Bug#802588: lmms: segfault while playing 'metalish_dong01.ogg'

[Mohammad Amin]

On Wed, 2015-10-21 at 15:06 +0200, Petter Reinholdtsen wrote:
> [Mohammad Amin]
> > Dear Maintainer,
> > 
> > a segfault occurs when i click on a sample named
> > 'metalish_dong01.ogg'
> > in 'My samples/misc'. thanks.
> 
> Hi, and thank you for the report.  Can you provide the output from
> valgrind when running and crashing lmms?  In other words, start lmms
> from a terminal after installing valgrind using 'valgrind lmms' and
> cut-n-paste the output from valgrind leading up to and including the
> crash.
> 
here is the direct output from 'valgrind lmms':

==6015== Memcheck, a memory error detector
==6015== Copyright (C) 2002-2015, and GNU GPL'd, by Julian Seward et
al.
==6015== Using Valgrind-3.11.0 and LibVEX; rerun with -h for copyright
info
==6015== Command: lmms
==6015== 
VST sync support disabled in your configuration
==6015== Use of uninitialised value of size 8
==6015==    at 0x70B3C03: ogg_page_serialno (in /usr/lib/x86_64-linux
-gnu/libogg.so.0.8.2)
==6015==    by 0x74ECB1C: ov_pcm_seek_page (in /usr/lib/x86_64-linux
-gnu/libvorbisfile.so.3.3.6)
==6015==    by 0x74ECD7B: ov_pcm_seek (in /usr/lib/x86_64-linux
-gnu/libvorbisfile.so.3.3.6)
==6015==    by 0x5525E3: SampleBuffer::decodeSampleOGGVorbis(char
const*, short*&, unsigned char&, unsigned int&) (in /usr/bin/lmms)
==6015==    by 0x554228: SampleBuffer::update(bool) (in /usr/bin/lmms)
==6015==    by 0x551754: SamplePlayHandle::SamplePlayHandle(QString
const&) (in /usr/bin/lmms)
==6015==    by 0x4FFE48:
FileBrowserTreeWidget::mousePressEvent(QMouseEvent*) (in /usr/bin/lmms)
==6015==    by 0x526DD7F: QWidget::event(QEvent*) (in /usr/lib/x86_64
-linux-gnu/libQtGui.so.4.8.7)
==6015==    by 0x56336AD: QFrame::event(QEvent*) (in /usr/lib/x86_64
-linux-gnu/libQtGui.so.4.8.7)
==6015==    by 0x5758D12: QAbstractItemView::viewportEvent(QEvent*) (in
/usr/lib/x86_64-linux-gnu/libQtGui.so.4.8.7)
==6015==    by 0x579A71B: QTreeView::viewportEvent(QEvent*) (in
/usr/lib/x86_64-linux-gnu/libQtGui.so.4.8.7)
==6015==    by 0x6113C25:
QCoreApplicationPrivate::sendThroughObjectEventFilters(QObject*,
QEvent*) (in /usr/lib/x86_64-linux-gnu/libQtCore.so.4.8.7)
==6015== 
==6015== Invalid read of size 1
==6015==    at 0x70B3C03: ogg_page_serialno (in /usr/lib/x86_64-linux
-gnu/libogg.so.0.8.2)
==6015==    by 0x74ECB1C: ov_pcm_seek_page (in /usr/lib/x86_64-linux
-gnu/libvorbisfile.so.3.3.6)
==6015==    by 0x74ECD7B: ov_pcm_seek (in /usr/lib/x86_64-linux
-gnu/libvorbisfile.so.3.3.6)
==6015==    by 0x5525E3: SampleBuffer::decodeSampleOGGVorbis(char
const*, short*&, unsigned char&, unsigned int&) (in /usr/bin/lmms)
==6015==    by 0x554228: SampleBuffer::update(bool) (in /usr/bin/lmms)
==6015==    by 0x551754: SamplePlayHandle::SamplePlayHandle(QString
const&) (in /usr/bin/lmms)
==6015==    by 0x4FFE48:
FileBrowserTreeWidget::mousePressEvent(QMouseEvent*) (in /usr/bin/lmms)
==6015==    by 0x526DD7F: QWidget::event(QEvent*) (in /usr/lib/x86_64
-linux-gnu/libQtGui.so.4.8.7)
==6015==    by 0x56336AD: QFrame::event(QEvent*) (in /usr/lib/x86_64
-linux-gnu/libQtGui.so.4.8.7)
==6015==    by 0x5758D12: QAbstractItemView::viewportEvent(QEvent*) (in
