vpx_codec_destroy() crashes in vpx_free_frame_buffer() if VP9 was reconfigured from I420 to I444

[GoogleCodeExporter]

What is the expected behavior? What do you see instead?

VP9 is intended to support dynamic reconfiguration of the codec from handling 
I420 frames to I444.

However, if VP9 is created with an initial configuration for I420 frames and 
then reconfigured for I444 then the process will crash when tearing down the 
codec, due to a check somewhere in vpx_free(), called via 
vpx_free_frame_buffer() from vpx_codec_destroy().

Original issue reported on code.google.com by wez@chromium.org on 11 Jan 2015 at 9:30

[GoogleCodeExporter]

Original comment by ya...@google.com on 11 Jan 2015 at 10:00

• Changed state: Assigned

[GoogleCodeExporter]

Original comment by aconve...@google.com on 13 Jan 2015 at 1:02

• Changed state: Started

[GoogleCodeExporter]

http://git.chromium.org/gitweb/?p=webm/libvpx.git;a=commit;h=a79db92c077a0a78f64
0319866686cc053a35aee

Original comment by aconve...@google.com on 3 Feb 2015 at 5:52

• Changed state: Fixed