diff options
author | V3n3RiX <venerix@redcorelinux.org> | 2021-03-03 10:28:17 +0000 |
---|---|---|
committer | V3n3RiX <venerix@redcorelinux.org> | 2021-03-03 10:28:17 +0000 |
commit | d99093fb4bb5652015c06274d64083daa2439e4f (patch) | |
tree | cf61513204d97974179580065e85df5c8009087c /media-sound/vorbis-tools/files | |
parent | 463397cf1e064185110fe57c568d73f99a06f5d1 (diff) |
gentoo resync : 03.03.2021
Diffstat (limited to 'media-sound/vorbis-tools/files')
5 files changed, 0 insertions, 188 deletions
diff --git a/media-sound/vorbis-tools/files/vorbis-tools-1.4.0-CVE-2014-9638.patch b/media-sound/vorbis-tools/files/vorbis-tools-1.4.0-CVE-2014-9638.patch deleted file mode 100644 index a643f1cb82f6..000000000000 --- a/media-sound/vorbis-tools/files/vorbis-tools-1.4.0-CVE-2014-9638.patch +++ /dev/null @@ -1,92 +0,0 @@ -Patches taken as references: -https://github.com/mark4o/opus-tools/commit/8c412e619b83eb6dd32191909cf6672e93e5802e -https://trac.xiph.org/attachment/ticket/2212/0001-oggenc-Fix-large-alloca-on-bad-AIFF-input.patch -To fix bug report: -http://www.openwall.com/lists/oss-security/2015/08/29/1 - https://bugs.gentoo.org/show_bug.cgi?id=559170 -https://bugs.gentoo.org/show_bug.cgi?id=537422 ---- a/oggenc/audio.h -+++ b/oggenc/audio.h -@@ -25,7 +25,7 @@ - - typedef struct { - short format; -- short channels; -+ unsigned short channels; - int samplerate; - int bytespersec; - short align; -@@ -44,7 +44,7 @@ - } wavfile; - - typedef struct { -- short channels; -+ unsigned short channels; - int totalframes; - short samplesize; - int rate; ---- a/oggenc/audio.c -+++ b/oggenc/audio.c -@@ -245,8 +245,8 @@ - int aiff_open(FILE *in, oe_enc_opt *opt, unsigned char *buf, int buflen) - { - int aifc; /* AIFC or AIFF? */ -- unsigned int len; -- unsigned char *buffer; -+ unsigned int len,readlen; -+ unsigned char buffer[22]; - unsigned char buf2[8]; - aiff_fmt format; - aifffile *aiff = malloc(sizeof(aifffile)); -@@ -269,9 +269,9 @@ - return 0; /* Weird common chunk */ - } - -- buffer = alloca(len); -- -- if(fread(buffer,1,len,in) < len) -+ readlen = len < sizeof(buffer) ? len : sizeof(buffer); -+ if(fread(buffer,1,readlen,in) < readlen || -+ (len > readlen && !seek_forward(in, len-readlen))) - { - fprintf(stderr, _("Warning: Unexpected EOF in reading AIFF header\n")); - return 0; -@@ -277,11 +277,18 @@ - return 0; - } - -- format.channels = READ_U16_BE(buffer); -+ format.channels = (short)READ_U16_BE(buffer); - format.totalframes = READ_U32_BE(buffer+2); - format.samplesize = READ_U16_BE(buffer+6); - format.rate = (int)read_IEEE80(buffer+8); - -+ if(format.channels <=0) -+ { -+ fprintf(stderr, _("ERROR: Invalid channel count in AIFF header\n")); -+ return 0; -+ -+ } -+ - aiff->bigendian = 1; - - if(aifc) -@@ -449,11 +449,17 @@ - } - - format.format = READ_U16_LE(buf); -- format.channels = READ_U16_LE(buf+2); -+ format.channels = (short)READ_U16_LE(buf+2); - format.samplerate = READ_U32_LE(buf+4); - format.bytespersec = READ_U32_LE(buf+8); - format.align = READ_U16_LE(buf+12); - format.samplesize = READ_U16_LE(buf+14); -+ -+ if(format.channels == 0) -+ { -+ fprintf(stderr, _("ERROR: Zero channels in WAV header\n")); -+ return 0; -+ } - - if(format.format == -2) /* WAVE_FORMAT_EXTENSIBLE */ - { diff --git a/media-sound/vorbis-tools/files/vorbis-tools-1.4.0-CVE-2014-9640.patch b/media-sound/vorbis-tools/files/vorbis-tools-1.4.0-CVE-2014-9640.patch deleted file mode 100644 index 51c23b062aff..000000000000 --- a/media-sound/vorbis-tools/files/vorbis-tools-1.4.0-CVE-2014-9640.patch +++ /dev/null @@ -1,24 +0,0 @@ -Patch taken from: -https://trac.xiph.org/changeset/19117 -To fix bug report: -https://bugs.gentoo.org/show_bug.cgi?id=537422 ---- vorbis-tools-1.4.0/oggenc/oggenc.c -+++ vorbis-tools-1.4.0/oggenc/oggenc.c -@@ -97,6 +97,8 @@ - .3,-1, - 0,0,0.f, - 0, 0, 0, 0, 0}; -+ input_format raw_format = {NULL, 0, raw_open, wav_close, "raw", -+ N_("RAW file reader")}; - - int i; - -@@ -239,8 +241,6 @@ - - if(opt.rawmode) - { -- input_format raw_format = {NULL, 0, raw_open, wav_close, "raw", -- N_("RAW file