New submission from Nga Chung <[EMAIL PROTECTED]>:

I am trying to transcode from an aac to a wma format. Valgrind reports
conditional jump or move depends on uninitialised value(s) in aac_sync()
(aac_parser.c:39).

I confirmed that this bug is reproducible in the latest subversion of FFmpeg,
SVN-r14172.

I uploaded the test file via ftp upload.mplayerhq.hu in the directory
/MPlayer/incoming/ngatestcase/uninit_condition_test.aac

My System Information:
OS: Linux Debian x32
kernel: Linux debian 2.6.18-6-486 #1 Fri Jun 6 21:47:01 UTC 2008 i686 GNU/Linux
gcc version 4.1.2 20061115
ld version 2.17

My Hardware Information:
32-bit Intel(R) Core(TM)2 Duo CPU T7250 @ 2.00GHz
Multimedia audio controller: Ensoniq ES1371 [AudioPCI-97] (rev 02)

To reproduce:
valgrind ./ffmpeg/ffmpeg_g -i uninit_condition_test.aac test.wma

The following is the output from Valgrind:

==20717== Memcheck, a memory error detector.
==20717== Copyright (C) 2002-2007, and GNU GPL'd, by Julian Seward et al.
==20717== Using LibVEX rev 1854, a library for dynamic binary translation.
==20717== Copyright (C) 2004-2007, and GNU GPL'd, by OpenWorks LLP.
==20717== Using valgrind-3.3.1, a dynamic binary instrumentation framework.
==20717== Copyright (C) 2000-2007, and GNU GPL'd, by Julian Seward et al.
==20717== For more details, rerun with: -v
==20717==
FFmpeg version SVN-r14172, Copyright (c) 2000-2008 Fabrice Bellard, et al.
  configuration:
  libavutil version: 49.7.0
  libavcodec version: 51.60.0
  libavformat version: 52.17.0
  libavdevice version: 52.0.0
  built on Jul 11 2008 22:45:57, gcc: 4.1.2 20061115 (prerelease) (Debian 
4.1.1-21)
==20717== Conditional jump or move depends on uninitialised value(s)
==20717== Stack hash: 138022215
==20717==    at 0x83A0D47: aac_sync (aac_parser.c:39)
Input #0, aac, from 'uninit_condition_test.aac':
  Duration: 00:00:00.37, bitrate: 156 kb/s
    Stream #0.0: Audio: 0x0000, 7350 Hz, stereo, 156 kb/s
Output #0, asf, to 'test.wma':
    Stream #0.0: Audio: mp2, 7350 Hz, stereo, 64 kb/s
Stream mapping:
  Stream #0.0 -> #0.0
[mp2 @ 0x8458db0]Sampling rate 7350 is not allowed in mp2
Error while opening codec for output stream #0.0 - maybe incorrect parameters
such as bit_rate, rate, width or height
==20717==
==20717== ERROR SUMMARY: 3100 errors from 1 contexts (suppressed: 17 from 1)
==20717== malloc/free: in use at exit: 293,235 bytes in 17 blocks.
==20717== malloc/free: 53 allocs, 36 frees, 537,798 bytes allocated.
==20717== For counts of detected errors, rerun with: -v
==20717== searching for pointers to 17 not-freed blocks.
==20717== checked 2,501,832 bytes.
==20717==
==20717== LEAK SUMMARY:
==20717==    definitely lost: 21,226 bytes in 2 blocks.
==20717==      possibly lost: 0 bytes in 0 blocks.
==20717==    still reachable: 272,009 bytes in 15 blocks.
==20717==         suppressed: 0 bytes in 0 blocks.
==20717== Rerun with --leak-check=full to see details of leaked memory.

This bug was found using the catchconv fuzzer.

This bug was found as part of the SUPERB-TRUST 2008 project; see
http://www.truststc.org/superb/

Please let me know if you need more information.

----------
messages: 2404
nosy: thiennga
priority: normal
status: new
substatus: new
title: Valgrind reports conditional jump or move depends on uninitialised 
value(s) in aac_sync() (aac_parser.c:39)
type: bug

______________________________________________________
FFmpeg issue tracker <[EMAIL PROTECTED]>
<https://roundup.mplayerhq.hu/roundup/ffmpeg/issue527>
______________________________________________________

Reply via email to