New submission from Carl Eugen Hoyos <ceho...@rainbow.studorg.tuwien.ac.at>:

(gdb) r -i combined_22_16_1_64000_v2c_0_exclusive_29.wma -f null -
FFmpeg version SVN-r26313, Copyright (c) 2000-2011 the FFmpeg developers
  built on Jan 12 2011 00:18:28 with gcc 4.4.5
  configuration: --cc=/usr/local/gcc-4.4.5/bin/gcc --disable-optimizations
--disable-asm
  libavutil     50.36. 0 / 50.36. 0
  libavcore      0.16. 0 /  0.16. 0
  libavcodec    52.108. 0 / 52.108. 0
  libavformat   52.92. 0 / 52.92. 0
  libavdevice   52. 2. 3 / 52. 2. 3
  libavfilter    1.72. 0 /  1.72. 0
  libswscale     0.12. 0 /  0.12. 0
Input #0, asf, from 'combined_22_16_1_64000_v2c_0_exclusive_29.wma':
  Metadata:
    WMFSDKVersion   : 10.00.00.3700
    WMFSDKNeeded    : 0.0.0.0000
    IsVBR           : 0
  Duration: 00:03:49.43, start: 1.579000, bitrate: 64 kb/s
    Stream #0.0(eng): Audio: wmapro, 22050 Hz, mono, flt, 64 kb/s
Output #0, null, to 'pipe:':
  Metadata:
    WMFSDKVersion   : 10.00.00.3700
    WMFSDKNeeded    : 0.0.0.0000
    IsVBR           : 0
    encoder         : Lavf52.92.0
    Stream #0.0(eng): Audio: pcm_s16le, 22050 Hz, mono, s16, 352 kb/s
Stream mapping:
  Stream #0.0 -> #0.0
Press [q] to stop encoding
Multiple frames in a packet from stream 0

Program received signal SIGSEGV, Segmentation fault.
0x0000000000558958 in ff_vector_fmul_window_c (dst=0x1223870, src0=0x1223870,
src1=0x1223870, win=0x80,
    add_bias=0, len=32) at libavcodec/dsputil.c:3781
3781            float wi = win[i];
(gdb) bt                                                                       
                        
#0  0x0000000000558958 in ff_vector_fmul_window_c (dst=0x1223870,
src0=0x1223870, src1=0x1223870,       
    win=0x80, add_bias=0, len=32) at libavcodec/dsputil.c:3781                 
                        
#1  0x00000000007aec44 in wmapro_window (s=0x1212d10) at
libavcodec/wmaprodec.c:1028                    
#2  0x00000000007afa76 in decode_subframe (s=0x1212d10) at
libavcodec/wmaprodec.c:1242                  
#3  0x00000000007afe3f in decode_frame (s=0x1212d10) at
libavcodec/wmaprodec.c:1337                     
#4  0x00000000007b06a2 in decode_packet (avctx=0x11b7da0, data=0x1256df0,
data_size=0x7fffffffcf1c,     
    avpkt=0x7fffffffcf20) at libavcodec/wmaprodec.c:1537                       
                        
