[Ffmpeg-devel] [BUG] Segfault in h264 decoder on corrupt input

[Reinhard Nissl]

Hi,

Matthias Hopf wrote:

>> I assume, that there is some cleanup code missing before "return -1;".
> 
> That could well be, AFAIU the code I couldn't see anything. Also, I've
> run several tests already, none of them crashed any more.

Well, just blame me for replying before trying ;-)

Actually, neither ffplay nor mplayer crash now, but it looks like we run
out of buffers due to "return -1".

In a sample recording I took with VDR on LuxeTV HD last weekend, I get
the expected error messages like

[h264 @ 0x8762280]PAFF interlacing is not implemented
[h264 @ 0x8762280]decode_slice_header error
Error while decoding frame!
[h264 @ 0x8762280]PAFF interlacing is not implemented
[h264 @ 0x8762280]decode_slice_header error
Error while decoding frame!
[h264 @ 0x8762280]PAFF interlacing is not implemented

for the first 28 frames of the recording (at least mplayer says so).

Then there is a phase with no interlacing. At frame 29 I get:

[h264 @ 0x8762280]concealing 55 DC, 55 AC, 55 MV errors

At frame 303:

[h264 @ 0x8762280]concealing 104 DC, 104 AC, 104 MV errors

At frame 1233:

[h264 @ 0x8762280]decode_slice_header error

Beginning with frame 1245:

[h264 @ 0x8762280]PAFF interlacing is not implemented
[h264 @ 0x8762280]decode_slice_header error
Error while decoding frame!
[h264 @ 0x8762280]PAFF interlacing is not implemented
[h264 @ 0x8762280]decode_slice_header error
Error while decoding frame!

And from frame 1266 on:

[h264 @ 0x8762280]pic->data[0]!=NULL in avcodec_default_get_buffer
[h264 @ 0x8762280]get_buffer() failed (-1 5437 5455 0x1529)
[h264 @ 0x8762280]decode_slice_header error
Error while decoding frame!
[h264 @ 0x8762280]pic->data[0]!=NULL in avcodec_default_get_buffer
[h264 @ 0x8762280]get_buffer() failed (-1 5437 5455 0x1529)
[h264 @ 0x8762280]decode_slice_header error
Error while decoding frame!

Bye.
-- 
Dipl.-Inform. (FH) Reinhard Nissl
mailto:rnissl at gmx.de