Bug 452092 - ogg123: crash when libvorbis rejects incorrect stream
ogg123: crash when libvorbis rejects incorrect stream
Status: CLOSED WONTFIX
Product: Red Hat Enterprise Linux 5
Classification: Red Hat
Component: vorbis-tools (Show other bugs)
5.2
All Linux
low Severity low
: rc
: ---
Assigned To: Kamil Dudka
desktop-bugs@redhat.com
:
Depends On:
Blocks:
  Show dependency treegraph
 
Reported: 2008-06-19 06:29 EDT by Tomas Hoger
Modified: 2013-04-12 15:46 EDT (History)
1 user (show)

See Also:
Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of:
Environment:
Last Closed: 2011-08-10 09:56:11 EDT
Type: ---
Regression: ---
Mount Type: ---
Documentation: ---
CRM:
Verified Versions:
Category: ---
oVirt Team: ---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: ---


Attachments (Terms of Use)
Patch for ogg123 to stop reading stream when decoder reports stream error (447 bytes, patch)
2008-06-19 06:29 EDT, Tomas Hoger
no flags Details | Diff

  None (edit)
Description Tomas Hoger 2008-06-19 06:29:26 EDT
Description of problem:

ogg123 does not properly handle errors reported by vorbis decoder.  If vorbis
detects stream error, ogg123 attempts to continue reading the stream, resulting
in a crash.

Version-Release number of selected component (if applicable):

vorbis-tools-1.1.1-3.el5

Steps to Reproduce:

1. get 003.ogg, 004.ogg or 005.ogg from
   http://static.dataspill.org/releases/ogg/examples/

2. try to play it in ogg123

   $ ogg123 -d null 003.ogg

   Audio Device:   Null output

   Floating point exception

Expected results:

ogg123 should report error, if error was detected by vorbis.

Additional info:

Probably also affects all prior vorbis-tools versions shipped in Red Hat
Enterprise Linux (confirmed on RHEL3-RHEL5).

Fixed upstream as part of the following commit (last hunk):

  https://trac.xiph.org/changeset/12188

Proposed minimal patch attached.
Comment 1 Tomas Hoger 2008-06-19 06:29:26 EDT
Created attachment 309842 [details]
Patch for ogg123 to stop reading stream when decoder reports stream error
Comment 2 RHEL Product and Program Management 2008-07-21 19:01:05 EDT
This request was evaluated by Red Hat Product Management for
inclusion, but this component is not scheduled to be updated in
the current Red Hat Enterprise Linux release. If you would like
this request to be reviewed for the next minor release, ask your
support representative to set the next rhel-x.y flag to "?".
Comment 3 RHEL Product and Program Management 2009-03-26 12:46:44 EDT
This request was evaluated by Red Hat Product Management for
inclusion, but this component is not scheduled to be updated in
the current Red Hat Enterprise Linux release. If you would like
this request to be reviewed for the next minor release, ask your
support representative to set the next rhel-x.y flag to "?".
Comment 8 Kamil Dudka 2011-08-10 09:56:11 EDT
Thanks for the bug report.  We are sorry, but it is too late in the RHEL-5
release cycle.  I am closing this bugzilla WONTFIX.  If the issue is critical
for your business, please contact Red Hat Product Support - and inform them
about this bugzilla.

Note You need to log in before you can comment on or make changes to this bug.