Bug 130968 - sox segfaults after run
sox segfaults after run
Product: Fedora
Classification: Fedora
Component: sox (Show other bugs)
powerpc Linux
medium Severity medium
: ---
: ---
Assigned To: Thomas Woerner
Depends On:
Blocks: fedora-ppc
  Show dependency treegraph
Reported: 2004-08-26 04:54 EDT by Paul Nasrat
Modified: 2007-11-30 17:10 EST (History)
1 user (show)

See Also:
Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of:
Last Closed: 2004-08-26 11:35:10 EDT
Type: ---
Regression: ---
Mount Type: ---
Documentation: ---
Verified Versions:
Category: ---
oVirt Team: ---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: ---

Attachments (Terms of Use)

  None (edit)
Description Paul Nasrat 2004-08-26 04:54:27 EDT
Description of problem:

[root@imac ~]# gdb /usr/bin/sox
GNU gdb Red Hat Linux (6.1post-1.20040607.22rh)
Copyright 2004 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and
you are
welcome to change it and/or distribute copies of it under certain
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for
This GDB was configured as "ppc-redhat-linux-gnu"...Using host
libthread_db libr ary "/lib/tls/libthread_db.so.1".
(gdb) run  -v 2 /usr/share/system-config-soundcard/sound-sample.wav -t
ossdsp /d ev/audio
Starting program: /usr/bin/sox -v 2
/usr/share/system-config-soundcard/sound-sam ple.wav -t ossdsp /dev/audio
Program received signal SIGSEGV, Segmentation fault.
_int_free (av=0xffc581c, mem=0x7ffffbe4) at malloc.c:4215
4215          nextsize = chunksize(nextchunk);

Version-Release number of selected component (if applicable):


How reproducible:


Steps to Reproduce:
1. sox  -v 2 /usr/share/system-config-soundcard/sound-sample.wav -t
ossdsp /d ev/audio
Actual results:

Sound plays then segfault

Expected results:

No segfault

Additional info:

Confirmed on two seperate ppc boxes, x86 does not seem to have this
Comment 1 Paul Nasrat 2004-08-26 05:53:42 EDT
  Electric Fence 2.2.0 Copyright (C) 1987-1999 Bruce Perens
ElectricFence Aborting: free(7ffffbd3): address not from malloc().

valgrind snippet:

==25804== Invalid free() / delete / delete[]
==25804==    at 0xFE9903C: free (vg_replace_malloc.c:186)
==25804==    by 0x100173A0: (within /usr/bin/sox)
==25804==    by 0x10004430: (within /usr/bin/sox)
==25804==    by 0xF83F824: __libc_start_main (in /lib/libc-2.3.3.so)
==25804==  Address 0x7FFFFB2B is on thread 1's stack

==25804== malloc/free: 7 allocs, 8 frees, 48736 bytes allocated.

Double free?
Comment 2 Thomas Woerner 2004-08-26 11:35:10 EDT
No, the problem was a free on an unset pointer in the wav file handler.

Fixed in rawhide in rpm sox-12.17.5-2, or newer.

Note You need to log in before you can comment on or make changes to this bug.