[FFmpeg-devel] H.264 crash on conformance vector: CVCANLMA2_Sony_C.jsv

[Mike Melanson]

Hi,

This H.264 conformance vector crashes FFmpeg: CVCANLMA2_Sony_C.jsv;
downloadable from:

http://samples.mplayerhq.hu/fate-suite/h264-conformance/

I compiled FFmpeg with gcc 4.2.2 on both x86_32 and PPC and the behavior
is the same. For example:

$ ./ffmpeg -f h264 -i
/tmp/fate/samples/h264-conformance/CVCANLMA2_Sony_C.jsv -f framecrc -
FFmpeg version SVN-r11604, Copyright (c) 2000-2008 Fabrice Bellard, et al.
  configuration: --cc=ccache /usr/local/gcc-4.2.2/bin/gcc
  libavutil version: 49.6.0
  libavcodec version: 51.49.0
  libavformat version: 52.5.0
  libavdevice version: 52.0.0
  built on Jan 24 2008 09:48:52, gcc: 4.2.2
Input #0, h264, from
'/tmp/fate/samples/h264-conformance/CVCANLMA2_Sony_C.jsv':
  Duration: N/A, bitrate: N/A
    Stream #0.0: Video: h264, yuv420p, 720x480 [PAR 0:1 DAR 0:1], 25.00
tb(r)
Output #0, framecrc, to 'pipe:':
    Stream #0.0: Video: rawvideo, yuv420p, 720x480 [PAR 0:1 DAR 0:1],
q=2-31, 200 kb/s, 25.00 tb(c)
Stream mapping:
  Stream #0.0 -> #0.0
Press [q] to stop encoding
0, 0, 518400, 0xfbca00c6
0, 3600, 518400, 0x00d40580
0, 7200, 518400, 0x7733d85a
0, 10800, 518400, 0x7b25851f
Segmentation fault (core dumped)


This is what gdb reports on both platforms:

Program received signal SIGSEGV, Segmentation fault.
0x08284aa4 in decode_mb_cabac (h=0x8656300) at h264.c:5887
5887            h->chroma_pred_mode_table[mb_xy] = 0;
(gdb) bt
#0  0x08284aa4 in decode_mb_cabac (h=0x8656300) at h264.c:5887
#1  0x0829f448 in decode_slice (avctx=0x85e60c0, h=0x8656300) at h264.c:6724
#2  0x082a283c in decode_nal_units (h=0x8656300, buf=0x8709d00 "",
    buf_size=28030) at h264.c:7350
#3  0x082a33c2 in decode_frame (avctx=0x85e60c0, data=0xbfe6afc8,
    data_size=0xbfe6b0f8, buf=0x8709d00 "", buf_size=28030) at h264.c:7664
#4  0x080fde81 in avcodec_decode_video (avctx=0x85e60c0, picture=0x8709d00,
    got_picture_ptr=0xbfe6b0f8, buf=0x8420de0 "\203?([?\215t&",
buf_size=28030)
    at utils.c:945
#5  0x0805e8fe in output_packet (ist=0x8602dd0, ist_index=0,
    ost_table=0x8602e20, nb_ostreams=1, pkt=0xbfe6bf68) at ffmpeg.c:1105
#6  0x08062592 in main (argc=Cannot access memory at address 0x0
) at ffmpeg.c:1986


-- 
	-Mike Melanson