[FFmpeg-trac] #4921(avformat:new): double free or corruption error using tee pseudo muxer with hls and flv

FFmpeg trac at avcodec.org
Fri Oct 9 21:14:08 CEST 2015


#4921: double free or corruption error using tee pseudo muxer with hls and flv
-------------------------------------+------------------------------------
             Reporter:  doubleb      |                    Owner:
                 Type:  defect       |                   Status:  new
             Priority:  normal       |                Component:  avformat
              Version:  unspecified  |               Resolution:
             Keywords:  tee          |               Blocked By:
             Blocking:               |  Reproduced by developer:  0
Analyzed by developer:  0            |
-------------------------------------+------------------------------------

Comment (by doubleb):

 valgrind output
 .
 .
 .
 .
 ==16957== Invalid read of size 8/A time=00:00:00.00 bitrate=N/A
 ==16957==    at 0xE1CDB3: av_freep (mem.c:247)
 ==16957==    by 0x6B1053: av_packet_free_side_data (avpacket.c:275)
 ==16957==    by 0x6B1053: av_free_packet (avpacket.c:295)
 ==16957==    by 0x5FBAF3: av_interleaved_write_frame (mux.c:974)
 ==16957==    by 0x6635E4: tee_write_packet (tee.c:485)
 ==16957==    by 0x5FBD89: write_packet (mux.c:660)
 ==16957==    by 0x5FBD89: av_interleaved_write_frame (mux.c:970)
 ==16957==    by 0x48AC8F: write_frame (ffmpeg.c:787)
 ==16957==    by 0x4907DC: do_audio_out (ffmpeg.c:865)
 ==16957==    by 0x4907DC: reap_filters (ffmpeg.c:1398)
 ==16957==    by 0x4731E5: transcode_step (ffmpeg.c:3939)
 ==16957==    by 0x4731E5: transcode (ffmpeg.c:3982)
 ==16957==    by 0x4731E5: main (ffmpeg.c:4165)
 ==16957==  Address 0x6c806bc0 is 0 bytes inside a block of size 16 free'd
 ==16957==    at 0x4C2AD17: free (in /usr/lib64/valgrind
 /vgpreload_memcheck-amd64-linux.so)
 ==16957==    by 0x6B1064: av_packet_free_side_data (avpacket.c:276)
 ==16957==    by 0x6B1064: av_free_packet (avpacket.c:295)
 ==16957==    by 0x66338D: filter_packet (tee.c:412)
 ==16957==    by 0x66338D: tee_write_packet (tee.c:484)
 ==16957==    by 0x5FBD89: write_packet (mux.c:660)
 ==16957==    by 0x5FBD89: av_interleaved_write_frame (mux.c:970)
 ==16957==    by 0x48AC8F: write_frame (ffmpeg.c:787)
 ==16957==    by 0x4907DC: do_audio_out (ffmpeg.c:865)
 ==16957==    by 0x4907DC: reap_filters (ffmpeg.c:1398)
 ==16957==    by 0x4731E5: transcode_step (ffmpeg.c:3939)
 ==16957==    by 0x4731E5: transcode (ffmpeg.c:3982)
 ==16957==    by 0x4731E5: main (ffmpeg.c:4165)
 ==16957==
 ==16957== Invalid write of size 8
 ==16957==    at 0xE1CDB6: av_freep (mem.c:248)
 ==16957==    by 0x6B1053: av_packet_free_side_data (avpacket.c:275)
 ==16957==    by 0x6B1053: av_free_packet (avpacket.c:295)
 ==16957==    by 0x5FBAF3: av_interleaved_write_frame (mux.c:974)
 ==16957==    by 0x6635E4: tee_write_packet (tee.c:485)
 ==16957==    by 0x5FBD89: write_packet (mux.c:660)
 ==16957==    by 0x5FBD89: av_interleaved_write_frame (mux.c:970)
 ==16957==    by 0x48AC8F: write_frame (ffmpeg.c:787)
 ==16957==    by 0x4907DC: do_audio_out (ffmpeg.c:865)
 ==16957==    by 0x4907DC: reap_filters (ffmpeg.c:1398)
 ==16957==    by 0x4731E5: transcode_step (ffmpeg.c:3939)
 ==16957==    by 0x4731E5: transcode (ffmpeg.c:3982)
 ==16957==    by 0x4731E5: main (ffmpeg.c:4165)
 ==16957==  Address 0x6c806bc0 is 0 bytes inside a block of size 16 free'd
 ==16957==    at 0x4C2AD17: free (in /usr/lib64/valgrind
 /vgpreload_memcheck-amd64-linux.so)
 ==16957==    by 0x6B1064: av_packet_free_side_data (avpacket.c:276)
 ==16957==    by 0x6B1064: av_free_packet (avpacket.c:295)
 ==16957==    by 0x66338D: filter_packet (tee.c:412)
 ==16957==    by 0x66338D: tee_write_packet (tee.c:484)
 ==16957==    by 0x5FBD89: write_packet (mux.c:660)
 ==16957==    by 0x5FBD89: av_interleaved_write_frame (mux.c:970)
 ==16957==    by 0x48AC8F: write_frame (ffmpeg.c:787)
 ==16957==    by 0x4907DC: do_audio_out (ffmpeg.c:865)
 ==16957==    by 0x4907DC: reap_filters (ffmpeg.c:1398)
 ==16957==    by 0x4731E5: transcode_step (ffmpeg.c:3939)
 ==16957==    by 0x4731E5: transcode (ffmpeg.c:3982)
 ==16957==    by 0x4731E5: main (ffmpeg.c:4165)
 ==16957==
 ==16957== Invalid free() / delete / delete[] / realloc()
 ==16957==    at 0x4C2AD17: free (in /usr/lib64/valgrind
 /vgpreload_memcheck-amd64-linux.so)
 ==16957==    by 0x6B1064: av_packet_free_side_data (avpacket.c:276)
 ==16957==    by 0x6B1064: av_free_packet (avpacket.c:295)
 ==16957==    by 0x5FBAF3: av_interleaved_write_frame (mux.c:974)
 ==16957==    by 0x6635E4: tee_write_packet (tee.c:485)
 ==16957==    by 0x5FBD89: write_packet (mux.c:660)
 ==16957==    by 0x5FBD89: av_interleaved_write_frame (mux.c:970)
 ==16957==    by 0x48AC8F: write_frame (ffmpeg.c:787)
 ==16957==    by 0x4907DC: do_audio_out (ffmpeg.c:865)
 ==16957==    by 0x4907DC: reap_filters (ffmpeg.c:1398)
 ==16957==    by 0x4731E5: transcode_step (ffmpeg.c:3939)
 ==16957==    by 0x4731E5: transcode (ffmpeg.c:3982)
 ==16957==    by 0x4731E5: main (ffmpeg.c:4165)
 ==16957==  Address 0x6c806bc0 is 0 bytes inside a block of size 16 free'd
 ==16957==    at 0x4C2AD17: free (in /usr/lib64/valgrind
 /vgpreload_memcheck-amd64-linux.so)
 ==16957==    by 0x6B1064: av_packet_free_side_data (avpacket.c:276)
 ==16957==    by 0x6B1064: av_free_packet (avpacket.c:295)
 ==16957==    by 0x66338D: filter_packet (tee.c:412)
 ==16957==    by 0x66338D: tee_write_packet (tee.c:484)
 ==16957==    by 0x5FBD89: write_packet (mux.c:660)
 ==16957==    by 0x5FBD89: av_interleaved_write_frame (mux.c:970)
 ==16957==    by 0x48AC8F: write_frame (ffmpeg.c:787)
 ==16957==    by 0x4907DC: do_audio_out (ffmpeg.c:865)
 ==16957==    by 0x4907DC: reap_filters (ffmpeg.c:1398)
 ==16957==    by 0x4731E5: transcode_step (ffmpeg.c:3939)
 ==16957==    by 0x4731E5: transcode (ffmpeg.c:3982)
 ==16957==    by 0x4731E5: main (ffmpeg.c:4165)
 ==16957==
 ==16957== Invalid read of size 8/A time=00:00:18.88 bitrate=N/A
 ==16957==    at 0xE1CDB3: av_freep (mem.c:247)
 ==16957==    by 0x6B1053: av_packet_free_side_data (avpacket.c:275)
 ==16957==    by 0x6B1053: av_free_packet (avpacket.c:295)
 ==16957==    by 0x5FC2E3: av_write_trailer (mux.c:1002)
 ==16957==    by 0x6641CA: tee_write_trailer (tee.c:441)
 ==16957==    by 0x5FC314: av_write_trailer (mux.c:1013)
 ==16957==    by 0x473EE9: transcode (ffmpeg.c:4016)
 ==16957==    by 0x473EE9: main (ffmpeg.c:4165)
 ==16957==  Address 0x6a20540 is 0 bytes inside a block of size 16 free'd
 ==16957==    at 0x4C2AD17: free (in /usr/lib64/valgrind
 /vgpreload_memcheck-amd64-linux.so)
 ==16957==    by 0x6B1064: av_packet_free_side_data (avpacket.c:276)
 ==16957==    by 0x6B1064: av_free_packet (avpacket.c:295)
