[mythtv-users] Re: CD Ripping FC4

[David Maher]

Thanks Axel I can see the benefit in the overflow terminating the app rather than leaving it as a vulnerability. I did notice that it had been reported before, but I was hoping that there might have been a resolution somewhere that I couldn't find. I'll report it as a bug, if someone else hasn't already.

-----Original Message-----
From: mythtv-users-bounces at mythtv.org
[mailto:mythtv-users-bounces at mythtv.org]On Behalf Of Axel Thimm
Sent: Friday, 19 August 2005 4:21 PM
To: Discussion about mythtv
Subject: [mythtv-users] Re: CD Ripping FC4


On Fri, Aug 19, 2005 at 01:30:36PM +1000, David Maher wrote:
> I am beginning to wonder if this problem to all FC4 mythtv
> installations. Does anyone have FC4 and Mythtv 18.1 from atrpms with
> the mythmusic module fully functional?

The problem is in any build FC3, Debian etc.

FC4 just detects the buffer overflow and terminates the offendig
program. You may be annoyed about that, but is reality you should
glad, as this turns any buffer overflow vulnerability into a DoS.

The question is whether the buffer overflow is in
/usr/lib/libcdaudio.so.1 or /usr/lib/mythtv/plugins/libmythmusic.so.

This has been reported before. Make sure you are running the latest
libcdaudio, too, and if you still get the error report it to mythtv
and libcdaudio as a bug report (check the respective websites on how
to do so).

> From: mythtv-users-bounces at mythtv.org
> [mailto:mythtv-users-bounces at mythtv.org]On Behalf Of Paul News
> Sent: Friday, 19 August 2005 11:27 AM
> To: mythtv-users at mythtv.org
> Subject: [mythtv-users] Re: CD Ripping FC4
> 
> 
> Hey-o Folks,
> 
> I get the same problem.  I recently upgraded my system from compiled
> with 2 plugins to the full 0.18.1 mythtv-suite package on FC4 from the
> latest ATrpm's.
> 
> I didn't have the mythmusic module before.  I can go into setup and
> change music options. I can scan for new music.  I can go into Music
> tools, and select Play Music ... I haven't set anything up yet, so I
> see the controls plus Active Play Queue.
> 
> If I click on 3: Edit Playlist it changes screens briefly and then
> mythfrontend core-dumps with the following.
> 
> 
> 2005-08-18 20:53:41.392 Set cd_status_changed to true
> *** buffer overflow detected ***: mythfrontend terminated
> ======= Backtrace: =========
> /lib/libc.so.6(__chk_fail+0x41)[0x89a565]
> /usr/lib/libcdaudio.so.1(cddb_read_disc_data+0x32d)[0x72f2cd0]
> /usr/lib/mythtv/plugins/libmythmusic.so(_ZN9CdDecoder11getMetadataEv+0x21c)[0x13f77d2]
> [0x0]
> ======= Memory map: ========
> 
> Any ideas?  
> 

-- 
Axel.Thimm at ATrpms.net