Opened 12 years ago

Closed 12 years ago

#1577 closed defect (fixed)

ffmpeg crashes with double free or corruption when stream copying timecode track

Reported by: Andrew Hunter Owned by: Clément Bœsch
Priority: important Component: avformat
Version: git-master Keywords: crash tmcd
Cc: Blocked By:
Blocking: Reproduced by developer: yes
Analyzed by developer: no

Description (last modified by Clément Bœsch)

ffmpeg crashes with double free or corruption when encode is interupted with 'q'.

I have also attached a sample of the file that crashes.

$ ffmpeg -i side_effects_graded.mov -vcodec prores -profile:v 3 -vf crop=2048:872:0:140 -s 2048x872 -dcodec copy -map 0:0 -map 0:1 -threads 4 /media/Media/Projects/Side\ Effects/side_effects_graded_crop.mov
ffmpeg version N-41701-g0c142e4 Copyright (c) 2000-2012 the FFmpeg developers
  built on Jun 21 2012 07:17:58 with gcc 4.6.3
  configuration: --enable-nonfree --enable-libx264 --enable-shared --enable-vaapi --enable-gpl --enable-libfaac
  libavutil      51. 58.100 / 51. 58.100
  libavcodec     54. 25.100 / 54. 25.100
  libavformat    54.  8.100 / 54.  8.100
  libavdevice    54.  0.100 / 54.  0.100
  libavfilter     2. 81.100 /  2. 81.100
  libswscale      2.  1.100 /  2.  1.100
  libswresample   0. 15.100 /  0. 15.100
  libpostproc    52.  0.100 / 52.  0.100
Input #0, mov,mp4,m4a,3gp,3g2,mj2, from 'side_effects_graded.mov':
  Metadata:
    major_brand     : qt  
    minor_version   : 537199360
    compatible_brands: qt  
    creation_time   : 2012-05-23 21:31:51
    timecode        : 01:00:00:00
  Duration: 00:08:39.35, start: 0.000000, bitrate: 198023 kb/s
    Stream #0:0(eng): Data: none (tmcd / 0x64636D74)
    Metadata:
      creation_time   : 2012-05-23 21:31:51
      handler_name    : Apple Alias Data Handler
      timecode        : 01:00:00:00
    Stream #0:1(eng): Video: prores (apch / 0x68637061), yuv422p10le, 2048x1152, 198014 kb/s, SAR 1:1 DAR 16:9, 23.98 fps, 23.98 tbr, 24k tbn, 24k tbc
    Metadata:
      creation_time   : 2012-05-25 00:37:52
      handler_name    : Apple Alias Data Handler
File '/media/Media/Projects/Side Effects/side_effects_graded_crop.mov' already exists. Overwrite ? [y/N] y
w:2048 h:1152 pixfmt:yuv422p10le tb:1/24000 fr:24000/1001 sar:1/1 sws_param:flags=2
[ffmpeg_buffersink @ 0x2289220] No opaque field provided
[Parsed_crop_0 @ 0x2286940] auto-inserting filter 'auto-inserted scaler 0' between the filter '(null)' and the filter 'Parsed_crop_0'
[auto-inserted scaler 0 @ 0x227f180] w:2048 h:1152 fmt:yuv422p10le sar:1/1 -> w:2048 h:1152 fmt:rgb48be sar:1/1 flags:0x4
[Parsed_crop_0 @ 0x2286940] w:2048 h:1152 sar:1/1 -> w:2048 h:872 sar:1/1
[scale @ 0x227dcc0] w:2048 h:872 fmt:rgb48be sar:1/1 -> w:2048 h:872 fmt:yuv422p10le sar:1/1 flags:0x4
Output #0, mov, to '/media/Media/Projects/Side Effects/side_effects_graded_crop.mov':
  Metadata:
    major_brand     : qt  
    minor_version   : 537199360
    compatible_brands: qt  
    creation_time   : 2012-05-23 21:31:51
    timecode        : 01:00:00:00
    encoder         : Lavf54.8.100
    Stream #0:0(eng): Data: none (tmcd / 0x64636D74)
    Metadata:
      creation_time   : 2012-05-23 21:31:51
      handler_name    : Apple Alias Data Handler
      timecode        : 01:00:00:00
    Stream #0:1(eng): Video: prores (apch) (apch / 0x68637061), yuv422p10le, 2048x872 [SAR 1:1 DAR 256:109], q=2-31, 200 kb/s, 24k tbn, 23.98 tbc
    Metadata:
      creation_time   : 2012-05-25 00:37:52
      handler_name    : Apple Alias Data Handler
Stream mapping:
  Stream #0:0 -> #0:0 (copy)
  Stream #0:1 -> #0:1 (prores -> prores)
Press [q] to stop, [?] for help
frame=   32 fps=5.4 q=-1.0 Lq=0.0 size=   38594kB time=00:00:01.29 bitrate=244519.6kbits/s    
video:38592kB audio:0kB subtitle:0 global headers:0kB muxing overhead 0.007042%
*** glibc detected *** ffmpeg: double free or corruption (!prev): 0x00000000022875a0 ***
======= Backtrace: =========
/lib/x86_64-linux-gnu/libc.so.6(+0x7e626)[0x7f439cd24626]
/usr/local/lib/libavutil.so.51(av_freep+0xc)[0x7f439d58a53c]
/usr/local/lib/libavformat.so.54(avformat_free_context+0xd1)[0x7f439ed89961]
ffmpeg[0x40c2e2]
ffmpeg[0x4065b7]
/lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xed)[0x7f439ccc776d]
ffmpeg[0x408c35]
======= Memory map: ========
00400000-00421000 r-xp 00000000 08:11 3413775                            /usr/local/bin/ffmpeg
00620000-00622000 r--p 00020000 08:11 3413775                            /usr/local/bin/ffmpeg
00622000-00623000 rw-p 00022000 08:11 3413775                            /usr/local/bin/ffmpeg
02278000-029e4000 rw-p 00000000 00:00 0                                  [heap]
7f4395091000-7f4395a5e000 rw-p 00000000 00:00 0 
7f4395a5e000-7f4395a5f000 ---p 00000000 00:00 0 
