[FFmpeg-trac] #3430(undetermined:open): Segfault when applying atempo on audio from the same video input

FFmpeg trac at avcodec.org
Mon Mar 3 14:28:11 CET 2014


#3430: Segfault when applying atempo on audio from the same video input
-------------------------------------+-------------------------------------
             Reporter:  Waraqa       |                    Owner:
                 Type:  defect       |                   Status:  open
             Priority:  important    |                Component:
              Version:  git-master   |  undetermined
             Keywords:  crash        |               Resolution:
  atempo regression                  |               Blocked By:
             Blocking:               |  Reproduced by developer:  1
Analyzed by developer:  0            |
-------------------------------------+-------------------------------------
Changes (by cehoyos):

 * keywords:   => crash atempo regression
 * priority:  normal => important
 * version:  unspecified => git-master
 * status:  new => open
 * reproduced:  0 => 1


Comment:

 Regression since dd9555e9
 {{{
 $ valgrind ./ffmpeg_g -i fate-suite/svq3/Vertical400kbit.sorenson3.mov -af
 atempo -t 1 -vn -f null -
 ==1875== Memcheck, a memory error detector
 ==1875== Copyright (C) 2002-2011, and GNU GPL'd, by Julian Seward et al.
 ==1875== Using Valgrind-3.7.0 and LibVEX; rerun with -h for copyright info
 ==1875== Command: ./ffmpeg_g -i fate-
 suite/svq3/Vertical400kbit.sorenson3.mov -af atempo -t 1 -vn -f null -
 ==1875==
 ffmpeg version N-61051-g40feed5 Copyright (c) 2000-2014 the FFmpeg
 developers
   built on Mar  3 2014 14:25:25 with gcc 4.7 (SUSE Linux)
   configuration: --enable-gpl
   libavutil      52. 66.100 / 52. 66.100
   libavcodec     55. 52.102 / 55. 52.102
   libavformat    55. 33.100 / 55. 33.100
   libavdevice    55. 10.100 / 55. 10.100
   libavfilter     4.  2.100 /  4.  2.100
   libswscale      2.  5.101 /  2.  5.101
   libswresample   0. 18.100 /  0. 18.100
   libpostproc    52.  3.100 / 52.  3.100
 Guessed Channel Layout for  Input Stream #0.1 : mono
 Input #0, mov,mp4,m4a,3gp,3g2,mj2, from 'fate-
 suite/svq3/Vertical400kbit.sorenson3.mov':
   Metadata:
     creation_time   : 2001-03-20 16:17:18
     title           : Vertical Online SV3 Demo
     title-eng       : Vertical Online SV3 Demo
     artist          : Logan Kelsey
     artist-eng      : Logan Kelsey
     copyright       : © Vertical Online 2001
     copyright-eng   : © Vertical Online 2001
     encoder         : Sorenson Video 3
     encoder-eng     : Sorenson Video 3
   Duration: 00:00:43.58, start: 0.000000, bitrate: 580 kb/s
     Stream #0:0(eng): Video: svq3 (SVQ3 / 0x33515653), yuvj420p, 320x240,
 391 kb/s, 30.02 fps, 30 tbr, 600 tbn, 600 tbc (default)
     Metadata:
       creation_time   : 2001-03-20 16:17:18
       handler_name    : Apple Alias Data Handler
     Stream #0:1(eng): Audio: adpcm_ima_qt (ima4 / 0x34616D69), 44100 Hz,
 mono, s16p, 176 kb/s (default)
     Metadata:
       creation_time   : 2001-03-20 16:17:18
       handler_name    : Apple Alias Data Handler
 Output #0, null, to 'pipe:':
   Metadata:
     encoder-eng     : Sorenson Video 3
     title           : Vertical Online SV3 Demo
     title-eng       : Vertical Online SV3 Demo
     artist          : Logan Kelsey
     artist-eng      : Logan Kelsey
     copyright       : © Vertical Online 2001
     copyright-eng   : © Vertical Online 2001
     encoder         : Lavf55.33.100
     Stream #0:0(eng): Audio: pcm_s16le, 44100 Hz, mono, s16, 705 kb/s
 (default)
     Metadata:
       creation_time   : 2001-03-20 16:17:18
