[Crash]For this .mp4 file, valgrind reports Leak_DefinitelyLost, SyscallParam, UninitValue, UninitCondition and Mplayer crashes.

[xuecongli@…]

This bug was found as part of the metafuzz project, see ​http://www.metafuzz.com

[Crash]For this .mp4 file, valgrind reports Leak_DefinitelyLost, SyscallParam, UninitValue, UninitCondition and Mplayer crashes.

System Info:

MPlayer dev-SVN-r27422-4.1.2 (C) 2000-2008 MPlayer Team
CPU: Intel Pentium 4/Celeron 4 Northwood; Pentium 4 EE/Xeon Prestonia,Gallatin (Family: 15, Model: 2, Stepping: 7)
CPUflags: MMX: 1 MMX2: 1 3DNow: 0 3DNow2: 0 SSE: 1 SSE2: 1
Compiled for x86 CPU with extensions: MMX MMX2 3DNow 3DNowEx SSE SSE2

Playing 47-innovation.mp4.

##############################################################

to reproduce:
wget ​http://www.metafuzz.com/testcases/439815-47-832590519-UninitCondition.tgz
tar xzf 439815-47-832590519-UninitCondition.tgz
valgrind mplayer 47-innovation.mp4

::::::::::::::::::::Valgrind result:::::::::::::::::::::::::::::

