Issues · Xiph.Org / Vorbis

New issue

(CVE-2017-14632)call oggpack_writeclear() with uninitialized stack var opb in function vorbis_analysis_headerout() when vi->channels<=0 in libvorbis 1.3.5

#2328 · opened Sep 13, 2017 by Jiangxin
- CLOSED
- 5
updated May 09, 2018
(CVE-2017-14633)an out-of-bound array read vul in function mapping0_forward() in libvorbis 1.3.5

#2329 · opened Sep 14, 2017 by Jiangxin
- CLOSED
- 4
updated Dec 11, 2017
CVE-2017-11735 - The vorbis_block_clear function in lib/block.c in Xiph.Org libvorbis 1.3.5 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted ogg file.

#2331 · opened Sep 30, 2017 by Guido Günther
- CLOSED
- 3
updated Oct 09, 2017
CVE-2017-11333 - The vorbis_analysis_wrote function in lib/block.c in Xiph.Org libvorbis 1.3.5 allows remote attackers to cause a denial of service (OOM) via a crafted wav file.

#2332 · opened Sep 30, 2017 by Guido Günther
- CLOSED
- 6
updated Mar 17, 2018
vorbis git repository missing release markers

#2271 · opened May 29, 2016 by Jacob Lifshay
- CLOSED
- 1
updated Nov 01, 2017
vorbis_comment_add_tag() crash: very large alloca()

#2221 · opened Sep 05, 2015 by i80and
- CLOSED
- 0
updated Nov 01, 2017
_initial_pcmoffset uses error codes from vorbis_packet_blocksize in arithmetics

#2142 · opened Jan 05, 2015 by Martin Steghöfer
- CLOSED
- 0
updated Nov 01, 2017
"Null pointer dereference" [forwarded from Debian #774516]

#2140 · opened Jan 04, 2015 by Martin Steghöfer
- CLOSED
- 0
updated Nov 01, 2017
libvorbis-1.3.4 misdecodes streams with single-symbol codebooks

#2139 · opened Jan 01, 2015 by Andrew Church
- CLOSED
- 0
updated Nov 01, 2017
Invalid memory access with samplingrate==0

#2078 · opened Nov 06, 2014 by Martin Steghöfer
- CLOSED
- 0
updated Nov 01, 2017
[libvorbis patch] -O20 and -O4 don't exist (emscripten JS cross-compile fix)

#2067 · opened Oct 31, 2014 by Brion Vibber
- CLOSED
- 0
updated Nov 01, 2017
Typos in Vorbis I specification

#2060 · opened Oct 10, 2014 by stefan
- CLOSED
- 0
updated Nov 01, 2017
Vorbis borks a pure 440Hz sine wave at the highest quality level

#2038 · opened Aug 08, 2014 by Artem S. Tashkinov won't fix
- CLOSED
- 0
updated Nov 01, 2017
Switched ai and hi in vorbisenc.c

#1982 · opened Oct 14, 2013 by Timothy Gu invalid
- CLOSED
- 0
updated Nov 01, 2017
libvorbis-1.3.3 fails to link its tests

#1974 · opened Sep 13, 2013 by heirecka
- CLOSED
- 0
updated Nov 01, 2017
vorbisfile: fclose not always called by ov_clear

#1965 · opened Jul 02, 2013 by tangobravo
- CLOSED
- 0
updated Nov 01, 2017
memory leak in vorbis_commentheader_out

#1840 · opened Nov 04, 2011 by Gitlab Bot
- CLOSED
- 0
updated Nov 01, 2017
Configure script architecture detection inconsistent between libvorbis-1.3.2 and libogg-1.3.0

#1835 · opened Sep 30, 2011 by Matthew Turner
- CLOSED
- 1
updated Nov 01, 2017
libvorbis using undocumented optimization option "-O20" makes clang build fail

#1819 · opened Jul 28, 2011 by Ruben Van Boxem duplicate
- CLOSED
- 0
updated Nov 01, 2017
I dislike my fresh OGG audio file

#1807 · opened Jun 03, 2011 by Gitlab Bot invalid
- CLOSED
- 0
updated Nov 01, 2017
[PATCH] libvorbis* pkg-config files produce overlinking

#1759 · opened Dec 08, 2010 by Cristian Morales Vega
- CLOSED
- 0
updated Nov 01, 2017
oggenc: double free or corruption

#1697 · opened May 08, 2010 by Johann Burkard works for me
- CLOSED
- 0
updated Nov 01, 2017
Leak when staticbook_unpack fails due to truncated packet

