uur <[email protected]> added the comment:
same problem occured with a svq3 encoded video.
----------
title: Crash when decoding MPEG1 video with threads enabled -> Crash when
decoding MPEG1/SVQ3 video with threads enabled
_____________________________________________________
FFmpeg issue tracker <[email protected]>
<https://roundup.ffmpeg.org/roundup/ffmpeg/issue1277>
_____________________________________________________
GNU gdb Red Hat Linux (6.5-37.el5_2.2rh)
Copyright (C) 2006 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB. Type "show warranty" for details.
This GDB was configured as "i386-redhat-linux-gnu"...(no debugging symbols
found)
Using host libthread_db library "/lib/libthread_db.so.1".
(gdb) r -an -threads 2 -i 4181f34e723c5b4fe16f88c2f0d7e4f5 -f null /dev/null
Starting program: /usr/local/ffmpeg/bin/ffmpeg -an -threads 2 -i
4181f34e723c5b4fe16f88c2f0d7e4f5 -f null /dev/null
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
[Thread debugging using libthread_db enabled]
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
FFmpeg version SVN-r19461, Copyright (c) 2000-2009 Fabrice Bellard, et al.
configuration: --prefix=/usr/local/ffmpeg --enable-version3
--enable-libopencore-amrnb --enable-libmp3lame --enable-gpl --enable-nonfree
--enable-libfaac --enable-libfaad --enable-libx264 --enable-pthreads
--enable-libxvid --disable-ffplay --disable-ffserver --enable-avfilter
--enable-avfilter-lavf --enable-shared
libavutil 50. 3. 0 / 50. 3. 0
libavcodec 52.32. 0 / 52.32. 0
libavformat 52.36. 0 / 52.36. 0
libavdevice 52. 2. 0 / 52. 2. 0
libavfilter 0. 5. 0 / 0. 5. 0
libswscale 0. 7. 1 / 0. 7. 1
built on Jul 20 2009 19:37:19, gcc: 4.1.2 20071124 (Red Hat 4.1.2-42)
[New Thread -1208584512 (LWP 10381)]
[New Thread -1208587376 (LWP 10384)]
[New Thread -1219077232 (LWP 10385)]
Seems stream 0 codec frame rate differs from container frame rate: 600.00
(600/1) -> 24.00 (24/1)
[New Thread -1229567088 (LWP 10386)]
[New Thread -1240056944 (LWP 10387)]
Input #0, mov,mp4,m4a,3gp,3g2,mj2, from '4181f34e723c5b4fe16f88c2f0d7e4f5':
Duration: 00:02:26.98, start: 0.000000, bitrate: 1110 kb/s
Stream #0.0(eng): Video: svq3, yuvj420p, 480x260, 24 tbr, 600 tbn, 600 tbc
Stream #0.1(eng): Audio: qdm2, 44100 Hz, 2 channels, s16
[New Thread -1250546800 (LWP 10388)]
[New Thread -1261036656 (LWP 10389)]
Output #0, null, to '/dev/null':
Stream #0.0(eng): Video: rawvideo, yuvj420p, 480x260, q=2-31, 200 kb/s, 90k
tbn, 24 tbc
Stream mapping:
Stream #0.0 -> #0.0
Press [q] to stop encoding
Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread -1208584512 (LWP 10381)]
0x00e4dd49 in ff_h264_decode_rbsp_trailing () from
/usr/local/ffmpeg/lib/libavcodec.so.52
(gdb) bt
#0 0x00e4dd49 in ff_h264_decode_rbsp_trailing () from
/usr/local/ffmpeg/lib/libavcodec.so.52
