[FFmpeg-trac] #4749(ffmpeg:new): firefox crashes in ffmpeg code (2.7.2 and git versions)

FFmpeg trac at avcodec.org
Sun Aug 2 00:00:29 CEST 2015


#4749: firefox crashes in ffmpeg code (2.7.2 and git versions)
-------------------------------------+-------------------------------------
             Reporter:  zazdxscf     |                     Type:  defect
               Status:  new          |                 Priority:  normal
            Component:  ffmpeg       |                  Version:  git-
             Keywords:               |  master
  init_get_bits init_get_bits8       |               Blocked By:
  bit_size                           |  Reproduced by developer:  0
             Blocking:               |
Analyzed by developer:  0            |
-------------------------------------+-------------------------------------
 Summary of the bug:
 How to reproduce:

 I don't know how to reproduce, but having multiple tabs with at least one
 youtube video playing seems to trigger the segmentation fault in firefox,
 about twice per day.
 I am currently trying (on latest git) 2 patches that I made from I can
 tell what's going on  from the gdb stacktraces on the previous core dumps;
 that part with 'error: Cannot access memory at address'. But maybe I'm
 misinterpreting something so my patches are quite useless and it's only a
 matter of time before it crashes again (in which case I'll report back).

 (i don't have the exact git commit number for the following paste, because
 I refreshed it to latest)
 {{{
 ...
 Core was generated by `firefox'.
 Program terminated with signal SIGSEGV, Segmentation fault.
 #0  0x00007fdcef08d8cd in raise (sig=11) at ../sysdeps/unix/sysv/linux/pt-
 raise.c:36
 36        return INLINE_SYSCALL (tgkill, 3, pid, THREAD_GETMEM
 (THREAD_SELF, tid),
 #0  0x00007fdcef08d8cd in raise (sig=11) at ../sysdeps/unix/sysv/linux/pt-
 raise.c:36
         resultvar = 0
         pid = <optimized out>
 #1  0x00007fdcec0ac839 in nsProfileLock::FatalSignalHandler (signo=11,
 info=0x7fdc9b3fbab0, context=0x7fdc9b3fb980) at /usr/src/debug/www-
 client/firefox-39.0/mozilla-
 release/profile/dirserviceprovider/nsProfileLock.cpp:180
         unblock_sigs = {__val = {1024, 0 <repeats 15 times>}}
         oldact = <optimized out>
 #2  <signal handler called>
 No locals.
 #3  0x00007fdcb235b34a in decode_spectrum_and_dequant
 (band_type=0x7fdcc5615d7c, ics=0x7fdcc5615100, pulse=0x7fdc9b3fbea0,
 pulse_present=0, sf=0x7fdcc561615c, gb=0x7fdc9b3fc2a0,
 coef=0x7fdcc56179c0, ac=0x7fdc864e3000) at /usr/src/debug/media-
 video/ffmpeg-9999/ffmpeg-9999/libavcodec/aacdec_template.c:1656
         code = <optimized out>
         nnz = <optimized out>
         cb_idx = <optimized out>
         bits = 0
         cf = 0x7fdcc5618060
         cb_vector_idx = 0x7fdcb28fe3a0 <codebook_vector02_idx>
         vlc_tab = 0x7fdcb2f62a80 <table>
         re_index = 2027
         re_cache = <optimized out>
         vq = 0x7fdcb28fe080 <codebook_vector10_vals>
         re_size_plus8 = 2056
         cbt_m1 = 2
         cfo = 0x7fdcc5618040
         off_len = 32
         group = <optimized out>
         g_len = 1
         i = 32
         k = <optimized out>
         g = 0
         idx = 32
         c = <optimized out>
         coef_base = 0x7fdcc56179c0
         offsets = 0x7fdcb28fdcc0 <swb_offset_1024_48>
 #4  decode_ics (ac=ac at entry=0x7fdc864e3000, sce=sce at entry=0x7fdcc5615100,
 gb=gb at entry=0x7fdc9b3fc2a0, common_window=common_window at entry=1,
 scale_flag=0) at /usr/src/debug/media-
 video/ffmpeg-9999/ffmpeg-9999/libavcodec/aacdec_template.c:1958
         pulse = {num_pulse = 0, start = <optimized out>, pos = {<optimized
 out>, <optimized out>, <optimized out>, <optimized out>}, amp =
