[Ffmpeg-cvslog] r7538 - trunk/libavcodec/mpeg12.c

[Luca Barbato]

Diego Biurrun wrote:
> On Thu, Jan 18, 2007 at 11:02:11AM +0100, Luca Barbato wrote:
>> Diego Biurrun wrote:
>>> On Tue, Jan 16, 2007 at 08:53:40AM +0100, Diego Biurrun wrote:
>>>> On Tue, Jan 16, 2007 at 12:26:10AM +0100, michael wrote:
>>>>> Log:
>>>>> fix segfault with http://sam.zoy.org/zzuf/lol-ffplay.mpg and 
>>>>> http://sam.zoy.org/zzuf/lol-ffplay.m2v
>>>> lol-ffplay.m2v still crashes on my PPC.  I'll try to send a backtrace
>>>> later today.
>> A saner backtrace:
>>
>> Program received signal SIGSEGV, Segmentation fault.
>> 0x0fcd8f08 in _wordcopy_fwd_aligned () from /lib/libc.so.6
>> (gdb) bt
>> #0  0x0fcd8f08 in _wordcopy_fwd_aligned () from /lib/libc.so.6
>> #1  0x0fcd8e50 in memcpy () from /lib/libc.so.6
>> #2  0x101673e0 in img_copy (dst=0x31905bd8, src=0x31905bb8,
>>     pix_fmt=<value optimized out>, width=704, height=4580) at 
>> imgconvert.c:737
>> #3  0x101b9e88 in sws_scale (ctx=0x10433c20, src=<value optimized out>,
>>     srcStride=<value optimized out>, srcSliceY=<value optimized out>,
>>     srcSliceH=<value optimized out>, dst=0x2c0,
>>     dstStride=<value optimized out>) at imgresample.c:805
>> #4  0x10011d80 in video_thread (arg=<value optimized out>) at ffplay.c:1254
>> #5  0x0fe06000 in SDL_RunThread () from /usr/lib/libSDL-1.2.so.0
>> #6  0x0fe41148 in RunThread () from /usr/lib/libSDL-1.2.so.0
>> #7  0x0fdc0b44 in start_thread () from /lib/libpthread.so.0
>> #8  0x0fd2c29c in clone () from /lib/libc.so.6
>>
>> something else...
>>
>> Breakpoint 1, sws_scale (ctx=0x10435bd0, src=0x10441050, 
>> srcStride=0x10441060,
>>     srcSliceY=0, srcSliceH=4580, dst=0x31905ca0, dstStride=0x31905cb0)
>>     at imgresample.c:734
>> 734             src_pict.linesize[i] = srcStride[i];
>> (gdb) print *ctx
>> $20 = {resampling_ctx = 0x10503630, src_pix_fmt = PIX_FMT_YUV420P,
>>   dst_pix_fmt = PIX_FMT_YUV420P}
>> (gdb) print *ctx->resampling_ctx
>> $21 = {iwidth = 704, iheight = 4580, owidth = 704, oheight = 4580,
>>   topBand = 1380401664, bottomBand = 16, leftBand = -2147483478,
>>   rightBand = 3709809, padtop = 268500992, padbottom = 268435456,
>>   padleft = 63488, padright = 2016, pad_owidth = 31, pad_oheight = 0,
>>   h_incr = 0, v_incr = 0, h_filters = {{0, 0, 0, 0}, {0, 0, 0, 0}, {0, 
>> 0, 0,
>>       0}, {0, 0, 21063, 16896}, {0, 0, 0, 0}, {0, 0, 0, 0}, {0, 0, 0, 
>> 0}, {0,
>>       0, 224, 19984}, {4119, 5540, 4123, -27528}, {12889, 21849, 256, 
>> 19840}, {
>>       22869, 22834, 0, 16}, {-32768, 170, 56, -25743}, {4097, 0, 0, 0}, 
>> {0, 0,
>>       0, 0}, {0, 0, 0, 0}, {0, 8, 0, 8}}, v_filters = {{0, 8, 0, 1}, 
>> {0, 2, 0,
>>       2}, {0, 1, 0, 1}, {0, 1, 22869, 22870}, {0, 0, 0, 0}, {0, 0, 0, 
>> 0}, {0,
>>       0, 0, 0}, {0, 0, 224, 19984}, {4119, 5540, 4123, -27528}, {22870, 
>> 22869,
>>       256, 19840}, {21849, 22105, 0, 16}, {-32768, 170, 56, -25743}, 
>> {4097, 0,
>>       0, 0}, {0, 0, 0, 0}, {0, 0, 0, 0}, {0, 8, 0, 8}},
>>   line_buf = 0x8 <Address 0x8 out of bounds>}
>> (gdb) print *src
>> $22 = (uint8_t *) 0x31909e30 '\200' <repeats 200 times>...
>> (gdb) print *dst
>> $23 = (uint8_t *) 0x32f76000 ""
>> (gdb) print *dstStride
>> $24 = 704
>>
>> Breakpoint 2, img_copy (dst=0x31905bd8, src=0x31905bb8, pix_fmt=0, 
>> width=704,
>>     height=4580) at imgconvert.c:750
>> 750         const PixFmtInfo *pf = &pix_fmt_info[pix_fmt];
>> (gdb) print *dst
>> $25 = {data = {0x32f76000 "", 0x3312e000 "", 0x330d6000 "",
>>     0xfe4ae50 "Passed a NULL semaphore"}, linesize = {704, 352, 352,
>>     234975239}}
>> (gdb) print *src
>> $26 = {data = {0x31909e30 '\200' <repeats 200 times>...,
>>     0x31c46bb0 '\200' <repeats 200 times>...,
>>     0x31d16bb0 '\200' <repeats 200 times>..., 0x0}, linesize = {736, 
>> 368, 368,
>>     0}}
>>
>> I'll try to discover what's wrong tonight if I'm not too tired...
> 
> Any progress?
> 

No and it's an hellish week....

lu

-- 

Luca Barbato

Gentoo/linux Gentoo/PPC
http://dev.gentoo.org/~lu_zero