[FFmpeg-trac] #4181(undetermined:new): libilbc segfault

FFmpeg trac at avcodec.org
Thu Dec 11 21:23:10 CET 2014


#4181: libilbc segfault
-------------------------------------+-------------------------------------
               Reporter:  llogan     |                  Owner:
                   Type:  defect     |                 Status:  new
               Priority:  important  |              Component:
                Version:  git-       |  undetermined
  master                             |               Keywords:  libilbc
             Blocked By:             |  crash SIGSEGV
Reproduced by developer:  0          |               Blocking:
                                     |  Analyzed by developer:  0
-------------------------------------+-------------------------------------
 Found by Andrew Strong.

 {{{
 (gdb) r -y -f lavfi -i sine=r=8000:d=3 -c:v libilbc out.lbc
 Starting program: ffmpeg_g -y -f lavfi -i sine=r=8000:d=3 -c:v libilbc
 out.lbc
 warning: Could not load shared library symbols for linux-vdso.so.1.
 Do you need "set solib-search-path" or "set sysroot"?
 [Thread debugging using libthread_db enabled]
 Using host libthread_db library "/usr/lib/libthread_db.so.1".
 ffmpeg version N-68377-gf96fcba Copyright (c) 2000-2014 the FFmpeg
 developers
   built on Dec 11 2014 11:06:46 with gcc 4.9.2 (GCC)
   configuration: --enable-libilbc --disable-doc
   libavutil      54. 15.100 / 54. 15.100
   libavcodec     56. 14.100 / 56. 14.100
   libavformat    56. 15.103 / 56. 15.103
   libavdevice    56.  3.100 / 56.  3.100
   libavfilter     5.  2.103 /  5.  2.103
   libswscale      3.  1.101 /  3.  1.101
   libswresample   1.  1.100 /  1.  1.100
 [New Thread 0x7ffff4587700 (LWP 19372)]
 [New Thread 0x7ffff3d86700 (LWP 19373)]
 [New Thread 0x7ffff3585700 (LWP 19374)]
 [New Thread 0x7ffff2d84700 (LWP 19375)]
 [New Thread 0x7ffff2583700 (LWP 19376)]
 [New Thread 0x7ffff1d82700 (LWP 19377)]
 [New Thread 0x7ffff1581700 (LWP 19378)]
 [New Thread 0x7ffff0d80700 (LWP 19379)]
 [New Thread 0x7ffff057f700 (LWP 19380)]
 Input #0, lavfi, from 'sine=r=8000:d=3':
   Duration: N/A, start: 0.000000, bitrate: 128 kb/s
     Stream #0:0: Audio: pcm_s16le, 8000 Hz, mono, s16, 128 kb/s
 [New Thread 0x7fffefd7e700 (LWP 19381)]
 [New Thread 0x7fffef57d700 (LWP 19382)]
 [New Thread 0x7fffeed7c700 (LWP 19383)]
 [New Thread 0x7fffee57b700 (LWP 19384)]
 [New Thread 0x7fffedd7a700 (LWP 19385)]
 [New Thread 0x7fffed579700 (LWP 19386)]
 [New Thread 0x7fffecd78700 (LWP 19387)]
 [New Thread 0x7fffec577700 (LWP 19388)]
 [New Thread 0x7fffebd76700 (LWP 19389)]
 Output #0, ilbc, to 'out.lbc':
   Metadata:
     encoder         : Lavf56.15.103
     Stream #0:0: Audio: ilbc (libilbc), 8000 Hz, mono, s16
     Metadata:
       encoder         : Lavc56.14.100 libilbc
 Stream mapping:
   Stream #0:0 -> #0:0 (pcm_s16le (native) -> ilbc (libilbc))
 Press [q] to stop, [?] for help

 Program received signal SIGSEGV, Segmentation fault.
 0x0000000000000000 in ?? ()
 }}}


 {{{
 (gdb) bt
 #0  0x0000000000000000 in ?? ()
 #1  0x00007ffff605dad7 in WebRtcSpl_AutoCorrelation (
     in_vector=in_vector at entry=0x7fffffffd8b0,
     in_vector_length=in_vector_length at entry=240, order=order at entry=10,
     result=result at entry=0x7fffffffd880, scale=scale at entry=0x7fffffffd83c)
     at signal_processing/auto_correlation.c:31
 #2  0x00007ffff605b9de in WebRtcIlbcfix_SimpleLpcAnalysis (
     lsf=<optimized out>, data=<optimized out>, iLBCenc_inst=0x18f6d08)
     at ilbc/simple_lpc_analysis.c:65
 #3  0x00007ffff605a2c0 in WebRtcIlbcfix_LpcEncode (
     syntdenum=syntdenum at entry=0x7fffffffdd38,
     weightdenum=weightdenum at entry=0x7fffffffdbd0,
     lsf_index=lsf_index at entry=0x7fffffffdc60,
 data=data at entry=0x7fffffffde84,
     iLBCenc_inst=iLBCenc_inst at entry=0x18f6d08) at ilbc/lpc_encode.c:45
 #4  0x00007ffff60574d7 in WebRtcIlbcfix_EncodeImpl (bytes=0x18d8fc0,
     block=<optimized out>, iLBCenc_inst=iLBCenc_inst at entry=0x18f6d08)
     at ilbc/encode.c:134
 #5  0x000000000083a426 in ilbc_encode_frame (avctx=<optimized out>,
     avpkt=0x7fffffffe450, frame=0x18f53e0, got_packet_ptr=0x7fffffffe1cc)
     at libavcodec/libilbc.c:172
 #6  0x00000000009ab94f in avcodec_encode_audio2 (avctx=0x18f6820,
     avpkt=0x7fffffffe450, frame=0x18f53e0, got_packet_ptr=0x7fffffffe1cc)
     at libavcodec/utils.c:1872
 ---Type <return> to continue, or q <return> to quit---
 #7  0x000000000047e29e in do_audio_out (frame=<optimized out>,
     ost=<optimized out>, s=<optimized out>) at ffmpeg.c:780
 #8  reap_filters () at ffmpeg.c:1278
 #9  0x0000000000465688 in transcode_step () at ffmpeg.c:3721
 #10 transcode () at ffmpeg.c:3764
 #11 main (argc=26167616, argv=0x18f6680) at ffmpeg.c:3941
 }}}

 {{{
 (gdb) disass $pc-32,$pc+32
 Dump of assembler code from 0xffffffffffffffe0 to 0x20:
 End of assembler dump
 }}}

 {{{

 (gdb) info all-registers
 rax            0x7ffff6268330   140737323107120
 rbx            0x7fffffffd8b0   140737488345264
 rcx            0x7fffffffd880   140737488345216
 rdx            0xa      10
 rsi            0xf0     240
 rdi            0x7fffffffd8b0   140737488345264
 rbp            0xa      0xa
 rsp            0x7fffffffd7a8   0x7fffffffd7a8
 r8             0x7fffffffd83c   140737488345148
 r9             0xffffff66       4294967142
 r10            0xfffff861       4294965345
 r11            0xf0     240
 r12            0x7fffffffd880   140737488345216
 r13            0xf0     240
 r14            0x18f6d08        26176776
 r15            0x7fffffffd8b0   140737488345264
 rip            0x0      0x0
 eflags         0x10206  [ PF IF RF ]
 cs             0x33     51
 ss             0x2b     43
 ds             0x0      0
 es             0x0      0
 fs             0x0      0
 ---Type <return> to continue, or q <return> to quit---
 gs             0x0      0
 st0            0        (raw 0x00000000000000000000)
 st1            0        (raw 0x00000000000000000000)
 st2            0        (raw 0x00000000000000000000)
 st3            0        (raw 0x00000000000000000000)
 st4            0        (raw 0x00000000000000000000)
 st5            0        (raw 0x00000000000000000000)
 st6            0        (raw 0x00000000000000000000)
 st7            0        (raw 0x00000000000000000000)
 fctrl          0x37f    895
 fstat          0x0      0
 ftag           0xffff   65535
 fiseg          0x0      0
 fioff          0x0      0
 foseg          0x0      0
 fooff          0x0      0
 fop            0x0      0
 xmm0           {v4_float = {0x0, 0x0, 0x0, 0x0}, v2_double = {0x0, 0x0},
   v16_int8 = {0xff, 0x0 <repeats 11 times>, 0xff, 0x0, 0x0, 0x0}, v8_int16
 = {
     0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0}, v4_int32 = {0xff, 0x0, 0x0,
     0xff}, v2_int64 = {0xff, 0xff00000000},
   uint128 = 0x000000ff0000000000000000000000ff}
 xmm1           {v4_float = {0x0, 0x0, 0x0, 0x0}, v2_double = {0x0, 0x0},
 ---Type <return> to continue, or q <return> to quit---
   v16_int8 = {0x25 <repeats 16 times>}, v8_int16 = {0x2525, 0x2525,
 0x2525,
     0x2525, 0x2525, 0x2525, 0x2525, 0x2525}, v4_int32 = {0x25252525,
     0x25252525, 0x25252525, 0x25252525}, v2_int64 = {0x2525252525252525,
     0x2525252525252525}, uint128 = 0x25252525252525252525252525252525}
 xmm2           {v4_float = {0x0, 0x0, 0x0, 0x0}, v2_double = {0x0, 0x0},
   v16_int8 = {0x0, 0xd0, 0xff, 0xff, 0xff, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0,
 0x0,
     0xec, 0x3, 0x0, 0x0}, v8_int16 = {0xd000, 0xffff, 0x7fff, 0x0, 0x0,
 0x0,
     0x3ec, 0x0}, v4_int32 = {0xffffd000, 0x7fff, 0x0, 0x3ec}, v2_int64 = {
     0x7fffffffd000, 0x3ec00000000},
   uint128 = 0x000003ec0000000000007fffffffd000}
 xmm3           {v4_float = {0x0, 0x0, 0x0, 0x0}, v2_double = {0x0, 0x0},
   v16_int8 = {0x0 <repeats 16 times>}, v8_int16 = {0x0, 0x0, 0x0, 0x0,
 0x0,
     0x0, 0x0, 0x0}, v4_int32 = {0x0, 0x0, 0x0, 0x0}, v2_int64 = {0x0,
 0x0},
   uint128 = 0x00000000000000000000000000000000}
 xmm4           {v4_float = {0x0, 0x0, 0x0, 0x0}, v2_double = {0x0, 0x0},
   v16_int8 = {0xff, 0x0 <repeats 11 times>, 0xff, 0x0, 0x0, 0x0}, v8_int16
 = {
     0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0}, v4_int32 = {0xff, 0x0, 0x0,
     0xff}, v2_int64 = {0xff, 0xff00000000},
   uint128 = 0x000000ff0000000000000000000000ff}
 xmm5           {v4_float = {0x0, 0x1, 0x0, 0x0}, v2_double = {0x1, 0x0},
   v16_int8 = {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0, 0x3f, 0x0, 0x0, 0x0,
 0x0,
     0x0, 0x0, 0x0, 0x0}, v8_int16 = {0x0, 0x0, 0x0, 0x3ff0, 0x0, 0x0, 0x0,
     0x0}, v4_int32 = {0x0, 0x3ff00000, 0x0, 0x0}, v2_int64 = {
 ---Type <return> to continue, or q <return> to quit---
     0x3ff0000000000000, 0x0}, uint128 =
 0x00000000000000003ff0000000000000}
 xmm6           {v4_float = {0x0, 0x0, 0x0, 0x0}, v2_double = {0x0, 0x0},
   v16_int8 = {0x0 <repeats 16 times>}, v8_int16 = {0x0, 0x0, 0x0, 0x0,
 0x0,
     0x0, 0x0, 0x0}, v4_int32 = {0x0, 0x0, 0x0, 0x0}, v2_int64 = {0x0,
 0x0},
   uint128 = 0x00000000000000000000000000000000}
 xmm7           {v4_float = {0x0, 0x1, 0x0, 0x0}, v2_double = {0x1, 0x0},
   v16_int8 = {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0, 0x3f, 0x0, 0x0, 0x0,
 0x0,
     0x0, 0x0, 0x0, 0x0}, v8_int16 = {0x0, 0x0, 0x0, 0x3ff0, 0x0, 0x0, 0x0,
     0x0}, v4_int32 = {0x0, 0x3ff00000, 0x0, 0x0}, v2_int64 = {
     0x3ff0000000000000, 0x0}, uint128 =
 0x00000000000000003ff0000000000000}
 xmm8           {v4_float = {0x0, 0x0, 0x0, 0x0}, v2_double = {0x0,
     0x8000000000000000}, v16_int8 = {0x5a, 0x7, 0xd8, 0x7, 0x69, 0x7,
 0x1a,
     0x6, 0x11, 0x4, 0x8e, 0x1, 0xdb, 0xfe, 0x4b, 0xfc}, v8_int16 = {0x75a,
     0x7d8, 0x769, 0x61a, 0x411, 0x18e, 0xfedb, 0xfc4b}, v4_int32 =
 {0x7d8075a,
     0x61a0769, 0x18e0411, 0xfc4bfedb}, v2_int64 = {0x61a076907d8075a,
     0xfc4bfedb018e0411}, uint128 = 0xfc4bfedb018e0411061a076907d8075a}
 xmm9           {v4_float = {0x0, 0x0, 0x0, 0x0}, v2_double = {
     0x8000000000000000, 0x8000000000000000}, v16_int8 = {
     0xff <repeats 16 times>}, v8_int16 = {0xffff, 0xffff, 0xffff, 0xffff,
     0xffff, 0xffff, 0xffff, 0xffff}, v4_int32 = {0xffffffff, 0xffffffff,
     0xffffffff, 0xffffffff}, v2_int64 = {0xffffffffffffffff,
     0xffffffffffffffff}, uint128 = 0xffffffffffffffffffffffffffffffff}
 xmm10          {v4_float = {0x0, 0x0, 0x0, 0x0}, v2_double = {
 ---Type <return> to continue, or q <return> to quit---
     0x8000000000000000, 0x8000000000000000}, v16_int8 = {
     0xff <repeats 16 times>}, v8_int16 = {0xffff, 0xffff, 0xffff, 0xffff,
     0xffff, 0xffff, 0xffff, 0xffff}, v4_int32 = {0xffffffff, 0xffffffff,
     0xffffffff, 0xffffffff}, v2_int64 = {0xffffffffffffffff,
     0xffffffffffffffff}, uint128 = 0xffffffffffffffffffffffffffffffff}
 xmm11          {v4_float = {0x0, 0x0, 0x0, 0x0}, v2_double = {
     0x8000000000000000, 0x8000000000000000}, v16_int8 = {
     0xff <repeats 16 times>}, v8_int16 = {0xffff, 0xffff, 0xffff, 0xffff,
     0xffff, 0xffff, 0xffff, 0xffff}, v4_int32 = {0xffffffff, 0xffffffff,
     0xffffffff, 0xffffffff}, v2_int64 = {0xffffffffffffffff,
     0xffffffffffffffff}, uint128 = 0xffffffffffffffffffffffffffffffff}
 xmm12          {v4_float = {0x0, 0x0, 0x0, 0x0}, v2_double = {0x0, 0x0},
   v16_int8 = {0x0, 0xff, 0x0 <repeats 14 times>}, v8_int16 = {0xff00, 0x0,
     0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, v4_int32 = {0xff00, 0x0, 0x0, 0x0},
   v2_int64 = {0xff00, 0x0}, uint128 = 0x0000000000000000000000000000ff00}
 xmm13          {v4_float = {0x0, 0x0, 0x0, 0x0}, v2_double = {0x0, 0x0},
   v16_int8 = {0x34, 0x29, 0x37, 0x3d, 0x9, 0xba, 0x38, 0xbc, 0x0, 0x0,
 0x0,
     0x0, 0x0, 0x0, 0x0, 0x0}, v8_int16 = {0x2934, 0x3d37, 0xba09, 0xbc38,
 0x0,
     0x0, 0x0, 0x0}, v4_int32 = {0x3d372934, 0xbc38ba09, 0x0, 0x0},
 v2_int64 = {
     0xbc38ba093d372934, 0x0}, uint128 =
 0x0000000000000000bc38ba093d372934}
 xmm14          {v4_float = {0x0, 0x0, 0x0, 0x0}, v2_double = {0x0, 0x0},
   v16_int8 = {0x8e, 0x85, 0x83, 0xe8, 0xf0, 0x24, 0x53, 0x3c, 0x0, 0x0,
 0x0,
     0x0, 0x0, 0x0, 0x0, 0x0}, v8_int16 = {0x858e, 0xe883, 0x24f0, 0x3c53,
 0x0,
 ---Type <return> to continue, or q <return> to quit---
     0x0, 0x0, 0x0}, v4_int32 = {0xe883858e, 0x3c5324f0, 0x0, 0x0},
 v2_int64 = {
     0x3c5324f0e883858e, 0x0}, uint128 =
 0x00000000000000003c5324f0e883858e}
 xmm15          {v4_float = {0x0, 0xffffffff, 0x0, 0x0}, v2_double = {0x0,
     0x0}, v16_int8 = {0xf6, 0x8f, 0xee, 0x21, 0xa8, 0x74, 0xd3, 0xbf, 0x0,
     0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, v8_int16 = {0x8ff6, 0x21ee,
 0x74a8,
     0xbfd3, 0x0, 0x0, 0x0, 0x0}, v4_int32 = {0x21ee8ff6, 0xbfd374a8, 0x0,
     0x0}, v2_int64 = {0xbfd374a821ee8ff6, 0x0},
   uint128 = 0x0000000000000000bfd374a821ee8ff6}
 mxcsr          0x1fa0   [ PE IM DM ZM OM UM PM ]
 }}}

--
Ticket URL: <https://trac.ffmpeg.org/ticket/4181>
FFmpeg <https://ffmpeg.org>
FFmpeg issue tracker


More information about the FFmpeg-trac mailing list