==12071== Memcheck, a memory error detector.
==12071== Copyright (C) 2002-2007, and GNU GPL'd, by Julian Seward et al.
==12071== Using LibVEX rev 1715, a library for dynamic binary translation.
==12071== Copyright (C) 2004-2007, and GNU GPL'd, by OpenWorks LLP.
==12071== Using valgrind-3.2.2, a dynamic binary instrumentation framework.
==12071== Copyright (C) 2000-2007, and GNU GPL'd, by Julian Seward et al.
==12071== For more details, rerun with: -v
==12071==
==12071== My PID = 12071, parent PID = 12070. Prog and args are:
==12071== mplayer
==12071== 47-innovation.mp4
==12071==
==12071== Conditional jump or move depends on uninitialised value(s)
==12071== Stack hash: 3822328633
==12071== at 0x8137D28: demux_mov_fill_buffer (stream.h:261)
==12071== by 0x811CF8C: ds_fill_buffer (demuxer.c:505)
==12071== by 0x811D6A7: ds_get_packet (demuxer.c:609)
==12071== by 0x816B474: video_read_frame (video.c:547)
==12071== by 0x807A8E2: main (mplayer.c:2262)
==12071==
==12071== Conditional jump or move depends on uninitialised value(s)
==12071== Stack hash: 3833573599
==12071== at 0x8137D2E: demux_mov_fill_buffer (stream.h:261)
==12071== by 0x811CF8C: ds_fill_buffer (demuxer.c:505)
==12071== by 0x811D6A7: ds_get_packet (demuxer.c:609)
==12071== by 0x816B474: video_read_frame (video.c:547)
==12071== by 0x807A8E2: main (mplayer.c:2262)
==12071==
==12071== Conditional jump or move depends on uninitialised value(s)
==12071== Stack hash: 380104592
==12071== at 0x8137EEF: demux_mov_fill_buffer (stream.h:261)
==12071== by 0x811CF8C: ds_fill_buffer (demuxer.c:505)
==12071== by 0x811D6A7: ds_get_packet (demuxer.c:609)
==12071== by 0x816B474: video_read_frame (video.c:547)
==12071== by 0x807A8E2: main (mplayer.c:2262)
==12071==
==12071== Conditional jump or move depends on uninitialised value(s)
==12071== Stack hash: 3886050107
==12071== at 0x8137D4A: demux_mov_fill_buffer (stream.h:263)
==12071== by 0x811CF8C: ds_fill_buffer (demuxer.c:505)
==12071== by 0x811D6A7: ds_get_packet (demuxer.c:609)
==12071== by 0x816B474: video_read_frame (video.c:547)
==12071== by 0x807A8E2: main (mplayer.c:2262)
==12071==
==12071== Conditional jump or move depends on uninitialised value(s)
==12071== Stack hash: 2585262378
==12071== at 0x81703FA: stream_seek_long (stream.c:310)
==12071== by 0x8137F07: demux_mov_fill_buffer (stream.h:270)
==12071== by 0x811CF8C: ds_fill_buffer (demuxer.c:505)
==12071== by 0x811D6A7: ds_get_packet (demuxer.c:609)
==12071== by 0x816B474: video_read_frame (video.c:547)
==12071== by 0x807A8E2: main (mplayer.c:2262)
==12071==
==12071== Syscall param llseek(offset_high) contains uninitialised byte(s)
==12071== Stack hash: 3253502438
==12071== at 0x4000792: (within /lib/ld-2.3.6.so)
==12071==
==12071== Syscall param llseek(offset_low) contains uninitialised byte(s)
==12071== Stack hash: 3253502438
==12071== at 0x4000792: (within /lib/ld-2.3.6.so)
==12071==
==12071== Conditional jump or move depends on uninitialised value(s)
==12071== Stack hash: 513659744
==12071== at 0x8170458: stream_seek_long (stream.c:357)
==12071== by 0x8137F07: demux_mov_fill_buffer (stream.h:270)
==12071== by 0x811CF8C: ds_fill_buffer (demuxer.c:505)
==12071== by 0x811D6A7: ds_get_packet (demuxer.c:609)
==12071== by 0x816B474: video_read_frame (video.c:547)
==12071== by 0x807A8E2: main (mplayer.c:2262)
==12071==
==12071== Conditional jump or move depends on uninitialised value(s)
==12071== Stack hash: 1761850970
==12071== at 0x817046A: stream_seek_long (stream.c:358)
==12071== by 0x8137F07: demux_mov_fill_buffer (stream.h:270)
==12071== by 0x811CF8C: ds_fill_buffer (demuxer.c:505)
==12071== by 0x811D6A7: ds_get_packet (demuxer.c:609)
==12071== by 0x816B474: video_read_frame (video.c:547)
==12071== by 0x807A8E2: main (mplayer.c:2262)
==12071==
==12071== Conditional jump or move depends on uninitialised value(s)
==12071== Stack hash: 1900538884
==12071== at 0x817046C: stream_seek_long (stream.c:358)
==12071== by 0x8137F07: demux_mov_fill_buffer (stream.h:270)
==12071== by 0x811CF8C: ds_fill_buffer (demuxer.c:505)
==12071== by 0x811D6A7: ds_get_packet (demuxer.c:609)
==12071== by 0x816B474: video_read_frame (video.c:547)
==12071== by 0x807A8E2: main (mplayer.c:2262)
==12071==
==12071== Conditional jump or move depends on uninitialised value(s)
==12071== Stack hash: 2247258669
==12071== at 0x8170471: stream_seek_long (stream.c:358)
==12071== by 0x8137F07: demux_mov_fill_buffer (stream.h:270)
==12071== by 0x811CF8C: ds_fill_buffer (demuxer.c:505)
==12071== by 0x811D6A7: ds_get_packet (demuxer.c:609)
==12071== by 0x816B474: video_read_frame (video.c:547)
==12071== by 0x807A8E2: main (mplayer.c:2262)
==12071==
==12071== Conditional jump or move depends on uninitialised value(s)
==12071== Stack hash: 4253982527
==12071== at 0x811B29E: ds_read_packet (stream.h:212)
==12071== by 0x81380B8: demux_mov_fill_buffer (demux_mov.c:2176)
==12071== by 0x811CF8C: ds_fill_buffer (demuxer.c:505)
==12071== by 0x811D6A7: ds_get_packet (demuxer.c:609)
==12071== by 0x816B474: video_read_frame (video.c:547)
==12071== by 0x807A8E2: main (mplayer.c:2262)
==12071==
==12071== Conditional jump or move depends on uninitialised value(s)
==12071== Stack hash: 648096763
==12071== at 0x811B26A: ds_read_packet (stream.h:216)
==12071== by 0x81380B8: demux_mov_fill_buffer (demux_mov.c:2176)
==12071== by 0x811CF8C: ds_fill_buffer (demuxer.c:505)
==12071== by 0x811D6A7: ds_get_packet (demuxer.c:609)
==12071== by 0x816B474: video_read_frame (video.c:547)
==12071== by 0x807A8E2: main (mplayer.c:2262)
==12071==
==12071== Conditional jump or move depends on uninitialised value(s)
==12071== Stack hash: 1791112796
==12071== at 0x401EF8C: memcpy (mc_replace_strmem.c:406)
==12071== by 0x811B28B: ds_read_packet (stream.h:218)
==12071== by 0x81380B8: demux_mov_fill_buffer (demux_mov.c:2176)
==12071== by 0x811CF8C: ds_fill_buffer (demuxer.c:505)
==12071== by 0x811D6A7: ds_get_packet (demuxer.c:609)
==12071== by 0x816B474: video_read_frame (video.c:547)
==12071== by 0x807A8E2: main (mplayer.c:2262)
==12071==
==12071== Conditional jump or move depends on uninitialised value(s)
==12071== Stack hash: 3407813997
