Package: wodim Version: 9:1.1.11-2 Severity: normal Dear Maintainer,
This old bug does not seem to have received any attention and still seems to be present as of today: http://lists.alioth.debian.org/pipermail/debburn-devel/2011-January/000822.html > when burning an audio cd with many (more than 90) audio > tracks, wodim crashes. I debuged the application (cdrkit-1.1.11) > and found the problem in lines 305 and 432 of cdtext.c. > The array sbuf allocated in line 305 (function packtext) is not large > enough and the pointer fp in function fillpacks gets out of range in > line 432: > > void packtext(int tracks, track_t *trackp) > { > > int type; > int i; > struct textpack *tp; > struct textsizes tsize; > txtarg_t targ; > char sbuf[256*18]; /* 256 is not enough, see line 432 */ > > ... > } > > > static void fillpacks(register txtarg_t *ap, register char *from, int len, > > int track_no, int pack_type) > > { > ... > > if (p >= &tp->text[12]) { > > fillcrc((Uchar *)tp, sizeof (*tp)); > p = 0; > tp++; /* may get out of range, see line 305 */ > > } > > ... > } > > > I could workaround the problem by increasing the size of sbuf. > But I think the correct solution is to compute the required size for > sbuf and allocate it dynamically. Unfortunately I do not know how > to compute the correct size. Otherwise I would have provided a patch. > > Best regards, > > Christoph -- System Information: Debian Release: 7.6 Architecture: armhf (armv6l) Kernel: Linux 3.12.28+ (PREEMPT) Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8) (ignored: LC_ALL set to en_GB.UTF-8) Shell: /bin/sh linked to /bin/dash Versions of packages wodim depends on: ii libc6 2.13-38+rpi2+deb7u3 ii libcap2 1:2.22-1.2 ii libgcc1 1:4.8.2-21~rpi3rpi1 Versions of packages wodim recommends: ii genisoimage 9:1.1.11-2 Versions of packages wodim suggests: pn cdrkit-doc <none> -- no debconf information -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
