Bug#695495: wavpack: hybrid mode data corruption

[Julian Hughes]

Package: wavpack
Version: 4.60.1-3
Severity: important

wavpack in hybrid mode produces corrupt data on amd64.
Example:
$ wavpack -m -c -h -b300 pcm_audiosample.wav 

 WAVPACK  Hybrid Lossless Audio Compressor  Linux Version 4.60.1
 Copyright (c) 1998 - 2009 Conifer Software.  All Rights Reserved.

original md5 signature: ea3d80dda8245448de46113bf9a80fcd        
created pcm_audiosample.wv (+.wvc) in 1.36 secs (lossless, 57.86%)

.....

$ wvunpack -m pcm_audiosample.wv

 WVUNPACK  Hybrid Lossless Audio Decompressor  Linux Version 4.60.1
 Copyright (c) 1998 - 2009 Conifer Software.  All Rights Reserved.

overwrite pcm_audiosample.wav (yes/no/all)? y

original md5:  ea3d80dda8245448de46113bf9a80fcd        
unpacked md5:  d56f9ea586ef25828a1e3fa8ff2408f9        
MD5 signatures should match, but do not!


This bug is apparently caused by use of memcpy() instead of memmove()
and is architecture-specific.  The wavpack developer reports it as
being fixed in svn trunk:

http://www.hydrogenaudio.org/forums/index.php?showtopic=95889


-- System Information:
Debian Release: wheezy/sid
  APT prefers testing
  APT policy: (990, 'testing'), (500, 'testing-updates'), (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 3.6.6 (SMP w/2 CPU cores)
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages wavpack depends on:
ii  libc6        2.13-37
ii  libwavpack1  4.60.1-3

wavpack recommends no packages.

wavpack suggests no packages.

-- no debconf information