7f4395a5f000-7f439625f000 rw-p 00000000 00:00 0 
7f439625f000-7f4396260000 ---p 00000000 00:00 0 
7f4396260000-7f4396a60000 rw-p 00000000 00:00 0 
7f4396a60000-7f4396a61000 ---p 00000000 00:00 0 
7f4396a61000-7f4397261000 rw-p 00000000 00:00 0 
7f4397261000-7f4397262000 ---p 00000000 00:00 0 
7f4397262000-7f4397a62000 rw-p 00000000 00:00 0 
7f439804d000-7f4398062000 r-xp 00000000 08:11 2378309                    /lib/x86_64-linux-gnu/libgcc_s.so.1
7f4398062000-7f4398261000 ---p 00015000 08:11 2378309                    /lib/x86_64-linux-gnu/libgcc_s.so.1
7f4398261000-7f4398262000 r--p 00014000 08:11 2378309                    /lib/x86_64-linux-gnu/libgcc_s.so.1
7f4398262000-7f4398263000 rw-p 00015000 08:11 2378309                    /lib/x86_64-linux-gnu/libgcc_s.so.1
7f4398263000-7f439827b000 r-xp 00000000 08:11 2373100                    /lib/x86_64-linux-gnu/libresolv-2.15.so
7f439827b000-7f439847b000 ---p 00018000 08:11 2373100                    /lib/x86_64-linux-gnu/libresolv-2.15.so
7f439847b000-7f439847c000 r--p 00018000 08:11 2373100                    /lib/x86_64-linux-gnu/libresolv-2.15.so
7f439847c000-7f439847d000 rw-p 00019000 08:11 2373100                    /lib/x86_64-linux-gnu/libresolv-2.15.so
7f439847d000-7f439847f000 rw-p 00000000 00:00 0 
7f439847f000-7f4398485000 r-xp 00000000 08:11 3018675                    /usr/lib/x86_64-linux-gnu/libogg.so.0.7.1
7f4398485000-7f4398684000 ---p 00006000 08:11 3018675                    /usr/lib/x86_64-linux-gnu/libogg.so.0.7.1
7f4398684000-7f4398685000 r--p 00005000 08:11 3018675                    /usr/lib/x86_64-linux-gnu/libogg.so.0.7.1
7f4398685000-7f4398686000 rw-p 00006000 08:11 3018675                    /usr/lib/x86_64-linux-gnu/libogg.so.0.7.1
7f4398686000-7f43986b1000 r-xp 00000000 08:11 3022515                    /usr/lib/x86_64-linux-gnu/libvorbis.so.0.4.5
7f43986b1000-7f43988b0000 ---p 0002b000 08:11 3022515                    /usr/lib/x86_64-linux-gnu/libvorbis.so.0.4.5
7f43988b0000-7f43988b1000 r--p 0002a000 08:11 3022515                    /usr/lib/x86_64-linux-gnu/libvorbis.so.0.4.5
7f43988b1000-7f43988b2000 rw-p 0002b000 08:11 3022515                    /usr/lib/x86_64-linux-gnu/libvorbis.so.0.4.5
7f43988b2000-7f4398b65000 r-xp 00000000 08:11 3022512                    /usr/lib/x86_64-linux-gnu/libvorbisenc.so.2.0.8
7f4398b65000-7f4398d64000 ---p 002b3000 08:11 3022512                    /usr/lib/x86_64-linux-gnu/libvorbisenc.so.2.0.8
7f4398d64000-7f4398d80000 r--p 002b2000 08:11 3022512                    /usr/lib/x86_64-linux-gnu/libvorbisenc.so.2.0.8
7f4398d80000-7f4398d81000 rw-p 002ce000 08:11 3022512                    /usr/lib/x86_64-linux-gnu/libvorbisenc.so.2.0.8
7f4398d81000-7f4398dc9000 r-xp 00000000 08:11 3020070                    /usr/lib/x86_64-linux-gnu/libFLAC.so.8.2.0
7f4398dc9000-7f4398fc9000 ---p 00048000 08:11 3020070                    /usr/lib/x86_64-linux-gnu/libFLAC.so.8.2.0
7f4398fc9000-7f4398fca000 r--p 00048000 08:11 3020070                    /usr/lib/x86_64-linux-gnu/libFLAC.so.8.2.0
7f4398fca000-7f4398fcb000 rw-p 00049000 08:11 3020070                    /usr/lib/x86_64-linux-gnu/libFLAC.so.8.2.0
7f4398fcb000-7f4398fe2000 r-xp 00000000 08:11 2373101                    /lib/x86_64-linux-gnu/libnsl-2.15.so
7f4398fe2000-7f43991e1000 ---p 00017000 08:11 2373101                    /lib/x86_64-linux-gnu/libnsl-2.15.so
7f43991e1000-7f43991e2000 r--p 00016000 08:11 2373101                    /lib/x86_64-linux-gnu/libnsl-2.15.so
7f43991e2000-7f43991e3000 rw-p 00017000 08:11 2373101                    /lib/x86_64-linux-gnu/libnsl-2.15.so
7f43991e3000-7f43991e5000 rw-p 00000000 00:00 0 
7f43991e5000-7f43991ea000 r-xp 00000000 08:11 3021202                    /usr/lib/x86_64-linux-gnu/libXdmcp.so.6.0.0
7f43991ea000-7f43993e9000 ---p 00005000 08:11 3021202                    /usr/lib/x86_64-linux-gnu/libXdmcp.so.6.0.0
7f43993e9000-7f43993ea000 r--p 00004000 08:11 3021202                    /usr/lib/x86_64-linux-gnu/libXdmcp.so.6.0.0
7f43993ea000-7f43993eb000 rw-p 00005000 08:11 3021202                    /usr/lib/x86_64-linux-gnu/libXdmcp.so.6.0.0
7f43993eb000-7f43993ed000 r-xp 00000000 08:11 3014818                    /usr/lib/x86_64-linux-gnu/libXau.so.6.0.0
7f43993ed000-7f43995ec000 ---p 00002000 08:11 3014818                    /usr/lib/x86_64-linux-gnu/libXau.so.6.0.0
7f43995ec000-7f43995ed000 r--p 00001000 08:11 3014818                    /usr/lib/x86_64-linux-gnu/libXau.so.6.0.0
7f43995ed000-7f43995ee000 rw-p 00002000 08:11 3014818                    /usr/lib/x86_64-linux-gnu/libXau.so.6.0.0
7f43995ee000-7f43995f3000 r-xp 00000000 08:11 3018880                    /usr/lib/x86_64-linux-gnu/libasyncns.so.0.3.1
