Ubuntu

grip buffer overflow in intrepid

Reported by FRLinux on 2008-10-15
54
This bug affects 3 people
Affects Status Importance Assigned to Milestone
Grip
Unknown
Unknown
grip (Fedora)
Fix Released
Unknown
grip (Ubuntu)
Undecided
Unassigned
Intrepid
Undecided
Unassigned

Bug Description

It seems that the latest upgrade of libc (from last night) has now rendered grip unstable, this is the trace I get when the program crashes without finishing to even rip a CD:

frlinux@ubuntu:~$ grip
*** buffer overflow detected ***: grip terminated
======= Backtrace: =========
/lib/tls/i686/cmov/libc.so.6(__fortify_fail+0x48)[0xb6f71558]
/lib/tls/i686/cmov/libc.so.6[0xb6f6f680]
/lib/tls/i686/cmov/libc.so.6[0xb6f6ed68]
/lib/tls/i686/cmov/libc.so.6(_IO_default_xsputn+0xc8)[0xb6ee4a18]
/lib/tls/i686/cmov/libc.so.6(_IO_vfprintf+0x6f3)[0xb6eb7083]
/lib/tls/i686/cmov/libc.so.6(__vsprintf_chk+0xa7)[0xb6f6ee17]
/lib/tls/i686/cmov/libc.so.6(__sprintf_chk+0x2d)[0xb6f6ed5d]
grip[0x8063add]
grip[0x806059b]
grip[0x8050788]
grip[0x804eca3]
/usr/lib/libglib-2.0.so.0[0xb7271e26]
/usr/lib/libglib-2.0.so.0(g_main_context_dispatch+0x1e8)[0xb72716f8]
/usr/lib/libglib-2.0.so.0[0xb7274da3]
/usr/lib/libglib-2.0.so.0(g_main_loop_run+0x1d2)[0xb72752c2]
/usr/lib/libgtk-x11-2.0.so.0(gtk_main+0xb9)[0xb78a5269]
grip[0x804ec78]
grip[0x804ea22]
/lib/tls/i686/cmov/libc.so.6(__libc_start_main+0xe5)[0xb6e8d685]
grip[0x804e961]
======= Memory map: ========
08048000-08076000 r-xp 00000000 08:06 288997 /usr/bin/grip
08076000-08077000 r--p 0002e000 08:06 288997 /usr/bin/grip
08077000-0807b000 rw-p 0002f000 08:06 288997 /usr/bin/grip
0807b000-080a8000 rw-p 0807b000 00:00 0
093b1000-09d85000 rw-p 093b1000 00:00 0 [heap]
b2000000-b20d8000 rw-p b2000000 00:00 0
b20d8000-b2100000 ---p b20d8000 00:00 0
b21dd000-b228a000 rw-p b21dd000 00:00 0
b228a000-b228b000 ---p b228a000 00:00 0
b228b000-b2a8b000 rw-p b228b000 00:00 0
b2a8b000-b2a8c000 r-xp 00000000 08:06 345134 /usr/lib/gtk-2.0/2.10.0/immodules/im-cedilla.so
b2a8c000-b2a8d000 r--p 00000000 08:06 345134 /usr/lib/gtk-2.0/2.10.0/immodules/im-cedilla.so
b2a8d000-b2a8e000 rw-p 00001000 08:06 345134 /usr/lib/gtk-2.0/2.10.0/immodules/im-cedilla.so
b2a8e000-b2ace000 rw-p b2a8e000 00:00 0
b2ace000-b2eb1000 r--p 00000000 08:06 530153 /usr/share/fonts/truetype/unfonts/UnBatangBold.ttf
b2eb1000-b2f9b000 rw-p b2eb1000 00:00 0
b2f9b000-b2fb4000 r--p 00000000 08:06 375721 /usr/share/fonts/type1/gsfonts/n022004l.pfb
b2fb4000-b2fc0000 r--p 00000000 08:06 342641 /usr/share/fonts/truetype/ttf-bitstream-vera/VeraMoBd.ttf
b2fc0000-b3001000 rw-p b2fc0000 00:00 0
b3001000-b3384000 r--p 00000000 08:06 530152 /usr/share/fonts/truetype/unfonts/UnBatang.ttf
b3384000-b33b5000 rw-p b3384000 00:00 0
b33b5000-b3b1f000 r--p 00000000 08:06 399058 /usr/share/fonts/truetype/kochi/kochi-gothic-subst.ttf
b3b1f000-b3b78000 rw-p b3b1f000 00:00 0
b3b78000-b4f8d000 r--p 00000000 08:06 376336 /usr/share/fonts/truetype/arphic/uming.ttc
b4f8d000-b4fed000 rw-p b4f8d000 00:00 0
b4fed000-b6402000 r--p 00000000 08:06 376336 /usr/share/fonts/truetype/arphic/uming.ttc
b641a000-b6427000 r--p 00000000 08:06 342643 /usr/share/fonts/truetype/ttf-bitstream-vera/VeraMono.ttf
b6427000-b646e000 r--p 00000000 08:06 400434 /usr/share/fonts/truetype/ttf-dejavu/DejaVuSansMono-Bold.ttf
b646e000-b64ba000 r--p 00000000 08:06 400433 /usr/share/fonts/truetype/ttf-dejavu/DejaVuSansMono.ttf
b64ba000-b64bb000 r--p 00000000 08:06 433597 /usr/share/vte/termcap/xterm
b64bb000-b65bf000 rw-p b64bb000 00:00 0
b65bf000-b6654000 r--p 00000000 08:06 400431 /usr/share/fonts/truetype/ttf-dejavu/DejaVuSans.ttf
b6654000-b6656000 r-xp 00000000 08:06 342928 /usr/lib/pango/1.6.0/modules/pango-basic-fc.so
b6656000-b6657000 r--p 00001000 08:06 342928 /usr/lib/pango/1.6.0/modules/pango-basic-fc.so
b6657000-b6658000 rw-p 00002000 08:06 342928 /usr/lib/pango/1.6.0/modules/pango-basic-fc.so
b6658000-b665e000 r--s 00000000 08:06 537625 /var/cache/fontconfig/945677eb7aeaf62f1d50efc3fb3ec7d8-x86.cache-2
b665e000-b6661000 r--s 00000000 08:06 537641 /var/cache/fontconfig/e383d7ea5fbe662a33d9b44caf393297-x86.cache-2
b6661000-b6662000 r--s 00000000 08:06 537640 /var/cache/fontconfig/4c73fe0c47614734b17d736dbde7580a-x86.cache-2
b6662000-b6665000 r--s 00000000 08:06 537639 /var/cache/fontconfig/a755afe4a08bf5b97852ceb7400b47bc-x86.cache-2
b6665000-b666c000 r--s 00000000 08:06 540746 /var/cache/fontconfig/6d41288fd70b0be22e8c3a91e032eec0-x86.cache-2
b666c000-b666f000 r--s 00000000 08:06 537637 /var/cache/fontconfig/de156ccd2eddbdc19d37a45b8b2aac9c-x86.cache-2
b666f000-b6677000 r--s 00000000 08:06 537636 /var/cache/fontconfig/e3de0de479f42330eadf588a55fb5bf4-x86.cache-2
b6677000-b6682000 r--s 00000000 08:06 537635 /var/cache/fontconfig/0f34bcd4b6ee430af32735b75db7f02b-x86.cache-2
b6682000-b6685000 r--s 00000000 08:06 537633 /var/cache/fontconfig/de9486f0b47a4d768a594cb4198cb1c6-x86.cache-2
b6685000-b668c000 r--s 00000000 08:06 537632 /var/cache/fontconfig/d52a8644073d54c13679302ca1180695-x86.cache-2
b668c000-b6692000 r--s 00000000 08:06 537624 /var/cache/fontconfig/089dead882dea3570ffc31a9898cfb69-x86.cache-2
b6692000-b6694000 r--s 00000000 08:06 537627 /var/cache/fontconfig/e13b20fdb08344e0e664864cc2ede53d-x86.cache-2
b6694000-b66f4000 rw-s 00000000 00:09 720913 /SYSV00000000 (deleted)
b66f4000-b66fa000 r-xp 00000000 08:06 345062 /usr/lib/gtk-2.0/2.10.0/loaders/libpixbufloader-xpm.so
b66fa000-b66fb000 r--p 00005000 08:06 345062 /usr/lib/gtk-2.0/2.10.0/loaders/libpixbufloader-xpm.so
b66fb000-b66fc000 rw-p 00006000 08:06 345062 /usr/lib/gtk-2.0/2.10.0/loaders/libpixbufloader-xpm.so
b66fc000-b675c000 rw-s 00000000 00:09 688139 /SYSV00000000 (deleted)
b675c000-b67f2000 rw-p b675c000 00:00 0
b67f2000-b6811000 r-xp 00000000 08:06 362546 /usr/lib/gtk-2.0/2.10.0/engines/libmurrine.so
b6811000-b6812000 r--p 0001e000 08:06 362546 /usr/lib/gtk-2.0/2.10.0/engines/libmurrine.so
b6812000-b6813000 rw-p 0001f000 08:06 362546 /usr/lib/gtk-2.0/2.10.0/engines/libmurrine.so
b6813000-b681a000 r--p 00000000 08:06 318601 /usr/share/locale-langpack/fr/LC_MESSAGES/libgnomeui-2.0.mo
b681a000-b681e000 r-xp 00000000 08:06 343263 /usr/lib/gtk-2.0/2.10.0/loaders/libpixbufloader-png.so
