#774556 AtomicParsley: free(): invalid next size (normal): 0x00000000016de070

Package:
atomicparsley
Source:
atomicparsley
Description:
read, parse and set metadata of MPEG-4 and 3gp files
Submitter:
Grue
Date:
2015-04-15 08:18:05 UTC
Severity:
normal
#774556#5
Date:
2015-01-04 10:44:46 UTC
From:
To:
Dear Maintainer,

I actually found this while using get_iplayer to download something from
Radio4, and for some programs found that a stack trace was produced by
AtomicParsley when it is called to tag the resulting files.

The lyrics field is used to give a description.  For frequent
programs, it is nice and short.  However, for some it is very long, which
leads me to suspect that it is at least partly to blame for provoking this
bug.  Unfortunately there is no dbg package for the library.

For affected programs, I find that the same bug is seen every time they are
downloaded and tagged.  This morning I got the following stacktrace (the
command that provoked it is given at the end):

.. ( non-useful output from get_iplayer has been removed) ..

INFO: Recorded /tmp/War_and_Peace_-_Episode_9_b04w89v9_default.m4a

INFO: Downloaded Thumbnail to '/tmp/War_and_Peace_-_Episode_9_b04w89v9_default.jpg'
INFO: MP4 tagging M4A file
*** glibc detected *** AtomicParsley: free(): invalid next size (normal): 0x0000000001988070 ***
======= Backtrace: =========
/lib/x86_64-linux-gnu/libc.so.6(+0x76a16)[0x7f7ea2ec6a16]
/lib/x86_64-linux-gnu/libc.so.6(cfree+0x6c)[0x7f7ea2ecb7bc]
AtomicParsley[0x41409c]
AtomicParsley[0x4143b7]
AtomicParsley[0x41b8aa]
AtomicParsley[0x41ef4a]
/lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xfd)[0x7f7ea2e6eead]
AtomicParsley[0x401989]
======= Memory map: ========
00400000-00438000 r-xp 00000000 fe:01 52777                              /usr/bin/AtomicParsley
00637000-00640000 rw-p 00037000 fe:01 52777                              /usr/bin/AtomicParsley
00640000-0065a000 rw-p 00000000 00:00 0
01983000-019a4000 rw-p 00000000 00:00 0                                  [heap]
7f7e9c000000-7f7e9c021000 rw-p 00000000 00:00 0
7f7e9c021000-7f7ea0000000 ---p 00000000 00:00 0
7f7ea2e50000-7f7ea2fd2000 r-xp 00000000 fe:01 391395                     /lib/x86_64-linux-gnu/libc-2.13.so
7f7ea2fd2000-7f7ea31d2000 ---p 00182000 fe:01 391395                     /lib/x86_64-linux-gnu/libc-2.13.so
7f7ea31d2000-7f7ea31d6000 r--p 00182000 fe:01 391395                     /lib/x86_64-linux-gnu/libc-2.13.so
7f7ea31d6000-7f7ea31d7000 rw-p 00186000 fe:01 391395                     /lib/x86_64-linux-gnu/libc-2.13.so
7f7ea31d7000-7f7ea31dc000 rw-p 00000000 00:00 0
7f7ea31e0000-7f7ea31f5000 r-xp 00000000 fe:01 391066                     /lib/x86_64-linux-gnu/libgcc_s.so.1
7f7ea31f5000-7f7ea33f5000 ---p 00015000 fe:01 391066                     /lib/x86_64-linux-gnu/libgcc_s.so.1
7f7ea33f5000-7f7ea33f6000 rw-p 00015000 fe:01 391066                     /lib/x86_64-linux-gnu/libgcc_s.so.1
7f7ea33f8000-7f7ea3479000 r-xp 00000000 fe:01 395043                     /lib/x86_64-linux-gnu/libm-2.13.so
7f7ea3479000-7f7ea3678000 ---p 00081000 fe:01 395043                     /lib/x86_64-linux-gnu/libm-2.13.so
7f7ea3678000-7f7ea3679000 r--p 00080000 fe:01 395043                     /lib/x86_64-linux-gnu/libm-2.13.so
7f7ea3679000-7f7ea367a000 rw-p 00081000 fe:01 395043                     /lib/x86_64-linux-gnu/libm-2.13.so
7f7ea3680000-7f7ea3768000 r-xp 00000000 fe:01 1993                       /usr/lib/x86_64-linux-gnu/libstdc++.so.6.0.17
7f7ea3768000-7f7ea3968000 ---p 000e8000 fe:01 1993                       /usr/lib/x86_64-linux-gnu/libstdc++.so.6.0.17
7f7ea3968000-7f7ea3970000 r--p 000e8000 fe:01 1993                       /usr/lib/x86_64-linux-gnu/libstdc++.so.6.0.17
7f7ea3970000-7f7ea3972000 rw-p 000f0000 fe:01 1993                       /usr/lib/x86_64-linux-gnu/libstdc++.so.6.0.17
7f7ea3972000-7f7ea3987000 rw-p 00000000 00:00 0
7f7ea3988000-7f7ea399e000 r-xp 00000000 fe:01 391014                     /lib/x86_64-linux-gnu/libz.so.1.2.7
7f7ea399e000-7f7ea3b9d000 ---p 00016000 fe:01 391014                     /lib/x86_64-linux-gnu/libz.so.1.2.7
7f7ea3b9d000-7f7ea3b9e000 r--p 00015000 fe:01 391014                     /lib/x86_64-linux-gnu/libz.so.1.2.7
7f7ea3b9e000-7f7ea3b9f000 rw-p 00016000 fe:01 391014                     /lib/x86_64-linux-gnu/libz.so.1.2.7
7f7ea3ba0000-7f7ea3bc0000 r-xp 00000000 fe:01 391179                     /lib/x86_64-linux-gnu/ld-2.13.so
7f7ea3dbb000-7f7ea3dbf000 rw-p 00000000 00:00 0
7f7ea3dbf000-7f7ea3dc0000 r--p 0001f000 fe:01 391179                     /lib/x86_64-linux-gnu/ld-2.13.so
7f7ea3dc0000-7f7ea3dc1000 rw-p 00020000 fe:01 391179                     /lib/x86_64-linux-gnu/ld-2.13.so
7f7ea3dc1000-7f7ea3dc3000 rw-p 00000000 00:00 0
7f7ea3dc3000-7f7ea3dc5000 rw-p 00000000 00:00 0
7fff6d027000-7fff6d049000 rw-p 00000000 00:00 0                          [stack]
7fff6d050000-7fff6d051000 r-xp 00000000 00:00 0                          [vdso]
ffffffffff600000-ffffffffff601000 r-xp 00000000 00:00 0                  [vsyscall]
INFO: Command exit code 2 (raw code = 6)
WARNING: Failed to tag M4A file
INFO: AtomicParsley Command was: AtomicParsley /tmp/War_and_Peace_-_Episode_9_b04w89v9_default.m4a --freefree --overWrite --stik Normal --advisory remove --copyright 2015 British Broadcasting Corporation, all rights reserved --title Episode 9 --artist BBC Radio 4 --albumArtist BBC Radio --album War and Peace --grouping Drama --composer BBC iPlayer --genre Drama --comment Pierre returns to a deserted Moscow, in disguise, planning to assassinate Napoleon. --year 2015-01-01T19:15:00Z --tracknum 9 --disk 1 --lyrics As the Rostovs pack up ready to leave Moscow, Natasha invites all the wounded soldiers to stay in their house. Nikolai is still in love with Marya but feels he cannot go back on his promise to Sonya. That night, a wounded officer is wheeled into the courtyard - Prince Andrei - who Sonya is told won't live long. She and the Countess decide not to reveal the news to Natasha.  Meanwhile, Pierre returns to the Queen-less hive that is Moscow where he receives a letter from Countess
Bezukhov requesting a divorce. The French Army arrive to find Moscow deserted and completely out of control while Pierre wanders through the now-empty city, in disguise, as he initiates his solo mission to assassinate Napoleon. But fate could be about to interrupt his grand plan.  A dynamic new all-day dramatisation by Timberlake Wertenbaker of Leo Tolstoy's epic - from the translation by Richard Pevear and Larissa Volokonsky - follows the fortunes of three Russian aristocratic families during the Napoleonic War. Starring Lesley Manville, John Hurt, Alun Armstrong and Harriet Walter.  The story moves between their past and present as Pierre, Natasha, Marya and Nikolai talk to their children about the events that shaped their lives and the lives of every Russian who lived through these troubled times.  War and Peace reflects the panorama of life at every level of Russian society in this period. The longest of 19th Century novels, it's an epic story in which historical, social, ethical
and religious issues are explored on a scale never before attempted in fiction. From this, Timberlake Wertenbaker has created a riveting radio dramatisation in ten episodes.  Director: Celia de Wolff Executive Producer: Peter Hoare  A Pier production for BBC Radio 4..