7f43995f3000-7f43997f2000 ---p 00005000 08:11 3018880                    /usr/lib/x86_64-linux-gnu/libasyncns.so.0.3.1
7f43997f2000-7f43997f3000 r--p 00004000 08:11 3018880                    /usr/lib/x86_64-linux-gnu/libasyncns.so.0.3.1
7f43997f3000-7f43997f4000 rw-p 00005000 08:11 3018880                    /usr/lib/x86_64-linux-gnu/libasyncns.so.0.3.1
7f43997f4000-7f4399854000 r-xp 00000000 08:11 3022518                    /usr/lib/x86_64-linux-gnu/libsndfile.so.1.0.25
7f4399854000-7f4399a54000 ---p 00060000 08:11 3022518                    /usr/lib/x86_64-linux-gnu/libsndfile.so.1.0.25
7f4399a54000-7f4399a56000 r--p 00060000 08:11 3022518                    /usr/lib/x86_64-linux-gnu/libsndfile.so.1.0.25
7f4399a56000-7f4399a57000 rw-p 00062000 08:11 3022518                    /usr/lib/x86_64-linux-gnu/libsndfile.so.1.0.25
7f4399a57000-7f4399a5b000 rw-p 00000000 00:00 0 
7f4399a5b000-7f4399a63000 r-xp 00000000 08:11 2359412                    /lib/x86_64-linux-gnu/libwrap.so.0.7.6
7f4399a63000-7f4399c62000 ---p 00008000 08:11 2359412                    /lib/x86_64-linux-gnu/libwrap.so.0.7.6
7f4399c62000-7f4399c63000 r--p 00007000 08:11 2359412                    /lib/x86_64-linux-gnu/libwrap.so.0.7.6
7f4399c63000-7f4399c64000 rw-p 00008000 08:11 2359412                    /lib/x86_64-linux-gnu/libwrap.so.0.7.6
7f4399c64000-7f4399c86000 r-xp 00000000 08:11 2378194                    /lib/x86_64-linux-gnu/libtinfo.so.5.9
7f4399c86000-7f4399e86000 ---p 00022000 08:11 2378194                    /lib/x86_64-linux-gnu/libtinfo.so.5.9
7f4399e86000-7f4399e8a000 r--p 00022000 08:11 2378194                    /lib/x86_64-linux-gnu/libtinfo.so.5.9
7f4399e8a000-7f4399e8b000 rw-p 00026000 08:11 2378194                    /lib/x86_64-linux-gnu/libtinfo.so.5.9
7f4399e8b000-7f4399eb7000 r-xp 00000000 08:11 2378181                    /lib/x86_64-linux-gnu/libncursesw.so.5.9
7f4399eb7000-7f439a0b6000 ---p 0002c000 08:11 2378181                    /lib/x86_64-linux-gnu/libncursesw.so.5.9
7f439a0b6000-7f439a0b7000 r--p 0002b000 08:11 2378181                    /lib/x86_64-linux-gnu/libncursesw.so.5.9
7f439a0b7000-7f439a0b8000 rw-p 0002c000 08:11 2378181                    /lib/x86_64-linux-gnu/libncursesw.so.5.9
7f439a0b8000-7f439a1a9000 r-xp 00000000 08:11 2380507                    /lib/x86_64-linux-gnu/libslang.so.2.2.4
7f439a1a9000-7f439a3a9000 ---p 000f1000 08:11 2380507                    /lib/x86_64-linux-gnu/libslang.so.2.2.4
7f439a3a9000-7f439a3ad000 r--p 000f1000 08:11 2380507                    /lib/x86_64-linux-gnu/libslang.so.2.2.4
7f439a3ad000-7f439a3c5000 rw-p 000f5000 08:11 2380507                    /lib/x86_64-linux-gnu/libslang.so.2.2.4
7f439a3c5000-7f439a429000 rw-p 00000000 00:00 0 
7f439a429000-7f439a446000 r-xp 00000000 08:11 3026745                    /usr/lib/x86_64-linux-gnu/libxcb.so.1.1.0
7f439a446000-7f439a645000 ---p 0001d000 08:11 3026745                    /usr/lib/x86_64-linux-gnu/libxcb.so.1.1.0
7f439a645000-7f439a646000 r--p 0001c000 08:11 3026745                    /usr/lib/x86_64-linux-gnu/libxcb.so.1.1.0
7f439a646000-7f439a647000 rw-p 0001d000 08:11 3026745                    /usr/lib/x86_64-linux-gnu/libxcb.so.1.1.0
7f439a647000-7f439a689000 r-xp 00000000 08:11 2378483                    /lib/x86_64-linux-gnu/libdbus-1.so.3.5.8
7f439a689000-7f439a889000 ---p 00042000 08:11 2378483                    /lib/x86_64-linux-gnu/libdbus-1.so.3.5.8
7f439a889000-7f439a88a000 r--p 00042000 08:11 2378483                    /lib/x86_64-linux-gnu/libdbus-1.so.3.5.8
7f439a88a000-7f439a88b000 rw-p 00043000 08:11 2378483                    /lib/x86_64-linux-gnu/libdbus-1.so.3.5.8
7f439a88b000-7f439a892000 r-xp 00000000 08:11 3019216                    /usr/lib/x86_64-linux-gnu/libjson.so.0.0.1
7f439a892000-7f439aa91000 ---p 00007000 08:11 3019216                    /usr/lib/x86_64-linux-gnu/libjson.so.0.0.1
7f439aa91000-7f439aa92000 r--p 00006000 08:11 3019216                    /usr/lib/x86_64-linux-gnu/libjson.so.0.0.1
7f439aa92000-7f439aa93000 rw-p 00007000 08:11 3019216                    /usr/lib/x86_64-linux-gnu/libjson.so.0.0.1
7f439aa93000-7f439aaef000 r-xp 00000000 08:11 3026319                    /usr/lib/x86_64-linux-gnu/libpulsecommon-1.1.so
7f439aaef000-7f439acef000 ---p 0005c000 08:11 3026319                    /usr/lib/x86_64-linux-gnu/libpulsecommon-1.1.so
7f439acef000-7f439acf0000 r--p 0005c000 08:11 3026319                    /usr/lib/x86_64-linux-gnu/libpulsecommon-1.1.so
7f439acf0000-7f439acf1000 rw-p 0005d000 08:11 3026319                    /usr/lib/x86_64-linux-gnu/libpulsecommon-1.1.so
7f439acf1000-7f439ad13000 r-xp 00000000 08:11 3019446                    /usr/lib/x86_64-linux-gnu/libcaca.so.0.99.17
7f439ad13000-7f439af13000 ---p 00022000 08:11 3019446                    /usr/lib/x86_64-linux-gnu/libcaca.so.0.99.17
