[FFmpeg-trac] #4850(swscale:new): Crash when converting to bgra via swscale with fast_bilinear

[FFmpeg]

#4850: Crash when converting to bgra via swscale with fast_bilinear
---------------------------------+--------------------------------------
             Reporter:  oromit   |                     Type:  defect
               Status:  new      |                 Priority:  normal
            Component:  swscale  |                  Version:  git-master
             Keywords:           |               Blocked By:
             Blocking:           |  Reproduced by developer:  1
Analyzed by developer:  0        |
---------------------------------+--------------------------------------
 Summary of the bug:
 The given sample makes ffmpeg 2.8 and git-master(No other versions tested,
 maybe also earlier releases) crash somewhere in the swscale asm files.

 How to reproduce:
 {{{
 % ./ffmpeg -i crash.mkv -map 0:v:0 -c:v rawvideo -sws_flags fast_bilinear
 -dstw 360 -dsth 202 -pix_fmt bgra -f rawvideo -y /dev/null
 ffmpeg version N-75284-g65b96ab Copyright (c) 2000-2015 the FFmpeg
 developers
   built with gcc 4.9.3 (Gentoo 4.9.3 p1.1, pie-0.6.2)
   configuration: --enable-gpl --enable-nonfree --enable-nvenc --enable-
 libx264 --enable-libfdk_aac --disable-doc --enable-opencl --cpu=host
   libavutil      55.  2.100 / 55.  2.100
   libavcodec     57.  1.100 / 57.  1.100
   libavformat    57.  0.100 / 57.  0.100
   libavdevice    57.  0.100 / 57.  0.100
   libavfilter     6.  3.100 /  6.  3.100
   libswscale      4.  0.100 /  4.  0.100
   libswresample   2.  0.100 /  2.  0.100
   libpostproc    54.  0.100 / 54.  0.100
 Input #0, matroska,webm, from '/home/timo/Downloads/crash.mkv':
   Metadata:
     MINOR_VERSION   : 0
     COMPATIBLE_BRANDS: isommp42
     MAJOR_BRAND     : mp42
     ENCODER         : Lavf56.40.101
   Duration: 00:00:01.22, start: 0.000000, bitrate: 581 kb/s
     Stream #0:0: Video: hevc (Main), yuv420p(tv), 7680x4320 [SAR 1:1 DAR
 16:9], 29.97 fps, 29.97 tbr, 1k tbn, 29.97 tbc (default)
     Metadata:
       ENCODER         : Lavc56.60.100 libx265
       DURATION        : 00:00:01.224000000
 Output #0, rawvideo, to '/dev/null':
   Metadata:
     MINOR_VERSION   : 0
     COMPATIBLE_BRANDS: isommp42
     MAJOR_BRAND     : mp42
     encoder         : Lavf57.0.100
     Stream #0:0: Video: rawvideo (BGRA / 0x41524742), bgra, 7680x4320 [SAR
 1:1 DAR 16:9], q=2-31, 200 kb/s, 29.97 fps, 29.97 tbn, 29.97 tbc (default)
     Metadata:
       DURATION        : 00:00:01.224000000
       encoder         : Lavc57.1.100 rawvideo
 Stream mapping:
   Stream #0:0 -> #0:0 (hevc (native) -> rawvideo (native))
 Press [q] to stop, [?] for help
 zsh: segmentation fault
 }}}

 Backtrace:
 {{{
 #0  ff_hscale8to15_4_ssse3.loop () at libswscale/x86/scale.asm:429
 #1  0x0000000000e416e4 in lum_h_scale (c=0x1b88880, desc=0x1b82a20,
 sliceY=<optimized out>, sliceH=2) at libswscale/hscale.c:41
 #2  0x0000000000de087f in swscale (c=0x1b88880, src=<optimized out>,
 srcStride=<optimized out>, srcSliceY=<optimized out>, srcSliceH=<optimized
 out>, dst=0x7fffffffd060, dstStride=0x7fffffffd030) at
 libswscale/swscale.c:588
 #3  0x0000000000de1d7b in sws_scale (c=<optimized out>,
 srcSlice=srcSlice at entry=0x7fffffffd140,
 srcStride=srcStride at entry=0x7fffffffd120, srcSliceY=srcSliceY at entry=0,
 srcSliceH=<optimized out>, dst=dst at entry=0x7fffffffd160,
     dstStride=0x7fffffffd130) at libswscale/swscale.c:1263
 #4  0x00000000005121fc in scale_slice (y=<optimized out>, link=<optimized
 out>, field=<optimized out>, mul=<optimized out>, h=<optimized out>,
 sws=<optimized out>, cur_pic=<optimized out>, out_buf=<optimized out>)
     at libavfilter/vf_scale.c:477
 #5  filter_frame (link=link at entry=0x1b82fa0, in=0x1c94d20) at
 libavfilter/vf_scale.c:579
 #6  0x00000000004a6d7f in ff_filter_frame_framed
 (link=link at entry=0x1b82fa0, frame=frame at entry=0x1c94d20) at
 libavfilter/avfilter.c:1089
 #7  0x00000000004a8efc in ff_filter_frame (link=0x1b82fa0,
 frame=0x1c94d20) at libavfilter/avfilter.c:1173
 #8  0x00000000004a6d7f in ff_filter_frame_framed
 (link=link at entry=0x1b82e00, frame=frame at entry=0x1c94d20) at
 libavfilter/avfilter.c:1089
 #9  0x00000000004a8efc in ff_filter_frame (link=link at entry=0x1b82e00,
 frame=0x1c94d20) at libavfilter/avfilter.c:1173
 #10 0x00000000004ad13f in request_frame (link=0x1b82e00) at
 libavfilter/buffersrc.c:378
 #11 0x00000000004ace46 in av_buffersrc_add_frame_internal
 (ctx=ctx at entry=0x1b82480, frame=frame at entry=0x1c49f00,
 flags=flags at entry=4) at libavfilter/buffersrc.c:180
 #12 0x00000000004ad3ad in av_buffersrc_add_frame_flags (ctx=0x1b82480,
 frame=frame at entry=0x1c49f00, flags=flags at entry=4) at
 libavfilter/buffersrc.c:105
 #13 0x000000000048d3ca in decode_video (ist=ist at entry=0x1b6af00,
 pkt=pkt at entry=0x7fffffffd720, got_output=got_output at entry=0x7fffffffd6cc)
 at ffmpeg.c:2179
 #14 0x0000000000476a70 in process_input_packet (pkt=0x7fffffffd6d0,
 ist=0x1b6af00) at ffmpeg.c:2327
 #15 process_input (file_index=<optimized out>) at ffmpeg.c:3833
 #16 transcode_step () at ffmpeg.c:3921
 #17 transcode () at ffmpeg.c:3974
 #18 main (argc=<optimized out>, argv=<optimized out>) at ffmpeg.c:4157
 }}}

--
Ticket URL: <https://trac.ffmpeg.org/ticket/4850>
FFmpeg <https://ffmpeg.org>
FFmpeg issue tracker