[FFmpeg-trac] #4921(avformat:new): double free or corruption error using tee pseudo muxer with hls and flv
FFmpeg
trac at avcodec.org
Fri Oct 9 21:14:08 CEST 2015
#4921: double free or corruption error using tee pseudo muxer with hls and flv
-------------------------------------+------------------------------------
Reporter: doubleb | Owner:
Type: defect | Status: new
Priority: normal | Component: avformat
Version: unspecified | Resolution:
Keywords: tee | Blocked By:
Blocking: | Reproduced by developer: 0
Analyzed by developer: 0 |
-------------------------------------+------------------------------------
Comment (by doubleb):
valgrind output
.
.
.
.
==16957== Invalid read of size 8/A time=00:00:00.00 bitrate=N/A
==16957== at 0xE1CDB3: av_freep (mem.c:247)
==16957== by 0x6B1053: av_packet_free_side_data (avpacket.c:275)
==16957== by 0x6B1053: av_free_packet (avpacket.c:295)
==16957== by 0x5FBAF3: av_interleaved_write_frame (mux.c:974)
==16957== by 0x6635E4: tee_write_packet (tee.c:485)
==16957== by 0x5FBD89: write_packet (mux.c:660)
==16957== by 0x5FBD89: av_interleaved_write_frame (mux.c:970)
==16957== by 0x48AC8F: write_frame (ffmpeg.c:787)
==16957== by 0x4907DC: do_audio_out (ffmpeg.c:865)
==16957== by 0x4907DC: reap_filters (ffmpeg.c:1398)
==16957== by 0x4731E5: transcode_step (ffmpeg.c:3939)
==16957== by 0x4731E5: transcode (ffmpeg.c:3982)
==16957== by 0x4731E5: main (ffmpeg.c:4165)
==16957== Address 0x6c806bc0 is 0 bytes inside a block of size 16 free'd
==16957== at 0x4C2AD17: free (in /usr/lib64/valgrind
/vgpreload_memcheck-amd64-linux.so)
==16957== by 0x6B1064: av_packet_free_side_data (avpacket.c:276)
==16957== by 0x6B1064: av_free_packet (avpacket.c:295)
==16957== by 0x66338D: filter_packet (tee.c:412)
==16957== by 0x66338D: tee_write_packet (tee.c:484)
==16957== by 0x5FBD89: write_packet (mux.c:660)
==16957== by 0x5FBD89: av_interleaved_write_frame (mux.c:970)
==16957== by 0x48AC8F: write_frame (ffmpeg.c:787)
==16957== by 0x4907DC: do_audio_out (ffmpeg.c:865)
==16957== by 0x4907DC: reap_filters (ffmpeg.c:1398)
==16957== by 0x4731E5: transcode_step (ffmpeg.c:3939)
==16957== by 0x4731E5: transcode (ffmpeg.c:3982)
==16957== by 0x4731E5: main (ffmpeg.c:4165)
==16957==
==16957== Invalid write of size 8
==16957== at 0xE1CDB6: av_freep (mem.c:248)
==16957== by 0x6B1053: av_packet_free_side_data (avpacket.c:275)
==16957== by 0x6B1053: av_free_packet (avpacket.c:295)
==16957== by 0x5FBAF3: av_interleaved_write_frame (mux.c:974)
==16957== by 0x6635E4: tee_write_packet (tee.c:485)
==16957== by 0x5FBD89: write_packet (mux.c:660)
==16957== by 0x5FBD89: av_interleaved_write_frame (mux.c:970)
==16957== by 0x48AC8F: write_frame (ffmpeg.c:787)
==16957== by 0x4907DC: do_audio_out (ffmpeg.c:865)
==16957== by 0x4907DC: reap_filters (ffmpeg.c:1398)
==16957== by 0x4731E5: transcode_step (ffmpeg.c:3939)
==16957== by 0x4731E5: transcode (ffmpeg.c:3982)
==16957== by 0x4731E5: main (ffmpeg.c:4165)
==16957== Address 0x6c806bc0 is 0 bytes inside a block of size 16 free'd
==16957== at 0x4C2AD17: free (in /usr/lib64/valgrind
