[Libav-user] bug in av_expr_free() ?

[Yakov Mindelis]

Hello,

I tried to do a 2-nd pass encoding using the stats_out I got in the 1-st 
pass.
Got crash due to double call to ff_rate_control_uninit() after hitting:
     } else if (toobig == 40) {
         av_log(s->avctx, AV_LOG_ERROR,
                "[lavc rc] Error: bitrate too low for this video "
                "with these parameters.\n");
         return -1;

2-nd call to ff_rate_control_uninit(), 2-nd call was called from 
avctx->codec->close(avctx);
Appears that ev_freep(&e) in av_expr_free(e) is idempotent to the arg of 
av_expr_free() and nullifies the copy to the pointed inside the fiunction.


Yakov Mindelis
----
Office: +972-4-627-3463(+07)
Israeli CFD Center          Fax: +972-4-627-3460
9 Halamish Street           Cellular: +972-54-264-6296
Ofek 4 Building             mailto:jack at iscfdc.com
Caesarea Industrial Center  http://www.iscfdc.co.il