[Libav-user] "Internal error, slice end before start" may cause a crash

[Julian Diego Herrera Braga]

On 18/07/2013 12:34, Carl Eugen Hoyos wrote:
> Julian Herrera <julian.herrera at ...> writes:
>
>>       frame #2: 0x002dd6e6 astra`mpeg_decode_slice(s=0x0f9eaa00,
>> buf=0x03985a14) + 7854 at mpeg12.c:1813
> This looks outdated.
> Is the problem also reproducible with current
> git head?
>
> Carl Eugen
>
>

I've updated the project to link against ffmpeg-2.0 and now the issue 
seems to be worse. FFmpeg now crashes more often during a seek 
operation. This is the new backtrace:

* thread #14: tid = 0x3303, 0x001d133c astra`ff_put_pixels16_neon, stop 
reason = EXC_BAD_ACCESS (code=1, address=0x0)
     frame #0: 0x001d133c astra`ff_put_pixels16_neon
     frame #1: 0x0033e6c0 astra`mpeg_motion [inlined] 
mpeg_motion_internal(s=0x1d473200, field_based=0, bottom_field=0, 
is_mpeg12=1, dest_y=0x068ca000, dest_cb=0x068ca000, dest_cr=0x068ca000) 
+ 138 at mpegvideo_motion.c:322
     frame #2: 0x0033e636 astra`mpeg_motion(s=0x1d473200, 
dest_y=0x068ca000, dest_cb=0x068ca000, dest_cr=0x068ca000) + 254 at 
mpegvideo_motion.c:344
     frame #3: 0x0033e0e4 astra`ff_MPV_motion [inlined] 
MPV_motion_internal(is_mpeg12=0, dest_cr=0x068ca000, dest_cb=0x068ca000, 
dest_y=0x068ca000) + 8520 at mpegvideo_motion.c:834
     frame #4: 0x0033e0e0 astra`ff_MPV_motion(, dest_y=0x068ca000, 
dest_cb=0x068ca000, dest_cr=0x068ca000) + 8516 at mpegvideo_motion.c:893
     frame #5: 0x00338c4a astra`ff_MPV_decode_mb [inlined] 
MPV_decode_mb_internal(is_mpeg12=1, lowres_flag=0) + 212 at mpegvideo.c:2775
     frame #6: 0x00338b76 astra`ff_MPV_decode_mb(s=0x1d473200, 
block=0x1dc24000) + 8890 at mpegvideo.c:2903
     frame #7: 0x0031df6c astra`mpeg_decode_slice(s=0x1d473200, 
buf=0x05bb7f68) + 8488 at mpeg12dec.c:1716
     frame #8: 0x0031bd48 astra`slice_decode_thread(c=0x1d453400) + 124 
at mpeg12dec.c:1831
     frame #9: 0x003579e4 astra`worker(v=0x1d453400) + 120 at pthread.c:177
     frame #10: 0x3ad62310 libsystem_c.dylib`_pthread_start + 308
     frame #11: 0x3ad621d8 libsystem_c.dylib`thread_start + 8

Any ideas?

Thanks,
Julian