Bug#624666: vlc: security update breaks mp3 support

[Adam D. Barratt]

Hi,

As this regression was apparently caused by a security update, I've
added the security team to CC.

On Sat, 2011-04-30 at 14:43 +0200, Christoph Goehre wrote:
> After I update from vlc version 0.8.6.h-4+lenny2.3 to 0.8.6.h-4+lenny3,
> I couldn't play any mp3 music file. If I reinstall the old version,
> everything works fine.
> 
> $ vlc -v file.mp3 
> VLC media player 0.8.6h Janus
> [00000314] message packetizer warning: message queue overflowed
> [00000344] ffmpeg decoder warning: incorrect frame size
>  (mp2 at 0x8f4b600)
[...]
> For my investigation, the bug must be situated in the mpeg_audio patch
> hunks of CVE-2010-1441.patch.

Regards,

Adam