#349 div zero crash in wav.c

[treebacker]

There is a div zero bug in wav.c:967, functon startread.
With crafted wav file, it crashes.
Trigger command: ./src/.libs/sox bug1 -n noiseprof /dev/null

In AddressSanitizer:

In gdb:

The crafted file is attached.

[Jan Starý]

Cannot reproduce with current git:

$ play Downloads/sox-zero.wav 
play FAIL formats: bad input format for file `Downloads/sox-zero.wav': data encoding or sample size was not specified

$ sox ~/Downloads/sox-zero.wav -n noiseprof /dev/null
sox FAIL formats: bad input format for file `/Users/hans/Downloads/sox-zero.wav': data encoding or sample size was not specified

What is the version where you are seeing this?

[Martin Guy]

This is CVE-2021-33844
Absent in 14.4.2, Debian and sox_ng.
Present in 42b355 and sox.sf.net master