Opened 11 years ago

Last modified 9 years ago

#1164 new defect

Error in VideoDecoding: Conditional jump or move depends on uninitialised value(s)

Reported by: sckhan@… Owned by: reimar
Priority: normal Component: vd
Version: HEAD Severity: normal
Keywords: Cc: catchconv-bugreports@…
Blocked By: Blocking:
Reproduced by developer: Analyzed by developer:

Description

The following report is for the SUPERB-TRUST 2008, the cyber security project.

#Error found at test case .mp4 file for mplayer version (dev-SVN-r27249-4.1.2)
valgrind report the Invalid Read.

#The test case is "72-guy-plays-soccer-pole.mp4" can be found at the URL

*http://www.eecs.berkeley.edu/~sckhan/72-guy-plays-soccer-pole.mp4

#Reproducible with the following command

*valgrind mplayer 72-guy-plays-soccer-pole.mp4

Can also be run as:

*valgrind --log-file=log6 mplayer 72-guy-plays-soccer-pole.mp4

#OS: Debian Etch Linux

#Valgrind output:

==841== Memcheck, a memory error detector.
==841== Copyright (C) 2002-2007, and GNU GPL'd, by Julian Seward et al.
==841== Using LibVEX rev 1854, a library for dynamic binary translation.
==841== Copyright (C) 2004-2007, and GNU GPL'd, by OpenWorks? LLP.
==841== Using valgrind-3.3.1, a dynamic binary instrumentation framework.
==841== Copyright (C) 2000-2007, and GNU GPL'd, by Julian Seward et al.
==841== For more details, rerun with: -v
==841==
==841== My PID = 841, parent PID = 26719. Prog and args are:
==841== mplayer
==841== 72-guy-plays-soccer-pole.mp4
==841==
==841== Conditional jump or move depends on uninitialised value(s)
==841== Stack hash: 4251520308
==841== at 0x81393CC: mov_build_index (demux_mov.c:200)
==841== by 0x813AA86: lschunks (demux_mov.c:1312)
==841== by 0x813C345: mov_read_header (demux_mov.c:1931)
==841== by 0x811E32E: demux_open_stream (demuxer.c:864)
==841== by 0x811E601: demux_open (demuxer.c:991)
==841== by 0x807799E: main (mplayer.c:3238)
==841==
==841== Use of uninitialised value of size 4
==841== Stack hash: 3737027877
==841== at 0x40B64B9: (within /lib/tls/i686/cmov/libc-2.3.6.so)
==841==
==841== Conditional jump or move depends on uninitialised value(s)
==841== Stack hash: 2037143885
==841== at 0x40B64C1: (within /lib/tls/i686/cmov/libc-2.3.6.so)
==841==
==841== Conditional jump or move depends on uninitialised value(s)
==841== Stack hash: 3963005709
==841== at 0x40B80B1: vfprintf (in /lib/tls/i686/cmov/libc-2.3.6.so)
==841== by 0x40D8F80: vsnprintf (in /lib/tls/i686/cmov/libc-2.3.6.so)
==841== by 0x807C52D: mp_msg (mp_msg.c:177)
==841== by 0x81393F3: mov_build_index (demux_mov.c:201)
==841== by 0x813AA86: lschunks (demux_mov.c:1312)
==841== by 0x813C345: mov_read_header (demux_mov.c:1931)
==841== by 0x811E32E: demux_open_stream (demuxer.c:864)
==841== by 0x811E601: demux_open (demuxer.c:991)
==841== by 0x807799E: main (mplayer.c:3238)
==841==
==841== Conditional jump or move depends on uninitialised value(s)
==841== Stack hash: 1187874697
==841== at 0x40BA8AD: vfprintf (in /lib/tls/i686/cmov/libc-2.3.6.so)
==841== by 0x40D8F80: vsnprintf (in /lib/tls/i686/cmov/libc-2.3.6.so)
==841== by 0x807C52D: mp_msg (mp_msg.c:177)
==841== by 0x81393F3: mov_build_index (demux_mov.c:201)
==841== by 0x813AA86: lschunks (demux_mov.c:1312)
==841== by 0x813C345: mov_read_header (demux_mov.c:1931)
==841== by 0x811E32E: demux_open_stream (demuxer.c:864)
==841== by 0x811E601: demux_open (demuxer.c:991)
==841== by 0x807799E: main (mplayer.c:3238)
==841==
==841== Conditional jump or move depends on uninitialised value(s)
==841== Stack hash: 2069565109
==841== at 0x40B8159: vfprintf (in /lib/tls/i686/cmov/libc-2.3.6.so)
==841== by 0x40D8F80: vsnprintf (in /lib/tls/i686/cmov/libc-2.3.6.so)
==841== by 0x807C52D: mp_msg (mp_msg.c:177)
==841== by 0x81393F3: mov_build_index (demux_mov.c:201)
==841== by 0x813AA86: lschunks (demux_mov.c:1312)
==841== by 0x813C345: mov_read_header (demux_mov.c:1931)
==841== by 0x811E32E: demux_open_stream (demuxer.c:864)
==841== by 0x811E601: demux_open (demuxer.c:991)
==841== by 0x807799E: main (mplayer.c:3238)
==841==
==841== Conditional jump or move depends on uninitialised value(s)
==841== Stack hash: 940442524
==841== at 0x8139494: mov_build_index (demux_mov.c:223)