==12071== at 0x401EF95: memcpy (mc_replace_strmem.c:77)
==12071== by 0x811B28B: ds_read_packet (stream.h:218)
==12071== by 0x81380B8: demux_mov_fill_buffer (demux_mov.c:2176)
==12071== by 0x811CF8C: ds_fill_buffer (demuxer.c:505)
==12071== by 0x811D6A7: ds_get_packet (demuxer.c:609)
==12071== by 0x816B474: video_read_frame (video.c:547)
==12071== by 0x807A8E2: main (mplayer.c:2262)
==12071==
==12071== Conditional jump or move depends on uninitialised value(s)
==12071== Stack hash: 1453493738
==12071== at 0x401EFAA: memcpy (mc_replace_strmem.c:406)
==12071== by 0x811B28B: ds_read_packet (stream.h:218)
==12071== by 0x81380B8: demux_mov_fill_buffer (demux_mov.c:2176)
==12071== by 0x811CF8C: ds_fill_buffer (demuxer.c:505)
==12071== by 0x811D6A7: ds_get_packet (demuxer.c:609)
==12071== by 0x816B474: video_read_frame (video.c:547)
==12071== by 0x807A8E2: main (mplayer.c:2262)
==12071==
==12071== Conditional jump or move depends on uninitialised value(s)
==12071== Stack hash: 496906407
==12071== at 0x401EFFF: memcpy (mc_replace_strmem.c:406)
==12071== by 0x811B28B: ds_read_packet (stream.h:218)
==12071== by 0x81380B8: demux_mov_fill_buffer (demux_mov.c:2176)
==12071== by 0x811CF8C: ds_fill_buffer (demuxer.c:505)
==12071== by 0x811D6A7: ds_get_packet (demuxer.c:609)
==12071== by 0x816B474: video_read_frame (video.c:547)
==12071== by 0x807A8E2: main (mplayer.c:2262)
==12071==
==12071== Conditional jump or move depends on uninitialised value(s)
==12071== Stack hash: 271827035
==12071== at 0x401F013: memcpy (mc_replace_strmem.c:406)
==12071== by 0x811B28B: ds_read_packet (stream.h:218)
==12071== by 0x81380B8: demux_mov_fill_buffer (demux_mov.c:2176)
==12071== by 0x811CF8C: ds_fill_buffer (demuxer.c:505)
==12071== by 0x811D6A7: ds_get_packet (demuxer.c:609)
==12071== by 0x816B474: video_read_frame (video.c:547)
==12071== by 0x807A8E2: main (mplayer.c:2262)
==12071==
==12071== Use of uninitialised value of size 4
==12071== Stack hash: 3561499280
==12071== at 0x401F020: memcpy (mc_replace_strmem.c:406)
==12071== by 0x811B28B: ds_read_packet (stream.h:218)
==12071== by 0x81380B8: demux_mov_fill_buffer (demux_mov.c:2176)
==12071== by 0x811CF8C: ds_fill_buffer (demuxer.c:505)
==12071== by 0x811D6A7: ds_get_packet (demuxer.c:609)
==12071== by 0x816B474: video_read_frame (video.c:547)
==12071== by 0x807A8E2: main (mplayer.c:2262)
==12071==
==12071== Use of uninitialised value of size 4
==12071== Stack hash: 1775988550
==12071== at 0x401F026: memcpy (mc_replace_strmem.c:406)
==12071== by 0x811B28B: ds_read_packet (stream.h:218)
==12071== by 0x81380B8: demux_mov_fill_buffer (demux_mov.c:2176)
==12071== by 0x811CF8C: ds_fill_buffer (demuxer.c:505)
==12071== by 0x811D6A7: ds_get_packet (demuxer.c:609)
==12071== by 0x816B474: video_read_frame (video.c:547)
==12071== by 0x807A8E2: main (mplayer.c:2262)
==12071==
==12071== Conditional jump or move depends on uninitialised value(s)
==12071== Stack hash: 2274855014
==12071== at 0x401F046: memcpy (mc_replace_strmem.c:406)
==12071== by 0x811B28B: ds_read_packet (stream.h:218)
==12071== by 0x81380B8: demux_mov_fill_buffer (demux_mov.c:2176)
==12071== by 0x811CF8C: ds_fill_buffer (demuxer.c:505)
==12071== by 0x811D6A7: ds_get_packet (demuxer.c:609)
==12071== by 0x816B474: video_read_frame (video.c:547)
==12071== by 0x807A8E2: main (mplayer.c:2262)
==12071==
==12071== Conditional jump or move depends on uninitialised value(s)
==12071== Stack hash: 3947826058
==12071== at 0x401F04A: memcpy (mc_replace_strmem.c:406)
==12071== by 0x811B28B: ds_read_packet (stream.h:218)
==12071== by 0x81380B8: demux_mov_fill_buffer (demux_mov.c:2176)
==12071== by 0x811CF8C: ds_fill_buffer (demuxer.c:505)
==12071== by 0x811D6A7: ds_get_packet (demuxer.c:609)
==12071== by 0x816B474: video_read_frame (video.c:547)
==12071== by 0x807A8E2: main (mplayer.c:2262)
==12071==
==12071== Conditional jump or move depends on uninitialised value(s)
==12071== Stack hash: 3352511086
==12071== at 0x811B291: ds_read_packet (stream.h:209)
==12071== by 0x81380B8: demux_mov_fill_buffer (demux_mov.c:2176)
==12071== by 0x811CF8C: ds_fill_buffer (demuxer.c:505)
==12071== by 0x811D6A7: ds_get_packet (demuxer.c:609)
==12071== by 0x816B474: video_read_frame (video.c:547)
==12071== by 0x807A8E2: main (mplayer.c:2262)
==12071==
==12071== Conditional jump or move depends on uninitialised value(s)
==12071== Stack hash: 1880966113
==12071== at 0x401F069: memcpy (mc_replace_strmem.c:406)
==12071== by 0x811B28B: ds_read_packet (stream.h:218)
==12071== by 0x81380B8: demux_mov_fill_buffer (demux_mov.c:2176)
==12071== by 0x811CF8C: ds_fill_buffer (demuxer.c:505)
==12071== by 0x811D6A7: ds_get_packet (demuxer.c:609)
==12071== by 0x816B474: video_read_frame (video.c:547)
==12071== by 0x807A8E2: main (mplayer.c:2262)
==12071==
==12071== Conditional jump or move depends on uninitialised value(s)
==12071== Stack hash: 2113035936
==12071== at 0x811B2FB: ds_read_packet (demuxer.h:257)
==12071== by 0x81380B8: demux_mov_fill_buffer (demux_mov.c:2176)
==12071== by 0x811CF8C: ds_fill_buffer (demuxer.c:505)
==12071== by 0x811D6A7: ds_get_packet (demuxer.c:609)
==12071== by 0x816B474: video_read_frame (video.c:547)
==12071== by 0x807A8E2: main (mplayer.c:2262)
==12071==
==12071== Conditional jump or move depends on uninitialised value(s)
==12071== Stack hash: 3782830879
==12071== at 0x401D514: realloc (vg_replace_malloc.c:306)
==12071== by 0x811B31A: ds_read_packet (demuxer.h:259)
==12071== by 0x81380B8: demux_mov_fill_buffer (demux_mov.c:2176)
==12071== by 0x811CF8C: ds_fill_buffer (demuxer.c:505)
==12071== by 0x811D6A7: ds_get_packet (demuxer.c:609)
==12071== by 0x816B474: video_read_frame (video.c:547)
==12071== by 0x807A8E2: main (mplayer.c:2262)
==12071==
==12071== Use of uninitialised value of size 4
==12071== Stack hash: 1631986275
==12071== at 0x811B332: ds_read_packet (demuxer.h:268)
==12071== by 0x81380B8: demux_mov_fill_buffer (demux_mov.c:2176)
==12071== by 0x811CF8C: ds_fill_buffer (demuxer.c:505)
==12071== by 0x811D6A7: ds_get_packet (demuxer.c:609)
==12071== by 0x816B474: video_read_frame (video.c:547)
==12071== by 0x807A8E2: main (mplayer.c:2262)
==12071==
