Bug#777159:

2015-02-25 Thread Brian Carpenter
Are we sure this is fixed? I just cloned the cvs repo for lame on sourceforge and compiled it (LAME 64bits version 3.100 (alpha 2, Feb 26 2015 04:31:03) (http://lame.sf.net)) and ran it against AFL and I'm still seeing an FPE: ==30731== Process terminating with default action of signal 8

Bug#777159:

2015-02-25 Thread Fabian Greffrath
Am Mittwoch, den 25.02.2015, 22:40 -0600 schrieb Brian Carpenter: Are we sure this is fixed? I just cloned the cvs repo for lame on sourceforge and compiled it (LAME 64bits version 3.100 (alpha 2, Feb 26 2015 04:31:03) (http://lame.sf.net)) and ran it against AFL and I'm still seeing an FPE:

Bug#777159: malformed wav causes floating point exception (integer divide by zero)

2015-02-06 Thread Fabian Greffrath
Hi all, fortunately, this is all in the frontend code in frontend/get_audio.c:parse_wave_header() and not in the library. The bits_per_sample value is read from the corrupted file and is 0 in the case at hand. It is then used without further sanity checking in the following call