reader")}; - - enc_opts.rate=opt.raw_samplerate; - enc_opts.channels=opt.raw_channels; diff --git a/media-sound/vorbis-tools/files/vorbis-tools-1.4.0-docdir.patch b/media-sound/vorbis-tools/files/vorbis-tools-1.4.0-docdir.patch deleted file mode 100644 index d3fdde0e11d7..000000000000 --- a/media-sound/vorbis-tools/files/vorbis-tools-1.4.0-docdir.patch +++ /dev/null @@ -1,14 +0,0 @@ -Thanks-to: Chris Mayo -https://bugs.gentoo.org/533774 - ---- a/ogg123/Makefile.am -+++ b/ogg123/Makefile.am -@@ -19,7 +19,7 @@ - localedir = $(datadir)/locale - DEFS = -DSYSCONFDIR=\"$(sysconfdir)\" -DLOCALEDIR=\"$(localedir)\" @DEFS@ - --docdir = $(datadir)/doc/$(PACKAGE)-$(VERSION) -+docdir = @docdir@ - mandir = @MANDIR@ - - bin_PROGRAMS = ogg123 diff --git a/media-sound/vorbis-tools/files/vorbis-tools-1.4.0-format-security.patch b/media-sound/vorbis-tools/files/vorbis-tools-1.4.0-format-security.patch deleted file mode 100644 index 501300ca6171..000000000000 --- a/media-sound/vorbis-tools/files/vorbis-tools-1.4.0-format-security.patch +++ /dev/null @@ -1,11 +0,0 @@ ---- vorbis-tools-1.4.0.orig/ogg123/status.c -+++ vorbis-tools-1.4.0/ogg123/status.c -@@ -148,7 +148,7 @@ - - switch (stats->type) { - case stat_noarg: -- len += sprintf(str+len, stats->formatstr); -+ len += sprintf(str+len, "%s", stats->formatstr); - break; - case stat_intarg: - len += sprintf(str+len, stats->formatstr, stats->arg.intarg); diff --git a/media-sound/vorbis-tools/files/vorbis-tools-1.4.0-underlinking.patch b/media-sound/vorbis-tools/files/vorbis-tools-1.4.0-underlinking.patch deleted file mode 100644 index 9aee38e0b19e..000000000000 --- a/media-sound/vorbis-tools/files/vorbis-tools-1.4.0-underlinking.patch +++ /dev/null @@ -1,47 +0,0 @@ -http://bugs.gentoo.org/513942 - -Fix building with `./configure --enable-ogg123 --without-flac --without-speex --without-kate` and `make`: - -libtool: link: gcc -Wall -ffast-math -fsigned-char -O2 -pipe -march=native -Wl,-O1 -Wl,--hash-style=gnu -o oggenc oggenc.o audio.o encode.o platform.o resample.o skeleton.o -Wl,--as-needed ../share/libutf8.a ../share/libgetopt.a -lvorbisenc -lvorbis -logg -resample.o:resample.c:function res_init: error: undefined reference to 'sin' -collect2: error: ld returned 1 exit status - -libtool: link: gcc -Wall -ffast-math -fsigned-char -O2 -pipe -march=native -Wl,-O1 -Wl,--as-needed -Wl,--hash-style=gnu -o ogg123 audio.o buffer.o callbacks.o cfgfile_options.o cmdline_options.o file_transport.o format.o http_transport.o ogg123.o oggvorbis_format.o playlist.o status.o remote.o transport.o vorbis_comments.o vgfilter.o ../share/libutf8.a ../share/libgetopt.a -lvorbisfile -lvorbis -logg -lao -lnsl -lcurl -lpthread -vgfilter.o:vgfilter.c:function vg_init: error: undefined reference to '__pow_finite' -vgfilter.o:vgfilter.c:function vg_init: error: undefined reference to '__pow_finite' -vgfilter.o:vgfilter.c:function vg_filter: error: undefined reference to 'tanh' -vgfilter.o:vgfilter.c:function vg_filter: error: undefined reference to 'tanh' -collect2: error: ld returned 1 exit status - -This is using the new GNU gold linker: - -$ ld -v -GNU gold (GNU Binutils 2.24) 1.11 - -Happens because -lm gets appended to the libraries list only with, for example, --with-flac but vgfilter.c and resample.c are always -using functions from the mathlib. - -Therefore, always link to mathlib: - ---- a/ogg123/Makefile.am -+++ b/ogg123/Makefile.am -@@ -30,7 +30,7 @@ - ogg123_LDADD = @SHARE_LIBS@ \ - @VORBISFILE_LIBS@ @VORBIS_LIBS@ @OGG_LIBS@ @AO_LIBS@ \ - @SOCKET_LIBS@ @LIBICONV@ @CURL_LIBS@ @PTHREAD_CFLAGS@ \ -- @PTHREAD_LIBS@ @I18N_LIBS@ @FLAC_LIBS@ @SPEEX_LIBS@ -+ @PTHREAD_LIBS@ @I18N_LIBS@ @FLAC_LIBS@ @SPEEX_LIBS@ -lm - - ogg123_DEPENDENCIES = @SHARE_LIBS@ - ogg123_SOURCES = audio.c buffer.c callbacks.c \ ---- a/oggenc/Makefile.am -+++ b/oggenc/Makefile.am -@@ -23,7 +23,7 @@ - - oggenc_LDADD = @SHARE_LIBS@ \ - @VORBISENC_LIBS@ @VORBIS_LIBS@ @KATE_LIBS@ @OGG_LIBS@ \ -- @LIBICONV@ @I18N_LIBS@ @FLAC_LIBS@ -+ @LIBICONV@ @I18N_LIBS@ @FLAC_LIBS@ -lm - - oggenc_DEPENDENCIES = @SHARE_LIBS@ - |