EPISODE
http://www.bbc.co.uk/programmes/b04w89v9

SERIES
http://www.bbc.co.uk/programmes/b04w89v9 --artwork /tmp/War_and_Peace_-_Episode_9_b04w89v9_default.jpg
---

Interestingly the other episodes had similar lists of tags (including lyrics
fields) and do not run into this bug.  For example, this one does NOT provoke it:

INFO: AtomicParsley Command was: AtomicParsley /home/grue/Documents/Books/War_and_Peace/War_and_Peace_-_Episode_10_b04w89vd_default.m4a --freefree --overWrite --stik Normal --advisory remove --copyright 2015 British Broadcasting Corporation, all rights reserved --title Episode 10 --artist BBC Radio 4 --albumArtist BBC Radio --album War and Peace --grouping Drama --composer BBC iPlayer --genre Drama --comment Pierre recalls his time in prison, and Kutuzov reluctantly leads the Battle of Tarutino. --year 2015-01-01T20:15:00Z --tracknum 10 --disk 1 --lyrics In this concluding episode, Pierre recalls his time in the barracks - a surprisingly happy time where he meets a prisoner, Platon Karateev. Kutuzov reluctantly leads the Battle of Tarutino, a Russian victory by a series of accidents.  Meanwhile, Sonya is left little choice but to return her promise to Nikolai so that he can marry his true love, Marya. Countess Rostov receives shocking news and Natasha is still suffering from the death
 of her beloved Prince Andrei. Kutuzov is called upon once again by the Emperor, this time to 'save Europe'. What will be the General's ultimate decision for Russia?  A dynamic new all-day dramatisation by Timberlake Wertenbaker of Leo Tolstoy's epic - from the translation by Richard Pevear and Larissa Volokonsky - follows the fortunes of three Russian aristocratic families during the Napoleonic War. Starring Lesley Manville, John Hurt, Alun Armstrong and Harriet Walter.  The story moves between their past and present as Pierre, Natasha, Marya and Nikolai talk to their children about the events that shaped their lives and the lives of every Russian who lived through these troubled times.  War and Peace reflects the panorama of life at every level of Russian society in this period. The longest of 19th Century novels, it's an epic story in which historical, social, ethical and religious issues are explored on a scale never before attempted in fiction. From this, Timberlake Wertenbaker h
as created a riveting radio dramatisation in ten episodes.  Director: Celia de Wolff Executive Producer: Peter Hoare  A Pier production for BBC Radio 4.

EPISODE
http://www.bbc.co.uk/programmes/b04w89vd

SERIES
http://www.bbc.co.uk/programmes/b04w89vd --artwork /home/grue/Documents/Books/War_and_Peace/War_and_Peace_-_Episode_10_b04w89vd_default.jpg

#774556#10
Date:
2015-04-15 08:15:28 UTC
From:
To:
I see the same, with the same version of atomicparsley and get_iplayer 2.92:


INFO: Recorded /tmp/Feedback_-_10_04_2015_b05prkhr_default.m4a

INFO: MP4 tagging M4A file
*** Error in `AtomicParsley': free(): invalid next size (normal):
0x0000000000e40530 ***
INFO: Command exit code 2 (raw code = 6)
WARNING: Failed to tag M4A file


Cheers,

Mark