[FFmpeg-trac] #1267(undetermined:new): vf boxblur: crash

[FFmpeg]

#1267: vf boxblur: crash
-------------------------------------+-------------------------------------
               Reporter:  ami_stuff  |                  Owner:
                   Type:  defect     |                 Status:  new
               Priority:  normal     |              Component:
                Version:             |  undetermined
  unspecified                        |               Keywords:
             Blocked By:             |               Blocking:
Reproduced by developer:  0          |  Analyzed by developer:  0
-------------------------------------+-------------------------------------
 {{{
 (gdb) r -i 1.rm -vf boxblur=1:1 -f null -
 The program being debugged has been started already.
 Start it from the beginning? (y or n) y

 Starting program: d:\mingw\msys\1.0\ffmpeg-head-30aa004\ffmpeg_g.exe -i
 1.rm -vf
  boxblur=1:1 -f null -
 [New Thread 1588.0x244]
 ffmpeg version 0.10.2.git-30aa004 Copyright (c) 2000-2012 the FFmpeg
 developers
   built on May  1 2012 15:36:20 with gcc 4.6.1
   configuration: --disable-ffprobe --enable-gpl
   libavutil      51. 49.100 / 51. 49.100
   libavcodec     54. 17.101 / 54. 17.101
   libavformat    54.  3.100 / 54.  3.100
   libavdevice    53.  4.100 / 53.  4.100
   libavfilter     2. 72.102 /  2. 72.102
   libswscale      2.  1.100 /  2.  1.100
   libswresample   0. 11.100 /  0. 11.100
   libpostproc    52.  0.100 / 52.  0.100
 [rm @ 03b02340] Unsupported stream type 434f4e54
 Input #0, rm, from '1.rm':
   Metadata:
     title           :
     author          :
     copyright       :
     comment         :
   Duration: 00:00:14.00, start: 0.000000, bitrate: 164 kb/s
     Stream #0:0: Video: rv20 (RV20 / 0x30325652), yuv420p, 352x288, 150
 kb/s, 15
  fps, 15 tbr, 1k tbn, 1k tbc
     Stream #0:1: Data: none
 [buffer @ 03b13120] w:352 h:288 pixfmt:yuv420p tb:1/1000000 sar:0/1
 sws_param:fl
 ags=2
 [buffersink @ 03b13440] No opaque field provided
 [boxblur @ 03b13760] luma_radius:1 luma_power:1 chroma_radius:1
 chroma_power:1 a
 lpha_radius:1 alpha_power:1 w:352 chroma_w:176 h:288 chroma_h:144
 Output #0, null, to 'pipe:':
   Metadata:
     title           :
     author          :
     copyright       :
     comment         :
     encoder         : Lavf54.3.100
     Stream #0:0: Video: rawvideo (I420 / 0x30323449), yuv420p, 352x288,
 q=2-31,
 200 kb/s, 90k tbn, 15 tbc
 Stream mapping:
   Stream #0:0 -> #0:0 (rv20 -> rawvideo)
 Press [q] to stop, [?] for help

 Program received signal SIGSEGV, Segmentation fault.
 blur (radius=1, len=352, src_step=1, src=0x20 <Address 0x20 out of
 bounds>,
     dst_step=1,
     dst=0x3b14e80
 "äääääää\203é\201\200\177\177\200\201\201\200\200\200\200\200\
 200\200\201\201ééééééé\201\201\201\201\201\201\201éé\203\203\203\203\203\203\203
 \203\203\203\203\203\203\203\203ééééééé\201\201\200\200\200\200\200\200\177~",
 '
 }' <repeats 22 times>, "||{{{{{{{", '|' <repeats 24 times>,
 "}}}}}}}~\177", '\20
 0' <repeats 22 times>, "\177\177", '~' <repeats 15 times>,
 "\023\023\022\020\017
 \017\021\025\027\031\026\025\026\030\034$*.+)*.5;"...)
     at libavfilter/vf_boxblur.c:230
 230             sum += src[x*src_step]<<1;
 (gdb) bt
 #0  blur (radius=1, len=352, src_step=1,
     src=0x20 <Address 0x20 out of bounds>, dst_step=1,
     dst=0x3b14e80
 "äääääää\203é\201\200\177\177\200\201\201\200\200\200\200\200\
 200\200\201\201ééééééé\201\201\201\201\201\201\201éé\203\203\203\203\203\203\203
 \203\203\203\203\203\203\203\203ééééééé\201\201\200\200\200\200\200\200\177~",
 '
 }' <repeats 22 times>, "||{{{{{{{", '|' <repeats 24 times>,
 "}}}}}}}~\177", '\20
 0' <repeats 22 times>, "\177\177", '~' <repeats 15 times>,
 "\023\023\022\020\017
 \017\021\025\027\031\026\025\026\030\034$*.+)*.5;"...)
     at libavfilter/vf_boxblur.c:230
 #1  blur_power (temp=0x40ba460, power=1, radius=1, len=352, src_step=1,
     src=0x20 <Address 0x20 out of bounds>, dst_step=1, dst=0x0)
     at libavfilter/vf_boxblur.c:255
 #2  hblur (temp=0x40ba460, power=1, radius=1, h=288, w=352,
 src_linesize=0,
     src=<optimized out>, dst_linesize=0, dst=0x0)
     at libavfilter/vf_boxblur.c:284
 #3  end_frame (inlink=0x3b13960) at libavfilter/vf_boxblur.c:316
 #4  0x00419664 in avfilter_end_frame (link=0x3b13960)
     at libavfilter/avfilter.c:632
 #5  0x0041c58f in request_frame (link=0x3b13960)
     at libavfilter/src_buffer.c:363
 #6  0x00418d09 in avfilter_request_frame (link=0x3b13a60)
     at libavfilter/avfilter.c:549
 #7  0x0041b46b in avfilter_graph_request_oldest (graph=0x3b12320)
     at libavfilter/avfiltergraph.c:545
 #8  0x00409dd6 in poll_filters () at ffmpeg.c:2124
 #9  0x0040dd9a in transcode () at ffmpeg.c:3653
 #10 0x00af7452 in main (argc=8, argv=0x3b10dd0) at ffmpeg.c:5899
 }}}

-- 
Ticket URL: <https://ffmpeg.org/trac/ffmpeg/ticket/1267>
FFmpeg <http://ffmpeg.org>
FFmpeg issue tracker