 {<optimized out>, <optimized out>, <optimized out>, <optimized out>}}
         tns = 0x7fdcc56151b0
         ics = 0x7fdcc5615100
         out = 0x7fdcc56179c0
         eld_syntax = <optimized out>
         er_syntax = <optimized out>
         pulse_present = 0
 #5  0x00007fdcb235bd1c in decode_cpe (ac=ac at entry=0x7fdc864e3000,
 gb=gb at entry=0x7fdc9b3fc2a0, cpe=cpe at entry=0x7fdcc5607000) at
 /usr/src/debug/media-
 video/ffmpeg-9999/ffmpeg-9999/libavcodec/aacdec_template.c:2084
         i = <optimized out>
         ret = <optimized out>
         common_window = <optimized out>
         ms_present = 2
         eld_syntax = <optimized out>
 #6  0x00007fdcb235cbd8 in aac_decode_frame_int
 (avctx=avctx at entry=0x7fdc8bbbd600, data=data at entry=0x7fdc9b3fc4f0,
 got_frame_ptr=got_frame_ptr at entry=0x7fdc9b3fc868,
 gb=gb at entry=0x7fdc9b3fc2a0, avpkt=avpkt at entry=0x7fdc9b3fc350) at
 /usr/src/debug/media-
 video/ffmpeg-9999/ffmpeg-9999/libavcodec/aacdec_template.c:2959
         ac = 0x7fdc864e3000
         che = 0x7fdcc5607000
         che_prev = <optimized out>
         elem_type_prev = TYPE_END
         err = 0
         elem_id = 0
         samples = 1024
         multiplier = <optimized out>
         audio_found = <optimized out>
         pce_found = <optimized out>
         is_dmono = <optimized out>
         sce_count = <optimized out>
 #7  0x00007fdcb235dbea in aac_decode_frame (avctx=0x7fdc8bbbd600,
 data=0x7fdc9b3fc4f0, got_frame_ptr=0x7fdc9b3fc868, avpkt=0x7fdc9b3fc350)
 at /usr/src/debug/media-
 video/ffmpeg-9999/ffmpeg-9999/libavcodec/aacdec_template.c:3136
         ac = 0x7fdc864e3000
         buf = 0x7fdc67bfff00
 "!\nT\365\266X\250\062\200\300\250\260\002fYiQK,T!&\327\360]Y\323[\337j\346\270⍛
 \203\322­(*\204\212@\340-U@\371\324k\320\027\371\006\066z\333\332\372X\177\v\321EQ\356:U\362;\r\v\322\034\356\220:\275\016*y\267\201%\362\376\245\337\350\310\344su\360\205o\324'\227\347\234ݒ\v\234\t\006l\n\250"
         buf_size = 256
         gb = {buffer = 0x7fdc67bfff00
 "!\nT\365\266X\250\062\200\300\250\260\002fYiQK,T!&\327\360]Y\323[\337j\346\270⍛
 \203\322­(*\204\212@\340-U@\371\324k\320\027\371\006\066z\333\332\372X\177\v\321EQ\356:U\362;\r\v\322\034\356\220:\275\016*y\267\201%\362\376\245\337\350\310\344su\360\205o\324'\227\347\234ݒ\v\234\t\006l\n\250",
 buffer_end = 0x7fdc67c00000 <error: Cannot access memory at address
 0x7fdc67c00000>, index = 2017, size_in_bits = 2048, size_in_bits_plus8 =
 2056}
         buf_consumed = <optimized out>
         buf_offset = <optimized out>
         err = <optimized out>
         new_extradata_size = -1177434299
         jp_dualmono_size = 32732
         jp_dualmono = <optimized out>
 #8  0x00007fdcb26ed1e1 in avcodec_decode_audio4 (avctx=0x7fdc8bbbd600,
 frame=frame at entry=0x7fdc9b3fc4f0,
 got_frame_ptr=got_frame_ptr at entry=0x7fdc9b3fc868,
 avpkt=avpkt at entry=0x7fdc9b3fc420) at /usr/src/debug/media-
 video/ffmpeg-9999/ffmpeg-9999/libavcodec/utils.c:2597
         side_size = 32732
         tmp = {buf = 0x0, pts = 0, dts = 0, data = 0x7fdc67bfff00
 "!\nT\365\266X\250\062\200\300\250\260\002fYiQK,T!&\327\360]Y\323[\337j\346\270⍛
 \203\322­(*\204\212@\340-U@\371\324k\320\027\371\006\066z\333\332\372X\177\v\321EQ\356:U\362;\r\v\322\034\356\220:\275\016*y\267\201%\362\376\245\337\350\310\344su\360\205o\324'\227\347\234ݒ\v\234\t\006l\n\250",
 size = 256, stream_index = 0, flags = 0, side_data = 0x0, side_data_elems
 = 0, duration = 0, destruct = 0x0, priv = 0x0, pos = 0,
 convergence_duration = 0}
         side = <optimized out>
         discard_padding = 0
         skip_reason = 0 '\000'
         discard_reason = 0 '\000'
         did_split = 0
         avci = 0x7fdcd33aefe0
         ret = 0

 ...
