Red Hat Bugzilla – Bug 452092
ogg123: crash when libvorbis rejects incorrect stream
Last modified: 2013-04-12 15:46:19 EDT
Description of problem:
ogg123 does not properly handle errors reported by vorbis decoder. If vorbis
detects stream error, ogg123 attempts to continue reading the stream, resulting
in a crash.
Version-Release number of selected component (if applicable):
Steps to Reproduce:
1. get 003.ogg, 004.ogg or 005.ogg from
2. try to play it in ogg123
$ ogg123 -d null 003.ogg
Audio Device: Null output
Floating point exception
ogg123 should report error, if error was detected by vorbis.
Probably also affects all prior vorbis-tools versions shipped in Red Hat
Enterprise Linux (confirmed on RHEL3-RHEL5).
Fixed upstream as part of the following commit (last hunk):
Proposed minimal patch attached.
Created attachment 309842 [details]
Patch for ogg123 to stop reading stream when decoder reports stream error
This request was evaluated by Red Hat Product Management for
inclusion, but this component is not scheduled to be updated in
the current Red Hat Enterprise Linux release. If you would like
this request to be reviewed for the next minor release, ask your
support representative to set the next rhel-x.y flag to "?".
Thanks for the bug report. We are sorry, but it is too late in the RHEL-5
release cycle. I am closing this bugzilla WONTFIX. If the issue is critical
for your business, please contact Red Hat Product Support - and inform them
about this bugzilla.