[FFmpeg-trac] #3603(ffprobe:open): ffprobe crashes on streams added after probe

FFmpeg trac at avcodec.org
Thu May 1 22:05:17 CEST 2014


#3603: ffprobe crashes on streams added after probe
-------------------------------------+-------------------------------------
             Reporter:  cus          |                    Owner:
                 Type:  defect       |                   Status:  open
             Priority:  important    |                Component:  ffprobe
              Version:  git-master   |               Resolution:
             Keywords:  crash        |               Blocked By:
  regression                         |  Reproduced by developer:  1
             Blocking:               |
Analyzed by developer:  0            |
-------------------------------------+-------------------------------------
Changes (by cehoyos):

 * keywords:  crash => crash regression
 * priority:  normal => important
 * status:  new => open
 * reproduced:  0 => 1


Comment:

 One of the invalid reads that are also reproducible without {{{-of xml
 -select_streams 1111}}} is a regression since 29b9aee4
 {{{
 ==24725== Invalid read of size 4
 ==24725==    at 0x4785F7: read_interval_packets (ffprobe.c:1896)
 ==24725==    by 0x46ACE2: main (ffprobe.c:1958)
 ==24725==  Address 0xaad4770 is 4 bytes after a block of size 12 alloc'd
 ==24725==    at 0x4C290FE: memalign (in /usr/lib64/valgrind
 /vgpreload_memcheck-amd64-linux.so)
 ==24725==    by 0x4C291A7: posix_memalign (in /usr/lib64/valgrind
 /vgpreload_memcheck-amd64-linux.so)
 ==24725==    by 0xD669B9: av_malloc (mem.c:95)
 ==24725==    by 0xD66CF2: av_calloc (mem.c:245)
 ==24725==    by 0x469B6E: main (ffprobe.c:2379)
 ==24725==
         <packet codec_type="subtitle" stream_index="4" pts="45008998"
 pts_time="500.099978" dts="45008998" dts_time="500.099978" size="3590"
 pos="30869212" flags="K"/>
 ==24725== Invalid read of size 8
 ==24725==    at 0x4786F7: read_interval_packets (ffprobe.c:1923)
 ==24725==    by 0x46ACE2: main (ffprobe.c:1958)
 ==24725==  Address 0xadf1500 is 8 bytes after a block of size 24 alloc'd
 ==24725==    at 0x4C290FE: memalign (in /usr/lib64/valgrind
 /vgpreload_memcheck-amd64-linux.so)
 ==24725==    by 0x4C291A7: posix_memalign (in /usr/lib64/valgrind
 /vgpreload_memcheck-amd64-linux.so)
 ==24725==    by 0xD669B9: av_malloc (mem.c:95)
 ==24725==    by 0xD66CF2: av_calloc (mem.c:245)
 ==24725==    by 0x469B55: main (ffprobe.c:2378)
 }}}

--
Ticket URL: <https://trac.ffmpeg.org/ticket/3603#comment:1>
FFmpeg <https://ffmpeg.org>
FFmpeg issue tracker


More information about the FFmpeg-trac mailing list