Opened 11 years ago

Last modified 8 years ago

#1172 new defect

Use of uninitialised value of size 4

Reported by: ethiodad@… Owned by: reimar
Priority: normal Component: ad
Version: HEAD Severity: normal
Keywords: Cc: catchconv-bugreports@…
Blocked By: Blocking:
Reproduced by developer: Analyzed by developer:

Description

Valgrind reported multiple uninitialised values of size 4 as a bug on mplayer Version SVN r27255-4.1.2. while playing http://www.cs.berkeley.edu/~ethiodad/29-merkat.mp3

Here is what valgrind Reported:

Playing 29-merkat.mp3.
libavformat file format detected.
mdb:175, lastbuf:0 skipping granule 0
mdb:175, lastbuf:0 skipping granule 0
mdb:175, lastbuf:0 skipping granule 1
==9570== Use of uninitialised value of size 4
==9570== Stack hash: 3428300487
==9570== at 0x8476A1A: huffman_decode (mpegaudiodec.c:1527)
==9570== by 0x847773E: mp_decode_layer3 (mpegaudiodec.c:2249)
==9570== by 0x8479159: mp_decode_frame (mpegaudiodec.c:2305)
==9570== by 0x847AFFD: decode_frame (mpegaudiodec.c:2401)
==9570== by 0x82ED46A: avcodec_decode_audio2 (utils.c:928)
==9570== by 0x8263F09: av_find_stream_info (utils.c:1776)
==9570== by 0x81A3165: demux_open_lavf (demux_lavf.c:466)
==9570== by 0x811E32E: demux_open_stream (demuxer.c:864)
==9570== by 0x811E601: demux_open (demuxer.c:991)
==9570== by 0x807799E: main (mplayer.c:3238)
==9570==
==9570== Use of uninitialised value of size 4
==9570== Stack hash: 1909445759
==9570== at 0x8476A72: huffman_decode (mpegaudiodec.c:1537)
==9570== by 0x847773E: mp_decode_layer3 (mpegaudiodec.c:2249)
==9570== by 0x8479159: mp_decode_frame (mpegaudiodec.c:2305)
==9570== by 0x847AFFD: decode_frame (mpegaudiodec.c:2401)
==9570== by 0x82ED46A: avcodec_decode_audio2 (utils.c:928)
==9570== by 0x8263F09: av_find_stream_info (utils.c:1776)
==9570== by 0x81A3165: demux_open_lavf (demux_lavf.c:466)
==9570== by 0x811E32E: demux_open_stream (demuxer.c:864)
==9570== by 0x811E601: demux_open (demuxer.c:991)
==9570== by 0x807799E: main (mplayer.c:3238)
==9570==
==9570== Use of uninitialised value of size 4
==9570== Stack hash: 2500153674
==9570== at 0x8476D81: huffman_decode (mpegaudiodec.c:219)
==9570== by 0x847773E: mp_decode_layer3 (mpegaudiodec.c:2249)
==9570== by 0x8479159: mp_decode_frame (mpegaudiodec.c:2305)
==9570== by 0x847AFFD: decode_frame (mpegaudiodec.c:2401)
==9570== by 0x82ED46A: avcodec_decode_audio2 (utils.c:928)
==9570== by 0x8263F09: av_find_stream_info (utils.c:1776)
==9570== by 0x81A3165: demux_open_lavf (demux_lavf.c:466)
==9570== by 0x811E32E: demux_open_stream (demuxer.c:864)
==9570== by 0x811E601: demux_open (demuxer.c:991)
==9570== by 0x807799E: main (mplayer.c:3238)
==9570==
==9570== Use of uninitialised value of size 4
==9570== Stack hash: 475884269
==9570== at 0x8476D88: huffman_decode (mpegaudiodec.c:220)
==9570== by 0x847773E: mp_decode_layer3 (mpegaudiodec.c:2249)
==9570== by 0x8479159: mp_decode_frame (mpegaudiodec.c:2305)
==9570== by 0x847AFFD: decode_frame (mpegaudiodec.c:2401)
==9570== by 0x82ED46A: avcodec_decode_audio2 (utils.c:928)
==9570== by 0x8263F09: av_find_stream_info (utils.c:1776)
==9570== by 0x81A3165: demux_open_lavf (demux_lavf.c:466)
==9570== by 0x811E32E: demux_open_stream (demuxer.c:864)
==9570== by 0x811E601: demux_open (demuxer.c:991)
==9570== by 0x807799E: main (mplayer.c:3238)
==9570==
==9570== Conditional jump or move depends on uninitialised value(s)
==9570== Stack hash: 2019854407
==9570== at 0x8476D9A: huffman_decode (mpegaudiodec.c:223)
==9570== by 0x847773E: mp_decode_layer3 (mpegaudiodec.c:2249)
==9570== by 0x8479159: mp_decode_frame (mpegaudiodec.c:2305)
==9570== by 0x847AFFD: decode_frame (mpegaudiodec.c:2401)
==9570== by 0x82ED46A: avcodec_decode_audio2 (utils.c:928)
==9570== by 0x8263F09: av_find_stream_info (utils.c:1776)
==9570== by 0x81A3165: demux_open_lavf (demux_lavf.c:466)
==9570== by 0x811E32E: demux_open_stream (demuxer.c:864)
==9570== by 0x811E601: demux_open (demuxer.c:991)
==9570== by 0x807799E: main (mplayer.c:3238)