/vgpreload_memcheck-amd64-linux.so)
==16957== by 0x6B1064: av_packet_free_side_data (avpacket.c:276)
==16957== by 0x6B1064: av_free_packet (avpacket.c:295)
==16957== by 0x66338D: filter_packet (tee.c:412)
==16957== by 0x66338D: tee_write_packet (tee.c:484)
==16957== by 0x5FBD89: write_packet (mux.c:660)
==16957== by 0x5FBD89: av_interleaved_write_frame (mux.c:970)
==16957== by 0x48AC8F: write_frame (ffmpeg.c:787)
==16957== by 0x4907DC: do_audio_out (ffmpeg.c:865)
==16957== by 0x4907DC: reap_filters (ffmpeg.c:1398)
==16957== by 0x4731E5: transcode_step (ffmpeg.c:3939)
==16957== by 0x4731E5: transcode (ffmpeg.c:3982)
==16957== by 0x4731E5: main (ffmpeg.c:4165)
==16957==
==16957== Invalid free() / delete / delete[] / realloc()
==16957== at 0x4C2AD17: free (in /usr/lib64/valgrind
/vgpreload_memcheck-amd64-linux.so)
==16957== by 0x6B1064: av_packet_free_side_data (avpacket.c:276)
==16957== by 0x6B1064: av_free_packet (avpacket.c:295)
==16957== by 0x5FBAF3: av_interleaved_write_frame (mux.c:974)
==16957== by 0x6635E4: tee_write_packet (tee.c:485)
==16957== by 0x5FBD89: write_packet (mux.c:660)
==16957== by 0x5FBD89: av_interleaved_write_frame (mux.c:970)
==16957== by 0x48AC8F: write_frame (ffmpeg.c:787)
==16957== by 0x4907DC: do_audio_out (ffmpeg.c:865)
==16957== by 0x4907DC: reap_filters (ffmpeg.c:1398)
==16957== by 0x4731E5: transcode_step (ffmpeg.c:3939)
==16957== by 0x4731E5: transcode (ffmpeg.c:3982)
==16957== by 0x4731E5: main (ffmpeg.c:4165)
==16957== Address 0x6c806bc0 is 0 bytes inside a block of size 16 free'd
==16957== at 0x4C2AD17: free (in /usr/lib64/valgrind
/vgpreload_memcheck-amd64-linux.so)
==16957== by 0x6B1064: av_packet_free_side_data (avpacket.c:276)
==16957== by 0x6B1064: av_free_packet (avpacket.c:295)
==16957== by 0x66338D: filter_packet (tee.c:412)
==16957== by 0x66338D: tee_write_packet (tee.c:484)
==16957== by 0x5FBD89: write_packet (mux.c:660)
==16957== by 0x5FBD89: av_interleaved_write_frame (mux.c:970)
==16957== by 0x48AC8F: write_frame (ffmpeg.c:787)
==16957== by 0x4907DC: do_audio_out (ffmpeg.c:865)
==16957== by 0x4907DC: reap_filters (ffmpeg.c:1398)
==16957== by 0x4731E5: transcode_step (ffmpeg.c:3939)
==16957== by 0x4731E5: transcode (ffmpeg.c:3982)
==16957== by 0x4731E5: main (ffmpeg.c:4165)
==16957==
==16957== Invalid read of size 8/A time=00:00:18.88 bitrate=N/A
==16957== at 0xE1CDB3: av_freep (mem.c:247)
==16957== by 0x6B1053: av_packet_free_side_data (avpacket.c:275)
==16957== by 0x6B1053: av_free_packet (avpacket.c:295)
==16957== by 0x5FC2E3: av_write_trailer (mux.c:1002)
==16957== by 0x6641CA: tee_write_trailer (tee.c:441)
==16957== by 0x5FC314: av_write_trailer (mux.c:1013)
==16957== by 0x473EE9: transcode (ffmpeg.c:4016)
==16957== by 0x473EE9: main (ffmpeg.c:4165)
==16957== Address 0x6a20540 is 0 bytes inside a block of size 16 free'd
==16957== at 0x4C2AD17: free (in /usr/lib64/valgrind
/vgpreload_memcheck-amd64-linux.so)
==16957== by 0x6B1064: av_packet_free_side_data (avpacket.c:276)
==16957== by 0x6B1064: av_free_packet (avpacket.c:295)
==16957== by 0x66338D: filter_packet (tee.c:412)