 }}}

 Here's a slightly different gdb backtrace which was done with an earlier(1
 day?) latest git commit
 {{{
 ...
 Core was generated by `firefox'.
 Program terminated with signal SIGSEGV, Segmentation fault.
 #0  0x00007f01579618cd in raise (sig=11) at ../sysdeps/unix/sysv/linux/pt-
 raise.c:36
 36        return INLINE_SYSCALL (tgkill, 3, pid, THREAD_GETMEM
 (THREAD_SELF, tid),
 #0  0x00007f01579618cd in raise (sig=11) at ../sysdeps/unix/sysv/linux/pt-
 raise.c:36
         resultvar = 0
         pid = <optimized out>
 #1  0x00007f01549ac839 in nsProfileLock::FatalSignalHandler (signo=11,
 info=0x7f00bc7fbab0, context=0x7f00bc7fb980) at /usr/src/debug/www-
 client/firefox-39.0/mozilla-
 release/profile/dirserviceprovider/nsProfileLock.cpp:180
         unblock_sigs = {__val = {1024, 0 <repeats 15 times>}}
         oldact = <optimized out>
 #2  <signal handler called>
 No locals.
 #3  0x00007f011b72e46e in NEG_USR32 (s=<optimized out>, a=<optimized out>)
 at /usr/src/debug/media-
 video/ffmpeg-9999/ffmpeg-9999/libavcodec/x86/mathops.h:125
 No locals.
 #4  decode_spectrum_and_dequant (band_type=0x7f00f146cd7c,
 ics=0x7f00f146c100, pulse=0x7f00bc7fbea0, pulse_present=0,
 sf=0x7f00f146d15c, gb=0x7f00bc7fc2a0, coef=0x7f00f146e9c0,
 ac=0x7f00ddea7000) at /usr/src/debug/media-
 video/ffmpeg-9999/ffmpeg-9999/libavcodec/aacdec_template.c:1634
         n = <optimized out>
         nb_bits = <optimized out>
         index = <optimized out>
         code = <optimized out>
         cb_idx = <optimized out>
         cf = 0x7f00f146f360
         cb_vector_idx = 0x7f011bcd13a0 <codebook_vector02_idx>
         vlc_tab = 0x7f011c336760 <table>
         re_index = 2027
         re_cache = <optimized out>
         vq = 0x7f011bcd1448 <codebook_vector0_vals>
         re_size_plus8 = 2048
         cbt_m1 = 0
         cfo = 0x7f00f146f340
         off_len = 32
         group = <optimized out>
         g_len = 1
         i = 38
         k = <optimized out>
         g = 0
         idx = 38
         c = <optimized out>
         coef_base = 0x7f00f146e9c0
         offsets = 0x7f011bcd0cc0 <swb_offset_1024_48>
 #5  decode_ics (ac=ac at entry=0x7f00ddea7000, sce=sce at entry=0x7f00f146c100,
 gb=gb at entry=0x7f00bc7fc2a0, common_window=common_window at entry=1,
 scale_flag=0) at /usr/src/debug/media-
 video/ffmpeg-9999/ffmpeg-9999/libavcodec/aacdec_template.c:1958
         pulse = {num_pulse = 0, start = <optimized out>, pos = {<optimized
 out>, <optimized out>, <optimized out>, <optimized out>}, amp =
 {<optimized out>, <optimized out>, <optimized out>, <optimized out>}}
         tns = 0x7f00f146c1b0
         ics = 0x7f00f146c100
         out = 0x7f00f146e9c0
         eld_syntax = <optimized out>
         er_syntax = <optimized out>
         pulse_present = 0
 #6  0x00007f011b72ed1c in decode_cpe (ac=ac at entry=0x7f00ddea7000,
 gb=gb at entry=0x7f00bc7fc2a0, cpe=cpe at entry=0x7f00f145e000) at
 /usr/src/debug/media-
 video/ffmpeg-9999/ffmpeg-9999/libavcodec/aacdec_template.c:2084
         i = <optimized out>
         ret = <optimized out>
         common_window = <optimized out>
         ms_present = 2
         eld_syntax = <optimized out>
 #7  0x00007f011b72fbd8 in aac_decode_frame_int
 (avctx=avctx at entry=0x7f0114708400, data=data at entry=0x7f00bc7fc4f0,
 got_frame_ptr=got_frame_ptr at entry=0x7f00bc7fc868,
 gb=gb at entry=0x7f00bc7fc2a0, avpkt=avpkt at entry=0x7f00bc7fc350) at
 /usr/src/debug/media-
 video/ffmpeg-9999/ffmpeg-9999/libavcodec/aacdec_template.c:2959
         ac = 0x7f00ddea7000
         che = 0x7f00f145e000
         che_prev = <optimized out>
         elem_type_prev = TYPE_END
         err = 0
         elem_id = 0
         samples = 1024
         multiplier = <optimized out>
         audio_found = <optimized out>
         pce_found = <optimized out>
         is_dmono = <optimized out>
         sce_count = <optimized out>
 #8  0x00007f011b730bea in aac_decode_frame (avctx=0x7f0114708400,
 data=0x7f00bc7fc4f0, got_frame_ptr=0x7f00bc7fc868, avpkt=0x7f00bc7fc350)
 at /usr/src/debug/media-
 video/ffmpeg-9999/ffmpeg-9999/libavcodec/aacdec_template.c:3136
         ac = 0x7f00ddea7000
         buf = 0x7f00d8cfff00
 "!\nU|-\a\001D\221P$\266\227.\267U\232i\330\004P\226\032"
         buf_size = 255
         gb = {buffer = 0x7f00d8cfff00
 "!\nU|-\a\001D\221P$\266\227.\267U\232i\330\004P\226\032", buffer_end =
 0x7f00d8cfffff "Z"<error: Cannot access memory at address 0x7f00d8d00000>,
 index = 2019, size_in_bits = 2040, size_in_bits_plus8 = 2048}
         buf_consumed = <optimized out>
         buf_offset = <optimized out>
         err = <optimized out>
         new_extradata_size = 556910405
         jp_dualmono_size = 32513
         jp_dualmono = <optimized out>
 #9  0x00007f011bac01e1 in avcodec_decode_audio4 (avctx=0x7f0114708400,
 frame=frame at entry=0x7f00bc7fc4f0,
 got_frame_ptr=got_frame_ptr at entry=0x7f00bc7fc868,
 avpkt=avpkt at entry=0x7f00bc7fc420) at /usr/src/debug/media-
 video/ffmpeg-9999/ffmpeg-9999/libavcodec/utils.c:2597
         side_size = 32512
         tmp = {buf = 0x0, pts = 0, dts = 0, data = 0x7f00d8cfff00
 "!\nU|-\a\001D\221P$\266\227.\267U\232i\330\004P\226\032", size = 255,
 stream_index = 0, flags = 0, side_data = 0x0, side_data_elems = 0,
 duration = 0, destruct = 0x0, priv = 0x0, pos = 0, convergence_duration =
 0}
         side = <optimized out>
         discard_padding = 0
         skip_reason = 0 '\000'
         discard_reason = 0 '\000'
         did_split = 0
         avci = 0x7f011e449580
         ret = 0
 #10 0x00007f011cbdf06d in gst_ffmpegauddec_audio_frame
 (ffmpegdec=ffmpegdec at entry=0x7f00f36552a0, data=data at entry=0x7f00d8cfff00
 "!\nU|-\a\001D\221P$\266\227.\267U\232i\330\004P\226\032", size=<optimized
 out>, have_data=have_data at entry=0x7f00bc7fc868,
 outbuf=outbuf at entry=0x7f00bc7fc7d0, ret=ret at entry=0x7f00bc7fc86c,
 in_plugin=<optimized out>) at /usr/src/debug/media-plugins/gst-plugins-
 libav-1.4.5-r1/gst-libav-1.4.5/ext/libav/gstavauddec.c:475
         len = -1
         packet = {buf = 0x0, pts = 0, dts = 0, data = 0x7f00d8cfff00
 "!\nU|-\a\001D\221P$\266\227.\267U\232i\330\004P\226\032", size = 255,
 stream_index = 0, flags = 0, side_data = 0x0, side_data_elems = 0,
 duration = 0, destruct = 0x0, priv = 0x0, pos = 0, convergence_duration =
 0}
         frame = {data = {0x7f00e6855000
 "\341\205G?e\035G?\224p\036?[R\350>\020o\330>l6\277>\264\372\276>\246\310\020?\337\374/?\231\024\061?\266\324K?\330\070W?kcJ?J\375[?\314\363W?\004\250)?\a\200\"?1\215/?\304\350)?ZD:?%H9?\262\345\004?\a}\352>\260\245\016?\v\023\365>w\371\237>\023\023\252>\237\332\363>\246o\360>\375hW>H\253\233\273\064a\b=\363\241\223=\024\267#=\314='>\256!\223>\215Q#>p\251\227\274\026\275\340\274\346\241\004=ǼS=\357^\303=\216\030Z>",
 0x7f00f0e7e000
 "\322\313!?Q\020\060?t#\a?[ڻ>\001ֿ>\035\213\274>\377Z\307>E^\017?\267\252\032?o\344\v?\270E2?\037\326T?\006<G?H\354H?\350{J?\347\335\062?_*4?\347&=?s{7?k\nD?\221(;?S",
 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, linesize = {8192, 0, 0, 0, 0, 0, 0, 0},
 extended_data = 0x7f00bc7fc4f0, width = 0, height = 0, nb_samples = 2048,
 format = 8, key_frame = 1, pict_type = AV_PICTURE_TYPE_NONE, base = {0x0,
 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, sample_aspect_ratio = {num = 0, den =
 1}, pts = -9223372036854775808, pkt_pts = 0, pkt_dts =
 -9223372036854775808, coded_picture_number = 0, display_picture_number =
 0, quality = 0, reference = 0, qscale_table = 0x0, qstride = 0,
 qscale_type = 0, mbskip_table = 0x0, motion_val = {0x0, 0x0}, mb_type =
 0x0, dct_coeff = 0x0, ref_index = {0x0, 0x0}, opaque = 0x0, error = {0, 0,
 0, 0, 0, 0, 0, 0}, type = 1, repeat_pict = 0, interlaced_frame = 0,
 top_field_first = 0, palette_has_changed = 0, buffer_hints = 0, pan_scan =
 0x0, reordered_opaque = -9223372036854775808, hwaccel_picture_private =
 0x0, owner = 0x0, thread_opaque = 0x0, motion_subsample_log2 = 0 '\000',
 sample_rate = 44100, channel_layout = 3, buf = {0x7f00f92ff900,
 0x7f00f92ff9c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, extended_buf = 0x0,
 nb_extended_buf = 0, side_data = 0x0, nb_side_data = 0, flags = 0,
 color_range = AVCOL_RANGE_UNSPECIFIED, color_primaries =
 AVCOL_PRI_RESERVED0, color_trc = AVCOL_TRC_RESERVED0, colorspace =
 AVCOL_SPC_RGB, chroma_location = AVCHROMA_LOC_UNSPECIFIED,
 best_effort_timestamp = -9223372036854775808, pkt_pos = 0, pkt_duration =
 0, metadata = 0x0, decode_error_flags = 0, channels = 2, pkt_size = 255,
 qp_table_buf = 0x0}
 ...
 }}}

 or this for ffmpeg 2.7.2 version

 {{{
 ...
 Core was generated by `firefox'.
 Program terminated with signal SIGSEGV, Segmentation fault.
 #0  0x00007f027fe598cd in raise (sig=11) at ../sysdeps/unix/sysv/linux/pt-
 raise.c:36
 36        return INLINE_SYSCALL (tgkill, 3, pid, THREAD_GETMEM
 (THREAD_SELF, tid),
 #0  0x00007f027fe598cd in raise (sig=11) at ../sysdeps/unix/sysv/linux/pt-
 raise.c:36
         resultvar = 0
         pid = <optimized out>
 #1  0x00007f027ceac839 in nsProfileLock::FatalSignalHandler (signo=11,
 info=0x7f021b1fbab0, context=0x7f021b1fb980) at /usr/src/debug/www-
 client/firefox-39.0/mozilla-
 release/profile/dirserviceprovider/nsProfileLock.cpp:180
         unblock_sigs = {__val = {1024, 0 <repeats 15 times>}}
         oldact = <optimized out>
 #2  <signal handler called>
 No locals.
