Package: picard
Version: 0.9.0-4
Severity: normal

Picard writes illegal ID3v2.4 tags. It doesn't desync the length
information in a tag header. The length desyncing has been added to the format
in version 2.4. Version 2.3 didn't have this expressed like that and was
risking syncing in the frame header.

Hexdump of the file header:
00000000  49 44 33 04 00 00 00 01  4f 76 54 49 54 32 00 00  |ID3.....OvTIT2..|

Hexdump of the problematic tag:
000003b0  22 00 00 03 4d 75 73 69  63 42 72 61 69 6e 7a 20  |"...MusicBrainz |
000003c0  41 6c 62 75 6d 20 53 74  61 74 75 73 00 6f 66 66  |Album Status.off|
000003d0  69 63 69 61 6c 4e 43 4f  4e 00 00 5f de 00 00 00  |icialNCON.._�...|
000003e0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|

Format spec passage from URL http://www.id3.org/id3v2.4.0-structure
is here (please note the zero in %0xxxxxxx):

4.   ID3v2 frame overview

   All ID3v2 frames consists of one frame header followed by one or more
   fields containing the actual information. The header is always 10
   bytes and laid out as follows:

     Frame ID      $xx xx xx xx  (four characters)
     Size      4 * %0xxxxxxx
     Flags         $xx xx

   The frame ID is made out of the characters capital A-Z and 0-9.
   Identifiers beginning with "X", "Y" and "Z" are for experimental
   frames and free for everyone to use, without the need to set the
   experimental bit in the tag header. Bear in mind that someone else
   might have used the same identifier as you. All other identifiers are
   either used or reserved for future use.

   The frame ID is followed by a size descriptor containing the size of
   the data in the final frame, after encryption, compression and
   unsynchronisation. The size is excluding the frame header ('total
   frame size' - 10 bytes) and stored as a 32 bit synchsafe integer.
....
....
....

Please fix and keep up the good work :).

Thanks,
Stephan

-- System Information:
Debian Release: 5.0.4
  APT prefers stable
  APT policy: (500, 'stable')
Architecture: i386 (i686)

Kernel: Linux 2.6.30-bpo.2-686 (SMP w/2 CPU cores)
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages picard depends on:
ii  libavcodec51       3:20080706-0.3lenny1  library to encode decode multimedi
ii  libavformat52      3:20080706-0.3lenny1  ffmpeg file format library
ii  libavutil49        3:20080706-0.3lenny1  avutil shared libraries
ii  libc6              2.10.1-7              GNU C Library: Shared libraries
ii  libdiscid0         0.1.0-1               Library for creating MusicBrainz D
ii  libfftw3-3         3.1.2-3.1             library for computing Fast Fourier
ii  libgcc1            1:4.3.2-1.1           GCC support library
ii  libofa0            0.9.3-3               Library for acoustic fingerprintin
ii  libogg0            1.1.3-4               Ogg Bitstream Library
ii  libraw1394-8       1.3.0-4               library for direct access to IEEE 
ii  libstdc++6         4.3.2-1.1             The GNU Standard C++ Library v3
ii  libtheora0         1.0~beta3-1+lenny1    The Theora Video Compression Codec
ii  libvorbis0a        1.2.0.dfsg-3.1+lenny1 The Vorbis General Audio Compressi
ii  libvorbisenc2      1.2.0.dfsg-3.1+lenny1 The Vorbis General Audio Compressi
ii  python [python-cty 2.5.2-3               An interactive high-level object-o
ii  python-mutagen     1.14-2                audio metadata editing library
ii  python-qt4         4.4.2-4               Python bindings for Qt4
ii  python-support     0.8.4lenny1           automated rebuilding support for P

picard recommends no packages.

picard suggests no packages.

-- no debconf information



--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to