Issues · Xiph.Org / Vorbis

New issue

(CVE-2017-14632)call oggpack_writeclear() with uninitialized stack var opb in function vorbis_analysis_headerout() when vi->channels<=0 in libvorbis 1.3.5

#2328 · opened Sep 13, 2017 by Jiangxin
- CLOSED
- 5
updated May 09, 2018
(CVE-2017-14633)an out-of-bound array read vul in function mapping0_forward() in libvorbis 1.3.5

#2329 · opened Sep 14, 2017 by Jiangxin
- CLOSED
- 4
updated Dec 11, 2017
CVE-2017-11735 - The vorbis_block_clear function in lib/block.c in Xiph.Org libvorbis 1.3.5 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted ogg file.

#2331 · opened Sep 30, 2017 by Guido Günther
- CLOSED
- 3
updated Oct 09, 2017
CVE-2017-11333 - The vorbis_analysis_wrote function in lib/block.c in Xiph.Org libvorbis 1.3.5 allows remote attackers to cause a denial of service (OOM) via a crafted wav file.

#2332 · opened Sep 30, 2017 by Guido Günther
- CLOSED
- 6
updated Mar 17, 2018
vorbis git repository missing release markers

#2271 · opened May 29, 2016 by Jacob Lifshay
- CLOSED
- 1
updated Nov 01, 2017
vorbis_comment_add_tag() crash: very large alloca()

#2221 · opened Sep 05, 2015 by i80and
- CLOSED
- 0
updated Nov 01, 2017
_initial_pcmoffset uses error codes from vorbis_packet_blocksize in arithmetics

#2142 · opened Jan 05, 2015 by Martin Steghöfer
- CLOSED
- 0
updated Nov 01, 2017
"Null pointer dereference" [forwarded from Debian #774516]

#2140 · opened Jan 04, 2015 by Martin Steghöfer
- CLOSED
- 0
updated Nov 01, 2017
libvorbis-1.3.4 misdecodes streams with single-symbol codebooks

#2139 · opened Jan 01, 2015 by Andrew Church
- CLOSED
- 0
updated Nov 01, 2017
Invalid memory access with samplingrate==0

#2078 · opened Nov 06, 2014 by Martin Steghöfer
- CLOSED
- 0
updated Nov 01, 2017
[libvorbis patch] -O20 and -O4 don't exist (emscripten JS cross-compile fix)

#2067 · opened Oct 31, 2014 by Brion Vibber
- CLOSED
- 0
updated Nov 01, 2017
Typos in Vorbis I specification

#2060 · opened Oct 10, 2014 by stefan
- CLOSED
- 0
updated Nov 01, 2017
Vorbis borks a pure 440Hz sine wave at the highest quality level

#2038 · opened Aug 08, 2014 by Artem S. Tashkinov won't fix
- CLOSED
- 0
updated Nov 01, 2017
Switched ai and hi in vorbisenc.c

#1982 · opened Oct 14, 2013 by Timothy Gu invalid
- CLOSED
- 0
updated Nov 01, 2017
libvorbis-1.3.3 fails to link its tests

#1974 · opened Sep 13, 2013 by heirecka
- CLOSED
- 0
updated Nov 01, 2017
vorbisfile: fclose not always called by ov_clear

#1965 · opened Jul 02, 2013 by tangobravo
- CLOSED
- 0
updated Nov 01, 2017
memory leak in vorbis_commentheader_out

#1840 · opened Nov 04, 2011 by Gitlab Bot
- CLOSED
- 0
updated Nov 01, 2017
Configure script architecture detection inconsistent between libvorbis-1.3.2 and libogg-1.3.0

#1835 · opened Sep 30, 2011 by Matthew Turner
- CLOSED
- 1
updated Nov 01, 2017
libvorbis using undocumented optimization option "-O20" makes clang build fail

#1819 · opened Jul 28, 2011 by Ruben Van Boxem duplicate
- CLOSED
- 0
updated Nov 01, 2017
I dislike my fresh OGG audio file

#1807 · opened Jun 03, 2011 by Gitlab Bot invalid
- CLOSED
- 0
updated Nov 01, 2017
[PATCH] libvorbis* pkg-config files produce overlinking

#1759 · opened Dec 08, 2010 by Cristian Morales Vega
- CLOSED
- 0
updated Nov 01, 2017
oggenc: double free or corruption

#1697 · opened May 08, 2010 by Johann Burkard works for me
- CLOSED
- 0
updated Nov 01, 2017
Leak when staticbook_unpack fails due to truncated packet

#1663 · opened Mar 20, 2010 by Matthew Gregan
- CLOSED
- 0
updated Nov 01, 2017
vorbisfile free of uninitialized memory if seek fails