7f439af13000-7f439af14000 r--p 00022000 08:11 3019446                    /usr/lib/x86_64-linux-gnu/libcaca.so.0.99.17
7f439af14000-7f439afb7000 rw-p 00023000 08:11 3019446                    /usr/lib/x86_64-linux-gnu/libcaca.so.0.99.17
7f439afb7000-7f439afbc000 rw-p 00000000 00:00 0 
7f439afbc000-7f439afcc000 r-xp 00000000 08:11 3015406                    /usr/lib/x86_64-linux-gnu/libXext.so.6.4.0
7f439afcc000-7f439b1cb000 ---p 00010000 08:11 3015406                    /usr/lib/x86_64-linux-gnu/libXext.so.6.4.0
7f439b1cb000-7f439b1cc000 r--p 0000f000 08:11 3015406                    /usr/lib/x86_64-linux-gnu/libXext.so.6.4.0
7f439b1cc000-7f439b1cd000 rw-p 00010000 08:11 3015406                    /usr/lib/x86_64-linux-gnu/libXext.so.6.4.0
7f439b1cd000-7f439b2fc000 r-xp 00000000 08:11 3017181                    /usr/lib/x86_64-linux-gnu/libX11.so.6.3.0
7f439b2fc000-7f439b4fc000 ---p 0012f000 08:11 3017181                    /usr/lib/x86_64-linux-gnu/libX11.so.6.3.0
7f439b4fc000-7f439b4fd000 r--p 0012f000 08:11 3017181                    /usr/lib/x86_64-linux-gnu/libX11.so.6.3.0
7f439b4fd000-7f439b501000 rw-p 00130000 08:11 3017181                    /usr/lib/x86_64-linux-gnu/libX11.so.6.3.0
7f439b501000-7f439b547000 r-xp 00000000 08:11 3032814                    /usr/lib/x86_64-linux-gnu/libpulse.so.0.13.5
7f439b547000-7f439b747000 ---p 00046000 08:11 3032814                    /usr/lib/x86_64-linux-gnu/libpulse.so.0.13.5
7f439b747000-7f439b748000 r--p 00046000 08:11 3032814                    /usr/lib/x86_64-linux-gnu/libpulse.so.0.13.5
7f439b748000-7f439b749000 rw-p 00047000 08:11 3032814                    /usr/lib/x86_64-linux-gnu/libpulse.so.0.13.5
7f439b749000-7f439b74c000 r-xp 00000000 08:11 3014740                    /usr/lib/x86_64-linux-gnu/libpulse-simple.so.0.0.3
7f439b74c000-7f439b94b000 ---p 00003000 08:11 3014740                    /usr/lib/x86_64-linux-gnu/libpulse-simple.so.0.0.3
7f439b94b000-7f439b94c000 r--p 00002000 08:11 3014740                    /usr/lib/x86_64-linux-gnu/libpulse-simple.so.0.0.3
7f439b94c000-7f439b94d000 rw-p 00003000 08:11 3014740                    /usr/lib/x86_64-linux-gnu/libpulse-simple.so.0.0.3
7f439b94d000-7f439b94f000 r-xp 00000000 08:11 2373113                    /lib/x86_64-linux-gnu/libdl-2.15.so
7f439b94f000-7f439bb4f000 ---p 00002000 08:11 2373113                    /lib/x86_64-linux-gnu/libdl-2.15.so
7f439bb4f000-7f439bb50000 r--p 00002000 08:11 2373113                    /lib/x86_64-linux-gnu/libdl-2.15.so
7f439bb50000-7f439bb51000 rw-p 00003000 08:11 2373113                    /lib/x86_64-linux-gnu/libdl-2.15.so
7f439bb51000-7f439bb60000 r-xp 00000000 08:11 3015795                    /usr/lib/libfaac.so.0.0.0
7f439bb60000-7f439bd5f000 ---p 0000f000 08:11 3015795                    /usr/lib/libfaac.so.0.0.0
7f439bd5f000-7f439bd60000 r--p 0000e000 08:11 3015795                    /usr/lib/libfaac.so.0.0.0
7f439bd60000-7f439bd63000 rw-p 0000f000 08:11 3015795                    /usr/lib/libfaac.so.0.0.0
7f439bd63000-7f439be6d000 r-xp 00000000 08:11 3413985                    /usr/local/lib/libx264.so.125
7f439be6d000-7f439c06d000 ---p 0010a000 08:11 3413985                    /usr/local/lib/libx264.so.125
7f439c06d000-7f439c06f000 r--p 0010a000 08:11 3413985                    /usr/local/lib/libx264.so.125
7f439c06f000-7f439c070000 rw-p 0010c000 08:11 3413985                    /usr/local/lib/libx264.so.125
7f439c070000-7f439c0eb000 rw-p 00000000 00:00 0 
7f439c0eb000-7f439c0fb000 r-xp 00000000 08:11 3017767                    /usr/lib/x86_64-linux-gnu/libva.so.1.3200.0
7f439c0fb000-7f439c2fa000 ---p 00010000 08:11 3017767                    /usr/lib/x86_64-linux-gnu/libva.so.1.3200.0
7f439c2fa000-7f439c2fb000 r--p 0000f000 08:11 3017767                    /usr/lib/x86_64-linux-gnu/libva.so.1.3200.0
7f439c2fb000-7f439c2fc000 rw-p 00010000 08:11 3017767                    /usr/lib/x86_64-linux-gnu/libva.so.1.3200.0
7f439c2fc000-7f439c301000 rw-p 00000000 00:00 0 
7f439c301000-7f439c317000 r-xp 00000000 08:11 2378119                    /lib/x86_64-linux-gnu/libz.so.1.2.3.4
7f439c317000-7f439c516000 ---p 00016000 08:11 2378119                    /lib/x86_64-linux-gnu/libz.so.1.2.3.4
7f439c516000-7f439c517000 r--p 00015000 08:11 2378119                    /lib/x86_64-linux-gnu/libz.so.1.2.3.4
7f439c517000-7f439c518000 rw-p 00016000 08:11 2378119                    /lib/x86_64-linux-gnu/libz.so.1.2.3.4
7f439c518000-7f439c51f000 r-xp 00000000 08:11 2373103                    /lib/x86_64-linux-gnu/librt-2.15.so
7f439c51f000-7f439c71e000 ---p 00007000 08:11 2373103                    /lib/x86_64-linux-gnu/librt-2.15.so
