Bug fixes

Author: tim-smart

lib/id3/id3v1.js

@@ -35,7 +35,7 @@ module.exports = {
       tags.track   = buffer[offset + 29];
     } else {
       tags.comment = buffer.toString('ascii', offset, findZero(buffer, offset, offset + 30));
-      tag.track    = 0;
+      tags.track   = 0;
     }
 
     tags.genre = GENRES[buffer[buffer.length - 1]];

lib/id3/id3v2_frames.js

@@ -70,7 +70,8 @@ exports.readData = function readData (b, type, offset, length, flags, major) {
           text;
       offset += 1;
 
-      if (b[start + length - 1] === 0) {
+      if (b[start + length - 1] === 0 &&
+          (start + length - 1) >= offset) {
         text = decodeString(b, charset, offset, start + length - 1).text;
       } else {
         text = decodeString(b, charset, offset, start + length).text;