==841== by 0x813AA86: lschunks (demux_mov.c:1312)
==841== by 0x813C345: mov_read_header (demux_mov.c:1931)
==841== by 0x811E32E: demux_open_stream (demuxer.c:864)
==841== by 0x811E601: demux_open (demuxer.c:991)
==841== by 0x807799E: main (mplayer.c:3238)
==841==
==841== Conditional jump or move depends on uninitialised value(s)
==841== Stack hash: 814828724
==841== at 0x813954C: mov_build_index (demux_mov.c:247)
==841== by 0x813AA86: lschunks (demux_mov.c:1312)
==841== by 0x813C345: mov_read_header (demux_mov.c:1931)
==841== by 0x811E32E: demux_open_stream (demuxer.c:864)
==841== by 0x811E601: demux_open (demuxer.c:991)
==841== by 0x807799E: main (mplayer.c:3238)
==841==
==841== Conditional jump or move depends on uninitialised value(s)
==841== Stack hash: 1456509752
==841== at 0x8139B49: demux_mov_fill_buffer (stream.h:261)
==841== by 0x811EA74: ds_fill_buffer (demuxer.c:498)
==841== by 0x811F178: ds_get_packet (demuxer.c:602)
==841== by 0x816D9FD: video_read_frame (video.c:553)
==841== by 0x8079512: main (mplayer.c:2262)
==841==
==841== Conditional jump or move depends on uninitialised value(s)
==841== Stack hash: 1467754718
==841== at 0x8139B4F: demux_mov_fill_buffer (stream.h:261)
==841== by 0x811EA74: ds_fill_buffer (demuxer.c:498)
==841== by 0x811F178: ds_get_packet (demuxer.c:602)
==841== by 0x816D9FD: video_read_frame (video.c:553)
==841== by 0x8079512: main (mplayer.c:2262)
==841==
==841== Conditional jump or move depends on uninitialised value(s)
==841== Stack hash: 2331742939
==841== at 0x8139D1C: demux_mov_fill_buffer (stream.h:261)
==841== by 0x811EA74: ds_fill_buffer (demuxer.c:498)
==841== by 0x811F178: ds_get_packet (demuxer.c:602)
==841== by 0x816D9FD: video_read_frame (video.c:553)
==841== by 0x8079512: main (mplayer.c:2262)
==841==
==841== Conditional jump or move depends on uninitialised value(s)
==841== Stack hash: 1520231226
==841== at 0x8139B6B: demux_mov_fill_buffer (stream.h:263)
==841== by 0x811EA74: ds_fill_buffer (demuxer.c:498)
==841== by 0x811F178: ds_get_packet (demuxer.c:602)
==841== by 0x816D9FD: video_read_frame (video.c:553)
==841== by 0x8079512: main (mplayer.c:2262)
==841==
==841== Conditional jump or move depends on uninitialised value(s)
==841== Stack hash: 614289914
==841== at 0x8172BEB: stream_seek_long (stream.c:310)
==841== by 0x8139D34: demux_mov_fill_buffer (stream.h:270)
==841== by 0x811EA74: ds_fill_buffer (demuxer.c:498)
==841== by 0x811F178: ds_get_packet (demuxer.c:602)
==841== by 0x816D9FD: video_read_frame (video.c:553)
==841== by 0x8079512: main (mplayer.c:2262)
==841==
==841== Syscall param llseek(offset_high) contains uninitialised byte(s)
==841== Stack hash: 4162721764
==841== at 0x4000792: (within /lib/ld-2.3.6.so)
==841==
==841== Syscall param llseek(offset_low) contains uninitialised byte(s)
==841== Stack hash: 4162721764
==841== at 0x4000792: (within /lib/ld-2.3.6.so)
==841==
==841== Conditional jump or move depends on uninitialised value(s)
==841== Stack hash: 2768310619
==841== at 0x8172C48: stream_seek_long (stream.c:357)
==841== by 0x8139D34: demux_mov_fill_buffer (stream.h:270)
==841== by 0x811EA74: ds_fill_buffer (demuxer.c:498)
==841== by 0x811F178: ds_get_packet (demuxer.c:602)
==841== by 0x816D9FD: video_read_frame (video.c:553)
==841== by 0x8079512: main (mplayer.c:2262)
==841==
==841== Conditional jump or move depends on uninitialised value(s)
==841== Stack hash: 4016501845
==841== at 0x8172C5A: stream_seek_long (stream.c:358)
==841== by 0x8139D34: demux_mov_fill_buffer (stream.h:270)
==841== by 0x811EA74: ds_fill_buffer (demuxer.c:498)
==841== by 0x811F178: ds_get_packet (demuxer.c:602)
==841== by 0x816D9FD: video_read_frame (video.c:553)
==841== by 0x8079512: main (mplayer.c:2262)
==841==
==841== Conditional jump or move depends on uninitialised value(s)
==841== Stack hash: 4155189759
==841== at 0x8172C5C: stream_seek_long (stream.c:358)
==841== by 0x8139D34: demux_mov_fill_buffer (stream.h:270)
==841== by 0x811EA74: ds_fill_buffer (demuxer.c:498)
==841== by 0x811F178: ds_get_packet (demuxer.c:602)
==841== by 0x816D9FD: video_read_frame (video.c:553)
==841== by 0x8079512: main (mplayer.c:2262)
==841==
==841== Conditional jump or move depends on uninitialised value(s)
==841== Stack hash: 206942248
==841== at 0x8172C61: stream_seek_long (stream.c:358)
==841== by 0x8139D34: demux_mov_fill_buffer (stream.h:270)
==841== by 0x811EA74: ds_fill_buffer (demuxer.c:498)
==841== by 0x811F178: ds_get_packet (demuxer.c:602)
==841== by 0x816D9FD: video_read_frame (video.c:553)
==841== by 0x8079512: main (mplayer.c:2262)
==841==
==841== Conditional jump or move depends on uninitialised value(s)
==841== Stack hash: 2976454323
==841== at 0x8139E74: demux_mov_fill_buffer (stream.h:212)
==841== by 0x811EA74: ds_fill_buffer (demuxer.c:498)
==841== by 0x811F178: ds_get_packet (demuxer.c:602)
==841== by 0x816D9FD: video_read_frame (video.c:553)
==841== by 0x8079512: main (mplayer.c:2262)
==841==
==841== Conditional jump or move depends on uninitialised value(s)
==841== Stack hash: 2864004663
==841== at 0x8139E38: demux_mov_fill_buffer (stream.h:216)
==841== by 0x811EA74: ds_fill_buffer (demuxer.c:498)
==841== by 0x811F178: ds_get_packet (demuxer.c:602)
==841== by 0x816D9FD: video_read_frame (video.c:553)
==841== by 0x8079512: main (mplayer.c:2262)
==841==
==841== Conditional jump or move depends on uninitialised value(s)
==841== Stack hash: 1666164803
==841== at 0x401FA3C: memcpy (mc_replace_strmem.c:402)
==841== by 0x8139E58: demux_mov_fill_buffer (stream.h:218)
==841== by 0x811EA74: ds_fill_buffer (demuxer.c:498)
==841== by 0x811F178: ds_get_packet (demuxer.c:602)
==841== by 0x816D9FD: video_read_frame (video.c:553)
==841== by 0x8079512: main (mplayer.c:2262)
==841==
==841== Conditional jump or move depends on uninitialised value(s)
==841== Stack hash: 2290260416
==841== at 0x401FA45: memcpy (mc_replace_strmem.c:77)
==841== by 0x8139E58: demux_mov_fill_buffer (stream.h:218)
==841== by 0x811EA74: ds_fill_buffer (demuxer.c:498)
==841== by 0x811F178: ds_get_packet (demuxer.c:602)
==841== by 0x816D9FD: video_read_frame (video.c:553)
==841== by 0x8079512: main (mplayer.c:2262)
==841==
==841== Conditional jump or move depends on uninitialised value(s)
==841== Stack hash: 3746483513
==841== at 0x401FA5A: memcpy (mc_replace_strmem.c:402)
==841== by 0x8139E58: demux_mov_fill_buffer (stream.h:218)
==841== by 0x811EA74: ds_fill_buffer (demuxer.c:498)
==841== by 0x811F178: ds_get_packet (demuxer.c:602)
==841== by 0x816D9FD: video_read_frame (video.c:553)
==841== by 0x8079512: main (mplayer.c:2262)
==841==
==841== Conditional jump or move depends on uninitialised value(s)
==841== Stack hash: 3958873422
==841== at 0x401FA9B: memcpy (mc_replace_strmem.c:402)
==841== by 0x8139E58: demux_mov_fill_buffer (stream.h:218)
==841== by 0x811EA74: ds_fill_buffer (demuxer.c:498)
==841== by 0x811F178: ds_get_packet (demuxer.c:602)
==841== by 0x816D9FD: video_read_frame (video.c:553)
==841== by 0x8079512: main (mplayer.c:2262)
==841==
==841== Conditional jump or move depends on uninitialised value(s)
==841== Stack hash: 1050785266
==841== at 0x401FAAF: memcpy (mc_replace_strmem.c:402)
==841== by 0x8139E58: demux_mov_fill_buffer (stream.h:218)
==841== by 0x811EA74: ds_fill_buffer (demuxer.c:498)
==841== by 0x811F178: ds_get_packet (demuxer.c:602)
==841== by 0x816D9FD: video_read_frame (video.c:553)
==841== by 0x8079512: main (mplayer.c:2262)
==841==
==841== Use of uninitialised value of size 4
==841== Stack hash: 2229632535
==841== at 0x401FAC0: memcpy (mc_replace_strmem.c:402)
==841== by 0x8139E58: demux_mov_fill_buffer (stream.h:218)
==841== by 0x811EA74: ds_fill_buffer (demuxer.c:498)
==841== by 0x811F178: ds_get_packet (demuxer.c:602)
==841== by 0x816D9FD: video_read_frame (video.c:553)
==841== by 0x8079512: main (mplayer.c:2262)
==841==
==841== Use of uninitialised value of size 4
==841== Stack hash: 2645696277
==841== at 0x401FAC6: memcpy (mc_replace_strmem.c:402)
==841== by 0x8139E58: demux_mov_fill_buffer (stream.h:218)
==841== by 0x811EA74: ds_fill_buffer (demuxer.c:498)
==841== by 0x811F178: ds_get_packet (demuxer.c:602)
==841== by 0x816D9FD: video_read_frame (video.c:553)
==841== by 0x8079512: main (mplayer.c:2262)
==841==
==841== Conditional jump or move depends on uninitialised value(s)
==841== Stack hash: 569735605
==841== at 0x401FAE6: memcpy (mc_replace_strmem.c:402)
==841== by 0x8139E58: demux_mov_fill_buffer (stream.h:218)