==12071== Conditional jump or move depends on uninitialised value(s)
==12071== Stack hash: 860864095
==12071== at 0x816B479: video_read_frame (video.c:548)
==12071== by 0x807A8E2: main (mplayer.c:2262)
==12071==
==12071== Conditional jump or move depends on uninitialised value(s)
==12071== Stack hash: 1507313771
==12071== at 0x811AD67: ds_get_next_pts (demuxer.c:668)
==12071== by 0x816B2B2: video_read_frame (video.c:573)
==12071== by 0x807A8E2: main (mplayer.c:2262)
==12071==
==12071== Conditional jump or move depends on uninitialised value(s)
==12071== Stack hash: 1375396216
==12071== at 0x8137D28: demux_mov_fill_buffer (stream.h:261)
==12071== by 0x811AD74: ds_get_next_pts (demuxer.c:675)
==12071== by 0x816B2B2: video_read_frame (video.c:573)
==12071== by 0x807A8E2: main (mplayer.c:2262)
==12071==
==12071== Conditional jump or move depends on uninitialised value(s)
==12071== Stack hash: 1375700134
==12071== at 0x8137D2E: demux_mov_fill_buffer (stream.h:261)
==12071== by 0x811AD74: ds_get_next_pts (demuxer.c:675)
==12071== by 0x816B2B2: video_read_frame (video.c:573)
==12071== by 0x807A8E2: main (mplayer.c:2262)
==12071==
==12071== Conditional jump or move depends on uninitialised value(s)
==12071== Stack hash: 1398443331
==12071== at 0x8137EEF: demux_mov_fill_buffer (stream.h:261)
==12071== by 0x811AD74: ds_get_next_pts (demuxer.c:675)
==12071== by 0x816B2B2: video_read_frame (video.c:573)
==12071== by 0x807A8E2: main (mplayer.c:2262)
==12071==
==12071== Conditional jump or move depends on uninitialised value(s)
==12071== Stack hash: 1377118418
==12071== at 0x8137D4A: demux_mov_fill_buffer (stream.h:263)
==12071== by 0x811AD74: ds_get_next_pts (demuxer.c:675)
==12071== by 0x816B2B2: video_read_frame (video.c:573)
==12071== by 0x807A8E2: main (mplayer.c:2262)
==12071==
==12071== Conditional jump or move depends on uninitialised value(s)
==12071== Stack hash: 181160021
==12071== at 0x81703FA: stream_seek_long (stream.c:310)
==12071== by 0x8137F07: demux_mov_fill_buffer (stream.h:270)
==12071== by 0x811AD74: ds_get_next_pts (demuxer.c:675)
==12071== by 0x816B2B2: video_read_frame (video.c:573)
==12071== by 0x807A8E2: main (mplayer.c:2262)
==12071==
==12071== Conditional jump or move depends on uninitialised value(s)
==12071== Stack hash: 134719719
==12071== at 0x807A8E7: main (mplayer.c:2273)
==12071==
==12071== Conditional jump or move depends on uninitialised value(s)
==12071== Stack hash: 2180561200
==12071== at 0x8196CC2: decode (vd_ffmpeg.c:740)
==12071== by 0x80DB02A: decode_video (dec_video.c:369)
==12071== by 0x807A9AC: main (mplayer.c:2292)
==12071==
==12071== Conditional jump or move depends on uninitialised value(s)
==12071== Stack hash: 943682454
==12071== at 0x82E5382: avcodec_decode_video (utils.c:913)
==12071== by 0x8196DCE: decode (vd_ffmpeg.c:781)
==12071== by 0x80DB02A: decode_video (dec_video.c:369)
==12071== by 0x807A9AC: main (mplayer.c:2292)
==12071==
==12071== Conditional jump or move depends on uninitialised value(s)
==12071== Stack hash: 1722205693
==12071== at 0x844C528: decode_frame (h264.c:7550)
==12071== by 0x82E53CD: avcodec_decode_video (utils.c:914)
==12071== by 0x8196DCE: decode (vd_ffmpeg.c:781)
==12071== by 0x80DB02A: decode_video (dec_video.c:369)
==12071== by 0x807A9AC: main (mplayer.c:2292)
==12071==
==12071== Conditional jump or move depends on uninitialised value(s)
==12071== Stack hash: 361720728
==12071== at 0x844AEE0: decode_nal_units (h264.c:7371)
==12071== by 0x844C613: decode_frame (h264.c:7620)
==12071== by 0x82E53CD: avcodec_decode_video (utils.c:914)
==12071== by 0x8196DCE: decode (vd_ffmpeg.c:781)
==12071== by 0x80DB02A: decode_video (dec_video.c:369)
==12071== by 0x807A9AC: main (mplayer.c:2292)
==12071==
==12071== Conditional jump or move depends on uninitialised value(s)
==12071== Stack hash: 3486556831
==12071== at 0x844AF4B: decode_nal_units (h264.c:7375)
==12071== by 0x844C613: decode_frame (h264.c:7620)
==12071== by 0x82E53CD: avcodec_decode_video (utils.c:914)
==12071== by 0x8196DCE: decode (vd_ffmpeg.c:781)
==12071== by 0x80DB02A: decode_video (dec_video.c:369)
==12071== by 0x807A9AC: main (mplayer.c:2292)
==12071==
==12071== Conditional jump or move depends on uninitialised value(s)
==12071== Stack hash: 1521743253
==12071== at 0x811D687: ds_get_packet (demuxer.c:608)
==12071== by 0x816B474: video_read_frame (video.c:547)
==12071== by 0x807A8E2: main (mplayer.c:2262)
==12071== Warning: set address range perms: large range 268436229 (undefined)
==12071== Warning: set address range perms: large range 268436261 (noaccess)
==12071==
==12071== ERROR SUMMARY: 1294497 errors from 41 contexts (suppressed: 21 from 1)
==12071== malloc/free: in use at exit: 33,091 bytes in 20 blocks.
==12071== malloc/free: 3,072 allocs, 3,052 frees, 487,955,777 bytes allocated.
==12071== For counts of detected errors, rerun with: -v
==12071== searching for pointers to 20 not-freed blocks.
==12071== checked 2,951,708 bytes.
==12071==
==12071==
==12071== 20 bytes in 2 blocks are definitely lost in loss record 5 of 11
==12071== Stack hash: 1420098800
==12071== at 0x401C6AB: memalign (vg_replace_malloc.c:332)
==12071== by 0x853D894: av_malloc (mem.c:61)
==12071== by 0x853D8D7: av_strdup (mem.c:145)
==12071== by 0x82E5F2A: avcodec_get_context_defaults2 (utils.c:761)
==12071== by 0x82E5FF9: avcodec_alloc_context2 (utils.c:780)
==12071== by 0x82E6021: avcodec_alloc_context (utils.c:790)
==12071== by 0x825C66F: av_new_stream (utils.c:2261)
==12071== by 0x828A65F: mov_read_trak (mov.c:1294)
==12071== by 0x8289058: mov_read_default (mov.c:215)
==12071== by 0x828925B: mov_read_moov (mov.c:455)
==12071== by 0x8289058: mov_read_default (mov.c:215)
==12071== by 0x828C8F5: mov_read_header (mov.c:1810)
==12071==
==12071== LEAK SUMMARY:
==12071== definitely lost: 20 bytes in 2 blocks.
==12071== possibly lost: 0 bytes in 0 blocks.
==12071== still reachable: 33,071 bytes in 18 blocks.
==12071== suppressed: 0 bytes in 0 blocks.
==12071== Reachable blocks (those to which a pointer was found) are not shown.
==12071== To see them, rerun with: --leak-check=full --show-reachable=yes
MPlayer interrupted by signal 2 in module: sleep_timer
_