#1663 · opened Mar 20, 2010 by Matthew Gregan
- CLOSED
- 0
updated Nov 01, 2017
vorbisfile free of uninitialized memory if seek fails

#2327 · opened Jun 13, 2017 by Gitlab Bot
- CLOSED
- 4
updated Jan 28, 2019
ov_raw_total() ignores the size of the last page

#2230 · opened Oct 20, 2015 by Martin Steghöfer
- 0
updated Nov 01, 2017
psy.c: warning C4305: '=' : truncation from 'double' to 'float'

#2218 · opened Aug 28, 2015 by irov13
- 0
updated Nov 01, 2017
infer issues on libvorbis

#2203 · opened Jun 12, 2015 by Ghost User
- 0
updated Nov 01, 2017
CHANGES changelog for libvorbis not updated since libvorbis 1.3.3

#2120 · opened Dec 11, 2014 by Tim Small
- CLOSED
- 1
updated Jun 10, 2020
tagcompare() uses toupper() and is sensitive to the current locale

#2079 · opened Nov 07, 2014 by David King
- CLOSED
- 2
updated Feb 02, 2019
Simplify render_point

#2062 · opened Oct 15, 2014 by Sven Eberhardt
- 0
updated Nov 01, 2017
Incorrect bark() formula in floor0 specification

#2030 · opened Jun 26, 2014 by Andrew Church
- 0
updated Nov 01, 2017
Segfault in libvorbisenc when passing --advanced-encode-option disable_coupling to oggenc

#1975 · opened Sep 28, 2013 by aeliosheotup
- CLOSED
- 1
updated Apr 09, 2018
Out of bounds index in psy.c

#1969 · opened Aug 04, 2013 by Tony Wilson
- 0
updated Nov 01, 2017
[PATCH] libvorbis* uninstalled pkg-config files produce overlinking

#1948 · opened Apr 18, 2013 by Brad Smith
- 0
updated Nov 01, 2017
[PATCH] configure script should honour --docdir option

#1945 · opened Apr 04, 2013 by Karl Lindén
- 0
updated Nov 01, 2017
todB () function correction

#1920 · opened Jan 03, 2013 by Aniket B
- 0
updated Nov 01, 2017
Build with automake-1.13 broken

#1919 · opened Jan 03, 2013 by Marko Lindqvist
- CLOSED
- 1
updated Jun 13, 2020
Warnings in libvorbis/libvorbisfile

#1848 · opened Dec 09, 2011 by Andrew Church
- 0
updated Nov 01, 2017
calling vorbis_info_clear() before vorbis_dsp_clear() causes memory leak

#1829 · opened Aug 16, 2011 by Ali Rahimi
- 0
updated Nov 01, 2017
libvorbisenc NULL dereference

#1818 · opened Jul 22, 2011 by Mathieu Geli
- 0
updated Dec 31, 2017
Infinite loop in _get_prev_page_serial

#2333 · opened Jan 22, 2018 by Stefan Lednicky
- CLOSED
- 2
updated Jan 28, 2019
Stack buffer overflow(read) in function bark_noise_hybridmp() of libvorbis-1.3.6, which is caused by lacking of array length check.

#2334 · opened Apr 25, 2018 by Jiangxin
- CLOSED
- 5
updated Jul 06, 2020
Four heap buffer overflow(read and write) vuls in function mapping0_forward() of libvorbis-1.3.6, which is caused by lacking of var “channels” check.

#2335 · opened Apr 25, 2018 by Jiangxin
- CLOSED
- 1
- 3
updated Jul 16, 2020
Decoding error in libvorbis when compiled on Mac OS X in i386 architecture

#1805 · opened May 26, 2011 by Shannon Stewman
- CLOSED
- 1
updated Jun 13, 2020
Use AC_CANONICAL_HOST for detecting cross-compilation environment

#1800 · opened May 15, 2011 by Maarten Bosmans
- CLOSED
- 2
updated Jun 23, 2020
Track length do not show up in audio players

#1784 · opened Apr 01, 2011 by pål smievoll
- CLOSED
- 1
updated Jan 28, 2019
Bit allotment abnormality of the encoding in the specific condition.

#1658 · opened Mar 09, 2010 by Gitlab Bot
- CLOSED
- 0
updated Nov 06, 2018
vorbis_analysis_headerout calls oggpack_writeclear with uninitialized ogb if !v->backend_state

#1656 · opened Mar 04, 2010 by Chris Double
- CLOSED
- 0
updated Nov 06, 2018
Revew and "merge" mozilla patches against libvorbis.