b681e000-b681f000 r--p 00003000 08:06 343263 /usr/lib/gtk-2.0/2.10.0/loaders/libpixbufloader-png.so
b681f000-b6820000 rw-p 00004000 08:06 343263 /usr/lib/gtk-2.0/2.10.0/loaders/libpixbufloader-png.so
b6820000-b6842000 r--p 00000000 08:06 684227 /usr/share/locale-langpack/fr/LC_MESSAGES/libc.mo
b6842000-b684d000 r--p 00000000 08:06 684406 /usr/share/locale-langpack/fr/LC_MESSAGES/glib20.mo
b684d000-b684e000 rw-p b684d000 00:00 0
b684e000-b6851000 r--p 00000000 08:06 318636 /usr/share/locale-langpack/fr/LC_MESSAGES/libbonobo-2.0.mo
b6851000-b685b000 r-xp 00000000 08:06 277062 /lib/tls/i686/cmov/libnss_files-2.8.90.so
b685b000-b685c000 r--p 00009000 08:06 277062 /lib/tls/i686/cmov/libnss_files-2.8.90.so
b685c000-b685d000 rw-p 0000a000 08:06 277062 /lib/tls/i686/cmov/libnss_files-2.8.90.so
b685d000-b6866000 r-xp 00000000 08:06 277065 /lib/tls/i686/cmov/libnss_nis-2.8.90.so
b6866000-b6867000 r--p 00008000 08:06 277065 /lib/tls/i686/cmov/libnss_nis-2.8.90.so
b6867000-b6868000 rw-p 00009000 08:06 277065 /lib/tls/i686/cmov/libnss_nis-2.8.90.so
b6868000-b686f000 r-xp 00000000 08:06 277060 /lib/tls/i686/cmov/libnss_compat-2.8.90.so
b686f000-b6870000 r--p 00006000 08:06 277060 /lib/tls/i686/cmov/libnss_compat-2.8.90.so
b6870000-b6871000 rw-p 00007000 08:06 277060 /lib/tls/i686/cmov/libnss_compat-2.8.90.so
b6871000-b6883000 r--p 00000000 08:06 684418 /usr/share/locale-langpack/fr/LC_MESSAGES/gtk20.mo
b6883000-b68aa000 r--p 00000000 08:06 318626 /usr/share/locale-langpack/fr/LC_MESSAGES/gtk20-properties.mo
b68aa000-b68b3000 r--p 00000000 08:06 684371 /usr/share/locale-langpack/fr/LC_MESSAGES/libgnome-2.0.mo
b68b3000-b68b4000 r-xp 00000000 08:06 287632 /usr/lib/gconv/ISO8859-1.so
b68b4000-b68b5000 r--p 00001000 08:06 287632 /usr/lib/gconv/ISO8859-1.so
b68b5000-b68b6000 rw-p 00002000 08:06 287632 /usr/lib/gconv/ISO8859-1.so
b68b6000-b68bc000 r--p 00000000 08:06 285516 /usr/share/locale/fr/LC_MESSAGES/grip-2.2.mo
b68bc000-b68fb000 r--p 00000000 08:06 309678 /usr/lib/locale/fr_FR.utf8/LC_CTYPE
b68fb000-b69dc000 r--p 00000000 08:06 309681 /usr/lib/locale/fr_FR.utf8/LC_COLLATE
b69dc000-b69e1000 rw-p b69dc000 00:00 0
b69e1000-b69e4000 r-xp 00000000 08:06 277146 /lib/libgpg-error.so.0.3.0
b69e4000-b69e5000 rw-p 00002000 08:06 277146 /lib/libgpg-error.so.0.3.0
b69e5000-b6aa8000 r-xp 00000000 08:06 285978 /usr/lib/libasound.so.2.0.0
b6aa8000-b6aaa000 r--p 000c2000 08:06 285978 /usr/lib/libasound.so.2.0.0
b6aaa000-b6aad000 rw-p 000c4000 08:06 285978 /usr/lib/libasound.so.2.0.0
b6aad000-b6aae000 rw-p b6aad000 00:00 0
b6aae000-b6ac3000 r-xp 00000000 08:06 277058 /lib/tls/i686/cmov/libnsl-2.8.90.so
b6ac3000-b6ac4000 r--p 00014000 08:06 277058 /lib/tls/i686/cmov/libnsl-2.8.90.so
b6ac4000-b6ac5000 rw-p 00015000 08:06 277058 /lib/tls/i686/cmov/libnsl-2.8.90.so
b6ac5000-b6ac7000 rw-p b6ac5000 00:00 0
b6ac7000-b6ac9000 r-xp 00000000 08:06 277137 /lib/libkeyutils-1.2.so
b6ac9000-b6acb000 rw-p 00001000 08:06 277137 /lib/libkeyutils-1.2.so
b6acb000-b6ad2000 r-xp 00000000 08:06 287589 /usr/lib/libkrb5support.so.0.1
b6ad2000-b6ad3000 r--p 00006000 08:06
[1]+ Abandon (core dumped) grip

