hevc: invalid read with fuzzed file

[ami_stuff]

(gdb) r -threads 1 -i ./fhevc1.ts -f null -
Starting program: /media/sdb1/ffmpeg-HEAD-49287bb/ffmpeg_g -threads 1 -i ./fhevc1.ts -f null -
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib/i386-linux-gnu/libthread_db.so.1".
ffmpeg version 2.0-49287bb Copyright (c) 2000-2013 the FFmpeg developers
  built on Oct 31 2013 14:57:16 with gcc 4.7 (Debian 4.7.2-5)
  configuration: --disable-yasm --disable-ffserver --disable-ffprobe --enable-gpl
  libavutil      52. 48.100 / 52. 48.100
  libavcodec     55. 39.100 / 55. 39.100
  libavformat    55. 19.104 / 55. 19.104
  libavdevice    55.  5.100 / 55.  5.100
  libavfilter     3. 90.100 /  3. 90.100
  libswscale      2.  5.101 /  2.  5.101
  libswresample   0. 17.104 /  0. 17.104
  libpostproc    52.  3.100 / 52.  3.100
[hevc @ 0x91bdba0] No profile indication! (0)
    Last message repeated 3 times
[mpegts @ 0x91b9de0] PES packet size mismatch
[mpegts @ 0x91b9de0] Invalid timestamps stream=0, pts=63520, dts=8441328, size=901
[mpegts @ 0x91b9de0] PES packet size mismatch
[hevc @ 0x91bdba0] No profile indication! (8)
[hevc @ 0x91bdba0] error decoding profile tier level
[mpegts @ 0x91b9de0] PES packet size mismatch
    Last message repeated 21 times
[mpegts @ 0x91b9de0] probed stream 1 failed
[mpegts @ 0x91b9de0] probed stream 2 failed
[mpegts @ 0x91b9de0] probed stream 3 failed
[mpegts @ 0x91b9de0] probed stream 4 failed
[mpegts @ 0x91b9de0] probed stream 5 failed
[mpegts @ 0x91b9de0] probed stream 6 failed
[mpegts @ 0x91b9de0] probed stream 7 failed
[mpegts @ 0x91b9de0] Invalid timestamps stream=0, pts=164897, dts=2251249, size=604
[mpegts @ 0x91b9de0] Invalid timestamps stream=0, pts=288806, dts=802290, size=1085
[NULL @ 0x9288ca0] start time is not set in estimate_timings_from_pts
[NULL @ 0x92bbb60] start time is not set in estimate_timings_from_pts
[NULL @ 0x92bc5e0] start time is not set in estimate_timings_from_pts
[NULL @ 0x92becc0] start time is not set in estimate_timings_from_pts
[NULL @ 0x92c05e0] start time is not set in estimate_timings_from_pts
[NULL @ 0x92d7260] start time is not set in estimate_timings_from_pts
[NULL @ 0x92db060] start time is not set in estimate_timings_from_pts
[mpegts @ 0x91b9de0] PES packet size mismatch
    Last message repeated 11 times
[mpegts @ 0x91b9de0] Could not find codec parameters for stream 1 (Unknown: none): unknown codec
Consider increasing the value for the 'analyzeduration' and 'probesize' options
[mpegts @ 0x91b9de0] Could not find codec parameters for stream 2 (Unknown: none): unknown codec
Consider increasing the value for the 'analyzeduration' and 'probesize' options
[mpegts @ 0x91b9de0] Could not find codec parameters for stream 3 (Unknown: none): unknown codec
Consider increasing the value for the 'analyzeduration' and 'probesize' options
[mpegts @ 0x91b9de0] Could not find codec parameters for stream 4 (Unknown: none): unknown codec
Consider increasing the value for the 'analyzeduration' and 'probesize' options
[mpegts @ 0x91b9de0] Could not find codec parameters for stream 5 (Unknown: none): unknown codec
Consider increasing the value for the 'analyzeduration' and 'probesize' options
[mpegts @ 0x91b9de0] Could not find codec parameters for stream 6 (Unknown: none): unknown codec
Consider increasing the value for the 'analyzeduration' and 'probesize' options
