Bug#786718: libmpg123: incorrect check/decoding for utf-16 surrogates in id3 parser

Yuriy M. Kaminskiy yumkam at gmail.com
Sun May 24 20:08:12 UTC 2015


Package: libmpg123-0
Version: 1.20.1-2
Severity: normal

Dear Maintainer,

utf-16 decoder in id3 parser improperly identifies surrogate pairs, 
resulting in improper identification of characters in 0xf800-0xfffe 
range as leading surrogate and decoding failure.

E.g. attempt to decode title "「x」~y~" results in:
[id3.c:1065] error: Invalid UTF16 surrogate pair at 0 (0xff62).
and empty parsed title.
Attempt to decode title "xy&zte" results in:
[id3.c:1065] error: Invalid UTF16 surrogate pair at 4 (0xff06).
and "xy" in parsed title.

Patch attached, verified to work.
This bug still present in the latest upstream version (1.22.2).

-- System Information:
Debian Release: 8.0
   APT prefers stable-updates
   APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: i386 (i686)

Kernel: Linux 3.16.0-4-686-pae (SMP w/1 CPU core)
Locale: LANG=ja_JP.UTF-8, LC_CTYPE=ja_JP.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages libmpg123-0 depends on:
ii  libc6              2.19-18
ii  multiarch-support  2.19-18

libmpg123-0 recommends no packages.

libmpg123-0 suggests no packages.

-- no debconf information
-------------- next part --------------
A non-text attachment was scrubbed...
Name: fix-utf16-surrogate-range.patch
Type: text/x-patch
Size: 1231 bytes
Desc: not available
URL: <http://lists.alioth.debian.org/pipermail/pkg-multimedia-maintainers/attachments/20150524/f95020ff/attachment.bin>


More information about the pkg-multimedia-maintainers mailing list