Public bug reported:

Was doing probabilistic fuzzing on TiMidity++ and got a divide trap.

1.
Description:    Ubuntu 14.04.1 LTS
Release:        14.04

2.
timidity:
  Installed: 2.13.2-40.2
  Candidate: 2.13.2-40.2
  Version table:
 *** 2.13.2-40.2 0
        500 http://sg.archive.ubuntu.com/ubuntu/ trusty/universe amd64 Packages
        100 /var/lib/dpkg/status

3.
Graceful exit.

4.
SIGFPE (-8)

I've recompiled TiMidity++ for the symbols...

(gdb) r ../crash_midi_archive/crash1 -Ow -o /dev/null
Starting program: /usr/local/bin/timidity ../crash_midi_archive/crash1 -Ow -o 
/dev/null
Playing ../crash_midi_archive/crash1
MIDI file: ../crash_midi_archive/crash1
Format: 1  Tracks: 2  Divisions: 5872

Program received signal SIGFPE, Arithmetic exception.
0x00000000005bdfe2 in read_midi_file () at readmidi.c:4594
4594                    at += current_file_info->divisions * 4 / denom;
(gdb) bt
#0  0x00000000005bdfe2 in read_midi_file () at readmidi.c:4594
#1  0x000000000056a88d in play_midi_file ()
#2  0x000000000056ea51 in dumb_pass_playing_list ()
#3  0x000000000040c7b6 in main () at timidity.c:5655

** Affects: timidity (Ubuntu)
     Importance: Undecided
         Status: New

** Attachment added: "Sample file that produces SIGFPE"
   https://bugs.launchpad.net/bugs/1443443/+attachment/4373909/+files/crash1

** Description changed:

+ Was testing my fuzzer on TiMidity++ and got a divide trap.
  
  1.
  Description:  Ubuntu 14.04.1 LTS
  Release:      14.04
  
  2.
  timidity:
-   Installed: 2.13.2-40.2
-   Candidate: 2.13.2-40.2
-   Version table:
-  *** 2.13.2-40.2 0
-         500 http://sg.archive.ubuntu.com/ubuntu/ trusty/universe amd64 
Packages
-         100 /var/lib/dpkg/status
+   Installed: 2.13.2-40.2
+   Candidate: 2.13.2-40.2
+   Version table:
+  *** 2.13.2-40.2 0
+         500 http://sg.archive.ubuntu.com/ubuntu/ trusty/universe amd64 
Packages
+         100 /var/lib/dpkg/status
  
- 3. 
+ 3.
  Graceful exit.
  
  4.
  SIGFPE (-8)
  
  I've recompiled TiMidity++ for the symbols...
  
  (gdb) r ../crash_midi_archive/crash1 -Ow -o /dev/null
  Starting program: /usr/local/bin/timidity ../crash_midi_archive/crash1 -Ow -o 
/dev/null
  Playing ../crash_midi_archive/crash1
  MIDI file: ../crash_midi_archive/crash1
  Format: 1  Tracks: 2  Divisions: 5872
  
  Program received signal SIGFPE, Arithmetic exception.
  0x00000000005bdfe2 in read_midi_file () at readmidi.c:4594
  4594                  at += current_file_info->divisions * 4 / denom;
  (gdb) bt
  #0  0x00000000005bdfe2 in read_midi_file () at readmidi.c:4594
  #1  0x000000000056a88d in play_midi_file ()
  #2  0x000000000056ea51 in dumb_pass_playing_list ()
  #3  0x000000000040c7b6 in main () at timidity.c:5655

** Description changed:

- Was testing my fuzzer on TiMidity++ and got a divide trap.
+ Was doing probabilistic fuzzing on TiMidity++ and got a divide trap.
  
  1.
  Description:  Ubuntu 14.04.1 LTS
  Release:      14.04
  
  2.
  timidity:
    Installed: 2.13.2-40.2
    Candidate: 2.13.2-40.2
    Version table:
   *** 2.13.2-40.2 0
          500 http://sg.archive.ubuntu.com/ubuntu/ trusty/universe amd64 
Packages
          100 /var/lib/dpkg/status
  
  3.
  Graceful exit.
  
  4.
  SIGFPE (-8)
  
  I've recompiled TiMidity++ for the symbols...
  
  (gdb) r ../crash_midi_archive/crash1 -Ow -o /dev/null
  Starting program: /usr/local/bin/timidity ../crash_midi_archive/crash1 -Ow -o 
/dev/null
  Playing ../crash_midi_archive/crash1
  MIDI file: ../crash_midi_archive/crash1
  Format: 1  Tracks: 2  Divisions: 5872
  
  Program received signal SIGFPE, Arithmetic exception.
  0x00000000005bdfe2 in read_midi_file () at readmidi.c:4594
  4594                  at += current_file_info->divisions * 4 / denom;
  (gdb) bt
  #0  0x00000000005bdfe2 in read_midi_file () at readmidi.c:4594
  #1  0x000000000056a88d in play_midi_file ()
  #2  0x000000000056ea51 in dumb_pass_playing_list ()
  #3  0x000000000040c7b6 in main () at timidity.c:5655

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1443443

Title:
  Arithmetic exception due to bad denom

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/timidity/+bug/1443443/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to