#1638 · opened Feb 01, 2010 by Gregory Maxwell
- CLOSED
- 0
updated Nov 06, 2018
libvorbis-1.2.3 may access out of static array in 'make check'.

#1635 · opened Jan 21, 2010 by lepidum
- CLOSED
- 0
updated Nov 06, 2018
LibVorbis Comment Spelling Fixes

#1624 · opened Dec 01, 2009 by Chris 'Xenon' Hanson
- CLOSED
- 0
updated Nov 06, 2018
-mcpu=970 causes wrong code on powerpc-linux-gnuspe-

#1614 · opened Oct 29, 2009 by bigeasy
- CLOSED
- 0
updated Nov 06, 2018
oggenc crash after encode w/resampling

#1602 · opened Oct 07, 2009 by Gitlab Bot works for me
- CLOSED
- 0
updated Nov 06, 2018
ov_fopen should be declared with const char *path

#1593 · opened Sep 17, 2009 by Kumar Appaiah
- CLOSED
- 0
updated Nov 06, 2018
changes file

#1584 · opened Aug 18, 2009 by Eldar
- CLOSED
- 0
updated Nov 06, 2018
crash (segfault) in vorbis_synthesis at synthesis.c:30

#1575 · opened Jul 24, 2009 by keelerda
- CLOSED
- 0
updated Nov 06, 2018
crash (segfault) in res2_inverse at res0.c:893

#1572 · opened Jul 23, 2009 by keelerda
- CLOSED
- 0
updated Nov 06, 2018
[PATCH] libvorbis-1.2.3: Build test/ only if "make check" is called and build examples/ only if --enable-examples is passed

#1571 · opened Jul 22, 2009 by Samuli Suominen
- CLOSED
- 0
updated Nov 06, 2018
segmentation fault in vorbis_synthesis_headerin() when playing file

#1566 · opened Jul 16, 2009 by keelerda
- CLOSED
- 0
updated Nov 06, 2018
vorbis-java status? official binaries? maven?

#2337 · opened Nov 30, 2018 by Andrey B
- 1
updated Nov 30, 2018
Remove C++ comments

#2339 · opened Dec 21, 2018 by Henry Bent
- CLOSED
- 1
updated Jan 28, 2019
divide by zero issue

#2340 · opened Feb 03, 2019 by niugx
- CLOSED
- 3
updated Jun 11, 2020
vorbis.pc.in assumes -lm, this should be detected first and then added if needed

#1783 · opened Mar 29, 2011 by scottmc2
- CLOSED
- 2
updated Jun 13, 2020
vorbis_granule_time(): invalid integer constant

#1766 · opened Dec 29, 2010 by Jens Ayton
- 0
updated Mar 04, 2019
Error playing file - Ogg Vorbis Mode 2 (6750)

#1520 · opened Feb 28, 2009 by luy duplicate
- CLOSED
- 0
updated Jul 01, 2019
Error playing file - Ogg Vorbis Mode 2 (6750)

#1519 · opened Feb 28, 2009 by luy duplicate
- CLOSED
- 0
updated Jul 01, 2019
Error playing file - Ogg Vorbis Mode 2 (6750)

#1518 · opened Feb 28, 2009 by luy
- CLOSED
- 0
updated Jul 01, 2019
unaligned access on 64-bit platform

#77 · opened Nov 09, 2001 by chouser
- CLOSED
- 0
updated Jul 01, 2019
libvorbis does not like being compiled by a llvm backend.

#1707 · opened Jun 24, 2010 by dak180
- CLOSED
- 1
updated Jun 13, 2020
Truncated packets in ogg vorbis

#1693 · opened Apr 30, 2010 by siddartha
- 0
updated Apr 08, 2017
libvorbis installs doxygen-build.stamp

#1673 · opened Apr 03, 2010 by John Ferlito
- 0
updated Apr 08, 2017
residue vector partition size limitation (wrong information on Vorbis docs)

#1640 · opened Feb 04, 2010 by siddartha
- 0
updated Apr 08, 2017
Some specification improvements

#1609 · opened Oct 18, 2009 by Gitlab Bot
- 0
updated Apr 08, 2017
libvorbis-1.2.0\win32\VS2005\libvorbis: missing static build configuration

#1327 · opened Mar 21, 2008 by OlafvdSpek
- CLOSED
- 1
updated Jun 12, 2020
Status of integrating autuv work into vorbis?

