For this .spx file, valgrind reports InvalidRead, UninitCondition,

[xuecongli@…]

This bug was found as part of the SUPERB-TRUST 2008 project, see ​http://www.truststc.org/superb/

For this .spx file, valgrind reports InvalidRead, UninitCondition,

System Info:

MPlayer dev-SVN-r27418-4.1.2 (C) 2000-2008 MPlayer Team
CPU: Intel Pentium 4/Celeron 4 Northwood. Pentium 4 EE/Xeon Prestonia,Gallatin (Family: 15, Model: 2, Stepping: 7)
CPUflags: MMX: 1 MMX2: 1 3DNow: 0 3DNow2: 0 SSE: 1 SSE2: 1
Compiled for x86 CPU with extensions: MMX MMX2 3DNow 3DNowEx SSE SSE2

Playing meh.spx.

##############################################################

to reproduce:
wget ​http://www.metafuzz.com/testcases/110690-0-3627122432-result32512.tgz
tar xzf 110690-0-3627122432-result32512.tgz
valgrind mplayer meh.spx

::::::::::::::::::::Valgrind result:::::::::::::::::::::::::::::

==13148== Memcheck, a memory error detector.
==13148== Copyright (C) 2002-2007, and GNU GPL'd, by Julian Seward et al.
==13148== Using LibVEX rev 1715, a library for dynamic binary translation.
==13148== Copyright (C) 2004-2007, and GNU GPL'd, by OpenWorks LLP.
==13148== Using valgrind-3.2.2, a dynamic binary instrumentation framework.
==13148== Copyright (C) 2000-2007, and GNU GPL'd, by Julian Seward et al.
==13148== For more details, rerun with: -v
==13148==
==13148== My PID = 13148, parent PID = 13147. Prog and args are:
==13148== mplayer
==13148== meh.spx
==13148==
==13148== Conditional jump or move depends on uninitialised value(s)
==13148== Stack hash: 4126823808
==13148== at 0x400A65C: (within /lib/ld-2.7.so)
==13148== by 0x4003125: (within /lib/ld-2.7.so)
==13148== by 0x40138EC: (within /lib/ld-2.7.so)
==13148== by 0x4000C3D: (within /lib/ld-2.7.so)
==13148== by 0x4000816: (within /lib/ld-2.7.so)
==13148==
==13148== Conditional jump or move depends on uninitialised value(s)
==13148== Stack hash: 4228028502
==13148== at 0x400A692: (within /lib/ld-2.7.so)
==13148== by 0x4003125: (within /lib/ld-2.7.so)
==13148== by 0x40138EC: (within /lib/ld-2.7.so)
==13148== by 0x4000C3D: (within /lib/ld-2.7.so)
==13148== by 0x4000816: (within /lib/ld-2.7.so)
==13148==
==13148== Conditional jump or move depends on uninitialised value(s)
==13148== Stack hash: 936347057
==13148== at 0x400B19D: (within /lib/ld-2.7.so)
==13148== by 0x4003125: (within /lib/ld-2.7.so)
==13148== by 0x40138EC: (within /lib/ld-2.7.so)
==13148== by 0x4000C3D: (within /lib/ld-2.7.so)
==13148== by 0x4000816: (within /lib/ld-2.7.so)
==13148==
==13148== Conditional jump or move depends on uninitialised value(s)
==13148== Stack hash: 3629006124
==13148== at 0x400A542: (within /lib/ld-2.7.so)
==13148== by 0x4003383: (within /lib/ld-2.7.so)
==13148== by 0x40138EC: (within /lib/ld-2.7.so)
==13148== by 0x4000C3D: (within /lib/ld-2.7.so)
==13148== by 0x4000816: (within /lib/ld-2.7.so)
==13148==
==13148== Conditional jump or move depends on uninitialised value(s)
==13148== Stack hash: 3643999412
==13148== at 0x400A54A: (within /lib/ld-2.7.so)
==13148== by 0x4003383: (within /lib/ld-2.7.so)
==13148== by 0x40138EC: (within /lib/ld-2.7.so)
==13148== by 0x4000C3D: (within /lib/ld-2.7.so)
==13148== by 0x4000816: (within /lib/ld-2.7.so)
==13148==
==13148== Conditional jump or move depends on uninitialised value(s)
==13148== Stack hash: 4258724220
==13148== at 0x400A692: (within /lib/ld-2.7.so)
==13148== by 0x4003383: (within /lib/ld-2.7.so)
==13148== by 0x40138EC: (within /lib/ld-2.7.so)
==13148== by 0x4000C3D: (within /lib/ld-2.7.so)
==13148== by 0x4000816: (within /lib/ld-2.7.so)
==13148==
==13148== Invalid read of size 4
==13148== Stack hash: 1364543850
==13148== at 0x417FBC4: (within /lib/libc-2.7.so)
==13148== Address 0x10 is not stack'd, malloc'd or (recently) free'd
==13148==
==13148== Process terminating with default action of signal 11 (SIGSEGV)
==13148== Access not within mapped region at address 0x10
==13148== Stack hash: 1364543850
==13148== at 0x417FBC4: (within /lib/libc-2.7.so)
==13148==
==13148== ERROR SUMMARY: 20 errors from 7 contexts (suppressed: 0 from 0)
==13148== malloc/free: in use at exit: 33,636 bytes in 20 blocks.
==13148== malloc/free: 2,321 allocs, 2,301 frees, 1,272,114 bytes allocated.
==13148== For counts of detected errors, rerun with: -v
==13148== searching for pointers to 20 not-freed blocks.
==13148== checked 2,951,952 bytes.
==13148==
==13148== LEAK SUMMARY:
==13148== definitely lost: 0 bytes in 0 blocks.
==13148== possibly lost: 0 bytes in 0 blocks.
==13148== still reachable: 33,636 bytes in 20 blocks.
==13148== suppressed: 0 bytes in 0 blocks.
==13148== Reachable blocks (those to which a pointer was found) are not shown.
==13148== To see them, rerun with: --leak-check=full --show-reachable=yes

[reimar]

This seems to have been fixed at some point, at least it is no longer reproducible.