[Ffmpeg-cvslog] r7538 - trunk/libavcodec/mpeg12.c

[Luca Barbato]

Diego Biurrun wrote:
> On Tue, Jan 16, 2007 at 08:53:40AM +0100, Diego Biurrun wrote:
>> On Tue, Jan 16, 2007 at 12:26:10AM +0100, michael wrote:
>>> Log:
>>> fix segfault with http://sam.zoy.org/zzuf/lol-ffplay.mpg and http://sam.zoy.org/zzuf/lol-ffplay.m2v
>> lol-ffplay.m2v still crashes on my PPC.  I'll try to send a backtrace
>> later today.
> 

A saner backtrace:

Program received signal SIGSEGV, Segmentation fault.
0x0fcd8f08 in _wordcopy_fwd_aligned () from /lib/libc.so.6
(gdb) bt
#0  0x0fcd8f08 in _wordcopy_fwd_aligned () from /lib/libc.so.6
#1  0x0fcd8e50 in memcpy () from /lib/libc.so.6
#2  0x101673e0 in img_copy (dst=0x31905bd8, src=0x31905bb8,
     pix_fmt=<value optimized out>, width=704, height=4580) at 
imgconvert.c:737
#3  0x101b9e88 in sws_scale (ctx=0x10433c20, src=<value optimized out>,
     srcStride=<value optimized out>, srcSliceY=<value optimized out>,
     srcSliceH=<value optimized out>, dst=0x2c0,
     dstStride=<value optimized out>) at imgresample.c:805
#4  0x10011d80 in video_thread (arg=<value optimized out>) at ffplay.c:1254
#5  0x0fe06000 in SDL_RunThread () from /usr/lib/libSDL-1.2.so.0
#6  0x0fe41148 in RunThread () from /usr/lib/libSDL-1.2.so.0
#7  0x0fdc0b44 in start_thread () from /lib/libpthread.so.0
#8  0x0fd2c29c in clone () from /lib/libc.so.6

something else...

Breakpoint 1, sws_scale (ctx=0x10435bd0, src=0x10441050, 
srcStride=0x10441060,
     srcSliceY=0, srcSliceH=4580, dst=0x31905ca0, dstStride=0x31905cb0)
     at imgresample.c:734
734             src_pict.linesize[i] = srcStride[i];
(gdb) print *ctx
$20 = {resampling_ctx = 0x10503630, src_pix_fmt = PIX_FMT_YUV420P,
   dst_pix_fmt = PIX_FMT_YUV420P}
(gdb) print *ctx->resampling_ctx
$21 = {iwidth = 704, iheight = 4580, owidth = 704, oheight = 4580,
   topBand = 1380401664, bottomBand = 16, leftBand = -2147483478,
   rightBand = 3709809, padtop = 268500992, padbottom = 268435456,
   padleft = 63488, padright = 2016, pad_owidth = 31, pad_oheight = 0,
   h_incr = 0, v_incr = 0, h_filters = {{0, 0, 0, 0}, {0, 0, 0, 0}, {0, 
0, 0,
       0}, {0, 0, 21063, 16896}, {0, 0, 0, 0}, {0, 0, 0, 0}, {0, 0, 0, 
0}, {0,
       0, 224, 19984}, {4119, 5540, 4123, -27528}, {12889, 21849, 256, 
19840}, {
       22869, 22834, 0, 16}, {-32768, 170, 56, -25743}, {4097, 0, 0, 0}, 
{0, 0,
       0, 0}, {0, 0, 0, 0}, {0, 8, 0, 8}}, v_filters = {{0, 8, 0, 1}, 
{0, 2, 0,
       2}, {0, 1, 0, 1}, {0, 1, 22869, 22870}, {0, 0, 0, 0}, {0, 0, 0, 
0}, {0,
       0, 0, 0}, {0, 0, 224, 19984}, {4119, 5540, 4123, -27528}, {22870, 
22869,
       256, 19840}, {21849, 22105, 0, 16}, {-32768, 170, 56, -25743}, 
{4097, 0,
       0, 0}, {0, 0, 0, 0}, {0, 0, 0, 0}, {0, 8, 0, 8}},
   line_buf = 0x8 <Address 0x8 out of bounds>}
(gdb) print *src
$22 = (uint8_t *) 0x31909e30 '\200' <repeats 200 times>...
(gdb) print *dst
$23 = (uint8_t *) 0x32f76000 ""
(gdb) print *dstStride
$24 = 704

Breakpoint 2, img_copy (dst=0x31905bd8, src=0x31905bb8, pix_fmt=0, 
width=704,
     height=4580) at imgconvert.c:750
750         const PixFmtInfo *pf = &pix_fmt_info[pix_fmt];
(gdb) print *dst
$25 = {data = {0x32f76000 "", 0x3312e000 "", 0x330d6000 "",
     0xfe4ae50 "Passed a NULL semaphore"}, linesize = {704, 352, 352,
     234975239}}
(gdb) print *src
$26 = {data = {0x31909e30 '\200' <repeats 200 times>...,
     0x31c46bb0 '\200' <repeats 200 times>...,
     0x31d16bb0 '\200' <repeats 200 times>..., 0x0}, linesize = {736, 
368, 368,
     0}}

I'll try to discover what's wrong tonight if I'm not too tired...

lu

-- 

Luca Barbato

Gentoo/linux Gentoo/PPC
http://dev.gentoo.org/~lu_zero