Opened 18 years ago

Closed 18 years ago

Last modified 18 years ago

#479 closed defect (fixed)

Reproducible SIGSEGV in RV10 decoder

Reported by: Wolfgang.Scherer@… Owned by: r_togni@…
Priority: important Component: libavcodec
Version: unspecified Severity: major
Keywords: VERIFIED Cc: diego@…
Blocked By: Blocking:
Reproduced by developer: no Analyzed by developer: no

Description

in

  • file error_resilience.c
  • function ff_er_frame_end

sample input: ftp://ftp.mplayerhq.hu/MPlayer/incoming/rv10-null-pointer-500k.rm
gdb dump: ftp://ftp.mplayerhq.hu/MPlayer/incoming/rv10-null-pointer-500k.txt

The following patch suppresses the problem:

--- rv10.c.~1.79.~ 2006-04-13 01:46:22.000000000 +0200
+++ rv10.c 2006-04-13 14:13:36.000000000 +0200
@@ -737,7 +737,7 @@

rv10_decode_packet(avctx, buf, buf_size);

}


  • if(s->mb_y>=s->mb_height){

+ if(s->current_picture_ptr != NULL && s->mb_y>=s->mb_height){

ff_er_frame_end(s);
MPV_frame_end(s);

Change History (5)

comment:1 by diego@…, 18 years ago

Cc: diego@… added
Owner: changed from diego@… to r_togni@…

comment:2 by diego@…, 18 years ago

I can reproduce the crash with latest CVS on PPC, both native and libavformat
demuxers. ffplay does not crash, though, which indicates that it may be a
problem in MPlayer, not FFmpeg.

comment:3 by r_togni@…, 18 years ago

sample moved to real/VC-RV10

comment:4 by diego@…, 18 years ago

Resolution: fixed
Status: newclosed

I committed the patch to FFmpeg CVS.

comment:5 by Wolfgang.Scherer@…, 18 years ago

Keywords: VERIFIED added

Thanks

Note: See TracTickets for help on using tickets.