Timeline



Sep 2, 2022:

1:49 PM Ticket #2404 (A heap-buffer-overflow occurred in function play() of libaf/af_pan.c) updated by ylzs
I absolutely agree with you and I think the #2400 and #2404 maybe the …

Sep 1, 2022:

6:29 PM Ticket #2404 (A heap-buffer-overflow occurred in function play() of libaf/af_pan.c) updated by reimar
I can imagine something goes wrong in af_pan with high channel counts, …
6:26 PM Ticket #2407 (A heap memory corruption occurred in function free_mp_image() of ...) closed by reimar
fixed: If the valgrind output is accurate this should be fixed by r38402
6:25 PM Ticket #2395 (A heap-buffer-overflow occurred in function mov_build_index() of ...) closed by reimar
fixed: Seems to have been fixed by the other fixes.
10:53 AM Ticket #2400 (A heap-buffer-overflow occurred in function play() of libaf/af_pan.c) updated by reimar
Hm, that's strange, valgrind does not detect anything in af_pan here …

Aug 31, 2022:

3:24 AM valgrind attached to Ticket #2400 by ylzs
3:24 AM Ticket #2400 (A heap-buffer-overflow occurred in function play() of libaf/af_pan.c) updated by ylzs
I've ran this test case and put the valgrind result into the attached …
2:35 AM valgrind attached to Ticket #2404 by ylzs
2:34 AM Ticket #2404 (A heap-buffer-overflow occurred in function play() of libaf/af_pan.c) updated by ylzs
Description, Summary changed
I 've ran this testcase with valgrind and put the valgrind output into …
2:00 AM Ticket #2395 (A heap-buffer-overflow occurred in function mov_build_index() of ...) updated by ylzs
I've added the testcase.
1:59 AM testcase attached to Ticket #2395 by ylzs
1:51 AM valgrind_output attached to Ticket #2407 by ylzs
1:51 AM Ticket #2407 (A heap memory corruption occurred in function free_mp_image() of ...) updated by ylzs
I've run this testcase with the valgrind and put the result into …

Aug 30, 2022:

8:50 PM Ticket #2407 (A heap memory corruption occurred in function free_mp_image() of ...) updated by reimar
It's suspicious that it's all the mencoder ones I cannot reproduce, …
6:55 PM Ticket #2394 (An integer overflow is occurred on the argument of calloc in the ...) closed by reimar
invalid: No worries, the ASAN error is really badly written. The only real hint …

Aug 29, 2022:

2:48 AM Ticket #2404 (A heap-buffer-overflow occurred in function play() of libaf/af_pan.c) updated by ylzs
yes, It seems as same as the 2400.
2:45 AM Ticket #2407 (A heap memory corruption occurred in function free_mp_image() of ...) updated by ylzs
I get all these testcase on an amd64 vitural machine with ubuntu …
2:26 AM Ticket #2394 (An integer overflow is occurred on the argument of calloc in the ...) updated by ylzs
I'm sorry I didn't realize that this is a libc bug in my report. This …

Aug 27, 2022:

8:37 AM Ticket #2405 (A heap-buffer-overflow occurred in function mp_getbits() of ...) closed by reimar
fixed: Fixed by r38393.
8:08 AM Ticket #2406 (A heap-buffer-overflow occurred in function mp_unescape03() of ...) closed by reimar
fixed: Fixed by r38391, but sample shows further issues.

Aug 26, 2022:

9:25 PM Ticket #2407 (A heap memory corruption occurred in function free_mp_image() of ...) updated by reimar
Cannot reproduce unfortunately
9:19 PM Ticket #2404 (A heap-buffer-overflow occurred in function play() of libaf/af_pan.c) updated by reimar
Title seems incorrect as this seems to be in af_pan.c, too. I also …
9:12 PM Ticket #2400 (A heap-buffer-overflow occurred in function play() of libaf/af_pan.c) updated by reimar
Unable to reproduce unfortunately.
8:26 PM Ticket #2399 (A Division by zero occurred in the function config () of ...) closed by reimar
fixed: Probably fixed by r38390. But I don't think this has anything to do …
4:30 PM Ticket #2402 (A Division by zero occurred in function demux_open_avi() of ...) closed by reimar
duplicate: Reported issue is duplicate of #2401 but sample also shows a crash …
4:23 PM Ticket #2403 (A heap-buffer-overflow occurred in function read_avi_header() of ...) closed by reimar
fixed: Fixed by r38388.
4:16 PM Ticket #2401 (A Division by zero occurred in function demux_avi_read_packet of ...) closed by reimar
fixed: Fixed by r38386.
3:48 PM Ticket #2395 (A heap-buffer-overflow occurred in function mov_build_index() of ...) updated by reimar
Looks the same as the other demux_mov report though
3:46 PM Ticket #2396 (A heap-buffer-overflow occurred in function mov_build_index() of ...) closed by reimar
fixed: Fixed by r38385.
3:46 PM Ticket #2397 (A Division by zero occurred in function mov_build_index () of ...) closed by reimar
fixed: Fixed by r38385.
3:20 PM Ticket #2395 (A heap-buffer-overflow occurred in function mov_build_index() of ...) updated by reimar
Did you forget to attach the testcase?
3:17 PM Ticket #2391 (A heap-buffer-overflow occurred in function gen_sh_video () of ...) closed by reimar
duplicate: Same as #2392
2:30 PM Ticket #2392 (A heap-buffer-overflow occurred in function gen_sh_video () of ...) closed by reimar
fixed: Fixed by r38384.
2:09 PM Ticket #2393 (Out-of-bound read in function read_meta_record() of ...) closed by reimar
fixed: Fixed by r38382.
1:56 PM Ticket #2398 (A heap-buffer-overflow occurred in function asf_init_audio_stream() ...) updated by reimar
Minor note: When reporting this many issues it might make sense to …
1:53 PM Ticket #2398 (A heap-buffer-overflow occurred in function asf_init_audio_stream() ...) closed by reimar
fixed: Seems fixed by r38380.
12:35 PM Ticket #2390 (memory leak in vf.c and vf_vo.c) closed by reimar
fixed: It's only an issue in the error handling code, so not a bug that …
9:56 AM Ticket #2394 (An integer overflow is occurred on the argument of calloc in the ...) updated by reimar
I do not see how this is an MPlayer bug. An integer overflow not …

Aug 24, 2022:

8:24 AM Ticket #2406 (A heap-buffer-overflow occurred in function mp_unescape03() of ...) updated by ylzs
Description changed
8:24 AM Ticket #2405 (A heap-buffer-overflow occurred in function mp_getbits() of ...) updated by ylzs
Description changed
8:23 AM Ticket #2402 (A Division by zero occurred in function demux_open_avi() of ...) updated by ylzs
Description changed
8:09 AM Ticket #2403 (A heap-buffer-overflow occurred in function read_avi_header() of ...) updated by ylzs
Description changed
8:08 AM Ticket #2403 (A heap-buffer-overflow occurred in function read_avi_header() of ...) updated by ylzs
Description changed
7:16 AM testcase attached to Ticket #2407 by ylzs
7:16 AM Ticket #2407 (A heap memory corruption occurred in function free_mp_image() of ...) created by ylzs
Version: SVN-r38374-13.0.1 Build command: ../configure …
6:25 AM testcase attached to Ticket #2406 by ylzs
6:25 AM Ticket #2406 (A heap-buffer-overflow occurred in function mp_unescape03() of ...) created by ylzs
Version: SVN-r38374-13.0.1 Build command: ../configure …
6:13 AM testcase attached to Ticket #2405 by ylzs
6:05 AM Ticket #2405 (A heap-buffer-overflow occurred in function mp_getbits() of ...) created by ylzs
Version: SVN-r38374-13.0.1 Build command: ../configure …
5:45 AM testcase attached to Ticket #2404 by ylzs
5:44 AM Ticket #2404 (A heap-buffer-overflow occurred in function play() of libaf/af_pan.c) created by ylzs
Version: SVN-r38374-13.0.1 Build command: ../configure …

Aug 23, 2022:

9:29 AM testcase attached to Ticket #2403 by ylzs
9:28 AM Ticket #2403 (A heap-buffer-overflow occurred in function read_avi_header() of ...) created by ylzs
Version: SVN-r38374-13.0.1 Build command: ../configure …
9:11 AM testcase attached to Ticket #2402 by ylzs
9:11 AM Ticket #2402 (A Division by zero occurred in function demux_open_avi() of ...) created by ylzs
Version: SVN-r38374-13.0.1 Build command: ../configure …
8:55 AM testcase attached to Ticket #2399 by ylzs
8:53 AM testcase attached to Ticket #2401 by ylzs
8:52 AM Ticket #2401 (A Division by zero occurred in function demux_avi_read_packet of ...) created by ylzs
Version: SVN-r38374-13.0.1 Build command: ../configure …
8:39 AM testcase attached to Ticket #2400 by ylzs
8:39 AM Ticket #2400 (A heap-buffer-overflow occurred in function play() of libaf/af_pan.c) created by ylzs
Version: SVN-r38374-13.0.1 Build command: ../configure …
8:32 AM Ticket #2399 (A Division by zero occurred in the function config () of ...) updated by ylzs
Description changed
8:28 AM Ticket #2391 (A heap-buffer-overflow occurred in function gen_sh_video () of ...) updated by ylzs
Severity changed
8:27 AM Ticket #2392 (A heap-buffer-overflow occurred in function gen_sh_video () of ...) updated by ylzs
Severity changed
8:27 AM Ticket #2393 (Out-of-bound read in function read_meta_record() of ...) updated by ylzs
Severity changed
8:27 AM Ticket #2394 (An integer overflow is occurred on the argument of calloc in the ...) updated by ylzs
Severity changed
8:26 AM Ticket #2395 (A heap-buffer-overflow occurred in function mov_build_index() of ...) updated by ylzs
Severity changed
8:26 AM Ticket #2396 (A heap-buffer-overflow occurred in function mov_build_index() of ...) updated by ylzs
Severity changed
8:26 AM Ticket #2397 (A Division by zero occurred in function mov_build_index () of ...) updated by ylzs
Severity changed
8:25 AM Ticket #2398 (A heap-buffer-overflow occurred in function asf_init_audio_stream() ...) updated by ylzs
Severity changed
8:24 AM Ticket #2399 (A Division by zero occurred in the function config () of ...) updated by ylzs
Severity changed
8:22 AM Ticket #2399 (A Division by zero occurred in the function config () of ...) created by ylzs
Version: SVN-r38374-13.0.1 Build command: ../configure …
8:08 AM Ticket #2391 (A heap-buffer-overflow occurred in function gen_sh_video () of ...) updated by ylzs
Description changed
8:08 AM Ticket #2392 (A heap-buffer-overflow occurred in function gen_sh_video () of ...) updated by ylzs
Description changed
8:01 AM Ticket #2393 (Out-of-bound read in function read_meta_record() of ...) updated by ylzs
Description changed
7:58 AM Ticket #2393 (Out-of-bound read in function read_meta_record() of ...) updated by ylzs
Description changed
7:58 AM Ticket #2393 (Out-of-bound read in function read_meta_record() of ...) updated by ylzs
Description changed
7:57 AM Ticket #2394 (An integer overflow is occurred on the argument of calloc in the ...) updated by ylzs
Description changed
7:56 AM Ticket #2395 (A heap-buffer-overflow occurred in function mov_build_index() of ...) updated by ylzs
Description changed
7:55 AM Ticket #2396 (A heap-buffer-overflow occurred in function mov_build_index() of ...) updated by ylzs
Description changed
7:54 AM Ticket #2397 (A Division by zero occurred in function mov_build_index () of ...) updated by ylzs
Description, Summary changed
7:52 AM testcase attached to Ticket #2398 by ylzs
7:51 AM Ticket #2398 (A heap-buffer-overflow occurred in function asf_init_audio_stream() ...) created by ylzs
Version: SVN-r38374-13.0.1 Build command: ../configure …
7:39 AM Ticket #2397 (A Division by zero occurred in function mov_build_index () of ...) updated by ylzs
Description changed
7:31 AM testcase attached to Ticket #2397 by ylzs
7:30 AM Ticket #2397 (A Division by zero occurred in function mov_build_index () of ...) created by ylzs
Version: SVN-r38374-13.0.1 Build command: ../configure …
6:54 AM testcase attached to Ticket #2396 by ylzs
6:52 AM Ticket #2396 (A heap-buffer-overflow occurred in function mov_build_index() of ...) created by ylzs
Version: SVN-r38374-13.0.1 Build command: ../configure …
6:52 AM Ticket #2395 (A heap-buffer-overflow occurred in function mov_build_index() of ...) created by ylzs
Version: SVN-r38374-13.0.1 Build command: ../configure …
6:39 AM testcase attached to Ticket #2394 by ylzs
6:37 AM Ticket #2394 (An integer overflow is occurred on the argument of calloc in the ...) created by ylzs
Version: SVN-r38374-13.0.1 Build command: ../configure …
6:17 AM testcase attached to Ticket #2393 by ylzs
6:15 AM Ticket #2393 (Out-of-bound read in function read_meta_record() of ...) created by ylzs
Version: SVN-r38374-13.0.1 Build command: ../configure …
5:47 AM testcase_2 attached to Ticket #2392 by ylzs
5:45 AM Ticket #2392 (A heap-buffer-overflow occurred in function gen_sh_video () of ...) created by ylzs
Version: SVN-r38374-13.0.1 Build command: ../configure …
3:10 AM testcase_0 attached to Ticket #2391 by ylzs
3:09 AM Ticket #2391 (A heap-buffer-overflow occurred in function gen_sh_video () of ...) created by ylzs
Version: SVN-r38374-13.0.1 Build command: ./configure …

Aug 18, 2022:

8:59 AM Ticket #2390 (memory leak in vf.c and vf_vo.c) updated by ylzs
Is this a Bug?
8:32 AM Ticket #2390 (memory leak in vf.c and vf_vo.c) updated by ylzs
Severity changed
8:31 AM sample.viv attached to Ticket #2390 by ylzs
8:30 AM Ticket #2390 (memory leak in vf.c and vf_vo.c) created by ylzs
Summary of the bug: Found a .viv file for mplayer where asan reports a …
Note: See TracTimeline for information about the timeline view.