oggdec goes into an infinite loop while processing file

[Steve Beattie]

Binary package hint: vorbis-tools

oggdec goes into an infinite loop while processing the file at http://bazaar.launchpad.net/%7Eubuntu-bugcontrol/qa-regression-testing/master/annotate/head%3A/scripts/libvorbis/011.ogg:

  $ oggdec libvorbis/011.ogg -o /tmp/011.ogg-converted.wav
  oggdec from vorbis-tools 1.2.0
  Decoding "libvorbis/011.ogg" to "/tmp/011.ogg-converted.wav"
  Warning: hole in data (-137)
  Warning: hole in data (-137)
  Warning: hole in data (-137)
  [....]

The test file in question was generated as part of http://redpig.dataspill.org/2008/05/multiple-vulnerabilities-in-ogg-tremor.html

ProblemType: Bug
DistroRelease: Ubuntu 10.10
Package: vorbis-tools 1.2.0-6build1
ProcVersionSignature: Ubuntu 2.6.35-19.26-generic 2.6.35.3
Uname: Linux 2.6.35-19-generic x86_64
Architecture: amd64
Date: Thu Sep 2 15:11:57 2010
InstallationMedia: Ubuntu 10.10 "Maverick Meerkat" - Alpha amd64 (20100827)
ProcEnviron:
 LANG=en_US.UTF-8
 SHELL=/bin/bash
SourcePackage: vorbis-tools

[Steve Beattie (sbeattie)]

The version of oggdec/vorbis-tools in lucid does not have this problem, it seems to have been introduced in maverick.