[MPlayer-users] [BUG] crash with -flip

[Diego Biurrun]

Hi!

I have a divx file that crashes when I play it with -flip and decode
with libavcodec, regardless of vo driver.  It does not crash with -vc
divx.

I have uploaded the first 5MB to incoming as FinalFantasy.avi.

Diego

System:

K6-III 500
Matrox G550
SB Live!

Debian Woody
Linux 2.4.20-ck1
glibc 2.2.5
X 4.2.1 with Matrox binary drivers
gcc 2.95.4
binutils 2.12.90.0.1



MPlayer CVS-030104-04:35-2.95.4 (C) 2000-2002 Arpad Gereoffy (see DOCS)

CPU: Advanced Micro Devices K6-2+/K6-III+ Sharptooth (Family: 5, Stepping: 0)
CPUflags:  MMX: 1 MMX2: 0 3DNow: 1 3DNow2: 1 SSE: 0 SSE2: 0
Compiled for x86 CPU with extensions: MMX 3DNow 3DNowEx

Reading config file /usr/local/etc/mplayer/mplayer.conf: No such file or directory
Reading config file /home/diego/.mplayer/config
Reading /home/diego/.mplayer/codecs.conf: 49 audio & 126 video codecs
CommandLine: '-flip' '-v' '/var/tmp/FinalFantasy.avi.trunc'
get_path('font/font.desc') -> '/home/diego/.mplayer/font/font.desc'
Font /home/diego/.mplayer/font/font.desc loaded successfully! (206 chars)
Using MMX (with tiny bit 3DNow) Optimized OnScreenDisplay
Using Linux hardware RTC timing (1024Hz).
get_path('input.conf') -> '/home/diego/.mplayer/input.conf'
Can't open input config file /home/diego/.mplayer/input.conf : No such file or directory
Can't open input config file /usr/local/etc/mplayer/input.conf : No such file or directory
Falling back on default (hardcoded) input config
get_path('FinalFantasy.avi.trunc.conf') -> '/home/diego/.mplayer/FinalFantasy.avi.trunc.conf'

Playing /var/tmp/FinalFantasy.avi.trunc
Not an URL!
File size is 5242880 bytes
AVI file format detected.
list_end=0x2292
======= AVI Header =======
us/frame: 41708  (fps=23.976)
max bytes/sec: 0
padding: 0
MainAVIHeader.dwFlags: (272) HAS_INDEX IS_INTERLEAVED
frames  total: 146071   initial: 0
streams: 2
Suggested BufferSize: 0
Size:  576 x 320
list_end=0x10F4
==> Found video stream: 0
======= STREAM Header =======
Type: vids   FCC: div3 (33766964)
Flags: 0
Priority: 0   Language: 0
InitialFrames: 0
Rate: 23976/1000 = 23.976
Start: 0   Len: 146071
Suggested BufferSize: 49844
Quality 10000
Sample size: 0
found 'bih', 40 bytes of 40
======= VIDEO Format ======
  biSize 40
  biWidth 576
  biHeight 320
  biPlanes 1
  biBitCount 24
  biCompression 861292868='DIV3'
  biSizeImage 552960
===========================
Regenerating keyframe table for DIVX 3 video
list_end=0x2186
==> Found audio stream: 1
======= STREAM Header =======
Type: auds   FCC:  (0)
Flags: 0
Priority: 0   Language: 0
InitialFrames: 1
Rate: 44100/1152 = 38.281
Start: 0   Len: 233221
Suggested BufferSize: 417
Quality -1
Sample size: 0
found 'wf', 30 bytes of 18
======= WAVE Format =======
Format Tag: 85 (0x55)
Channels: 2
Samplerate: 44100
avg byte/sec: 15963
Block align: 1152
bits/sample: 0
cbSize: 12
mp3.wID=1
mp3.fdwFlags=0x2
mp3.nBlockSize=417
mp3.nFramesPerBlock=1
mp3.nCodecDelay=0
list_end=0x2292
list_end=0x22B6
hdr=Software  size=15
Software  : Nandub v1.0rc2
Broken chunk?  chunksize=1346  (id=JUNK)
list_end=0x2B64D6F4
Found movie at 0x280C - 0x2B64D6F4
stream_seek: WARNING! Can't seek to 0x2B64D6F4 !
Auto-selected AVI audio ID = 1
Auto-selected AVI video ID = 0
AVI: Searching for audio stream (id:1)
AVI video size=629598653 (146071)  audio size=97251443
VIDEO:  [DIV3]  576x320  24bpp  23.98 fps  826.7 kbps (100.9 kbyte/s)
[V] filefmt:3  fourcc:0x33564944  size:576x320  fps:23.98  ftime:=0.0417
Clip info:
 Software: Nandub v1.0rc2
get_path('sub/') -> '/home/diego/.mplayer/sub/'
==========================================================================
Opening audio decoder: [mp3lib] MPEG layer-2, layer-3
dec_audio: Allocating 4608 + 65536 = 70144 bytes for output buffer
mp3lib: made decode tables with MMX optimization
mp3lib: using 3DNow!Ex optimized decore!
MP3lib: init layer2&3 finished, tables done