 #3  0x00007f024369f06e in NEG_USR32 (s=<optimized out>, a=<optimized out>)
 at /usr/src/debug/media-
 video/ffmpeg-2.7.2/ffmpeg-2.7.2/libavcodec/x86/mathops.h:125
 No locals.
 #4  decode_spectrum_and_dequant (band_type=0x7f0216c158f4,
 ics=0x7f0216c14c80, pulse=0x7f021b1fbea0, pulse_present=0,
 sf=0x7f0216c15cd4, gb=0x7f021b1fc2a0, coef=0x7f0216c17140,
 ac=0x7f021a2f9000) at /usr/src/debug/media-
 video/ffmpeg-2.7.2/ffmpeg-2.7.2/libavcodec/aacdec.c:1696
         n = <optimized out>
         nb_bits = <optimized out>
         index = <optimized out>
         code = <optimized out>
         cb_idx = <optimized out>
         cf = 0x7f0216c179b0
         cb_vector_idx = 0x7f0243c085c0 <codebook_vector02_idx>
         vlc_tab = 0x7f02442572c0 <table>
         re_index = 2024
         re_cache = <optimized out>
         vq = 0x7f0243c08668 <codebook_vector0_vals>
         re_size_plus8 = 2056
         cbt_m1 = 0
         cfo = 0x7f0216c17940
         off_len = 32
         group = <optimized out>
         g_len = 1
         i = 35
         k = <optimized out>
         g = 0
         idx = 35
         c = <optimized out>
         coef_base = 0x7f0216c17140
         offsets = 0x7f0243c07ee0 <swb_offset_1024_48>
 #5  decode_ics (ac=ac at entry=0x7f021a2f9000, sce=sce at entry=0x7f0216c14c80,
 gb=gb at entry=0x7f021b1fc2a0, common_window=common_window at entry=1,
 scale_flag=0) at /usr/src/debug/media-
 video/ffmpeg-2.7.2/ffmpeg-2.7.2/libavcodec/aacdec.c:2010
         pulse = {num_pulse = 0, start = <optimized out>, pos = {<optimized
 out>, <optimized out>, <optimized out>, <optimized out>}, amp =
 {<optimized out>, <optimized out>, <optimized out>, <optimized out>}}
         tns = 0x7f0216c14d28
         ics = 0x7f0216c14c80
         out = 0x7f0216c17140
         eld_syntax = <optimized out>
         er_syntax = <optimized out>
         pulse_present = 0
 #6  0x00007f024369f91c in decode_cpe (ac=ac at entry=0x7f021a2f9000,
 gb=gb at entry=0x7f021b1fc2a0, cpe=cpe at entry=0x7f0216c07000) at
 /usr/src/debug/media-
 video/ffmpeg-2.7.2/ffmpeg-2.7.2/libavcodec/aacdec.c:2121
         i = <optimized out>
         ret = <optimized out>
         common_window = <optimized out>
         ms_present = 1
         eld_syntax = <optimized out>
 #7  0x00007f02436a07d9 in aac_decode_frame_int
 (avctx=avctx at entry=0x7f021c3c8600, data=data at entry=0x7f021b1fc4f0,
 got_frame_ptr=got_frame_ptr at entry=0x7f021b1fc868,
 gb=gb at entry=0x7f021b1fc2a0, avpkt=avpkt at entry=0x7f021b1fc350) at
 /usr/src/debug/media-
 video/ffmpeg-2.7.2/ffmpeg-2.7.2/libavcodec/aacdec.c:3015
         ac = 0x7f021a2f9000
         che = 0x7f0216c07000
         che_prev = <optimized out>
         elem_type_prev = TYPE_END
         err = 0
         elem_id = 0
         samples = 1024
         multiplier = <optimized out>
         audio_found = <optimized out>
         pce_found = <optimized out>
         is_dmono = <optimized out>
         sce_count = <optimized out>
 #8  0x00007f02436a17ea in aac_decode_frame (avctx=0x7f021c3c8600,
 data=0x7f021b1fc4f0, got_frame_ptr=0x7f021b1fc868, avpkt=0x7f021b1fc350)
 at /usr/src/debug/media-
 video/ffmpeg-2.7.2/ffmpeg-2.7.2/libavcodec/aacdec.c:3192
         ac = 0x7f021a2f9000
         buf = 0x7f021a4fff00
 "!\nO\"\356\377\377\352\222\317\ae(\305 at F\343\064\211b\261\306U\302\302h4\027?\v\023\336\270#\004u\371\247?ضm\217́GM\203\f\301\034@\370\376\373\224\202o#l6+N\311A\\\233\225&d\266\376\334ir\276\367\bd\037\275BG\315Ɉ\t\v\276Y\317\064\022\202\240\321t\245QU\031\265\247\323*\273\232\067s+\235F\243M\374\343\370\025
 \324\244R\b\003*D\016J\234\v\350\t\200HTf\n\001\nJC%\020\241\025\201\004ʶK\215\313\n\325E\240<\226\022~O\300\314l\341%_"
         buf_size = 256
         gb = {buffer = 0x7f021a4fff00
 "!\nO\"\356\377\377\352\222\317\ae(\305 at F\343\064\211b\261\306U\302\302h4\027?\v\023\336\270#\004u\371\247?ضm\217́GM\203\f\301\034@\370\376\373\224\202o#l6+N\311A\\\233\225&d\266\376\334ir\276\367\bd\037\275BG\315Ɉ\t\v\276Y\317\064\022\202\240\321t\245QU\031\265\247\323*\273\232\067s+\235F\243M\374\343\370\025
 \324\244R\b\003*D\016J\234\v\350\t\200HTf\n\001\nJC%\020\241\025\201\004ʶK\215\313\n\325E\240<\226\022~O\300\314l\341%_",
 buffer_end = 0x7f021a500000 <error: Cannot access memory at address
 0x7f021a500000>, index = 2009, size_in_bits = 2048, size_in_bits_plus8 =
 2056}
         buf_consumed = <optimized out>
         buf_offset = <optimized out>
         err = <optimized out>
         new_extradata_size = 1278326597
         jp_dualmono_size = 32514
         jp_dualmono = <optimized out>
 #9  0x00007f0243a0c041 in avcodec_decode_audio4 (avctx=0x7f021c3c8600,
 frame=frame at entry=0x7f021b1fc4f0,
 got_frame_ptr=got_frame_ptr at entry=0x7f021b1fc868,
 avpkt=avpkt at entry=0x7f021b1fc420) at /usr/src/debug/media-
 video/ffmpeg-2.7.2/ffmpeg-2.7.2/libavcodec/utils.c:2543
         side_size = 32514
         tmp = {buf = 0x0, pts = 0, dts = 0, data = 0x7f021a4fff00
 "!\nO\"\356\377\377\352\222\317\ae(\305 at F\343\064\211b\261\306U\302\302h4\027?\v\023\336\270#\004u\371\247?ضm\217́GM\203\f\301\034@\370\376\373\224\202o#l6+N\311A\\\233\225&d\266\376\334ir\276\367\bd\037\275BG\315Ɉ\t\v\276Y\317\064\022\202\240\321t\245QU\031\265\247\323*\273\232\067s+\235F\243M\374\343\370\025
 \324\244R\b\003*D\016J\234\v\350\t\200HTf\n\001\nJC%\020\241\025\201\004ʶK\215\313\n\325E\240<\226\022~O\300\314l\341%_",
 size = 256, stream_index = 0, flags = 0, side_data = 0x0, side_data_elems
 = 0, duration = 0, destruct = 0x0, priv = 0x0, pos = 0,
 convergence_duration = 0}
         side = <optimized out>
         discard_padding = 0
         skip_reason = 0 '\000'
         discard_reason = 0 '\000'
         did_split = 0
         avci = 0x7f021a3deae0
         ret = 0
 ...
 }}}

 Ok now I see this:
 "Patches should be submitted to the ffmpeg-devel mailing list and not this
 bug tracker."
 but the rules there seem to be kinda strict
 https://ffmpeg.org/contact.html#MailingLists
 I'll just drop the patches here for now, as they are.

--
Ticket URL: <https://trac.ffmpeg.org/ticket/4749>
FFmpeg <https://ffmpeg.org>
FFmpeg issue tracker


More information about the FFmpeg-trac mailing list