FRLinux (frlinux) wrote :

Actually, might have been too hasty about this, seems to be related to the CD (which is not copy protected as far as I can tell) :

[ 918.176129] ata4.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x6 frozen
[ 918.176155] ata4.00: cmd a0/00:00:00:00:00/00:00:00:00:00/a0 tag 0
[ 918.176158] cdb 1b 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00
[ 918.176160] res 40/00:03:00:00:00/00:00:00:00:00/a0 Emask 0x4 (timeout)
[ 918.176168] ata4.00: status: { DRDY }
[ 918.456100] ata4: soft resetting link
[ 918.636580] ata4.00: configured for UDMA/33
[ 918.636631] ata4: EH complete
[ 948.405358] end_request: I/O error, dev sr0, sector 0

Edward (edward-coffey) wrote :

I'm getting the same issue, it seems I can rip without a problem, but if I choose Rip+Encode it dies around halfway through encoding the first track. It is using Lame as its encoder.

Fabian A. Scherschel (fabsh) wrote :
Download full text (9.0 KiB)

Same as Edward. I think that confirms it (setting to "confirmed"). Here's the output from the CLI:

fabsh@serenity:~$ grip
*** buffer overflow detected ***: grip terminated
======= Backtrace: =========
/lib/tls/i686/cmov/libc.so.6(__fortify_fail+0x48)[0xb6f91558]
/lib/tls/i686/cmov/libc.so.6[0xb6f8f680]
/lib/tls/i686/cmov/libc.so.6[0xb6f8ed68]
/lib/tls/i686/cmov/libc.so.6(_IO_default_xsputn+0xc8)[0xb6f04a18]
/lib/tls/i686/cmov/libc.so.6(_IO_vfprintf+0x6f3)[0xb6ed7083]
/lib/tls/i686/cmov/libc.so.6(__vsprintf_chk+0xa7)[0xb6f8ee17]
/lib/tls/i686/cmov/libc.so.6(__sprintf_chk+0x2d)[0xb6f8ed5d]
grip[0x8063add]
grip[0x806059b]
grip[0x8050788]
grip[0x804eca3]
/usr/lib/libglib-2.0.so.0[0xb7291e26]
/usr/lib/libglib-2.0.so.0(g_main_context_dispatch+0x1e8)[0xb72916f8]
/usr/lib/libglib-2.0.so.0[0xb7294da3]
/usr/lib/libglib-2.0.so.0(g_main_loop_run+0x1d2)[0xb72952c2]
/usr/lib/libgtk-x11-2.0.so.0(gtk_main+0xb9)[0xb78c53a9]
grip[0x804ec78]
grip[0x804ea22]
/lib/tls/i686/cmov/libc.so.6(__libc_start_main+0xe5)[0xb6ead685]
grip[0x804e961]
======= Memory map: ========
08048000-08076000 r-xp 00000000 08:01 811188 /usr/bin/grip
08076000-08077000 r--p 0002e000 08:01 811188 /usr/bin/grip
08077000-0807b000 rw-p 0002f000 08:01 811188 /usr/bin/grip
0807b000-080a8000 rw-p 0807b000 00:00 0
08c42000-097c4000 rw-p 08c42000 00:00 0 [heap]
b001a000-b001b000 ---p b001a000 00:00 0
b001b000-b081b000 rw-p b001b000 00:00 0
b081b000-b1b46000 r--p 00000000 08:03 17123319 /home/fabsh/.icons/DesertII/icon-theme.cache
b1b46000-b2f5b000 r--p 00000000 08:01 939867 /usr/share/fonts/truetype/arphic/uming.ttc
b2f5b000-b2fa8000 r--p 00000000 08:01 334699 /usr/share/fonts/truetype/msttcorefonts/Courier_New_Bold.ttf
b2fa8000-b332b000 r--p 00000000 08:01 940003 /usr/share/fonts/truetype/unfonts/UnBatang.ttf
b332b000-b335c000 rw-p b332b000 00:00 0
b3ac6000-b3b1f000 rw-p b3ac6000 00:00 0
b3c00000-b3cad000 rw-p b3c00000 00:00 0
b3cad000-b3d00000 ---p b3cad000 00:00 0
b3e70000-b3f1d000 rw-p b3e70000 00:00 0
b3f1d000-b3f2c000 r-xp 00000000 08:01 228518 /lib/libbz2.so.1.0.4
b3f2c000-b3f2d000 r--p 0000f000 08:01 228518 /lib/libbz2.so.1.0.4
b3f2d000-b3f2e000 rw-p 00010000 08:01 228518 /lib/libbz2.so.1.0.4
b3f2e000-b3f5f000 r-xp 00000000 08:01 809591 /usr/lib/libcroco-0.6.so.3.0.1
b3f5f000-b3f62000 rw-p 00030000 08:01 809591 /usr/lib/libcroco-0.6.so.3.0.1
b3f62000-b3f92000 r-xp 00000000 08:01 809868 /usr/lib/libgsf-1.so.114.0.8
b3f92000-b3f94000 r--p 0002f000 08:01 809868 /usr/lib/libgsf-1.so.114.0.8
b3f94000-b3f95000 rw-p 00031000 08:01 809868 /usr/lib/libgsf-1.so.114.0.8
b3f95000-b3f96000 rw-p b3f95000 00:00 0
b3f96000-b3fc7000 r-xp 00000000 08:01 810230 /usr/lib/librsvg-2.so.2.22.3
b3fc7000-b3fc8000 r--p 00030000 08:01 810230 /usr/lib/librsvg-2.so.2.22.3
b3fc8000-b3fc9000 rw-p 00031000 08:01 810230 /usr/lib/librsvg-2.so.2.22.3
b3fc9000-b3fe1000 r-xp 00000000 08:01 840810 /usr/lib/gio/modules/libgvfsdbus.so
b3fe1000-b3fe2000 r--p 00017000 08:01 840810 /usr/lib/gio/modules/libgvfsdbus.so
b3fe2000-b3fe3000 rw-p 00018000 08:01 840810 /usr/lib/gio/modules/libgvfsdbus.so
b3fe3000-b42e5000 r--p 00000000 08:0...

Read more...

Changed in grip:
status: New → Confirmed
Michael (m-iostreams) wrote :

Having same issue, with only one cd, so far.
Lame is the encoder, all paranoia is disabled, first song rips, and begins encoding, as soon as second song starts ripping - grip aborts with the same output as above.
I can rip the whole cd without problem, but rip+encode causes grip to fail on one disk only.

On Sat, Nov 8, 2008 at 3:18 PM, Michael <email address hidden> wrote:
> Having same issue, with only one cd, so far.
> Lame is the encoder, all paranoia is disabled, first song rips, and begins encoding, as soon as second song starts ripping - grip aborts with the same output as above.
> I can rip the whole cd without problem, but rip+encode causes grip to fail on one disk only.

That is what i don't understand, out of 10 CDs i ripped so far, only
one had the same symptoms. I ended up ripping the CD with cdparanoia
(not the integrated one from grip, the official one) then used lame on
the cli to encode files.

Cheers,
Steph

arndtc (arndtc) wrote :
Download full text (9.1 KiB)

I'm seeing the same problem.
I can rip fine, but when I try to do rip + encode, it dies about half way through the first track.

