[FFmpeg-devel] [patch] regression by r24752 in rtsp.c [now rtspdec.c]: write past malloc'ed area and random sigsegv later

[Yuriy Kaminskiy]

Hello!
$subj. Test command:
valgrind mplayer -nocache "ffmpeg://`curl \
http://www.rferl.org/realaudio/c4.ram|tr -d '\r'|head -1`?tcp"

==27728== Invalid write of size 4
==27728==    at 0x8321FE1: rtsp_read_packet (rtspdec.c:218)
==27728==  Address 0x671d470 is 8 bytes after a block of size 8 alloc'd
==27728==    at 0x401CBB2: memalign (vg_replace_malloc.c:532)
==27728==    by 0x401CC5F: posix_memalign (vg_replace_malloc.c:660)
==27728==    by 0x87173F5: av_mallocz (in /path/to/mplayer)
-------------- next part --------------
A non-text attachment was scrubbed...
Name: rtsp_sigsegv.patch
Type: text/x-diff
Size: 683 bytes
Desc: not available
URL: <http://lists.mplayerhq.hu/pipermail/ffmpeg-devel/attachments/20101107/9e486078/attachment.patch>