Bug 16204 - MP3 file crashes Squeezebox Server 7.5.x with perl 5.8.8
: MP3 file crashes Squeezebox Server 7.5.x with perl 5.8.8
Status: UNCONFIRMED
Product: Logitech Media Server
Classification: Unclassified
Component: Audio
: 7.5.4
: Other Linux (other)
: -- normal (vote)
: ---
Assigned To: Unassigned bug - please assign me!
:
Depends on:
Blocks:
  Show dependency treegraph
 
Reported: 2010-05-10 01:01 UTC by 2z8rvgk02
Modified: 2011-06-04 17:15 UTC (History)
0 users

See Also:
Category: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description 2z8rvgk02 2010-05-10 01:01:16 UTC
MP3 files from the following podcast:

http://biblebelievers.com/OFRH/podcast/podcast_OFRH.xml

cause the server to crash.  I tried copying some of the MP3s
to the local disk and reproduced the crash in gdb:

Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 1208095648 (LWP 7904)]
0x0fcc0e5c in strlen () from /lib/tls/libc.so.6
(gdb) where
#0  0x0fcc0e5c in strlen () from /lib/tls/libc.so.6
#1  0x0ff45c10 in Perl_newSVpv () from /usr/lib/libperl.so.5.8
#2  0x0f18e200 in _id3_parse_v2_frame_data ()
   from /usr/lib/perl5/auto/Audio/Scan/Scan.so
#3  0x0f18f0e8 in _id3_parse_v2_frame ()
   from /usr/lib/perl5/auto/Audio/Scan/Scan.so
#4  0x0f18fa14 in _id3_parse_v2 () from /usr/lib/perl5/auto/Audio/Scan/Scan.so
#5  0x0f18fd44 in parse_id3 () from /usr/lib/perl5/auto/Audio/Scan/Scan.so
#6  0x0f191a2c in _parse_wav () from /usr/lib/perl5/auto/Audio/Scan/Scan.so
#7  0x0f173178 in _scan () from /usr/lib/perl5/auto/Audio/Scan/Scan.so
#8  0x0f173654 in XS_Audio__Scan_scan ()
   from /usr/lib/perl5/auto/Audio/Scan/Scan.so
#9  0x0ff34720 in Perl_pp_entersub () from /usr/lib/libperl.so.5.8
#10 0x0ff327c4 in Perl_runops_standard () from /usr/lib/libperl.so.5.8
#11 0x0fed2120 in Perl_magicname () from /usr/lib/libperl.so.5.8
#12 0x0fed3064 in Perl_call_sv () from /usr/lib/libperl.so.5.8
#13 0x0f750684 in XS_EV__Watcher_data () from /usr/lib/perl5/auto/EV/EV.so
#14 0x0f74a554 in ev_invoke_pending () from /usr/lib/perl5/auto/EV/EV.so
#15 0x0f76bd6c in ev_loop () from /usr/lib/perl5/auto/EV/EV.so
#16 0x0f76cacc in XS_EV_loop () from /usr/lib/perl5/auto/EV/EV.so
#17 0x0ff34720 in Perl_pp_entersub () from /usr/lib/libperl.so.5.8
#18 0x0ff327c4 in Perl_runops_standard () from /usr/lib/libperl.so.5.8
#19 0x0fed37fc in perl_run () from /usr/lib/libperl.so.5.8
#20 0x100020c0 in main ()

If I try to listen to one of the files from the podcast (for example
http://biblebelievers.com/OFRH/podcast/OFRH_CD020_40.mp3)
while connected to mysqueezebox.com, the connection gets reset, so I suspect that server is crashing too.
Comment 1 2z8rvgk02 2011-06-02 16:00:37 UTC
Still getting the same exact crash in 7.5.4.
Comment 2 2z8rvgk02 2011-06-02 17:51:38 UTC
Looks like the same _id3_parse_v2_frame_data problem that was reported here:
    http://forums.slimdevices.com/archive/index.php/t-82439.html
but this crash happens when playing the MP3, not during scanning.
Comment 3 2z8rvgk02 2011-06-04 17:15:16 UTC
Crash seems to be triggered by unexpected/extra nulls in the TCON genre string.