[vlc-devel] bug in ogg demuxer

[Sébastien Escudier]

Hi

I have an ogg file (created whith vlc) which crashes vlc.

The crash happens in ogg.c (modules/demux/ogg.c), around line 1137 :
p_stream->fmt.p_extra =
malloc( p_stream->fmt.i_extra );
memcpy( p_stream->fmt.p_extra, st + 1,
p_stream->fmt.i_extra );

If I printf p_stream->fmt.i_extra I have a value of 1056964556

Maybe the ogg header is corrupted (but shouldn't crash vlc), or the reading of
the header in ogg.c is buggy ?