[FFmpeg-trac] #2093(avcodec:open): ffplay: crash when seeking with the mouse

FFmpeg trac at avcodec.org
Thu Aug 1 12:11:26 CEST 2013


#2093: ffplay: crash when seeking with the mouse
-------------------------------------+-------------------------------------
             Reporter:  ami_stuff    |                    Owner:
                 Type:  defect       |                   Status:  open
             Priority:  important    |                Component:  avcodec
              Version:  git-master   |               Resolution:
             Keywords:  crash        |               Blocked By:
  SIGSEGV leak                       |  Reproduced by developer:  1
             Blocking:               |
Analyzed by developer:  0            |
-------------------------------------+-------------------------------------
Changes (by cehoyos):

 * status:  new => open
 * reproduced:  0 => 1


Comment:

 Needs -vst 3 now
 {{{
 (gdb) r problem.rm -vst 3
 Starting program: ffplay_g problem.rm -vst 3
 [Thread debugging using libthread_db enabled]
 Using host libthread_db library "/lib64/libthread_db.so.1".
 ffplay version N-55127-g11ace70 Copyright (c) 2003-2013 the FFmpeg
 developers
   built on Aug  1 2013 11:54:27 with gcc 4.7 (SUSE Linux)
   configuration: --disable-pthreads
   libavutil      52. 40.100 / 52. 40.100
   libavcodec     55. 19.100 / 55. 19.100
   libavformat    55. 12.102 / 55. 12.102
   libavdevice    55.  3.100 / 55.  3.100
   libavfilter     3. 82.100 /  3. 82.100
   libswscale      2.  4.100 /  2.  4.100
   libswresample   0. 17.103 /  0. 17.103
 [New Thread 0x7ffff528a700 (LWP 26487)]
 [New Thread 0x7ffff4167700 (LWP 26488)]
 [New Thread 0x7ffff3865700 (LWP 26489)]
 [rm @ 0x7fffec000920] Unsupported stream type 000003a4   0B f=0/0
 [rm @ 0x7fffec000920] Unsupported stream type 00000292
 [rv40 @ 0x7fffec002d20] Warning: not compiled with thread support, using
 thread emulation
 [rv40 @ 0x7fffec003680] Warning: not compiled with thread support, using
 thread emulation
 [rv40 @ 0x7fffec003fe0] Warning: not compiled with thread support, using
 thread emulation
 [rv40 @ 0x7fffec004940] Warning: not compiled with thread support, using
 thread emulation
 [cook @ 0x7fffec0052a0] Warning: not compiled with thread support, using
 thread emulation
 [cook @ 0x7fffec0062e0] Warning: not compiled with thread support, using
 thread emulation
 [cook @ 0x7fffec007560] Warning: not compiled with thread support, using
 thread emulation
 [rv40 @ 0x7fffec007e00] Warning: not compiled with thread support, using
 thread emulation
 Truncating packet of size 542777353 to 8156342
 [rm @ 0x7fffec000920] Impossibly sized packet
 [rm @ 0x7fffec000920] Could not find codec parameters for stream 2 (Video:
 rv40 (RV40 / 0x30345652), yuv420p, 360x288, 10 kb/s): no frame in rv30/40
 and no sar
