Vulnerable.avi -- Valgrind Trace

$ valgrind avconv -i vulnerable.avi -f null -


==13359== Memcheck, a memory error detector
==13359== Copyright (C) 2002-2011, and GNU GPL'd, by Julian Seward et al.
==13359== Using Valgrind-3.7.0 and LibVEX; rerun with -h for copyright info
==13359== Command: avconv -i vulnerable.avi -f null -
==13359==
avconv version v0.7-1899-ga8fe9a7, Copyright (c) 2000-2011 the Libav developers
  built on Nov 21 2011 23:29:36 with gcc 4.5.2
Input #0, avi, from 'vulnerable.avi':
  Metadata:
    encoder         : VirtualDubMod 1.5.1.1a (build 1639/release)
  Duration: 00:00:00.42, start: 0.000000, bitrate: 1769 kb/s
    Stream #0.0: Video: loco, yuv422p, 188x128, 7.04 tbr, 7.04 tbn, 7.04 tbc
[buffer @ 0x4247a80] w:188 h:128 pixfmt:yuv422p
Output #0, null, to 'pipe:':
  Metadata:
    encoder         : Lavf53.15.0
    Stream #0.0: Video: rawvideo, yuv422p, 188x128, q=2-31, 200 kb/s, 90k tbn, 7.04 tbc
Stream mapping:
  Stream #0:0 -> #0:0 (loco -> rawvideo)
Press ctrl-c to stop encoding
==13359== Invalid read of size 4
==13359==    at 0x838E248: loco_decode_plane.clone.4 (bswap.h:42)
==13359==    by 0x838EBE4: decode_frame (loco.c:184)
==13359==    by 0x84A653D: avcodec_decode_video2 (utils.c:739)
==13359==    by 0x807D10F: output_packet (avconv.c:1626)
==13359==    by 0x40ACE36: (below main) (libc-start.c:226)
==13359==  Address 0x423b829 is 28,777 bytes inside a block of size 28,780 alloc'd
==13359==    at 0x40263D1: memalign (vg_replace_malloc.c:694)
==13359==    by 0x402642E: posix_memalign (vg_replace_malloc.c:835)
==13359==    by 0x86708F0: av_malloc (mem.c:83)
==13359==    by 0x8179C77: av_new_packet (avpacket.c:64)
==13359==    by 0x81461C6: av_get_packet (utils.c:269)
==13359==    by 0x80A74FC: avi_read_packet (avidec.c:1065)
==13359==    by 0x8146FD6: av_read_packet (utils.c:723)
==13359==    by 0x7FFFFFFF: ???
==13359==
==13359== Invalid read of size 4
==13359==    at 0x838E1F2: loco_decode_plane.clone.4 (bswap.h:42)
==13359==    by 0x838EBE4: decode_frame (loco.c:184)
==13359==    by 0x84A653D: avcodec_decode_video2 (utils.c:739)
==13359==    by 0x807D10F: output_packet (avconv.c:1626)
==13359==    by 0x40ACE36: (below main) (libc-start.c:226)
==13359==  Address 0x423b84d is not stack'd, malloc'd or (recently) free'd
==13359==
==13359== Invalid read of size 4
==13359==    at 0x838E3F1: loco_decode_plane.clone.4 (bswap.h:42)
==13359==    by 0x838EBE4: decode_frame (loco.c:184)
==13359==    by 0x84A653D: avcodec_decode_video2 (utils.c:739)
==13359==    by 0x807D10F: output_packet (avconv.c:1626)
==13359==    by 0x40ACE36: (below main) (libc-start.c:226)
==13359==  Address 0x423d3dd is 6,397 bytes inside a block of size 19,024 free'd
==13359==    at 0x4026E46: free (vg_replace_malloc.c:427)
==13359==    by 0x8084F6F: uninit_opts (cmdutils.c:67)
==13359==    by 0x807774E: reset_options (avconv.c:391)
==13359==    by 0x8082948: opt_output_file (avconv.c:3825)
==13359==
==13359== Invalid read of size 4
==13359==    at 0x838DD38: loco_decode_plane.clone.4 (bswap.h:42)
==13359==    by 0x838EC37: decode_frame (loco.c:187)
==13359==    by 0x84A653D: avcodec_decode_video2 (utils.c:739)
==13359==    by 0x807D10F: output_packet (avconv.c:1626)
==13359==    by 0x40ACE36: (below main) (libc-start.c:226)
==13359==  Address 0x0 is not stack'd, malloc'd or (recently) free'd
==13359==
==13359==
==13359== Process terminating with default action of signal 11 (SIGSEGV)
==13359==  Access not within mapped region at address 0x0
==13359==    at 0x838DD38: loco_decode_plane.clone.4 (bswap.h:42)
==13359==    by 0x838EC37: decode_frame (loco.c:187)
==13359==    by 0x84A653D: avcodec_decode_video2 (utils.c:739)
==13359==    by 0x807D10F: output_packet (avconv.c:1626)
==13359==    by 0x40ACE36: (below main) (libc-start.c:226)
==13359==  If you believe this happened as a result of a stack
==13359==  overflow in your program's main thread (unlikely but
==13359==  possible), you can try to increase the size of the
==13359==  main thread stack using the --main-stacksize= flag.
==13359==  The main thread stack size used in this run was 8388608.
==13359==
==13359== HEAP SUMMARY:
==13359==     in use at exit: 431,194 bytes in 55 blocks
==13359==   total heap usage: 127 allocs, 72 frees, 649,456 bytes allocated
==13359==
==13359== LEAK SUMMARY:
==13359==    definitely lost: 0 bytes in 0 blocks
==13359==    indirectly lost: 0 bytes in 0 blocks
==13359==      possibly lost: 0 bytes in 0 blocks
==13359==    still reachable: 431,194 bytes in 55 blocks
==13359==         suppressed: 0 bytes in 0 blocks
==13359== Rerun with --leak-check=full to see details of leaked memory
==13359==
==13359== For counts of detected and suppressed errors, rerun with: -v
==13359== ERROR SUMMARY: 158417 errors from 4 contexts (suppressed: 17 from 6)
Segmentation fault