Hello,

I was trying to rip an audio CD via an NEC SATA DVD drive.  It has 3 
audio tracks and one video track.
The cooked TOC gives an incorrect length for the third audio track.  As 
soon as cdda2wav tries to read the block beyond the actually track 
length the kernel crashes.  This is 100% repeatable.

Below is the oops, dmesg, .config, lspci, cooked output and raw output 
from cdda2wav.  This is on a test machine so  I can test to your hearts 
content on this.

Cheers,

Ross

-- 
Ross Alexander
Phone: +44 20 8752 3394
SAP Basis, Technical Support Services, Corporate IT Centre, NEC Europe 
Limited

------------------------------------------------------------------------
|The contents of this email are intended for the use of the 
individual(s) or entity named above and may contain information that is 
privileged and/or confidential. If you are not the intended recipient, 
you are not authorised to make any use of it. In such case, please 
notify the sender and immediately delete the message from your system. 
The message content may contain personal views which are not the views 
of the company unless specifically stated. All liability for loss or 
damage caused by viruses is excluded. |

| NEC Europe Limited | Registered Office: NEC House, 1 Victoria Road, 
London W3 6BL | Registered in England 2832014 |