Commit Graph

160 Commits

Author SHA1 Message Date
ajacoutot
c7df276eeb Remove patches no longer necessary now that we have posix_spawnp() and family.
from Brad (maintainer)
2012-03-23 10:36:10 +00:00
ajacoutot
2c8260b4ae SECURITY:
- MMS: Fix stack overflow. SA-1201
- RealRTSP: Fix heap overflows. SA-1202
- ty: Fix out of bound read on corrupt files.
- Avoid char conversion in strchr().
- Fix surrogate detection.

from Brad (maintainer)
2012-03-21 08:27:29 +00:00
sthen
b39c53935b - Remove patches for QT4/MKV modules which are unnecessary.
- Remove patch for tdestroy() wrapper now that tdelete() has been fixed.
- Remove @comment's from the PLIST which are no longer necessary.

From Brad
2012-02-17 22:07:16 +00:00
sthen
8823bce600 SECURITY update to VLC 1.1.13; fixes a buffer overflow in the TiVo demuxer.
Also install .la files for libvlc/libvlccore. From Brad (maintainer).
2011-12-23 15:01:59 +00:00
ajacoutot
bdb6392800 Add a dependency on x11/gtk+2,-guic. 2011-12-03 23:34:04 +00:00
phessler
7ccc4d7c1c Update to VLC 1.1.12
Most of the bits from Brad, a minor runtime fix by me.

Tested on amd64, i386, macppc

OK dhill@, rpointel@, sthen@, jasper@
2011-11-16 13:33:15 +00:00
espie
7fdd40a7b8 convert to bsd.port.arch.mk
zap FULL* that's not needed for jack, since there are no real flavors.
2011-10-21 18:20:14 +00:00
espie
346b5bc6dc normalize pkgpath 2011-09-16 12:29:12 +00:00
ajacoutot
eb20fe8788 SECURITY: fix heap-based buffer overflow. CVE-2011-2588.
from Brad (maintainer)
2011-07-17 06:35:42 +00:00
naddy
eed7c62887 Fix build with png-1.5.
All fixes by yours truly.
2011-07-08 20:38:00 +00:00
sthen
b5687d87d1 replace -pthread patch with a proper one, clean up -pthread flag handling.
from Brad, ok dcoppa@
2011-07-01 11:10:53 +00:00
sthen
b328f2f4ad Chase ffmpeg dep changes. Mostly from Brad ok dcoppa@, plus opencv from me. 2011-06-24 11:17:05 +00:00
dcoppa
882eada7fd Clean up CPPFLAGS handling. The -I${WRKSRC}/include hack isn't
necessary with vlc 1.0.x. From Brad.

ok sthen@
2011-06-24 07:19:08 +00:00
sthen
2082f0a8c8 Fix heap corruption / integer overflow in playlist parser. CVE-2011-2194
From Brad.
2011-06-13 23:51:12 +00:00
jolan
2b65b8ed3f fix packaging with no_web FLAVOR 2011-05-16 17:37:59 +00:00
dcoppa
3737b33c1a Get rid of the use of libtool's --tag=disable-static and only delete
the archives for the plugins.

From Brad; OK sthen@
2011-05-11 09:08:07 +00:00
dcoppa
25d9cd0797 - Fix a potential crash with MMS.
- Don't free uninitialized ES format descriptor for DV muxed in AVI.

From upstream via Brad.
OK sthen@
2011-05-08 16:20:16 +00:00
dcoppa
e977dcf529 - Disable the Musepack decoder and rely upon FFmpeg.
- Re-enable the faad-based AAC decoder. There is a bug with VLC that
  causes some streamed AAC content when being transcoded (to at least
  Vorbis) to sound like its only at half or quarter speed.
- Just delete the .la files.

From Brad

OK sthen@
2011-05-06 08:18:54 +00:00
dcoppa
6b4a6ec9c4 Remove dependencies on the FLAC and libtheora libraries and their
respective VLC decoders and rely upon the FFmpeg based decoders
instead; from Brad

@comment .la archives: they're useless because now vlc is built
using tag=disable-static

OK sthen@
2011-05-04 14:58:39 +00:00
sthen
5bc2e9b459 - update comment with CVE id, from Brad 2011-04-25 09:32:42 +00:00
ajacoutot
6d01c2069a Fix build/run with new libnotify.
tested in a bulk by landry, thanks!
ok landry@ jasper@
2011-04-21 07:04:56 +00:00
sthen
2b6188a223 sync WANTLIB, mostly from Brad 2011-04-19 08:25:24 +00:00
sthen
a4a3fcc8a0 remove @commented entries, no longer needed following tag=disable-static.
from Brad.
2011-04-16 20:18:50 +00:00
sthen
63823c9382 Update comments in patch headers to include CVE details (no change to
actual code). from Brad.
2011-04-12 22:40:20 +00:00
sthen
8b274e7fbf SECURITY, fix a heap-based buffer overflow in the MP4 demuxer.
From upstream via Brad.
2011-04-11 15:11:28 +00:00
dcoppa
bafe2933a4 Make use of libtool's tag=disable-static option to remove the unused
static archives for the plugins and libraries.

