[FFmpeg-trac] #5209(avcodec:reopened): cfhd: crash with fuzzed file 2

[FFmpeg]

#5209: cfhd: crash with fuzzed file 2
-------------------------------------+-------------------------------------
             Reporter:  ami_stuff    |                    Owner:
                 Type:  defect       |                   Status:  reopened
             Priority:  important    |                Component:  avcodec
              Version:  git-master   |               Resolution:
             Keywords:  cfhd crash   |               Blocked By:
  SIGSEGV                            |  Reproduced by developer:  1
             Blocking:               |
Analyzed by developer:  0            |
-------------------------------------+-------------------------------------

Comment (by cehoyos):

 Still reproducible with 0abdf70:
 {{{
 Program received signal SIGINT, Interrupt.
 0x00007ffff62728f4 in pthread_cond_wait@@GLIBC_2.3.2 () from
 /lib64/libpthread.so.0
 (gdb) bt
 #0  0x00007ffff62728f4 in pthread_cond_wait@@GLIBC_2.3.2 () from
 /lib64/libpthread.so.0
 #1  0x0000000000a8963b in ff_thread_decode_frame
 (avctx=avctx at entry=0x1d8a7a0,
     picture=picture at entry=0x1dc8880,
     got_picture_ptr=got_picture_ptr at entry=0x7fffffffd7bc,
     avpkt=avpkt at entry=0x7fffffffd510) at libavcodec/pthread_frame.c:432
 #2  0x0000000000b7747a in avcodec_decode_video2 (avctx=0x1d8a7a0,
     picture=picture at entry=0x1dc8880,
     got_picture_ptr=got_picture_ptr at entry=0x7fffffffd7bc,
     avpkt=avpkt at entry=0x7fffffffdac0) at libavcodec/utils.c:2126
 #3  0x000000000049820d in decode_video (ist=ist at entry=0x1d86220,
     pkt=pkt at entry=0x7fffffffdac0,
 got_output=got_output at entry=0x7fffffffd7bc)
     at ffmpeg.c:2075
 #4  0x000000000049b81d in process_input_packet (no_eof=0,
 pkt=0x7fffffffda60,
     ist=0x1d86220) at ffmpeg.c:2324
 #5  process_input (file_index=61) at ffmpeg.c:3986
 #6  transcode_step () at ffmpeg.c:4074
 #7  transcode () at ffmpeg.c:4128
 #8  0x000000000047d9eb in main (argc=<optimized out>, argv=0x7fffffffdd08)
     at ffmpeg.c:4319
 }}}

--
Ticket URL: <https://trac.ffmpeg.org/ticket/5209#comment:4>
FFmpeg <https://ffmpeg.org>
FFmpeg issue tracker