Bug#1032082: sox: After security update, sox reports WAV file bits per sample is zero

[Salvatore Bonaccorso <carnil@debian.org>]

Hi,

On Mon, Feb 27, 2023 at 05:02:29PM +0000, Vidicode Support wrote:
> Package: sox
> Version: 14.4.2+git20190427-2+deb11u1
> Severity: normal
> X-Debbugs-Cc: team@security.debian.org
> 
> Dear Maintainer,
> 
> We encounter an error that occurs after upgrading to 14.4.2+git20190427-2+deb11u1,
> and disappears when downgrading to version 14.4.2+git20190427-2.
> Both sox and soxi report an error for wave files with GSM codec,
> that were created using libsndfile.
> 
> $ soxi test.wav
> soxi FAIL formats: can't open input file `test.wav': WAV file bits per sample is zero
> 
> After the error, it does not futher process the file.
> Previously, it would output information about the file or process it (convert it).
> 
> The bits per sample in the wave file header is indeed zero.
> The number of bits per sample is dynamic for the GSM codec.
> Previously sox and soxi would parse and handle such files without problems.

Can you confirm, does that happens as well with the unstable version
(where the patches should be identical)?

Is there a minimal testcase available allowed to share on the bug or a
way to construct one?

Regards,
Salvatore