Note: This bug is displayed in read-only format because the product is no longer active in Red Hat Bugzilla.
For bugs related to Red Hat Enterprise Linux 5 product line. The current stable release is 5.10. For Red Hat Enterprise Linux 6 and above, please visit Red Hat JIRA https://issues.redhat.com/secure/CreateIssue!default.jspa?pid=12332745 to report new issues.

Bug 452092

Summary: ogg123: crash when libvorbis rejects incorrect stream
Product: Red Hat Enterprise Linux 5 Reporter: Tomas Hoger <thoger>
Component: vorbis-toolsAssignee: Kamil Dudka <kdudka>
Status: CLOSED WONTFIX QA Contact: desktop-bugs <desktop-bugs>
Severity: low Docs Contact:
Priority: low    
Version: 5.2CC: ovasik
Target Milestone: rc   
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2011-08-10 13:56:11 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
Patch for ogg123 to stop reading stream when decoder reports stream error none

Description Tomas Hoger 2008-06-19 10:29:26 UTC 
Description of problem:

ogg123 does not properly handle errors reported by vorbis decoder.  If vorbis
detects stream error, ogg123 attempts to continue reading the stream, resulting
in a crash.

Version-Release number of selected component (if applicable):

vorbis-tools-1.1.1-3.el5

Steps to Reproduce:

1. get 003.ogg, 004.ogg or 005.ogg from
   http://static.dataspill.org/releases/ogg/examples/

2. try to play it in ogg123

   $ ogg123 -d null 003.ogg

   Audio Device:   Null output

   Floating point exception

Expected results:

ogg123 should report error, if error was detected by vorbis.

Additional info:

Probably also affects all prior vorbis-tools versions shipped in Red Hat
Enterprise Linux (confirmed on RHEL3-RHEL5).

Fixed upstream as part of the following commit (last hunk):

  https://trac.xiph.org/changeset/12188

Proposed minimal patch attached.
Comment 1 Tomas Hoger 2008-06-19 10:29:26 UTC 
Created attachment 309842 [details]
Patch for ogg123 to stop reading stream when decoder reports stream error
Comment 2 RHEL Program Management 2008-07-21 23:01:05 UTC 
This request was evaluated by Red Hat Product Management for
inclusion, but this component is not scheduled to be updated in
the current Red Hat Enterprise Linux release. If you would like
this request to be reviewed for the next minor release, ask your
support representative to set the next rhel-x.y flag to "?".
Comment 3 RHEL Program Management 2009-03-26 16:46:44 UTC 
This request was evaluated by Red Hat Product Management for
inclusion, but this component is not scheduled to be updated in
the current Red Hat Enterprise Linux release. If you would like
this request to be reviewed for the next minor release, ask your
support representative to set the next rhel-x.y flag to "?".
Comment 8 Kamil Dudka 2011-08-10 13:56:11 UTC 
Thanks for the bug report.  We are sorry, but it is too late in the RHEL-5
release cycle.  I am closing this bugzilla WONTFIX.  If the issue is critical
for your business, please contact Red Hat Product Support - and inform them
about this bugzilla.