 Consider increasing the value for the 'analyzeduration' and 'probesize'
 options
 [rm @ 0x7fffec000920] Could not find codec parameters for stream 3 (Video:
 rv40 (RV40 / 0x30345652), yuv420p, 360x288, 12 kb/s): no frame in rv30/40
 and no sar
 Consider increasing the value for the 'analyzeduration' and 'probesize'
 options
 [rm @ 0x7fffec000920] Could not find codec parameters for stream 4 (Video:
 rv40 (RV40 / 0x30345652), yuv420p, 360x288, 26 kb/s): no frame in rv30/40
 and no sar
 Consider increasing the value for the 'analyzeduration' and 'probesize'
 options
 [rm @ 0x7fffec000920] Could not find codec parameters for stream 5 (Video:
 rv40 (RV40 / 0x30345652), yuv420p, 360x288, 180 kb/s): no frame in rv30/40
 and no sar
 Consider increasing the value for the 'analyzeduration' and 'probesize'
 options
 [rm @ 0x7fffec000920] Could not find codec parameters for stream 9 (Video:
 rv40 (RV40 / 0x30345652), yuv420p, 360x288, 10 kb/s): no frame in rv30/40
 and no sar
 Consider increasing the value for the 'analyzeduration' and 'probesize'
 options
 Input #0, rm, from 'problem.rm':
   Metadata:
     Audiences       : 16k Substream for 28k Dial-up;28k Dial-up;56k Dial-
 up;256k DSL or Cable;
     audioMode       : music
     Creation Date   : 4/30/2005 11:23:03
     Generated By    : RealProducer(R) Plus 10.0 for Windows, Build
 10.0.0.545
     Modification Date: 4/30/2005 11:29:42
     videoMode       : normal
     ASMRuleBook     : #($Bandwidth < 20000),Stream7Bandwidth = 10000,
 Stream8Bandwidth = 6000;#($Bandwidth >= 20000) && ($Bandwidth <
 34000),Stream7B
     title           :
     author          :
     copyright       : (C) 2004
     comment         :
   Duration: 00:03:43.49, start: 0.000000, bitrate: 292 kb/s
     Stream #0:0: Data: none, 180 kb/s
     Stream #0:1: Data: none, 44 kb/s
     Stream #0:2: Video: rv40 (RV40 / 0x30345652), yuv420p, 360x288, 10
 kb/s, 15 fps, 15 tbr, 1k tbn, 1k tbc
     Stream #0:3: Video: rv40 (RV40 / 0x30345652), yuv420p, 360x288, 12
 kb/s, 15 fps, 15 tbr, 1k tbn, 1k tbc
     Stream #0:4: Video: rv40 (RV40 / 0x30345652), yuv420p, 360x288, 26
 kb/s, 15 fps, 15 tbr, 1k tbn, 1k tbc
     Stream #0:5: Video: rv40 (RV40 / 0x30345652), yuv420p, 360x288, 180
 kb/s, 25 fps, 25 tbr, 1k tbn, 1k tbc
     Stream #0:6: Audio: cook (cook / 0x6B6F6F63), 8000 Hz, mono, fltp, 6
 kb/s
     Stream #0:7: Audio: cook (cook / 0x6B6F6F63), 8000 Hz, mono, fltp, 8
 kb/s
     Stream #0:8: Audio: cook (cook / 0x6B6F6F63), 44100 Hz, stereo, fltp,
 44 kb/s
     Stream #0:9: Video: rv40 (RV40 / 0x30345652), yuv420p, 360x288, 10
 kb/s, 15 fps, 15 tbr, 1k tbn, 1k tbc
 [cook @ 0x7fffec007560] Warning: not compiled with thread support, using
 thread emulation
 [New Thread 0x7ffff3064700 (LWP 26490)]
 [rv40 @ 0x7fffec003680] Warning: not compiled with thread support, using
 thread emulation
 [New Thread 0x7ffff2863700 (LWP 26491)]