==841== by 0x811EA74: ds_fill_buffer (demuxer.c:498)
==841== by 0x811F178: ds_get_packet (demuxer.c:602)
==841== by 0x816D9FD: video_read_frame (video.c:553)
==841== by 0x8079512: main (mplayer.c:2262)
==841==
==841== Conditional jump or move depends on uninitialised value(s)
==841== Stack hash: 847111433
==841== at 0x401FAEA: memcpy (mc_replace_strmem.c:402)
==841== by 0x8139E58: demux_mov_fill_buffer (stream.h:218)
==841== by 0x811EA74: ds_fill_buffer (demuxer.c:498)
==841== by 0x811F178: ds_get_packet (demuxer.c:602)
==841== by 0x816D9FD: video_read_frame (video.c:553)
==841== by 0x8079512: main (mplayer.c:2262)
==841==
==841== Conditional jump or move depends on uninitialised value(s)
==841== Stack hash: 2946467747
==841== at 0x8139E64: demux_mov_fill_buffer (stream.h:209)
==841== by 0x811EA74: ds_fill_buffer (demuxer.c:498)
==841== by 0x811F178: ds_get_packet (demuxer.c:602)
==841== by 0x816D9FD: video_read_frame (video.c:553)
==841== by 0x8079512: main (mplayer.c:2262)
==841==
==841== Conditional jump or move depends on uninitialised value(s)
==841== Stack hash: 2996774100
==841== at 0x401FB09: memcpy (mc_replace_strmem.c:402)
==841== by 0x8139E58: demux_mov_fill_buffer (stream.h:218)
==841== by 0x811EA74: ds_fill_buffer (demuxer.c:498)
==841== by 0x811F178: ds_get_packet (demuxer.c:602)
==841== by 0x816D9FD: video_read_frame (video.c:553)
==841== by 0x8079512: main (mplayer.c:2262)
==841==
==841== Conditional jump or move depends on uninitialised value(s)
==841== Stack hash: 1775657551
==841== at 0x8139B49: demux_mov_fill_buffer (stream.h:261)
==841== by 0x811C7B4: ds_get_next_pts (demuxer.c:668)
==841== by 0x816DAD4: video_read_frame (video.c:579)
==841== by 0x8079512: main (mplayer.c:2262)
==841==
==841== Conditional jump or move depends on uninitialised value(s)
==841== Stack hash: 1775961469
==841== at 0x8139B4F: demux_mov_fill_buffer (stream.h:261)
==841== by 0x811C7B4: ds_get_next_pts (demuxer.c:668)
==841== by 0x816DAD4: video_read_frame (video.c:579)
==841== by 0x8079512: main (mplayer.c:2262)
==841==
==841== Conditional jump or move depends on uninitialised value(s)
==841== Stack hash: 1799312502
==841== at 0x8139D1C: demux_mov_fill_buffer (stream.h:261)
==841== by 0x811C7B4: ds_get_next_pts (demuxer.c:668)
==841== by 0x816DAD4: video_read_frame (video.c:579)
==841== by 0x8079512: main (mplayer.c:2262)
==841==
==841== Conditional jump or move depends on uninitialised value(s)
==841== Stack hash: 1777379753
==841== at 0x8139B6B: demux_mov_fill_buffer (stream.h:263)
==841== by 0x811C7B4: ds_get_next_pts (demuxer.c:668)
==841== by 0x816DAD4: video_read_frame (video.c:579)
==841== by 0x8079512: main (mplayer.c:2262)
==841==
==841== Conditional jump or move depends on uninitialised value(s)
==841== Stack hash: 2565456233
==841== at 0x8172BEB: stream_seek_long (stream.c:310)
==841== by 0x8139D34: demux_mov_fill_buffer (stream.h:270)
==841== by 0x811C7B4: ds_get_next_pts (demuxer.c:668)
==841== by 0x816DAD4: video_read_frame (video.c:579)
==841== by 0x8079512: main (mplayer.c:2262)
==841==
==841== Conditional jump or move depends on uninitialised value(s)
==841== Stack hash: 2739753206
==841== at 0x8172C48: stream_seek_long (stream.c:357)
==841== by 0x8139D34: demux_mov_fill_buffer (stream.h:270)
==841== by 0x811C7B4: ds_get_next_pts (demuxer.c:668)
==841== by 0x816DAD4: video_read_frame (video.c:579)
==841== by 0x8079512: main (mplayer.c:2262)
==841==
==841== Conditional jump or move depends on uninitialised value(s)
==841== Stack hash: 2773488104
==841== at 0x8172C5A: stream_seek_long (stream.c:358)
==841== by 0x8139D34: demux_mov_fill_buffer (stream.h:270)
==841== by 0x811C7B4: ds_get_next_pts (demuxer.c:668)
==841== by 0x816DAD4: video_read_frame (video.c:579)
==841== by 0x8079512: main (mplayer.c:2262)
==841==
==841== Conditional jump or move depends on uninitialised value(s)
==841== Stack hash: 2777236426
==841== at 0x8172C5C: stream_seek_long (stream.c:358)
==841== by 0x8139D34: demux_mov_fill_buffer (stream.h:270)
==841== by 0x811C7B4: ds_get_next_pts (demuxer.c:668)
==841== by 0x816DAD4: video_read_frame (video.c:579)
==841== by 0x8079512: main (mplayer.c:2262)
==841==
==841== Conditional jump or move depends on uninitialised value(s)