[mpegts @ 0x91b9de0] Could not find codec parameters for stream 7 (Unknown: none): unknown codec
Consider increasing the value for the 'analyzeduration' and 'probesize' options
[mpegts @ 0x91b9de0] Could not find codec parameters for stream 8 (Audio: mp3, 0 channels): unspecified frame size
Consider increasing the value for the 'analyzeduration' and 'probesize' options
Input #0, mpegts, from './fhevc1.ts':
  Duration: 00:00:54.40, start: 0.080000, bitrate: 80 kb/s
  Program 1 
    Stream #0:0[0x12d]: Video: hevc (HEVC / 0x43564548), yuv420p, 320x240, 23.98 tbr, 90k tbn, 90k tbc
  No Program
    Stream #0:1[0x16d]: Unknown: none
    Stream #0:2[0x125]: Unknown: none
    Stream #0:3[0x129]: Unknown: none
    Stream #0:4[0x13d]: Unknown: none
    Stream #0:5[0x2d]: Unknown: none
    Stream #0:6[0x12f]: Unknown: none
    Stream #0:7[0x92d]: Unknown: none
    Stream #0:8[0x52d]: Audio: mp3, 0 channels
[New Thread 0xb7df8b70 (LWP 14827)]
[New Thread 0xb75f8b70 (LWP 14828)]
[New Thread 0xb6df8b70 (LWP 14829)]
[New Thread 0xb65f8b70 (LWP 14830)]
[New Thread 0xb5df8b70 (LWP 14831)]
[New Thread 0xb55f8b70 (LWP 14832)]
[New Thread 0xb4df8b70 (LWP 14833)]
[New Thread 0xb45f8b70 (LWP 14834)]
[New Thread 0xb3df8b70 (LWP 14835)]
[hevc @ 0x91bdba0] No profile indication! (0)
    Last message repeated 1 times
Output #0, null, to 'pipe:':
  Metadata:
    encoder         : Lavf55.19.104
    Stream #0:0: Video: rawvideo (I420 / 0x30323449), yuv420p, 320x240, q=2-31, 200 kb/s, 90k tbn, 23.98 tbc
Stream mapping:
  Stream #0:0 -> #0:0 (hevc -> rawvideo)
Press [q] to stop, [?] for help
[hevc @ 0x91bdba0] No profile indication! (0)
    Last message repeated 3 times
[mpegts @ 0x91b9de0] PES packet size mismatch
[hevc @ 0x91bdba0] Could not find ref with POC 6
[null @ 0x92bfe60] Encoder did not produce proper pts, making some up.
[hevc @ 0x91bdba0] Could not find ref with POC 9
[hevc @ 0x91bdba0] Skipping NAL unit 25
[hevc @ 0x91bdba0] Could not find ref with POC 12
[mpegts @ 0x91b9de0] Invalid timestamps stream=0, pts=63520, dts=8441328, size=901
[hevc @ 0x91bdba0] No start code is found.
Error while decoding stream #0:0: Invalid data found when processing input
[hevc @ 0x91bdba0] Could not find ref with POC 15
[mpegts @ 0x91b9de0] PES packet size mismatch
[hevc @ 0x91bdba0] Could not find ref with POC 24
[hevc @ 0x91bdba0] No profile indication! (8)
[hevc @ 0x91bdba0] error decoding profile tier level
[hevc @ 0x91bdba0] No profile indication! (8)
[hevc @ 0x91bdba0] error decoding profile tier level
[hevc @ 0x91bdba0] Error parsing NAL unit #0.
[hevc @ 0x91bdba0] Could not find ref with POC 30
[mpegts @ 0x91b9de0] PES packet size mismatch
[hevc @ 0x91bdba0] Could not find ref with POC 36
[hevc @ 0x91bdba0] Duplicate POC in a sequence: 35.
[hevc @ 0x91bdba0] Error parsing NAL unit #0.
[mpegts @ 0x91b9de0] Invalid timestamps stream=0, pts=164897, dts=2251249, size=604
[hevc @ 0x91bdba0] No start code is found.
Error while decoding stream #0:0: Invalid data found when processing input
[hevc @ 0x91bdba0] Could not find ref with POC 26
[hevc @ 0x91bdba0] Could not find ref with POC 29
[hevc @ 0x91bdba0] Could not find ref with POC 20
[hevc @ 0x91bdba0] Could not find ref with POC 16
[hevc @ 0x91bdba0] Could not find ref with POC 19
[hevc @ 0x91bdba0] Could not find ref with POC 28
[hevc @ 0x91bdba0] Duplicate POC in a sequence: 31.
[hevc @ 0x91bdba0] Error parsing NAL unit #0.
