Re: Are WAV files dangerous?

pgx_at_pgrahams.com
Date: 08/25/04 

Date: Wed, 25 Aug 2004 19:38:23 GMT

unruh@string.physics.ubc.ca (Bill Unruh) wrote:

|Well, no. A .wav file has a very definite format. The header is a fixed
|length header and the rest is pure data.

Not true. The .wav file can contain many chunks that vary in length.
See:

http://www.borg.com/~jglatt/tech/wave.htm

Note that if any of the chunks is processed in a buffer that is not
long enough, problems can result. The chunks are all defined with a
length field, but if not properly used, an overflow could result.

Phil

Relevant Pages

  • Re: Are WAV files dangerous?
    ... The header is a fixed ... |length header and the rest is pure data. ... The .wav file can contain many chunks that vary in length. ...
    (alt.computer.security)
  • Re: sampling a wav file
    ... It's very easy to extract data from a PCM wav file, once you are familiar with the structure. ... Wav files are based on the Resource Interchange File Format, which is a generalized tagged file format built up of labelled "chunks". ... Another nasty little gotcha is that the FORMAT chunk of a RIFF file can legally contain several bytes of extra application-specific parameters tacked on the end of the fmt sub-chunk, preceded by a two-byte integer defining the number of extra bytes. ...
    (comp.dsp)
  • Re: Wave File Header Size
    ... The 'data' string doesn't happen to 0x52. ... found say that the wave header says that it should be 44 bytes. ... The file format permits optional chunks. ...
    (microsoft.public.win32.programmer.mmedia)
  • Re: legality/practicality of nesting complete, valid HTML pages
    ... content files must NOT contain header or trailer material. ... but we need to learn to live with the disadvantages. ... design, as long as the content chunks are in separate files. ... One reply offered an alternative of reading the content chunks into a buffer ...
    (comp.infosystems.www.authoring.html)
  • test for browser vulnerability
    ... If I use an actual .wav file, readme.eml is opened from the web page and the ... (Content-Type: audio/x-wav), I am prompted as to whether I would like to ... Attache notepad.exe. ... Add the following header: ...
    (Incidents)