Version 10 (modified by 15 years ago) (diff) | ,
---|
The January 2010 media player test
It's time to test those media players again.
VLC | MPlayer | xine | FFmpeg (ffplay) | GStreamer (gst-launch) | mpg321 | ogg123 | |
MP3 | robust | SIGSEGV | SIGFPE | ? | ? | robust | N/A |
Ogg Vorbis | ? | robust | SIGSEGV | ? | robust | N/A | robust |
MPEG-1 | SIGSEGV | robust | SIGSEGV | ? | robust | N/A | N/A |
MPEG-2 | SIGSEGV | ? | SIGSEGV | ? | runs forever | N/A | N/A |
MPEG-4 AVI | SIGSEGV | SIGSEGV | SIGSEGV | ? | ? | N/A | N/A |
MPEG-4 | ? | SIGSEGV | SIGSEGV | ? | SIGSEGV | N/A | N/A |
FLAC | robust | SIGABRT | SIGFPE | ? | robust | N/A | SIGSEGV |
Ogg Theora | robust | robust | SIGSEGV | ? | ? | N/A | N/A |
WMV | SIGSEGV | SIGSEGV | SIGSEGV | ? | SIGSEGV | N/A | N/A |
AAC | robust | robust | robust | ? | robust | N/A | N/A |
AC-3/A52 | robust | robust | ? | ? | robust | N/A | N/A |
Speex | ? | SIGSEGV | robust | ? | robust | N/A | runs forever |
EAC3 | SIGABRT | robust | robust | ? | robust | N/A | N/A |
FLV | SIGSEGV | SIGSEGV | SIGSEGV | ? | SIGSEGV | N/A | N/A |
The January 2007 media player debacle
Media players are especially sensitive to stream corruption. In fact, zzuf started its life as a tool to find bugs in the VLC media player software. The following table gives a few examples of crashes (all programs were the latest version in Debian i386 sid as of 2007/01/14). Click on each link to download the file that caused the crash:
Disclaimer 1: “robust” does not mean that there is no bug, it just means that zzuf could not find one in reasonable time.
Disclaimer 2: segmentation faults reported below are not necessarily bugs in the program itself; for instance, the MPEG-2 crashes are more likely due to a bug in the libmpeg2 library.
VLC | MPlayer | xine | FFmpeg (ffplay) | GStreamer (gst-launch) | mpg321 | ogg123 | |
MP3 | robust | SIGSEGV | robust | robust | robust | robust | N/A |
Ogg Vorbis | robust | SIGSEGV | robust | SIGSEGV | SIGSEGV | N/A | robust |
MPEG-1 | SIGSEGV | SIGSEGV | SIGSEGV | SIGSEGV | robust | N/A | N/A |
MPEG-2 | SIGSEGV | SIGSEGV | robust | SIGSEGV | SIGSEGV | N/A | N/A |
MPEG-4 AVI | SIGSEGV | SIGSEGV | SIGSEGV | SIGSEGV | deadlock? | N/A | N/A |
FLAC | robust | SIGSEGV | robust | heap corruption | robust | N/A | SIGFPE |
Ogg Theora | robust | SIGSEGV | robust | SIGSEGV | robust | N/A | N/A |
WMV | SIGSEGV | SIGSEGV | N/A | SIGSEGV | robust | N/A | N/A |
AAC | heap corruption | SIGSEGV | SIGSEGV | N/A | N/A | N/A | N/A |
AC-3/A52 | SIGSEGV | robust (I KID YOU NOT) | robust | SIGSEGV | N/A | N/A | N/A |
Speex | robust | robust | robust | N/A | robust | N/A | robust |
Other bugs
Here is a list of other bugs that were easily found using zzuf, each time in a matter of seconds.
- OpenBSD (4.0 GENERIC#1107 i386)
nm lol-openbsd-nm | SIGSEGV | crash in strcmp() , not exploitable
|
objdump -T lol-openbsd-objdump | SIGSEGV | ? |
- Linux (Debian 4.0 i386 unstable)
nm lol-debian-nm | SIGKILL | memory usage exceeded |
identify fuzz1.xpm fuzz2.xpm fuzz3.xpm | SIGSEGV | Memory corruption in ImageMagick. Security implications look promising. |
antiword lol-antiword.doc | SIGSEGV | ? |
firefox lol-firefox.gif | BadAlloc | X11 error |
dvipng lol-dvipng.dvi | SIGSEGV | Also occurs with dvi2ps
|
giftopnm lol-giftopnm.gif | SIGSEGV | ? |
- FreeBSD (6.1-RELEASE FreeBSD 6.1-RELEASE #0: Sun May 7 04:32:43 UTC 2006 root@opus.cse.buffalo.edu:/usr/obj/usr/src/sys/GENERIC i386)
nm lol-freebsd-nm | SIGSEGV | ? |
- Mac OS X (8.3.1 Darwin Kernel Version 8.3.1: Wed Nov 2 21:12:54 PST 2005; root:xnu-792.7.56.obj~6/RELEASE_I386 i386 i386)
nm lol-macosx-nm | SIGSEGV | ? |
otool -I lol-macosx-otool | SIGSEGV | ? |
- HP-UX B.11.31 U ia64 3426292962 unlimited-user license
nm files/zzuf/bugs/lol-hpux-ia64-nm | SIGSEGV in nm_elf | ? |
Attachments (75)
- lol-antiword.doc (23.0 KB) - added by 16 years ago.
- lol-debian-nm (137.7 KB) - added by 16 years ago.
- lol-dvipng.dvi (7.5 KB) - added by 16 years ago.
- lol-dvipng-1.dvi (7.5 KB) - added by 16 years ago.
- lol-ffplay.ac3 (3.1 MB) - added by 16 years ago.
- lol-ffplay.avi (362.0 KB) - added by 16 years ago.
- lol-ffplay.flac (6.6 MB) - added by 16 years ago.
- lol-ffplay.m2v (300.9 KB) - added by 16 years ago.
- lol-ffplay.mpg (288.0 KB) - added by 16 years ago.
- lol-ffplay.ogg (15.4 KB) - added by 16 years ago.
- lol-ffplay.ogm (360.0 KB) - added by 16 years ago.
- lol-ffplay.wmv (64.0 KB) - added by 16 years ago.
- lol-firefox.gif (46.7 KB) - added by 16 years ago.
- lol-freebsd-nm (95.8 KB) - added by 16 years ago.
- lol-giftopnm.gif (7.1 KB) - added by 16 years ago.
- lol-gstreamer.avi (362.0 KB) - added by 16 years ago.
- lol-gstreamer.m2v (300.9 KB) - added by 16 years ago.
- lol-gstreamer.ogg (15.4 KB) - added by 16 years ago.
- lol-macosx-nm (170.4 KB) - added by 16 years ago.
- lol-macosx-otool (49.8 KB) - added by 16 years ago.
- lol-mplayer.aac (292.6 KB) - added by 16 years ago.
- lol-mplayer.avi (362.0 KB) - added by 16 years ago.
- lol-mplayer.flac (6.6 MB) - added by 16 years ago.
- lol-mplayer.m2v (300.9 KB) - added by 16 years ago.
- lol-mplayer.mp3 (20.7 KB) - added by 16 years ago.
- lol-mplayer.mpg (288.0 KB) - added by 16 years ago.
- lol-mplayer.ogg (15.4 KB) - added by 16 years ago.
- lol-mplayer.ogm (360.0 KB) - added by 16 years ago.
- lol-mplayer.wmv (64.0 KB) - added by 16 years ago.
- lol-ogg123.flac (6.6 MB) - added by 16 years ago.
- lol-openbsd-nm (522.6 KB) - added by 16 years ago.
- lol-openbsd-objdump (522.6 KB) - added by 16 years ago.
- lol-vlc.aac (292.6 KB) - added by 16 years ago.
- lol-vlc.ac3 (3.1 MB) - added by 16 years ago.
- lol-vlc.avi (362.0 KB) - added by 16 years ago.
- lol-vlc.m2v (300.9 KB) - added by 16 years ago.
- lol-vlc.mpg (288.0 KB) - added by 16 years ago.
- lol-vlc.wmv (64.0 KB) - added by 16 years ago.
- lol-xine.aac (292.6 KB) - added by 16 years ago.
- lol-xine.avi (362.0 KB) - added by 16 years ago.
- lol-xine.mpg (288.0 KB) - added by 16 years ago.
- fuzz1.xpm (9.6 KB) - added by 16 years ago.
- fuzz2.xpm (842 bytes) - added by 16 years ago.
- fuzz3.xpm (1.6 KB) - added by 16 years ago.
- lol-hpux-ia64-nm (76.0 KB) - added by 16 years ago.
- u-fail.png (48.6 KB) - added by 15 years ago.
- roflmao.png (51.9 KB) - added by 15 years ago.
- fail2.png (76.9 KB) - added by 15 years ago.
- rofl-gst.flv (674.5 KB) - added by 15 years ago.
- rofl-gst.mp4 (1.0 MB) - added by 15 years ago.
- rofl-gst.wmv (817.0 KB) - added by 15 years ago.
- rofl-mplayer.avi (362.0 KB) - added by 15 years ago.
- rofl-mplayer.flac (1.4 MB) - added by 15 years ago.
- rofl-mplayer.flv (674.5 KB) - added by 15 years ago.
- rofl-mplayer.mp3 (22.8 KB) - added by 15 years ago.
- rofl-mplayer.mp4 (1.0 MB) - added by 15 years ago.
- rofl-mplayer.ogm (2.1 MB) - added by 15 years ago.
- rofl-mplayer.spx (19.5 KB) - added by 15 years ago.
- rofl-mplayer.wmv (817.0 KB) - added by 15 years ago.
- rofl-ogg123.flac (1.4 MB) - added by 15 years ago.
- rofl-vlc.avi (362.0 KB) - added by 15 years ago.
- rofl-vlc.flv (674.5 KB) - added by 15 years ago.
- rofl-vlc.m2v (2.0 MB) - added by 15 years ago.
- rofl-vlc.mpeg (765.6 KB) - added by 15 years ago.
- rofl-vlc.wmv (817.0 KB) - added by 15 years ago.
- rofl-xine.avi (362.0 KB) - added by 15 years ago.
- rofl-xine.flac (1.4 MB) - added by 15 years ago.
- rofl-xine.flv (674.5 KB) - added by 15 years ago.
- rofl-xine.m2v (2.0 MB) - added by 15 years ago.
- rofl-xine.mp3 (22.8 KB) - added by 15 years ago.
- rofl-xine.mp4 (1.0 MB) - added by 15 years ago.
- rofl-xine.mpeg (765.6 KB) - added by 15 years ago.
- rofl-xine.ogg (15.4 KB) - added by 15 years ago.
- rofl-xine.ogm (2.1 MB) - added by 15 years ago.
- rofl-xine.wmv (817.0 KB) - added by 15 years ago.