       handler_name    : Apple Alias Data Handler
 Stream mapping:
   Stream #0:1 -> #0:0 (adpcm_ima_qt -> pcm_s16le)
 Press [q] to stop, [?] for help
 Multiple frames in a packet from stream 1
 ==1875== Invalid read of size 8
 ==1875==    at 0x4EA2A8: filter_frame (af_atempo.c:1098)
 ==1875==    by 0x48EDB9: ff_filter_frame_framed (avfilter.c:1081)
 ==1875==    by 0x48FEB8: ff_filter_frame (avfilter.c:1161)
 ==1875==    by 0x4E74B2: filter_frame (af_aresample.c:215)
 ==1875==    by 0x48EDB9: ff_filter_frame_framed (avfilter.c:1081)
 ==1875==    by 0x48FEB8: ff_filter_frame (avfilter.c:1161)
 ==1875==    by 0x493F71: request_frame (buffersrc.c:500)
 ==1875==    by 0x49420A: av_buffersrc_add_frame_internal (buffersrc.c:181)
 ==1875==    by 0x49459C: av_buffersrc_add_frame_flags (buffersrc.c:106)
 ==1875==    by 0x47F5B5: decode_audio (ffmpeg.c:1722)
 ==1875==    by 0x481CB5: process_input (ffmpeg.c:1962)
 ==1875==    by 0x467FDF: main (ffmpeg.c:3389)
 ==1875==  Address 0xc196720 is 0 bytes inside a block of size 624 free'd
 ==1875==    at 0x4C29D4E: free (in /usr/lib64/valgrind/vgpreload_memcheck-
 amd64-linux.so)
 ==1875==    by 0xD2016B: av_freep (mem.c:231)
 ==1875==    by 0x48EF1D: ff_filter_frame_framed (avfilter.c:1008)
 ==1875==    by 0x48F2C0: default_filter_frame (avfilter.c:1161)
 ==1875==    by 0x48EDB9: ff_filter_frame_framed (avfilter.c:1081)
 ==1875==    by 0x48FEB8: ff_filter_frame (avfilter.c:1161)
 ==1875==    by 0x4EA2E8: filter_frame (af_atempo.c:1060)
 ==1875==    by 0x48EDB9: ff_filter_frame_framed (avfilter.c:1081)
 ==1875==    by 0x48FEB8: ff_filter_frame (avfilter.c:1161)
 ==1875==    by 0x4E74B2: filter_frame (af_aresample.c:215)
 ==1875==    by 0x48EDB9: ff_filter_frame_framed (avfilter.c:1081)
 ==1875==    by 0x48FEB8: ff_filter_frame (avfilter.c:1161)
 ==1875==
 ==1875== Invalid write of size 4
 ==1875==    at 0x4EA2BE: filter_frame (af_atempo.c:1051)
 ==1875==    by 0x48EDB9: ff_filter_frame_framed (avfilter.c:1081)
 ==1875==    by 0x48FEB8: ff_filter_frame (avfilter.c:1161)
 ==1875==    by 0x4E74B2: filter_frame (af_aresample.c:215)
 ==1875==    by 0x48EDB9: ff_filter_frame_framed (avfilter.c:1081)
 ==1875==    by 0x48FEB8: ff_filter_frame (avfilter.c:1161)
 ==1875==    by 0x493F71: request_frame (buffersrc.c:500)
 ==1875==    by 0x49420A: av_buffersrc_add_frame_internal (buffersrc.c:181)
 ==1875==    by 0x49459C: av_buffersrc_add_frame_flags (buffersrc.c:106)
 ==1875==    by 0x47F5B5: decode_audio (ffmpeg.c:1722)
 ==1875==    by 0x481CB5: process_input (ffmpeg.c:1962)
 ==1875==    by 0x467FDF: main (ffmpeg.c:3389)
 ==1875==  Address 0xc1968e4 is 452 bytes inside a block of size 624 free'd
 ==1875==    at 0x4C29D4E: free (in /usr/lib64/valgrind/vgpreload_memcheck-
 amd64-linux.so)
 ==1875==    by 0xD2016B: av_freep (mem.c:231)
 ==1875==    by 0x48EF1D: ff_filter_frame_framed (avfilter.c:1008)
 ==1875==    by 0x48F2C0: default_filter_frame (avfilter.c:1161)
 ==1875==    by 0x48EDB9: ff_filter_frame_framed (avfilter.c:1081)
 ==1875==    by 0x48FEB8: ff_filter_frame (avfilter.c:1161)
 ==1875==    by 0x4EA2E8: filter_frame (af_atempo.c:1060)
 ==1875==    by 0x48EDB9: ff_filter_frame_framed (avfilter.c:1081)
 ==1875==    by 0x48FEB8: ff_filter_frame (avfilter.c:1161)
 ==1875==    by 0x4E74B2: filter_frame (af_aresample.c:215)
 ==1875==    by 0x48EDB9: ff_filter_frame_framed (avfilter.c:1081)
 ==1875==    by 0x48FEB8: ff_filter_frame (avfilter.c:1161)
 ==1875==

 ...
 }}}

--
Ticket URL: <https://trac.ffmpeg.org/ticket/3430#comment:3>
FFmpeg <https://ffmpeg.org>
FFmpeg issue tracker


More information about the FFmpeg-trac mailing list