==841== Stack hash: 2786607231
==841== at 0x8172C61: stream_seek_long (stream.c:358)
==841== by 0x8139D34: demux_mov_fill_buffer (stream.h:270)
==841== by 0x811C7B4: ds_get_next_pts (demuxer.c:668)
==841== by 0x816DAD4: video_read_frame (video.c:579)
==841== by 0x8079512: main (mplayer.c:2262)
==841==
==841== Conditional jump or move depends on uninitialised value(s)
==841== Stack hash: 4258091279
==841== at 0x811CCD0: ds_read_packet (stream.h:212)
==841== by 0x8139EF9: demux_mov_fill_buffer (demux_mov.c:2173)
==841== by 0x811C7B4: ds_get_next_pts (demuxer.c:668)
==841== by 0x816DAD4: video_read_frame (video.c:579)
==841== by 0x8079512: main (mplayer.c:2262)
==841==
==841== Conditional jump or move depends on uninitialised value(s)
==841== Stack hash: 4156886585
==841== at 0x811CC9A: ds_read_packet (stream.h:216)
==841== by 0x8139EF9: demux_mov_fill_buffer (demux_mov.c:2173)
==841== by 0x811C7B4: ds_get_next_pts (demuxer.c:668)
==841== by 0x816DAD4: video_read_frame (video.c:579)
==841== by 0x8079512: main (mplayer.c:2262)
==841==
==841== Conditional jump or move depends on uninitialised value(s)
==841== Stack hash: 2964669208
==841== at 0x401FA3C: memcpy (mc_replace_strmem.c:402)
==841== by 0x811CCBD: ds_read_packet (stream.h:218)
==841== by 0x8139EF9: demux_mov_fill_buffer (demux_mov.c:2173)
==841== by 0x811C7B4: ds_get_next_pts (demuxer.c:668)
==841== by 0x816DAD4: video_read_frame (video.c:579)
==841== by 0x8079512: main (mplayer.c:2262)
==841==
==841== Conditional jump or move depends on uninitialised value(s)
==841== Stack hash: 3588764821
==841== at 0x401FA45: memcpy (mc_replace_strmem.c:77)
==841== by 0x811CCBD: ds_read_packet (stream.h:218)
==841== by 0x8139EF9: demux_mov_fill_buffer (demux_mov.c:2173)
==841== by 0x811C7B4: ds_get_next_pts (demuxer.c:668)
==841== by 0x816DAD4: video_read_frame (video.c:579)
==841== by 0x8079512: main (mplayer.c:2262)
==841==
==841== Conditional jump or move depends on uninitialised value(s)
==841== Stack hash: 750020622
==841== at 0x401FA5A: memcpy (mc_replace_strmem.c:402)
==841== by 0x811CCBD: ds_read_packet (stream.h:218)
==841== by 0x8139EF9: demux_mov_fill_buffer (demux_mov.c:2173)
==841== by 0x811C7B4: ds_get_next_pts (demuxer.c:668)
==841== by 0x816DAD4: video_read_frame (video.c:579)
==841== by 0x8079512: main (mplayer.c:2262)
==841==
==841== Conditional jump or move depends on uninitialised value(s)
==841== Stack hash: 962410531
==841== at 0x401FA9B: memcpy (mc_replace_strmem.c:402)
==841== by 0x811CCBD: ds_read_packet (stream.h:218)
==841== by 0x8139EF9: demux_mov_fill_buffer (demux_mov.c:2173)
==841== by 0x811C7B4: ds_get_next_pts (demuxer.c:668)
==841== by 0x816DAD4: video_read_frame (video.c:579)
==841== by 0x8079512: main (mplayer.c:2262)
==841==
==841== Conditional jump or move depends on uninitialised value(s)
==841== Stack hash: 2349289671
==841== at 0x401FAAF: memcpy (mc_replace_strmem.c:402)
==841== by 0x811CCBD: ds_read_packet (stream.h:218)
==841== by 0x8139EF9: demux_mov_fill_buffer (demux_mov.c:2173)
==841== by 0x811C7B4: ds_get_next_pts (demuxer.c:668)
==841== by 0x816DAD4: video_read_frame (video.c:579)
==841== by 0x8079512: main (mplayer.c:2262)
==841==
==841== Use of uninitialised value of size 4
==841== Stack hash: 3528136940
==841== at 0x401FAC0: memcpy (mc_replace_strmem.c:402)
==841== by 0x811CCBD: ds_read_packet (stream.h:218)
==841== by 0x8139EF9: demux_mov_fill_buffer (demux_mov.c:2173)
==841== by 0x811C7B4: ds_get_next_pts (demuxer.c:668)
==841== by 0x816DAD4: video_read_frame (video.c:579)
==841== by 0x8079512: main (mplayer.c:2262)
==841==
==841== Use of uninitialised value of size 4
==841== Stack hash: 3944200682
==841== at 0x401FAC6: memcpy (mc_replace_strmem.c:402)
==841== by 0x811CCBD: ds_read_packet (stream.h:218)
==841== by 0x8139EF9: demux_mov_fill_buffer (demux_mov.c:2173)
==841== by 0x811C7B4: ds_get_next_pts (demuxer.c:668)
==841== by 0x816DAD4: video_read_frame (video.c:579)
==841== by 0x8079512: main (mplayer.c:2262)
==841==
==841== Conditional jump or move depends on uninitialised value(s)
==841== Stack hash: 1868240010
==841== at 0x401FAE6: memcpy (mc_replace_strmem.c:402)
==841== by 0x811CCBD: ds_read_packet (stream.h:218)
