The chromium bug report is now unlocked http://code.google.com/p/chromium/issues/detail?id=68115 It contains 2 samples that reproduce the bug. Chrome8/9 used the original patch. Trunk has *21_vorbis_overflow.2.patch* * *