 ==16957==    by 0x66338D: filter_packet (tee.c:412)
 ==16957==    by 0x66338D: tee_write_packet (tee.c:484)
 ==16957==    by 0x5FC43E: write_packet (mux.c:660)
 ==16957==    by 0x5FC43E: av_write_trailer (mux.c:998)
 ==16957==    by 0x473EE9: transcode (ffmpeg.c:4016)
 ==16957==    by 0x473EE9: main (ffmpeg.c:4165)
 ==16957==
 ==16957== Invalid write of size 8
 ==16957==    at 0xE1CDB6: av_freep (mem.c:248)
 ==16957==    by 0x6B1053: av_packet_free_side_data (avpacket.c:275)
 ==16957==    by 0x6B1053: av_free_packet (avpacket.c:295)
 ==16957==    by 0x5FC2E3: av_write_trailer (mux.c:1002)
 ==16957==    by 0x6641CA: tee_write_trailer (tee.c:441)
 ==16957==    by 0x5FC314: av_write_trailer (mux.c:1013)
 ==16957==    by 0x473EE9: transcode (ffmpeg.c:4016)
 ==16957==    by 0x473EE9: main (ffmpeg.c:4165)
 ==16957==  Address 0x6a20540 is 0 bytes inside a block of size 16 free'd
 ==16957==    at 0x4C2AD17: free (in /usr/lib64/valgrind
 /vgpreload_memcheck-amd64-linux.so)
 ==16957==    by 0x6B1064: av_packet_free_side_data (avpacket.c:276)
 ==16957==    by 0x6B1064: av_free_packet (avpacket.c:295)
 ==16957==    by 0x66338D: filter_packet (tee.c:412)
 ==16957==    by 0x66338D: tee_write_packet (tee.c:484)
 ==16957==    by 0x5FC43E: write_packet (mux.c:660)
 ==16957==    by 0x5FC43E: av_write_trailer (mux.c:998)
 ==16957==    by 0x473EE9: transcode (ffmpeg.c:4016)
 ==16957==    by 0x473EE9: main (ffmpeg.c:4165)
 ==16957==
 ==16957== Invalid free() / delete / delete[] / realloc()
 ==16957==    at 0x4C2AD17: free (in /usr/lib64/valgrind
 /vgpreload_memcheck-amd64-linux.so)
 ==16957==    by 0x6B1064: av_packet_free_side_data (avpacket.c:276)
 ==16957==    by 0x6B1064: av_free_packet (avpacket.c:295)
 ==16957==    by 0x5FC2E3: av_write_trailer (mux.c:1002)
 ==16957==    by 0x6641CA: tee_write_trailer (tee.c:441)
 ==16957==    by 0x5FC314: av_write_trailer (mux.c:1013)
 ==16957==    by 0x473EE9: transcode (ffmpeg.c:4016)
 ==16957==    by 0x473EE9: main (ffmpeg.c:4165)
 ==16957==  Address 0x6a20540 is 0 bytes inside a block of size 16 free'd
 ==16957==    at 0x4C2AD17: free (in /usr/lib64/valgrind
 /vgpreload_memcheck-amd64-linux.so)
 ==16957==    by 0x6B1064: av_packet_free_side_data (avpacket.c:276)
 ==16957==    by 0x6B1064: av_free_packet (avpacket.c:295)
 ==16957==    by 0x66338D: filter_packet (tee.c:412)
 ==16957==    by 0x66338D: tee_write_packet (tee.c:484)
 ==16957==    by 0x5FC43E: write_packet (mux.c:660)
 ==16957==    by 0x5FC43E: av_write_trailer (mux.c:998)
 ==16957==    by 0x473EE9: transcode (ffmpeg.c:4016)
 ==16957==    by 0x473EE9: main (ffmpeg.c:4165)
 ==16957==
 .
 .
 .
 .

 ==16957==
 ==16957== HEAP SUMMARY:
 ==16957==     in use at exit: 40 bytes in 1 blocks
 ==16957==   total heap usage: 47,498 allocs, 47,520 frees, 209,569,602
 bytes allocated
 ==16957==
 ==16957== LEAK SUMMARY:
 ==16957==    definitely lost: 0 bytes in 0 blocks
 ==16957==    indirectly lost: 0 bytes in 0 blocks
 ==16957==      possibly lost: 0 bytes in 0 blocks
 ==16957==    still reachable: 40 bytes in 1 blocks
 ==16957==         suppressed: 0 bytes in 0 blocks
 ==16957== Rerun with --leak-check=full to see details of leaked memory
 ==16957==

--
Ticket URL: <https://trac.ffmpeg.org/ticket/4921#comment:2>
FFmpeg <https://ffmpeg.org>
FFmpeg issue tracker


More information about the FFmpeg-trac mailing list