Skip to main content

Notice

Please note that most of the software linked on this forum is likely to be safe to use. If you are unsure, feel free to ask in the relevant topics, or send a private message to an administrator or moderator. To help curb the problems of false positives, or in the event that you do find actual malware, you can contribute through the article linked here.
Topic: WavPack Hybrid broken on (Arch?) Linux (Read 29340 times) previous topic - next topic
0 Members and 1 Guest are viewing this topic.

WavPack Hybrid broken on (Arch?) Linux

Reply #25
Since the hashing process is completely independent from all codecs, it should be immune to such bugs. I have to say, while the bug is clearly audible in this instance, it's making me a bit paranoid. It's what prompted me to use caudec's hashing facility when testing file integrity.

Yeah, it's definitely safer to use a tool completely outside the encoding/decoding process to verify lossless integrity.

However, the new "verify" feature is almost as robust because it's implemented entirely in the command-line program (as opposed to libwavpack), and with any luck there won't be any more architecture bugs popping up... 

WavPack Hybrid broken on (Arch?) Linux

Reply #26
Moreover, when asked to compute MD5 hashes, caudec will also compare them to the files' internal MD5 hash (FLAC, WavPack and TAK), if present, and report an error if the hashes don't match (which would indicate a serious bug). That should be able to satisfy any amount of paranoia.