[FFmpeg-trac] #3070(undetermined:new): hevc: invalid reads

FFmpeg trac at avcodec.org
Tue Oct 22 16:20:41 CEST 2013


#3070: hevc: invalid reads
-------------------------------------+-------------------------------------
               Reporter:  ami_stuff  |                  Owner:
                   Type:  defect     |                 Status:  new
               Priority:  normal     |              Component:
                Version:             |  undetermined
  unspecified                        |               Keywords:
             Blocked By:             |               Blocking:
Reproduced by developer:  0          |  Analyzed by developer:  0
-------------------------------------+-------------------------------------
 attached file is valid (not fuzzed)

 {{{
 knoppix at Microknoppix:/media/sdb1$ valgrind --leak-check=full ffmpeg-HEAD-
 da30d0c/ffmpeg_g -threads 1 -strict -2 -i hevc1.ts -f null -
 ==2916== Memcheck, a memory error detector
 ==2916== Copyright (C) 2002-2011, and GNU GPL'd, by Julian Seward et al.
 ==2916== Using Valgrind-3.7.0 and LibVEX; rerun with -h for copyright info
 ==2916== Command: ffmpeg-HEAD-da30d0c/ffmpeg_g -threads 1 -strict -2 -i
 hevc1.ts -f null -
 ==2916==
 ffmpeg version 2.0-da30d0c Copyright (c) 2000-2013 the FFmpeg developers
   built on Oct 22 2013 14:57:21 with gcc 4.7 (Debian 4.7.2-5)
   configuration: --disable-yasm --disable-ffprobe --disable-ffserver
 --enable-gpl
   libavutil      52. 47.101 / 52. 47.101
   libavcodec     55. 37.102 / 55. 37.102
   libavformat    55. 19.103 / 55. 19.103
   libavdevice    55.  4.100 / 55.  4.100
   libavfilter     3. 89.100 /  3. 89.100
   libswscale      2.  5.101 /  2.  5.101
   libswresample   0. 17.104 /  0. 17.104
   libpostproc    52.  3.100 / 52.  3.100
 Input #0, mpegts, from 'hevc1.ts':
   Duration: 00:00:12.60, start: 0.080000, bitrate: 348 kb/s
   Program 1
     Stream #0:0[0x12d]: Video: hevc (HEVC / 0x43564548), yuv420p, 320x240,
 23.98 tbr, 90k tbn, 90k tbc
 Output #0, null, to 'pipe:':
   Metadata:
     encoder         : Lavf55.19.103
     Stream #0:0: Video: rawvideo (I420 / 0x30323449), yuv420p, 320x240,
 q=2-31, 200 kb/s, 90k tbn, 23.98 tbc
 Stream mapping:
   Stream #0:0 -> #0:0 (hevc -> rawvideo)
 Press [q] to stop, [?] for help
 [null @ 0x4a13d00] Encoder did not produce proper pts, making some up.
 ==2916== Invalid read of size 2N/A time=00:00:12.13 bitrate=N/A
 ==2916==    at 0x84E6FCC: ff_hevc_hls_residual_coding (cabac.h:174)
 ==2916==    by 0x84DB37A: hls_transform_tree (hevc.c:761)
 ==2916==    by 0x84DADFA: hls_transform_tree (hevc.c:850)
 ==2916==    by 0x84DD5F8: hls_coding_quadtree (hevc.c:1571)
 ==2916==    by 0x84E28A7: decode_nal_units (hevc.c:1742)
 ==2916==    by 0x84E369B: hevc_decode_frame (hevc.c:2275)
 ==2916==    by 0x80B64FC: decode_video (ffmpeg.c:1668)
 ==2916==    by 0x4032257F: ???
