Bug#672123: libmpg123-0: glibc heap corruption when cueing backwards in MP3 in mplayer

Tue May 8 17:28:44 UTC 2012

Package: libmpg123-0
Version: 1.14.0-1
Severity: normal

Hi

glibc detected heap corruption while skipping backwards in mplayer about 63% of
the way into this MP3:

http://soundcloud.com/astrangelyisolatedplace/isolatedmix-13-solar-
fields/download

The stack trace suggests the bug may be in libmpg123, although it is of course
difficult to know what actually corrupted the memory:

Position: 63 %
*** glibc detected *** mplayer: free(): invalid next size (normal):
0x0000000002c3e7c0 ***
======= Backtrace: =========
/lib/x86_64-linux-gnu/libc.so.6(+0x75b46)[0x7ff7df812b46]
/lib/x86_64-linux-gnu/libc.so.6(cfree+0x6c)[0x7ff7df81787c]
/usr/lib/x86_64-linux-gnu/libmpg123.so.0(+0x7cd1)[0x7ff7e57eacd1]
/usr/lib/x86_64-linux-gnu/libmpg123.so.0(+0x15dc7)[0x7ff7e57f8dc7]
/usr/lib/x86_64-linux-gnu/libmpg123.so.0(+0x160bf)[0x7ff7e57f90bf]
/usr/lib/x86_64-linux-gnu/libmpg123.so.0(mpg123_decode+0x160)[0x7ff7e57f9600]
mplayer[0x66ded5]
mplayer[0x66e438]
mplayer(mp_decode_audio+0x1fa)[0x5595fa]
mplayer(main+0x26ba)[0x4bf11a]
/lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xfd)[0x7ff7df7bbead]
mplayer[0x4c187d]
======= Memory map: ========
00400000-01076000 r-xp 00000000 fd:00 795285
/usr/bin/mplayer1
01275000-012a8000 rw-p 00c75000 fd:00 795285
/usr/bin/mplayer1
012a8000-018c4000 rw-p 00000000 00:00 0
02bac000-02cdb000 rw-p 00000000 00:00 0                                  [heap]
7ff7d0000000-7ff7d0021000 rw-p 00000000 00:00 0
7ff7d0021000-7ff7d4000000 ---p 00000000 00:00 0
7ff7d7053000-7ff7d705e000 r-xp 00000000 fd:00 396086
/lib/x86_64-linux-gnu/libnss_files-2.13.so
7ff7d705e000-7ff7d725d000 ---p 0000b000 fd:00 396086
/lib/x86_64-linux-gnu/libnss_files-2.13.so
7ff7d725d000-7ff7d725e000 r--p 0000a000 fd:00 396086
/lib/x86_64-linux-gnu/libnss_files-2.13.so
7ff7d725e000-7ff7d725f000 rw-p 0000b000 fd:00 396086
/lib/x86_64-linux-gnu/libnss_files-2.13.so
7ff7d725f000-7ff7d7269000 r-xp 00000000 fd:00 396077
/lib/x86_64-linux-gnu/libnss_nis-2.13.so
7ff7d7269000-7ff7d7468000 ---p 0000a000 fd:00 396077
/lib/x86_64-linux-gnu/libnss_nis-2.13.so
7ff7d7468000-7ff7d7469000 r--p 00009000 fd:00 396077
/lib/x86_64-linux-gnu/libnss_nis-2.13.so
7ff7d7469000-7ff7d746a000 rw-p 0000a000 fd:00 396077
/lib/x86_64-linux-gnu/libnss_nis-2.13.so
7ff7d746a000-7ff7d7471000 r-xp 00000000 fd:00 394838
/lib/x86_64-linux-gnu/libnss_compat-2.13.so
7ff7d7471000-7ff7d7670000 ---p 00007000 fd:00 394838
/lib/x86_64-linux-gnu/libnss_compat-2.13.so
7ff7d7670000-7ff7d7671000 r--p 00006000 fd:00 394838
/lib/x86_64-linux-gnu/libnss_compat-2.13.so
7ff7d7671000-7ff7d7672000 rw-p 00007000 fd:00 394838
/lib/x86_64-linux-gnu/libnss_compat-2.13.so
7ff7d7672000-7ff7d77e9000 r--p 00000000 fd:00 789213
/usr/lib/locale/locale-archive
7ff7d77e9000-7ff7d7834000 r-xp 00000000 fd:00 800344
/usr/lib/x86_64-linux-gnu/libFLAC.so.8.2.0
7ff7d7834000-7ff7d7a33000 ---p 0004b000 fd:00 800344
/usr/lib/x86_64-linux-gnu/libFLAC.so.8.2.0
7ff7d7a33000-7ff7d7a34000 r--p 0004a000 fd:00 800344
/usr/lib/x86_64-linux-gnu/libFLAC.so.8.2.0
7ff7d7a34000-7ff7d7a35000 rw-p 0004b000 fd:00 800344
/usr/lib/x86_64-linux-gnu/libFLAC.so.8.2.0
7ff7d7a35000-7ff7d7a43000 r-xp 00000000 fd:00 788943
/usr/lib/x86_64-linux-gnu/libXi.so.6.1.0
7ff7d7a43000-7ff7d7c43000 ---p 0000e000 fd:00 788943
/usr/lib/x86_64-linux-gnu/libXi.so.6.1.0
7ff7d7c43000-7ff7d7c44000 rw-p 0000e000 fd:00 788943
/usr/lib/x86_64-linux-gnu/libXi.so.6.1.0
7ff7d7c44000-7ff7d7c48000 r-xp 00000000 fd:00 394017
/lib/x86_64-linux-gnu/libuuid.so.1.3.0
7ff7d7c48000-7ff7d7e47000 ---p 00004000 fd:00 394017
/lib/x86_64-linux-gnu/libuuid.so.1.3.0
7ff7d7e47000-7ff7d7e48000 r--p 00003000 fd:00 394017
/lib/x86_64-linux-gnu/libuuid.so.1.3.0
7ff7d7e48000-7ff7d7e49000 rw-p 00004000 fd:00 394017
/lib/x86_64-linux-gnu/libuuid.so.1.3.0
7ff7d7e49000-7ff7d7e4e000 r-xp 00000000 fd:00 796839
/usr/lib/x86_64-linux-gnu/libasyncns.so.0.3.1
7ff7d7e4e000-7ff7d804d000 ---p 00005000 fd:00 796839
/usr/lib/x86_64-linux-gnu/libasyncns.so.0.3.1
7ff7d804d000-7ff7d804e000 rw-p 00004000 fd:00 796839
/usr/lib/x86_64-linux-gnu/libasyncns.so.0.3.1
7ff7d804e000-7ff7d80af000 r-xp 00000000 fd:00 792879
/usr/lib/x86_64-linux-gnu/libsndfile.so.1.0.25
7ff7d80af000-7ff7d82ae000 ---p 00061000 fd:00 792879
/usr/lib/x86_64-linux-gnu/libsndfile.so.1.0.25
7ff7d82ae000-7ff7d82b0000 r--p 00060000 fd:00 792879
/usr/lib/x86_64-linux-gnu/libsndfile.so.1.0.25
7ff7d82b0000-7ff7d82b1000 rw-p 00062000 fd:00 792879
/usr/lib/x86_64-linux-gnu/libsndfile.so.1.0.25
7ff7d82b1000-7ff7d82b5000 rw-p 00000000 00:00 0
7ff7d82b5000-7ff7d82be000 r-xp 00000000 fd:00 393970
/lib/x86_64-linux-gnu/libwrap.so.0.7.6
7ff7d82be000-7ff7d84bd000 ---p 00009000 fd:00 393970
/lib/x86_64-linux-gnu/libwrap.so.0.7.6
7ff7d84bd000-7ff7d84be000 r--p 00008000 fd:00 393970
/lib/x86_64-linux-gnu/libwrap.so.0.7.6
7ff7d84be000-7ff7d84bf000 rw-p 00009000 fd:00 393970
/lib/x86_64-linux-gnu/libwrap.so.0.7.6
7ff7d84bf000-7ff7d84c0000 rw-p 00000000 00:00 0
7ff7d84c0000-7ff7d84c5000 r-xp 00000000 fd:00 787643
/usr/lib/x86_64-linux-gnu/libXtst.so.6.1.0
7ff7d84c5000-7ff7d86c4000 ---p 00005000 fd:00 787643
/usr/lib/x86_64-linux-gnu/libXtst.so.6.1.0
7ff7d86c4000-7ff7d86c5000 rw-p 00004000 fd:00 787643
/usr/lib/x86_64-linux-gnu/libXtst.so.6.1.0
7ff7d86c5000-7ff7d86cc000 r-xp 00000000 fd:00 799490
/usr/lib/x86_64-linux-gnu/libSM.so.6.0.1
7ff7d86cc000-7ff7d88cb000 ---p 00007000 fd:00 799490
/usr/lib/x86_64-linux-gnu/libSM.so.6.0.1
7ff7d88cb000-7ff7d88cc000 rw-p 00006000 fd:00 799490
/usr/lib/x86_64-linux-gnu/libSM.so.6.0.1
7ff7d88cc000-7ff7d88e3000 r-xp 00000000 fd:00 786670
/usr/lib/x86_64-linux-gnu/libICE.so.6.3.0
7ff7d88e3000-7ff7d8ae2000 ---p 00017000 fd:00 786670
/usr/lib/x86_64-linux-gnu/libICE.so.6.3.0
7ff7d8ae2000-7ff7d8ae4000 rw-p 00016000 fd:00 786670
/usr/lib/x86_64-linux-gnu/libICE.so.6.3.0
7ff7d8ae4000-7ff7d8ae7000 rw-p 00000000 00:00 0
7ff7d8ae7000-7ff7d8aec000 r-xp 00000000 fd:00 793468
/usr/lib/x86_64-linux-gnu/libXdmcp.so.6.0.0
7ff7d8aec000-7ff7d8ceb000 ---p 00005000 fd:00 793468
/usr/lib/x86_64-linux-gnu/libXdmcp.so.6.0.0
7ff7d8ceb000-7ff7d8cec000 rw-p 00004000 fd:00 793468
/usr/lib/x86_64-linux-gnu/libXdmcp.so.6.0.0
7ff7d8cec000-7ff7d8cee000 r-xp 00000000 fd:00 786923
/usr/lib/x86_64-linux-gnu/libXau.so.6.0.0
7ff7d8cee000-7ff7d8eee000 ---p 00002000 fd:00 786923
/usr/lib/x86_64-linux-gnu/libXau.so.6.0.0
7ff7d8eee000-7ff7d8eef000 rw-p 00002000 fd:00 786923
/usr/lib/x86_64-linux-gnu/libXau.so.6.0.0
7ff7d8eef000-7ff7d8ef2000 r-xp 00000000 fd:00 393392
/lib/x86_64-linux-gnu/libgpg-error.so.0.8.0
7ff7d8ef2000-7ff7d90f1000 ---p 00003000 fd:00 393392
/lib/x86_64-linux-gnu/libgpg-error.so.0.8.0
7ff7d90f1000-7ff7d90f2000 rw-p 00002000 fd:00 393392
/lib/x86_64-linux-gnu/libgpg-error.so.0.8.0
7ff7d90f2000-7ff7d9103000 r-xp 00000000 fd:00 794732
/usr/lib/x86_64-linux-gnu/libp11-kit.so.0.0.0
7ff7d9103000-7ff7d9302000 ---p 00011000 fd:00 794732
/usr/lib/x86_64-linux-gnu/libp11-kit.so.0.0.0
7ff7d9302000-7ff7d9303000 r--p 00010000 fd:00 794732
/usr/lib/x86_64-linux-gnu/libp11-kit.so.0.0.0
7ff7d9303000-7ff7d9304000 rw-p 00011000 fd:00 794732
/usr/lib/x86_64-linux-gnu/libp11-kit.so.0.0.0
7ff7d9304000-7ff7d9314000 r-xp 00000000 fd:00 802352
/usr/lib/x86_64-linux-gnu/libtasn1.so.3.1.15
7ff7d9314000-7ff7d9513000 ---p 00010000 fd:00 802352
/usr/lib/x86_64-linux-gnu/libtasn1.so.3.1.15
7ff7d9513000-7ff7d9514000 r--p 0000f000 fd:00 802352
/usr/lib/x86_64-linux-gnu/libtasn1.so.3.1.15
7ff7d9514000-7ff7d9515000 rw-p 00010000 fd:00 802352
/usr/lib/x86_64-linux-gnu/libtasn1.so.3.1.15
7ff7d9515000-7ff7d952f000 r-xp 00000000 fd:00 797750
/usr/lib/x86_64-linux-gnu/libsasl2.so.2.0.25
7ff7d952f000-7ff7d972f000 ---p 0001a000 fd:00 797750
/usr/lib/x86_64-linux-gnu/libsasl2.so.2.0.25
7ff7d972f000-7ff7d9730000 r--p 0001a000 fd:00 797750
/usr/lib/x86_64-linux-gnu/libsasl2.so.2.0.25
7ff7d9730000-7ff7d9731000 rw-p 0001b000 fd:00 797750
/usr/lib/x86_64-linux-gnu/libsasl2.so.2.0.25
7ff7d9731000-7ff7d9734000 r-xp 00000000 fd:00 393397
/lib/x86_64-linux-gnu/libkeyutils.so.1.4
7ff7d9734000-7ff7d9933000 ---p 00003000 fd:00 393397
/lib/x86_64-linux-gnu/libkeyutils.so.1.4
7ff7d9933000-7ff7d9934000 r--p 00002000 fd:00 393397
/lib/x86_64-linux-gnu/libkeyutils.so.1.4
7ff7d9934000-7ff7d9935000 rw-p 00003000 fd:00 393397
/lib/x86_64-linux-gnu/libkeyutils.so.1.4
7ff7d9935000-7ff7d993d000 r-xp 00000000 fd:00 795281
/usr/lib/x86_64-linux-gnu/libkrb5support.so.0.1
7ff7d993d000-7ff7d9b3c000 ---p 00008000 fd:00 795281
/usr/lib/x86_64-linux-gnu/libkrb5support.so.0.1
7ff7d9b3c000-7ff7d9b3d000 r--p 00007000 fd:00 795281
/usr/lib/x86_64-linux-gnu/libkrb5support.so.0.1
7ff7d9b3d000-7ff7d9b3e000 rw-p 00008000 fd:00 795281
/usr/lib/x86_64-linux-gnu/libkrb5support.so.0.1
7ff7d9b3e000-7ff7d9b42000 r-xp 00000000 fd:00 393286
/lib/x86_64-linux-gnu/libattr.so.1.1.0
7ff7d9b42000-7ff7d9d41000 ---p 00004000 fd:00 393286
/lib/x86_64-linux-gnu/libattr.so.1.1.0
7ff7d9d41000-7ff7d9d42000 rw-p 00003000 fd:00 393286
/lib/x86_64-linux-gnu/libattr.so.1.1.0
7ff7d9d42000-7ff7d9d4a000 r-xp 00000000 fd:00 394836
/lib/x86_64-linux-gnu/libcrypt-2.13.so
7ff7d9d4a000-7ff7d9f49000 ---p 00008000 fd:00 394836
/lib/x86_64-linux-gnu/libcrypt-2.13.so
7ff7d9f49000-7ff7d9f4a000 r--p 00007000 fd:00 394836
/lib/x86_64-linux-gnu/libcrypt-2.13.so
7ff7d9f4a000-7ff7d9f4b000 rw-p 00008000 fd:00 394836
/lib/x86_64-linux-gnu/libcrypt-2.13.so
7ff7d9f4b000-7ff7d9f79000 rw-p 00000000 00:00 0
7ff7d9f79000-7ff7d9f8a000 r-xp 00000000 fd:00 802275
/usr/lib/libcelt0.so.0.0.0
7ff7d9f8a000-7ff7da189000 ---p 00011000 fd:00 802275
/usr/lib/libcelt0.so.0.0.0
7ff7da189000-7ff7da18a000 rw-p 00010000 fd:00 802275
/usr/lib/libcelt0.so.0.0.0
7ff7da18a000-7ff7da1ce000 r-xp 00000000 fd:00 393510
/lib/x86_64-linux-gnu/libdbus-1.so.3.7.0
7ff7da1ce000-7ff7da3ce000 ---p 00044000 fd:00 393510
/lib/x86_64-linux-gnu/libdbus-1.so.3.7.0
7ff7da3ce000-7ff7da3cf000 r--p 00044000 fd:00 393510
/lib/x86_64-linux-gnu/libdbus-1.so.3.7.0
7ff7da3cf000-7ff7da3d0000 rw-p 00045000 fd:00 393510
/lib/x86_64-linux-gnu/libdbus-1.so.3.7.0
7ff7da3d0000-7ff7da447000 r-xp 00000000 fd:00 156066
/usr/lib/x86_64-linux-gnu/pulseaudio/libpulsecommon-1.1.so
7ff7da447000-7ff7da647000 ---p 00077000 fd:00 156066
/usr/lib/x86_64-linux-gnu/pulseaudio/libpulsecommon-1.1.so
7ff7da647000-7ff7da648000 r--p 00077000 fd:00 156066
/usr/lib/x86_64-linux-gnu/pulseaudio/libpulsecommon-1.1.so
7ff7da648000-7ff7da64a000 rw-p 00078000 fd:00 156066
/usr/lib/x86_64-linux-gnu/pulseaudio/libpulsecommon-1.1.so
7ff7da64a000-7ff7da651000 r-xp 00000000 fd:00 787506
/usr/lib/libjson.so.0.0.1
7ff7da651000-7ff7da850000 ---p 00007000 fd:00 787506
/usr/lib/libjson.so.0.0.1
7ff7da850000-7ff7da851000 rw-p 00006000 fd:00 787506
/usr/lib/libjson.so.0.0.1
