[gstreamer-bugs] [Bug 600553] jpegdec crashes on a fuzzed jpeg

[GStreamer (bugzilla.gnome.org)]

https://bugzilla.gnome.org/show_bug.cgi?id=600553
  GStreamer | gst-plugins-good | git

--- Comment #1 from Stefan Kost (gstreamer, gtkdoc dev) <ensonic at sonicpulse.de> 2010-02-23 22:06:47 UTC ---
#0  0xb7a6d6ed in jpeg_idct_ifast_sse2.column_end () from
/usr/lib/libjpeg.so.62
#1  0x08237b10 in ?? ()
#2  0x08237b30 in ?? ()
#3  0xb7a64742 in decompress_onepass (cinfo=0x822b38c, output_buf=0xb7a4a07c)
at ./jdcoefct.c:240
#4  0xb7a5cd1f in jpeg_read_raw_data (cinfo=0x822b38c, data=0xb7a4a07c,
max_lines=24) at ./jdapistd.c:210
#5  0xb7b432cc in gst_jpeg_dec_decode_indirect (r_h=<value optimized out>,
r_v=<value optimized out>, height=<value optimized out>, 
    width=<value optimized out>, last=<value optimized out>, base=<value
optimized out>, dec=<value optimized out>)
    at gstjpegdec.c:740
#6  gst_jpeg_dec_chain (r_h=<value optimized out>, r_v=<value optimized out>,
height=<value optimized out>, 
    width=<value optimized out>, last=<value optimized out>, base=<value
optimized out>, dec=<value optimized out>)
    at gstjpegdec.c:1177
#7  0xb7f19ae5 in gst_pad_chain_data_unchecked (pad=0x822a0d8, is_buffer=<value
optimized out>, data=0x8235060) at gstpad.c:4122
#8  0xb7f1a648 in gst_pad_push_data (pad=0x822a010, is_buffer=<value optimized
out>, data=0x8235060) at gstpad.c:4351
#9  0xb7ae01f0 in gst_base_src_loop (pad=0x822a010) at gstbasesrc.c:2444
#10 0xb7f41295 in gst_task_func (task=0x8232020) at gsttask.c:238
#11 0xb7f42b97 in default_func (tdata=0x8059da8, pool=0x805f410) at
gsttaskpool.c:70
#12 0xb7de6717 in ?? () from /usr/lib/libglib-2.0.so.0
#13 0xb7de5094 in ?? () from /usr/lib/libglib-2.0.so.0
#14 0xb7d5c6e5 in start_thread (arg=0x0) at pthread_create.c:297
#15 0xb7d5c600 in ?? () at pthread_create.c:216 from /lib/libpthread.so.0

-- 
Configure bugmail: https://bugzilla.gnome.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the QA contact for the bug.