[FFmpeg-trac] #2048(undetermined:new): reproducible crash on some subtitles in ff_ass_split_override_codes()

[FFmpeg]

#2048: reproducible crash on some subtitles in ff_ass_split_override_codes()
--------------------------------------+----------------------------------
             Reporter:  julian        |                     Type:  defect
               Status:  new           |                 Priority:  normal
            Component:  undetermined  |                  Version:  1.0
             Keywords:                |               Blocked By:
             Blocking:                |  Reproduced by developer:  0
Analyzed by developer:  0             |
--------------------------------------+----------------------------------
 ffmpeg crashes reproducibly when converting files with some subtitles.
 i've seen the crash with self-compiled ffmpeg 1.0 as well as the Mac OS X
 binary (linked to from the hompage) for 1.0.1.

 download the sample file:
 https://dl.dropbox.com/u/7221986/ffmpeg-bug.mkv
 {{{
 % ffmpeg -i ffmpeg-bug.mkv -map 0:2 -map 0:0 -map 0:1 -scodec mov_text
 -vcodec copy out.mp4

 ffmpeg version 1.0.1-tessus Copyright (c) 2000-2012 the FFmpeg developers
   built on Dec  3 2012 23:31:08 with llvm-gcc 4.2.1 (LLVM build 2336.1.00)
   configuration: --prefix=/Users/tessus/data/ext/ffmpeg/sw --as=yasm
 --extra-version=tessus --disable-shared --enable-static --disable-ffplay
 --disable-ffserver --enable-gpl --enable-pthreads --enable-postproc
 --enable-libmp3lame --enable-libtheora --enable-libvorbis --enable-libx264
 --enable-libxvid --enable-libspeex --enable-bzlib --enable-zlib --enable-
 libopencore-amrnb --enable-libopencore-amrwb --enable-libxavs --enable-
 version3 --enable-libvo-aacenc --enable-libvo-amrwbenc --enable-libvpx
 --enable-libgsm --enable-libopus --enable-fontconfig --enable-libfreetype
 --enable-libass --enable-filters --enable-runtime-cpudetect
   libavutil      51. 73.101 / 51. 73.101
   libavcodec     54. 59.100 / 54. 59.100
   libavformat    54. 29.104 / 54. 29.104
   libavdevice    54.  2.101 / 54.  2.101
   libavfilter     3. 17.100 /  3. 17.100
   libswscale      2.  1.101 /  2.  1.101
   libswresample   0. 15.100 /  0. 15.100
   libpostproc    52.  0.100 / 52.  0.100
 Input #0, matroska,webm, from 'ffmpeg-bug.mkv':
   Metadata:
     ENCODER         : Lavf54.29.104
   Duration: 00:24:27.06, start: 0.000000, bitrate: 8 kb/s
     Stream #0:0: Subtitle: ssa (default)
     Metadata:
       title           : 简体中文
     Stream #0:1: Video: h264 (High), yuv420p, 640x360 [SAR 1:1 DAR 16:9],
 23.81 fps, 23.81 tbr, 1k tbn, 47.62 tbc (default)
     Stream #0:2: Subtitle: ssa (default)
     Metadata:
       title           : 繁体中文
 File 'out.mp4' already exists. Overwrite ? [y/N] y
 Output #0, mp4, to 'out.mp4':
   Metadata:
     encoder         : Lavf54.29.104
     Stream #0:0: Subtitle: mov_text ([8][0][0][0] / 0x0008) (default)
     Metadata:
       title           : 繁体中文
     Stream #0:1: Subtitle: mov_text ([8][0][0][0] / 0x0008) (default)
     Metadata:
       title           : 简体中文
     Stream #0:2: Video: h264 ([33][0][0][0] / 0x0021), yuv420p, 640x360
 [SAR 1:1 DAR 16:9], q=2-31, 23.81 fps, 1k tbn, 1k tbc (default)
 Stream mapping:
   Stream #0:2 -> #0:0 (ass -> mov_text)
   Stream #0:0 -> #0:1 (ass -> mov_text)
   Stream #0:1 -> #0:2 (copy)
 Press [q] to stop, [?] for help

 Program received signal EXC_BAD_ACCESS, Could not access memory.
 Reason: KERN_INVALID_ADDRESS at address: 0x0000000000000000
 0x00000001002b1d06 in ff_ass_split_override_codes ()
 }}}

-- 
Ticket URL: <https://ffmpeg.org/trac/ffmpeg/ticket/2048>
FFmpeg <http://ffmpeg.org>
FFmpeg issue tracker