Stefano Sabatini <[EMAIL PROTECTED]> added the comment:

Located the problem in the function:
mpegvideo.c:ff_print_debug_info()

the memcpy in line 1178, when i=2 writes junk in s->allocated_edge_emu_buffer,
when it is freed at the end of the decoding it crashes.

(gdb) bt
#0  ff_print_debug_info (s=0x8737750, pict=0xbfe65648) at
libavcodec/mpegvideo.c:1177
#1  0x0830cd63 in slice_end (avctx=0x8736450, pict=0xbfe65648) at
libavcodec/mpeg12.c:1950
#2  0x0830dbdb in decode_chunks (avctx=0x8736450, picture=0xbfe65648,
data_size=0xbfe65708, buf=0x87a24b0 "", buf_size=4933) at 
libavcodec/mpeg12.c:2318
#3  0x0830da78 in mpeg_decode_frame (avctx=0x8736450, data=0xbfe65648,
data_size=0xbfe65708, buf=0x87a24b0 "", buf_size=4933) at 
libavcodec/mpeg12.c:2292
#4  0x080fbf0d in avcodec_decode_video (avctx=0x8736450, picture=0xbfe65648,
got_picture_ptr=0xbfe65708, buf=0x87a24b0 "", buf_size=4933) at
libavcodec/utils.c:897
#5  0x08062107 in output_packet (ist=0x87537a0, ist_index=0,
ost_table=0x87537f0, nb_ostreams=1, pkt=0xbfe65828) at ffmpeg.c:1187
#6  0x08065690 in av_encode (output_files=0x84dce00, nb_output_files=1,
input_files=0x84dc080, nb_input_files=1, stream_maps=0x84dce60,
nb_stream_maps=0) at ffmpeg.c:2085
#7  0x08069dae in main (argc=11, argv=0xbfe65e04) at ffmpeg.c:3864

Trying to understand why it happens...

______________________________________________________
FFmpeg issue tracker <[EMAIL PROTECTED]>
<https://roundup.mplayerhq.hu/roundup/ffmpeg/issue471>
______________________________________________________

Reply via email to