I can't find another ripper that is as user friendly as grip, and would like to see this fixed, so I can continue ripping my CDs.

*** buffer overflow detected ***: grip terminated
======= Backtrace: =========
/lib/tls/i686/cmov/libc.so.6(__fortify_fail+0x48)[0xb6f0b558]
/lib/tls/i686/cmov/libc.so.6[0xb6f09680]
/lib/tls/i686/cmov/libc.so.6[0xb6f08d68]
/lib/tls/i686/cmov/libc.so.6(_IO_default_xsputn+0xc8)[0xb6e7ea18]
/lib/tls/i686/cmov/libc.so.6(_IO_vfprintf+0x6f3)[0xb6e51083]
/lib/tls/i686/cmov/libc.so.6(__vsprintf_chk+0xa7)[0xb6f08e17]
/lib/tls/i686/cmov/libc.so.6(__sprintf_chk+0x2d)[0xb6f08d5d]
grip[0x8063add]
grip[0x806059b]
grip[0x8050788]
grip[0x804eca3]
/usr/lib/libglib-2.0.so.0[0xb720be26]
/usr/lib/libglib-2.0.so.0(g_main_context_dispatch+0x1e8)[0xb720b6f8]
/usr/lib/libglib-2.0.so.0[0xb720eda3]
/usr/lib/libglib-2.0.so.0(g_main_loop_run+0x1d2)[0xb720f2c2]
/usr/lib/libgtk-x11-2.0.so.0(gtk_main+0xb9)[0xb783f3a9]
grip[0x804ec78]
grip[0x804ea22]
/lib/tls/i686/cmov/libc.so.6(__libc_start_main+0xe5)[0xb6e27685]
grip[0x804e961]
======= Memory map: ========
08048000-08076000 r-xp 00000000 09:02 2867799 /usr/bin/grip
08076000-08077000 r--p 0002e000 09:02 2867799 /usr/bin/grip
08077000-0807b000 rw-p 0002f000 09:02 2867799 /usr/bin/grip
0807b000-080a8000 rw-p 0807b000 00:00 0
08f3d000-097ae000 rw-p 08f3d000 00:00 0 [heap]
b1fe2000-b1fe3000 ---p b1fe2000 00:00 0
b1fe3000-b27e3000 rw-p b1fe3000 00:00 0
b27e3000-b2f4d000 r--p 00000000 09:02 3025121 /usr/share/fonts/truetype/kochi/kochi-gothic-subst.ttf
b2f4d000-b32d0000 r--p 00000000 09:02 3237755 /usr/share/fonts/truetype/unfonts/UnBatang.ttf
b32d0000-b3301000 rw-p b32d0000 00:00 0
b39fe000-b3a16000 r--p 00000000 09:02 1767864 /usr/share/fonts/type1/gsfonts/n022003l.pfb
b3a16000-b3a2f000 r--p 00000000 09:02 1767865 /usr/share/fonts/type1/gsfonts/n022004l.pfb
b3a2f000-b3a6b000 r--p 00000000 09:02 1095684 /usr/share/fonts/truetype/msttcorefonts/Courier_New_Italic.ttf
b3a6b000-b3ac4000 rw-p b3a6b000 00:00 0
b3f3d000-b3f6e000 r-xp 00000000 09:02 2863878 /usr/lib/libcroco-0.6.so.3.0.1
b3f6e000-b3f71000 rw-p 00030000 09:02 2863878 /usr/lib/libcroco-0.6.so.3.0.1
b3f71000-b3fa1000 r-xp 00000000 09:02 2863466 /usr/lib/libgsf-1.so.114.0.8
b3fa1000-b3fa3000 r--p 0002f000 09:02 2863466 /usr/lib/libgsf-1.so.114.0.8
b3fa3000-b3fa4000 rw-p 00031000 09:02 2863466 /usr/lib/libgsf-1.so.114.0.8
b3fa4000-b3fa5000 rw-p b3fa4000 00:00 0
b3fa5000-b3fd6000 r-xp 00000000 09:02 2866942 /usr/lib/librsvg-2.so.2.22.3
b3fd6000-b3fd7000 r--p 00030000 09:02 2866942 /usr/lib/librsvg-2.so.2.22.3
b3fd7000-b3fd8000 rw-p 00031000 09:02 2866942 /usr/lib/librsvg-2.so.2.22.3
b3fd8000-b3ff0000 r-xp 00000000 09:02 3074424 /usr/lib/gio/modules/libgvfsdbus.so
b3ff0000-b3ff1000 r--p 00017000 09:02 3074424 /usr/lib/gio/modules/libgvfsdbus.so
b3ff1000-b3ff2000 rw-p 00018000 09:02 3074424 /usr/lib/gio/modules/libgvfsdbus.so
b3ff2000-b4418000 r--p 00000000 09:02 2943602 /usr/share/icons/hicolor/icon-theme.cache
b4418000-b4af6000 r--p 00000000 09:0...

