Crash on dvd:// -lavdopts fast

[cehoyos]

​http://thread.gmane.org/gmane.comp.video.mplayer.user/66501
Does not crash with dvdnav://

(gdb) r -nosound dvd:// -dvd-device test -lavdopts fast
Starting program: mplayer -nosound dvd:// -dvd-device test -lavdopts fast
[Thread debugging using libthread_db enabled]
MPlayer SVN-r33883-4.5.3 (C) 2000-2011 MPlayer Team
Loading protocol-related profile 'protocol.dvd'

Playing dvd://.
libdvdread: Using libdvdcss version 1.2.10 for DVD access
libdvdread: Couldn't find device name.
There are 1 titles on this DVD.
There are 1 angles in this DVD title.
audio stream: 0 format: ac3 (stereo) language: unknown aid: 128.
number of audio channels on disk: 1.
number of subtitles on disk: 0

MPEG-PS file format detected.
VIDEO: MPEG2 720x576 (aspect 3) 25.000 fps 4991.6 kbps (624.0 kbyte/s)
==========================================================================
Opening video decoder: [ffmpeg] FFmpeg's libavcodec codec family
Selected video codec: [ffmpeg2] vfm: ffmpeg (FFmpeg MPEG-2)
==========================================================================
Audio: no sound
Starting playback...
[VD_FFMPEG] Trying pixfmt=0.
Could not find matching colorspace - retrying with -vf scale...
Opening video filter: [scale]
The selected video_out device is incompatible with this codec.
Try appending the scale filter to your filter list,
e.g. -vf spp,scale instead of -vf spp.
Movie-Aspect is 1.78:1 - prescaling to correct movie aspect.
VO: [vdpau] 720x576 => 1024x576 Planar YV12

Program received signal SIGSEGV, Segmentation fault.
mpeg2_fast_decode_block_intra (n=1, block=0x15a9c40, s=0x1570260) at libavcodec/mpeg12.c:1116
1116 level= (level*qscale*quant_matrix[j])>>4;
(gdb) bt
#0 mpeg2_fast_decode_block_intra (n=1, block=0x15a9c40, s=0x1570260) at libavcodec/mpeg12.c:1116
#1 mpeg_decode_mb (n=1, block=0x15a9c40, s=0x1570260) at libavcodec/mpeg12.c:315
#2 mpeg_decode_slice (n=1, block=0x15a9c40, s=0x1570260) at libavcodec/mpeg12.c:1804
#3 0x00000000008212cd in decode_chunks (avctx=0x156b540, picture=0x156b3c0, data_size=0x7fffffffbadc, buf=0x7ffff7e30010 "", buf_size=2012) at libavcodec/mpeg12.c:2525
#4 0x0000000000823e8d in mpeg_decode_frame (avctx=0x156b540, data=0x156b3c0, data_size=0x7fffffffbadc, avpkt=<value optimized out>) at libavcodec/mpeg12.c:2319
#5 0x00000000008edd37 in avcodec_decode_video2 (avctx=0x156b540, picture=0x156b3c0, got_picture_ptr=0x7fffffffbadc, avpkt=0x7fffffffba50) at libavcodec/utils.c:769
#6 0x00000000005aec17 in decode (sh=0x155a1b0, data=0x7ffff7e30010, len=2012, flags=<value optimized out>) at libmpcodecs/vd_ffmpeg.c:854
#7 0x00000000004e3604 in decode_video (sh_video=0x155a1b0, start=0x7ffff7e30010 "", in_size=<value optimized out>, drop_frame=0, pts=<value optimized out>, full_frame=0x7fffffffbbdc) at libmpcodecs/dec_video.c:392
#8 0x0000000000466757 in update_video (blit_frame=0x7fffffffdcb8) at mplayer.c:2445
#9 0x000000000046af30 in main (argc=<value optimized out>, argv=<value optimized out>) at mplayer.c:3779
(gdb) disass $pc-32 $pc+32
Dump of assembler code from 0x8200b9 to 0x8200f9:
0x00000000008200b9 <mpeg2_fast_decode_block_intra+6596>: add %al,0x440f48c9(%rbp)
0x00000000008200bf <mpeg2_fast_decode_block_intra+6602>: (bad)
0x00000000008200c0 <mpeg2_fast_decode_block_intra+6603>: mov 0x68(%rax),%r9
0x00000000008200c4 <mpeg2_fast_decode_block_intra+6607>: jmp 0x8200ff <mpeg2_fast_decode_block_intra+6666>
0x00000000008200c6 <mpeg2_fast_decode_block_intra+6609>: nopw %cs:0x0(%rax,%rax,1)
0x00000000008200d0 <mpeg2_fast_decode_block_intra+6619>: movzbl %r8b,%r8d
0x00000000008200d4 <mpeg2_fast_decode_block_intra+6623>: inc %edx
0x00000000008200d6 <mpeg2_fast_decode_block_intra+6625>: add %r8,%rdi
0x00000000008200d9 <mpeg2_fast_decode_block_intra+6628>: movzbl (%rdi),%ecx
0x00000000008200dc <NEG_SSR32+0>: sar $0xff,%eax
0x00000000008200df <mpeg2_fast_decode_block_intra+6634>: movzwl (%r12,%rcx,2),%r8d
0x00000000008200e4 <mpeg2_fast_decode_block_intra+6639>: lea (%rcx,%rcx,1),%r15
0x00000000008200e8 <mpeg2_fast_decode_block_intra+6643>: imul %r11d,%r8d
0x00000000008200ec <mpeg2_fast_decode_block_intra+6647>: imul %esi,%r8d
0x00000000008200f0 <mpeg2_fast_decode_block_intra+6651>: sar $0x4,%r8d
0x00000000008200f4 <mpeg2_fast_decode_block_intra+6655>: xor %eax,%r8d
0x00000000008200f7 <mpeg2_fast_decode_block_intra+6658>: sub %eax,%r8d
End of assembler dump.
(gdb) info register
rax 0x0 0
rbx 0x1570260 22479456
rcx 0x0 0
rdx 0xf7d1 63441
rsi 0x40 64
rdi 0x15d300b 22884363
rbp 0x7ffff7e30757 0x7ffff7e30757
rsp 0x7fffffffb610 0x7fffffffb610
r8 0x41 65
r9 0x1152ca0 18164896
r10 0x15a9c40 22715456
r11 0x3 3
r12 0x15737d0 22493136
r13 0x4 4
r14 0x1 1
r15 0x0 0
rip 0x8200d9 0x8200d9 <mpeg2_fast_decode_block_intra+6628>
eflags 0x10202 [ IF RF ]
cs 0x33 51
ss 0x2b 43
ds 0x0 0
es 0x0 0
fs 0x0 0
gs 0x0 0
fctrl 0x37f 895
fstat 0x0 0
ftag 0xaaaa 43690
fiseg 0x0 0
fioff 0x0 0
foseg 0x0 0
fooff 0x0 0
fop 0x0 0
mxcsr 0x1fa0 [ PE IM DM ZM OM UM PM ]

[cehoyos]

Sample dvd