==9570==
==9570== Use of uninitialised value of size 4
==9570== Stack hash: 372811932
==9570== at 0x8476D2B: huffman_decode (mpegaudiodec.c:219)
==9570== by 0x847773E: mp_decode_layer3 (mpegaudiodec.c:2249)
==9570== by 0x8479159: mp_decode_frame (mpegaudiodec.c:2305)
==9570== by 0x847AFFD: decode_frame (mpegaudiodec.c:2401)
==9570== by 0x82ED46A: avcodec_decode_audio2 (utils.c:928)
==9570== by 0x8263F09: av_find_stream_info (utils.c:1776)
==9570== by 0x81A3165: demux_open_lavf (demux_lavf.c:466)
==9570== by 0x811E32E: demux_open_stream (demuxer.c:864)
==9570== by 0x811E601: demux_open (demuxer.c:991)
==9570== by 0x807799E: main (mplayer.c:3238)
==9570==
==9570== Use of uninitialised value of size 4
==9570== Stack hash: 2643509823
==9570== at 0x8476D32: huffman_decode (mpegaudiodec.c:220)
==9570== by 0x847773E: mp_decode_layer3 (mpegaudiodec.c:2249)
==9570== by 0x8479159: mp_decode_frame (mpegaudiodec.c:2305)
==9570== by 0x847AFFD: decode_frame (mpegaudiodec.c:2401)
==9570== by 0x82ED46A: avcodec_decode_audio2 (utils.c:928)
==9570== by 0x8263F09: av_find_stream_info (utils.c:1776)
==9570== by 0x81A3165: demux_open_lavf (demux_lavf.c:466)
==9570== by 0x811E32E: demux_open_stream (demuxer.c:864)
==9570== by 0x811E601: demux_open (demuxer.c:991)
==9570== by 0x807799E: main (mplayer.c:3238)
==9570==
==9570== Conditional jump or move depends on uninitialised value(s)
==9570== Stack hash: 2889938309
==9570== at 0x8476D40: huffman_decode (mpegaudiodec.c:223)
==9570== by 0x847773E: mp_decode_layer3 (mpegaudiodec.c:2249)
==9570== by 0x8479159: mp_decode_frame (mpegaudiodec.c:2305)
==9570== by 0x847AFFD: decode_frame (mpegaudiodec.c:2401)
==9570== by 0x82ED46A: avcodec_decode_audio2 (utils.c:928)
==9570== by 0x8263F09: av_find_stream_info (utils.c:1776)
==9570== by 0x81A3165: demux_open_lavf (demux_lavf.c:466)
==9570== by 0x811E32E: demux_open_stream (demuxer.c:864)
==9570== by 0x811E601: demux_open (demuxer.c:991)
==9570== by 0x807799E: main (mplayer.c:3238)
==9570==
==9570== Use of uninitialised value of size 4
==9570== Stack hash: 1476766615
==9570== at 0x8476CAA: huffman_decode (mpegaudiodec.c:1550)
==9570== by 0x847773E: mp_decode_layer3 (mpegaudiodec.c:2249)
==9570== by 0x8479159: mp_decode_frame (mpegaudiodec.c:2305)
==9570== by 0x847AFFD: decode_frame (mpegaudiodec.c:2401)
==9570== by 0x82ED46A: avcodec_decode_audio2 (utils.c:928)
==9570== by 0x8263F09: av_find_stream_info (utils.c:1776)
==9570== by 0x81A3165: demux_open_lavf (demux_lavf.c:466)
==9570== by 0x811E32E: demux_open_stream (demuxer.c:864)
==9570== by 0x811E601: demux_open (demuxer.c:991)
==9570== by 0x807799E: main (mplayer.c:3238)
==9570==
==9570== Use of uninitialised value of size 4
==9570== Stack hash: 3224270730
==9570== at 0x8476EC1: huffman_decode (mpegaudiodec.c:1600)
==9570== by 0x847773E: mp_decode_layer3 (mpegaudiodec.c:2249)
==9570== by 0x8479159: mp_decode_frame (mpegaudiodec.c:2305)
==9570== by 0x847AFFD: decode_frame (mpegaudiodec.c:2401)
==9570== by 0x82ED46A: avcodec_decode_audio2 (utils.c:928)
==9570== by 0x8263F09: av_find_stream_info (utils.c:1776)
==9570== by 0x81A3165: demux_open_lavf (demux_lavf.c:466)
==9570== by 0x811E32E: demux_open_stream (demuxer.c:864)
==9570== by 0x811E601: demux_open (demuxer.c:991)
==9570== by 0x807799E: main (mplayer.c:3238)
overread, skip -7 enddists: -4 -4
[lavf] Audio stream found, -aid 0
==========================================================================
Opening audio decoder: [mp3lib] MPEG layer-2, layer-3
mpg123: Can't rewind stream by 260 bits!
AUDIO: 44100 Hz, 2 ch, s16le, 128.0 kbit/9.07% (ratio: 16000->176400)
Selected audio codec: [mp3] afm: mp3lib (mp3lib MPEG layer-2, layer-3)
==========================================================================
AO: [oss] 44100Hz 2ch s16le (2 bytes per sample)
Video: no video
Starting playback...
mpg123: Can't rewind stream by 21 bits!
mpg123: Can't rewind stream by 39 bits!
mpg123: Can't rewind stream by 41 bits!
A: 0.1 (00.1) of 170.7 (02:50.7) ??,?%

MPlayer interrupted by signal 2 in module: key_events
A: 0.4 (00.3) of 170.7 (02:50.7) 190.4%
Exiting... (Quit)
==9570==
==9570== ERROR SUMMARY: 151 errors from 10 contexts (suppressed: 19 from 1)
==9570== malloc/free: in use at exit: 52,573 bytes in 33 blocks.
==9570== malloc/free: 2,834 allocs, 2,801 frees, 2,030,345 bytes allocated.
==9570== For counts of detected errors, rerun with: -v
==9570== searching for pointers to 33 not-freed blocks.
==9570== checked 2,877,624 bytes.
==9570==
==9570== LEAK SUMMARY:
==9570== definitely lost: 0 bytes in 0 blocks.
==9570== possibly lost: 0 bytes in 0 blocks.
==9570== still reachable: 52,573 bytes in 33 blocks.
==9570== suppressed: 0 bytes in 0 blocks.
==9570== Rerun with --leak-check=full to see details of leaked memory.
user@debian:~/mplayer/valgrind-3.3.1-stackhash$ scp tamriyalesh-2.wma.1 ethiodad@…:~/public_html
ethiodad@…'s password:

Permission denied, please try again.
ethiodad@…'s password:
Permission denied, please try again.
ethiodad@…'s password:
Permission denied (publickey).
lost connection
user@debian:~/mplayer/valgrind-3.3.1-stackhash$ scp 29-merkat.mp3 ethiodad@…:~/public_html
ethiodad@…'s password:
couldn't set locale correctly
couldn't set locale correctly
scp: warning: Executing scp1.
29-merkat.mp3 100% 2668KB 666.9KB/s 00:04

This bug was found doing a Research for SUPERB-TRUST 2008.

Change History (1)

comment:1 Changed 8 years ago by compn

  • Owner changed from r_togni@… to reimar
Note: See TracTickets for help on using tickets.