7f439c71e000-7f439c71f000 r--p 00006000 08:11 2373103                    /lib/x86_64-linux-gnu/librt-2.15.so
7f439c71f000-7f439c720000 rw-p 00007000 08:11 2373103                    /lib/x86_64-linux-gnu/librt-2.15.so
7f439c720000-7f439c78a000 r-xp 00000000 08:11 3015103                    /usr/lib/x86_64-linux-gnu/libSDL-1.2.so.0.11.3
7f439c78a000-7f439c989000 ---p 0006a000 08:11 3015103                    /usr/lib/x86_64-linux-gnu/libSDL-1.2.so.0.11.3Aborted (core dumped)
(gdb) bt
#0  0x00007ffff562e445 in raise () from /lib/x86_64-linux-gnu/libc.so.6
#1  0x00007ffff5631bab in abort () from /lib/x86_64-linux-gnu/libc.so.6
#2  0x00007ffff566be2e in ?? () from /lib/x86_64-linux-gnu/libc.so.6
#3  0x00007ffff5676626 in ?? () from /lib/x86_64-linux-gnu/libc.so.6
#4  0x00007ffff5edc53c in av_freep () from /usr/local/lib/libavutil.so.51
#5  0x00007ffff76db961 in avformat_free_context () from /usr/local/lib/libavformat.so.54
#6  0x000000000040c2e2 in exit_program (ret=0) at ffmpeg.c:1367
#7  0x00000000004065b7 in main (argc=<optimized out>, argv=<optimized out>) at ffmpeg.c:5930
(gdb) disass $pc-32,$pc+32
Dump of assembler code from 0x7ffff562e425 to 0x7ffff562e465:
   0x00007ffff562e425 <raise+21>:	mov    $0xf000000,%edx
   0x00007ffff562e42a <raise+26>:	add    $0x8964c689,%eax
   0x00007ffff562e42f <raise+31>:	add    $0x25,%al
   0x00007ffff562e431 <raise+33>:	rolb   (%rdx)
   0x00007ffff562e433 <raise+35>:	add    %al,(%rax)
   0x00007ffff562e435 <raise+37>:	movslq %edi,%rdx
   0x00007ffff562e438 <raise+40>:	movslq %esi,%rsi
   0x00007ffff562e43b <raise+43>:	movslq %eax,%rdi
   0x00007ffff562e43e <raise+46>:	mov    $0xea,%eax
   0x00007ffff562e443 <raise+51>:	syscall 
=> 0x00007ffff562e445 <raise+53>:	cmp    $0xfffffffffffff000,%rax
   0x00007ffff562e44b <raise+59>:	ja     0x7ffff562e45f <raise+79>
   0x00007ffff562e44d <raise+61>:	repz retq 
   0x00007ffff562e44f <raise+63>:	nop
   0x00007ffff562e450 <raise+64>:	test   %eax,%eax
   0x00007ffff562e452 <raise+66>:	jg     0x7ffff562e435 <raise+37>
   0x00007ffff562e454 <raise+68>:	test   $0x7fffffff,%eax
   0x00007ffff562e459 <raise+73>:	je     0x7ffff562e470 <raise+96>
   0x00007ffff562e45b <raise+75>:	neg    %eax
   0x00007ffff562e45d <raise+77>:	jmp    0x7ffff562e435 <raise+37>
   0x00007ffff562e45f <raise+79>:	mov    0x37f9ba(%rip),%rdx        # 0x7ffff59ade20
End of assembler dump.
(gdb) info all-registers
rax            0x0	0
rbx            0x400	1024
rcx            0xffffffffffffffff	-1
rdx            0x6	6
rsi            0x70a	1802
rdi            0x70a	1802
rbp            0x7fffffffcc60	0x7fffffffcc60
rsp            0x7fffffffc228	0x7fffffffc228
r8             0x0	0
r9             0x400308	4195080
r10            0x8	8
r11            0x206	518
r12            0x9	9
r13            0x7c	124
r14            0x7fffffffc3d0	140737488339920
r15            0x8	8
rip            0x7ffff562e445	0x7ffff562e445 <raise+53>
eflags         0x206	[ PF IF ]
cs             0x33	51
ss             0x2b	43
ds             0x0	0
es             0x0	0
fs             0x0	0
gs             0x0	0
st0            0	(raw 0x00000000000000000000)
st1            0	(raw 0x00000000000000000000)
st2            0	(raw 0x00000000000000000000)
st3            0	(raw 0x00000000000000000000)
st4            0	(raw 0x00000000000000000000)
st5            0	(raw 0x00000000000000000000)
st6            0	(raw 0x00000000000000000000)
st7            0	(raw 0x00000000000000000000)
fctrl          0x37f	895
fstat          0x0	0
ftag           0xffff	65535
fiseg          0x0	0
fioff          0x0	0
foseg          0x0	0
fooff          0x0	0
fop            0x0	0
xmm0           {v4_float = {0x0, 0x0, 0x0, 0x0}, v2_double = {0x0, 0x0}, v16_int8 = {0x0 <repeats 16 times>}, v8_int16 = {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, v4_int32 = {0x0, 0x0, 0x0, 0x0}, 
  v2_int64 = {0x0, 0x0}, uint128 = 0x00000000000000000000000000000000}
xmm1           {v4_float = {0x0, 0x0, 0x0, 0x0}, v2_double = {0x0, 0x0}, v16_int8 = {0x0 <repeats 16 times>}, v8_int16 = {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, v4_int32 = {0x0, 0x0, 0x0, 0x0}, 
  v2_int64 = {0x0, 0x0}, uint128 = 0x00000000000000000000000000000000}
xmm2           {v4_float = {0x0, 0x0, 0x0, 0x0}, v2_double = {0x0, 0x0}, v16_int8 = {0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, v8_int16 = {0x0, 0x0, 0xff00, 0x0, 
    0xff, 0x0, 0x0, 0x0}, v4_int32 = {0x0, 0xff00, 0xff, 0x0}, v2_int64 = {0xff0000000000, 0xff}, uint128 = 0x00000000000000ff0000ff0000000000}
xmm3           {v4_float = {0x0, 0x0, 0x0, 0x0}, v2_double = {0x0, 0x0}, v16_int8 = {0x0 <repeats 16 times>}, v8_int16 = {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, v4_int32 = {0x0, 0x0, 0x0, 0x0}, 
  v2_int64 = {0x0, 0x0}, uint128 = 0x00000000000000000000000000000000}