==841== by 0x8139EF9: demux_mov_fill_buffer (demux_mov.c:2173)
==841== by 0x811C7B4: ds_get_next_pts (demuxer.c:668)
==841== by 0x816DAD4: video_read_frame (video.c:579)
==841== by 0x8079512: main (mplayer.c:2262)
==841==
==841== Conditional jump or move depends on uninitialised value(s)
==841== Stack hash: 2145615838
==841== at 0x401FAEA: memcpy (mc_replace_strmem.c:402)
==841== by 0x811CCBD: ds_read_packet (stream.h:218)
==841== by 0x8139EF9: demux_mov_fill_buffer (demux_mov.c:2173)
==841== by 0x811C7B4: ds_get_next_pts (demuxer.c:668)
==841== by 0x816DAD4: video_read_frame (video.c:579)
==841== by 0x8079512: main (mplayer.c:2262)
==841==
==841== Conditional jump or move depends on uninitialised value(s)
==841== Stack hash: 4233727186
==841== at 0x811CCC3: ds_read_packet (stream.h:209)
==841== by 0x8139EF9: demux_mov_fill_buffer (demux_mov.c:2173)
==841== by 0x811C7B4: ds_get_next_pts (demuxer.c:668)
==841== by 0x816DAD4: video_read_frame (video.c:579)
==841== by 0x8079512: main (mplayer.c:2262)
==841==
==841== Conditional jump or move depends on uninitialised value(s)
==841== Stack hash: 311209
==841== at 0x401FB09: memcpy (mc_replace_strmem.c:402)
==841== by 0x811CCBD: ds_read_packet (stream.h:218)
==841== by 0x8139EF9: demux_mov_fill_buffer (demux_mov.c:2173)
==841== by 0x811C7B4: ds_get_next_pts (demuxer.c:668)
==841== by 0x816DAD4: video_read_frame (video.c:579)
==841== by 0x8079512: main (mplayer.c:2262)
==841== Warning: set address range perms: large range 268438625 (undefined)
==841==
==841== Conditional jump or move depends on uninitialised value(s)
==841== Stack hash: 137420956
==841== at 0x811CD2D: ds_read_packet (demuxer.h:255)
==841== by 0x8139EF9: demux_mov_fill_buffer (demux_mov.c:2173)
==841== by 0x811C7B4: ds_get_next_pts (demuxer.c:668)
==841== by 0x816DAD4: video_read_frame (video.c:579)
==841== by 0x8079512: main (mplayer.c:2262)
==841==
==841== Conditional jump or move depends on uninitialised value(s)
==841== Stack hash: 767694224
==841== at 0x401D931: realloc (vg_replace_malloc.c:429)
==841== by 0x811CD4C: ds_read_packet (demuxer.h:257)
==841== by 0x8139EF9: demux_mov_fill_buffer (demux_mov.c:2173)
==841== by 0x811C7B4: ds_get_next_pts (demuxer.c:668)
==841== by 0x816DAD4: video_read_frame (video.c:579)
==841== by 0x8079512: main (mplayer.c:2262)
==841== Warning: set address range perms: large range 264501027 (noaccess)
==841==
==841== Use of uninitialised value of size 4
==841== Stack hash: 240499811
==841== at 0x811CD64: ds_read_packet (demuxer.h:266)
==841== by 0x8139EF9: demux_mov_fill_buffer (demux_mov.c:2173)
==841== by 0x811C7B4: ds_get_next_pts (demuxer.c:668)
==841== by 0x816DAD4: video_read_frame (video.c:579)
==841== by 0x8079512: main (mplayer.c:2262)
==841==
==841== Conditional jump or move depends on uninitialised value(s)
==841== Stack hash: 861214556
==841== at 0x816DA02: video_read_frame (video.c:554)
==841== by 0x8079512: main (mplayer.c:2262)
==841==
==841== Conditional jump or move depends on uninitialised value(s)
==841== Stack hash: 1516888517
==841== at 0x811C7A7: ds_get_next_pts (demuxer.c:661)
==841== by 0x816DAD4: video_read_frame (video.c:579)
==841== by 0x8079512: main (mplayer.c:2262)
==841==
==841== Conditional jump or move depends on uninitialised value(s)
==841== Stack hash: 134714647
==841== at 0x8079517: main (mplayer.c:2273)
==841==
==841== Conditional jump or move depends on uninitialised value(s)
==841== Stack hash: 2193331484
==841== at 0x8199102: decode (vd_ffmpeg.c:740)
==841== by 0x80DB7AA: decode_video (dec_video.c:369)
==841== by 0x80795D8: main (mplayer.c:2292)
==841==
==841== Conditional jump or move depends on uninitialised value(s)
==841== Stack hash: 2643798629
==841== at 0x82ED5A2: avcodec_decode_video (utils.c:896)
==841== by 0x8199209: decode (vd_ffmpeg.c:781)
==841== by 0x80DB7AA: decode_video (dec_video.c:369)
==841== by 0x80795D8: main (mplayer.c:2292)
==841==
==841== Conditional jump or move depends on uninitialised value(s)
==841== Stack hash: 4158669741
==841== at 0x8411ABF: ff_h263_decode_frame (h263dec.c:343)
==841== by 0x82ED5EF: avcodec_decode_video (utils.c:897)
==841== by 0x8199209: decode (vd_ffmpeg.c:781)
==841== by 0x80DB7AA: decode_video (dec_video.c:369)
