Opened 13 years ago

Closed 13 years ago

Last modified 13 years ago

#479 closed defect (fixed)

Reproducible SIGSEGV in RV10 decoder

Reported by: Wolfgang.Scherer@… Owned by: r_togni@…
Priority: important Component: libavcodec
Version: unspecified Severity: major
Keywords: VERIFIED Cc: diego@…
Blocked By: Blocking:
Reproduced by developer: Analyzed by developer:

Description

in

  • file error_resilience.c
  • function ff_er_frame_end

sample input: ftp://ftp.mplayerhq.hu/MPlayer/incoming/rv10-null-pointer-500k.rm
gdb dump: ftp://ftp.mplayerhq.hu/MPlayer/incoming/rv10-null-pointer-500k.txt

The following patch suppresses the problem:

--- rv10.c.~1.79.~ 2006-04-13 01:46:22.000000000 +0200
+++ rv10.c 2006-04-13 14:13:36.000000000 +0200
@@ -737,7 +737,7 @@

rv10_decode_packet(avctx, buf, buf_size);

}


  • if(s->mb_y>=s->mb_height){

+ if(s->current_picture_ptr != NULL && s->mb_y>=s->mb_height){

ff_er_frame_end(s);
MPV_frame_end(s);

Change History (5)

comment:1 Changed 13 years ago by diego@…

  • Cc diego@… added
  • Owner changed from diego@… to r_togni@…

comment:2 Changed 13 years ago by diego@…

I can reproduce the crash with latest CVS on PPC, both native and libavformat
demuxers. ffplay does not crash, though, which indicates that it may be a
problem in MPlayer, not FFmpeg.

comment:3 Changed 13 years ago by r_togni@…

sample moved to real/VC-RV10

comment:4 Changed 13 years ago by diego@…

  • Resolution set to fixed
  • Status changed from new to closed

I committed the patch to FFmpeg CVS.

comment:5 Changed 13 years ago by Wolfgang.Scherer@…

  • Keywords VERIFIED added

Thanks

Note: See TracTickets for help on using tickets.