 ==2916==  Address 0x4bdff48 is 184 bytes inside a block of size 185
 alloc'd
 ==2916==    at 0x4028308: malloc (vg_replace_malloc.c:263)
 ==2916==    by 0x402849F: realloc (vg_replace_malloc.c:632)
 ==2916==    by 0x88F0407: av_buffer_realloc (buffer.c:164)
 ==2916==    by 0x827F7CC: av_dup_packet (avpacket.c:204)
 ==2916==    by 0x823CC9B: parse_packet (utils.c:1285)
 ==2916==    by 0x823DE60: read_frame_internal (utils.c:1341)
 ==2916==    by 0x823E369: av_read_frame (utils.c:1437)
 ==2916==    by 0x80B9A65: process_input (ffmpeg.c:2893)
 ==2916==    by 0x80A5B82: main (ffmpeg.c:3200)
 ==2916==
 ==2916== Invalid read of size 2
 ==2916==    at 0x84E8352: ff_hevc_hls_residual_coding (cabac.h:239)
 ==2916==    by 0x84DB37A: hls_transform_tree (hevc.c:761)
 ==2916==    by 0x84DADFA: hls_transform_tree (hevc.c:850)
 ==2916==    by 0x84DD5F8: hls_coding_quadtree (hevc.c:1571)
 ==2916==    by 0x84E28A7: decode_nal_units (hevc.c:1742)
 ==2916==    by 0x84E369B: hevc_decode_frame (hevc.c:2275)
 ==2916==    by 0x80B64FC: decode_video (ffmpeg.c:1668)
 ==2916==    by 0x4032257F: ???
 ==2916==  Address 0x4bdff4a is 1 bytes after a block of size 185 alloc'd
 ==2916==    at 0x4028308: malloc (vg_replace_malloc.c:263)
 ==2916==    by 0x402849F: realloc (vg_replace_malloc.c:632)
 ==2916==    by 0x88F0407: av_buffer_realloc (buffer.c:164)
 ==2916==    by 0x827F7CC: av_dup_packet (avpacket.c:204)
 ==2916==    by 0x823CC9B: parse_packet (utils.c:1285)
 ==2916==    by 0x823DE60: read_frame_internal (utils.c:1341)
 ==2916==    by 0x823E369: av_read_frame (utils.c:1437)
 ==2916==    by 0x80B9A65: process_input (ffmpeg.c:2893)
 ==2916==    by 0x80A5B82: main (ffmpeg.c:3200)
 ==2916==
 ==2916== Invalid read of size 2
 ==2916==    at 0x84E8A63: ff_hevc_hls_mvd_coding (cabac.h:174)
 ==2916==    by 0x84DC9E7: hls_prediction_unit (hevc.c:1107)
 ==2916==    by 0x84DDB34: hls_coding_quadtree (hevc.c:1531)
 ==2916==    by 0x84E28A7: decode_nal_units (hevc.c:1742)
 ==2916==    by 0x84E369B: hevc_decode_frame (hevc.c:2275)
 ==2916==    by 0x80B64FC: decode_video (ffmpeg.c:1668)
 ==2916==    by 0x4032257F: ???
 ==2916==  Address 0x4bdff4a is 1 bytes after a block of size 185 alloc'd
 ==2916==    at 0x4028308: malloc (vg_replace_malloc.c:263)
 ==2916==    by 0x402849F: realloc (vg_replace_malloc.c:632)
 ==2916==    by 0x88F0407: av_buffer_realloc (buffer.c:164)
 ==2916==    by 0x827F7CC: av_dup_packet (avpacket.c:204)
 ==2916==    by 0x823CC9B: parse_packet (utils.c:1285)
 ==2916==    by 0x823DE60: read_frame_internal (utils.c:1341)
 ==2916==    by 0x823E369: av_read_frame (utils.c:1437)
 ==2916==    by 0x80B9A65: process_input (ffmpeg.c:2893)
 ==2916==    by 0x80A5B82: main (ffmpeg.c:3200)
 ==2916==
 ==2916== Invalid read of size 2
 ==2916==    at 0x84E608A: ff_hevc_merge_idx_decode (cabac.h:174)
 ==2916==    by 0x84DBD01: hls_prediction_unit (hevc.c:1068)
 ==2916==    by 0x84DDBF8: hls_coding_quadtree (hevc.c:1488)
 ==2916==    by 0x84DCF0D: hls_coding_quadtree (hevc.c:1623)
 ==2916==    by 0x84DCF0D: hls_coding_quadtree (hevc.c:1623)
 ==2916==    by 0x84DCF0D: hls_coding_quadtree (hevc.c:1623)
 ==2916==    by 0x84E28A7: decode_nal_units (hevc.c:1742)
 ==2916==    by 0x84E369B: hevc_decode_frame (hevc.c:2275)
 ==2916==    by 0x80B64FC: decode_video (ffmpeg.c:1668)
 ==2916==    by 0x4032257F: ???
 ==2916==  Address 0x4bdff4c is 3 bytes after a block of size 185 alloc'd
 ==2916==    at 0x4028308: malloc (vg_replace_malloc.c:263)
 ==2916==    by 0x402849F: realloc (vg_replace_malloc.c:632)
 ==2916==    by 0x88F0407: av_buffer_realloc (buffer.c:164)
 ==2916==    by 0x827F7CC: av_dup_packet (avpacket.c:204)
 ==2916==    by 0x823CC9B: parse_packet (utils.c:1285)
 ==2916==    by 0x823DE60: read_frame_internal (utils.c:1341)
 ==2916==    by 0x823E369: av_read_frame (utils.c:1437)
 ==2916==    by 0x80B9A65: process_input (ffmpeg.c:2893)
 ==2916==    by 0x80A5B82: main (ffmpeg.c:3200)
 ==2916==
 ==2916== Invalid read of size 2
 ==2916==    at 0x84E7691: ff_hevc_hls_residual_coding (cabac.h:174)
 ==2916==    by 0x84DB37A: hls_transform_tree (hevc.c:761)
 ==2916==    by 0x84DD5F8: hls_coding_quadtree (hevc.c:1571)
 ==2916==    by 0x84DCFA4: hls_coding_quadtree (hevc.c:1630)
 ==2916==    by 0x84DCF0D: hls_coding_quadtree (hevc.c:1623)
 ==2916==    by 0x84DCF0D: hls_coding_quadtree (hevc.c:1623)
 ==2916==    by 0x84E28A7: decode_nal_units (hevc.c:1742)
 ==2916==    by 0x84E369B: hevc_decode_frame (hevc.c:2275)
 ==2916==    by 0x80B64FC: decode_video (ffmpeg.c:1668)
 ==2916==    by 0x4032257F: ???
 ==2916==  Address 0x4bdff4e is 5 bytes after a block of size 185 alloc'd
 ==2916==    at 0x4028308: malloc (vg_replace_malloc.c:263)
 ==2916==    by 0x402849F: realloc (vg_replace_malloc.c:632)
 ==2916==    by 0x88F0407: av_buffer_realloc (buffer.c:164)
 ==2916==    by 0x827F7CC: av_dup_packet (avpacket.c:204)
 ==2916==    by 0x823CC9B: parse_packet (utils.c:1285)
 ==2916==    by 0x823DE60: read_frame_internal (utils.c:1341)
 ==2916==    by 0x823E369: av_read_frame (utils.c:1437)
 ==2916==    by 0x80B9A65: process_input (ffmpeg.c:2893)
 ==2916==    by 0x80A5B82: main (ffmpeg.c:3200)
 ==2916==
 ==2916== Invalid read of size 2
 ==2916==    at 0x84E55FA: ff_hevc_part_mode_decode (cabac.h:174)
 ==2916==    by 0x84DD74F: hls_coding_quadtree (hevc.c:1500)
 ==2916==    by 0x84DCFD2: hls_coding_quadtree (hevc.c:1628)
 ==2916==    by 0x84DCFD2: hls_coding_quadtree (hevc.c:1628)
 ==2916==    by 0x84DCF0D: hls_coding_quadtree (hevc.c:1623)
 ==2916==    by 0x84E28A7: decode_nal_units (hevc.c:1742)
 ==2916==    by 0x84E369B: hevc_decode_frame (hevc.c:2275)
 ==2916==    by 0x80B64FC: decode_video (ffmpeg.c:1668)
 ==2916==    by 0x4032257F: ???
