Comment 44 for bug 273075

Interestingly, after installing gpac_0.4.4-0.3ubuntu2.1~ppa1_i386.deb on Intrepid I still get the buffer overflow:

$ MP4Box -isma -nodrop -new -brand mp42 -add video.mp4:fmt=h264:fps=25#video -add audio.5G5KRU:fmt=aac:lang=eng:#audio -chap chapters.004KRU movie.mp4
[iso file] Box "avcC" size 8 invalid (read 433)
[iso file] Box "avcC" size 8 invalid (read 433)
IsoMedia import - track ID 1 - Video (size 720 x 48)
AAC import - sample rate 48000 - MPEG-4 audio - 2 channels
Converting to ISMA Audio-Video MP4 file...
*** buffer overflow detected ***: MP4Box terminated
======= Backtrace: =========
/lib/tls/i686/cmov/libc.so.6(__fortify_fail+0x48)[0xb7d126d8]
/lib/tls/i686/cmov/libc.so.6[0xb7d10800]
/usr/lib/libgpac-0.4.4.so(chpl_New+0x50)[0xb7e97d30]
/usr/lib/libgpac-0.4.4.so(gf_isom_box_new+0x715)[0xb7eb61c5]
/usr/lib/libgpac-0.4.4.so(gf_isom_add_chapter+0x1fc)[0xb7ecab3c]
/usr/lib/libgpac-0.4.4.so(gf_media_import_chapters+0xbff)[0xb7f1fabf]
MP4Box[0x80524c9]
/lib/tls/i686/cmov/libc.so.6(__libc_start_main+0xe5)[0xb7c2e685]
MP4Box[0x804cea1]
======= Memory map: ========
08048000-0806f000 r-xp 00000000 08:03 530817 /usr/bin/MP4Box
0806f000-08071000 r--p 00026000 08:03 530817 /usr/bin/MP4Box
08071000-08072000 rw-p 00028000 08:03 530817 /usr/bin/MP4Box
08dd3000-08ead000 rw-p 08dd3000 00:00 0 [heap]
b7953000-b7979000 rw-p b79e9000 00:00 0
b7a22000-b7a2f000 r-xp 00000000 08:03 122181 /lib/libgcc_s.so.1
b7a2f000-b7a30000 r--p 0000c000 08:03 122181 /lib/libgcc_s.so.1
b7a30000-b7a31000 rw-p 0000d000 08:03 122181 /lib/libgcc_s.so.1
b7a41000-b7a42000 rw-p b7a41000 00:00 0
b7a42000-b7a44000 r-xp 00000000 08:03 139465 /lib/tls/i686/cmov/libdl-2.8.90.so
b7a44000-b7a45000 r--p 00001000 08:03 139465 /lib/tls/i686/cmov/libdl-2.8.90.so
b7a45000-b7a46000 rw-p 00002000 08:03 139465 /lib/tls/i686/cmov/libdl-2.8.90.so
b7a46000-b7a5b000 r-xp 00000000 08:03 139496 /lib/tls/i686/cmov/libpthread-2.8.90.so
b7a5b000-b7a5c000 r--p 00014000 08:03 139496 /lib/tls/i686/cmov/libpthread-2.8.90.so
b7a5c000-b7a5d000 rw-p 00015000 08:03 139496 /lib/tls/i686/cmov/libpthread-2.8.90.so
b7a5d000-b7a60000 rw-p b7a5d000 00:00 0
b7a60000-b7b93000 r-xp 00000000 08:03 545810 /usr/lib/i686/cmov/libcrypto.so.0.9.8
b7b93000-b7b9b000 r--p 00132000 08:03 545810 /usr/lib/i686/cmov/libcrypto.so.0.9.8
b7b9b000-b7ba8000 rw-p 0013a000 08:03 545810 /usr/lib/i686/cmov/libcrypto.so.0.9.8
b7ba8000-b7bac000 rw-p b7ba8000 00:00 0
b7bac000-b7bee000 r-xp 00000000 08:03 545814 /usr/lib/i686/cmov/libssl.so.0.9.8
b7bee000-b7bef000 r--p 00041000 08:03 545814 /usr/lib/i686/cmov/libssl.so.0.9.8
b7bef000-b7bf2000 rw-p 00042000 08:03 545814 /usr/lib/i686/cmov/libssl.so.0.9.8
b7bf2000-b7c16000 r-xp 00000000 08:03 139467 /lib/tls/i686/cmov/libm-2.8.90.so
b7c16000-b7c17000 r--p 00023000 08:03 139467 /lib/tls/i686/cmov/libm-2.8.90.so
b7c17000-b7c18000 rw-p 00024000 08:03 139467 /lib/tls/i686/cmov/libm-2.8.90.so
b7c18000-b7d70000 r-xp 00000000 08:03 139114 /lib/tls/i686/cmov/libc-2.8.90.so
b7d70000-b7d72000 r--p 00158000 08:03 139114 /lib/tls/i686/cmov/libc-2.8.90.so
b7d72000-b7d73000 rw-p 0015a000 08:03 139114 /lib/tls/i686/cmov/libc-2.8.90.so
b7d73000-b7d76000 rw-p b7d73000 00:00 0
b7d76000-b7d8a000 r-xp 00000000 08:03 309522 /usr/lib/libz.so.1.2.3.3
b7d8a000-b7d8c000 rw-p 00013000 08:03 309522 /usr/lib/libz.so.1.2.3.3
b7d8c000-b8006000 r-xp 00000000 08:03 407657 /usr/lib/libgpac-0.4.4.so
b8006000-b8007000 r--p 00279000 08:03 407657 /usr/lib/libgpac-0.4.4.so
b8007000-b800b000 rw-p 0027a000 08:03 407657 /usr/lib/libgpac-0.4.4.so
b800b000-b800e000 rw-p b800b000 00:00 0
b801b000-b801f000 rw-p b801b000 00:00 0
b801f000-b8039000 r-xp 00000000 08:03 122179 /lib/ld-2.8.90.so
b8039000-b803a000 r-xp b8039000 00:00 0 [vdso]
b803a000-b803b000 r--p 0001a000 08:03 122179 /lib/ld-2.8.90.so
b803b000-b803c000 rw-p 0001b000 08:03 122179 /lib/ld-2.8.90.so
bfd0f000-bfd3c000 rw-p bffd3000 00:00 0 [stack]
Aborted

