[FFmpeg-trac] #4587(avcodec:new): ouf-of-boundry memory access in cabac(H264)

[FFmpeg]

#4587: ouf-of-boundry memory access in cabac(H264)
-------------------------------------+-----------------------------------
             Reporter:  rakexue      |                    Owner:
                 Type:  defect       |                   Status:  new
             Priority:  important    |                Component:  avcodec
              Version:  unspecified  |               Resolution:
             Keywords:  H264 crash   |               Blocked By:
             Blocking:               |  Reproduced by developer:  0
Analyzed by developer:  0            |
-------------------------------------+-----------------------------------
Changes (by cehoyos):

 * keywords:  H264 => H264 crash
 * priority:  normal => important


Comment:

 I tested on iOS both with and without --disable-safe-bitstream-reader but
 I don't see a crash. Please provide the backtrace and other information as
 explained on https://ffmpeg.org/bugreports.html
 {{{
 $ ffmpeg -i 70.ts -f null -
 ffmpeg version N-72656-g7131aba Copyright (c) 2000-2015 the FFmpeg
 developers
   built with Apple LLVM version 6.0 (clang-600.0.56) (based on LLVM
 3.5svn)
   configuration: --enable-gpl --arch=arm --target-os=darwin --enable-
 cross-compile
 --sysroot=/Applications/Xcode.app/Contents/Developer/Platforms/iPhoneOS.platform/Developer/SDKs/iPhoneOS.sdk
 --cc='clang -arch armv7 -miphoneos-version-min=8.0' --cpu=cortex-a8
   libavutil      54. 26.101 / 54. 26.101
   libavcodec     56. 41.101 / 56. 41.101
   libavformat    56. 34.100 / 56. 34.100
   libavdevice    56.  4.100 / 56.  4.100
   libavfilter     5. 16.101 /  5. 16.101
   libswscale      3.  1.101 /  3.  1.101
   libswresample   1.  2.100 /  1.  2.100
   libpostproc    53.  3.100 / 53.  3.100
 Input #0, mpegts, from '70.ts':
   Duration: 00:00:09.49, start: 507.013000, bitrate: 728 kb/s
   Program 1
     Metadata:
       service_name    : 2.0.2Wang
       service_provider: QiYi
     Stream #0:0[0x100]: Video: h264 (High) ([27][0][0][0] / 0x001B),
 yuv420p(tv, bt709), 848x352, 25 fps, 25 tbr, 90k tbn, 50 tbc
     Stream #0:1[0x101]: Audio: aac (HE-AAC) ([15][0][0][0] / 0x000F),
 44100 Hz, stereo, fltp, 65 kb/s
 Output #0, null, to 'pipe:':
   Metadata:
     encoder         : Lavf56.34.100
     Stream #0:0: Video: rawvideo (I420 / 0x30323449), yuv420p, 848x352,
 q=2-31, 200 kb/s, 25 fps, 25 tbn, 25 tbc
     Metadata:
       encoder         : Lavc56.41.101 rawvideo
     Stream #0:1: Audio: pcm_s16le, 44100 Hz, stereo, s16, 1411 kb/s
     Metadata:
       encoder         : Lavc56.41.101 pcm_s16le
 Stream mapping:
   Stream #0:0 -> #0:0 (h264 (native) -> rawvideo (native))
   Stream #0:1 -> #0:1 (aac (native) -> pcm_s16le (native))
 Press [q] to stop, [?] for help
 [null @ 0x2002200] Encoder did not produce proper pts, making some up.
 [NULL @ 0x1802800] missing picture in access unit with size 8/A
 [h264 @ 0x2001400] no frame!
 frame=  237 fps=111 q=0.0 Lsize=N/A time=00:00:09.49 bitrate=N/A
 video:15kB audio:1632kB subtitle:0kB other streams:0kB global headers:0kB
 muxing overhead: unknown
 }}}

--
Ticket URL: <https://trac.ffmpeg.org/ticket/4587#comment:1>
FFmpeg <https://ffmpeg.org>
FFmpeg issue tracker