MPEG 1.0, Layer III, 44100 Hz 128 kbit Joint-Stereo, BPF: 417
Channels: 2, copyright: No, original: Yes, CRC: No, emphasis: 0
AUDIO: 44100 Hz, 2 ch, 16 bit (0x10), ratio: 16000->176400 (128.0 kbit)
Selected audio codec: [mp3] afm:mp3lib (mp3lib MPEG layer-2, layer-3)
==========================================================================
X11 opening display: :0
vo: X11 color mask:  FFFF  (R:F800 G:7E0 B:1F)
vo: X11 running at 1280x1024 with depth 16 and 16 bpp (":0" => local display)
[x11] Detected wm supports layers.
[x11] Detected wm is of class NetWM.
==========================================================================
Opening video decoder: [ffmpeg] FFmpeg's libavcodec codec family
INFO: libavcodec init OK!
Selected video codec: [ffdivx] vfm:ffmpeg (FFmpeg DivX ;-) (MS MPEG-4 v3))
==========================================================================
ao2: 44100 Hz  2 chans  Signed 16-bit (Little-Endian)
audio_setup: using '/dev/dsp' dsp device
audio_setup: sample format: Signed 16-bit (Little-Endian) (requested: Signed 16-bit (Little-Endian))
audio_setup: using 2 channels (requested: 2)
audio_setup: using 44100 Hz samplerate (requested: 44100)
audio_setup: frags:   8/8  (8192 bytes/frag)  free:  65536
AO: [oss] 44100Hz 2ch Signed 16-bit (Little-Endian)
AO: Description: OSS/ioctl audio output
AO: Author: A'rpi
Building audio filter chain for 44100Hz/2ch/16bit -> 44100Hz/2ch/16bit...
[libaf] Adding filter dummy 
[dummy] Was reinitialized, rate=44100Hz, nch = 2, format = 0x00000001 and bps = 2
[dummy] Was reinitialized, rate=44100Hz, nch = 2, format = 0x00000001 and bps = 2
Start playing...
[ffmpeg] aspect_ratio: 0.000000
VDec: vo config request - 576 x 320 (preferred csp: Planar YV12)
VDec: using Planar YV12 as output csp (no 0)
Opening video filter: [flip]
Movie-Aspect is undefined - no prescaling applied.
VO Config (576x320->576x320,flags=8,'MPlayer',0x32315659)
REQ: flags=0x437  req=0x400  
VO: [xmga] 576x320 => 576x320 Planar YV12 
VO: Description: Matrox G200/G4x0/G550 overlay in X11 window (using /dev/mga_vid)
VO: Author: Zoltan Ponekker <pontscho at makacs.poliod.hu>
[mga] Using 3 buffers.
[xmga] x: 352 y: 352 w: 576 h: 342
[xmga] dcx: 5 dcy: 282 dx: 0 dy: 0 dw: 576 dh: 342
*** [vo] Allocating mp_image_t, 576x320x12bpp YUV planar, 276480 bytes
*** [flip] Direct Rendering mp_image_t, 576x320x12bpp YUV planar, 276480 bytes
[xmga] x: 5 y: 22 w: 576 h: 342
[xmga] dcx: 5 dcy: 282 dx: 0 dy: 0 dw: 576 dh: 342
A:   0.2 V:   0.0 A-V:  0.153 ct:  0.000    1/  1   0%  0%  0.0% 0 0 0%
XXX initial  v_pts=0.000  a_pos=7923 (0.496) 
*** [vo] Allocating mp_image_t, 576x320x12bpp YUV planar, 276480 bytes
*** [flip] Direct Rendering mp_image_t, 576x320x12bpp YUV planar, 276480 bytes
A:   0.2 V:   0.0 A-V:  0.130 ct:  0.004    2/  2   0%  0%  0.0% 1 0 0%
A:   0.2 V:   0.1 A-V:  0.098 ct:  0.008    3/  3   0%  0%  0.0% 1 0 0%

MPlayer interrupted by signal 11 in module: decode_video
- MPlayer crashed by bad usage of CPU/FPU/RAM. Recompile MPlayer with --enable-debug and make a 'gdb' backtrace and disassembly. For details, see DOCS/bugreports.html section 5.b.
- MPlayer crashed. This shouldn't happen. It can be a bug in the MPlayer code _or_ in your drivers _or_ in your gcc version. If you think it's MPlayer's fault, please read DOCS/bugreports.html and follow instructions there. We can't and won't help unless you provide these informations when reporting a possible bug.
Uninit audio filters...
[libaf] Removing filter dummy 
uninit audio: mp3lib
uninit video: ffmpeg
DEMUXER: freeing demuxer at 0x83500d0  
vo: uninit!
vo: uninit ...