Read more...

Hi,

I have the same problem (same dump), but it seems to be related to the insertion of the ID3 tags.
I managed to extract and encode the full cd by disabling the ID3 tags.

Cheers
Marco

Jesse Bye (jesse-bye) wrote :

I encountered this problem when I attempted to rip a CD with Japanese titles. I am guessing it has something to do with the treatment of special characters (maybe UTF-8)? It would be nice to get this fixed; however, I was able to rip the CD (including correct tags) with abcde.

Scott (shendric) wrote :

It seems that it's the *v2* tags that are causing the problem. If I turn off "ID3v2" then the program no longer crashes, even though I have "ID3" tags on still.

I had the very same problem (buffer overflow error) after upgrading to Intrepid with 2 CDs.
I confirm that after turning off ID3v2, it worked fine on those 2.

arndtc (arndtc) wrote :

Thanks for the tip that the problem is with the writing of the ID3v2 tags.

I've found a work around. Its a bit painful, but it works.
I can add the tag information to the command line.

I sure wish there was work happening to fix GRiP. Its the best Ripper program I've found. I've tried many others, but found them either too complicated, or didn't get the features that I was trying to find.

Avi Schwartz (le-avion) wrote :

Yes, thanks for the tip. For now I use ID3 but that means that I have to go and use another tool (EasyTag) to fix all the long tags that get chopped off with ID3. Please fix this problem...

Hajime Fujita (hfujita) wrote :

Hi,

The attached patch worked for me.

This patch fixes a buffer overflow bug in id3.c.
I found that sometimes the genre argument to ID3v2TagFile() exceeds 100
(in my test case it was 145).
In this case, sprintf() call in id3.c:L281 overruns the buffer.
The maximum length of the formatted string is 5 (3-digits and two parentheses),
so 6 bytes (five characters + one NULL character) is enough for the buffer.

Hajime Fujita (hfujita) wrote :

The above patch is for grip (3.3.1-15build1) on intrepid.
I tested the patch on Intrepid/amd64 (I believe there's no architecture-dependency with this patch, though).

Avi Schwartz (le-avion) wrote :

Hajime, are you sure it has to do with the genre? In my case the genre was "Classical" and it still crashed.

in any case your patch seems to work in most situation but there is still a problem although I am not sure it is related.

If the track name is very long, that is greater then 95 characters, the file name gets truncated and the ripped and encoded file names end up being the same causing the encoding to fail since it is overwriting the ripped file.

Hajime Fujita (hfujita) wrote :

I tried three CDs which led grip to crash before, and all of them were ripped (and tagged) successfully with the patch.
Genre for those discs were "Anime" for two and "JPop" for one.

The genre "Classical" will be mapped to the value of 32, so I think it shouldn't be a problem even if you use the current (buggy) version.
That's strange... perhaps there might be other issue in the code...

If you are able to provide an ID3 tag which can reproduce the problem, it will really help us.

DannyArmstrong (detarmstrong) wrote :

Grip crashes for me when attempting to encode the song "I like van halen because my sister says they are cool." Turning off id3v2 fixes the problem.

Same problem here. The inexistent genre was the problem.

ID3 has a limited and american centric set of genres: http://www.activedjstudio.com/help/amp3dj_00003e.htm

Grip always ignored if you put a invalid genre. Now I tried to put Samba and it crashed. Everything works fine after changing the genre to Alternative. Other CDs worked fine because they had an existent genre.

I'd love to have Grip put my selected genre in the id3 tag.

Fabian A. Scherschel (fabsh) wrote :

@Paulo: Aha! Good to know that! Seems "Garage Rock" is no genre after all...

Maybe we should Grip warn people with a message or something. After all, you can always change the tag to whatever you want with EasyTAG afterwards...

zig59 (my-linux-mailbox) wrote :

Converting cd to mp3 using lame I was getting the same crash here selecting 'Power Ballad' for the album genre from the dropdown list.

