[FFmpeg-trac] #4749(avcodec:new): firefox crashes in ffmpeg code (2.7.2 and git versions)

[FFmpeg]

#4749: firefox crashes in ffmpeg code (2.7.2 and git versions)
------------------------------------+-----------------------------------
             Reporter:  zazdxscf    |                    Owner:
                 Type:  defect      |                   Status:  new
             Priority:  important   |                Component:  avcodec
              Version:  git-master  |               Resolution:
             Keywords:  crash aac   |               Blocked By:
             Blocking:              |  Reproduced by developer:  0
Analyzed by developer:  0           |
------------------------------------+-----------------------------------

Comment (by michael):

 use_init8.patch, applied

 Is there evidence that bit_size == 0 is actually happening ?

 about the crashes, ive looked in the calling code in gstavauddec.c, and
 that is broken in the version i found, The size of a AVFrame is not part
 of the ABI thus sizeof(AVFrame) is not safe nor is creating it on the
 stack like its done.
 This of course may be unrelated ...

 The other potential cause of this crash would be lack of
 FF_INPUT_BUFFER_PADDING_SIZE bytes extra allocation for the input to
 avcodec_decode_audio4(), iam not sure if this is missing or not. But i see
 code dealing with that padding in gstavviddec.c but not gstavauddec.c

--
Ticket URL: <https://trac.ffmpeg.org/ticket/4749#comment:3>
FFmpeg <https://ffmpeg.org>
FFmpeg issue tracker