Mixxx may crash when importing TagLib ID3v2 APIC frames

Bug #1774790 reported by Uwe Klotz
4
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Mixxx
Fix Released
Critical
Unassigned

Bug Description

Mixxx may crash when reading TagLib ID3v2 APIC frames if their runtime type differs from the compile time expectations, e.g. when an APIC frame is actually not a TagLib::ID3v2::AttachedPictureFrame.

Reported in the forums:
https://www.mixxx.org/forums/viewtopic.php?f=3&t=11872&p=38590#p38585

Solution:
We need to use a dynamic_cast at runtime instead of a static_cast at compile time to identify the actual type of a frame and prevent crashes caused by corrupt or malformed files.

Tags: metadata
Changed in mixxx:
assignee: nobody → Uwe Klotz (uklotzde)
Revision history for this message
Uwe Klotz (uklotzde-deactivatedaccount) wrote :
summary: - Mixxx may crash when reading TagLib ID3v2 frames
+ Mixxx may crash when importing TagLib ID3v2 frames
summary: - Mixxx may crash when importing TagLib ID3v2 frames
+ Mixxx may crash when importing TagLib ID3v2 APIC frames
description: updated
Changed in mixxx:
status: In Progress → Fix Committed
Changed in mixxx:
status: Fix Committed → Fix Released
Revision history for this message
Swiftb0y (swiftb0y) wrote :

Mixxx now uses GitHub for bug tracking. This bug has been migrated to:
https://github.com/mixxxdj/mixxx/issues/9325

lock status: Metadata changes locked and limited to project staff
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.