 ==2916==  Address 0x4bdff50 is 7 bytes after a block of size 185 alloc'd
 ==2916==    at 0x4028308: malloc (vg_replace_malloc.c:263)
 ==2916==    by 0x402849F: realloc (vg_replace_malloc.c:632)
 ==2916==    by 0x88F0407: av_buffer_realloc (buffer.c:164)
 ==2916==    by 0x827F7CC: av_dup_packet (avpacket.c:204)
 ==2916==    by 0x823CC9B: parse_packet (utils.c:1285)
 ==2916==    by 0x823DE60: read_frame_internal (utils.c:1341)
 ==2916==    by 0x823E369: av_read_frame (utils.c:1437)
 ==2916==    by 0x80B9A65: process_input (ffmpeg.c:2893)
 ==2916==    by 0x80A5B82: main (ffmpeg.c:3200)
 ==2916==
 ==2916== Invalid read of size 2
 ==2916==    at 0x84E6FCC: ff_hevc_hls_residual_coding (cabac.h:174)
 ==2916==    by 0x84DB37A: hls_transform_tree (hevc.c:761)
 ==2916==    by 0x84DAE3C: hls_transform_tree (hevc.c:852)
 ==2916==    by 0x84DD5F8: hls_coding_quadtree (hevc.c:1571)
 ==2916==    by 0x84DCFD2: hls_coding_quadtree (hevc.c:1628)
 ==2916==    by 0x84DCFD2: hls_coding_quadtree (hevc.c:1628)
 ==2916==    by 0x84DCF0D: hls_coding_quadtree (hevc.c:1623)
 ==2916==    by 0x84E28A7: decode_nal_units (hevc.c:1742)
 ==2916==    by 0x84E369B: hevc_decode_frame (hevc.c:2275)
 ==2916==    by 0x80B64FC: decode_video (ffmpeg.c:1668)
 ==2916==    by 0x4032257F: ???
 ==2916==  Address 0x4bdff52 is 9 bytes after a block of size 185 alloc'd
 ==2916==    at 0x4028308: malloc (vg_replace_malloc.c:263)
 ==2916==    by 0x402849F: realloc (vg_replace_malloc.c:632)
 ==2916==    by 0x88F0407: av_buffer_realloc (buffer.c:164)
 ==2916==    by 0x827F7CC: av_dup_packet (avpacket.c:204)
 ==2916==    by 0x823CC9B: parse_packet (utils.c:1285)
 ==2916==    by 0x823DE60: read_frame_internal (utils.c:1341)
 ==2916==    by 0x823E369: av_read_frame (utils.c:1437)
 ==2916==    by 0x80B9A65: process_input (ffmpeg.c:2893)
 ==2916==    by 0x80A5B82: main (ffmpeg.c:3200)
 ==2916==
 ==2916== Invalid read of size 2
 ==2916==    at 0x84E8523: ff_hevc_hls_residual_coding (cabac.h:174)
 ==2916==    by 0x84DB37A: hls_transform_tree (hevc.c:761)
 ==2916==    by 0x84DAE3C: hls_transform_tree (hevc.c:852)
 ==2916==    by 0x84DD5F8: hls_coding_quadtree (hevc.c:1571)
 ==2916==    by 0x84DCFD2: hls_coding_quadtree (hevc.c:1628)
 ==2916==    by 0x84DCFD2: hls_coding_quadtree (hevc.c:1628)
 ==2916==    by 0x84DCF0D: hls_coding_quadtree (hevc.c:1623)
 ==2916==    by 0x84E28A7: decode_nal_units (hevc.c:1742)
 ==2916==    by 0x84E369B: hevc_decode_frame (hevc.c:2275)
 ==2916==    by 0x80B64FC: decode_video (ffmpeg.c:1668)
 ==2916==    by 0x4032257F: ???
 ==2916==  Address 0x4bdff54 is 11 bytes after a block of size 185 alloc'd
 ==2916==    at 0x4028308: malloc (vg_replace_malloc.c:263)
 ==2916==    by 0x402849F: realloc (vg_replace_malloc.c:632)
 ==2916==    by 0x88F0407: av_buffer_realloc (buffer.c:164)
 ==2916==    by 0x827F7CC: av_dup_packet (avpacket.c:204)
 ==2916==    by 0x823CC9B: parse_packet (utils.c:1285)
 ==2916==    by 0x823DE60: read_frame_internal (utils.c:1341)
 ==2916==    by 0x823E369: av_read_frame (utils.c:1437)
 ==2916==    by 0x80B9A65: process_input (ffmpeg.c:2893)
 ==2916==    by 0x80A5B82: main (ffmpeg.c:3200)
 ==2916==
 ==2916== Invalid read of size 2
 ==2916==    at 0x84E6FCC: ff_hevc_hls_residual_coding (cabac.h:174)
 ==2916==    by 0x84DB37A: hls_transform_tree (hevc.c:761)
 ==2916==    by 0x84DD5F8: hls_coding_quadtree (hevc.c:1571)
 ==2916==    by 0x84DCFD2: hls_coding_quadtree (hevc.c:1628)
 ==2916==    by 0x84DCFD2: hls_coding_quadtree (hevc.c:1628)
 ==2916==    by 0x84DCF0D: hls_coding_quadtree (hevc.c:1623)
 ==2916==    by 0x84E28A7: decode_nal_units (hevc.c:1742)
 ==2916==    by 0x84E369B: hevc_decode_frame (hevc.c:2275)
 ==2916==    by 0x80B64FC: decode_video (ffmpeg.c:1668)
 ==2916==    by 0x4032257F: ???
