Carl Eugen Hoyos <[email protected]> added the comment:

I cannot reproduce a crash on Linux, but the invalid reads are reproducible (on
different locations depending on whether optimisation is used or not).

FFmpeg version SVN-r25157, Copyright (c) 2000-2010 the FFmpeg developers
  built on Sep 23 2010 00:07:02 with gcc 4.4.4
  configuration: --cc='/usr/local/gcc-4.4.4/bin/gcc -m32' 
--disable-optimizations
  libavutil     50.27. 0 / 50.27. 0
  libavcore      0. 9. 0 /  0. 9. 0
  libavcodec    52.89. 0 / 52.89. 0
  libavformat   52.78. 5 / 52.78. 5
  libavdevice   52. 2. 2 / 52. 2. 2
  libavfilter    1.39. 0 /  1.39. 0
  libswscale     0.11. 0 /  0.11. 0
[mp3 @ 0x4fc4760] max_analyze_duration reached
[mp3 @ 0x4fc4760] Estimating duration from bitrate, this may be inaccurate
Input #0, mp3, from '25157-err.mp3':
  Metadata:
    TMED            : DIG
    TIT2            : Runaway
    TYER            : 2000
    TPUB            : Warner Brothers
    TCON            : Ambient Alternative
    TALB            : Hybrid Theory
    TPE2            : Linkin Park
    TRCK            : 6
    TCOM            : Linkin Park/Mark Wakefirld
    TPE1            : Linkin Park
    TLEN            : 183980
  Duration: 00:03:04.06, start: 0.000000, bitrate: 128 kb/s
    Stream #0.0: Audio: mp3, 44100 Hz, 2 channels, s16, 128 kb/s
Output #0, null, to 'pipe:':
  Metadata:
    encoder         : Lavf52.78.5
    Stream #0.0: Audio: pcm_s16le, 44100 Hz, 2 channels, s16, 1411 kb/s
Stream mapping:
  Stream #0.0 -> #0.0
Press [q] to stop encoding
[mp3 @ 0x4fd7430] Header missingte=  -0.0kbits/s
Error while decoding stream #0.0
[mp3 @ 0x4fd7430] big_values too big
    Last message repeated 2144 times -0.0kbits/s
[mp3 @ 0x4fd7430] invalid new backstep -501
==6314== Invalid read of size 4
==6314==    at 0x825EF3E: skip_bits (get_bits.h:388)
==6314==    by 0x825F046: align_get_bits (get_bits.h:501)
==6314==    by 0x826892B: mp_decode_frame (mpegaudiodec.c:1995)
==6314==    by 0x8268C61: decode_frame (mpegaudiodec.c:2073)
==6314==    by 0x831C6FB: avcodec_decode_audio3 (utils.c:659)
==6314==    by 0x804F348: output_packet (ffmpeg.c:1565)
==6314==    by 0x8053541: transcode (ffmpeg.c:2609)
==6314==    by 0x8057B33: main (ffmpeg.c:4336)
==6314==  Address 0x50270e3 is not stack'd, malloc'd or (recently) free'd
==6314==
==6314== Invalid read of size 4es
==6314==    at 0x825EED6: get_bits (get_bits.h:365)
==6314==    by 0x8268223: mp_decode_layer3 (mpegaudiodec.c:1863)
==6314==    by 0x8268814: mp_decode_frame (mpegaudiodec.c:1980)
==6314==    by 0x8268C61: decode_frame (mpegaudiodec.c:2073)
==6314==    by 0x831C6FB: avcodec_decode_audio3 (utils.c:659)
==6314==    by 0x804F348: output_packet (ffmpeg.c:1565)
==6314==    by 0x8053541: transcode (ffmpeg.c:2609)
==6314==    by 0x8057B33: main (ffmpeg.c:4336)
==6314==  Address 0x5027105 is not stack'd, malloc'd or (recently) free'd
==6314==
==6314== Invalid read of size 4mes
==6314==    at 0x825F06C: get_vlc2 (get_bits.h:609)
==6314==    by 0x82665F9: huffman_decode (mpegaudiodec.c:1379)
==6314==    by 0x82685A9: mp_decode_layer3 (mpegaudiodec.c:1936)
==6314==    by 0x8268814: mp_decode_frame (mpegaudiodec.c:1980)
==6314==    by 0x8268C61: decode_frame (mpegaudiodec.c:2073)
==6314==    by 0x831C6FB: avcodec_decode_audio3 (utils.c:659)
==6314==    by 0x804F348: output_packet (ffmpeg.c:1565)
==6314==    by 0x8053541: transcode (ffmpeg.c:2609)
==6314==    by 0x8057B33: main (ffmpeg.c:4336)
==6314==  Address 0x5037335 is 1,029 bytes inside a block of size 1,032 alloc'd
==6314==    at 0x4CA8E9E: memalign (in
/usr/lib64/valgrind/vgpreload_memcheck-x86-linux.so)
==6314==    by 0x4CA8EFB: posix_memalign (in
/usr/lib64/valgrind/vgpreload_memcheck-x86-linux.so)
==6314==    by 0x8485A82: av_malloc (mem.c:83)
==6314==    by 0x812BA36: av_new_packet (avpacket.c:52)
==6314==    by 0x80FF357: av_get_packet (utils.c:321)
==6314==    by 0x80B31CE: mp3_read_packet (mp3.c:181)
==6314==    by 0x80FFE9D: av_read_packet (utils.c:665)
==6314==    by 0x810199B: av_read_frame_internal (utils.c:1105)
==6314==    by 0x810215D: av_read_frame (utils.c:1230)
==6314==    by 0x8052DE9: transcode (ffmpeg.c:2545)
==6314==    by 0x8057B33: main (ffmpeg.c:4336)
==6314==
size=      -0kB time=45.45 bitrate=  -0.0kbits/s
video:0kB audio:7830kB global headers:0kB muxing overhead -100.000274%
==6314==
==6314== HEAP SUMMARY:
==6314==     in use at exit: 0 bytes in 0 blocks
==6314==   total heap usage: 4,943 allocs, 4,943 frees, 11,732,124 bytes 
allocated
==6314==
==6314== All heap blocks were freed -- no leaks are possible
==6314==
==6314== For counts of detected and suppressed errors, rerun with: -v
==6314== ERROR SUMMARY: 2208 errors from 3 contexts (suppressed: 3 from 3)

----------
status: new -> open
substatus: new -> reproduced
topic: +avcodec

________________________________________________
FFmpeg issue tracker <[email protected]>
<https://roundup.ffmpeg.org/issue2240>
________________________________________________

Reply via email to