506305 - arithmetic exception (sigfpe) in _01inverse at vorbis_res0.c:643 when playing corrupted ogg file

Status: RESOLVED WORKSFORME

(Core :: Audio/Video, defect)

Description

[Dana Keeler (she/her) [:keeler]]

Attachment: test file that causes crash

User-Agent:       Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.0.11)
Gecko/2009060308 Ubuntu/9.04 (jaunty) Firefox/3.0.11
Build Identifier: mozilla-central revision 9dfacae57238

Firefox crashes with an arithmetic exception (divide by zero, in this case) when playing the attached file.

Reproducible: Always

Steps to Reproduce:
1. Load attached file.
Actual Results:  
firefox crashes

Expected Results:  
some sort of "this file is corrupted" message

Comment 1

[Dana Keeler (she/her) [:keeler]]

Attachment: stack trace of relevant thread

Comment 2

[Chris Pearce [:cpearce (Not reading bugmail)]]

partitions_per_word is 0 in _01inverse() in vorbis_res0.c. Something corrupt in the phrasebook? Any ideas Monty?

Comment 3

[Dana Keeler (she/her) [:keeler]]

This no longer crashes for me on trunk (mozilla-central e570c006d264).
Fixed due to the fix for bug 501279?

Comment 4

[Chris Pearce [:cpearce (Not reading bugmail)]]

Fixed on m-c by bug 512328.

Comment 5

[Chris Pearce [:cpearce (Not reading bugmail)]]

bug 512328 was backed out due to bug 513999 :(

Comment 6

[Dana Keeler (she/her) [:keeler]]

I think this was fixed by something other than the fix for bug 512328 (the test case doesn't crash m-c for me at the moment).

Comment 7

[Chris Pearce [:cpearce (Not reading bugmail)]]

(In reply to comment #6)
> I think this was fixed by something other than the fix for bug 512328 (the test
> case doesn't crash m-c for me at the moment).

The testcase doesn't crash for me on Linux with m-c or 1.9.2. Resolving WFM.