[FFmpeg-trac] #3713(avformat:new): crashes on bogus rtp stream

FFmpeg trac at avcodec.org
Wed Jun 11 12:20:19 CEST 2014


#3713: crashes on bogus rtp stream
-------------------------------------+-------------------------------------
             Reporter:  lavv17       |                    Owner:
                 Type:  defect       |                   Status:  new
             Priority:  important    |                Component:  avformat
              Version:  git-master   |               Resolution:
             Keywords:  crash        |               Blocked By:
  SIGSEGV                            |  Reproduced by developer:  0
             Blocking:               |
Analyzed by developer:  0            |
-------------------------------------+-------------------------------------

Comment (by lavv17):

 Segfault happens in various ways, here is a sample:
 {{{
 # /usr/local/bin/ffmpeg -ss 1 -i rtp://@224.0.94.27:1234 -t 30 -f avi -c
 copy file.avi
 ffmpeg version N-63863-g2351ea8 Copyright (c) 2000-2014 the FFmpeg
 developers
   built on Jun 10 2014 11:41:03 with gcc 4.8.2 (GCC) 20131212 (Red Hat
 4.8.2-7)
   configuration:
   libavutil      52. 89.100 / 52. 89.100
   libavcodec     55. 66.100 / 55. 66.100
   libavformat    55. 42.101 / 55. 42.101
   libavdevice    55. 13.101 / 55. 13.101
   libavfilter     4.  7.100 /  4.  7.100
   libswscale      2.  6.100 /  2.  6.100
   libswresample   0. 19.100 /  0. 19.100
 [mp3 @ 0x2334a80] Header missing
     Last message repeated 1 times
 [NULL @ 0x2337260] non-existing PPS 0 referenced
 [h264 @ 0x2337260] non-existing PPS 0 referenced
 [h264 @ 0x2337260] decode_slice_header error
 [h264 @ 0x2337260] no frame!
 [h264 @ 0x2337260] non-existing PPS 0 referenced
     Last message repeated 1 times
 [h264 @ 0x2337260] decode_slice_header error
 [h264 @ 0x2337260] no frame!
 [mp3 @ 0x2334a80] Header missing
 [h264 @ 0x2337260] non-existing PPS 0 referenced
     Last message repeated 1 times
 [h264 @ 0x2337260] decode_slice_header error
 [h264 @ 0x2337260] no frame!
 [h264 @ 0x2337260] non-existing PPS 0 referenced
     Last message repeated 1 times
 [h264 @ 0x2337260] decode_slice_header error
 [h264 @ 0x2337260] no frame!
 [h264 @ 0x2337260] non-existing PPS 0 referenced
     Last message repeated 1 times
 [h264 @ 0x2337260] decode_slice_header error
 [h264 @ 0x2337260] no frame!
 [h264 @ 0x2337260] non-existing PPS 0 referenced
     Last message repeated 1 times
 [h264 @ 0x2337260] decode_slice_header error
 [h264 @ 0x2337260] no frame!
 [mp3 @ 0x2334a80] Header missing
     Last message repeated 1 times
 [h264 @ 0x2337260] non-existing PPS 0 referenced
     Last message repeated 1 times
 [h264 @ 0x2337260] decode_slice_header error
 [h264 @ 0x2337260] no frame!
 [mp3 @ 0x2334a80] Header missing
 [h264 @ 0x2337260] non-existing PPS 0 referenced
     Last message repeated 1 times
 [h264 @ 0x2337260] decode_slice_header error
 [h264 @ 0x2337260] no frame!
 [h264 @ 0x2337260] non-existing PPS 0 referenced
     Last message repeated 1 times
 [h264 @ 0x2337260] decode_slice_header error
 [h264 @ 0x2337260] no frame!
 [h264 @ 0x2337260] non-existing PPS 0 referenced
     Last message repeated 1 times
 [h264 @ 0x2337260] decode_slice_header error
 [h264 @ 0x2337260] no frame!
 [h264 @ 0x2337260] non-existing PPS 0 referenced
     Last message repeated 1 times
 [h264 @ 0x2337260] decode_slice_header error
 [h264 @ 0x2337260] no frame!
 [h264 @ 0x2337260] non-existing PPS 0 referenced
     Last message repeated 1 times
 [h264 @ 0x2337260] decode_slice_header error
 [h264 @ 0x2337260] no frame!
 [mp3 @ 0x2334a80] Header missing
 [h264 @ 0x2337260] non-existing PPS 0 referenced
     Last message repeated 1 times
 [h264 @ 0x2337260] decode_slice_header error
 [h264 @ 0x2337260] no frame!
