[Bug 700965] New: avviddec: Crashes on Sorensen Video 1 stream

[GStreamer (bugzilla.gnome.org)]

https://bugzilla.gnome.org/show_bug.cgi?id=700965
  GStreamer | gst-libav | git

           Summary: avviddec: Crashes on Sorensen Video 1 stream
    Classification: Platform
           Product: GStreamer
           Version: git
        OS/Version: Linux
            Status: NEW
          Severity: normal
          Priority: Normal
         Component: gst-libav
        AssignedTo: gstreamer-bugs at lists.freedesktop.org
        ReportedBy: slomo at circular-chaos.org
         QAContact: gstreamer-bugs at lists.freedesktop.org
     GNOME version: ---


container: Quicktime
    audio: QDesign Music (QDM) 2
    video: Sorensen Video 1

samples.mplayerhq.hu/A-codecs/QDM2/menace_640qt4.mov

(gdb) bt
#0  ff_put_pixels16_sse2.loop () at libavcodec/x86/dsputil.asm:986
#1  0x00007faf22706918 in svq1_motion_inter_block (height=80, width=160, y=16,
x=32, 
    motion=0x7faf24149ae0, pitch=176, 
    previous=0x7faf240312d0 "^^^^]]]]\\\\\\\\\\\\\\\\[[[[ZZZZZZZZYYYYYYYY", 'X'
<repeats 12 times>, "WWWW", 'V' <repeats 12 times>, 'W' <repeats 32 times>, 'X'
<repeats 24 times>, 'Y' <repeats 12 times>, "ZZZZZZZZ[[[[[[[[]]]]^^^^____",
'\200' <repeats 16 times>, "^^^^]]]]\\\\\\\\\\\\\\\\[[[[ZZZZ"..., 
    current=0x7faf240d6824 '\020' <repeats 144 times>, "\\\\\\\\", '[' <repeats
20 times>, "ZZZZYYYY", '\020' <repeats 24 times>..., bitbuf=0x7faf34113340,
dsp=0x7faf34111e20) at libavcodec/svq1dec.c:362
#2  svq1_decode_delta_block (avctx=0x7faf340efbc0, height=80, width=160, y=16,
x=32, 
    motion=0x7faf24149ae0, pitch=176, 
    previous=0x7faf240312d0 "^^^^]]]]\\\\\\\\\\\\\\\\[[[[ZZZZZZZZYYYYYYYY", 'X'
<repeats 12 times>, "WWWW", 'V' <repeats 12 times>, 'W' <repeats 32 times>, 'X'
<repeats 24 times>, 'Y' <repeats 12 times>, "ZZZZZZZZ[[[[[[[[]]]]^^^^____",
'\200' <repeats 16 times>, "^^^^]]]]\\\\\\\\\\\\\\\\[[[[ZZZZ"..., 
    current=0x7faf240d6824 '\020' <repeats 144 times>, "\\\\\\\\", '[' <repeats
20 times>, "ZZZZYYYY", '\020' <repeats 24 times>..., bitbuf=0x7faf34113340,
dsp=0x7faf34111e20) at libavcodec/svq1dec.c:476
#3  svq1_decode_frame (avctx=0x7faf340efbc0, data=0x7faf34102040,
got_frame=0x7faf3a1044bc, 
    avpkt=<optimized out>) at libavcodec/svq1dec.c:705
#4  0x00007faf2272d0e3 in avcodec_decode_video2 (avctx=0x7faf340efbc0,
picture=0x7faf34102040, 
    got_picture_ptr=got_picture_ptr at entry=0x7faf3a1044bc,
avpkt=avpkt at entry=0x7faf3a1044c0)
    at libavcodec/utils.c:1286
#5  0x00007faf2240f447 in gst_ffmpegviddec_video_frame
(ffmpegdec=ffmpegdec at entry=0x7faf340f8b00, 
    data=<optimized out>, data at entry=0x154fcb0 "", size=704,
frame=frame at entry=0x7faf28374c80, 
    ret=ret at entry=0x7faf3a10498c) at gstavviddec.c:1112
#6  0x00007faf2240fec8 in gst_ffmpegviddec_frame
(ffmpegdec=ffmpegdec at entry=0x7faf340f8b00, 
    data=data at entry=0x154fcb0 "", size=size at entry=704,
got_data=got_data at entry=0x7faf3a104988, 
    frame=frame at entry=0x7faf28374c80, ret=ret at entry=0x7faf3a10498c) at
gstavviddec.c:1239
#7  0x00007faf224103f7 in gst_ffmpegviddec_handle_frame
(decoder=0x7faf340f8b00, 
    frame=0x7faf28374c80) at gstavviddec.c:1355
#8  0x00007faf3cd2b6c9 in gst_video_decoder_decode_frame
(decoder=decoder at entry=0x7faf340f8b00, 
---Type <return> to continue, or q <return> to quit---
    frame=0x7faf28374c80) at gstvideodecoder.c:2744
#9  0x00007faf3cd2ddd3 in gst_video_decoder_chain_forward
(decoder=decoder at entry=0x7faf340f8b00, 
    buf=buf at entry=0x7faf2c2e7e30, at_eos=at_eos at entry=0) at
gstvideodecoder.c:1756
#10 0x00007faf3cd2f443 in gst_video_decoder_chain (pad=<optimized out>,
parent=<optimized out>, 
    buf=0x7faf2c2e7e30) at gstvideodecoder.c:2003
#11 0x00007faf3e5324a5 in gst_pad_chain_data_unchecked (data=0x7faf2c2e7e30,
type=4112, 
    pad=0x7faf3410a490) at gstpad.c:3708
#12 gst_pad_push_data (pad=0x7faf1c01c6c0, type=type at entry=4112,
data=<optimized out>, 
    data at entry=0x7faf2c2e7e30) at gstpad.c:3938
#13 0x00007faf3e539266 in gst_pad_push (pad=<optimized out>,
buffer=buffer at entry=0x7faf2c2e7e30)
    at gstpad.c:4041
#14 0x00007faf3c780561 in gst_single_queue_push_one (object=0x7faf2c2e7e30,
sq=0x7faf3410de00, 
    mq=0x7faf2c023070) at gstmultiqueue.c:1057
#15 gst_multi_queue_loop (pad=<optimized out>) at gstmultiqueue.c:1303
#16 0x00007faf3e5602d9 in gst_task_func (task=0x7faf1c012b40) at gsttask.c:316
#17 0x00007faf3ded9772 in g_thread_pool_thread_proxy (data=<optimized out>)
    at /tmp/buildd/glib2.0-2.36.1/./glib/gthreadpool.c:309
#18 0x00007faf3ded8f35 in g_thread_proxy (data=0x7faf2c002ad0)
    at /tmp/buildd/glib2.0-2.36.1/./glib/gthread.c:798
#19 0x00007faf3dc57e0e in start_thread (arg=0x7faf3a105700) at
pthread_create.c:311
#20 0x00007faf3d98b95d in clone () at
../sysdeps/unix/sysv/linux/x86_64/clone.S:113

-- 
Configure bugmail: https://bugzilla.gnome.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the QA contact for the bug.
You are the assignee for the bug.