[Lame-dev] [ lame-Bugs-1488078 ] SEGV in fft_long (fft.c)

[SourceForge.net <no...@so...>]

Bugs item #1488078, was opened at 2006-05-13 13:26
Message generated for change (Tracker Item Submitted) made by Item Submitter
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=100290&aid=1488078&group_id=290

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: Frontends (lame/mp3x/...)
Group: None
Status: Open
Resolution: None
Priority: 5
Submitted By: Kyle VanderBeek (kylev)
Assigned to: Nobody/Anonymous (nobody)
Summary: SEGV in fft_long (fft.c)

Initial Comment:
I'm now getting a SEGV when trying to encode files:

(gdb) run /data/riptmp/1147417555.43.wav /tmp/out.mp3
Starting program: /usr/bin/lame
/data/riptmp/1147417555.43.wav /tmp/out.mp3
Reading symbols from shared object read from target
memory...done.
Loaded system supplied DSO at 0x485000
LAME version 3.96.1 (http://lame.sourceforge.net/)
CPU features: MMX (ASM used), 3DNow! (ASM used)
Using polyphase lowpass filter, transition band: 17249
Hz - 17782 Hz
Encoding /data/riptmp/1147417555.43.wav to /tmp/out.mp3
Encoding as 44.1 kHz 128 kbps j-stereo MPEG-1 Layer III
(11x) qval=3
    Frame          |  CPU time/estim | REAL time/estim
| play/CPU |    ETA
     0/22981  ( 0%)|    0:00/    0:00|    0:00/   
0:00|   0.0000x|    0:00
Program received signal SIGSEGV, Segmentation fault.
fft_long (gfc=0x0, x=Variable "x" is not available.
) at fft.c:258
258         gfc->fft_fht(x, BLKSIZE/2);

Backtrace:

(gdb) bt
#0  fft_long (gfc=0x0, x=Variable "x" is not available.
) at fft.c:258
#1  0x0805c5bf in L3psycho_anal_ns (gfp=0x93ae648,
buffer=0xbfdfa3c0,
    gr_out=0, ms_ratio=0xb7edd2f0,
ms_ratio_next=0xbfdfa3d8,
    masking_ratio=0xbfdf9438, masking_MS_ratio=0xbfdf84f8,
    percep_entropy=0xbfdfa3a8,
percep_MS_entropy=0xbfdfa398,
    energy=0xbfdfa378, blocktype_d=0xbfdfa3b8) at
psymodel.c:1493
#2  0x0806da70 in lame_encode_mp3_frame (gfp=0x93ae648,
inbuf_l=0xb7ece008,
    inbuf_r=0xb7ed1e48, mp3buf=0xbfdfa528 "",
mp3buf_size=16384)
    at encoder.c:406
#3  0x08052c70 in lame_encode_frame (gfp=0x93ae648,
inbuf_l=0xb7ece008,
    inbuf_r=0xb7ed1e48, mp3buf=0xbfdfa528 "",
mp3buf_size=16384) at lame.c:1344
#4  0x08052eed in lame_encode_buffer_sample_t
(gfp=0x93ae648,
    buffer_l=0x93b5df8, buffer_r=0x93b7000, nsamples=0,
mp3buf=0xbfdfa528 "",
    mp3buf_size=16384) at lame.c:1490
#5  0x08053311 in lame_encode_buffer_int
(gfp=0x93ae648, buffer_l=0xbfdfe528,
    buffer_r=0xbfdff728, nsamples=1152,
mp3buf=0xbfdfa528 "",
    mp3buf_size=16384) at lame.c:1622
#6  0x08049ebf in lame_encoder (gf=0x93ae648,
outf=0x93ae9c0, nogap=0,
    inPath=0xbfe00995 "/data/riptmp/1147417555.43.wav",
    outPath=0xbfe02997 "/tmp/out.mp3") at main.c:417
#7  0x0804add3 in main (argc=3, argv=0xbfe03d54) at
main.c:791
#8  0x004b8d7f in __libc_start_main () from /lib/libc.so.6
#9  0x08049521 in _start ()

I wonder if there is some bounds checking failure
before calling fft_long.  I can provide example .wav if
needed.

Running lame-3.96.1-2.2.fc4 on FC4, rebuilt/installed
locally from .spec file via freshrpms.net.

----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=100290&aid=1488078&group_id=290