xmm4           {v4_float = {0x0, 0x1, 0x0, 0x0}, v2_double = {0x0, 0x0}, v16_int8 = {0xc1, 0x77, 0x4, 0x10, 0xf4, 0xd8, 0x8f, 0x3f, 0x0, 0xc0, 0x1f, 0x2, 0x0, 0x80, 0x1f, 0x2}, v8_int16 = {0x77c1, 
    0x1004, 0xd8f4, 0x3f8f, 0xc000, 0x21f, 0x8000, 0x21f}, v4_int32 = {0x100477c1, 0x3f8fd8f4, 0x21fc000, 0x21f8000}, v2_int64 = {0x3f8fd8f4100477c1, 0x21f8000021fc000}, 
  uint128 = 0x021f8000021fc0003f8fd8f4100477c1}
xmm5           {v4_float = {0x0, 0xe, 0x0, 0x0}, v2_double = {0xdaea1f, 0x0}, v16_int8 = {0x0, 0x0, 0x0, 0xe0, 0x43, 0x5d, 0x6b, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, v8_int16 = {0x0, 0xe000, 
    0x5d43, 0x416b, 0x0, 0x0, 0x0, 0x0}, v4_int32 = {0xe0000000, 0x416b5d43, 0x0, 0x0}, v2_int64 = {0x416b5d43e0000000, 0x0}, uint128 = 0x0000000000000000416b5d43e0000000}
xmm6           {v4_float = {0x0, 0x0, 0x0, 0x0}, v2_double = {0x0, 0x0}, v16_int8 = {0x0, 0x80, 0x0, 0x80, 0x0, 0x80, 0x0, 0x80, 0x0, 0x80, 0x0, 0x80, 0x0, 0x80, 0x0, 0x80}, v8_int16 = {0x8000, 0x8000, 
    0x8000, 0x8000, 0x8000, 0x8000, 0x8000, 0x8000}, v4_int32 = {0x80008000, 0x80008000, 0x80008000, 0x80008000}, v2_int64 = {0x8000800080008000, 0x8000800080008000}, 
  uint128 = 0x80008000800080008000800080008000}
xmm7           {v4_float = {0x0, 0x0, 0x0, 0x0}, v2_double = {0x0, 0x0}, v16_int8 = {0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x20}, v8_int16 = {0x0, 0x2000, 0x0, 
    0x2000, 0x0, 0x2000, 0x0, 0x2000}, v4_int32 = {0x20000000, 0x20000000, 0x20000000, 0x20000000}, v2_int64 = {0x2000000020000000, 0x2000000020000000}, uint128 = 0x20000000200000002000000020000000}
xmm8           {v4_float = {0x0, 0x0, 0x0, 0x0}, v2_double = {0x0, 0x0}, v16_int8 = {0x0, 0x0, 0x0, 0x0, 0x68, 0xc8, 0xbc, 0x3b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, v8_int16 = {0x0, 0x0, 0xc868, 
    0x3bbc, 0x0, 0x0, 0x0, 0x0}, v4_int32 = {0x0, 0x3bbcc868, 0x0, 0x0}, v2_int64 = {0x3bbcc86800000000, 0x0}, uint128 = 0x00000000000000003bbcc86800000000}
xmm9           {v4_float = {0x0, 0x0, 0x0, 0x0}, v2_double = {0x0, 0x0}, v16_int8 = {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc4, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, v8_int16 = {0x0, 0x0, 0x0, 0x3cc4, 
---Type <return> to continue, or q <return> to quit---
    0x0, 0x0, 0x0, 0x0}, v4_int32 = {0x0, 0x3cc40000, 0x0, 0x0}, v2_int64 = {0x3cc4000000000000, 0x0}, uint128 = 0x00000000000000003cc4000000000000}
xmm10          {v4_float = {0x0, 0x1, 0x0, 0x0}, v2_double = {0x1, 0x0}, v16_int8 = {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, v8_int16 = {0x0, 0x0, 0x0, 0x3ff0, 
    0x0, 0x0, 0x0, 0x0}, v4_int32 = {0x0, 0x3ff00000, 0x0, 0x0}, v2_int64 = {0x3ff0000000000000, 0x0}, uint128 = 0x00000000000000003ff0000000000000}
xmm11          {v4_float = {0x0, 0x0, 0x0, 0x0}, v2_double = {0x0, 0x0}, v16_int8 = {0x0, 0x0, 0x46, 0x84, 0x24, 0x59, 0xd6, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, v8_int16 = {0x0, 0x8446, 
    0x5924, 0x3ed6, 0x0, 0x0, 0x0, 0x0}, v4_int32 = {0x84460000, 0x3ed65924, 0x0, 0x0}, v2_int64 = {0x3ed6592484460000, 0x0}, uint128 = 0x00000000000000003ed6592484460000}
xmm12          {v4_float = {0x9689a800, 0x0, 0x0, 0x0}, v2_double = {0x0, 0x0}, v16_int8 = {0x6a, 0xa2, 0x65, 0x50, 0xf2, 0xea, 0x8f, 0xbd, 0xff, 0x1, 0xff, 0x1, 0xff, 0x1, 0xff, 0x1}, v8_int16 = {
    0xa26a, 0x5065, 0xeaf2, 0xbd8f, 0x1ff, 0x1ff, 0x1ff, 0x1ff}, v4_int32 = {0x5065a26a, 0xbd8feaf2, 0x1ff01ff, 0x1ff01ff}, v2_int64 = {0xbd8feaf25065a26a, 0x1ff01ff01ff01ff}, 
  uint128 = 0x01ff01ff01ff01ffbd8feaf25065a26a}
xmm13          {v4_float = {0x0, 0x0, 0x0, 0x0}, v2_double = {0x0, 0x0}, v16_int8 = {0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x59, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, v8_int16 = {0x0, 0x0, 0x8000, 
    0xbc59, 0x0, 0x0, 0x0, 0x0}, v4_int32 = {0x0, 0xbc598000, 0x0, 0x0}, v2_int64 = {0xbc59800000000000, 0x0}, uint128 = 0x0000000000000000bc59800000000000}
xmm14          {v4_float = {0x0, 0x0, 0x0, 0x0}, v2_double = {0x0, 0x0}, v16_int8 = {0x8e, 0x85, 0x83, 0xe8, 0xf0, 0x24, 0x53, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, v8_int16 = {0x858e, 0xe883, 
    0x24f0, 0x3c53, 0x0, 0x0, 0x0, 0x0}, v4_int32 = {0xe883858e, 0x3c5324f0, 0x0, 0x0}, v2_int64 = {0x3c5324f0e883858e, 0x0}, uint128 = 0x00000000000000003c5324f0e883858e}
xmm15          {v4_float = {0x0, 0x3, 0x0, 0x0}, v2_double = {0x2d, 0x0}, v16_int8 = {0xc0, 0x9, 0xf2, 0x16, 0xb5, 0xdf, 0x46, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, v8_int16 = {0x9c0, 0x16f2, 
    0xdfb5, 0x4046, 0x0, 0x0, 0x0, 0x0}, v4_int32 = {0x16f209c0, 0x4046dfb5, 0x0, 0x0}, v2_int64 = {0x4046dfb516f209c0, 0x0}, uint128 = 0x00000000000000004046dfb516f209c0}
mxcsr          0x1fa0	[ PE IM DM ZM OM UM PM ]