#1251 · opened Oct 21, 2007 by j.w.r.degoede
- CLOSED
- 1
updated Jun 23, 2020
example code error?

#491 · opened Dec 12, 2003 by Bill Nottingham
- CLOSED
- 1
updated Jun 23, 2020
vorbisenc api docs out of date

#468 · opened Oct 23, 2003 by Ghost User
- CLOSED
- 1
updated Jun 23, 2020
Extraneous 'f' parameter in ov_open_callbacks documentation

#467 · opened Oct 21, 2003 by mat
- CLOSED
- 1
updated Jun 13, 2020
Low level residue decode pseudo code makes no sense

#328 · opened Mar 04, 2003 by jripley
- 0
updated Apr 08, 2017
weird clicks/noises when encoding a file

#607 · opened Jan 18, 2005 by Gitlab Bot works for me
- CLOSED
- 0
updated Apr 08, 2017
missing 'vorbis_packet_blocksize' export in 'win32/vorbis.def'

#27 · opened Jun 11, 2001 by tom
- CLOSED
- 0
updated Apr 08, 2017
Raw seeking in small ogg files isnt working

#154 · opened Feb 11, 2002 by d00jkr
- CLOSED
- 0
updated Apr 08, 2017
possible use of uninitialized variable in Tremor/sharedbook.c

#682 · opened Jul 07, 2005 by Daniel Stenberg invalid
- CLOSED
- 0
updated Apr 08, 2017
encoding crashes sometimes with EXCEPTION_ACCESS_VIOLATION

#300 · opened Dec 20, 2002 by ggyepesi
- CLOSED
- 0
updated Apr 08, 2017
ov_read() should default to native byte order

#339 · opened May 10, 2003 by Michel Daenzer won't fix
- CLOSED
- 0
updated Apr 08, 2017
Typo and bug in high level residue decode pseudo code

#326 · opened Mar 04, 2003 by jripley
- CLOSED
- 0
updated Apr 08, 2017
vorbis-tools/libvorbis is apparently not 64-bit clean

#618 · opened Feb 23, 2005 by Bill Nottingham works for me
- CLOSED
- 0
updated Apr 08, 2017
Extreme low bitrates 32khz 32kbits (technical brief complaint :))

#626 · opened Mar 05, 2005 by Gitlab Bot won't fix
- CLOSED
- 0
updated Apr 08, 2017
FPE when encoding with -q5 under linux/axp

#311 · opened Jan 29, 2003 by mwhitson
- CLOSED
- 0
updated Apr 08, 2017
bm->avg_binacc is not initialized with zeros, resulting in too large ogg files when encodign with fixed bitrate settings

#194 · opened May 20, 2002 by al.faber
- CLOSED
- 0
updated Apr 08, 2017
two configure script problems in 1.0-pr1

#35 · opened Jun 19, 2001 by cardhore works for me
- CLOSED
- 0
updated Apr 08, 2017
vorbis_fpu_setround is broken

#1547 · opened Jun 22, 2009 by Siarhei Siamashka
- CLOSED
- 0
updated Apr 08, 2017
Patch to fix vorbis docbook compilation on trunk

#1523 · opened Mar 04, 2009 by Max Horn
- CLOSED
- 0
updated Apr 08, 2017
doc/programming.html still says packet->frameno

#79 · opened Nov 14, 2001 by timj
- CLOSED
- 0
updated Apr 08, 2017
missing 'floor1.c' in both 'win32/vorbis_dynamic.dsp' & 'win32/vorbis_static.dsp'

#28 · opened Jun 11, 2001 by tom
- CLOSED
- 0
updated Apr 08, 2017
output of vorbis 'decoder_example' is inconsistent with 'oggdec'

#1548 · opened Jun 22, 2009 by Siarhei Siamashka
- CLOSED
- 0
updated Apr 08, 2017
Add filter support to vorbis decoding

#1263 · opened Dec 01, 2007 by williampoetra
- CLOSED
- 0
updated Apr 08, 2017
Floating point error on encoding PCM sample file

#1241 · opened Sep 14, 2007 by scrat
- CLOSED
- 0
updated Apr 08, 2017
[PATCH] surround _analysis_output() with #if 0..#endif preprocessor directives

#1556 · opened Jul 07, 2009 by Eldar
- CLOSED
- 0
updated Apr 08, 2017
vorbis.m4:9: warning: underquoted definition of XIPH_PATH_VORBIS

#500 · opened Jan 23, 2004 by alexander.winston
- CLOSED
- 0
updated Apr 08, 2017