[FFmpeg-trac] #407(avcodec:new): Crash in ff_put_pixels16_neon (EXC_BAD_ACCESS)

[FFmpeg]

#407: Crash in ff_put_pixels16_neon (EXC_BAD_ACCESS)
------------------------------------+----------------------
Reporter:  redeemarr                |       Owner:
    Type:  defect                   |      Status:  new
Priority:  normal                   |   Component:  avcodec
 Version:  unspecified              |  Resolution:
Keywords:  Crash, Error resilience  |  Blocked By:
Blocking:                           |  Reproduced:  0
Analyzed:  0                        |
------------------------------------+----------------------

Comment (by redeemarr):

 Tried git head, same issue.
 Yep, I should've know how to submit bugs, sorry.

 GDB backtrace:
 {{{
 #0  0x00153d64 in ff_put_pixels16_neon () at common.h:46
 #1  0x00200a6c in mc_dir_part (h=0x58a2000, pic=0x58c894c, n=<value
 temporarily unavailable, due to optimizations>, square=1, chroma_height=8,
 delta=0, list=0, dest_y=0xbe2610 '\200' <repeats 200 times>...,
 dest_cb=0xc12f10 '\200' <repeats 200 times>..., dest_cr=0xc31910 '\200'
 <repeats 200 times>..., src_x_offset=0, src_y_offset=0, qpix_op=0x58a3410,
 chroma_op=0x155808 <ff_put_h264_chroma_mc8_neon>, pixel_shift=0,
 chroma444=0) at libavcodec/h264.c:473
 #2  0x0020165c in mc_part (h=0x58a2000, n=0, square=1, chroma_height=8,
 delta=0, dest_y=0xbe2610 '\200' <repeats 200 times>..., dest_cb=0xc12f10
 '\200' <repeats 200 times>..., dest_cr=0xc31910 '\200' <repeats 200
 times>..., x_offset=0, y_offset=0, qpix_put=0x58a3410, chroma_put=0x155808
 <ff_put_h264_chroma_mc8_neon>, qpix_avg=0x58a3510, chroma_avg=0x155964
 <ff_avg_h264_chroma_mc8_neon>, weight_op=0x58a44d4, weight_avg=0x58a44fc,
 list0=4096, list1=0, pixel_shift=0, chroma444=0) at libavcodec/h264.c:549
 #3  0x00213a60 in hl_decode_mb_simple_8 (h=0x58a2000) at
 libavcodec/h264.c:696
 #4  0x0021487c in ff_h264_hl_decode_mb (h=0x58a2000) at
 libavcodec/h264.c:2103
 #5  0x001f8b10 in decode_mb (s=0x58a2000, ref=0) at
 libavcodec/error_resilience.c:59
 #6  0x001f9cfc in guess_mv (s=0x58a2000) at
 libavcodec/error_resilience.c:414
 #7  0x001fb65c in ff_er_frame_end (s=0x58a2000) at
 libavcodec/error_resilience.c:1066
 #8  0x00204244 in field_end (h=0x58a2000, in_setup=<value temporarily
 unavailable, due to optimizations>) at libavcodec/h264.c:2418
 #9  0x002176cc in decode_frame (avctx=0xb7f400, data=0x5e39dc0,
 data_size=0x2fee0c4c, avpkt=<value temporarily unavailable, due to
 optimizations>) at libavcodec/h264.c:3904
 #10 0x0029b09c in avcodec_decode_video2 (avctx=0xb7f400,
 picture=0x5e39dc0, got_picture_ptr=0x2fee0c4c, avpkt=0x2fee0c10) at
 libavcodec/utils.c:769
 }}}

 Disasm near pc:
 {{{
 Dump of assembler code from 0x153d44 to 0x153d84:
 0x00153d44 <ff_clear_blocks_neon+172>:  vst1.16 {d0-d1}, [r0, :128]!
 0x00153d48 <ff_clear_blocks_neon+176>:  vst1.16 {d0-d1}, [r0, :128]!
 0x00153d4c <ff_clear_blocks_neon+180>:  vst1.16 {d0-d1}, [r0, :128]!
 0x00153d50 <ff_clear_blocks_neon+184>:  vst1.16 {d0-d1}, [r0, :128]!
 0x00153d54 <ff_clear_blocks_neon+188>:  vst1.16 {d0-d1}, [r0, :128]!
 0x00153d58 <ff_clear_blocks_neon+192>:  vst1.16 {d0-d1}, [r0, :128]!
 0x00153d5c <ff_clear_blocks_neon+196>:  bx      lr
 0x00153d60 <ff_put_h264_qpel16_mc00_neon+0>:    mov     r3, #16 ; 0x10
 0x00153d64 <ff_put_pixels16_neon+0>:    vld1.64 {d0-d1}, [r1], r2
 0x00153d68 <ff_put_pixels16_neon+4>:    vld1.64 {d2-d3}, [r1], r2
 0x00153d6c <ff_put_pixels16_neon+8>:    vld1.64 {d4-d5}, [r1], r2
 0x00153d70 <ff_put_pixels16_neon+12>:   pld     [r1, r2, lsl #2]
 0x00153d74 <ff_put_pixels16_neon+16>:   vld1.64 {d6-d7}, [r1], r2
 0x00153d78 <ff_put_pixels16_neon+20>:   pld     [r1]
 0x00153d7c <ff_put_pixels16_neon+24>:   pld     [r1, r2]
 0x00153d80 <ff_put_pixels16_neon+28>:   pld     [r1, r2, lsl #1]
 }}}

 Registers:
 {{{
 r0             0xbe2610 12461584
 r1             0x73d1a10        121444880
 r2             0x40     64
 r3             0x10     16
 r4             0x58a2000        92938240
 r5             0x73d1a10        121444880
 r6             0x0      0
 r7             0x2fee06dc       804128476
 r8             0x0      0
 r9             0x1      1
 r10            0x0      0
 r11            0x0      0
 r12            0x2aa0   10912
 sp             0x2fee0660       804128352
 lr             0x200a6c 2099820
 pc             0x153d64 1391972
 cpsr           {
   0x80000010,
   n = 0x1,
   z = 0x0,
   c = 0x0,
   v = 0x0,
   q = 0x0,
   j = 0x0,
   ge = 0x0,
   e = 0x0,
   a = 0x0,
   i = 0x0,
   f = 0x0,
   t = 0x0,
   mode = 0x10
 }       {
   0x80000010,
   n = 1,
   z = 0,
   c = 0,
   v = 0,
   q = 0,
   j = 0,
   ge = 0,
   e = 0,
   a = 0,
   i = 0,
   f = 0,
   t = 0,
   mode = usr
 }
 }}}

-- 
Ticket URL: <https://avcodec.org/trac/ffmpeg/ticket/407#comment:3>
FFmpeg <http://ffmpeg.org>
FFmpeg issue tracker