Ubuntu
vorbis-tools package

oggenc crashes while trying to free() invalid pointer in libFLAC code

Bug #1807343 reported by Jaeseung Choi on 2018-12-07

This bug affects 1 person

Affects		Status	Importance	Assigned to	Milestone
	vorbis-tools (Ubuntu)	New	Medium	Unassigned

Bug Description

- In some machine (with the same Ubuntu 16.04.5), oggenc crashes while executing only one of the input file (i.e. `oggenc crash-2`) but in current machine it only crashes when two files are given as inputs at once (i.e. `oggenc crash-1 crash-2`).

- The bug is not reproduced when I compiled and installed the latest 'FLAC' and 'vorbis-tools' code from https://gitlab.xiph.org/xiph.

ProblemType: Crash
DistroRelease: Ubuntu 16.04
Package: vorbis-tools 1.4.0-7ubuntu1
ProcVersionSignature: Ubuntu 4.15.0-29.31~16.04.1-generic 4.15.18
Uname: Linux 4.15.0-29-generic x86_64
ApportVersion: 2.20.1-0ubuntu2.18
Architecture: amd64
AssertionMessage: *** Error in `oggenc': free(): invalid pointer: 0x00007f7bfa92a128 ***
CurrentDesktop: Unity
Date: Thu Dec 6 23:50:14 2018
ExecutablePath: /usr/bin/oggenc
ExecutableTimestamp: 1448370354
InstallationDate: Installed on 2018-12-06 (1 days ago)
InstallationMedia: Ubuntu 16.04.5 LTS "Xenial Xerus" - Release amd64 (20180731)
ProcCmdline: oggenc ./crash-1 crash-2
ProcCwd: /home/jason/temp
Signal: 6
SourcePackage: vorbis-tools
StacktraceTop:
__libc_message (do_abort=do_abort@entry=2, fmt=fmt@entry=0x7f7bfa6f5ed8 "*** Error in `%s': %s: 0x%s ***\n") at ../sysdeps/posix/libc_fatal.c:175
malloc_printerr (ar_ptr=<optimized out>, ptr=<optimized out>, str=0x7f7bfa6f2caf "free(): invalid pointer", action=3) at malloc.c:5006
_int_free (av=<optimized out>, p=<optimized out>, have_lock=0) at malloc.c:3867
__GI___libc_free (mem=<optimized out>) at malloc.c:2968
?? () from /usr/lib/x86_64-linux-gnu/libFLAC.so.8
Title: oggenc assert failure: *** Error in `oggenc': free(): invalid pointer: 0x00007f7bfa92a128 ***
UpgradeStatus: No upgrade log present (probably fresh install)
UserGroups: adm cdrom dip lpadmin plugdev sambashare sudo

Tags:

Revision history for this message

Jaeseung Choi (jschoi.2022) wrote on 2018-12-07:

Dependencies.txt Edit (2.8 KiB, text/plain; charset="utf-8")
Disassembly.txt Edit (946 bytes, text/plain; charset="utf-8")
JournalErrors.txt Edit (6.1 KiB, text/plain; charset="utf-8")
ProcCpuinfoMinimal.txt Edit (1.1 KiB, text/plain; charset="utf-8")
ProcEnviron.txt Edit (109 bytes, text/plain; charset="utf-8")
ProcMaps.txt Edit (4.4 KiB, text/plain; charset="utf-8")
ProcStatus.txt Edit (1.3 KiB, text/plain; charset="utf-8")
Registers.txt Edit (683 bytes, text/plain; charset="utf-8")
Stacktrace.txt Edit (3.1 KiB, text/plain; charset="utf-8")
ThreadStacktrace.txt Edit (3.2 KiB, text/plain; charset="utf-8")

information type:

Private → Public

Revision history for this message

Jaeseung Choi (jschoi.2022) wrote on 2018-12-07:

crash input file to reproduce the bug (1/2) Edit (131 bytes, application/octet-stream)

Revision history for this message

Apport retracing service (apport) wrote on 2018-12-07:

StacktraceTop:
__libc_message (do_abort=do_abort@entry=2, fmt=fmt@entry=0x7f7bfa6f5ed8 "*** Error in `%s': %s: 0x%s ***\n") at ../sysdeps/posix/libc_fatal.c:175
malloc_printerr (ar_ptr=<optimized out>, ptr=<optimized out>, str=0x7f7bfa6f2caf "free(): invalid pointer", action=3) at malloc.c:5006
_int_free (av=<optimized out>, p=<optimized out>, have_lock=0) at malloc.c:3867
__GI___libc_free (mem=<optimized out>) at malloc.c:2968
?? () from /tmp/apport_sandbox_5wzp201q/usr/lib/x86_64-linux-gnu/libFLAC.so.8