[hevc @ 0x91bdba0] Duplicate POC in a sequence: 31.
[hevc @ 0x91bdba0] Error parsing NAL unit #0.
[hevc @ 0x91bdba0] Duplicate POC in a sequence: 35.
[hevc @ 0x91bdba0] Error parsing NAL unit #0.
[mpegts @ 0x91b9de0] Invalid timestamps stream=0, pts=288806, dts=802290, size=1085
[hevc @ 0x91bdba0] Could not find ref with POC 34
[hevc @ 0x91bdba0] Could not find ref with POC 37
[mpegts @ 0x91b9de0] PES packet size mismatch
[hevc @ 0x91bdba0] Could not find ref with POC 40
[hevc @ 0x91bdba0] Too many refs in a short term RPS.
[hevc @ 0x91bdba0] Error parsing NAL unit #0.
[hevc @ 0x91bdba0] Could not find ref with POC 46
[hevc @ 0x91bdba0] Invalid NAL unit 1, skipping.
[hevc @ 0x91bdba0] Could not find ref with POC 49
[hevc @ 0x91bdba0] No start code is found.
Error while decoding stream #0:0: Invalid data found when processing input
[hevc @ 0x91bdba0] Could not find ref with POC 42
[hevc @ 0x91bdba0] Duplicate POC in a sequence: 48.
[hevc @ 0x91bdba0] Error parsing NAL unit #0.
[mpegts @ 0x91b9de0] PES packet size mismatch
[hevc @ 0x91bdba0] Duplicate POC in a sequence: 51.
[hevc @ 0x91bdba0] Error parsing NAL unit #0.
[mpegts @ 0x91b9de0] PES packet size mismatch
[mpegts @ 0x91b9de0] Invalid timestamps stream=0, pts=373795, dts=537250289, size=1215
[hevc @ 0x91bdba0] Duplicate POC in a sequence: 52.
[hevc @ 0x91bdba0] Error parsing NAL unit #0.
[hevc @ 0x91bdba0] Could not find ref with POC 57
[mpegts @ 0x91b9de0] Invalid timestamps stream=0, pts=412707, dts=4295369203, size=1708
[mpegts @ 0x91b9de0] PES packet size mismatch
[hevc @ 0x91bdba0] Invalid number of merging MVP candidates: -11.
[hevc @ 0x91bdba0] Error parsing NAL unit #0.
[mpegts @ 0x91b9de0] Invalid timestamps stream=0, pts=292899, dts=413171, size=901
[hevc @ 0x91bdba0] Could not find ref with POC 60
[mpegts @ 0x91b9de0] PES packet size mismatch
[hevc @ 0x91bdba0] Could not find ref with POC 72
[hevc @ 0x91bdba0] Could not find ref with POC 87
[mpegts @ 0x91b9de0] PES packet size mismatch
[hevc @ 0x91bdba0] Could not find ref with POC 92
[mpegts @ 0x91b9de0] PES packet size mismatch
[hevc @ 0x91bdba0] Could not find ref with POC 93
[mpegts @ 0x91b9de0] PES packet size mismatch
[hevc @ 0x91bdba0] No start code is found.
Error while decoding stream #0:0: Invalid data found when processing input

Program received signal SIGSEGV, Segmentation fault.