#2327 · opened Jun 13, 2017 by Gitlab Bot
- CLOSED
- 4
updated Jan 28, 2019
tagcompare() uses toupper() and is sensitive to the current locale

#2079 · opened Nov 07, 2014 by David King
- CLOSED
- 2
updated Feb 02, 2019
Segfault in libvorbisenc when passing --advanced-encode-option disable_coupling to oggenc

#1975 · opened Sep 28, 2013 by aeliosheotup
- CLOSED
- 1
updated Apr 09, 2018
Infinite loop in _get_prev_page_serial

#2333 · opened Jan 22, 2018 by Stefan Lednicky
- CLOSED
- 2
updated Jan 28, 2019
Stack buffer overflow(read) in function bark_noise_hybridmp() of libvorbis-1.3.6, which is caused by lacking of array length check.

#2334 · opened Apr 25, 2018 by Jiangxin
- CLOSED
- 2
updated Oct 02, 2019
Four heap buffer overflow(read and write) vuls in function mapping0_forward() of libvorbis-1.3.6, which is caused by lacking of var “channels” check.

#2335 · opened Apr 25, 2018 by Jiangxin
- CLOSED
- 1
- 2
updated May 19, 2018
Track length do not show up in audio players

#1784 · opened Apr 01, 2011 by pål smievoll
- CLOSED
- 1
updated Jan 28, 2019
Bit allotment abnormality of the encoding in the specific condition.

#1658 · opened Mar 09, 2010 by Gitlab Bot
- CLOSED
- 0
updated Nov 06, 2018
vorbis_analysis_headerout calls oggpack_writeclear with uninitialized ogb if !v->backend_state

#1656 · opened Mar 04, 2010 by Chris Double
- CLOSED
- 0
updated Nov 06, 2018
Revew and "merge" mozilla patches against libvorbis.

#1638 · opened Feb 01, 2010 by Gregory Maxwell
- CLOSED
- 0
updated Nov 06, 2018
libvorbis-1.2.3 may access out of static array in 'make check'.

#1635 · opened Jan 21, 2010 by lepidum
- CLOSED
- 0
updated Nov 06, 2018
LibVorbis Comment Spelling Fixes

#1624 · opened Dec 01, 2009 by Chris 'Xenon' Hanson
- CLOSED
- 0
updated Nov 06, 2018
-mcpu=970 causes wrong code on powerpc-linux-gnuspe-

#1614 · opened Oct 29, 2009 by bigeasy
- CLOSED
- 0
updated Nov 06, 2018
oggenc crash after encode w/resampling

#1602 · opened Oct 07, 2009 by Gitlab Bot works for me
- CLOSED
- 0
updated Nov 06, 2018
ov_fopen should be declared with const char *path

#1593 · opened Sep 17, 2009 by Kumar Appaiah
- CLOSED
- 0
updated Nov 06, 2018
changes file

#1584 · opened Aug 18, 2009 by Eldar
- CLOSED
- 0
updated Nov 06, 2018
crash (segfault) in vorbis_synthesis at synthesis.c:30

#1575 · opened Jul 24, 2009 by keelerda
- CLOSED
- 0
updated Nov 06, 2018
crash (segfault) in res2_inverse at res0.c:893

#1572 · opened Jul 23, 2009 by keelerda
- CLOSED
- 0
updated Nov 06, 2018
[PATCH] libvorbis-1.2.3: Build test/ only if "make check" is called and build examples/ only if --enable-examples is passed

#1571 · opened Jul 22, 2009 by Samuli Suominen
- CLOSED
- 0
updated Nov 06, 2018
segmentation fault in vorbis_synthesis_headerin() when playing file

#1566 · opened Jul 16, 2009 by keelerda
- CLOSED
- 0
updated Nov 06, 2018
Remove C++ comments

#2339 · opened Dec 21, 2018 by Henry Bent
- CLOSED
- 1
updated Jan 28, 2019
Error playing file - Ogg Vorbis Mode 2 (6750)

#1520 · opened Feb 28, 2009 by luy duplicate
- CLOSED
- 0
updated Jul 01, 2019
Error playing file - Ogg Vorbis Mode 2 (6750)

#1519 · opened Feb 28, 2009 by luy duplicate
- CLOSED
- 0
updated Jul 01, 2019
Error playing file - Ogg Vorbis Mode 2 (6750)

#1518 · opened Feb 28, 2009 by luy
- CLOSED
- 0
updated Jul 01, 2019
unaligned access on 64-bit platform

#77 · opened Nov 09, 2001 by chouser
- CLOSED
- 0
updated Jul 01, 2019
weird clicks/noises when encoding a file

