[FFmpeg-trac] #3889(avcodec:open): h264: crash in low mem situation

[FFmpeg]

#3889: h264: crash in low mem situation
------------------------------------+-----------------------------------
             Reporter:  ami_stuff   |                    Owner:
                 Type:  defect      |                   Status:  open
             Priority:  important   |                Component:  avcodec
              Version:  git-master  |               Resolution:
             Keywords:  h264 crash  |               Blocked By:
             Blocking:              |  Reproduced by developer:  1
Analyzed by developer:  0           |
------------------------------------+-----------------------------------
Changes (by cehoyos):

 * status:  new => open
 * reproduced:  0 => 1
 * component:  undetermined => avcodec
 * priority:  normal => important
 * version:  unspecified => git-master
 * keywords:   => h264 crash


Comment:

 I can reproduce the race condition with a sufficiently high value for
 {{{-threads}}}.
 ff_h264_update_thread_context() calls ff_h264_alloc_tables() with
 h->chroma_pred_mode_table set to freed memory. A double free happens when
 allocations in ff_h264_alloc_tables() fail and ff_h264_free_tables() is
 called.

--
Ticket URL: <https://trac.ffmpeg.org/ticket/3889#comment:1>
FFmpeg <https://ffmpeg.org>
FFmpeg issue tracker