 ...

 Program received signal SIGSEGV, Segmentation fault.
 [Switching to Thread 0x7ffff2863700 (LWP 26468)]
 0x0000000000aacd94 in ff_er_frame_end (s=s at entry=0x7fffec048300)
     at libavcodec/error_resilience.c:1190
 1190                           dc += dest_y[x + (n & 1) * 8 +
 (gdb) bt
 #0  0x0000000000aacd94 in ff_er_frame_end (s=s at entry=0x7fffec048300) at
 libavcodec/error_resilience.c:1190
 #1  0x0000000000916ee2 in ff_rv34_decode_frame (avctx=0x7fffec003680,
 data=0x7fffe80008c0, got_picture_ptr=0x7ffff2862c04, avpkt=0x7ffff2862ac0)
 at libavcodec/rv34.c:1671
 #2  0x000000000098adbc in avcodec_decode_video2 (avctx=0x7fffec003680,
 picture=picture at entry=0x7fffe80008c0,
 got_picture_ptr=got_picture_ptr at entry=0x7ffff2862c04,
 avpkt=avpkt at entry=0x7ffff2862c50) at libavcodec/utils.c:1975
 #3  0x00000000004621d6 in get_video_frame (serial=0x7ffff2862c00,
 pkt=0x7ffff2862c50, frame=0x7fffe80008c0, is=0x7ffff3866040) at
 ffplay.c:1671
 #4  video_thread (arg=0x7ffff3866040) at ffplay.c:1905
 #5  0x00007ffff6cc6e96 in ?? () from /usr/lib64/libSDL-1.2.so.0
 #6  0x00007ffff6d09cd9 in ?? () from /usr/lib64/libSDL-1.2.so.0
 #7  0x00007ffff6aa0e0e in start_thread () from /lib64/libpthread.so.0
 #8  0x00007ffff5eb42cd in clone () from /lib64/libc.so.6
 (gdb) disass $pc-32,$pc+32
 Dump of assembler code from 0xaacd74 to 0xaacdb4:
    0x0000000000aacd74 <ff_er_frame_end+3924>:   lea    0x1(%rdx),%ebx
    0x0000000000aacd77 <ff_er_frame_end+3927>:   lea    0x2(%rdx),%r10d
    0x0000000000aacd7b <ff_er_frame_end+3931>:   lea    0x3(%rdx),%r9d
    0x0000000000aacd7f <ff_er_frame_end+3935>:   lea    0x4(%rdx),%r8d
    0x0000000000aacd83 <ff_er_frame_end+3939>:   lea    0x5(%rdx),%edi
    0x0000000000aacd86 <ff_er_frame_end+3942>:   lea    0x6(%rdx),%esi
    0x0000000000aacd89 <ff_er_frame_end+3945>:   lea    0x7(%rdx),%ecx
    0x0000000000aacd8c <ff_er_frame_end+3948>:   lea
 0x0(%rbp,%r11,1),%r14d
    0x0000000000aacd91 <ff_er_frame_end+3953>:   movslq %r14d,%r14
 => 0x0000000000aacd94 <ff_er_frame_end+3956>:   movzbl (%rax,%r14,1),%r15d
    0x0000000000aacd99 <ff_er_frame_end+3961>:   lea
 0x0(%rbp,%rdx,1),%r14d
    0x0000000000aacd9e <ff_er_frame_end+3966>:   movslq %r14d,%r14
    0x0000000000aacda1 <ff_er_frame_end+3969>:   movzbl (%rax,%r14,1),%r14d
    0x0000000000aacda6 <ff_er_frame_end+3974>:   add    %r14d,%r15d
    0x0000000000aacda9 <ff_er_frame_end+3977>:   lea
 0x0(%rbp,%r10,1),%r14d
    0x0000000000aacdae <ff_er_frame_end+3982>:   movslq %r14d,%r14
    0x0000000000aacdb1 <ff_er_frame_end+3985>:   movzbl (%rax,%r14,1),%r14d
 End of assembler dump.
 (gdb) info register
 rax            0x0      0
 rbx            0x0      0
 rcx            0x7      7
 rdx            0x0      0
 rsi            0x6      6
 rdi            0x5      5
 rbp            0x0      0x0
 rsp            0x7ffff2862770   0x7ffff2862770
 r8             0x4      4
 r9             0x3      3
 r10            0x2      2
 r11            0x1      1
 r12            0x0      0
 r13            0x0      0
 r14            0x1      1
 r15            0x1      1
 rip            0xaacd94 0xaacd94 <ff_er_frame_end+3956>
 eflags         0x10206  [ PF IF RF ]
 cs             0x33     51
 ss             0x2b     43
 ds             0x0      0
 es             0x0      0
 fs             0x0      0
 gs             0x0      0
 (gdb) print linesize[0]
 $1 = 0
 (gdb) print y
 $3 = 0
 (gdb) print x
 $4 = 1
 (gdb) print dest_y
 $5 = (uint8_t *) 0x0
 }}}

-- 
Ticket URL: <https://ffmpeg.org/trac/ffmpeg/ticket/2093#comment:17>
FFmpeg <http://ffmpeg.org>
FFmpeg issue tracker


More information about the FFmpeg-trac mailing list