#607 · opened Jan 18, 2005 by Gitlab Bot works for me
- CLOSED
- 0
updated Apr 08, 2017
missing 'vorbis_packet_blocksize' export in 'win32/vorbis.def'

#27 · opened Jun 11, 2001 by tom
- CLOSED
- 0
updated Apr 08, 2017
Raw seeking in small ogg files isnt working

#154 · opened Feb 11, 2002 by d00jkr
- CLOSED
- 0
updated Apr 08, 2017
possible use of uninitialized variable in Tremor/sharedbook.c

#682 · opened Jul 07, 2005 by Daniel Stenberg invalid
- CLOSED
- 0
updated Apr 08, 2017
encoding crashes sometimes with EXCEPTION_ACCESS_VIOLATION

#300 · opened Dec 20, 2002 by ggyepesi
- CLOSED
- 0
updated Apr 08, 2017
ov_read() should default to native byte order

#339 · opened May 10, 2003 by Michel Daenzer won't fix
- CLOSED
- 0
updated Apr 08, 2017
Typo and bug in high level residue decode pseudo code

#326 · opened Mar 04, 2003 by jripley
- CLOSED
- 0
updated Apr 08, 2017
vorbis-tools/libvorbis is apparently not 64-bit clean

#618 · opened Feb 23, 2005 by Bill Nottingham works for me
- CLOSED
- 0
updated Apr 08, 2017
Extreme low bitrates 32khz 32kbits (technical brief complaint :))

#626 · opened Mar 05, 2005 by Gitlab Bot won't fix
- CLOSED
- 0
updated Apr 08, 2017
FPE when encoding with -q5 under linux/axp

#311 · opened Jan 29, 2003 by mwhitson
- CLOSED
- 0
updated Apr 08, 2017
bm->avg_binacc is not initialized with zeros, resulting in too large ogg files when encodign with fixed bitrate settings

#194 · opened May 20, 2002 by al.faber
- CLOSED
- 0
updated Apr 08, 2017
two configure script problems in 1.0-pr1

#35 · opened Jun 19, 2001 by cardhore works for me
- CLOSED
- 0
updated Apr 08, 2017
vorbis_fpu_setround is broken

#1547 · opened Jun 22, 2009 by Siarhei Siamashka
- CLOSED
- 0
updated Apr 08, 2017
Patch to fix vorbis docbook compilation on trunk

#1523 · opened Mar 04, 2009 by Max Horn
- CLOSED
- 0
updated Apr 08, 2017
doc/programming.html still says packet->frameno

#79 · opened Nov 14, 2001 by timj
- CLOSED
- 0
updated Apr 08, 2017
missing 'floor1.c' in both 'win32/vorbis_dynamic.dsp' & 'win32/vorbis_static.dsp'

#28 · opened Jun 11, 2001 by tom
- CLOSED
- 0
updated Apr 08, 2017
output of vorbis 'decoder_example' is inconsistent with 'oggdec'

#1548 · opened Jun 22, 2009 by Siarhei Siamashka
- CLOSED
- 0
updated Apr 08, 2017
Add filter support to vorbis decoding

#1263 · opened Dec 01, 2007 by williampoetra
- CLOSED
- 0
updated Apr 08, 2017
Floating point error on encoding PCM sample file

#1241 · opened Sep 14, 2007 by scrat
- CLOSED
- 0
updated Apr 08, 2017
[PATCH] surround _analysis_output() with #if 0..#endif preprocessor directives

#1556 · opened Jul 07, 2009 by Eldar
- CLOSED
- 0
updated Apr 08, 2017
vorbis.m4:9: warning: underquoted definition of XIPH_PATH_VORBIS

#500 · opened Jan 23, 2004 by alexander.winston
- CLOSED
- 0
updated Apr 08, 2017
ov_open can loop infinitely.

#89 · opened Dec 12, 2001 by roconnor invalid
- CLOSED
- 0
updated Apr 08, 2017
vorbisfile and vorbisenc don't build as shared libraries

#266 · opened Oct 13, 2002 by shatty
- CLOSED
- 0
updated Apr 08, 2017
Compile error for libvorbis

#725 · opened Oct 25, 2005 by mhoule invalid
- CLOSED
- 0
updated Apr 08, 2017
[PATCH] Mark all the constant tables as constant

#1291 · opened Jan 13, 2008 by Diego Elio Pettenò
- CLOSED
- 0
updated Apr 08, 2017
[PATCH] surround _ov_header_fseek_wrap() with #ifndef ov_exclude_static_callbacks..#end too

#1560 · opened Jul 08, 2009 by Eldar
- CLOSED
- 0
updated Apr 08, 2017
[PATCH] CHANGES: removed unreleased "phantom" version 1.2.1