==841== by 0x80795D8: main (mplayer.c:2292)
==841==
==841== Conditional jump or move depends on uninitialised value(s)
==841== Stack hash: 3501448946
==841== at 0x8412254: ff_h263_decode_frame (bitstream.h:762)
==841== by 0x82ED5EF: avcodec_decode_video (utils.c:897)
==841== by 0x8199209: decode (vd_ffmpeg.c:781)
==841== by 0x80DB7AA: decode_video (dec_video.c:369)
==841== by 0x80795D8: main (mplayer.c:2292)
==841==
==841== Conditional jump or move depends on uninitialised value(s)
==841== Stack hash: 3516442234
==841== at 0x841225C: ff_h263_decode_frame (bitstream.h:762)
==841== by 0x82ED5EF: avcodec_decode_video (utils.c:897)
==841== by 0x8199209: decode (vd_ffmpeg.c:781)
==841== by 0x80DB7AA: decode_video (dec_video.c:369)
==841== by 0x80795D8: main (mplayer.c:2292)
==841==
==841== Conditional jump or move depends on uninitialised value(s)
==841== Stack hash: 1821440393
==841== at 0x841D462: ff_mpeg4_decode_picture_header (h263.c:6014)
==841== by 0x8411C31: ff_h263_decode_frame (h263dec.c:404)
==841== by 0x82ED5EF: avcodec_decode_video (utils.c:897)
==841== by 0x8199209: decode (vd_ffmpeg.c:781)
==841== by 0x80DB7AA: decode_video (dec_video.c:369)
==841== by 0x80795D8: main (mplayer.c:2292)
==841==
==841== Conditional jump or move depends on uninitialised value(s)
==841== Stack hash: 97772475
==841== at 0x841814A: ff_mpeg4_decode_mb (h263.c:3145)
==841== by 0x84114C7: decode_slice (h263dec.c:209)
==841== by 0x8412630: ff_h263_decode_frame (h263dec.c:636)
==841== by 0x82ED5EF: avcodec_decode_video (utils.c:897)
==841== by 0x8199209: decode (vd_ffmpeg.c:781)
==841== by 0x80DB7AA: decode_video (dec_video.c:369)
==841== by 0x80795D8: main (mplayer.c:2292)
==841==
==841== Conditional jump or move depends on uninitialised value(s)
==841== Stack hash: 392008010
==841== at 0x84198BE: ff_h263_resync (h263.c:3321)
==841== by 0x84126B6: ff_h263_decode_frame (h263dec.c:642)
==841== by 0x82ED5EF: avcodec_decode_video (utils.c:897)
==841== by 0x8199209: decode (vd_ffmpeg.c:781)
==841== by 0x80DB7AA: decode_video (dec_video.c:369)
==841== by 0x80795D8: main (mplayer.c:2292)
==841==
==841== Conditional jump or move depends on uninitialised value(s)
==841== Stack hash: 1367181446
==841== at 0x841990A: ff_h263_resync (h263.c:3321)
==841== by 0x84126B6: ff_h263_decode_frame (h263dec.c:642)
==841== by 0x82ED5EF: avcodec_decode_video (utils.c:897)
==841== by 0x8199209: decode (vd_ffmpeg.c:781)
==841== by 0x80DB7AA: decode_video (dec_video.c:369)
==841== by 0x80795D8: main (mplayer.c:2292)
==841==
==841== Conditional jump or move depends on uninitialised value(s)
==841== Stack hash: 1825666626
==841== at 0x84193CC: mpeg4_decode_video_packet_header (h263.c:3182)
==841== by 0x841995A: ff_h263_resync (h263.c:3326)
==841== by 0x84126B6: ff_h263_decode_frame (h263dec.c:642)
==841== by 0x82ED5EF: avcodec_decode_video (utils.c:897)
==841== by 0x8199209: decode (vd_ffmpeg.c:781)
==841== by 0x80DB7AA: decode_video (dec_video.c:369)
==841== by 0x80795D8: main (mplayer.c:2292)
==841==
==841== Conditional jump or move depends on uninitialised value(s)
==841== Stack hash: 2657794110
==841== at 0x84193CC: mpeg4_decode_video_packet_header (h263.c:3182)
==841== by 0x8419966: ff_h263_resync (h263.c:3310)
==841== by 0x84126B6: ff_h263_decode_frame (h263dec.c:642)
==841== by 0x82ED5EF: avcodec_decode_video (utils.c:897)
==841== by 0x8199209: decode (vd_ffmpeg.c:781)
==841== by 0x80DB7AA: decode_video (dec_video.c:369)
==841== by 0x80795D8: main (mplayer.c:2292)
==841==
==841== Conditional jump or move depends on uninitialised value(s)
==841== Stack hash: 272069448
==841== at 0x841814A: ff_mpeg4_decode_mb (h263.c:3145)
==841== by 0x84114C7: decode_slice (h263dec.c:209)
==841== by 0x841268D: ff_h263_decode_frame (h263dec.c:649)
==841== by 0x82ED5EF: avcodec_decode_video (utils.c:897)
==841== by 0x8199209: decode (vd_ffmpeg.c:781)
==841== by 0x80DB7AA: decode_video (dec_video.c:369)
==841== by 0x80795D8: main (mplayer.c:2292)
==841==
==841== Conditional jump or move depends on uninitialised value(s)
==841== Stack hash: 2193707959
==841== at 0x8199215: decode (vd_ffmpeg.c:785)
==841== by 0x80DB7AA: decode_video (dec_video.c:369)
==841== by 0x80795D8: main (mplayer.c:2292)
==841==
