Commit Graph

27 Commits

Author SHA1 Message Date
bernd
8524a822d0 Fix a buffer overflow when processing MPEG 2.0 layer 3 files. (CVE-2006-1655)
More information:

http://secunia.com/advisories/20240/

diff from NetBSD pkgsrc

ok naddy@
2006-05-29 19:34:59 +00:00
jolan
95532c514c don't unconditionally strip mpg123 2006-04-05 19:19:29 +00:00
brad
33573e959c it's stupid to download a separate diff (l3.diff.gz) to fix mpg123 on alpha
and then modify most of it locally to work on other 64-bit archs so just
merge this tiny diff into patch-layer3_c
2004-09-15 20:38:07 +00:00
brad
6566b089c6 sync 2004-09-15 20:35:59 +00:00
pvalchev
e0cda5f23d fix buffer overflow, can allow arbitrary code execution by playing an mp3
with specially crafted header; "Davide Del Vecchio" <dante@alighieri.org>
2004-09-07 21:23:24 +00:00
jolan
17ca57b314 - sync w/update-patches
- respect CFLAGS
- let this at least compile on hppa
2004-04-20 01:45:30 +00:00
pvalchev
23f0243b5f fix amd64, tested by matthieu 2004-03-07 19:54:10 +00:00
margarida
c0be2e5be4 Security fix:
A problem in the handling of some types of remote files has been reported
in mpg123. Because of this, it may be possible for a remote attacker to
execute arbitrary code with the privileges of the mpg123 user.

ok naddy@ jolan@
2003-11-13 20:51:50 +00:00
jason
febca793e1 things treated as *'s to long should -be- long's lest you raise the ire of
a processor where sizeof(long) != sizeof(int) and strict alignment.
commitski pval.
2003-07-22 03:24:42 +00:00
pvalchev
c779d817a1 sparc64 is 64bit too, let it use code meant for alpha as well (int vs long)
fixes playing issues; found by jason@
2003-07-21 20:24:42 +00:00
brad
0c2046831a A vulnerability in the way mpg123 handles MP3 files with a bitrate
of zero may allow attackers to execute arbitrary code using a
specially crafted MP3 file.

http://marc.theaimsgroup.com/?l=bugtraq&m=104274357314340&w=2
2003-07-17 23:58:33 +00:00
tedu
23aa20e44a turn on pentium optimization. should still work for all procs. ok naddy@ 2003-05-27 19:15:14 +00:00
naddy
4fd45d6e59 - cleanup, better CFLAGS/COPTS handling
- add esd flavor
- don't clobber xterm title
no response from maintainer; ok espie@
2001-04-24 00:48:12 +00:00
brad
cfadb7f488 - use 07/13/2000 KAME patch
- use better filenames for patches
- respect CFLAGS
2000-08-02 10:33:24 +00:00
espie
0f542db4e8 Don't segfault if TERM is not defined... 2000-06-26 23:04:50 +00:00
brad
f00630efeb - use 02/17/2000 kame patch
- respect CC
- remove kludge and enable IPv6 support by default
2000-03-20 06:51:48 +00:00
ho
d60d495fb4 IPv6 patch. (from itojun@) 2000-02-18 20:18:00 +00:00
ho
c47169adaa Upgrade to mpg123-0.59r
Tested by niklas@
2000-01-12 15:47:13 +00:00
espie
8332044369 Restore TERM capability.
Code scavenged from tracker, since it's known to work...
removed all special cases, since it's needed only for OpenBSD.
Tweaks after some ho@'s comments.
1999-12-01 16:22:01 +00:00
turan
05530dce8d TERM_CONTROL does not work on openbsd. deraadt@ 1999-10-30 07:55:15 +00:00
brad
1e9933835c new dist site and new homepage 1999-09-07 14:55:21 +00:00
brad
0a185ecc87 - style
- enable terminal handling support
1999-08-17 15:51:21 +00:00
espie
caaef9a183 Erm... forgot the actual patch... why does cvs tell me about missing files
after the commit ? so that I can either get careless, or waste
time/bandwidth by running each commit twice...

Anyways, files/audio_openbsd.c is a `caching' audio system.
It's much smarter than the old one: uses get encoding to map the reasonable
encodings, does not even cross-check alaw/ulaw when 8 bit/16 bit work okay.

It does keep audio opened all the way instead of closing/reopening all the
time.

and it avoids gratuitous assumptions about PC broken hardware, such as not
having support for 8 bits signed and other brain-damage.

Missing part: it won't convert endianess on the fly when the only `right'
modes have the wrong endianess... this might occur with e.g., a sb16 on
an alpha.
1999-03-23 21:38:26 +00:00
espie
d43acf86bf Reworked from the ground up.
Basically, mpg123 assumptions about audio is broken. It assumes that
audio ioctl that change mode are instantaneous, which they are not, most
often, so that with the old model, start-up was 80 ioctl, which amounts to
~10 seconds with wss.

Added lazyness to basic audio.c so that it won't try to determine whether
we can play @ 8000Hz mono when 44100Hz stereo is what we want, and it
works...
1999-03-23 21:33:49 +00:00
brad
82e5b0175c add forgotten patch 1999-03-05 14:29:54 +00:00
brad
c4738c9dfc upgrade to mpg123 0.59q 1999-03-05 14:26:57 +00:00
provos
3596dd2827 Import mpg123 audio player (base port from FreeBSD + modifications) 1998-04-28 11:29:58 +00:00