 [h264 @ 0x2337260] non-existing PPS 0 referenced
     Last message repeated 1 times
 [h264 @ 0x2337260] decode_slice_header error
 [h264 @ 0x2337260] no frame!
 [mp3 @ 0x2334a80] Header missing
     Last message repeated 1 times
 [h264 @ 0x2337260] non-existing PPS 0 referenced
     Last message repeated 1 times
 [h264 @ 0x2337260] decode_slice_header error
 [h264 @ 0x2337260] no frame!
 [h264 @ 0x2337260] non-existing PPS 0 referenced
     Last message repeated 1 times
 [h264 @ 0x2337260] decode_slice_header error
 [h264 @ 0x2337260] no frame!
 [mp3 @ 0x2334a80] Header missing
 [h264 @ 0x2337260] non-existing PPS 0 referenced
     Last message repeated 1 times
 [h264 @ 0x2337260] decode_slice_header error
 [h264 @ 0x2337260] no frame!
 [h264 @ 0x2337260] non-existing PPS 0 referenced
     Last message repeated 1 times
 [h264 @ 0x2337260] decode_slice_header error
 [h264 @ 0x2337260] no frame!
 [h264 @ 0x2337260] non-existing PPS 0 referenced
     Last message repeated 1 times
 [h264 @ 0x2337260] decode_slice_header error
 [h264 @ 0x2337260] no frame!
 [h264 @ 0x2337260] non-existing PPS 0 referenced
     Last message repeated 1 times
 [h264 @ 0x2337260] decode_slice_header error
 [h264 @ 0x2337260] no frame!
 [h264 @ 0x2337260] non-existing PPS 0 referenced
     Last message repeated 1 times
 [h264 @ 0x2337260] decode_slice_header error
 [h264 @ 0x2337260] no frame!
 [mp3 @ 0x2334a80] Header missing
 [h264 @ 0x2337260] non-existing PPS 0 referenced
     Last message repeated 1 times
 [h264 @ 0x2337260] decode_slice_header error
 [h264 @ 0x2337260] no frame!
 [mp3 @ 0x2334a80] Header missing
     Last message repeated 1 times
 [h264 @ 0x2337260] non-existing PPS 0 referenced
     Last message repeated 1 times
 [h264 @ 0x2337260] decode_slice_header error
 [h264 @ 0x2337260] no frame!
 [mp3 @ 0x2334a80] Header missing
 [h264 @ 0x2337260] non-existing PPS 0 referenced
     Last message repeated 1 times
 [h264 @ 0x2337260] decode_slice_header error
 [h264 @ 0x2337260] no frame!
 [h264 @ 0x2337260] non-existing PPS 0 referenced
     Last message repeated 1 times
 [h264 @ 0x2337260] decode_slice_header error
 [h264 @ 0x2337260] no frame!
 [h264 @ 0x2337260] non-existing PPS 0 referenced
     Last message repeated 1 times
 [h264 @ 0x2337260] decode_slice_header error
 [h264 @ 0x2337260] no frame!
 [h264 @ 0x2337260] non-existing PPS 0 referenced
     Last message repeated 1 times
 [h264 @ 0x2337260] decode_slice_header error
 [h264 @ 0x2337260] no frame!
 [h264 @ 0x2337260] non-existing PPS 0 referenced
     Last message repeated 1 times
 [h264 @ 0x2337260] decode_slice_header error
 [h264 @ 0x2337260] no frame!
 [mp3 @ 0x2334a80] Header missing
 [h264 @ 0x2337260] non-existing PPS 0 referenced
     Last message repeated 1 times
 [h264 @ 0x2337260] decode_slice_header error
 [h264 @ 0x2337260] no frame!
 [h264 @ 0x2337260] non-existing PPS 0 referenced
     Last message repeated 1 times
 [h264 @ 0x2337260] decode_slice_header error
 [h264 @ 0x2337260] no frame!
 [mp3 @ 0x2334a80] Header missing
     Last message repeated 1 times
 [h264 @ 0x2337260] non-existing PPS 0 referenced
     Last message repeated 1 times
 [h264 @ 0x2337260] decode_slice_header error
 [h264 @ 0x2337260] no frame!
 [mp3 @ 0x2334a80] Header missing
 [h264 @ 0x2337260] non-existing PPS 0 referenced
     Last message repeated 1 times
 [h264 @ 0x2337260] decode_slice_header error
 [h264 @ 0x2337260] no frame!
 [h264 @ 0x2337260] non-existing PPS 0 referenced
     Last message repeated 1 times
 [h264 @ 0x2337260] decode_slice_header error
 [h264 @ 0x2337260] no frame!
