Bug#907464: x264: NULL dereference crash

[Jaeseung Choi]

Package: x264
Version: 2:0.148.2748+git97eaef2-1
Severity: normal

Dear Maintainer,

Running x264 with the attached poc file raises a NULL dereference crash.

Following gdb log shows the program resulting in segfault.

jason at debian-amd64-stretch:~/report/debian-latest/x264$ gdb x264 -q
Reading symbols from x264...(no debugging symbols found)...done.
(gdb) run -o output.264 poc_null
Starting program: /usr/bin/x264 -o output.264 poc_null
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1".

Program received signal SIGSEGV, Segmentation fault.
0x00007ffff6abad0b in ?? () from /usr/lib/x86_64-linux-gnu/libavformat.so.57
(gdb) x/i $rip
=> 0x7ffff6abad0b:      mov    (%rdx,%rax,8),%rdx
(gdb) info reg rax rdx
rax            0x0      0
rdx            0x0      0
(gdb) where
#0  0x00007ffff6abad0b in ?? () from
/usr/lib/x86_64-linux-gnu/libavformat.so.57
#1  0x00007ffff6b3e2fd in ?? () from
/usr/lib/x86_64-linux-gnu/libavformat.so.57
#2  0x00007ffff6b3f020 in ?? () from
/usr/lib/x86_64-linux-gnu/libavformat.so.57
#3  0x00007ffff6b40101 in av_read_frame () from
/usr/lib/x86_64-linux-gnu/libavformat.so.57
#4  0x00007ffff6dfe74f in ?? () from /usr/lib/x86_64-linux-gnu/libffms2.so.4
#5  0x00007ffff6df8a19 in FFMS_DoIndexing2 () from
/usr/lib/x86_64-linux-gnu/libffms2.so.4
#6  0x000055555556b58c in ?? ()
#7  0x000055555555c93d in ?? ()
#8  0x00007ffff462d2e1 in __libc_start_main (main=0x55555555a030, argc=4,
argv=0x7fffffffe618, init=<optimized out>, fini=<optimized out>,
rtld_fini=<optimized out>, stack_end=0x7fffffffe608)
    at ../csu/libc-start.c:291
#9  0x000055555555cb3a in ?? ()

-- System Information:
Debian Release: 9.1
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 4.9.0-3-amd64 (SMP w/1 CPU core)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8),
LANGUAGE=en_US:en (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages x264 depends on:
ii  libavcodec57   7:3.2.10-1~deb9u1
ii  libavformat57  7:3.2.10-1~deb9u1
ii  libavutil55    7:3.2.10-1~deb9u1
ii  libc6          2.24-11+deb9u3
ii  libffms2-4     2.23-1
ii  libgpac4       0.5.2-426-gc5ad4e4+dfsg5-3+b1
ii  libswscale4    7:3.2.10-1~deb9u1
ii  libx264-148    2:0.148.2748+git97eaef2-1
ii  zlib1g         1:1.2.8.dfsg-5

x264 recommends no packages.

x264 suggests no packages.

-- no debconf information
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/pkg-multimedia-maintainers/attachments/20180828/3c15eb29/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: poc_null
Type: application/octet-stream
Size: 16 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-multimedia-maintainers/attachments/20180828/3c15eb29/attachment-0001.obj>