Builder ffmpegsos-solaris10-sparc Build #12556

Results:

Failed shell_2 shell_3 shell_4 shell_5

SourceStamp:

BuildSlave:

Reason:

The SingleBranchScheduler scheduler named 'schedule-ffmpegsos-solaris10-sparc' triggered this build

Steps and Logfiles:

1. git update ( 23 secs )
   1. stdio
2. shell 'gsed -i ...' ( 4 secs )
   1. stdio
3. shell_1 'gsed -i ...' ( 2 secs )
   1. stdio
4. shell_2 'gsed -i ...' failed ( 1 secs )
   1. stdio
5. shell_3 './configure --samples="../../../ffmpeg/fate-suite" ...' failed ( 7 secs )
   1. stdio
   2. config.log
6. shell_4 'gmake fate-rsync' failed ( 0 secs )
   1. stdio
7. shell_5 '../../../ffmpeg/fate.sh ../../../ffmpeg/fate_config_sos.sh' failed ( 0 secs )
   1. stdio
   2. configure.log
   3. compile.log
   4. test.log

Build Properties:

Forced Build Properties:

Responsible Users:

1. Ruikai Peng

   ruikaiohnoyoudont@pwno.io

Timing:

All Changes:

:

1. Change #252002

   Category	ffmpeg
   Changed by	Ruikai Peng <ruikaiohnoyoudont@pwno.io>
   Changed at	Fri 12 Dec 2025 20:25:21
   Repository	https://git.ffmpeg.org/ffmpeg.git
   Project	ffmpeg
   Branch	master
   Revision	cc4367026818bbfe19dabdbb535ce6bc4bdf7b79

   Comments

   avfilter/x86/vf_noise: Use unaligned access
   Regression since: 3ba570de8b666f5ae274b99d33cf4d4628cc385b (port from MMX to SSE2).
   
   The SSE2 inline asm in libavfilter/x86/vf_noise.c (line_noise_sse2 and
   line_noise_avg_sse2) uses aligned loads/stores (movdqa, movntdq) but never
   checks pointer alignment. When the filter reuses an input frame (common
   path when av_frame_is_writable() is true), it may receive misaligned data
   from upstream filters that adjust frame->data[i] in place, notably vf_crop:
   
   - vf_crop adjusts plane pointers by arbitrary byte offsets
   (frame->data[plane] += ...), so an x offset of 1 on 8-bit formats produces
   a 1‑byte misalignment.
   - The noise filter then calls the SSE2 path directly on those pointers
   without realigning or falling back.
   
   Repro on x86_64/SSE2 (current HEAD at that commit):
   
   ./ffmpeg -v error -f lavfi -i testsrc=s=320x240:rate=1 \
   -vf "format=yuv420p,crop=w=319:x=1:h=240:exact=1,noise=alls=50" \
   -frames:v 1 -f null -
   
   This crashes with SIGSEGV at the aligned load in line_noise_sse2 (movdqa
   (%r9,%rax),%xmm0; effective address misaligned by 1 byte).
   
   Impact: denial of service via crafted filtergraphs (e.g., crop + noise).
   Applies to planar 8-bit formats where upstream filters can shift data
   pointers without reallocating.
   
   Found-by: Pwno OSS Team

   Changed files

   • libavfilter/x86/vf_noise.c