Segmentation Fault caused by malformed audio files.

Bug #1579927 reported by tomatitofrito
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
soundconverter (Ubuntu)
New
Undecided
Unassigned

Bug Description

Hi

After having done some fuzz testing with zzuf I saw that feeding Soundconverter with malformed mp3 files crashes the program due to a segmentation fault. These were the commands used for the test:

This first command was used to generate hundreds of malformed .mp3 files:

for i in {10..15}; do for f in *.mp3;do zzuf -r 0.04 -s $i < "$f" > "$i-$f"; done; done

And this second command was used to feed soundconverter with the malformed files.

LC_ALL=C; LANG=C; for f in *.mp3; do timeout 3 soundconverter -b -m audio/x-wav -s .wav "$f"; done &>fuzzing_soundconverter.log

You can find more information explaining how to use zzuf through the following sources:

https://fuzzing-project.org/tutorial1.html

http://caca.zoy.org/wiki/zzuf

I hope you find this information useful.

Kind regards.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.