[FFmpeg-trac] #9123(ffmpeg:new): segmentation fault when extracting frames from the video

[FFmpeg]

#9123: segmentation fault when extracting frames from the video
--------------------------------+--------------------------------------
             Reporter:  bird    |                     Type:  defect
               Status:  new     |                 Priority:  normal
            Component:  ffmpeg  |                  Version:  git-master
             Keywords:          |               Blocked By:
             Blocking:          |  Reproduced by developer:  0
Analyzed by developer:  0       |
--------------------------------+--------------------------------------
 Summary of the bug:
 There is a segmentation fault when extracting frames from the video.
 How to reproduce:
 {{{
 $ ./ffmpeg_g -ss 0 -i ./4 -s 320x240 -y -f image2 output.jpeg
 ffmpeg version N-101261-g78d5e1c653 Copyright (c) 2000-2021 the FFmpeg
 developers
   built with clang version 6.0.0-1ubuntu2 (tags/RELEASE_600/final)
   configuration: --prefix=/home/bird/ffmpeg_build_new --pkg-config-
 flags=--static --extra-cflags='-I/home/bird/ffmpeg_build_new/include -fno-
 omit-frame-pointer -g -fsanitize=address' --extra-cxxflags='-fno-omit-
 frame-pointer -g -fsanitize=address' --extra-
 ldflags='-L/home/bird/ffmpeg_build_new/lib -fsanitize=address' --extra-
 libs='-lpthread -lm' --bindir=/home/bird/bin_new --enable-gpl --enable-
 gnutls --enable-libass --enable-libfdk-aac --enable-libfreetype --enable-
 libmp3lame --enable-libopus --enable-libvpx --enable-libx264 --enable-
 libx265 --enable-nonfree --cc=clang --cxx=clang++ --enable-debug
   libavutil      56. 66.100 / 56. 66.100
   libavcodec     58.125.100 / 58.125.100
   libavformat    58. 68.100 / 58. 68.100
   libavdevice    58. 12.100 / 58. 12.100
   libavfilter     7.107.100 /  7.107.100
   libswscale      5.  8.100 /  5.  8.100
   libswresample   3.  8.100 /  3.  8.100
   libpostproc    55.  8.100 / 55.  8.100
 [dss @ 0x61b000000080] Estimating duration from bitrate, this may be
 inaccurate
 AddressSanitizer:DEADLYSIGNAL
 =================================================================
 ==16161==ERROR: AddressSanitizer: SEGV on unknown address 0x606f8e8e8f50
 (pc 0x7f0a6ac75476 bp 0x7ffde5743fc0 sp 0x7ffde5743748 T0)
 ==16161==The signal is caused by a WRITE memory access.
     #0 0x7f0a6ac75475  /build/glibc-
 S9d2JN/glibc-2.27/string/../sysdeps/x86_64/multiarch/memmove-vec-
 unaligned-erms.S:410
     #1 0x4e1f2d in __asan_memcpy
 (/disk1/fuzzing/ffmpeg_latest/ffmpeg_g+0x4e1f2d)
     #2 0xdebec6 in avio_read
 /disk1/fuzzing/ffmpeg_latest/libavformat/aviobuf.c:673:13
     #3 0xe2e91a in dss_723_1_read_packet
 /disk1/fuzzing/ffmpeg_latest/libavformat/dss.c:308:11
     #4 0xe2e91a in dss_read_packet
 /disk1/fuzzing/ffmpeg_latest/libavformat/dss.c:323
     #5 0x1136aa1 in ff_read_packet
 /disk1/fuzzing/ffmpeg_latest/libavformat/utils.c:823:15
     #6 0x113be26 in read_frame_internal
 /disk1/fuzzing/ffmpeg_latest/libavformat/utils.c:1526:15
     #7 0x113b14c in av_read_frame
 /disk1/fuzzing/ffmpeg_latest/libavformat/utils.c:1730:17
     #8 0x1142e4a in seek_frame_generic
 /disk1/fuzzing/ffmpeg_latest/libavformat/utils.c:2388:31
     #9 0x1142e4a in seek_frame_internal
 /disk1/fuzzing/ffmpeg_latest/libavformat/utils.c:2461
     #10 0x1142e4a in av_seek_frame
 /disk1/fuzzing/ffmpeg_latest/libavformat/utils.c:2481
     #11 0x11439ff in avformat_seek_file
 /disk1/fuzzing/ffmpeg_latest/libavformat/utils.c:2533:19
     #12 0x51dd2d in open_input_file
 /disk1/fuzzing/ffmpeg_latest/fftools/ffmpeg_opt.c:1252:15
     #13 0x51c42a in open_files
 /disk1/fuzzing/ffmpeg_latest/fftools/ffmpeg_opt.c:3335:15
     #14 0x51be55 in ffmpeg_parse_options
 /disk1/fuzzing/ffmpeg_latest/fftools/ffmpeg_opt.c:3375:11
     #15 0x55ba9f in main
 /disk1/fuzzing/ffmpeg_latest/fftools/ffmpeg.c:4964:11
     #16 0x7f0a6abdbbf6 in __libc_start_main /build/glibc-
 S9d2JN/glibc-2.27/csu/../csu/libc-start.c:310
     #17 0x423609 in _start
 (/disk1/fuzzing/ffmpeg_latest/ffmpeg_g+0x423609)

 AddressSanitizer can not provide additional info.
 SUMMARY: AddressSanitizer: SEGV /build/glibc-
 S9d2JN/glibc-2.27/string/../sysdeps/x86_64/multiarch/memmove-vec-
 unaligned-erms.S:410
 }}}

--
Ticket URL: <https://trac.ffmpeg.org/ticket/9123>
FFmpeg <https://ffmpeg.org>
FFmpeg issue tracker