0x084f9e84 in decode_pic_timing (s=0x92ce020) at libavcodec/hevc_sei.c:83
83	    HEVCSPS *sps = (HEVCSPS*)s->sps_list[s->active_seq_parameter_set_id]->data;
(gdb) bt
#0  0x084f9e84 in decode_pic_timing (s=0x92ce020) at libavcodec/hevc_sei.c:83
#1  decode_nal_sei_message (s=0x92ce020) at libavcodec/hevc_sei.c:146
#2  ff_hevc_decode_nal_sei (s=s@entry=0x92ce020) at libavcodec/hevc_sei.c:180
#3  0x084eff40 in parse_nal_units (buf_size=<optimized out>, 
    buf=0x9247a73 "\316?\201\351\304q\t\335)x", avctx=0x91bdba0, s=0x91bfcc0)
    at libavcodec/hevc_parser.c:149
#4  hevc_parse (s=0x91bfcc0, avctx=0x91bdba0, poutbuf=0xbffff1b4, 
    poutbuf_size=0xbffff1b8, buf=0x9247a70 "", buf_size=2674)
    at libavcodec/hevc_parser.c:278
#5  0x08609e70 in av_parser_parse2 (s=0x91bfcc0, avctx=0x91bdba0, 
    poutbuf=poutbuf@entry=0xbffff1b4, 
    poutbuf_size=poutbuf_size@entry=0xbffff1b8, buf=buf@entry=0x9420c20 "", 
    buf_size=buf_size@entry=1275, pts=581668, dts=570868, pos=260944)
    at libavcodec/parser.c:155
#6  0x0823dc21 in parse_packet (s=s@entry=0x91b9de0, pkt=pkt@entry=0xbffff348, 
    stream_index=<optimized out>) at libavformat/utils.c:1200
#7  0x0823eb5d in read_frame_internal (s=s@entry=0x91b9de0, 
    pkt=pkt@entry=0xbffff6f8) at libavformat/utils.c:1378
#8  0x0823f43a in av_read_frame (s=0x91b9de0, pkt=pkt@entry=0xbffff6f8)
    at libavformat/utils.c:1419
#9  0x080ba0e6 in get_input_packet (pkt=0xbffff6d8, f=0x92cd740)
    at ffmpeg.c:2907
#10 process_input (file_index=0) at ffmpeg.c:2944
---Type <return> to continue, or q <return> to quit---
#11 0x080a6163 in transcode_step () at ffmpeg.c:3214
#12 transcode () at ffmpeg.c:3266
#13 main (argc=<optimized out>, argv=<optimized out>) at ffmpeg.c:3444
(gdb) 

knoppix@Microknoppix:/media/sdb1$ valgrind --leak-check=full ffmpeg-HEAD-49287bb/ffmpeg_g -i ./fhevc1.ts -f null -
==17653== Memcheck, a memory error detector
==17653== Copyright (C) 2002-2011, and GNU GPL'd, by Julian Seward et al.
==17653== Using Valgrind-3.7.0 and LibVEX; rerun with -h for copyright info
==17653== Command: ffmpeg-HEAD-49287bb/ffmpeg_g -i ./fhevc1.ts -f null -
==17653== 
ffmpeg version 2.0-49287bb Copyright (c) 2000-2013 the FFmpeg developers
  built on Oct 31 2013 14:57:16 with gcc 4.7 (Debian 4.7.2-5)
  configuration: --disable-yasm --disable-ffserver --disable-ffprobe --enable-gpl
  libavutil      52. 48.100 / 52. 48.100
  libavcodec     55. 39.100 / 55. 39.100
  libavformat    55. 19.104 / 55. 19.104
  libavdevice    55.  5.100 / 55.  5.100
  libavfilter     3. 90.100 /  3. 90.100
  libswscale      2.  5.101 /  2.  5.101
  libswresample   0. 17.104 /  0. 17.104
  libpostproc    52.  3.100 / 52.  3.100
[hevc @ 0x4247dc0] No profile indication! (0)
    Last message repeated 3 times
[mpegts @ 0x42290c0] PES packet size mismatch
[mpegts @ 0x42290c0] Invalid timestamps stream=0, pts=63520, dts=8441328, size=901
[mpegts @ 0x42290c0] PES packet size mismatch
[hevc @ 0x4247dc0] No profile indication! (8)
[hevc @ 0x4247dc0] error decoding profile tier level
[mpegts @ 0x42290c0] PES packet size mismatch
    Last message repeated 21 times
[mpegts @ 0x42290c0] probed stream 1 failed
[mpegts @ 0x42290c0] probed stream 2 failed
[mpegts @ 0x42290c0] probed stream 3 failed
[mpegts @ 0x42290c0] probed stream 4 failed
[mpegts @ 0x42290c0] probed stream 5 failed
[mpegts @ 0x42290c0] probed stream 6 failed
[mpegts @ 0x42290c0] probed stream 7 failed
[mpegts @ 0x42290c0] Invalid timestamps stream=0, pts=164897, dts=2251249, size=604
[mpegts @ 0x42290c0] Invalid timestamps stream=0, pts=288806, dts=802290, size=1085
[NULL @ 0x45e9020] start time is not set in estimate_timings_from_pts
[NULL @ 0x45ea300] start time is not set in estimate_timings_from_pts
[NULL @ 0x45efb80] start time is not set in estimate_timings_from_pts
