pkg/47132: MPlayer crashes (VLC is affected potentially too)

[Aleksej Saushev <asau%inbox.ru@localhost>]

>Number:         47132
>Category:       pkg
>Synopsis:       MPlayer crashes (VLC is affected potentially too)
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    pkg-manager
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Sat Oct 27 10:40:01 +0000 2012
>Originator:     asau%inbox.ru@localhost
>Release:        NetBSD 6.0_STABLE
>Organization:
>Environment:
System: NetBSD localhost 6.0_STABLE NetBSD 6.0_STABLE (GENERIC) #0: Thu Oct 18 
11:07:03 MSK 2012 asau@localhost:/usr/obj/sys/arch/i386/compile/GENERIC i386
Architecture: i386
Machine: i386
>Description:
MPlayer stops with its usual diagnostics:

MPlayer interrupted by signal 11 in module: demux_open
- MPlayer crashed by bad usage of CPU/FPU/RAM.
  Recompile MPlayer with --enable-debug and make a 'gdb' backtrace and
  disassembly. Details in DOCS/HTML/en/bugreports_what.html#bugreports_crash.
- MPlayer crashed. This shouldn't happen.

VLC dumps core too, it may be related problem or may be not.
>How-To-Repeat:
Run MPlayer, see it crashed.

Rebuild multimedia/mplayer package with "debug" option on and 
INSTALL_UNSTRIPPED=yes,
replace package, run "gdb --args mplayer <same-file>".
See it crashing with message:

libavformat version 54.6.101 (internal)
libavformat file format detected.

Program received signal SIGSEGV, Segmentation fault.
[Switching to LWP 1]
ff_deblock_v_luma_intra_8_sse2 () at libavcodec/x86/h264_deblock.asm:783
783     DEBLOCK_LUMA_INTRA sse2, v


(gdb) disass
Dump of assembler code for function ff_deblock_v_luma_intra_8_sse2:
   0x086abb40 <+0>:     push   %ebx
   0x086abb41 <+1>:     push   %esi
   0x086abb42 <+2>:     push   %edi
   0x086abb43 <+3>:     mov    0x10(%esp),%eax
   0x086abb47 <+7>:     mov    0x14(%esp),%ecx
   0x086abb4b <+11>:    mov    0x18(%esp),%edx
   0x086abb4f <+15>:    mov    0x1c(%esp),%ebx
   0x086abb53 <+19>:    sub    $0x60,%esp
   0x086abb56 <+22>:    lea    0x0(,%ecx,4),%esi
   0x086abb5d <+29>:    lea    (%ecx,%ecx,2),%edi
   0x086abb60 <+32>:    dec    %edx
   0x086abb61 <+33>:    jl     0x86abf23 <ff_deblock_v_luma_intra_8_sse2.end>
   0x086abb67 <+39>:    neg    %esi
   0x086abb69 <+41>:    dec    %ebx
   0x086abb6a <+42>:    jl     0x86abf23 <ff_deblock_v_luma_intra_8_sse2.end>
   0x086abb70 <+48>:    add    %eax,%esi
=> 0x086abb72 <+50>:    movdqa (%esi,%ecx,2),%xmm0
   0x086abb77 <+55>:    movdqa (%esi,%edi,1),%xmm1
   0x086abb7c <+60>:    movdqa (%eax),%xmm2

(gdb) info reg
eax            0xbfbfc888       -1077950328
ecx            0x10     16
edx            0x4      4
ebx            0x1      1
esp            0xbfbfc7c8       0xbfbfc7c8
ebp            0xbfbfc9b8       0xbfbfc9b8
esi            0xbfbfc848       -1077950392
edi            0x30     48
eip            0x86abb72        0x86abb72 <ff_deblock_v_luma_intra_8_sse2+50>
eflags         0x10287  [ CF PF SF IF RF ]
cs             0x1b     27
ss             0x1f     31
ds             0x1f     31
es             0x1f     31
fs             *value not available*
gs             *value not available*

Something allocates unaligned buffer somewhere.

Since this comes from bundled ffmpeg, other software utilising ffmpeg may be 
affected.
>Fix:
        Please!