Bug#689659: mpg123 segfaults on specific file

[Pavel Machek]

Subject: mpg123 segfaults on specific mp3 file
Package: mpg123
Version: 1.14.2+svn20120622-1
Severity: important

*** Please type your report below this line ***

Crash seems to be repeatable. Possible security problem?

pavel at amd:/data/picture/zoo7$ mpg123 /data/mp3/czech/mladek/1/02.O\
sněhurce.mp3 
High Performance MPEG 1.0/2.0/2.5 Audio Player for Layer 1, 2 and 3.
Version 0.59o (1998/Feb/08). Written and copyrights by Michael Hipp.
Uses code from various people. See 'README' for more!
THIS SOFTWARE COMES WITH ABSOLUTELY NO WARRANTY! USE AT YOUR OWN RISK!
Title  : O SNEHURCE                      Artist: IVAN MLADEK                   
Album  : POHADKY A JINE POVIDACKY        Year: 1994, Genre: 28
Comment:                                

Directory: /data/mp3/czech/mladek/1/
Playing MPEG stream from 02.O sněhurce.mp3 ...
MPEG 1.0 layer III, 128 kbit/s, 44100 Hz joint-stereo
Segmentation fault (core dumped)
pavel at amd:/data/picture/zoo7$ gdb `which mpg123` core
GNU gdb (GDB) 7.4.1-debian
Copyright (C) 2012 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later
<http://gnu.org/licenses/gpl.html>
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.  Type "show
copying"
and "show warranty" for details.
This GDB was configured as "i486-linux-gnu".
For bug reporting instructions, please see:
<http://www.gnu.org/software/gdb/bugs/>...
Reading symbols from /usr/local/bin/mpg123...(no debugging symbols
found)...done.
[New LWP 5148]

warning: Can't read pathname for load map: Input/output error.
Failed to read a valid object file image from memory.
Core was generated by `mpg123 /data/mp3/czech/mladek/1/02.O
sněhurce.mp3'.
Program terminated with signal 11, Segmentation fault.
#0  __memcpy_ia32 () at ../sysdeps/i386/i686/multiarch/../memcpy.S:75
75  ../sysdeps/i386/i686/multiarch/../memcpy.S: No such file or
directory.
(gdb) bt
#0  __memcpy_ia32 () at ../sysdeps/i386/i686/multiarch/../memcpy.S:75
#1  0x0805cf90 in ?? ()
Backtrace stopped: previous frame inner to this frame (corrupt stack?)
(gdb) 



-- System Information:
Debian Release: wheezy/sid
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: i386 (i686)

Kernel: Linux 3.6.0-rc6+ (SMP w/2 CPU cores)
Locale: LANG=C, LC_CTYPE=cs_CZ (charmap=)
Shell: /bin/sh linked to /bin/dash

Versions of packages mpg123 depends on:
ii  libc6               2.13-35              Embedded GNU C Library: Shared lib
ii  libltdl7            2.4.2-1.1            A system independent dlopen wrappe
ii  libmpg123-0         1.14.2+svn20120622-1 MPEG layer 1/2/3 audio decoder (sh

Versions of packages mpg123 recommends:
ii  libasoun 1.0.25-4                        shared library for ALSA applicatio
ii  libjack0 1:0.121.3+20120418git75e3e20b-2 JACK Audio Connection Kit (librari
ii  libopena 1:1.13-2                        Software implementation of the Ope
ii  libporta 19+svn20111121-1                Portable audio I/O - shared librar
ii  oss-comp 2                               Open Sound System (OSS) compatibil

Versions of packages mpg123 suggests:
ii  alsa-utils                    1.0.25-3   Utilities for configuring and usin
pn  jackd                         <none>     (no description available)
pn  nas                           <none>     (no description available)
ii  oss-compat                    2          Open Sound System (OSS) compatibil
pn  oss4-base                     <none>     (no description available)
ii  pulseaudio                    1.1-3.2    PulseAudio sound server

-- no debconf information