Bug#635906: SIGFPE from /usr/lib/libvorbisfile.so.3

[Vincent Bernat]

OoO En  ce début  d'après-midi ensoleillé du  vendredi 29  juillet 2011,
vers 15:15, Edgar  Antonio Palma de la Cruz  <xbytemx at gmail.com> (by way
of Edgar Antonio Palma de la Cruz <xbytemx at gmail.com>) disait :

> Program received signal SIGFPE, Arithmetic exception.
> 0x00007fffe7ca6bb5 in ov_read_filter (vf=0x1fc3120, buffer=0x1ffdb80
> "", length=<value optimized out>, bigendianp=0, word=0, sgned=1,
> bitstream=0x7fffffffbc38, filter=0, filter_param=0x0) at
> vorbisfile.c:1905 1905	vorbisfile.c: No existe el fichero o el
> directorio. in vorbisfile.c 
> (gdb) 

> I had installed libvorbis-dbg as you can see.
> The line 1905 of vorbisfile.c :

> $ more +1901 -8 libvorbis-1.3.2/lib/vorbisfile.c 

>     long channels=ov_info(vf,-1)->channels;
>     long bytespersample=word * channels;
>     vorbis_fpu_control fpu;
>     if(samples>length/bytespersample)samples=length/bytespersample;

>     if(samples <= 0)
>       return OV_EINVAL;

Here is a way to reproduce it:

import ogg.vorbis
f = ogg.vorbis.VorbisFile("/usr/share/games/balazar3/sounds/oceane.ogg")
f.read(16384)

oceane.ogg is in balazar3-common package.

/usr/share/games/balazar3/sounds/oceane.ogg:  Ogg  data,  Vorbis  audio,
mono, 44100 Hz, ~96001 bps, created by: Xiph.Org libVorbis I (1.0.1)

This bugs breaks balazar3 and balazar-brothers.

Here is backtrace:
#0  0x00007f2bcfdfabb5 in ov_read_filter (vf=0x1f253f0, buffer=
    0x2021db0 "'''\377'''\377'''\377(('\377(('\377(((\377(((\377(((\377(((\377(((\377()(\377(((\377'('\377&''\377&&&\377%&&\377&&&\377'''\377'''\377(((\377()(\377())\377())\377())\377)))\377))*\377***\377*+*\377)**\377)*)\377)))\377())\377())\377)*)\377)*)\377)*)\377)*)\377*+*\377+++\377+,,\377+,,\377*+,\377')*\377 \"$\377\026\032\034\377\016\021\024\377\n\r\020\377\n\r\022\377\r\021\026\377\020\024\032\377"..., length=<value optimized out>, 
    bigendianp=0, word=0, sgned=1, bitstream=0x7fff09e26668, filter=0, filter_param=0x0) at vorbisfile.c:1905
        bytespersample = 0
        hs = <value optimized out>
        pcm = <value optimized out>
        samples = 576

-- 
Vincent Bernat ☯ http://vincent.bernat.im

printk("Illegal format on cdrom.  Pester manufacturer.\n"); 
	2.2.16 /usr/src/linux/fs/isofs/inode.c
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 197 bytes
Desc: not available
URL: <http://lists.alioth.debian.org/pipermail/pkg-xiph-maint/attachments/20110807/65b287bf/attachment.pgp>