 [h264 @ 0x2337260] non-existing PPS 0 referenced
     Last message repeated 1 times
 [h264 @ 0x2337260] decode_slice_header error
 [h264 @ 0x2337260] no frame!
 [mp3 @ 0x2334a80] Header missing
 [h264 @ 0x2337260] non-existing PPS 0 referenced
     Last message repeated 1 times
 [h264 @ 0x2337260] decode_slice_header error
 [h264 @ 0x2337260] no frame!
 [h264 @ 0x2337260] non-existing PPS 0 referenced
     Last message repeated 1 times
 [h264 @ 0x2337260] decode_slice_header error
 [h264 @ 0x2337260] no frame!
 [h264 @ 0x2337260] non-existing PPS 0 referenced
     Last message repeated 1 times
 [h264 @ 0x2337260] decode_slice_header error
 [h264 @ 0x2337260] no frame!
 [h264 @ 0x2337260] non-existing PPS 0 referenced
     Last message repeated 1 times
 [h264 @ 0x2337260] decode_slice_header error
 [h264 @ 0x2337260] no frame!
 [mp3 @ 0x2334a80] Header missing
     Last message repeated 3 times
 [h264 @ 0x2337260] non-existing PPS 0 referenced
     Last message repeated 1 times
 [h264 @ 0x2337260] decode_slice_header error
 [h264 @ 0x2337260] no frame!
 [mp3 @ 0x2334a80] Header missing
 [h264 @ 0x2337260] mmco: unref short failure
     Last message repeated 1 times
 [h264 @ 0x2337260] number of reference frames (0+4) exceeds max (3;
 probably corrupt input), discarding one
 [mp3 @ 0x2334a80] Header missing
     Last message repeated 102 times
 [rtp @ 0x2331c20] decoding for stream 0 failed
 [rtp @ 0x2331c20] Could not find codec parameters for stream 0 (Audio: mp3
 ([6][0][0][0] / 0x0006), 0 channels, s16p): unspecified frame size
 Consider increasing the value for the 'analyzeduration' and 'probesize'
 options
 rtp://@224.0.94.27:1234: could not seek to position 8494.819
 Input #0, rtp, from 'rtp://@224.0.94.27:1234':
   Duration: N/A, start: 8493.818556, bitrate: 159 kb/s
   Program 909
     Stream #0:0(rus): Audio: mp3 ([6][0][0][0] / 0x0006), 0 channels, s16p
     Stream #0:1: Video: h264 (Main) ([27][0][0][0] / 0x001B), yuv420p(tv,
 bt470bg), 720x576 [SAR 12:11 DAR 15:11], 25 fps, 50 tbr, 90k tbn, 50 tbc
     Stream #0:2(rus): Audio: mp2 ([4][0][0][0] / 0x0004), 48000 Hz,
 stereo, s16p, 159 kb/s
 File 'file.avi' already exists. Overwrite ? [y/N] y
 Output #0, avi, to 'file.avi':
   Metadata:
     ISFT            : Lavf55.42.101
     Stream #0:0: Video: h264 (H264 / 0x34363248), yuv420p, 720x576 [SAR
 12:11 DAR 15:11], q=2-31, 25 fps, 50 tbn, 50 tbc
     Stream #0:1(rus): Audio: mp2 (P[0][0][0] / 0x0050), 48000 Hz, stereo,
 159 kb/s
 Stream mapping:
   Stream #0:1 -> #0:0 (copy)
   Stream #0:2 -> #0:1 (copy)
 Press [q] to stop, [?] for help
 RTP: missed 866 packets
 [rtp @ 0x2331c20] PES packet size mismatch
 [avi @ 0x238f2a0] H.264 bitstream error, startcode missing6 bitrate=
 30.6kbits/s
     Last message repeated 589 times
 [avi @ 0x238f2a0] H.264 bitstream error, startcode missing0 bitrate=
 536.1kbits/s
     Last message repeated 10 times
 [avi @ 0x238f2a0] H.264 bitstream error, startcode missing0 bitrate=
 632.9kbits/s
     Last message repeated 13 times
 [avi @ 0x238f2a0] H.264 bitstream error, startcode missing6 bitrate=
 720.9kbits/s
     Last message repeated 10 times
 [avi @ 0x238f2a0] H.264 bitstream error, startcode missing4 bitrate=
 782.5kbits/s
     Last message repeated 13 times
 [avi @ 0x238f2a0] H.264 bitstream error, startcode missing4 bitrate=
 816.6kbits/s
     Last message repeated 11 times
 [avi @ 0x238f2a0] H.264 bitstream error, startcode missing8 bitrate=
 856.0kbits/s
