zzufed file causes infinite loop

[Cosmin Amironesei]

==30171== Memcheck, a memory error detector
==30171== Copyright (C) 2002-2010, and GNU GPL'd, by Julian Seward et al.
==30171== Using Valgrind-3.6.1-Debian and LibVEX; rerun with -h for copyright info
==30171== Command: ffmpeg -i corruptfile -f null -
==30171==
ffmpeg version N-35872-g6d8e6fe, Copyright (c) 2000-2011 the FFmpeg developers

built on Dec 16 2011 23:12:35 with gcc 4.6.1
configuration:
libavutil 51. 32. 0 / 51. 32. 0
libavcodec 53. 46. 0 / 53. 46. 0
libavformat 53. 26. 0 / 53. 26. 0
libavdevice 53. 4. 0 / 53. 4. 0
libavfilter 2. 53. 0 / 2. 53. 0
libswscale 2. 1. 0 / 2. 1. 0

Truncating packet of size 538736 to 417441
Input #0, avi, from 'corruptfile':

Metadata:

creation_time : 1998-02-15 12:56:29

Duration: 00:00:34.07, start: 0.000000, bitrate: 98 kb/s

Stream #0:0: Video: aura (AURA / 0x41525541), yuv411p, 160x120, 15 tbr, 15 tbn, 15 tbc
Stream #0:1: Audio: pcm_s16le ([1][0][0][0] / 0x0001), 11025 Hz, 1 channels, s16, 176 kb/s

[buffer @ 0x42a34a0] w:160 h:120 pixfmt:yuv411p tb:1/1000000 sar:0/1 sws_param:
Output #0, null, to 'pipe:':

Metadata:

creation_time : 1998-02-15 12:56:29
encoder : Lavf53.26.0
Stream #0:0: Video: rawvideo (Y41B / 0x42313459), yuv411p, 160x120, q=2-31, 200 kb/s, 90k tbn, 15 tbc
Stream #0:1: Audio: pcm_s16le, 11025 Hz, 1 channels, s16, 176 kb/s

Stream mapping:

Stream #0:0 -> #0:0 (aura -> rawvideo)
Stream #0:1 -> #0:1 (pcm_s16le -> pcm_s16le)

Press [q] to stop, ? for help
[aura @ 0x421e980] got a buffer with 417440 bytes when 14448 were expected
Error while decoding stream #0:0
frame= 0 fps= 0 q=0.0 Lsize= 0kB time=00:00:00.00 bitrate= 0.0kbits/s

video:0kB audio:0kB global headers:0kB muxing overhead -nan%
Output file is empty, nothing was encoded (check -ss / -t / -frames parameters if used)
==30171==
==30171== HEAP SUMMARY:
==30171== in use at exit: 0 bytes in 0 blocks
==30171== total heap usage: 110 allocs, 110 frees, 915,542 bytes allocated
==30171==
==30171== All heap blocks were freed -- no leaks are possible
==30171==
==30171== For counts of detected and suppressed errors, rerun with: -v
==30171== ERROR SUMMARY: 0 errors from 0 contexts (suppressed: 15 from 6)

[Cosmin Amironesei]

valgrind report

[Cosmin Amironesei]

the zzufed file

[Carl Eugen Hoyos]

For crash-reports, gdb output as described on ​http://ffmpeg.org/bugreports.html is required.

[Michael Niedermayer]

Fixed, infinite loop
See files at ​http://www.google-melange.com/gci/task/view/google/gci2011/7209212