[MPlayer-advusers] ogg stream: reproducible crash in r24096

[Dominik 'Rathann' Mierzejewski]

On Saturday, 18 August 2007 at 22:16, Uoti Urpala wrote:
> On Sat, 2007-08-18 at 22:05 +0200, Dominik 'Rathann' Mierzejewski wrote:
> > http://www.gnu.org/fun/jokes/eternal-flame.ogg
> > 
> > Looks like a bug in ffvorbis, because both tremor and libvorbis play it fine.
> > 
> > ffplay crashes in the same place.
> 
> I don't get a crash, but it shows the following message:
> [vorbis @ 0x878c1a0]floor0 dec: booknumber too high!
> 
> Looking at the code:
> 
>         book_idx=get_bits(&vc->gb, ilog(vf->num_books));
>         if ( book_idx >= vf->num_books ) {
>             av_log( vc->avccontext, AV_LOG_ERROR,
>                     "floor0 dec: booknumber too high!\n" );
>             //FIXME: look above
>         }
>         AV_DEBUG( "floor0 dec: booknumber: %u\n", book_idx );
>         codebook=vc->codebooks[vf->book_list[book_idx]];
> 
> So it notices that the number is too high, but then uses it anyway. Not
> too surprising if that can cause random crashes.

Looks like nobody else noticed this here, so I've submitted it as
Issue 130 in FFmpeg issue tracker.

Regards,
R.

-- 
MPlayer developer and RPMs maintainer: http://mplayerhq.hu http://rpm.livna.org
There should be a science of discontent. People need hard times and
oppression to develop psychic muscles.
	-- from "Collected Sayings of Muad'Dib" by the Princess Irulan