 ==2916==  Address 0x4bdff56 is 13 bytes after a block of size 185 alloc'd
 ==2916==    at 0x4028308: malloc (vg_replace_malloc.c:263)
 ==2916==    by 0x402849F: realloc (vg_replace_malloc.c:632)
 ==2916==    by 0x88F0407: av_buffer_realloc (buffer.c:164)
 ==2916==    by 0x827F7CC: av_dup_packet (avpacket.c:204)
 ==2916==    by 0x823CC9B: parse_packet (utils.c:1285)
 ==2916==    by 0x823DE60: read_frame_internal (utils.c:1341)
 ==2916==    by 0x823E369: av_read_frame (utils.c:1437)
 ==2916==    by 0x80B9A65: process_input (ffmpeg.c:2893)
 ==2916==    by 0x80A5B82: main (ffmpeg.c:3200)
 ==2916==
 ==2916== Invalid read of size 2
 ==2916==    at 0x84E6119: ff_hevc_merge_idx_decode (cabac.h:239)
 ==2916==    by 0x84DBD01: hls_prediction_unit (hevc.c:1068)
 ==2916==    by 0x84DDBF8: hls_coding_quadtree (hevc.c:1488)
 ==2916==    by 0x84DCFA4: hls_coding_quadtree (hevc.c:1630)
 ==2916==    by 0x84DCF0D: hls_coding_quadtree (hevc.c:1623)
 ==2916==    by 0x84E28A7: decode_nal_units (hevc.c:1742)
 ==2916==    by 0x84E369B: hevc_decode_frame (hevc.c:2275)
 ==2916==    by 0x80B64FC: decode_video (ffmpeg.c:1668)
 ==2916==    by 0x4032257F: ???
 ==2916==  Address 0x4bdff58 is 15 bytes after a block of size 185 alloc'd
 ==2916==    at 0x4028308: malloc (vg_replace_malloc.c:263)
 ==2916==    by 0x402849F: realloc (vg_replace_malloc.c:632)
 ==2916==    by 0x88F0407: av_buffer_realloc (buffer.c:164)
 ==2916==    by 0x827F7CC: av_dup_packet (avpacket.c:204)
 ==2916==    by 0x823CC9B: parse_packet (utils.c:1285)
 ==2916==    by 0x823DE60: read_frame_internal (utils.c:1341)
 ==2916==    by 0x823E369: av_read_frame (utils.c:1437)
 ==2916==    by 0x80B9A65: process_input (ffmpeg.c:2893)
 ==2916==    by 0x80A5B82: main (ffmpeg.c:3200)
 ==2916==
 ==2916== Invalid read of size 2
 ==2916==    at 0x84E54F3: ff_hevc_split_coding_unit_flag_decode
 (cabac.h:174)
 ==2916==    by 0x84DD021: hls_coding_quadtree (hevc.c:1606)
 ==2916==    by 0x84DCF0D: hls_coding_quadtree (hevc.c:1623)
 ==2916==    by 0x84DCFD2: hls_coding_quadtree (hevc.c:1628)
 ==2916==    by 0x84E28A7: decode_nal_units (hevc.c:1742)
 ==2916==    by 0x84E369B: hevc_decode_frame (hevc.c:2275)
 ==2916==    by 0x80B64FC: decode_video (ffmpeg.c:1668)
 ==2916==    by 0x4032257F: ???
