[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#760898: libsndfile1-dev: Ogg/Vorbis writing segfaults with large buffer size



On Tue, 09 Sep 2014 02:39:42 +0200 Frank Heckenbach <f.heckenbach@fh-soft.de> wrote:
Package: libsndfile1-dev
Version: 1.0.25-5
Severity: normal

The following program segfaults when trying to write a large block
to an Ogg/Vorbis file at once. The exact size where it crashes seems
to depend on the parameters (samplerate, channels), but was always
below 0x800000 in my tests.

the issue perists with current versions of libsndfile.

however, the crash is obviously in libvorbis rather than libsndfile.
here's a full backtrace (with debug-packages installed):

```
Program received signal SIGSEGV, Segmentation fault.
0x00007ffff7cd8fcd in _preextrapolate_helper (v=v@entry=0x55555755c800) at block.c:428
428	block.c: No such file or directory.
(gdb) bt
#0 0x00007ffff7cd8fcd in _preextrapolate_helper (v=v@entry=0x55555755c800) at block.c:428 #1 0x00007ffff7cd9c55 in vorbis_analysis_wrote (v=v@entry=0x55555755c800, vals=vals@entry=8388608)
    at block.c:516
#2 0x00007ffff7f3a8fe in vorbis_write_samples (psf=psf@entry=0x5555575592a0,
    odata=odata@entry=0x55555755c580, vdata=vdata@entry=0x55555755c7a0,
    in_frames=in_frames@entry=8388608) at ogg_vorbis.c:758
#3 0x00007ffff7f3ab88 in vorbis_write_f (psf=0x5555575592a0, ptr=0x555555558060 <data>,
    lens=8388608) at ogg_vorbis.c:840
#4 0x00007ffff7f1ae1d in sf_writef_float (sndfile=0x5555575592a0, ptr=0x555555558060 <data>,
    frames=8388608) at sndfile.c:2457
#5  0x00005555555551d2 in main ()
(gdb)
```

shouldn't this bug be re-assigned to libvorbis?

gmsadr
IOhannes

Attachment: OpenPGP_signature
Description: OpenPGP digital signature


Reply to: