Bug#778703: lame: segmentation fault at get_audio.c:865

Fabian Greffrath fabian at greffrath.com
Thu Feb 19 06:32:48 UTC 2015


Am Donnerstag, den 19.02.2015, 07:21 +0100 schrieb Fabian Greffrath: 
> 18446744073709407040 as size_t type, i.e. "unlimited". And indeed
> fread() returns 3967 bytes into the samples_read variable.
> Unfortunately, these 3967 bytes have been written into the static int
> array "sample_buffer" which was of size 2304. Boom, stack corrupted!

No, wait, that should fit. I think the real problem is that the value of
samples_read is used in the subsequent line to point the op* pointer way
beyond the sample_buffer[] array and override the values there in the
GA_URS_IFLOOP() loops that follow.

- Fabian



More information about the pkg-multimedia-maintainers mailing list