 ==2916==  Address 0x4bdff58 is 15 bytes after a block of size 185 alloc'd
 ==2916==    at 0x4028308: malloc (vg_replace_malloc.c:263)
 ==2916==    by 0x402849F: realloc (vg_replace_malloc.c:632)
 ==2916==    by 0x88F0407: av_buffer_realloc (buffer.c:164)
 ==2916==    by 0x827F7CC: av_dup_packet (avpacket.c:204)
 ==2916==    by 0x823CC9B: parse_packet (utils.c:1285)
 ==2916==    by 0x823DE60: read_frame_internal (utils.c:1341)
 ==2916==    by 0x823E369: av_read_frame (utils.c:1437)
 ==2916==    by 0x80B9A65: process_input (ffmpeg.c:2893)
 ==2916==    by 0x80A5B82: main (ffmpeg.c:3200)
 ==2916==
 ==2916== Invalid read of size 2
 ==2916==    at 0x84E8ED9: ff_hevc_hls_mvd_coding (cabac.h:198)
 ==2916==    by 0x84DC9E7: hls_prediction_unit (hevc.c:1107)
 ==2916==    by 0x84DDB64: hls_coding_quadtree (hevc.c:1527)
 ==2916==    by 0x84DCFD2: hls_coding_quadtree (hevc.c:1628)
 ==2916==    by 0x84DCF0D: hls_coding_quadtree (hevc.c:1623)
 ==2916==    by 0x84DCFD2: hls_coding_quadtree (hevc.c:1628)
 ==2916==    by 0x84E28A7: decode_nal_units (hevc.c:1742)
 ==2916==    by 0x84E369B: hevc_decode_frame (hevc.c:2275)
 ==2916==    by 0x80B64FC: decode_video (ffmpeg.c:1668)
 ==2916==    by 0x4032257F: ???
 ==2916==  Address 0x4bdff5a is not stack'd, malloc'd or (recently) free'd
 ==2916==
 ==2916== Invalid read of size 2
 ==2916==    at 0x84E4DB1: ff_hevc_skip_flag_decode (cabac.h:174)
 ==2916==    by 0x84DD116: hls_coding_quadtree (hevc.c:1476)
 ==2916==    by 0x84DCFA4: hls_coding_quadtree (hevc.c:1630)
 ==2916==    by 0x84DCFD2: hls_coding_quadtree (hevc.c:1628)
 ==2916==    by 0x84E28A7: decode_nal_units (hevc.c:1742)
 ==2916==    by 0x84E369B: hevc_decode_frame (hevc.c:2275)
 ==2916==    by 0x80B64FC: decode_video (ffmpeg.c:1668)
 ==2916==    by 0x4032257F: ???
 ==2916==  Address 0x4bdff5c is not stack'd, malloc'd or (recently) free'd
 ==2916==
 ==2916== Invalid read of size 2
 ==2916==    at 0x84E54F3: ff_hevc_split_coding_unit_flag_decode
 (cabac.h:174)
 ==2916==    by 0x84DD021: hls_coding_quadtree (hevc.c:1606)
 ==2916==    by 0x84E28A7: decode_nal_units (hevc.c:1742)
 ==2916==    by 0x84E369B: hevc_decode_frame (hevc.c:2275)
 ==2916==    by 0x80B64FC: decode_video (ffmpeg.c:1668)
 ==2916==    by 0x4032257F: ???
 ==2916==  Address 0x4bdff5e is not stack'd, malloc'd or (recently) free'd
 ==2916==
 ==2916== Invalid read of size 2
 ==2916==    at 0x84E5379: ff_hevc_pred_mode_decode (cabac.h:174)
 ==2916==    by 0x84DD1AD: hls_coding_quadtree (hevc.c:1497)
 ==2916==    by 0x84DCF0D: hls_coding_quadtree (hevc.c:1623)
 ==2916==    by 0x84E28A7: decode_nal_units (hevc.c:1742)
 ==2916==    by 0x84E369B: hevc_decode_frame (hevc.c:2275)
 ==2916==    by 0x80B64FC: decode_video (ffmpeg.c:1668)
 ==2916==    by 0x4032257F: ???
 ==2916==  Address 0x4bdff60 is not stack'd, malloc'd or (recently) free'd
 ==2916==
 ==2916== Invalid read of size 2
 ==2916==    at 0x84E5DBE: ff_hevc_rem_intra_luma_pred_mode_decode
 (cabac.h:239)
 ==2916==    by 0x84DE1D0: hls_coding_quadtree (hevc.c:1407)
 ==2916==    by 0x84DCF0D: hls_coding_quadtree (hevc.c:1623)
 ==2916==    by 0x84E28A7: decode_nal_units (hevc.c:1742)
 ==2916==    by 0x84E369B: hevc_decode_frame (hevc.c:2275)
 ==2916==    by 0x80B64FC: decode_video (ffmpeg.c:1668)
 ==2916==    by 0x4032257F: ???
