Closed Bug 963836 Opened 10 years ago Closed 10 years ago

OpenH264: "runtime error: load of misaligned address for type 'uint32_t'" to kuiABCD

Categories

(Core :: WebRTC: Audio/Video, defect)

x86_64
macOS
defect
Not set
critical

Tracking

()

RESOLVED FIXED
Tracking Status
firefox30 --- disabled
firefox-esr24 --- unaffected

People

(Reporter: posidron, Unassigned)

References

(Blocks 1 open bug)

Details

(Keywords: testcase)

Attachments

(1 file)

Attached file testcase.264
In order to reproduce you need to compile OpenH264 with UBSan support.

export CC="$LLVM_HOME/build/bin/clang -fsanitize=undefined -fno-sanitize=vptr"
export CXX="$LLVM_HOME/build/bin/clang++ -fsanitize=undefined -fno-sanitize=vptr"
export LD="$LLVM_HOME/build/bin/clang++"
export LDFLAGS="-fsanitize=undefined"
make


codec/decoder/./core/src/mc.cpp:330:28: runtime error: load of misaligned address 0x000c64a6 for type 'uint32_t' (aka 'unsigned int'), which requires 4 byte alignment

const uint32_t kuiABCD = * ((uint32_t*)g_kuiABCD[iMvY & 0x07][iMvX & 0x07]);


I will hide this bug first because I am not sure how you would like me to treat this class of bugs.


Tested with https://github.com/cisco/openh264/commit/58c33b8ee8
Hi Christoph, we'll deal with it after our holiday (Chinese Spring Festival is coming:) )
hope it will not block your work.
No, that's totally fine. Enjoy!
Hi Christoph, the bug has been solved by early fix from others.
Could you please check it with latest cisco master branch?
btw: the codec has other similar issues not reflected by this bitstream, and we'll deal with this in future.
Could you confirm that this is fixed, Christoph?  Thanks.
Flags: needinfo?(cdiehl)
Fixed.

Tested with https://github.com/cisco/openh264/commit/75f8b41bcd
Status: NEW → RESOLVED
Closed: 10 years ago
Flags: needinfo?(cdiehl)
Resolution: --- → FIXED
Group: core-security → core-security-release
Group: core-security-release
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Created:
Updated:
Size: