div zero in voc.c

Brought to you by: cbagwell, mansr, robs, rrt, uklauer

#351 div zero in voc.c

Status: open

Owner: nobody

Labels: bug (6)

Priority: 5

Updated: 2025-03-02

Created: 2021-04-20

Creator: treebacker

Private: No

There is a div zero in voc.c:334, functon read_samples.
Which crashes.
The trigger command: ./src/.libs/sox bug3 -n noiseprof /dev/null
In AddressSanitizer:

In gdb:

The crafted file is attached.

1 Attachments

bug3

Discussion

Jan Starý - 2023-02-13

$ sox ~/Downloads/sox-zero.voc -n noiseprof /dev/null sox FAIL sox: `/Users/hans/Downloads/sox-zero.voc' format changed: Unsupported data format
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

Martin Guy - 2025-03-02

This is CVE-2021-3643
Absent in 14.4.2, Debian and sox_ng
Present in 42b355 and sox.sf.net master

If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

div zero in voc.c

Searches

Help

#351 div zero in voc.c

Discussion