[NULL @ 0x4a05080] start time is not set in estimate_timings_from_pts
[NULL @ 0x4a076c0] start time is not set in estimate_timings_from_pts
[NULL @ 0x4e0a320] start time is not set in estimate_timings_from_pts
[NULL @ 0x4e0eac0] start time is not set in estimate_timings_from_pts
[mpegts @ 0x42290c0] PES packet size mismatch
    Last message repeated 11 times
[mpegts @ 0x42290c0] Could not find codec parameters for stream 1 (Unknown: none): unknown codec
Consider increasing the value for the 'analyzeduration' and 'probesize' options
[mpegts @ 0x42290c0] Could not find codec parameters for stream 2 (Unknown: none): unknown codec
Consider increasing the value for the 'analyzeduration' and 'probesize' options
[mpegts @ 0x42290c0] Could not find codec parameters for stream 3 (Unknown: none): unknown codec
Consider increasing the value for the 'analyzeduration' and 'probesize' options
[mpegts @ 0x42290c0] Could not find codec parameters for stream 4 (Unknown: none): unknown codec
Consider increasing the value for the 'analyzeduration' and 'probesize' options
[mpegts @ 0x42290c0] Could not find codec parameters for stream 5 (Unknown: none): unknown codec
Consider increasing the value for the 'analyzeduration' and 'probesize' options
[mpegts @ 0x42290c0] Could not find codec parameters for stream 6 (Unknown: none): unknown codec
Consider increasing the value for the 'analyzeduration' and 'probesize' options
[mpegts @ 0x42290c0] Could not find codec parameters for stream 7 (Unknown: none): unknown codec
Consider increasing the value for the 'analyzeduration' and 'probesize' options
[mpegts @ 0x42290c0] Could not find codec parameters for stream 8 (Audio: mp3, 0 channels): unspecified frame size
Consider increasing the value for the 'analyzeduration' and 'probesize' options
Input #0, mpegts, from './fhevc1.ts':
  Duration: 00:00:54.40, start: 0.080000, bitrate: 80 kb/s
  Program 1 
    Stream #0:0[0x12d]: Video: hevc (HEVC / 0x43564548), yuv420p, 320x240, 23.98 tbr, 90k tbn, 90k tbc
  No Program
    Stream #0:1[0x16d]: Unknown: none
    Stream #0:2[0x125]: Unknown: none
    Stream #0:3[0x129]: Unknown: none
    Stream #0:4[0x13d]: Unknown: none
    Stream #0:5[0x2d]: Unknown: none
    Stream #0:6[0x12f]: Unknown: none
    Stream #0:7[0x92d]: Unknown: none
    Stream #0:8[0x52d]: Audio: mp3, 0 channels
[hevc @ 0x4985de0] No profile indication! (0)
    Last message repeated 1 times
Output #0, null, to 'pipe:':
  Metadata:
    encoder         : Lavf55.19.104
    Stream #0:0: Video: rawvideo (I420 / 0x30323449), yuv420p, 320x240, q=2-31, 200 kb/s, 90k tbn, 23.98 tbc
Stream mapping:
  Stream #0:0 -> #0:0 (hevc -> rawvideo)
Press [q] to stop, [?] for help
[hevc @ 0x4247dc0] No profile indication! (0)
    Last message repeated 1 times
[mpegts @ 0x42290c0] PES packet size mismatch
[hevc @ 0x4985de0] No profile indication! (0)
    Last message repeated 1 times
[hevc @ 0x499e220] Could not find ref with POC 6
[hevc @ 0x4265aa0] Could not find ref with POC 9
[hevc @ 0x426ce60] Skipping NAL unit 25
[mpegts @ 0x42290c0] Invalid timestamps stream=0, pts=63520, dts=8441328, size=901
[hevc @ 0x4274220] Could not find ref with POC 12
[hevc @ 0x4c9fdc0] No start code is found.
[hevc @ 0x59216c0] Could not find ref with POC 15
[null @ 0x4e034a0] Encoder did not produce proper pts, making some up.
[mpegts @ 0x42290c0] PES packet size mismatch
[hevc @ 0x4265aa0] Could not find ref with POC 24
[hevc @ 0x4247dc0] No profile indication! (8)
[hevc @ 0x4247dc0] error decoding profile tier level
Error while decoding stream #0:0: Invalid data found when processing input
[hevc @ 0x4274220] No profile indication! (8)
[hevc @ 0x4274220] error decoding profile tier level
[hevc @ 0x4274220] Error parsing NAL unit #0.