Attachments (1)

side_effects_graded_sample_small.mov (2.4 MB ) - added by Andrew Hunter 12 years ago.

Change History (5)

by Andrew Hunter, 12 years ago

comment:1 by Carl Eugen Hoyos, 12 years ago

Component: undeterminedavformat
Keywords: crash tmcd added
Priority: normalimportant
Reproduced by developer: set
Status: newopen
Summary: ffmpeg crashes with double free or corruption when encode is interupted with 'q'ffmpeg crashes with double free or corruption when stream copying timecode track
Version: unspecifiedgit-master
$ valgrind ffmpeg_g -i side_effects_graded_sample_small.mov -vn -dcodec copy -map 0:0 -f mov -y /dev/null
==28353== Memcheck, a memory error detector.
==28353== Copyright (C) 2002-2007, and GNU GPL'd, by Julian Seward et al.
==28353== Using LibVEX rev 1732, a library for dynamic binary translation.
==28353== Copyright (C) 2004-2007, and GNU GPL'd, by OpenWorks LLP.
==28353== Using valgrind-3.2.3, a dynamic binary instrumentation framework.
==28353== Copyright (C) 2000-2007, and GNU GPL'd, by Julian Seward et al.
==28353== For more details, rerun with: -v
==28353==
ffmpeg version N-42945-gb3841db Copyright (c) 2000-2012 the FFmpeg developers
  built on Jul 27 2012 14:21:40 with gcc 4.3.2 (GCC)
  configuration: --cc=/usr/local/gcc-4.3.2/bin/gcc --disable-optimizations
  libavutil      51. 65.100 / 51. 65.100
  libavcodec     54. 45.100 / 54. 45.100
  libavformat    54. 21.100 / 54. 21.100
  libavdevice    54.  2.100 / 54.  2.100
  libavfilter     3.  3.100 /  3.  3.100
  libswscale      2.  1.100 /  2.  1.100
  libswresample   0. 15.100 /  0. 15.100
Input #0, mov,mp4,m4a,3gp,3g2,mj2, from 'side_effects_graded_sample_small.mov':
  Metadata:
    major_brand     : qt
    minor_version   : 537199360
    compatible_brands: qt
    creation_time   : 1942-04-18 15:03:35
    timecode        : 01:00:00:00
  Duration: 00:08:39.35, start: 0.000000, bitrate: 39 kb/s
    Stream #0:0(eng): Data: none (tmcd / 0x64636D74)
    Metadata:
      creation_time   : 1942-04-18 15:03:35
      handler_name    : Apple Alias Data Handler
      timecode        : 01:00:00:00
    Stream #0:1(eng): Video: prores (apch / 0x68637061), yuv422p10le, 2048x1152, 198014 kb/s, SAR 1:1 DAR 16:9, 23.98 fps, 23.98 tbr, 24k tbn, 24k tbc
    Metadata:
      creation_time   : 1942-04-19 18:09:36
      handler_name    : Apple Alias Data Handler
Output #0, mov, to '/dev/null':
  Metadata:
    major_brand     : qt
    minor_version   : 537199360
    compatible_brands: qt
    timecode        : 01:00:00:00
    encoder         : Lavf54.21.100
    Stream #0:0(eng): Data: none (tmcd / 0x64636D74)
    Metadata:
      creation_time   : 1942-04-18 15:03:35
      handler_name    : Apple Alias Data Handler
      timecode        : 01:00:00:00
Stream mapping:
  Stream #0:0 -> #0:0 (copy)
Press [q] to stop, [?] for help
Truncating packet of size 4 to 1
==28353== Invalid read of size 4
==28353==    at 0x8051138: print_report (ffmpeg.c:2081)
==28353==    by 0x8058A6F: transcode (ffmpeg.c:3864)
==28353==    by 0x8060DB9: main (ffmpeg.c:6134)
==28353==  Address 0x441ECA8 is 8 bytes inside a block of size 932 free'd
==28353==    at 0x402243F: free (in /usr/lib/valgrind/x86-linux/vgpreload_memcheck.so)
==28353==    by 0x8858FF6: av_free (mem.c:186)
==28353==    by 0x8859011: av_freep (mem.c:193)
==28353==    by 0x810E73E: mov_write_trailer (movenc.c:3555)
==28353==    by 0x818A128: av_write_trailer (utils.c:3693)
==28353==    by 0x8058A3A: transcode (ffmpeg.c:3860)
==28353==    by 0x8060DB9: main (ffmpeg.c:6134)
size=       0kB time=00:00:00.04 bitrate=   0.0kbits/s
video:0kB audio:0kB subtitle:0 global headers:0kB muxing overhead nan%
Output file is empty, nothing was encoded (check -ss / -t / -frames parameters if used)
==28353==
==28353== Invalid read of size 4
==28353==    at 0x8859008: av_freep (mem.c:193)
==28353==    by 0x8058B75: transcode (ffmpeg.c:3896)
==28353==    by 0x8060DB9: main (ffmpeg.c:6134)
==28353==  Address 0x441ED04 is 100 bytes inside a block of size 932 free'd
==28353==    at 0x402243F: free (in /usr/lib/valgrind/x86-linux/vgpreload_memcheck.so)
==28353==    by 0x8858FF6: av_free (mem.c:186)
==28353==    by 0x8859011: av_freep (mem.c:193)
==28353==    by 0x810E73E: mov_write_trailer (movenc.c:3555)
==28353==    by 0x818A128: av_write_trailer (utils.c:3693)
==28353==    by 0x8058A3A: transcode (ffmpeg.c:3860)
==28353==    by 0x8060DB9: main (ffmpeg.c:6134)
==28353==
==28353== Invalid write of size 4
==28353==    at 0x8859015: av_freep (mem.c:194)
==28353==    by 0x8058B75: transcode (ffmpeg.c:3896)
==28353==    by 0x8060DB9: main (ffmpeg.c:6134)
==28353==  Address 0x441ED04 is 100 bytes inside a block of size 932 free'd
==28353==    at 0x402243F: free (in /usr/lib/valgrind/x86-linux/vgpreload_memcheck.so)
==28353==    by 0x8858FF6: av_free (mem.c:186)
==28353==    by 0x8859011: av_freep (mem.c:193)
==28353==    by 0x810E73E: mov_write_trailer (movenc.c:3555)
==28353==    by 0x818A128: av_write_trailer (utils.c:3693)
==28353==    by 0x8058A3A: transcode (ffmpeg.c:3860)
==28353==    by 0x8060DB9: main (ffmpeg.c:6134)
==28353==
==28353== Invalid read of size 4
==28353==    at 0x8859008: av_freep (mem.c:193)
==28353==    by 0x8058BB6: transcode (ffmpeg.c:3901)
==28353==    by 0x8060DB9: main (ffmpeg.c:6134)
==28353==  Address 0x441F004 is 868 bytes inside a block of size 932 free'd
==28353==    at 0x402243F: free (in /usr/lib/valgrind/x86-linux/vgpreload_memcheck.so)
