cpet/openbsd-ports
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
09f7c65721
openbsd-ports/multimedia/xine-lib/patches/patch-src_input_mms_c

21 lines
602 B
Plaintext
Raw Normal View History

- SECURITY update to Xine-lib 1.1.16.1 - Heap overflow in Quicktime atom parsing. (CVE-2008-5234 vector 1) - Multiple buffer overflows. (CVE-2008-5236) - Multiple integer overflows. (CVE-2008-5237) - Unchecked read function results. (CVE-2008-5239) - Unchecked malloc using untrusted values. (CVE-2008-5240 vectors 3 & 4) - Buffer indexing using an untrusted value. (CVE-2008-5243) - Clean up the Makefile - Enable the Xv motion compensation support - Remove the JACK sound support - Remove the now unnecessary multi-packaging - Remove an unnecessary patch for the Sun sound code - Comment out some files in the PLIST that do not pertain to OpenBSD - Add WavPack support from Brad (taking MAINTAINER).
2009-02-02 17:00:42 -05:00
$OpenBSD: patch-src_input_mms_c,v 1.7 2009/02/02 22:00:42 sthen Exp $
--- src/input/mms.c.orig Sun Jan 4 10:47:28 2009
+++ src/input/mms.c Thu Jan 8 01:06:20 2009
update to 1.1.9.1 security fix: CVE-2008-0225 - heap-based buffer overflow in libreal (RTSP) also incorporates post release bug fix in WMV decoding from brad, thanks
2008-01-14 19:36:46 -05:00
@@ -48,6 +48,7 @@
initial import of xine-lib xine is a free multimedia player. It plays back CDs, DVDs, and VCDs. It also decodes multimedia files like AVI, MOV, WMV, and MP3 from local disk drives, and displays multimedia streamed over the Internet. It interprets many of the most common multimedia formats available - and some of the most uncommon formats, too. prodded by jolan@ and bernd@
2006-03-24 17:43:41 -05:00
#include <iconv.h>
#include <locale.h>
#include <langinfo.h>
+#include <localcharset.h>
#endif
/********** logging **********/
update to Xine-lib 1.1.13 This release contains a security fix (buffer overflow in the NSF demuxer, CVE-2008-1878). There are also a few bug fixes, and a new JACK output plugin. ok jakemsr@
2008-06-17 21:26:40 -04:00
@@ -290,7 +291,7 @@ static int send_command (mms_t *this, int command,
initial import of xine-lib xine is a free multimedia player. It plays back CDs, DVDs, and VCDs. It also decodes multimedia files like AVI, MOV, WMV, and MP3 from local disk drives, and displays multimedia streamed over the Internet. It interprets many of the most common multimedia formats available - and some of the most uncommon formats, too. prodded by jolan@ and bernd@
2006-03-24 17:43:41 -05:00
#ifdef USE_ICONV
static iconv_t string_utf16_open() {
- SECURITY update to Xine-lib 1.1.16.1 - Heap overflow in Quicktime atom parsing. (CVE-2008-5234 vector 1) - Multiple buffer overflows. (CVE-2008-5236) - Multiple integer overflows. (CVE-2008-5237) - Unchecked read function results. (CVE-2008-5239) - Unchecked malloc using untrusted values. (CVE-2008-5240 vectors 3 & 4) - Buffer indexing using an untrusted value. (CVE-2008-5243) - Clean up the Makefile - Enable the Xv motion compensation support - Remove the JACK sound support - Remove the now unnecessary multi-packaging - Remove an unnecessary patch for the Sun sound code - Comment out some files in the PLIST that do not pertain to OpenBSD - Add WavPack support from Brad (taking MAINTAINER).
2009-02-02 17:00:42 -05:00
- return iconv_open("UTF-16LE", "UTF-8");
initial import of xine-lib xine is a free multimedia player. It plays back CDs, DVDs, and VCDs. It also decodes multimedia files like AVI, MOV, WMV, and MP3 from local disk drives, and displays multimedia streamed over the Internet. It interprets many of the most common multimedia formats available - and some of the most uncommon formats, too. prodded by jolan@ and bernd@
2006-03-24 17:43:41 -05:00
+ return iconv_open("UTF-16LE", locale_charset());
}
static void string_utf16_close(iconv_t url_conv) {
Reference in New Issue Copy Permalink