[FFmpeg-trac] #2722(avcodec:open): mpeg4 crash in low memory situation

[FFmpeg]

#2722: mpeg4 crash in low memory situation
---------------------------------------+-----------------------------------
             Reporter:  ami_stuff      |                    Owner:
                 Type:  defect         |                   Status:  open
             Priority:  important      |                Component:  avcodec
              Version:  git-master     |               Resolution:
             Keywords:  crash SIGSEGV  |               Blocked By:
             Blocking:                 |  Reproduced by developer:  1
Analyzed by developer:  0              |
---------------------------------------+-----------------------------------
Changes (by cehoyos):

 * status:  new => open
 * reproduced:  0 => 1
 * component:  undetermined => avcodec
 * priority:  normal => important
 * version:  unspecified => git-master
 * keywords:   => crash SIGSEGV


Comment:

 Patch sent.
 {{{
 (gdb) r -max_alloc 33000 -i divx.avi
 Starting program: ffmpeg_g -max_alloc 33000 -i divx.avi
 [Thread debugging using libthread_db enabled]
 Using host libthread_db library "/lib64/libthread_db.so.1".
 ffmpeg version N-54246-g2bccd82 Copyright (c) 2000-2013 the FFmpeg
 developers
   built on Jun 28 2013 16:52:37 with gcc 4.7 (SUSE Linux)
   configuration: --enable-gpl --disable-indev=jack
   libavutil      52. 37.101 / 52. 37.101
   libavcodec     55. 17.100 / 55. 17.100
   libavformat    55. 10.100 / 55. 10.100
   libavdevice    55.  2.100 / 55.  2.100
   libavfilter     3. 77.101 /  3. 77.101
   libswscale      2.  3.100 /  2.  3.100
   libswresample   0. 17.102 /  0. 17.102
   libpostproc    52.  3.100 / 52.  3.100
 [mpeg4 @ 0x1693b00] Invalid and inefficient vfw-avi packed B frames
 detected

 Program received signal SIGSEGV, Segmentation fault.
 0x00000000009cb4db in avcodec_decode_audio4 (avctx=0x16947c0,
 frame=0x169a360,
     got_frame_ptr=got_frame_ptr at entry=0x7fffffffd16c,
 avpkt=avpkt at entry=0x7fffffffd1a0)
     at libavcodec/utils.c:2064
 2064        if (avctx->codec->type != AVMEDIA_TYPE_AUDIO) {
 (gdb) bt
 #0  0x00000000009cb4db in avcodec_decode_audio4 (avctx=0x16947c0,
 frame=0x169a360,
     got_frame_ptr=got_frame_ptr at entry=0x7fffffffd16c,
 avpkt=avpkt at entry=0x7fffffffd1a0)
     at libavcodec/utils.c:2064
 #1  0x00000000005bf004 in try_decode_frame (st=st at entry=0x1694460,
     avpkt=avpkt at entry=0x1699120, options=0x16939c0) at
 libavformat/utils.c:2451
 #2  0x00000000005c6a40 in avformat_find_stream_info (ic=0x1693020,
 options=0x16939c0)
     at libavformat/utils.c:2880
 #3  0x0000000000463909 in open_input_file (o=o at entry=0x7fffffffd750,
 filename=<optimized out>)
     at ffmpeg_opt.c:814
 #4  0x000000000045e402 in open_files (inout=<optimized out>,
 inout at entry=0xc6febf "input",
     open_file=open_file at entry=0x463560 <open_input_file>, l=<optimized
 out>, l=<optimized out>)
     at ffmpeg_opt.c:2483
 #5  0x0000000000464c99 in ffmpeg_parse_options (argc=argc at entry=5,
     argv=argv at entry=0x7fffffffdde8) at ffmpeg_opt.c:2520
 #6  0x000000000045bf48 in main (argc=5, argv=0x7fffffffdde8) at
 ffmpeg.c:3368
 (gdb) print avctx->codec
 $1 = (const struct AVCodec *) 0x0
 }}}

-- 
Ticket URL: <https://ffmpeg.org/trac/ffmpeg/ticket/2722#comment:1>
FFmpeg <http://ffmpeg.org>
FFmpeg issue tracker