Ronald S. Bultje <rsbul...@gmail.com> added the comment:

==56585== Invalid read of size 4
==56585==    at 0x10036F181: vc1_decode_ac_coeff (in ./ffmpeg_g)
==56585==    by 0x100373E51: vc1_decode_i_blocks_adv (in 
./ffmpeg_g)==56585==    by 0x3000000017: ???
==56585==    by 0x1010EA52F: ???
==56585==    by 0x7FFF0000000C: ???
==56585==    by 0x400000019: ???
==56585==    by 0x16FFFFFFFF: ???
==56585==    by 0x7FFF5FBFE45B: ???
==56585==    by 0x7FFF5FBFE457: ???
==56585==    by 0x7FFF5FBFE453: ???
==56585==    by 0x10106FFF2: ???
==56585==    by 0x5BFF: ???
==56585==  Address 0x101059597 is 1,687 bytes inside a block of size 
1,690 alloc
'd
==56585==    at 0x100CDFD06: memalign (vg_replace_malloc.c:581)
==56585==    by 0x100CDFD5F: posix_memalign (vg_replace_malloc.c:709)
==56585==    by 0x1004B50DC: av_mallocz (in ./ffmpeg_g)
==56585==    by 0x7FFF5FBFE91F: ???
[..]

==56585== Invalid read of size 4
==56585==    at 0x100373A6A: vc1_decode_i_blocks_adv (in ./ffmpeg_g)
==56585==    by 0x3000000017: ???
==56585==    by 0x1010EA52F: ???
==56585==    by 0x7FFF0000000C: ???
==56585==    by 0x400000019: ???
==56585==    by 0x16FFFFFFFF: ???
==56585==    by 0x7FFF5FBFE45B: ???
==56585==    by 0x7FFF5FBFE457: ???==56585==    by 0x7FFF5FBFE453: ???
==56585==    by 0x10106FFF2: ???
==56585==    by 0x5BFF: ???
==56585==    by 0x11: ???
==56585==  Address 0x101059598 is 1,688 bytes inside a block of size 
1,690 alloc
'd
==56585==    at 0x100CDFD06: memalign (vg_replace_malloc.c:581)
==56585==    by 0x100CDFD5F: posix_memalign (vg_replace_malloc.c:709)
==56585==    by 0x1004B50DC: av_mallocz (in ./ffmpeg_g)
==56585==    by 0x7FFF5FBFE91F: ???

disass of second address:
0x0000000100373a1b <vc1_decode_i_blocks_adv+1195>:      mov    
0x35d0(%rbp),%ebx
0x0000000100373a21 <vc1_decode_i_blocks_adv+1201>:      mov    
%ebx,0x94(%rsp)
0x0000000100373a28 <vc1_decode_i_blocks_adv+1208>:      mov    
0x35d4(%rbp),%eax
0x0000000100373a2e <vc1_decode_i_blocks_adv+1214>:      mov    
%eax,0x90(%rsp)
0x0000000100373a35 <vc1_decode_i_blocks_adv+1221>:      mov    
0x90(%rbp),%r13d
0x0000000100373a3c <vc1_decode_i_blocks_adv+1228>:      movslq 
0x3d24(%rbp),%rax
0x0000000100373a43 <vc1_decode_i_blocks_adv+1235>:      lea    
(%rax,%rax,2),%rax
0x0000000100373a47 <vc1_decode_i_blocks_adv+1239>:      shl    $0x3,%rax
0x0000000100373a4b <vc1_decode_i_blocks_adv+1243>:      add    
0x2bd6ae(%rip),%rax        # 0x100631100
0x0000000100373a52 <vc1_decode_i_blocks_adv+1250>:      mov    
0x8(%rax),%r8
0x0000000100373a56 <get_vlc2+0>:        mov    0x3d68(%rbp),%esi
0x0000000100373a5c <get_vlc2+6>:        mov    0x3d58(%rbp),%r9
0x0000000100373a63 <get_vlc2+13>:       mov    %esi,%eax
0x0000000100373a65 <get_vlc2+15>:       shr    $0x3,%eax
0x0000000100373a68 <get_vlc2+18>:       mov    %eax,%eax
0x0000000100373a6a <get_vlc2+20>:       mov    (%r9,%rax,1),%eax
0x0000000100373a6e <av_bswap32+0>:      bswap  %eax
0x0000000100373a70 <NEG_USR32+0>:       mov    %esi,%ecx
0x0000000100373a72 <NEG_USR32+2>:       and    $0x7,%ecx
0x0000000100373a75 <NEG_USR32+5>:       shl    %cl,%eax
0x0000000100373a77 <NEG_USR32+7>:       shr    $0xf7,%eax

disass of first:

0x000000010036f15a <vc1_decode_ac_coeff+42>:    lea    
0x82c6df(%rip),%rdi        # 0x100b9b840 <ff_vc1_ac_coeff_table>
0x000000010036f161 <vc1_decode_ac_coeff+49>:    movslq %r8d,%r8
0x000000010036f164 <vc1_decode_ac_coeff+52>:    lea    (%r8,%r8,2),%rax
0x000000010036f168 <vc1_decode_ac_coeff+56>:    mov    
0x8(%rdi,%rax,8),%r10
0x000000010036f16d <vc1_decode_ac_coeff+61>:    mov    0x3d68(%rbx),%esi
0x000000010036f173 <vc1_decode_ac_coeff+67>:    mov    0x3d58(%rbx),%rbp
0x000000010036f17a <vc1_decode_ac_coeff+74>:    mov    %esi,%eax
0x000000010036f17c <vc1_decode_ac_coeff+76>:    shr    $0x3,%eax
0x000000010036f17f <vc1_decode_ac_coeff+79>:    mov    %eax,%eax
0x000000010036f181 <vc1_decode_ac_coeff+81>:    mov    
0x0(%rbp,%rax,1),%eax
0x000000010036f185 <av_bswap32+0>:      bswap  %eax
0x000000010036f187 <NEG_USR32+0>:       mov    %esi,%ecx
0x000000010036f189 <NEG_USR32+2>:       and    $0x7,%ecx
0x000000010036f18c <NEG_USR32+5>:       shl    %cl,%eax
0x000000010036f18e <NEG_USR32+7>:       shr    $0xf7,%eax
0x000000010036f191 <vc1_decode_ac_coeff+97>:    mov    %eax,%eax
0x000000010036f193 <vc1_decode_ac_coeff+99>:    lea    
(%r10,%rax,4),%rax
0x000000010036f197 <vc1_decode_ac_coeff+103>:   movswl (%rax),%r9d
0x000000010036f19b <vc1_decode_ac_coeff+107>:   movswl 0x2(%rax),%edx
0x000000010036f19f <vc1_decode_ac_coeff+111>:   test   %edx,%edx

________________________________________________
FFmpeg issue tracker <iss...@roundup.ffmpeg.org>
<https://roundup.ffmpeg.org/issue2584>
________________________________________________

Reply via email to