#1 0x00005000 in ?? ()
#2 0x086fd730 in ?? ()
#3 0x00000010 in ?? ()
#4 0x00000000 in ?? ()
(gdb) disass $pc-32 $pc+32
Dump of assembler code from 0xe4dd29 to 0xe4dd69:
0x00e4dd29 <ff_h264_decode_rbsp_trailing+6089>: add %cl,0x2e4085(%ecx)
0x00e4dd2f <ff_h264_decode_rbsp_trailing+6095>: add %cl,0x2e3085(%ecx)
0x00e4dd35 <ff_h264_decode_rbsp_trailing+6101>: add %cl,0x26082(%ebx)
0x00e4dd3b <ff_h264_decode_rbsp_trailing+6107>: add %al,0x31207ec0(%ebp)
0x00e4dd41 <ff_h264_decode_rbsp_trailing+6113>: fisttpl 0xae089db4(%ebx)
0x00e4dd47 <ff_h264_decode_rbsp_trailing+6119>: add (%eax),%al
0x00e4dd49 <ff_h264_decode_rbsp_trailing+6121>: mov 0xa64(%esi),%ecx
0x00e4dd4f <ff_h264_decode_rbsp_trailing+6127>: test %ecx,%ecx
0x00e4dd51 <ff_h264_decode_rbsp_trailing+6129>: je 0xe4ddcd
<ff_h264_decode_rbsp_trailing+6253>
0x00e4dd53 <ff_h264_decode_rbsp_trailing+6131>: mov 0x260(%edx),%eax
0x00e4dd59 <ff_h264_decode_rbsp_trailing+6137>: add $0x1,%ebx
0x00e4dd5c <ff_h264_decode_rbsp_trailing+6140>: cmp %ebx,%eax
0x00e4dd5e <ff_h264_decode_rbsp_trailing+6142>: jg 0xe4dd42
<ff_h264_decode_rbsp_trailing+6114>
0x00e4dd60 <ff_h264_decode_rbsp_trailing+6144>: mov 0xee68(%ebp),%edx
0x00e4dd66 <ff_h264_decode_rbsp_trailing+6150>: test %edx,%edx
0x00e4dd68 <ff_h264_decode_rbsp_trailing+6152>: jne 0xe4dd6f
<ff_h264_decode_rbsp_trailing+6159>
End of assembler dump.
(gdb) info all-registers
eax 0x2 2
ecx 0x5018 20504
edx 0x86fd730 141547312
ebx 0x1 1
esp 0xbfda75e0 0xbfda75e0
ebp 0x87470c0 0x87470c0
esi 0x0 0
edi 0x100c 4108
eip 0xe4dd49 0xe4dd49 <ff_h264_decode_rbsp_trailing+6121>
eflags 0x10202 [ IF RF ]
cs 0x73 115
ss 0x7b 123
ds 0x7b 123
es 0x7b 123
fs 0x0 0
gs 0x33 51
st0 0 (raw 0x00000000000000000000)
st1 0 (raw 0x00000000000000000000)
st2 0 (raw 0x00000000000000000000)
st3 24 (raw 0x4003c000000000000000)
st4 1.000000000000000015902891109759918e+100 (raw
0x414b924d692ca61be800)
st5 1.000000000000000015902891109759918e+100 (raw
0x414b924d692ca61be800)
st6 0 (raw 0x00000000000000000000)
st7 0 (raw 0x00000000000000000000)
fctrl 0x37f 895
fstat 0x4020 16416
ftag 0xffff 65535
fiseg 0x73 115
fioff 0x8053e5c 134561372
foseg 0x7b 123
fooff 0x0 0
fop 0x5d8 1496
xmm0 {v4_float = {0x0, 0x0, 0x0, 0x0}, v2_double = {0x0, 0x0},
v16_int8 = {0x0 <repeats 16 times>}, v8_int16 = {0x0,
0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, v4_int32 = {0x0, 0x0, 0x0, 0x0},
v2_int64 = {0x0, 0x0},
uint128 = 0x00000000000000000000000000000000}
xmm1 {v4_float = {0x0, 0x0, 0x0, 0x0}, v2_double = {0x0, 0x0},
v16_int8 = {0x0 <repeats 16 times>}, v8_int16 = {0x0,
0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, v4_int32 = {0x0, 0x0, 0x0, 0x0},
v2_int64 = {0x0, 0x0},
uint128 = 0x00000000000000000000000000000000}
xmm2 {v4_float = {0x0, 0x0, 0x0, 0x0}, v2_double = {0x0, 0x0},
v16_int8 = {0x0 <repeats 16 times>}, v8_int16 = {0x0,