#5  0x0000000000750c2e in avcodec_decode_audio3 (avctx=0x11b7da0,
samples=0x1256df0,                    
    frame_size_ptr=0x7fffffffcf1c, avpkt=0x7fffffffcf20) at 
libavcodec/utils.c:686
#6  0x000000000040900e in output_packet (ist=0x11b86a0, ist_index=0,
ost_table=0x11b8740, nb_ostreams=1,
    pkt=0x7fffffffd250) at ffmpeg.c:1526
#7  0x000000000040d8b2 in transcode (output_files=0xc6e7e0, nb_output_files=1,
input_files=0xc6dcc0,
    nb_input_files=1, stream_maps=0x0, nb_stream_maps=0) at ffmpeg.c:2643
#8  0x0000000000411ff8 in main (argc=6, argv=0x7fffffffddd8) at ffmpeg.c:4365
(gdb) disass $pc-32 $pc+32
Dump of assembler code from 0x558938 to 0x558978:
0x0000000000558938 <ff_vector_fmul_window_c+107>:       lock mov 
-0x14(%rbp),%eax
0x000000000055893c <ff_vector_fmul_window_c+111>:       cltq
0x000000000055893e <ff_vector_fmul_window_c+113>:       shl    $0x2,%rax
0x0000000000558942 <ff_vector_fmul_window_c+117>:       add    -0x38(%rbp),%rax
0x0000000000558946 <ff_vector_fmul_window_c+121>:       mov    (%rax),%eax
0x0000000000558948 <ff_vector_fmul_window_c+123>:       mov    %eax,-0xc(%rbp)
0x000000000055894b <ff_vector_fmul_window_c+126>:       mov    -0x18(%rbp),%eax
0x000000000055894e <ff_vector_fmul_window_c+129>:       cltq
0x0000000000558950 <ff_vector_fmul_window_c+131>:       shl    $0x2,%rax
0x0000000000558954 <ff_vector_fmul_window_c+135>:       add    -0x40(%rbp),%rax
0x0000000000558958 <ff_vector_fmul_window_c+139>:       mov    (%rax),%eax
0x000000000055895a <ff_vector_fmul_window_c+141>:       mov    %eax,-0x8(%rbp)
0x000000000055895d <ff_vector_fmul_window_c+144>:       mov    -0x14(%rbp),%eax
0x0000000000558960 <ff_vector_fmul_window_c+147>:       cltq
0x0000000000558962 <ff_vector_fmul_window_c+149>:       shl    $0x2,%rax
0x0000000000558966 <ff_vector_fmul_window_c+153>:       add    -0x40(%rbp),%rax
0x000000000055896a <ff_vector_fmul_window_c+157>:       mov    (%rax),%eax
0x000000000055896c <ff_vector_fmul_window_c+159>:       mov    %eax,-0x4(%rbp)
0x000000000055896f <ff_vector_fmul_window_c+162>:       mov    -0x18(%rbp),%eax
0x0000000000558972 <ff_vector_fmul_window_c+165>:       cltq
0x0000000000558974 <ff_vector_fmul_window_c+167>:       shl    $0x2,%rax
End of assembler dump.
(gdb) info register
rax            0x0      0
rbx            0x12237f0        19019760
rcx            0x0      0
rdx            0x1223870        19019888
rsi            0x12237f0        19019760
rdi            0x12237f0        19019760
rbp            0x7fffffffcaf0   0x7fffffffcaf0
rsp            0x7fffffffcaf0   0x7fffffffcaf0
r8             0x20     32
r9             0x5588cd 5605581
r10            0x0      0
r11            0x7ffff6d7f2c3   140737334735555
r12            0x404d20 4214048
r13            0x7fffffffddd0   140737488346576
r14            0x0      0
r15            0x0      0
rip            0x558958 0x558958 <ff_vector_fmul_window_c+139>
eflags         0x10247  [ CF PF ZF IF RF ]
cs             0x33     51
ss             0x2b     43
ds             0x0      0
es             0x0      0
fs             0x0      0
gs             0x0      0
fctrl          0x37f    895
fstat          0x0      0
ftag           0xffff   65535
fiseg          0x0      0
fioff          0x0      0
foseg          0x0      0
fooff          0x0      0
fop            0x0      0
mxcsr          0x1fa0   [ PE IM DM ZM OM UM PM ]

----------
messages: 13378
priority: normal
status: open
substatus: open
title: wmapro: crash in vector_fmul_window
topic: avcodec
type: bug

________________________________________________
FFmpeg issue tracker <iss...@roundup.ffmpeg.org>
<https://roundup.ffmpeg.org/issue2538>
________________________________________________

Reply via email to