[Python-modules-team] Bug#696640: python-pyvorbis: pyvorbis causes crashes when reading vorbis files

[Alessio Gaeta]

Package: python-pyvorbis
Version: 1.5-1.1
Severity: important

Dear Maintainer,
pyvorbis causes crashes due to an override of the callback to ov_read. I guess
the actual severity should be grave. More details here:

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=670062#10

I built a patched revision of pyvorbis and I can confirm it works. Here a
little test:
--8<-----------8<-----------8<-----------8<---------
#!/usr/bin/python

import ogg.vorbis

file = ogg.vorbis.VorbisFile('song.ogg')
(data, bytes, bit) = file.read(4096)
--8<-----------8<-----------8<-----------8<---------

Thanks!



-- System Information:
Debian Release: 7.0
  APT prefers unstable
  APT policy: (500, 'unstable'), (101, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 3.6.0-11.dmz.1-liquorix-amd64 (SMP w/8 CPU cores; PREEMPT)
Locale: LANG=it_IT.utf8, LC_CTYPE=it_IT.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages python-pyvorbis depends on:
ii  libc6           2.13-37
ii  libvorbis0a     1.3.2-1.3
ii  libvorbisenc2   1.3.2-1.3
ii  libvorbisfile3  1.3.2-1.3
ii  python          2.7.3-3
ii  python-ogg      1.3+repack-5+b2
ii  python-support  1.0.15

python-pyvorbis recommends no packages.

Versions of packages python-pyvorbis suggests:
pn  python-pyvorbis-dbg  <none>