#1558 · opened Jul 07, 2009 by Eldar won't fix
- CLOSED
- 0
updated Apr 08, 2017
[PATCH] DESTROY ALL TRAILING BLANKS

#1557 · opened Jul 07, 2009 by Eldar
- CLOSED
- 0
updated Apr 08, 2017
[PATCH] add some newline chars

#1555 · opened Jul 06, 2009 by Eldar won't fix
- CLOSED
- 0
updated Apr 08, 2017
Vorbis floor0 lsp optimization impacts precision

#1549 · opened Jun 22, 2009 by Siarhei Siamashka
- CLOSED
- 0
updated Apr 08, 2017
libvorbis: cleanup Vorbis_I_spec.tex

#1541 · opened Apr 16, 2009 by Max Horn
- CLOSED
- 0
updated Apr 08, 2017
vorbis encoder fails on ARM EABI systems - different output for same binary run on different systems

#1526 · opened Mar 12, 2009 by Gitlab Bot
- CLOSED
- 0
updated Apr 08, 2017
LibVorbis library build fails on Vista using MinGW 3.4.5 and MSYS (undefined references to ogg functions)

#1499 · opened Jan 28, 2009 by edgarreynaldo
- CLOSED
- 0
updated Apr 08, 2017
[PATCH] Mark few constant tables as constant

#1496 · opened Jan 24, 2009 by Eldar
- CLOSED
- 0
updated Apr 08, 2017
[PATCH] Patch to fix division by zero bug (from Aoyumi)

#1493 · opened Jan 16, 2009 by Gitlab Bot
- CLOSED
- 0
updated Apr 08, 2017
It falls into an infinite loop when ogg_pcm_seek is called for the ogv file.

#1486 · opened Dec 22, 2008 by nya24
- CLOSED
- 0
updated Apr 08, 2017
libvorbisfile performs many redundant seeks on file open

#1463 · opened Nov 19, 2008 by kmartin
- CLOSED
- 0
updated Apr 08, 2017
Problems in configure script - SPARC / Solaris 9 / -mv8

#1458 · opened Nov 14, 2008 by twigathy
- CLOSED
- 0
updated Apr 16, 2009
CVE-2008-1420 patch breaks decoding of 1.0beta1 files

#1456 · opened Nov 12, 2008 by mgold
- CLOSED
- 0
updated Apr 08, 2017
unpredictable corruption in multichannel Ogg vorbis files

#1399 · opened Jul 09, 2008 by rob
- CLOSED
- 0
updated Apr 08, 2017
vorbis cross-compiling with mingw

#1395 · opened Jul 03, 2008 by alexis duplicate
- CLOSED
- 0
updated Apr 08, 2017
float point exception (division by zero)

#1377 · opened Jun 09, 2008 by dance
- CLOSED
- 0
updated Apr 08, 2017
Length of first buffer less than 4400 call ov_open_callbacks will get OV_EBADHEADER

#1374 · opened Jun 07, 2008 by bornstub works for me
- CLOSED
- 0
updated Apr 08, 2017
GCC on OS/2 does not support -Wextra

#1370 · opened Jun 02, 2008 by dave.r.yeo
- CLOSED
- 0
updated Apr 08, 2017
logic bug in _add_serialno

#1362 · opened May 08, 2008 by Gitlab Bot
- CLOSED
- 0
updated Apr 08, 2017
[PATCH] Vorbis x64 with MS V.Studio 2005+ compile fix

#1361 · opened May 06, 2008 by DmitryKos
- CLOSED
- 0
updated Apr 08, 2017
[PATCH] enable filter callback in ov_read()

#1352 · opened Apr 17, 2008 by Gitlab Bot
- CLOSED
- 0
updated Apr 08, 2017
Leak after ov_read_float

#1344 · opened Apr 04, 2008 by chris.r.walton won't fix
- CLOSED
- 0
updated Apr 08, 2017
[PATCH] seek ver slow -> numeric overflow in ov_pcm_seek_page

#1324 · opened Mar 16, 2008 by xiph-mueller
- CLOSED
- 0
updated Apr 08, 2017
[PATCH] Remove unused static seq variable

#1290 · opened Jan 13, 2008 by Diego Elio Pettenò
- CLOSED
- 0
updated Apr 08, 2017
ftell

#1274 · opened Dec 14, 2007 by Gitlab Bot invalid
- CLOSED
- 0
updated Apr 08, 2017
libvorbis-1.2.0 won't build under OS X 10.5

#1265 · opened Dec 02, 2007 by Jeff Lyon works for me
- CLOSED
- 0
updated Apr 08, 2017