Open Bug 1447055 Opened 6 years ago Updated 2 years ago

UBSan: vorbis: value is outside the range lib/sharedbook.c:65

Categories

(Core :: Audio/Video: Playback, defect, P2)

Product:
Core
Component:
Audio/Video: Playback
Type:
defect

Tracking

()

People

(Reporter: tsmith, Unassigned)

References

(Blocks 1 open bug)

Details

(Keywords: csectype-undefined, testcase)

Attachments

(1 file)

testcase.ogg
6.29 KB, video/ogg
Details
Attached video testcase.ogg — 
Found in vorbis commit d22c3ab

sharedbook.c:65:9: runtime error: value -5.49246e+57 is outside the range of representable values of type 'float'
    #0 0x5453d5 in _float32_unpack lib/sharedbook.c:65:9
    #1 0x5453d5 in _book_unquantize lib/sharedbook.c:206
    #2 0x5472d3 in vorbis_book_init_decode lib/sharedbook.c:370:18
    #3 0x4ef08c in _vds_shared_init lib/block.c:240:12
    #4 0x4faa44 in vorbis_synthesis_init lib/block.c:709:6
    #5 0x4eb3c5 in main examples/decoder_example.c:200:8
    #6 0x7f8b12f6282f in __libc_start_main /build/glibc-Cl5G7W/glibc-2.23/csu/../csu/libc-start.c:291
    #7 0x419528 in _start (decoder_example+0x419528)
Thomas one more too look at. Feel free to re-direct to someone else (I just don't anyone else familiar with Vorbis).
Rank: 15
Flags: needinfo?(tdaede)
Priority: -- → P2
I actually get a different runtime error from the attached testcase:

sharedbook.c:417:30: runtime error: left shift of 16 by 27 places cannot be represented in type 'int'
Flags: needinfo?(tdaede)
See Also: → 1446539

(In reply to Thomas Daede [:TD-Linux] from comment #2)

I actually get a different runtime error from the attached testcase:

sharedbook.c:417:30: runtime error: left shift of 16 by 27 places cannot be
represented in type 'int'

I have opened bug 1583402 for that issue.

Blocks: ubsan
Severity: normal → S3
You need to log in before you can comment on or make changes to this bug.