mplayer segfaults in ff_draw_horiz_band

[Matt Mullins]

After the 6:9.20-0ubuntu0.14.04.1 security update, playing an XVID stream in an AVI container segfaults decoding video frames. Reverting to 6:9.11-2ubuntu2 works -- I can't find a .deb for the previous 9.18 release, but this system was playing videos without issue until recently.

In GDB:
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1".
MPlayer 1.1-4.8 (C) 2000-2012 MPlayer Team
mplayer: could not connect to socket
mplayer: No such file or directory
Failed to open LIRC support. You will not be able to use your remote control.

libavformat version 54.20.4 (external)
Mismatching header version 54.20.3
AVI file format detected.
[aviheader] Video stream found, -vid 0
[aviheader] Audio stream found, -aid 1
VIDEO: [XVID] 624x352 12bpp 23.976 fps 989.1 kbps (120.7 kbyte/s)
Clip info:
 Software: VirtualDubMod 1.5.10.2 (build 2540/release)
Load subtitles in ./
Failed to open VDPAU backend libvdpau_i965.so: cannot open shared object file: No such file or directory
[vdpau] Error when calling vdp_device_create_x11: 1
==========================================================================
Opening video decoder: [ffmpeg] FFmpeg's libavcodec codec family
libavcodec version 54.35.1 (external)
Mismatching header version 54.35.0
Unsupported AVPixelFormat 53
Selected video codec: [ffodivx] vfm: ffmpeg (FFmpeg MPEG-4)
==========================================================================
==========================================================================
Requested audio codec family [mpg123] (afm=mpg123) not available.
Enable it at compilation.
Opening audio decoder: [ffmpeg] FFmpeg/libavcodec audio decoders
AUDIO: 48000 Hz, 2 ch, floatle, 134.6 kbit/4.38% (ratio: 16819->384000)
Selected audio codec: [ffmp3float] afm: ffmpeg (FFmpeg MPEG layer-3 audio)
==========================================================================
[New Thread 0x7fffe363c700 (LWP 20856)]
AO: [pulse] 48000Hz 2ch floatle (4 bytes per sample)
Starting playback...
Movie-Aspect is 1.77:1 - prescaling to correct movie aspect.
VO: [xv] 624x352 => 624x352 Planar YV12

Program received signal SIGSEGV, Segmentation fault.
0x000000000056edf7 in fast_memcpy ()
(gdb) bt
#0 0x000000000056edf7 in fast_memcpy ()
#1 0x0000000000498119 in ?? ()
#2 0x0000000000571c7c in ?? ()
#3 0x00007ffff3ca0a83 in ff_draw_horiz_band (avctx=0xbc68c0, dsp=dsp@entry=0xbc8428, cur=cur@entry=0xbc7e50, last=last@entry=0xbc70d0, y=0, h=<optimized out>, picture_structure=3, first_field=0, draw_edges=1, low_delay=0,
    v_edge_pos=352, h_edge_pos=624) at /build/libav-dVKvK5/libav-9.20/libavcodec/mpegvideo.c:2529
#4 0x00007ffff3ca0d22 in ff_mpeg_draw_horiz_band (s=s@entry=0xbc6ce0, y=<optimized out>, h=h@entry=16) at /build/libav-dVKvK5/libav-9.20/libavcodec/mpegvideo.c:2537
#5 0x00007ffff3b89f86 in decode_slice (s=s@entry=0xbc6ce0) at /build/libav-dVKvK5/libav-9.20/libavcodec/h263dec.c:259
#6 0x00007ffff3b8ab78 in ff_h263_decode_frame (avctx=0xbc68c0, data=0xbc66e0, got_frame=0x7fffffffd024, avpkt=<optimized out>) at /build/libav-dVKvK5/libav-9.20/libavcodec/h263dec.c:651
#7 0x00007ffff3d47433 in avcodec_decode_video2 (avctx=0xbc68c0, picture=0xbc66e0, got_picture_ptr=0x7fffffffd024, avpkt=0x7fffffffd030) at /build/libav-dVKvK5/libav-9.20/libavcodec/utils.c:1288
#8 0x0000000000572342 in ?? ()
#9 0x00000000004c35a1 in decode_video ()
#10 0x000000000043f4a4 in ?? ()
#11 0x00000000004337d6 in main ()