[hevc @ 0x4274220] Could not find ref with POC 30
[mpegts @ 0x42290c0] PES packet size mismatch
[hevc @ 0x4985de0] Could not find ref with POC 36
[mpegts @ 0x42290c0] Invalid timestamps stream=0, pts=164897, dts=2251249, size=604
[hevc @ 0x498faa0] Duplicate POC in a sequence: 35.
[hevc @ 0x498faa0] Error parsing NAL unit #0.
[hevc @ 0x4996e60] No start code is found.
[hevc @ 0x499e220] Could not find ref with POC 26
[hevc @ 0x499e220] Could not find ref with POC 29
[hevc @ 0x4265aa0] Could not find ref with POC 20
[hevc @ 0x426ce60] Could not find ref with POC 16
[hevc @ 0x426ce60] Could not find ref with POC 19
frame=   36 fps= 36 q=0.0 size=N/A time=00:00:01.50 bitrate=N/A dup=23 drop=0   [hevc @ 0x4985de0] Could not find ref with POC 28
Error while decoding stream #0:0: Invalid data found when processing input
[hevc @ 0x498faa0] Duplicate POC in a sequence: 31.
[hevc @ 0x498faa0] Error parsing NAL unit #0.
[hevc @ 0x4996e60] Duplicate POC in a sequence: 31.
[hevc @ 0x4996e60] Error parsing NAL unit #0.
[mpegts @ 0x42290c0] Invalid timestamps stream=0, pts=288806, dts=802290, size=1085
[hevc @ 0x4265aa0] Duplicate POC in a sequence: 35.
[hevc @ 0x4265aa0] Error parsing NAL unit #0.
[mpegts @ 0x42290c0] PES packet size mismatch
[hevc @ 0x426ce60] Could not find ref with POC 34
[hevc @ 0x426ce60] Could not find ref with POC 37
[hevc @ 0x4274220] Could not find ref with POC 40
[hevc @ 0x59216c0] Too many refs in a short term RPS.
[hevc @ 0x59216c0] Error parsing NAL unit #0.
[hevc @ 0x4985de0] Could not find ref with POC 46
[hevc @ 0x498faa0] Invalid NAL unit 1, skipping.
[hevc @ 0x4996e60] Could not find ref with POC 49
[hevc @ 0x426ce60] No start code is found.
[hevc @ 0x4274220] Could not find ref with POC 42
[hevc @ 0x59216c0] Duplicate POC in a sequence: 48.
[hevc @ 0x59216c0] Error parsing NAL unit #0.
[mpegts @ 0x42290c0] PES packet size mismatch
    Last message repeated 1 times
[mpegts @ 0x42290c0] Invalid timestamps stream=0, pts=373795, dts=537250289, size=1215
[hevc @ 0x498faa0] Duplicate POC in a sequence: 51.
[hevc @ 0x498faa0] Error parsing NAL unit #0.
Error while decoding stream #0:0: Invalid data found when processing input
[hevc @ 0x4265aa0] Duplicate POC in a sequence: 52.
[hevc @ 0x4265aa0] Error parsing NAL unit #0.
frame=  213 fps=140 q=0.0 size=N/A time=00:00:08.88 bitrate=N/A dup=190 drop=6  [mpegts @ 0x42290c0] Invalid timestamps stream=0, pts=412707, dts=4295369203, size=1708
[hevc @ 0x4274220] Could not find ref with POC 57
[mpegts @ 0x42290c0] PES packet size mismatch
[mpegts @ 0x42290c0] Invalid timestamps stream=0, pts=292899, dts=413171, size=901
[hevc @ 0x4985de0] Invalid number of merging MVP candidates: -11.
[hevc @ 0x4985de0] Error parsing NAL unit #0.
