search for: wav_open

...format.rate = (int)read_IEEE80(buffer+8); + if(channels <= 0L || SHRT_MAX < channels) + { + fprintf(stderr, _("Warning: Unsupported count of channels in AIFF header\n")); + return 0; + } + aiff->bigendian = 1; if(aifc) @@ -416,6 +424,7 @@ int wav_open(FILE *in, oe_enc_opt *opt, unsigned char *oldbuf, int buflen) wav_fmt format; wavfile *wav = malloc(sizeof(wavfile)); int i; + long channels; /* Ok. At this point, we know we have a WAV file. Now we have to detect * whether we support the subtype, and we have to find...

.... > Due to limitations in the way WAV files are specified, no valid WAV file > can ever be over 4Gig. And most don't work over 2 GB. The solution we (Xiph) have used in other projects (opusenc, oggenc) is to treat sizes over ~2 GB as meaning "Just keep reading until EOF." See wav_open() audio-in.c in opus-tools. It turns out you need to use slightly less than 2 GB for the limit to handle the output of some tools. We also provide an --ignorelength option to request this behavior regardless of the length in the header (which lets it work with tools that just truncate the size...

...are specified, no valid >> WAV file >> can ever be over 4Gig. > > And most don't work over 2 GB. The solution we (Xiph) have used in > other > projects (opusenc, oggenc) is to treat sizes over ~2 GB as meaning > "Just > keep reading until EOF." See wav_open() audio-in.c in opus-tools. It > turns out you need to use slightly less than 2 GB for the limit to > handle the output of some tools. We also provide an --ignorelength > option to request this behavior regardless of the length in the header > (which lets it work with tools that just tr...

Fix the crash of oggenc when parsing a WAV file including zero or a negative number of channels. Fixes for both CVE-2014-9638 and CVE-2014-9639 --- oggenc/audio.c | 6 ++++++ 1 file changed, 6 insertions(+) --- a/oggenc/audio.c +++ b/oggenc/audio.c @@ -455,6 +455,12 @@ int wav_open(FILE *in, oe_enc_opt *opt, format.align = READ_U16_LE(buf+12); format.samplesize = READ_U16_LE(buf+14); + if(format.channels <= 0) + { + fprintf(stderr,"ERROR: Invalid number of channels (%d) found in WAV file\n", format.channels); + return 0; + }...

Hi all, I was reading the discussion about this 1.3.0pre1 release on HydrogenAudio and someone linked an old thread in which one patched FLAC 1.2.1 to support WAV-files larger then 2GB. It might be worth investigating: http://www.hydrogenaudio.org/forums/?showtopic=84014#entry725304

Hi there, I am working with opt-6.0 and try to generate a call graph of libsndfile, but it seems the call graph doesn't cover all call relationship. Actually, I am doing static analysis on *CVE-2014-8130*, which is a zero division on libtiff/tif_write.c TIFFWriteScanline. (see https://security-tracker.debian.org/tracker/CVE-2014-8130) Theoretically, the main function in

This patch to opus-tools adds optional support to WavPack lossless format as input to opusenc. Like support to FLAC, it depends on an external library, libwavpack, and may be disabled on configure. Lucas Clemente Vella (1): Reading input from WavPack files. Makefile.am | 7 +- configure.ac | 37 ++++++++ src/audio-in.c | 71 ++++++++------- src/opusenc.c | 19 +++- src/opusenc.h