Selecting 'Rock', which I normally have it set to, saw it rip and encode with no problems (using id3v2).

Ajay (ajaygautam) wrote :

The (valid) "Speech" genre crashes Grip
Am trying to convert an audio book to mp3

Grip with id3v2 disabled passed the crash point WooHoo!

Glad to get grip working again.

Alan Robertson (alanr-unix) wrote :

I have this same problem - and disabling id3v2 fixes it for me also.

Peter Gaultney (petergaultney) wrote :

I have had this same problem - rather, a friend of mine did, on Ubuntu Jaunty x86.

The output from grip --verbose is almost identical to what is listed for the bug.

Changed in grip (Fedora):
status: Unknown → Fix Released
sam tygier (samtygier) wrote :

Just to note, Grip is no longer being maintained by upstream or debian, it will be dropped from Karmic (unless someone takes over maintenance), hence the change of this being fixed is small.

Peter Gaultney (petergaultney) wrote :

This is probably the wrong place to ask, but I guess that makes me wonder: is the old maintainer looking for anyone to take over? I might volunteer. It would certainly take a few weeks to get up to speed on the codebase, but Grip is a program worth maintaining, in my opinion.

sam tygier (samtygier) wrote :

you could start trying to contact Mike Oliphant from his email address at http://nostatic.org/grip/ (click his name at the bottom of the page), or https://sourceforge.net/users/oliphant . you could also try contacting Daniel Baumann http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=515887

i also suggest looking at the more active ripping progects, maybe you could add to them anything that the lack relative to grip.

Ben Johnson (benj-visi) wrote :

If you are using LAME as the encoder, a good work around is tagging files with lame instead instead of letting Grip do it.
 1. on the Config / ID3 Screen, turn off all ID3 tags
 2. on the Config / Encode / Encoder screen, set
    Encoder: lame
    Encoder executable: /usr/bin/lame
    Encoder command line: -h -b %b --add-id3v2 --tt %n --ta %a --tl %d --ty %y --tc "Grip 3.3.1 / Lame 3.98" --tn "%t/%N" --tg "%G" %w %m.%x
    Encode file extension: mp3
    Encode file format: /mp3riptmp/%A - %d/%a - %n

I don't know if it helps but I had the same problem and each time, changing the genre did solve the problem.

Here are the CD, old genre (that lead to a crash) and new genre (that made grip work well) :

Qemists - Join the Q Drum & Bass -> Electronic
Brigitte Fontaine - Morceaux De Choix Chanson -> Other
The Beatles - The Early Tapes Of The Beatles Beat -> Rock

It looks like every genre after "Other" makes grip crash.

Alessio Treglia (quadrispro) wrote :

grip is no longer maintained and it has been removed since Karmic.

Keeping opened only for Intrepid.

Changed in grip (Ubuntu):
status: Confirmed → Won't Fix
Robert Sander (gurubert) wrote :

If grip is not in karmic any more, what is the recommended feature comparable alternative?

sam tygier (samtygier) wrote :

personally i switched to sound-juicer. doesn't have quite so many options, but can still do everything i need it to. also it uses musicbrainz instead of CDDB which gives more consistent results (eg 'REM' vs 'R.E.M.').

there are some more listed at https://help.ubuntu.com/community/CDRipping , or have a search in the forum.

zig59 (my-linux-mailbox) wrote :

I've switched to RipperX. You may also need to manually install (Synaptic) Lame.

However, I strongly recommend reading:
http://www.dwasifar.com/?p=836 for setting up RipperX (note the manual amendment of the config file)
and
http://jthz.com/mp3/ for general VBR info.

Note that the last url tries to throw a pop-up (not needed) which Firefox auto-blocked. Just thought I'd mention it.

My encoder line reads: Encoder::fullCommand = lame --nohist -V2 --vbr-new -q0 --lowpass 19.7 -b 96
This suits me but ymmv :)

Z

Alex Valavanis (valavanisalex) wrote :

I'm closing the report for Intrepid because it reached end-of-life on 30 April 2010. Can anyone confirm whether this still exists in Jaunty? Grip has been removed from Ubuntu since Karmic.

Changed in grip (Ubuntu Intrepid):
status: New → Invalid
To post a comment you must log in.
This report contains Public information  Edit
Everyone can see this information.

Other bug subscribers

Related questions

Remote bug watches

Bug watches keep track of this bug in other bug trackers.