video.mp4 was generated prior to this as follows:
$ mencoder -nocache -noskip -mc 0 -nosound -ovc copy -of lavf -lavfopts format=mp4 -o video.mp4 video.BQ9VRU
MEncoder 2:1.0~rc2-0ubuntu17 (C) 2000-2007 MPlayer Team
CPU: AMD Athlon(tm) XP 2600+ (Family: 6, Model: 8, Stepping: 1)
CPUflags: Type: 6 MMX: 1 MMX2: 1 3DNow: 1 3DNow2: 1 SSE: 1 SSE2: 0
Compiled with runtime CPU detection.
success: format: 0 data: 0x0 - 0x2c6482
AVI file format detected.
[aviheader] Video stream found, -vid 0
[aviheader] Audio stream found, -aid 1
VIDEO: [h264] 720x48 24bpp 25.000 fps 156.6 kbps (19.1 kbyte/s)
[V] filefmt:3 fourcc:0x34363268 size:720x48 fps:25.00 ftime:=0.0400
** MUXER_LAVF *****************************************************************
REMEMBER: MEncoder's libavformat muxing is presently broken and can generate
INCORRECT files in the presence of B frames. Moreover, due to bugs MPlayer
will play these INCORRECT files as if nothing were wrong!
*******************************************************************************
OK, exit
videocodec: framecopy (720x48 24bpp fourcc=34363268)
VIDEO CODEC ID: 28
Writing header...
Writing index...04f (99%) 0.00fps Trem: 0min 1mb A-V:0.000 [156:0]

Video stream: 156.585 kbit/s (19573 B/s) size: 1568981 bytes 80.160 secs 2004 frames