0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, v4_int32 = {0x0, 0x0, 0x0, 0x0},
v2_int64 = {0x0, 0x0},
uint128 = 0x00000000000000000000000000000000}
xmm3 {v4_float = {0x0, 0x0, 0x0, 0x0}, v2_double = {0x0, 0x0},
v16_int8 = {0x0 <repeats 16 times>}, v8_int16 = {0x0,
0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, v4_int32 = {0x0, 0x0, 0x0, 0x0},
v2_int64 = {0x0, 0x0},
uint128 = 0x00000000000000000000000000000000}
xmm4 {v4_float = {0x0, 0x0, 0x0, 0x0}, v2_double = {0x0, 0x0},
v16_int8 = {0x0 <repeats 16 times>}, v8_int16 = {0x0,
0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, v4_int32 = {0x0, 0x0, 0x0, 0x0},
v2_int64 = {0x0, 0x0},
uint128 = 0x00000000000000000000000000000000}
xmm5 {v4_float = {0x0, 0x0, 0x0, 0x0}, v2_double = {0x0, 0x0},
v16_int8 = {0x0 <repeats 16 times>}, v8_int16 = {0x0,
0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, v4_int32 = {0x0, 0x0, 0x0, 0x0},
v2_int64 = {0x0, 0x0},
uint128 = 0x00000000000000000000000000000000}
xmm6 {v4_float = {0x0, 0x0, 0x0, 0x0}, v2_double = {0x0, 0x0},
v16_int8 = {0x0 <repeats 16 times>}, v8_int16 = {0x0,
0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, v4_int32 = {0x0, 0x0, 0x0, 0x0},
v2_int64 = {0x0, 0x0},
uint128 = 0x00000000000000000000000000000000}
xmm7 {v4_float = {0x0, 0x0, 0x0, 0x0}, v2_double = {0x0, 0x0},
v16_int8 = {0x0 <repeats 16 times>}, v8_int16 = {0x0,
0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, v4_int32 = {0x0, 0x0, 0x0, 0x0},
v2_int64 = {0x0, 0x0},
uint128 = 0x00000000000000000000000000000000}
mxcsr 0x1f80 [ IM DM ZM OM UM PM ]
mm0 {uint64 = 0x0, v2_int32 = {0x0, 0x0}, v4_int16 = {0x0, 0x0, 0x0,
0x0}, v8_int8 = {0x0, 0x0, 0x0, 0x0, 0x0, 0x0,
0x0, 0x0}}
mm1 {uint64 = 0x0, v2_int32 = {0x0, 0x0}, v4_int16 = {0x0, 0x0, 0x0,
0x0}, v8_int8 = {0x0, 0x0, 0x0, 0x0, 0x0, 0x0,
0x0, 0x0}}
mm2 {uint64 = 0x0, v2_int32 = {0x0, 0x0}, v4_int16 = {0x0, 0x0, 0x0,
0x0}, v8_int8 = {0x0, 0x0, 0x0, 0x0, 0x0, 0x0,
0x0, 0x0}}
mm3 {uint64 = 0xc000000000000000, v2_int32 = {0x0, 0xc0000000},
v4_int16 = {0x0, 0x0, 0x0, 0xc000}, v8_int8 = {0x0,
0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0}}
---Type <return> to continue, or q <return> to quit---
mm4 {uint64 = 0x924d692ca61be800, v2_int32 = {0xa61be800,
0x924d692c}, v4_int16 = {0xe800, 0xa61b, 0x692c, 0x924d},
v8_int8 = {0x0, 0xe8, 0x1b, 0xa6, 0x2c, 0x69, 0x4d, 0x92}}
mm5 {uint64 = 0x924d692ca61be800, v2_int32 = {0xa61be800,
0x924d692c}, v4_int16 = {0xe800, 0xa61b, 0x692c, 0x924d},
v8_int8 = {0x0, 0xe8, 0x1b, 0xa6, 0x2c, 0x69, 0x4d, 0x92}}
mm6 {uint64 = 0x0, v2_int32 = {0x0, 0x0}, v4_int16 = {0x0, 0x0, 0x0,
0x0}, v8_int8 = {0x0, 0x0, 0x0, 0x0, 0x0, 0x0,
0x0, 0x0}}
mm7 {uint64 = 0x0, v2_int32 = {0x0, 0x0}, v4_int16 = {0x0, 0x0, 0x0,
0x0}, v8_int8 = {0x0, 0x0, 0x0, 0x0, 0x0, 0x0,
0x0, 0x0}}