[MPlayer-users] Seeking an AVI with an unrecognized video format - crashes mplayer

[David Costanzo]

I am reporting a crash in accordance with the instructions given in
DOCS/HTML/en/bugreports.html.

Crash Description:

If you try to play an AVI with MP3 audio and H.264 video, the audio
plays, but the video does not.  This is expected, since H.264 is not a
supported format.  But if you then try to seek the AVI by pressing the
right arrow key, mplayer crashes.  I would expect the audio to be
seeked forward, or for the seek operation to be ignored.

The crash is caused by a NULL dereference in demux_seek_avi(), when it
dereferences a NULL sh_video in line 627.

I have reproduced this with an mplayer that I built from the latest CVS
source.


This crash is 100% reproducable:

1) execute: mplayer some_avi_with_h264_video.avi
2) press the right arrow key



mplayer printed the AVI file format as:

AVI file format detected.
VIDEO:  [ILV4]  320x240  24bpp  29.970 fps  488.7 kbps (59.7 kbyte/s)



Here is the relevant parts of the gdb session (sorry about the
line-wrapping):

demux_seek_avi (demuxer=0x830dae8, rel_seek_secs=10, flags=0) at
demux_avi.c:627
627         int rel_seek_frames=rel_seek_secs*sh_video->fps;
(gdb) p sh_video
$1 = (sh_video_t *) 0x0

(gdb) bt
#0  demux_seek_avi (demuxer=0x830dae8, rel_seek_secs=10, flags=0) at
demux_avi.c:627
#1  0x081050a9 in demux_seek (demuxer=0x830dae8, rel_seek_secs=10,
flags=0) at demuxer.c:1414
#2  0x08055033 in main (argc=2, argv=0xbffff2a4) at mplayer.c:3374
#3  0x420156a4 in __libc_start_main () from /lib/tls/libc.so.6


__________________________________
Do you Yahoo!?
The New Yahoo! Shopping - with improved product search
http://shopping.yahoo.com