==16957== by 0x66338D: tee_write_packet (tee.c:484)
==16957== by 0x5FC43E: write_packet (mux.c:660)
==16957== by 0x5FC43E: av_write_trailer (mux.c:998)
==16957== by 0x473EE9: transcode (ffmpeg.c:4016)
==16957== by 0x473EE9: main (ffmpeg.c:4165)
==16957==
==16957== Invalid write of size 8
==16957== at 0xE1CDB6: av_freep (mem.c:248)
==16957== by 0x6B1053: av_packet_free_side_data (avpacket.c:275)
==16957== by 0x6B1053: av_free_packet (avpacket.c:295)
==16957== by 0x5FC2E3: av_write_trailer (mux.c:1002)
==16957== by 0x6641CA: tee_write_trailer (tee.c:441)
==16957== by 0x5FC314: av_write_trailer (mux.c:1013)
==16957== by 0x473EE9: transcode (ffmpeg.c:4016)
==16957== by 0x473EE9: main (ffmpeg.c:4165)
==16957== Address 0x6a20540 is 0 bytes inside a block of size 16 free'd
==16957== at 0x4C2AD17: free (in /usr/lib64/valgrind
/vgpreload_memcheck-amd64-linux.so)
==16957== by 0x6B1064: av_packet_free_side_data (avpacket.c:276)
==16957== by 0x6B1064: av_free_packet (avpacket.c:295)
==16957== by 0x66338D: filter_packet (tee.c:412)
==16957== by 0x66338D: tee_write_packet (tee.c:484)
==16957== by 0x5FC43E: write_packet (mux.c:660)
==16957== by 0x5FC43E: av_write_trailer (mux.c:998)
==16957== by 0x473EE9: transcode (ffmpeg.c:4016)
==16957== by 0x473EE9: main (ffmpeg.c:4165)
==16957==
==16957== Invalid free() / delete / delete[] / realloc()
==16957== at 0x4C2AD17: free (in /usr/lib64/valgrind
/vgpreload_memcheck-amd64-linux.so)
==16957== by 0x6B1064: av_packet_free_side_data (avpacket.c:276)
==16957== by 0x6B1064: av_free_packet (avpacket.c:295)
==16957== by 0x5FC2E3: av_write_trailer (mux.c:1002)
==16957== by 0x6641CA: tee_write_trailer (tee.c:441)
==16957== by 0x5FC314: av_write_trailer (mux.c:1013)
==16957== by 0x473EE9: transcode (ffmpeg.c:4016)
==16957== by 0x473EE9: main (ffmpeg.c:4165)
==16957== Address 0x6a20540 is 0 bytes inside a block of size 16 free'd
==16957== at 0x4C2AD17: free (in /usr/lib64/valgrind
/vgpreload_memcheck-amd64-linux.so)
==16957== by 0x6B1064: av_packet_free_side_data (avpacket.c:276)
==16957== by 0x6B1064: av_free_packet (avpacket.c:295)
==16957== by 0x66338D: filter_packet (tee.c:412)
==16957== by 0x66338D: tee_write_packet (tee.c:484)
==16957== by 0x5FC43E: write_packet (mux.c:660)
==16957== by 0x5FC43E: av_write_trailer (mux.c:998)
==16957== by 0x473EE9: transcode (ffmpeg.c:4016)
==16957== by 0x473EE9: main (ffmpeg.c:4165)
==16957==
.
.
.
.
==16957==
==16957== HEAP SUMMARY:
==16957== in use at exit: 40 bytes in 1 blocks
==16957== total heap usage: 47,498 allocs, 47,520 frees, 209,569,602
bytes allocated
==16957==
==16957== LEAK SUMMARY:
==16957== definitely lost: 0 bytes in 0 blocks
==16957== indirectly lost: 0 bytes in 0 blocks
==16957== possibly lost: 0 bytes in 0 blocks
==16957== still reachable: 40 bytes in 1 blocks
==16957== suppressed: 0 bytes in 0 blocks
==16957== Rerun with --leak-check=full to see details of leaked memory
==16957==
--
Ticket URL: <https://trac.ffmpeg.org/ticket/4921#comment:2>
FFmpeg <https://ffmpeg.org>
FFmpeg issue tracker
More information about the FFmpeg-trac
mailing list