(gdb) bt
#0  msmpeg4v34_decode_mb (s=0x83867e0, block=0x8390380) at common.h:632
#1  0x081e529d in decode_slice (s=0x83867e0) at h263dec.c:206
#2  0x081e5ca1 in ff_h263_decode_frame (avctx=0x834faf0, data=0x83497b0, 
    data_size=0xbfffe728, 
    buf=0x846a0b0 "I\237ýÆ\002Îm· _\005I\225<\2128\234\f©Vù\034\207\021\n{£\213M¯¥\201\221H·°\027FÇÞê2s\fÂ\226Ý@\002Üd\236EÈ\020ϯþ6ÀuGz;¢ßü%}\200ë\002\201_Kz÷9Ë\227åJc\220\016\201\211œs%Õª\206\231ô\003²7È2_\221È6Ï \034-5§G9\001³¡\200p²k¬\227är*\035\f\003\205\223^§#\220\023]\f\003\205\222æKò9", buf_size=4585)
    at h263dec.c:572
#3  0x0815fc38 in avcodec_decode_video (avctx=0x834faf0, picture=0x83497b0, 
    got_picture_ptr=0xbfffe728, 
    buf=0x846a0b0 "I\237ýÆ\002Îm· _\005I\225<\2128\234\f©Vù\034\207\021\n{£\213M¯¥\201\221H·°\027FÇÞê2s\fÂ\226Ý@\002Üd\236EÈ\020ϯþ6ÀuGz;¢ßü%}\200ë\002\201_Kz÷9Ë\227åJc\220\016\201\211œs%Õª\206\231ô\003²7È2_\221È6Ï \034-5§G9\001³¡\200p²k¬\227är*\035\f\003\205\223^§#\220\023]\f\003\205\222æKò9", buf_size=4585)
    at utils.c:317
#4  0x080b09a9 in decode (sh=0x8350a90, data=0x846a0b0, len=4585, flags=0)
    at vd_ffmpeg.c:535
#5  0x080a80a2 in decode_video (sh_video=0x8350a90, 
    start=0x846a0b0 "I\237ýÆ\002Îm· _\005I\225<\2128\234\f©Vù\034\207\021\n{£\213M¯¥\201\221H·°\027FÇÞê2s\fÂ\226Ý@\002Üd\236EÈ\020ϯþ6ÀuGz;¢ßü%}\200ë\002\201_Kz÷9Ë\227åJc\220\016\201\211œs%Õª\206\231ô\003²7È2_\221È6Ï \034-5§G9\001³¡\200p²k¬\227är*\035\f\003\205\223^§#\220\023]\f\003\205\222æKò9", in_size=4585, 
    drop_frame=0) at dec_video.c:306
#6  0x08067de3 in main (argc=4, argv=0xbffffa54) at mplayer.c:1751
(gdb) disass $pc-32 $pc+32
Dump of assembler code from 0x81d934c to 0x81d938c:
0x81d934c <msmpeg4v34_decode_mb+64>:	
    je     0x81d93e0 <msmpeg4v34_decode_mb+212>
0x81d9352 <msmpeg4v34_decode_mb+70>:	mov    0x9b20(%ecx),%ebx
0x81d9358 <msmpeg4v34_decode_mb+76>:	mov    0x9b18(%ecx),%edx
0x81d935e <msmpeg4v34_decode_mb+82>:	mov    0x8(%ebp),%edi
0x81d9361 <msmpeg4v34_decode_mb+85>:	mov    %ebx,%eax
0x81d9363 <msmpeg4v34_decode_mb+87>:	sar    $0x3,%eax
0x81d9366 <msmpeg4v34_decode_mb+90>:	mov    %ebx,%ecx
0x81d9368 <msmpeg4v34_decode_mb+92>:	and    $0x7,%ecx
0x81d936b <msmpeg4v34_decode_mb+95>:	inc    %ebx
0x81d936c <msmpeg4v34_decode_mb+96>:	movzbl (%eax,%edx,1),%eax
0x81d9370 <msmpeg4v34_decode_mb+100>:	shl    %cl,%eax
0x81d9372 <msmpeg4v34_decode_mb+102>:	mov    %ebx,0x9b20(%edi)
0x81d9378 <msmpeg4v34_decode_mb+108>:	test   $0x80,%al
0x81d937a <msmpeg4v34_decode_mb+110>:	
    je     0x81d93e0 <msmpeg4v34_decode_mb+212>
0x81d937c <msmpeg4v34_decode_mb+112>:	movl   $0x0,0x1270(%edi)
0x81d9386 <msmpeg4v34_decode_mb+122>:	movl   $0x5,0xfffffff0(%ebp)
End of assembler dump.