libsndfile crashed with stack overflow in psf_binheader_readf()

Bug #1807825 reported by Jaeseung Choi on 2018-12-11
10
This bug affects 1 person
Affects Status Importance Assigned to Milestone
libsndfile (Ubuntu)
Medium
Unassigned

Bug Description

- When running 'sndfile-info' program from 'sndfile-programs' package, the program crashed with stack overflow (possibly by unbounded recursion of guess_file_type() function). The crash point is within libsndfile.so library, so the bug seems to be in 'libsndfile' package.
- 'sndfile-play' program from 'sndfile-programs' package also crashes with the same input.

ProblemType: Crash
DistroRelease: Ubuntu 16.04
Package: sndfile-programs 1.0.25-10ubuntu0.16.04.1
ProcVersionSignature: Ubuntu 4.15.0-42.45~16.04.1-generic 4.15.18
Uname: Linux 4.15.0-42-generic x86_64
ApportVersion: 2.20.1-0ubuntu2.18
Architecture: amd64
CurrentDesktop: Unity
Date: Mon Dec 10 23:16:55 2018
ExecutablePath: /usr/bin/sndfile-info
InstallationDate: Installed on 2018-12-06 (5 days ago)
InstallationMedia: Ubuntu 16.04.5 LTS "Xenial Xerus" - Release amd64 (20180731)
ProcCmdline: sndfile-info crash-0_00010633
Signal: 11
SourcePackage: libsndfile
StacktraceTop:
 psf_binheader_readf (psf=psf@entry=0x95e420, format=0x7f36299f6651 "", format@entry=0x7f36299f664f "pb") at common.c:1040
 id3_skip (psf=psf@entry=0x95e420) at id3.c:35
 guess_file_type (psf=psf@entry=0x95e420) at sndfile.c:2423
 guess_file_type (psf=psf@entry=0x95e420) at sndfile.c:2424
 guess_file_type (psf=psf@entry=0x95e420) at sndfile.c:2424
Title: sndfile-info crashed with SIGSEGV in psf_binheader_readf()
UpgradeStatus: No upgrade log present (probably fresh install)
UserGroups: adm cdrom dip lpadmin plugdev sambashare sudo

Jaeseung Choi (jschoi.2022) wrote :
information type: Private → Public
Jaeseung Choi (jschoi.2022) wrote :

StacktraceTop:
 psf_binheader_readf (psf=psf@entry=0x95e420, format=0x7f36299f6651 "", format@entry=0x7f36299f664f "pb") at common.c:1040
 id3_skip (psf=psf@entry=0x95e420) at id3.c:35
 guess_file_type (psf=psf@entry=0x95e420) at sndfile.c:2423
 guess_file_type (psf=psf@entry=0x95e420) at sndfile.c:2424
 guess_file_type (psf=psf@entry=0x95e420) at sndfile.c:2424

Changed in libsndfile (Ubuntu):
importance: Undecided → Medium
tags: removed: need-amd64-retrace
To post a comment you must log in.
This report contains Public information  Edit
Everyone can see this information.

Other bug subscribers