==28353==    by 0x8858FF6: av_free (mem.c:186)
==28353==    by 0x8859011: av_freep (mem.c:193)
==28353==    by 0x810E73E: mov_write_trailer (movenc.c:3555)
==28353==    by 0x818A128: av_write_trailer (utils.c:3693)
==28353==    by 0x8058A3A: transcode (ffmpeg.c:3860)
==28353==    by 0x8060DB9: main (ffmpeg.c:6134)
==28353==
==28353== Invalid write of size 4
==28353==    at 0x8859015: av_freep (mem.c:194)
==28353==    by 0x8058BB6: transcode (ffmpeg.c:3901)
==28353==    by 0x8060DB9: main (ffmpeg.c:6134)
==28353==  Address 0x441F004 is 868 bytes inside a block of size 932 free'd
==28353==    at 0x402243F: free (in /usr/lib/valgrind/x86-linux/vgpreload_memcheck.so)
==28353==    by 0x8858FF6: av_free (mem.c:186)
==28353==    by 0x8859011: av_freep (mem.c:193)
==28353==    by 0x810E73E: mov_write_trailer (movenc.c:3555)
==28353==    by 0x818A128: av_write_trailer (utils.c:3693)
==28353==    by 0x8058A3A: transcode (ffmpeg.c:3860)
==28353==    by 0x8060DB9: main (ffmpeg.c:6134)
==28353==
==28353== Invalid read of size 4
==28353==    at 0x8859008: av_freep (mem.c:193)
==28353==    by 0x81873A7: avformat_free_context (utils.c:2953)
==28353==    by 0x804E2DB: exit_program (ffmpeg.c:1389)
==28353==    by 0x8060E3D: main (ffmpeg.c:6142)
==28353==  Address 0x441ED04 is 100 bytes inside a block of size 932 free'd
==28353==    at 0x402243F: free (in /usr/lib/valgrind/x86-linux/vgpreload_memcheck.so)
==28353==    by 0x8858FF6: av_free (mem.c:186)
==28353==    by 0x8859011: av_freep (mem.c:193)
==28353==    by 0x810E73E: mov_write_trailer (movenc.c:3555)
==28353==    by 0x818A128: av_write_trailer (utils.c:3693)
==28353==    by 0x8058A3A: transcode (ffmpeg.c:3860)
==28353==    by 0x8060DB9: main (ffmpeg.c:6134)
==28353==
==28353== Invalid write of size 4
==28353==    at 0x8859015: av_freep (mem.c:194)
==28353==    by 0x81873A7: avformat_free_context (utils.c:2953)
==28353==    by 0x804E2DB: exit_program (ffmpeg.c:1389)
==28353==    by 0x8060E3D: main (ffmpeg.c:6142)
==28353==  Address 0x441ED04 is 100 bytes inside a block of size 932 free'd
==28353==    at 0x402243F: free (in /usr/lib/valgrind/x86-linux/vgpreload_memcheck.so)
==28353==    by 0x8858FF6: av_free (mem.c:186)
==28353==    by 0x8859011: av_freep (mem.c:193)
==28353==    by 0x810E73E: mov_write_trailer (movenc.c:3555)
==28353==    by 0x818A128: av_write_trailer (utils.c:3693)
==28353==    by 0x8058A3A: transcode (ffmpeg.c:3860)
==28353==    by 0x8060DB9: main (ffmpeg.c:6134)
==28353==
==28353== Invalid read of size 4
==28353==    at 0x8859008: av_freep (mem.c:193)
==28353==    by 0x81873BA: avformat_free_context (utils.c:2954)
==28353==    by 0x804E2DB: exit_program (ffmpeg.c:1389)
==28353==    by 0x8060E3D: main (ffmpeg.c:6142)
==28353==  Address 0x441F004 is 868 bytes inside a block of size 932 free'd
==28353==    at 0x402243F: free (in /usr/lib/valgrind/x86-linux/vgpreload_memcheck.so)
==28353==    by 0x8858FF6: av_free (mem.c:186)
==28353==    by 0x8859011: av_freep (mem.c:193)
==28353==    by 0x810E73E: mov_write_trailer (movenc.c:3555)
==28353==    by 0x818A128: av_write_trailer (utils.c:3693)
==28353==    by 0x8058A3A: transcode (ffmpeg.c:3860)
==28353==    by 0x8060DB9: main (ffmpeg.c:6134)
==28353==
==28353== Invalid write of size 4
==28353==    at 0x8859015: av_freep (mem.c:194)
==28353==    by 0x81873BA: avformat_free_context (utils.c:2954)
==28353==    by 0x804E2DB: exit_program (ffmpeg.c:1389)
==28353==    by 0x8060E3D: main (ffmpeg.c:6142)
==28353==  Address 0x441F004 is 868 bytes inside a block of size 932 free'd
==28353==    at 0x402243F: free (in /usr/lib/valgrind/x86-linux/vgpreload_memcheck.so)
==28353==    by 0x8858FF6: av_free (mem.c:186)
==28353==    by 0x8859011: av_freep (mem.c:193)
==28353==    by 0x810E73E: mov_write_trailer (movenc.c:3555)
==28353==    by 0x818A128: av_write_trailer (utils.c:3693)
==28353==    by 0x8058A3A: transcode (ffmpeg.c:3860)
==28353==    by 0x8060DB9: main (ffmpeg.c:6134)
==28353==
==28353== Invalid free() / delete / delete[]
==28353==    at 0x402243F: free (in /usr/lib/valgrind/x86-linux/vgpreload_memcheck.so)
==28353==    by 0x8858FF6: av_free (mem.c:186)
==28353==    by 0x8859011: av_freep (mem.c:193)
==28353==    by 0x81873C8: avformat_free_context (utils.c:2955)
==28353==    by 0x804E2DB: exit_program (ffmpeg.c:1389)
==28353==    by 0x8060E3D: main (ffmpeg.c:6142)
==28353==  Address 0x441ECA0 is 0 bytes inside a block of size 932 free'd
==28353==    at 0x402243F: free (in /usr/lib/valgrind/x86-linux/vgpreload_memcheck.so)
==28353==    by 0x8858FF6: av_free (mem.c:186)
==28353==    by 0x8859011: av_freep (mem.c:193)
==28353==    by 0x810E73E: mov_write_trailer (movenc.c:3555)
==28353==    by 0x818A128: av_write_trailer (utils.c:3693)
==28353==    by 0x8058A3A: transcode (ffmpeg.c:3860)
==28353==    by 0x8060DB9: main (ffmpeg.c:6134)
==28353==
==28353== ERROR SUMMARY: 10 errors from 10 contexts (suppressed: 3 from 1)
==28353== malloc/free: in use at exit: 0 bytes in 0 blocks.
==28353== malloc/free: 193 allocs, 194 frees, 12,734,394 bytes allocated.
==28353== For counts of detected errors, rerun with: -v
==28353== All heap blocks were freed -- no leaks are possible.

comment:2 by Clément Bœsch, 12 years ago

Description: modified (diff)
Owner: set to Clément Bœsch

comment:3 by Clément Bœsch, 12 years ago

Fixed in bc426827

comment:4 by Clément Bœsch, 12 years ago

Resolution: fixed
Status: openclosed
Note: See TracTickets for help on using tickets.