7ff7da851000-7ff7da85c000 r-xp 00000000 fd:00 791496
/usr/lib/x86_64-linux-gnu/libdrm.so.2.4.0
7ff7da85c000-7ff7daa5b000 ---p 0000b000 fd:00 791496
/usr/lib/x86_64-linux-gnu/libdrm.so.2.4.0
7ff7daa5b000-7ff7daa5c000 r--p 0000a000 fd:00 791496
/usr/lib/x86_64-linux-gnu/libdrm.so.2.4.0
7ff7daa5c000-7ff7daa5d000 rw-p 0000b000 fd:00 791496
/usr/lib/x86_64-linux-gnu/libdrm.so.2.4.0
7ff7daa5d000-7ff7daa73000 r-xp 00000000 fd:00 790931
/usr/lib/x86_64-linux-gnu/libxcb-glx.so.0.0.0
7ff7daa73000-7ff7dac72000 ---p 00016000 fd:00 790931
/usr/lib/x86_64-linux-gnu/libxcb-glx.so.0.0.0
7ff7dac72000-7ff7dac74000 r--p 00015000 fd:00 790931
/usr/lib/x86_64-linux-gnu/libxcb-glx.so.0.0.0
7ff7dac74000-7ff7dac75000 rw-p 00017000 fd:00 790931
/usr/lib/x86_64-linux-gnu/libxcb-glx.so.0.0.0
7ff7dac75000-7ff7dac76000 r-xp 00000000 fd:00 787501
/usr/lib/x86_64-linux-gnu/libX11-xcb.so.1.0.0
7ff7dac76000-7ff7dae75000 ---p 00001000 fd:00 787501
/usr/lib/x86_64-linux-gnu/libX11-xcb.so.1.0.0
7ff7dae75000-7ff7dae76000 rw-p 00000000 fd:00 787501
/usr/lib/x86_64-linux-gnu/libX11-xcb.so.1.0.0
7ff7dae76000-7ff7dae7b000 r-xp 00000000 fd:00 794924
/usr/lib/x86_64-linux-gnu/libXfixes.so.3.1.0
7ff7dae7b000-7ff7db07b000 ---p 00005000 fd:00 794924
/usr/lib/x86_64-linux-gnu/libXfixes.so.3.1.0
7ff7db07b000-7ff7db07c000 rw-p 00005000 fd:00 794924
/usr/lib/x86_64-linux-gnu/libXfixes.so.3.1.0
7ff7db07c000-7ff7db07e000 r-xp 00000000 fd:00 794928
/usr/lib/x86_64-linux-gnu/libXdamage.so.1.1.0
7ff7db07e000-7ff7db27d000 ---p 00002000 fd:00 794928
/usr/lib/x86_64-linux-gnu/libXdamage.so.1.1.0
7ff7db27d000-7ff7db27e000 rw-p 00001000 fd:00 794928
/usr/lib/x86_64-linux-gnu/libXdamage.so.1.1.0
7ff7db27e000-7ff7db29f000 r-xp 00000000 fd:00 791014
/usr/lib/x86_64-linux-gnu/libglapi.so.0.0.0
7ff7db29f000-7ff7db49e000 ---p 00021000 fd:00 791014
/usr/lib/x86_64-linux-gnu/libglapi.so.0.0.0
7ff7db49e000-7ff7db4a1000 rw-p 00020000 fd:00 791014
/usr/lib/x86_64-linux-gnu/libglapi.so.0.0.0
7ff7db4a1000-7ff7db4a3000 rw-p 00000000 00:00 0
7ff7db4a3000-7ff7db4b9000 r-xp 00000000 fd:00 794564
/usr/lib/libdirect-1.2.so.9.0.1
7ff7db4b9000-7ff7db6b8000 ---p 00016000 fd:00 794564
/usr/lib/libdirect-1.2.so.9.0.1

MPlayer interrupted by signal 6 in module: decode_audio

...

This occurred when using the down-arrow key in CLI mplayer to skip backwards in
the MP3 file.

-- System Information:
Debian Release: wheezy/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 3.2.0-2-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages libmpg123-0 depends on:
ii  libc6              2.13-32
ii  multiarch-support  2.13-32

libmpg123-0 recommends no packages.

libmpg123-0 suggests no packages.

-- no debconf information