[hevc @ 0x498faa0] Could not find ref with POC 60
[mpegts @ 0x42290c0] PES packet size mismatch
[hevc @ 0x4985de0] Could not find ref with POC 72
frame=  213 fps=105 q=0.0 size=N/A time=00:00:08.88 bitrate=N/A dup=190 drop=19 [hevc @ 0x4c9fdc0] Could not find ref with POC 87
[mpegts @ 0x42290c0] PES packet size mismatch
    Last message repeated 1 times
[hevc @ 0x498faa0] Could not find ref with POC 92
[hevc @ 0x4996e60] Could not find ref with POC 93
[mpegts @ 0x42290c0] PES packet size mismatch
==17653== Invalid read of size 4
==17653==    at 0x84F9E84: ff_hevc_decode_nal_sei (hevc_sei.c:83)
==17653==    by 0x84EFF3F: hevc_parse (hevc_parser.c:149)
==17653==    by 0x8609E6F: av_parser_parse2 (parser.c:155)
==17653==    by 0x823DC20: parse_packet (utils.c:1200)
==17653==    by 0x823EB5C: read_frame_internal (utils.c:1378)
==17653==    by 0x823F439: av_read_frame (utils.c:1419)
==17653==    by 0x80BA0E5: process_input (ffmpeg.c:2907)
==17653==    by 0x80A6162: main (ffmpeg.c:3214)
==17653==  Address 0x4 is not stack'd, malloc'd or (recently) free'd
==17653== 
==17653== 
==17653== Process terminating with default action of signal 11 (SIGSEGV)
==17653==  Access not within mapped region at address 0x4
==17653==    at 0x84F9E84: ff_hevc_decode_nal_sei (hevc_sei.c:83)
==17653==    by 0x84EFF3F: hevc_parse (hevc_parser.c:149)
==17653==    by 0x8609E6F: av_parser_parse2 (parser.c:155)
==17653==    by 0x823DC20: parse_packet (utils.c:1200)
==17653==    by 0x823EB5C: read_frame_internal (utils.c:1378)
==17653==    by 0x823F439: av_read_frame (utils.c:1419)
==17653==    by 0x80BA0E5: process_input (ffmpeg.c:2907)
==17653==    by 0x80A6162: main (ffmpeg.c:3214)
==17653==  If you believe this happened as a result of a stack
==17653==  overflow in your program's main thread (unlikely but
==17653==  possible), you can try to increase the size of the
==17653==  main thread stack using the --main-stacksize= flag.
==17653==  The main thread stack size used in this run was 8388608.
==17653== 
==17653== HEAP SUMMARY:
==17653==     in use at exit: 9,171,472 bytes in 1,470 blocks
==17653==   total heap usage: 9,725 allocs, 8,255 frees, 94,227,375 bytes allocated
==17653== 
==17653== 1,296 bytes in 9 blocks are possibly lost in loss record 191 of 264
==17653==    at 0x4026A68: calloc (vg_replace_malloc.c:566)
==17653==    by 0x40111FB: _dl_allocate_tls (dl-tls.c:300)
==17653==    by 0x407C2A8: pthread_create@@GLIBC_2.1 (allocatestack.c:580)
==17653==    by 0x80DCD01: ff_graph_thread_init (pthread.c:187)
==17653==    by 0x80D0D3F: avfilter_graph_alloc_filter (avfiltergraph.c:189)
==17653==    by 0x80DB844: create_filter (graphparser.c:112)
==17653==    by 0x80DC299: avfilter_graph_parse2 (graphparser.c:169)
==17653== 
==17653== 1,296 bytes in 9 blocks are possibly lost in loss record 192 of 264
==17653==    at 0x4026A68: calloc (vg_replace_malloc.c:566)
==17653==    by 0x40111FB: _dl_allocate_tls (dl-tls.c:300)
==17653==    by 0x407C2A8: pthread_create@@GLIBC_2.1 (allocatestack.c:580)
==17653==    by 0x861F87E: ff_thread_init (pthread.c:878)
==17653==    by 0x86CE5BD: avcodec_open2 (utils.c:1295)
==17653==    by 0x80BD5DD: transcode_init (ffmpeg.c:1986)
==17653==    by 0x80A573F: main (ffmpeg.c:3237)
==17653== 
==17653== LEAK SUMMARY:
==17653==    definitely lost: 0 bytes in 0 blocks
==17653==    indirectly lost: 0 bytes in 0 blocks
==17653==      possibly lost: 2,592 bytes in 18 blocks
==17653==    still reachable: 9,168,880 bytes in 1,452 blocks
==17653==         suppressed: 0 bytes in 0 blocks
==17653== Reachable blocks (those to which a pointer was found) are not shown.
==17653== To see them, rerun with: --leak-check=full --show-reachable=yes
==17653== 
==17653== For counts of detected and suppressed errors, rerun with: -v
==17653== ERROR SUMMARY: 3 errors from 3 contexts (suppressed: 59 from 6)
Killed

[Michael Niedermayer]

Fixed in 8a701ef7ddbb2d80ef77b14287d286fc9760f131