Open Bug 1447058 Opened 7 years ago Updated 2 years ago

UBSan: vorbis: shift exponent is negative lib/info.c:218

Categories

(Core :: Audio/Video: Playback, defect, P2)

defect

Tracking

()

People

(Reporter: tsmith, Unassigned)

References

(Blocks 1 open bug)

Details

(Keywords: csectype-undefined, testcase)

Attachments

(1 file)

Attached video testcase.ogg (deleted) —
Found in vorbis commit d22c3ab info.c:218:22: runtime error: shift exponent -1 is negative #0 0x53396c in _vorbis_unpack_info lib/info.c:218:22 #1 0x53396c in vorbis_synthesis_headerin lib/info.c:401 #2 0x4eaeef in main examples/decoder_example.c:128:8 #3 0x7f32bc06482f in __libc_start_main /build/glibc-Cl5G7W/glibc-2.23/csu/../csu/libc-start.c:291 #4 0x419528 in _start (decoder_example+0x419528)
And a third one. Again feel free to redirect to someone else who knows the vorbis code and has cycles.
Rank: 15
Flags: needinfo?(tdaede)
Priority: -- → P2
Will be fixed in libvorbis 1.3.7.
Depends on: 1463915
Flags: needinfo?(tdaede)
Severity: normal → S3
Blocks: ubsan
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Created:
Updated:
Size: