diff options
| author |   Tanu Kaskinen <tanuk@iki.fi> | 2015-12-12 04:23:12 +0200 |
|---|---|---|
| committer |   Richard Purdie <richard.purdie@linuxfoundation.org> | 2015-12-16 12:11:23 +0000 |
| commit | 5a4b8f7f643a4b95a7036eab02c7f74aa4077982 (patch) | |
| tree | e9d24ba3737a58ad851ce30766ef88d9cff94784 /meta/recipes-multimedia/libsndfile/files/libsndfile-fix-CVE-2014-9756.patch | |
| parent | 39fe71fb632a899fb348d531c3e4c3d5923f54d6 (diff) | |
| download | openembedded-core-contrib-5a4b8f7f643a4b95a7036eab02c7f74aa4077982.tar.gz | |
libsndfile1: 1.0.25 -> 1.0.26
Main points from the release announcement:
* Fix for CVE-2014-9496, SD2 buffer read overflow.
* Fix for CVE-2014-9756, file_io.c divide by zero.
* Fix for CVE-2015-7805, AIFF heap write overflow.
* Add support for ALAC encoder in a CAF container.
* Add support for Cart chunks in WAV files.
* Minor bug fixes and improvements.
All patches we had are included in the new release.
Dropped PR from the recipe.
Signed-off-by: Tanu Kaskinen <tanuk@iki.fi>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Diffstat (limited to 'meta/recipes-multimedia/libsndfile/files/libsndfile-fix-CVE-2014-9756.patch')
| -rw-r--r-- | meta/recipes-multimedia/libsndfile/files/libsndfile-fix-CVE-2014-9756.patch | 24 |
1 files changed, 0 insertions, 24 deletions
diff --git a/meta/recipes-multimedia/libsndfile/files/libsndfile-fix-CVE-2014-9756.patch b/meta/recipes-multimedia/libsndfile/files/libsndfile-fix-CVE-2014-9756.patch deleted file mode 100644 index b54b3ba669..0000000000 --- a/meta/recipes-multimedia/libsndfile/files/libsndfile-fix-CVE-2014-9756.patch +++ /dev/null @@ -1,24 +0,0 @@ -src/file_io.c : Prevent potential divide-by-zero. - -Closes: https://github.com/erikd/libsndfile/issues/92 - -Upstream-Status: Backport - -Fixes CVE-2014-9756 - -Signed-off-by: Erik de Castro Lopo <erikd@mega-nerd.com> -Signed-off-by: Maxin B. John <maxin.john@intel.com> ---- -diff -Naur libsndfile-1.0.25-orig/src/file_io.c libsndfile-1.0.25/src/file_io.c ---- libsndfile-1.0.25-orig/src/file_io.c 2011-01-19 12:12:28.000000000 +0200 -+++ libsndfile-1.0.25/src/file_io.c 2015-11-04 15:02:04.337395618 +0200 -@@ -358,6 +358,9 @@ - { sf_count_t total = 0 ; - ssize_t count ; - -+ if (bytes == 0 || items == 0) -+ return 0 ; -+ - if (psf->virtual_io) - return psf->vio.write (ptr, bytes*items, psf->vio_user_data) / bytes ; - |