==841== Conditional jump or move depends on uninitialised value(s)
==841== Stack hash: 1531490530
==841== at 0x811F157: ds_get_packet (demuxer.c:601)
==841== by 0x816D9FD: video_read_frame (video.c:553)
==841== by 0x8079512: main (mplayer.c:2262)
==841== Warning: set address range perms: large range 536879397 (undefined)
==841== Warning: set address range perms: large range 536879429 (noaccess)
==841== Warning: set address range perms: large range 268438125 (undefined)
==841== Warning: set address range perms: large range 268438157 (noaccess)
==841== Warning: set address range perms: large range 536871928 (undefined)
==841== Warning: set address range perms: large range 536871960 (noaccess)
==841== Warning: set address range perms: large range 134219289 (undefined)
==841== Warning: set address range perms: large range 134219321 (noaccess)
==841== Warning: set address range perms: large range 134218507 (undefined)
==841== Warning: set address range perms: large range 134218539 (noaccess)
==841== Warning: set address range perms: large range 536872192 (undefined)
==841== Warning: set address range perms: large range 536872224 (noaccess)
==841== Warning: set address range perms: large range 536872736 (undefined)
==841== Warning: set address range perms: large range 536872768 (noaccess)
==841== Warning: set address range perms: large range 272631502 (undefined)
==841== Warning: set address range perms: large range 272631534 (noaccess)
==841== Warning: set address range perms: large range 536873190 (undefined)
==841== Warning: set address range perms: large range 536873222 (noaccess)
==841== Warning: set address range perms: large range 134218465 (undefined)
==841== Warning: set address range perms: large range 134218497 (noaccess)
==841== Warning: set address range perms: large range 536871747 (undefined)
==841== Warning: set address range perms: large range 536871779 (noaccess)
==841== Warning: set address range perms: large range 268437294 (undefined)
==841== Warning: set address range perms: large range 268437326 (noaccess)
==841== Warning: set address range perms: large range 536872500 (undefined)
==841== Warning: set address range perms: large range 536872532 (noaccess)
==841== Warning: set address range perms: large range 134227108 (undefined)
==841== Warning: set address range perms: large range 134227140 (noaccess)
==841== Warning: set address range perms: large range 134218952 (undefined)
==841== Warning: set address range perms: large range 134218984 (noaccess)
==841==
==841== Conditional jump or move depends on uninitialised value(s)
==841== Stack hash: 471787474
==841== at 0x811EA63: ds_fill_buffer (demuxer.c:491)
==841== by 0x811F178: ds_get_packet (demuxer.c:602)
==841== by 0x816D9FD: video_read_frame (video.c:553)
==841== by 0x8079512: main (mplayer.c:2262)
==841==
==841== ERROR SUMMARY: 4966616 errors from 75 contexts (suppressed: 19 from 1)
==841== malloc/free: in use at exit: 33,762 bytes in 15 blocks.
==841== malloc/free: 6,640 allocs, 6,620 frees, 6,095,164,779 bytes allocated.
==841== For counts of detected errors, rerun with: -v
==841== searching for pointers to 15 not-freed blocks.
==841== checked 2,861,912 bytes.
==841==
==841== LEAK SUMMARY:
==841== definitely lost: 836 bytes in 1 blocks.
==841== possibly lost: 0 bytes in 0 blocks.
==841== still reachable: 32,926 bytes in 14 blocks.
==841== suppressed: 0 bytes in 0 blocks.
==841== Rerun with --leak-check=full to see details of leaked memory.

#The above valgrind output is saved as a log file(log6) and can be found at
URL:

*http://www.eecs.berkeley.edu/~sckhan/log6

#This report is for confirming the error found in the test case 44-nosound_lavf_works.mqv for the invalid read and use of uninitialised values
where the error seems to be in decoding video at Stack hash: 1531490530 as well as to report the error in Stack hash: 272069448 where bake track shows: ff_h263_decode_frame (h263dec.c:649).

#The bug is found in making comparison of the fuzzing tools and is a part of
the metafuzz project.

*URL at: metafuzz.com

Change History (1)

comment:1 Changed 9 years ago by compn

  • Owner changed from r_togni@… to reimar
Note: See TracTickets for help on using tickets.