gdb Backtrace

Using host libthread_db library "/lib/tls/i686/cmov/libthread_db.so.1".
/home/user/bug_report/core: No such file or directory.
[Thread debugging using libthread_db enabled]
[New Thread -1210021216 (LWP 12098)]
MPlayer dev-SVN-r27422-4.1.2 (C) 2000-2008 MPlayer Team
CPU: Dual-Core AMD Opteron(tm) Processor 2218 HE (Family: 15, Model: 65, Stepping: 3)
CPUflags: MMX: 1 MMX2: 1 3DNow: 1 3DNow2: 1 SSE: 1 SSE2: 1
Compiled for x86 CPU with extensions: MMX MMX2 3DNow 3DNowEx SSE SSE2
get_path('codecs.conf') -> '/root/.mplayer/codecs.conf'
Reading /root/.mplayer/codecs.conf: Can't open '/root/.mplayer/codecs.conf': No such file or directory
Reading /usr/local/etc/mplayer/codecs.conf: Can't open '/usr/local/etc/mplayer/codecs.conf': No such file or directory
Using built-in default codecs.conf.
Configuration: --enable-debug=3
CommandLine: '-v' '47-innovation.mp4'
get_path('font/font.desc') -> '/root/.mplayer/font/font.desc'
font: can't open file: /root/.mplayer/font/font.desc
font: can't open file: /usr/local/share/mplayer/font/font.desc
Using MMX (with tiny bit MMX2) Optimized OnScreenDisplay
Using nanosleep() timing
get_path('input.conf') -> '/root/.mplayer/input.conf'
Can't open input config file /root/.mplayer/input.conf: No such file or directory
Can't open input config file /usr/local/etc/mplayer/input.conf: No such file or directory
Falling back on default (hardcoded) input config
get_path('47-innovation.mp4.conf') -> '/root/.mplayer/47-innovation.mp4.conf'

