Bug#395049: vorbis-tools: ogginfo segfaults on a particular ogg

[Keith Willoughby]

Package: vorbis-tools
Version: 1.1.1-6
Severity: important

ogginfo segfaults on a particular ogg. I downloaded the source and added
a few printfs, and tracked down the apparent source of the problem - the call 
to vorbis_synthesis_headerin in the line

if(vorbis_synthesis_headerin(&inf->vi, &inf->vc, &packet) < 0)

in the vorbis_process function in ogginfo2.c (line 468). I didn't fancy
also trying to debug the vorbis libraries :-)

The problem ogg can be found at http://flat222.org/keith/test.ogg
(for the time-being, anyway)

I have a feeling that the bug is in libvorbis - amarok and xmms also
crash on this ogg - but I don't have the time or patience to compile
those behemoths to confirm this, sorry, so I've filed the bug on
vorbis-tools.

-- System Information:
Debian Release: testing/unstable
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.17-1-686
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8)

Versions of packages vorbis-tools depends on:
ii  libao2                        0.8.6-4    Cross Platform Audio Output Librar
ii  libc6                         2.3.6-15   GNU C Library: Shared libraries
ii  libcurl3-gnutls               7.15.5-1   Multi-protocol file transfer libra
ii  libflac7                      1.1.2-5    Free Lossless Audio Codec - runtim
ii  libogg0                       1.1.3-2    Ogg Bitstream Library
ii  liboggflac3                   1.1.2-5    Free Lossless Audio Codec - runtim
ii  libspeex1                     1.1.12-2   The Speex Speech Codec
ii  libvorbis0a                   1.1.2-1    The Vorbis General Audio Compressi
ii  libvorbisenc2                 1.1.2-1    The Vorbis General Audio Compressi
ii  libvorbisfile3                1.1.2-1    The Vorbis General Audio Compressi

vorbis-tools recommends no packages.

-- no debconf information