[PD-dev] [ pure-data-Bugs-3536805 ] [tabread4~] crashes with illegal tablesizes

[SourceForge.net]

Bugs item #3536805, was opened at 2012-06-21 00:10
Message generated for change (Tracker Item Submitted) made by zmoelnig
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=478070&aid=3536805&group_id=55736

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: None
Group: None
Status: Open
Resolution: None
Priority: 5
Private: No
Submitted By: IOhannes m zmölnig (zmoelnig)
Assigned to: Nobody/Anonymous (nobody)
Summary: [tabread4~] crashes with illegal tablesizes

Initial Comment:
as reported for the debian-package of Pd [1], pd can crash when using [tabread4~] and loading an invalid (raw) file into the table using [soundfiler].

"invalid" file means, that a (raw) file is read with a "headersize" (to skip) that is actually larger than the entire file.

[soundfiler] will attempt to resize the table to something negative (since filelength-headersize<0) which will fail safely, and leave the table at a size=1.

however, a [tabread4~] that accesses this table might segfault, since it needs more than 1 sample to interpolate.

for a patch that triggers the problem, see [1].

it seems that the problem only appears on x86_64, and not on i386.

[1] http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=678306

----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=478070&aid=3536805&group_id=55736