Comment 16 for bug 1094499

Revision history for this message
Bryce Harrington (bryce) wrote :

In playing with the IFO bdrung provided I found that the crash was caused by an out of bounds array access. The value was up in the 32,000's. I haven't sorted out why it's so high for this IFO, but am guessing it's either undefined data or bad pointer math. Potentially the bug is in libdvdread rather than in libdvdnav, but I only see the bad value in dvdnav code.

Anyway, I stuck in a test to verify the value is in the 0 to 1000 range and skip processing if it isn't. That definitely prevented vlc from crashing. However since there was only the IFO provided, I can't tell if this resulted in a playable movie.

I've stuck my debug packages for dvdnav and dvdread (which spit out a lot of values) into the following PPA. bdrung, why don't you give this a try with the full DVD copy.

https://launchpad.net/~bryce/+archive/lp1094499