[gstreamer-bugs] [Bug 399342] New: Crash in the libmpeg2 plugin when trying to play a specially crafted MPEG 2 Video file

[GStreamer (bugzilla.gnome.org)]

Do not reply to this via email (we are currently unable to handle email
responses and they get discarded).  You can add comments to this bug at
http://bugzilla.gnome.org/show_bug.cgi?id=399342

  GStreamer | gst-plugins-ugly | Ver: 0.10.5

           Summary: Crash in the libmpeg2 plugin when trying to play a
                    specially crafted MPEG 2 Video file
           Product: GStreamer
           Version: 0.10.5
          Platform: Other
        OS/Version: Linux
            Status: UNCONFIRMED
          Keywords: security
          Severity: major
          Priority: Normal
         Component: gst-plugins-ugly
        AssignedTo: gstreamer-bugs at lists.sourceforge.net
        ReportedBy: lool+gnome at via.ecp.fr
         QAContact: gstreamer-bugs at lists.sourceforge.net
     GNOME version: Unspecified
   GNOME milestone: Unspecified


Hi,

Sam Hocevar reported three different issues with GStreamer 0.10 modules in
Debian bug http://bugs.debian.org/407004.  The bugs were discovered with the
help of a new media file fuzzer, "zzuf", which is available from
http://sam.zoy.org/zzuf/.

This particular bug is about the hang that happens when trying to play
http://sam.zoy.org/zzuf/lol-gstreamer.m2v.

This results in a segfault, obviously during MPEG2 decoding, but I couldn't get
a clean backtrace:
Thread 4 (Thread -1238971472 (LWP 1146)):
#0  0x4cdfcc6f in ?? ()
No symbol table info available.
#1  0xb75ebc93 in mpeg2_slice () from /usr/lib/libmpeg2.so.0
No symbol table info available.
#2  0x0811e8b8 in ?? ()
No symbol table info available.
#3  0x00000000 in ?? ()
No symbol table info available.

This is with plugins-ugly 0.10.5, plugins-base 0.10.11, and GStreamer 0.10.11.

Bye,


-- 
Configure bugmail: http://bugzilla.gnome.org/userprefs.cgi?tab=email