sep 9 23:56:08 CEST 2013


#2951: Crashes when post-processing streams decoded with "mpegvideo"
-------------------------------------+-------------------------------------
             Reporter:  BlackWarren  |                     Type:  defect
               Status:  new          |                 Priority:  normal
            Component:               |                  Version:
  undetermined                       |  unspecified
             Keywords:               |               Blocked By:
             Blocking:               |  Reproduced by developer:  0
Analyzed by developer:  0            |
-------------------------------------+-------------------------------------
 Summary of the bug:
 If one attempts to post-process a stream decoded with "mpegvideo.c", you
 get a hardware access violation because "ff_mpv_export_qp_table" sets
 "offset" to an odd value and subtracts it from "ref->data", causing that
 previously-aligned pointer to become odd.  That odd pointer is later used
 as the "QP_store" argument to "pp_postprocess", which casts it to a
 "uint32_t *" and attempts to dereference it.

 How to reproduce:
 Attempt to postprocess a stream decoded with "mpegvideo".

-- 
Ticket URL: <https://ffmpeg.org/trac/ffmpeg/ticket/2951>
FFmpeg <http://ffmpeg.org>
FFmpeg issue tracker


More information about the FFmpeg-trac mailing list