[FFmpeg-trac] #7989(undetermined:new): heap-buffer-overflow at apng_do_inverse_blend in libavcodec/pngenc.c

[FFmpeg]

#7989: heap-buffer-overflow at apng_do_inverse_blend in libavcodec/pngenc.c
-------------------------------------+-------------------------------------
             Reporter:  Suhwan       |                    Owner:
                 Type:  defect       |                   Status:  new
             Priority:  important    |                Component:
                                     |  undetermined
              Version:  unspecified  |               Resolution:
             Keywords:  enc          |               Blocked By:
             Blocking:               |  Reproduced by developer:  0
Analyzed by developer:  0            |
-------------------------------------+-------------------------------------

Comment (by Suhwan):

 Received SIGABRT due to free invalid pointer at FFmpeg4.12
 {{{
 ffmpeg version N-94906-gcb8d6a4e3e Copyright (c) 2000-2019 the FFmpeg
 developers
   built with clang version 6.0.0-1ubuntu2 (tags/RELEASE_600/final)
   configuration: --cc=clang --cxx=clang++ --ld=clang --enable-debug
 --toolchain=clang-usan
   libavutil      56. 35.100 / 56. 35.100
   libavcodec     58. 56.101 / 58. 56.101
   libavformat    58. 32.104 / 58. 32.104
   libavdevice    58.  9.100 / 58.  9.100
   libavfilter     7. 58.102 /  7. 58.102
   libswscale      5.  6.100 /  5.  6.100
   libswresample   3.  6.100 /  3.  6.100
 Input #0, pbm_pipe, from 'tmp.pbm':
   Duration: N/A, bitrate: N/A
     Stream #0:0: Video: pbm, monow, 560x320, 25 tbr, 25 tbn, 25 tbc
 Stream mapping:
   Stream #0:0 -> #0:0 (pbm (native) -> apng (native))
 Press [q] to stop, [?] for help
 [swscaler @ 0xa2327c0] full chroma interpolation for destination format
 'monob' not yet implemented
 Output #0, image2, to 'tmp_.pgm':
   Metadata:
     encoder         : Lavf58.32.104
     Stream #0:0: Video: apng, monob, 560x320, q=2-31, 200 kb/s, 73 fps, 73
 tbn, 73 tbc
     Metadata:
       encoder         : Lavc58.56.101 apng
 free(): invalid pointer
 Aborted

 }}}

--
Ticket URL: <https://trac.ffmpeg.org/ticket/7989#comment:2>
FFmpeg <https://ffmpeg.org>
FFmpeg issue tracker