Exiv2

libexiv2 crashes on some AVI video files in my collection. MPlayer does not report any problem with the file. As far as I can remember, the video has been rotated/reencoded using mencoder.
I've first encountered this because KPhotoAlbum crashed while reading exif information from a video, but it can be observed using the exiv2 commandline tool as well:

zing@mani:~/tmp/kphotoalbum/build$ exiv2 crash-exiv2.avi
*** Error in `exiv2': free(): invalid next size (fast): 0x0000000000bfca30 ***
Aborted (core dumped)
zing@mani:~/tmp/kphotoalbum/build$ echo "bt" | gdb --quiet exiv2 core
Reading symbols from exiv2...(no debugging symbols found)...done.
[New LWP 7618]
Core was generated by `exiv2 crash-exiv2.avi'.
Program terminated with signal SIGABRT, Aborted.
#0  0x00007fc4222c0107 in __GI_raise (sig=sig@entry=6) at ../nptl/sysdeps/unix/sysv/linux/raise.c:56
56      ../nptl/sysdeps/unix/sysv/linux/raise.c: No such file or directory.
(gdb) #0  0x00007fc4222c0107 in __GI_raise (sig=sig@entry=6) at ../nptl/sysdeps/unix/sysv/linux/raise.c:56
#1  0x00007fc4222c14e8 in __GI_abort () at abort.c:89
#2  0x00007fc4222fe044 in __libc_message (do_abort=do_abort@entry=1, fmt=fmt@entry=0x7fc4223f0c60 "*** Error in `%s': %s: 0x%s ***\n") at ../sysdeps/posix/libc_fatal.c:175
#3  0x00007fc42230381e in malloc_printerr (action=1, str=0x7fc4223f0e20 "free(): invalid next size (fast)", ptr=<optimized out>) at malloc.c:4996
#4  0x00007fc422304526 in _int_free (av=<optimized out>, p=<optimized out>, have_lock=0) at malloc.c:3840
#5  0x00007fc422f914f9 in Exiv2::RiffVideo::infoTagsHandler() () from /usr/lib/x86_64-linux-gnu/libexiv2.so.13
#6  0x00007fc422f95355 in Exiv2::RiffVideo::decodeBlock() () from /usr/lib/x86_64-linux-gnu/libexiv2.so.13
#7  0x00007fc422f94f88 in Exiv2::RiffVideo::tagDecoder(Exiv2::DataBuf&, unsigned long) () from /usr/lib/x86_64-linux-gnu/libexiv2.so.13
#8  0x00007fc422f95355 in Exiv2::RiffVideo::decodeBlock() () from /usr/lib/x86_64-linux-gnu/libexiv2.so.13
#9  0x00007fc422f956f8 in Exiv2::RiffVideo::readMetadata() () from /usr/lib/x86_64-linux-gnu/libexiv2.so.13
#10 0x00000000004177ab in ?? ()
#11 0x000000000041a0fc in ?? ()
#12 0x00000000004057fe in ?? ()
#13 0x00007fc4222acb45 in __libc_start_main (main=0x4056e0, argc=2, argv=0x7fff457c97e8, init=<optimized out>, fini=<optimized out>, rtld_fini=<optimized out>, stack_end=0x7fff457c97d8) at libc-start.c:287
#14 0x0000000000405aea in ?? ()
(gdb) quit

Some information on the video:

$ mplayer -really-quiet -identify -frames 0 crash-exiv2.avi 
ID_VIDEO_ID=0
ID_AUDIO_ID=0
ID_CLIP_INFO_NAME0=date
ID_CLIP_INFO_VALUE0=$2
ID_CLIP_INFO_NAME1=encoder
ID_CLIP_INFO_VALUE1=Lavf53.32.100
ID_CLIP_INFO_N=2
ID_FILENAME=crash-exiv2.avi
ID_DEMUXER=lavfpref
ID_VIDEO_FORMAT=MP4V
ID_VIDEO_BITRATE=0
ID_VIDEO_WIDTH=240
ID_VIDEO_HEIGHT=320
ID_VIDEO_FPS=15.000
ID_VIDEO_ASPECT=0.7500
ID_AUDIO_FORMAT=1
ID_AUDIO_BITRATE=64000
ID_AUDIO_RATE=8000
ID_AUDIO_NCH=1
ID_START_TIME=0.00
ID_LENGTH=1.27
ID_SEEKABLE=1
ID_CHAPTERS=0
ID_VIDEO_CODEC=ffodivx
ID_AUDIO_BITRATE=64000
ID_AUDIO_RATE=8000
ID_AUDIO_NCH=1
ID_AUDIO_CODEC=pcm
ID_EXIT=EOF

I'm using Debian unstable with libexiv2-13:

$ dpkg -l exiv2 libexiv2-13 libexiv2-dev
Desired=Unknown/Install/Remove/Purge/Hold
| Status=Not/Inst/Conf-files/Unpacked/halF-conf/Half-inst/trig-aWait/Trig-pend
|/ Err?=(none)/Reinst-required (Status,Err: uppercase=bad)
||/ Name                                                  Version                         Architecture                    Description
+++-=====================================================-===============================-===============================-===============================================================================================================
ii  exiv2                                                 0.24-4                          amd64                           EXIF/IPTC metadata manipulation tool
ii  libexiv2-13:amd64                                     0.24-4                          amd64                           EXIF/IPTC metadata manipulation library
ii  libexiv2-dev                                          0.24-4                          amd64                           EXIF/IPTC metadata manipulation library - development files