/usr/lib/x86_64-linux-gnu/libQtGui.so.4.8.7)
==6015==    by 0x579A71B: QTreeView::viewportEvent(QEvent*) (in
/usr/lib/x86_64-linux-gnu/libQtGui.so.4.8.7)
==6015==    by 0x6113C25:
QCoreApplicationPrivate::sendThroughObjectEventFilters(QObject*,
QEvent*) (in /usr/lib/x86_64-linux-gnu/libQtCore.so.4.8.7)
==6015==  Address 0xf is not stack'd, malloc'd or (recently) free'd
==6015== 
==6015== 
==6015== Process terminating with default action of signal 11 (SIGSEGV)
==6015==  Access not within mapped region at address 0xF
==6015==    at 0x70B3C03: ogg_page_serialno (in /usr/lib/x86_64-linux
-gnu/libogg.so.0.8.2)
==6015==    by 0x74ECB1C: ov_pcm_seek_page (in /usr/lib/x86_64-linux
-gnu/libvorbisfile.so.3.3.6)
==6015==    by 0x74ECD7B: ov_pcm_seek (in /usr/lib/x86_64-linux
-gnu/libvorbisfile.so.3.3.6)
==6015==    by 0x5525E3: SampleBuffer::decodeSampleOGGVorbis(char
const*, short*&, unsigned char&, unsigned int&) (in /usr/bin/lmms)
==6015==    by 0x554228: SampleBuffer::update(bool) (in /usr/bin/lmms)
==6015==    by 0x551754: SamplePlayHandle::SamplePlayHandle(QString
const&) (in /usr/bin/lmms)
==6015==    by 0x4FFE48:
FileBrowserTreeWidget::mousePressEvent(QMouseEvent*) (in /usr/bin/lmms)
==6015==    by 0x526DD7F: QWidget::event(QEvent*) (in /usr/lib/x86_64
-linux-gnu/libQtGui.so.4.8.7)
==6015==    by 0x56336AD: QFrame::event(QEvent*) (in /usr/lib/x86_64
-linux-gnu/libQtGui.so.4.8.7)
==6015==    by 0x5758D12: QAbstractItemView::viewportEvent(QEvent*) (in
/usr/lib/x86_64-linux-gnu/libQtGui.so.4.8.7)
==6015==    by 0x579A71B: QTreeView::viewportEvent(QEvent*) (in
/usr/lib/x86_64-linux-gnu/libQtGui.so.4.8.7)
==6015==    by 0x6113C25:
QCoreApplicationPrivate::sendThroughObjectEventFilters(QObject*,
QEvent*) (in /usr/lib/x86_64-linux-gnu/libQtCore.so.4.8.7)
==6015==  If you believe this happened as a result of a stack
==6015==  overflow in your program's main thread (unlikely but
==6015==  possible), you can try to increase the size of the
==6015==  main thread stack using the --main-stacksize= flag.
==6015==  The main thread stack size used in this run was 8388608.
otice: could not set realtime priority.
==6015== 
==6015== HEAP SUMMARY:
==6015==     in use at exit: 20,728,362 bytes in 84,076 blocks
==6015==   total heap usage: 459,922 allocs, 375,846 frees, 99,858,860
bytes allocated
==6015== 
==6015== LEAK SUMMARY:
==6015==    definitely lost: 20,248 bytes in 39 blocks
==6015==    indirectly lost: 86,448 bytes in 3,665 blocks
==6015==      possibly lost: 255,890 bytes in 4,657 blocks
==6015==    still reachable: 20,102,064 bytes in 74,789 blocks
==6015==                       of which reachable via heuristic:
==6015==                         length64           : 6,568 bytes in 91
blocks
==6015==                         newarray           : 6,072 bytes in 34
blocks
==6015==                         multipleinheritance: 17,904 bytes in
18 blocks
==6015==         suppressed: 0 bytes in 0 blocks
==6015== Rerun with --leak-check=full to see details of leaked memory
==6015== 
==6015== For counts of detected and suppressed errors, rerun with: -v
==6015== Use --track-origins=yes to see where uninitialised values come
from
==6015== ERROR SUMMARY: 2 errors from 2 contexts (suppressed: 0 from 0)