Playing 47-innovation.mp4.
get_path('sub/') -> '/root/.mplayer/sub/'
[file] File size is 5072382 bytes
STREAM: [file] 47-innovation.mp4
STREAM: Description: File
STREAM: Author: Albeu
STREAM: Comment: based on the code from ??? (probably Arpi)
LAVF_check: QuickTime/MPEG-4/Motion JPEG 2000 format
libavformat file format detected.
[mov,mp4,m4a,3gp,3g2,mj2 @ 0x8a044a0]Could not find codec parameters (Data: 0x0000)
[mov,mp4,m4a,3gp,3g2,mj2 @ 0x8a044a0]Could not find codec parameters (Video: h264)
LAVF_header: av_find_stream_info() failed
Checking for YUV4MPEG2
ASF_check: not ASF guid!
Checking for NuppelVideo
Checking for REAL
Checking for SMJPEG
Checking for Nullsoft Streaming Video
Checking for MOV
ISO: File Type Major Brand: ISO/IEC 14496-1 (MPEG-4 system) v2
ISO: File Type Minor Version: 262144
ISO: File Type Compatible Brand #0: mp42
ISO: File Type Compatible Brand #1: iso-
MOV: Movie DATA found!
MOV: Movie header found!
Quicktime/MOV file format detected.
MOV: Movie header (100 bytes): tscale=856 dur=2611200
MOV: unknown chunk: iods 13

---

MOV: Track #0:
MOV: Track header!
tkhd len=84 ver=0 flags=0x8 id=101 dur=1073877824 lay=8192 vol=256
MOV: unknown chunk: mdi! 18176
MOV track #0: 0 chunks, 0 samples
pts=0 scale=0 time= nan
* constant samplesize & variable duration not yet supported! *
Contact the author if you have such sample file!
Unknown track type found (type: 0)

---

MOV: Track #1:
MOV: unknown chunk: vkhd 84
MOV: Media stream!
MOV: Media header!
MOV: Handler header: /vide () idu
MOV: unknown handler class: 0x8000 ()
MOV: Media info!
MOV: Video header!
MOV: unknown chunk: dinf 28
MOV: Sample info!
MOV: Sample duration table! (1 blocks)
Warning! pts=527688 length=3400
MOV: Description list! (cnt:1)
MOV: desc #0: avc1 (123 bytes)
MOV: Sample size table! (entries=3400 ss=0) (ver:0,flags:0)
MOV: Sample->Chunk mapping table! (2 blocks) (ver:0,flags:0)
MOV: unknown chunk: svco 692
MOV: Syncing samples (keyframes) table! (34 entries) (ver:1073741824,flags:4210752)
MOV: unknown chunk: ÿÿÿ -264
MOV track #1: 0 chunks, 3400 samples
pts=3400 scale=25 time=136.000
MOV: durmap and chunkmap sample count differ (527688 vs 0)
MOV: durmap or chunkmap bigger than sample count (527688 vs 3400)
==> Found video stream: 1
[mov] Video stream found, -vid 1
MOV: AVC decoder configuration record atom (33)!
MOV: avcC version: 1
MOV: avcC profile: 0
MOV: avcC profile compatibility: 119
MOV: avcC level: 9
MOV: avcC nal length size: 4
MOV: avcC number of sequence param sets: 1
MOV: avcC sps 0 have length 9
MOV: avcC number of picture param sets: 1
MOV: avcC pps 0 have length 5
MOV: Found unknown movie atom btrt (20)!
* depth = 0xFFFF
Image size: 0 x 0 (31 bpp)
Fourcc: avc1 Codec:

---

MOV: longest streams: A: #-1 (0 samples) V: #1 (527688 samples)
VIDEO: [avc1] 0x0 31bpp 25.000 fps 0.0 kbps ( 0.0 kbyte/s)
[V] filefmt:7 fourcc:0x31637661 size:0x0 fps:25.000 ftime:=0.0400
get_path('sub/') -> '/root/.mplayer/sub/'
using /dev/fb0
Can't open /dev/fb0: No such device or address
[fbdev2] Using device /dev/fb0
[fbdev2] Can't open /dev/fb0: No such device or address
vo_cvidix: No vidix driver name provided, probing available ones (-v option for details)!
[VO_SUB_VIDIX] Couldn't find working VIDIX driver.
vidixlib: PROBING: cyberblade
[cyberblade] Error occurred during pci scan: No such device
vidixlib: PROBING: mach64
[mach64] Error occurred during pci scan: No such device
vidixlib: PROBING: mga
[mga] probe
[mga] Error occurred during pci scan: No such device
vidixlib: PROBING: mga_crtc2
[mga] probe
[mga] Error occurred during pci scan: No such device
vidixlib: PROBING: nvidia
[nvidia_vid] Error occurred during pci scan: No such device
vidixlib: PROBING: pm3
[pm3] Error occurred during pci scan: No such device
vidixlib: PROBING: radeon
[radeon] Error occurred during pci scan: No such device
vidixlib: PROBING: rage128
[rage128] Error occurred during pci scan: No such device
vidixlib: PROBING: s3
[s3_vid] Error occurred during pci scan: No such device
vidixlib: PROBING: sis
[SiS] Error occurred during pci scan: No such device
vidixlib: PROBING: unichrome
[unichrome] Error occurred during pci scan: No such device
vidixlib: No suitable driver can be found.
==========================================================================
Opening video decoder: [ffmpeg] FFmpeg's libavcodec codec family
INFO: libavcodec init OK!
Selected video codec: [ffh264] vfm: ffmpeg (FFmpeg H.264)
==========================================================================
Audio: no sound
Freeing 0 unused audio chunks.
Starting playback...
Seek failed
[h264 @ 0x868f550]AVC: nal size 1835295092
[h264 @ 0x868f550]no frame!
Error while decoding frame!
V: 0.0 1/ 1 ??% ??% ??,?% 0 0
stream_seek: WARNING! Can't seek to 0xE800000030 !
V: 0.0 2/ 2 ??% ??% ??,?% 0 0
stream_seek: WARNING! Can't seek to 0x1908A05F60 !
V: 0.1 3/ 3 ??% ??% ??,?% 0 0
stream_read: WARNING! s->buf_pos>s->buf_len

Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread -1210021216 (LWP 12098)]
0xb7e767d5 in memcpy () from /lib/tls/i686/cmov/libc.so.6
#0 0xb7e767d5 in memcpy () from /lib/tls/i686/cmov/libc.so.6
#1 0x0811b28c in ds_read_packet (ds=0x89fbaa8, stream=0xffff5080, len=<value optimized out>, pts=0.15999999642372131, pos=-9223372036854775808, flags=0)

at ./stream/stream.h:218

#2 0x081380b9 in demux_mov_fill_buffer (demuxer=0x89fb1b8, ds=0x89fbaa8) at libmpdemux/demux_mov.c:2176
#3 0x0811ad75 in ds_get_next_pts (ds=0x89fbaa8) at libmpdemux/demuxer.c:675
#4 0x0816b2b3 in video_read_frame (sh_video=0x89fc710, frame_time_ptr=0x89fc744, start=0xbffa4ff4, force_fps=0) at libmpdemux/video.c:573
#5 0x0807a8e3 in main (argc=3, argv=0xbffa50a4) at mplayer.c:2262
Dump of assembler code from 0xb7e767b5 to 0xb7e767f5:
0xb7e767b5 <memcpy_chk+5>: inc %esp
0xb7e767b6 <memcpy_chk+6>: and $0x10,%al
0xb7e767b8 <memcpy_chk+8>: jb 0xb7eeb260 <chk_fail>
0xb7e767be <memcpy_chk+14>: mov %esi,%esi
0xb7e767c0 <memcpy+0>: mov 0xc(%esp),%ecx
0xb7e767c4 <memcpy+4>: mov %edi,%eax
0xb7e767c6 <memcpy+6>: mov 0x4(%esp),%edi
0xb7e767ca <memcpy+10>: mov %esi,%edx
0xb7e767cc <memcpy+12>: mov 0x8(%esp),%esi
0xb7e767d0 <memcpy+16>: cld
0xb7e767d1 <memcpy+17>: shr %ecx
0xb7e767d3 <memcpy+19>: jae 0xb7e767d6 <memcpy+22>
0xb7e767d5 <memcpy+21>: movsb %ds:(%esi),%es:(%edi)
0xb7e767d6 <memcpy+22>: shr %ecx
0xb7e767d8 <memcpy+24>: jae 0xb7e767dc <memcpy+28>
0xb7e767da <memcpy+26>: movsw %ds:(%esi),%es:(%edi)
0xb7e767dc <memcpy+28>: rep movsl %ds:(%esi),%es:(%edi)
0xb7e767de <memcpy+30>: mov %eax,%edi
0xb7e767e0 <memcpy+32>: mov %edx,%esi
0xb7e767e2 <memcpy+34>: mov 0x4(%esp),%eax
0xb7e767e6 <memcpy+38>: ret
0xb7e767e7 <memcpy+39>: nop
0xb7e767e8 <memcpy+40>: nop
0xb7e767e9 <memcpy+41>: nop
0xb7e767ea <memcpy+42>: nop
0xb7e767eb <memcpy+43>: nop
0xb7e767ec <memcpy+44>: nop
0xb7e767ed <memcpy+45>: nop
0xb7e767ee <memcpy+46>: nop
0xb7e767ef <memcpy+47>: nop
0xb7e767f0 <memcpy+48>: push %ebp
0xb7e767f1 <memcpy+49>: mov %esp,%ebp
0xb7e767f3 <memcpy+51>: sub $0xc,%esp
End of assembler dump.
eax 0x0 0
ecx 0x4c9 1225
edx 0x89fa820 144680992
ebx 0x993 2451
esp 0xbffa3c6c 0xbffa3c6c
ebp 0xbffa3cc8 0xbffa3cc8
esi 0xffff5080 -44928
edi 0x89fd570 144692592
eip 0xb7e767d5 0xb7e767d5 <memcpy+21>
eflags 0x210217 [ CF PF AF IF RF ID ]
cs 0x73 115
ss 0x7b 123
ds 0x7b 123
es 0x7b 123
fs 0x0 0
gs 0x33 51
st0 0 (raw 0x00000000000000000000)
st1 0 (raw 0x00000000000000000000)
st2 0 (raw 0x00000000000000000000)
st3 0 (raw 0x00000000000000000000)
st4 0 (raw 0x00000000000000000000)
st5 0.039999999105930328369140625 (raw 0x3ffaa3d70a0000000000)
st6 4 (raw 0x40018000000000000000)
st7 -9223372036854775808 (raw 0xc03e8000000000000000)
fctrl 0x37f 895
fstat 0x21 33
ftag 0xffff 65535
fiseg 0x0 0
fioff 0x0 0
foseg 0x0 0
fooff 0x0 0
fop 0x0 0
xmm0 {v4_float = {0x0, 0x0, 0x0, 0x0}, v2_double = {0x0, 0x0}, v16_int8 = {0x0 <repeats 16 times>}, v8_int16 = {0x0, 0x0, 0x0, 0x0, 0x0, 0x0,

