id	summary	reporter	owner	description	type	status	priority	component	version	resolution	keywords	cc	blockedby	blocking	reproduced	analyzed
1112	tiff enc: invalid read with -vf vflip and -pix_fmt yuv420p	ami_stuff		"http://ffmpeg.org/trac/ffmpeg/attachment/ticket/1059/599.png

{{{
(gdb) r -i 599.png -s 1111x1111 -vf vflip -pix_fmt yuv420p out.tif
Starting program: d:\mingw\msys\1.0\ffmpeg\ffmpeg_g.exe -i 599.png -s 1111x1111
-vf vflip -pix_fmt yuv420p out.tif
[New Thread 3728.0xe94]
ffmpeg version 0.9.1.git Copyright (c) 2000-2012 the FFmpeg developers
  built on Mar 10 2012 16:15:15 with gcc 4.6.1
  configuration: --disable-yasm --disable-ffprobe
  libavutil      51. 42.100 / 51. 42.100
  libavcodec     54. 10.100 / 54. 10.100
  libavformat    54.  2.100 / 54.  2.100
  libavdevice    53.  4.100 / 53.  4.100
  libavfilter     2. 63.100 /  2. 63.100
  libswscale      2.  1.100 /  2.  1.100
  libswresample   0.  7.100 /  0.  7.100
Input #0, image2, from '599.png':
  Duration: 00:00:00.04, start: 0.000000, bitrate: N/A
    Stream #0:0: Video: png, rgb24, 599x412, 25 tbr, 25 tbn, 25 tbc
[buffer @ 03871e60] w:599 h:412 pixfmt:rgb24 tb:1/1000000 sar:0/1 sws_param:
[scale @ 038715e0] w:599 h:412 fmt:rgb24 -> w:1111 h:1111 fmt:yuv420p flags:0x4
Output #0, image2, to 'out.tif':
  Metadata:
    encoder         : Lavf54.2.100
    Stream #0:0: Video: tiff, yuv420p, 1111x1111, q=2-31, 200 kb/s, 90k tbn, 25
tbc
Stream mapping:
  Stream #0:0 -> #0:0 (png -> tiff)
Press [q] to stop, [?] for help

Program received signal SIGSEGV, Segmentation fault.
0x00827ab5 in pack_yuv (s=0x38639a0,
    dst=0x3e078a2 ""iiT?iiiiT?iiiiT?iiiiT?iiiiT?iiiiT?iiiiT?iiiiT?iiiiT?iiiiT?iii
iT?iiiiT?iiiiT?iiiiT?iiiiT?iiiiT?iiiiT?iiiiT?iiiiT?iiiiT?iiiiT?iiiiT?iiiiT?iiiiT
?iiiiT?iiiiT?iiiiT?iiiiT?iiiiT?iiiiT?iiiiT?iiiiT?iiiiT?iiii""..., lnum=1110)
    at libavcodec/tiffenc.c:198
198                     *dst++ = p->data[0][(lnum + j) * p->linesize[0] +
(gdb) bt
#0  0x00827ab5 in pack_yuv (s=0x38639a0,
    dst=0x3e078a2 ""iiT?iiiiT?iiiiT?iiiiT?iiiiT?iiiiT?iiiiT?iiiiT?iiiiT?iiiiT?iii
iT?iiiiT?iiiiT?iiiiT?iiiiT?iiiiT?iiiiT?iiiiT?iiiiT?iiiiT?iiiiT?iiiiT?iiiiT?iiiiT
?iiiiT?iiiiT?iiiiT?iiiiT?iiiiT?iiiiT?iiiiT?iiiiT?iiiiT?iiii""..., lnum=1110)
    at libavcodec/tiffenc.c:198
#1  0x00828301 in encode_frame (avctx=0x3863320, pkt=0x22db40, pict=0x22d9d8,
    got_packet=0x22dc0c) at libavcodec/tiffenc.c:383
#2  0x004f945d in avcodec_encode_video2 (avctx=0x3863320, avpkt=0x22db40,
    frame=0x22d9d8, got_packet_ptr=0x22dc0c) at libavcodec/utils.c:1219
#3  0x00405de0 in do_video_out (s=0x386a620, ost=0x3863700,
    in_picture=0x3872b60, ist=<optimized out>) at ffmpeg.c:1619
#4  0x00407d6c in transcode_video (pkt_pts=<optimized out>,
    got_output=<optimized out>, pkt=<optimized out>, ist=<optimized out>)
    at ffmpeg.c:2178
#5  output_packet (ist=0x38718a0, ost_table=0x3863700, nb_ostreams=1,
    pkt=0x22fb28) at ffmpeg.c:2270
#6  0x0040bf3b in transcode (output_files=0x3871d80, nb_output_files=1,
    input_files=0x3871960, nb_input_files=1) at ffmpeg.c:3082
#7  0x0022ff48 in ?? ()
Backtrace stopped: Not enough registers or memory available to unwind further
}}}"	defect	closed	normal	avcodec	git-master	fixed	tif				1	0