[Mplayer-users] Unknown AVI file makes mplayer segfault in mpeg12 codec

[brendan at tjs.org]

I've got an AVI file that makes mplayer (newest CVS and IdegCounter) segfault.
The full file (It's only about 3 M) has been uploaded to ftp://thot.banki.hu/MPlayer/incoming/init.avi
A full bug report has been attached in the file bugreport, a printout of the coredump is in mplayer.bug, and the mplayer output is in mplayer.log
Hope this bug report is complete.

-Brendan
-------------- next part --------------
Linux Distribution:

Debian/GNU Linux 2.4 (sid/unstable)

Kernel Version:

Linux moyix 2.4.3 #1 Sun Apr 8 11:44:43 CDT 2001 i686 unknown

LibC Version:

-rwxr-xr-x    1 root     root      1105224 May 23 21:38 /lib/libc-2.2.3.so*
lrwxrwxrwx    1 root     root           13 May 23 21:38 /lib/libc.so.6 -> libc-2.2.3.so*

X Version:

XFree86 Version 4.0.3 / X Window System
(protocol Version 11, revision 0, vendor release 6400)
Release Date: 16 March 2001
If the server is older than 6-12 months, or if your card is
newer than the above date, look for a newer version before
reporting problems.  (See http://www.XFree86.Org/FAQ)
Operating System: Linux 2.2.19 i686 [ELF] 
Module Loader present

GCC Version:

gcc version 2.95.4 20010506 (Debian prerelease)

LD Version:

GNU ld version 2.11.90.0.7 (with BFD 2.11.90.0.7)

Binutils Version:

GNU assembler 2.11.90.0.7
Copyright 2001 Free Software Foundation, Inc.
This program is free software; you may redistribute it under the terms of
the GNU General Public License.  This program has absolutely no warranty.
This assembler was configured for a target of `i386-linux'.

Coredump:

See attached file, mplayer.bug.

Hardware & Drivers:

processor       : 0
vendor_id       : GenuineIntel
cpu family      : 6
model           : 7
model name      : Pentium III (Katmai)
stepping        : 2
cpu MHz         : 498.863
cache size      : 512 KB
fdiv_bug        : no
hlt_bug         : no
f00f_bug        : no
coma_bug        : no
fpu             : yes
fpu_exception   : yes
cpuid level     : 2
wp              : yes
flags           : fpu vme de pse tsc msr pae mce cx8 sep mtrr pge mca cmov pat pse36 mmx fxsr sse
bogomips        : 996.14

Video Card and Driver:

Diamond Viper 550 16M (NVIDIA TNT based)
nvidia driver Version 1.0-1251

Sound Card:

Creative SBLive! XGamer with drivers included in kernel 2.4.3

MPlayer Output:

See attached mplayer.log
-------------- next part --------------


MPlayer 0.17a-IdegCounter  (C) 2000-2001 Arpad Gereoffy <arpi at thot.banki.hu>

Reading config file: /etc/mplayer.conf: No such file or directory
Reading config file: /home/moyix/.mplayer/config
CommandLine: '-vo' 'xv' '-fs' '-v' 'init.avi'
Reading /home/moyix/.mplayer/codecs.conf: 15 audio & 26 video codecs
Font /home/moyix/.mplayer/font/font.desc loaded successfully! (138 chars)
Detected AVI file format!
======= AVI Header =======
us/frame: 100000  (fps=10.000)
max bytes/sec: 258382
padding: 0
flags: (16) HAS_INDEX
frames  total: 422   initial: 0
streams: 1
Suggested BufferSize: 74594
Size:  665 x 512
==> Found video stream: 0
======= STREAM Header =======
Type: vids   FCC:  (0)
Flags: 0
Priority: 0   Language: 0
InitialFrames: 0
Rate: 10/1 = 10.000
Start: 0   Len: 422
Suggested BufferSize: 74594
Quality 0
Sample size: 0
found 'bih', 1064 bytes of 40
Found movie at 0x1000 - 0x2DD17E
Reading INDEX block, 422 chunks for 422 frames
AVI index offset: 4092
Auto-selected AVI video ID = 0
AVI_NI: No audio stream found -> nosound
AVI video length=2995278
VIDEO:  [
]  665x512  8bpp  10.00 fps  567.8 kbps (69.3 kbyte/s)
[V] filefmt:3  fourcc:0x1  size:665x512  fps:10.00  ftime:=0.1000
-------------- next part --------------
(no debugging symbols found)...
Core was generated by `mplayer -vo xv -fs init.avi'.
Program terminated with signal 11, Segmentation fault.
(no debugging symbols found)...(no debugging symbols found)...
(no debugging symbols found)...(no debugging symbols found)...
(no debugging symbols found)...(no debugging symbols found)...
[New Thread 1024 (LWP 31752)]
(no debugging symbols found)...(no debugging symbols found)...
(no debugging symbols found)...(no debugging symbols found)...
(no debugging symbols found)...(no debugging symbols found)...
(no debugging symbols found)...(no debugging symbols found)...
(no debugging symbols found)...(no debugging symbols found)...
(no debugging symbols found)...(no debugging symbols found)...
(no debugging symbols found)...(no debugging symbols found)...
(no debugging symbols found)...(no debugging symbols found)...
(no debugging symbols found)...(no debugging symbols found)...
#0  0x804f41b in strcpy ()
Dump of assembler code from 0x804f41b to 0x804f42a:
0x804f41b <strcpy+12643>:	mov    %eax,0x1e0(%edx)
0x804f421 <strcpy+12649>:	add    $0xfffffff4,%esp
0x804f424 <strcpy+12652>:	push   %edx
0x804f425 <strcpy+12653>:	call   0x8088254 <unk_exp1+46980>
End of assembler dump.
eax=00000000
ebx=00000001
ecx=00000001
edx=00000000
esp=BFFFEDA4
ebp=BFFFFB8C
edi=FFFFFFFF
esi=00000000