0x0, 0x0}, v4_int32 = {0x0, 0x0, 0x0, 0x0}, v2_int64 = {0x0, 0x0}, uint128 = 0x00000000000000000000000000000000}

xmm1 {v4_float = {0x0, 0x0, 0x0, 0x0}, v2_double = {0x0, 0x0}, v16_int8 = {0x0 <repeats 16 times>}, v8_int16 = {0x0, 0x0, 0x0, 0x0, 0x0, 0x0,

0x0, 0x0}, v4_int32 = {0x0, 0x0, 0x0, 0x0}, v2_int64 = {0x0, 0x0}, uint128 = 0x00000000000000000000000000000000}

xmm2 {v4_float = {0x0, 0x0, 0x0, 0x0}, v2_double = {0x0, 0x0}, v16_int8 = {0x0 <repeats 16 times>}, v8_int16 = {0x0, 0x0, 0x0, 0x0, 0x0, 0x0,

0x0, 0x0}, v4_int32 = {0x0, 0x0, 0x0, 0x0}, v2_int64 = {0x0, 0x0}, uint128 = 0x00000000000000000000000000000000}

xmm3 {v4_float = {0x0, 0x0, 0x0, 0x0}, v2_double = {0x0, 0x0}, v16_int8 = {0x0 <repeats 16 times>}, v8_int16 = {0x0, 0x0, 0x0, 0x0, 0x0, 0x0,

0x0, 0x0}, v4_int32 = {0x0, 0x0, 0x0, 0x0}, v2_int64 = {0x0, 0x0}, uint128 = 0x00000000000000000000000000000000}

xmm4 {v4_float = {0x0, 0x0, 0x0, 0x0}, v2_double = {0x0, 0x0}, v16_int8 = {0x0 <repeats 16 times>}, v8_int16 = {0x0, 0x0, 0x0, 0x0, 0x0, 0x0,

0x0, 0x0}, v4_int32 = {0x0, 0x0, 0x0, 0x0}, v2_int64 = {0x0, 0x0}, uint128 = 0x00000000000000000000000000000000}

xmm5 {v4_float = {0x0, 0x0, 0x0, 0x0}, v2_double = {0x0, 0x0}, v16_int8 = {0x0 <repeats 16 times>}, v8_int16 = {0x0, 0x0, 0x0, 0x0, 0x0, 0x0,

0x0, 0x0}, v4_int32 = {0x0, 0x0, 0x0, 0x0}, v2_int64 = {0x0, 0x0}, uint128 = 0x00000000000000000000000000000000}

xmm6 {v4_float = {0x0, 0x0, 0x0, 0x0}, v2_double = {0x0, 0x0}, v16_int8 = {0x0 <repeats 16 times>}, v8_int16 = {0x0, 0x0, 0x0, 0x0, 0x0, 0x0,

0x0, 0x0}, v4_int32 = {0x0, 0x0, 0x0, 0x0}, v2_int64 = {0x0, 0x0}, uint128 = 0x00000000000000000000000000000000}

xmm7 {v4_float = {0x0, 0x0, 0x0, 0x0}, v2_double = {0x0, 0x0}, v16_int8 = {0x0 <repeats 16 times>}, v8_int16 = {0x0, 0x0, 0x0, 0x0, 0x0, 0x0,

0x0, 0x0}, v4_int32 = {0x0, 0x0, 0x0, 0x0}, v2_int64 = {0x0, 0x0}, uint128 = 0x00000000000000000000000000000000}

mxcsr 0x1f80 [ IM DM ZM OM UM PM ]
mm0 {uint64 = 0x0, v2_int32 = {0x0, 0x0}, v4_int16 = {0x0, 0x0, 0x0, 0x0}, v8_int8 = {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}
mm1 {uint64 = 0x0, v2_int32 = {0x0, 0x0}, v4_int16 = {0x0, 0x0, 0x0, 0x0}, v8_int8 = {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}
mm2 {uint64 = 0x0, v2_int32 = {0x0, 0x0}, v4_int16 = {0x0, 0x0, 0x0, 0x0}, v8_int8 = {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}
mm3 {uint64 = 0x0, v2_int32 = {0x0, 0x0}, v4_int16 = {0x0, 0x0, 0x0, 0x0}, v8_int8 = {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}
mm4 {uint64 = 0x0, v2_int32 = {0x0, 0x0}, v4_int16 = {0x0, 0x0, 0x0, 0x0}, v8_int8 = {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}
mm5 {uint64 = 0xa3d70a0000000000, v2_int32 = {0x0, 0xa3d70a00}, v4_int16 = {0x0, 0x0, 0xa00, 0xa3d7}, v8_int8 = {0x0, 0x0, 0x0, 0x0, 0x0, 0xa,

0xd7, 0xa3}}

mm6 {uint64 = 0x8000000000000000, v2_int32 = {0x0, 0x80000000}, v4_int16 = {0x0, 0x0, 0x0, 0x8000}, v8_int8 = {0x0, 0x0, 0x0, 0x0, 0x0, 0x0,

0x0, 0x80}}

mm7 {uint64 = 0x8000000000000000, v2_int32 = {0x0, 0x80000000}, v4_int16 = {0x0, 0x0, 0x0, 0x8000}, v8_int8 = {0x0, 0x0, 0x0, 0x0, 0x0, 0x0,

0x0, 0x80}}

[compn]

demux_mov is depreciated
svn uses demux_lavf for mov now