Bug#886912: ffmpeg segfaults when using sftp

[Scott Cohen]

Package: ffmpeg
Version: 7:3.2.9-1~deb9u1
Severity: important

Dear Maintainer,

To reproduce:
1. Open a file with the -i option and supply it with the sftp:// protocol with an ip and path to the desired file.

The following log displays that using the sftp in at least my configuration will cause a segfault and the ip used was 127.0.1.1:

yetoo at debian:~/Videos$ ffmpeg -loglevel debug -i sftp://127.0.1.1/midlife.mp4
ffmpeg version 3.2.9-1~deb9u1 Copyright (c) 2000-2017 the FFmpeg developers
  built with gcc 6.3.0 (Debian 6.3.0-18) 20170516
  configuration: --prefix=/usr --extra-version='1~deb9u1' --toolchain=hardened --libdir=/usr/lib/x86_64-linux-gnu --incdir=/usr/include/x86_64-linux-gnu --enable-gpl --disable-stripping --enable-avresample --enable-avisynth --enable-gnutls --enable-ladspa --enable-libass --enable-libbluray --enable-libbs2b --enable-libcaca --enable-libcdio --enable-libebur128 --enable-libflite --enable-libfontconfig --enable-libfreetype --enable-libfribidi --enable-libgme --enable-libgsm --enable-libmp3lame --enable-libopenjpeg --enable-libopenmpt --enable-libopus --enable-libpulse --enable-librubberband --enable-libshine --enable-libsnappy --enable-libsoxr --enable-libspeex --enable-libssh --enable-libtheora --enable-libtwolame --enable-libvorbis --enable-libvpx --enable-libwavpack --enable-libwebp --enable-libx265 --enable-libxvid --enable-libzmq --enable-libzvbi --enable-omx --enable-openal --enable-opengl --enable-sdl2 --enable-libdc1394 --enable-libiec61883 --enable-chromaprint --enable-frei0r --enable-libopencv --enable-libx264 --enable-shared
  libavutil      55. 34.101 / 55. 34.101
  libavcodec     57. 64.101 / 57. 64.101
  libavformat    57. 56.101 / 57. 56.101
  libavdevice    57.  1.100 / 57.  1.100
  libavfilter     6. 65.100 /  6. 65.100
  libavresample   3.  1.  0 /  3.  1.  0
  libswscale      4.  2.100 /  4.  2.100
  libswresample   2.  3.100 /  2.  3.100
  libpostproc    54.  1.100 / 54.  1.100
Splitting the commandline.
Reading option '-loglevel' ... matched as option 'loglevel' (set logging level) with argument 'debug'.
Reading option '-i' ... matched as input url with argument 'sftp://127.0.1.1/midlife.mp4'.
Finished splitting the commandline.
Parsing a group of options: global .
Applying option loglevel (set logging level) with argument debug.
Successfully parsed a group of options.
Parsing a group of options: input url sftp://127.0.1.1/midlife.mp4.
Successfully parsed a group of options.
Opening an input file: sftp://127.0.1.1/midlife.mp4.
[NULL @ 0x5609c5fa0d60] Opening 'sftp://127.0.1.1/midlife.mp4' for reading
[sftp @ 0x5609c5fa15c0] No default whitelist set
Segmentation fault


-- System Information:
Debian Release: 9.3
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 4.9.0-4-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_US.utf8, LC_CTYPE=en_US.utf8 (charmap=UTF-8), LANGUAGE=en_US.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages ffmpeg depends on:
ii  libavcodec57    7:3.2.9-1~deb9u1
ii  libavdevice57   7:3.2.9-1~deb9u1
ii  libavfilter6    7:3.2.9-1~deb9u1
ii  libavformat57   7:3.2.9-1~deb9u1
ii  libavresample3  7:3.2.9-1~deb9u1
ii  libavutil55     7:3.2.9-1~deb9u1
ii  libc6           2.24-11+deb9u1
ii  libpostproc54   7:3.2.9-1~deb9u1
ii  libsdl2-2.0-0   2.0.5+dfsg1-2
ii  libswresample2  7:3.2.9-1~deb9u1
ii  libswscale4     7:3.2.9-1~deb9u1
ii  libva1          1.7.3-2

ffmpeg recommends no packages.

Versions of packages ffmpeg suggests:
pn  ffmpeg-doc  <none>

-- no debconf information