plugin) :
"VLC fails to perform sufficient input validation when trying to extract
some meta-informations about input media through ID3v2 tags. In the
failure case, VLC attempt dereference an invalid memory address, and a
crash will ensure."
From brad via sthen@
from Brad (maintainer):
- Fix sys/mount.h detection so VCD/libcdio support can be enabled.
- bump AUTOCONF_VERSION to 2.64.
- some Makefile cleaning up.
from me, ok Brad:
- garbage-collect share/locale dir
- collect REVISIONs together
- add various other missing WANTLIB (and LIB_DEPENDS in some cases)
- while there move PKGNAME=..pX to REVISION, and move some ports
to new-style LIB_DEPENDS
original diff from Brad, extensive checking by me (clean build of everything
related to liboil).
included, so the tools know that old ffmpeg versions won't satisfy the
dependencies listed in WANTLIB.
this way, attempting to install these packages with old ffmpeg will
no longer give you a cryptic error message as seen by dhill@.
* FFmpeg LIB_DEPENDS/WANTLIB changes
* remove bogus @bin marker in PLIST (wxvlc is a symlink)
* bump PKGNAME-main
* img_convert()/img_resample() based filters disabled due to FFmpeg
changes
feedback/ok brad@
- fixes *many* null pointer deref, error handling failures, leaks,
use-after-free and double-free found by Coverity
- fixes some MPEG2 TS audio packet loss
- numerous security fixes in 0.8.6g
- fixes some memory leaks
Also: mark altivec FLAVOR as broken; ajacoutot reports that the
altivec-enabled binary fails to start.
ok ajacoutot
from vlc subversion via Alexey Suslikov.
- use jack_client_connect() instead of jack_client_new() so multiple
instances of vlc can connect to jackd concurrently. problem reported
by Alexey Suslikov.
from the release notes:
VLC media player 0.8.6e and earlier versions suffer from security
vulnerabilities in the Subtitle demuxer, Real RTSP demuxer, MP4
demuxer and Cinepak codec.
from brad@
and subpackages
- move the mozilla plugin to a subpackage
- enable altivec support as a flavor
- ffmpeg and wxWidgets lib_depends/wantlib updates
help/ok ajacoutot@