     Last message repeated 13 times
 [avi @ 0x238f2a0] H.264 bitstream error, startcode missing2 bitrate=
 905.1kbits/s
     Last message repeated 13 times
 [avi @ 0x238f2a0] H.264 bitstream error, startcode missing0 bitrate=
 936.6kbits/s
     Last message repeated 11 times
 [avi @ 0x238f2a0] H.264 bitstream error, startcode missing8 bitrate=
 974.1kbits/s
     Last message repeated 12 times
 [avi @ 0x238f2a0] H.264 bitstream error, startcode missing8 bitrate=
 986.2kbits/s
     Last message repeated 13 times
 [avi @ 0x238f2a0] H.264 bitstream error, startcode missing2
 bitrate=1026.6kbits/s
     Last message repeated 11 times
 [avi @ 0x238f2a0] H.264 bitstream error, startcode missing2
 bitrate=1042.0kbits/s
     Last message repeated 13 times
 [avi @ 0x238f2a0] H.264 bitstream error, startcode missing4
 bitrate=1067.5kbits/s
     Last message repeated 13 times
 [avi @ 0x238f2a0] H.264 bitstream error, startcode missing8
 bitrate=1104.2kbits/s
     Last message repeated 11 times
 [avi @ 0x238f2a0] H.264 bitstream error, startcode missing4
 bitrate=1122.5kbits/s
     Last message repeated 12 times
 [avi @ 0x238f2a0] H.264 bitstream error, startcode missing2
 bitrate=1146.6kbits/s
     Last message repeated 14 times
 [avi @ 0x238f2a0] H.264 bitstream error, startcode missing6
 bitrate=1185.6kbits/s
     Last message repeated 11 times
 [avi @ 0x238f2a0] H.264 bitstream error, startcode missing6
 bitrate=1210.7kbits/s
     Last message repeated 12 times
 [avi @ 0x238f2a0] H.264 bitstream error, startcode missing4
 bitrate=1232.5kbits/s
     Last message repeated 13 times
 [avi @ 0x238f2a0] H.264 bitstream error, startcode missing0
 bitrate=1262.9kbits/s
     Last message repeated 11 times
 [avi @ 0x238f2a0] H.264 bitstream error, startcode missing4
 bitrate=1272.4kbits/s
     Last message repeated 13 times
 [avi @ 0x238f2a0] H.264 bitstream error, startcode missing6
 bitrate=1294.8kbits/s
     Last message repeated 13 times
 [avi @ 0x238f2a0] H.264 bitstream error, startcode missing4
 bitrate=1314.5kbits/s
     Last message repeated 14 times
 [avi @ 0x238f2a0] H.264 bitstream error, startcode missing8
 bitrate=1322.6kbits/s
     Last message repeated 13 times
 [avi @ 0x238f2a0] H.264 bitstream error, startcode missing6
 bitrate=1328.6kbits/s
     Last message repeated 11 times
 [avi @ 0x238f2a0] H.264 bitstream error, startcode missing2
 bitrate=1334.0kbits/s
     Last message repeated 12 times
 [avi @ 0x238f2a0] H.264 bitstream error, startcode missing4
 bitrate=1339.4kbits/s
     Last message repeated 13 times
 [avi @ 0x238f2a0] H.264 bitstream error, startcode missing2
 bitrate=1376.4kbits/s
     Last message repeated 2 times
 frame=  552 fps= 29 q=-1.0 Lsize=    5107kB time=00:00:30.02
 bitrate=1393.6kbits/s
 video:4658kB audio:375kB subtitle:0kB other streams:0kB global headers:0kB
 muxing overhead: 1.484649%
 Segmentation fault (core dumped)
 }}}
 {{{
 #0  av_frame_unref (frame=0x64) at libavutil/frame.c:362
 #1  0x0000000000c3b8f6 in av_frame_free (frame=frame at entry=0x23341b0) at
 libavutil/frame.c:134
 #2  0x000000000047d700 in ffmpeg_cleanup (ret=0) at ffmpeg.c:500
 #3  0x0000000000466c61 in exit_program (ret=0) at cmdutils.c:121
 #4  0x0000000000464154 in main (argc=<optimized out>, argv=<optimized
 out>) at ffmpeg.c:3820
 }}}

--
Ticket URL: <https://trac.ffmpeg.org/ticket/3713#comment:2>
FFmpeg <https://ffmpeg.org>
FFmpeg issue tracker


More information about the FFmpeg-trac mailing list