[MPlayer-advusers] ogg stream: reproducible crash in r24096

[Uoti Urpala]

On Sat, 2007-08-18 at 22:05 +0200, Dominik 'Rathann' Mierzejewski wrote:
> http://www.gnu.org/fun/jokes/eternal-flame.ogg
> 
> Looks like a bug in ffvorbis, because both tremor and libvorbis play it fine.
> 
> ffplay crashes in the same place.

I don't get a crash, but it shows the following message:
[vorbis @ 0x878c1a0]floor0 dec: booknumber too high!

Looking at the code:

        book_idx=get_bits(&vc->gb, ilog(vf->num_books));
        if ( book_idx >= vf->num_books ) {
            av_log( vc->avccontext, AV_LOG_ERROR,
                    "floor0 dec: booknumber too high!\n" );
            //FIXME: look above
        }
        AV_DEBUG( "floor0 dec: booknumber: %u\n", book_idx );
        codebook=vc->codebooks[vf->book_list[book_idx]];

So it notices that the number is too high, but then uses it anyway. Not
too surprising if that can cause random crashes.