 ==2916==  Address 0x4bdff62 is not stack'd, malloc'd or (recently) free'd
 ==2916==
 ==2916== Invalid read of size 2
 ==2916==    at 0x84E54F3: ff_hevc_split_coding_unit_flag_decode
 (cabac.h:174)
 ==2916==    by 0x84DD021: hls_coding_quadtree (hevc.c:1606)
 ==2916==    by 0x84DCFD2: hls_coding_quadtree (hevc.c:1628)
 ==2916==    by 0x84DCF0D: hls_coding_quadtree (hevc.c:1623)
 ==2916==    by 0x84E28A7: decode_nal_units (hevc.c:1742)
 ==2916==    by 0x84E369B: hevc_decode_frame (hevc.c:2275)
 ==2916==    by 0x80B64FC: decode_video (ffmpeg.c:1668)
 ==2916==    by 0x4032257F: ???
 ==2916==  Address 0x4bdff62 is not stack'd, malloc'd or (recently) free'd
 ==2916==
 ==2916== Invalid read of size 2
 ==2916==    at 0x84E67D9: ff_hevc_no_residual_syntax_flag_decode
 (cabac.h:174)
 ==2916==    by 0x84DD58D: hls_coding_quadtree (hevc.c:1565)
 ==2916==    by 0x84E28A7: decode_nal_units (hevc.c:1742)
 ==2916==    by 0x84E369B: hevc_decode_frame (hevc.c:2275)
 ==2916==    by 0x80B64FC: decode_video (ffmpeg.c:1668)
 ==2916==    by 0x4032257F: ???
 ==2916==  Address 0x4bdff66 is not stack'd, malloc'd or (recently) free'd
 ==2916==
 ==2916== Invalid read of size 2
 ==2916==    at 0x84E54F3: ff_hevc_split_coding_unit_flag_decode
 (cabac.h:174)
 ==2916==    by 0x84DD021: hls_coding_quadtree (hevc.c:1606)
 ==2916==    by 0x84DCFA4: hls_coding_quadtree (hevc.c:1630)
 ==2916==    by 0x84E28A7: decode_nal_units (hevc.c:1742)
 ==2916==    by 0x84E369B: hevc_decode_frame (hevc.c:2275)
 ==2916==    by 0x80B64FC: decode_video (ffmpeg.c:1668)
 ==2916==    by 0x4032257F: ???
 ==2916==  Address 0x4bdff68 is not stack'd, malloc'd or (recently) free'd
 ==2916==
 ==2916== Invalid read of size 2
 ==2916==    at 0x84E54F3: ff_hevc_split_coding_unit_flag_decode
 (cabac.h:174)
 ==2916==    by 0x84DD021: hls_coding_quadtree (hevc.c:1606)
 ==2916==    by 0x84DCF0D: hls_coding_quadtree (hevc.c:1623)
 ==2916==    by 0x84E28A7: decode_nal_units (hevc.c:1742)
 ==2916==    by 0x84E369B: hevc_decode_frame (hevc.c:2275)
 ==2916==    by 0x80B64FC: decode_video (ffmpeg.c:1668)
 ==2916==    by 0x4032257F: ???
 ==2916==  Address 0x4bdff6a is not stack'd, malloc'd or (recently) free'd
 ==2916==
 frame=  303 fps= 26 q=0.0 Lsize=N/A time=00:00:12.63 bitrate=N/A
 video:19kB audio:0kB subtitle:0 global headers:0kB muxing overhead
 -100.113449%
 ==2916==
 ==2916== HEAP SUMMARY:
 ==2916==     in use at exit: 0 bytes in 0 blocks
 ==2916==   total heap usage: 12,005 allocs, 12,005 frees, 118,781,688
 bytes allocated
 ==2916==
 ==2916== All heap blocks were freed -- no leaks are possible
 ==2916==
 ==2916== For counts of detected and suppressed errors, rerun with: -v
 ==2916== ERROR SUMMARY: 23 errors from 20 contexts (suppressed: 59 from 6)
 }}}

-- 
Ticket URL: <https://ffmpeg.org/trac/ffmpeg/ticket/3070>
FFmpeg <http://ffmpeg.org>
FFmpeg issue tracker


More information about the FFmpeg-trac mailing list