From Brad. OK sthen@
2011-04-04 07:43:22 +00:00
sthen
0e20780610 "Drop the use of faad / liba52 / libdca / libmad and libmpeg2 for decoding
AAC / AC3 / DTS / MPEG Audio and MPEG/MPEG2 in favour of FFmpeg's libavcodec
decoders which nowdays are just as good and in some cases like AC3 / DTS
are better."  From Brad (maintainer). ok dcoppa@
2011-04-03 21:41:38 +00:00
sthen
00582ef96a Bump ports which should be using newer autoconf to 2.65;
config.h files checked.  From Brad.
2011-03-26 10:05:24 +00:00
sthen
592f947173 security update, fix buffer overflow CVE-2010-3275, CVE-2010-3276, from Brad 2011-03-25 01:07:00 +00:00
jakemsr
9b54f5b172 fix for newer libmatroska
from Brad (MAINTAINER)
2011-03-12 21:19:13 +00:00
ajacoutot
77403fc962 SECURITY: fix a remote code execution vulnerability issue with the
Mastroska container support (VideoLAN-SA-1102).

from Brad (maintainer)
ok sthen@
2011-02-02 09:34:23 +00:00
ajacoutot
528cfe5b3c SECURITY: Handle early termination properly in StripTags.
from Brad
ok sthen@
2011-01-22 09:10:22 +00:00
jasper
90847ee882 - remove USE_GROFF=Yes, manpages checked by brad.
from brad (MAINTAINER)
2011-01-15 10:56:51 +00:00
jasper
82a76db7a0 Fix heap overflows in CDG decoder
from brad (MAINTAINER)
2011-01-14 19:46:46 +00:00
ajacoutot
3dd8f8eb09 Missed bumps. 2011-01-02 06:52:42 +00:00
ajacoutot
85e7ca5e26 Forgot to cvs add in previous... 2010-12-31 06:58:44 +00:00
ajacoutot
09a7fbcff0 SECURITY: CVE-2010-3907
Buffer overflow in Real demuxer.

See http://www.videolan.org/security/sa1007.html for details.

from Brad (maintainer)
2010-12-31 06:58:18 +00:00
espie
9ff53f35ab remaining WANTLIB go .>= to >= 2010-11-22 10:16:08 +00:00
espie
e50b98837f new depends 2010-11-22 08:36:47 +00:00
jasper
a727f252b3 - adjust after recent schroedinger update
from brad
2010-11-19 08:59:32 +00:00
espie
632a3518ab move gettext to new WANTLIB 2010-11-06 16:07:00 +00:00
steven
3e0671f6de fix -export-symbols-regex libtool option syntax
with this, it builds fine with openbsd libtool
bump the revisions
2010-10-28 11:55:16 +00:00
ajacoutot
ff07e285bc Remove USE_X11. 2010-10-24 20:58:58 +00:00
espie
8e072131b6 USE_GROFF=Yes 2010-10-19 08:13:56 +00:00
jasper
e34499f593 - fix WANTLIB after cairo update. 2010-10-11 08:11:24 +00:00
landry
f7034a1048 Fix for CVE-2010-2937 (Insufficient input validation in VLC TagLib
plugin) :
"VLC fails to perform sufficient input validation when trying to extract
some meta-informations about input media through ID3v2 tags. In the
failure case, VLC attempt dereference an invalid memory address, and a
crash will ensure."
From brad via sthen@
2010-09-29 11:30:03 +00:00
sthen
cfa3c6cd71 these ports don't build with ports libtool yet, as they ask libtool to
link with static library archives. force gnu libtool (this was already
done in vlc) and add a short explanatory comment. ok jasper@ ajacoutot@
2010-09-21 12:12:12 +00:00
sthen
65b9350bd9 sundry cleanups;
from Brad (maintainer):
- Fix sys/mount.h detection so VCD/libcdio support can be enabled.
- bump AUTOCONF_VERSION to 2.64.
- some Makefile cleaning up.

from me, ok Brad:
- garbage-collect share/locale dir
- collect REVISIONs together
2010-09-17 12:15:20 +00:00
jakemsr
d957ca2d31 * no more anonymous unions in video(4)
* bump REVISION-main
2010-09-12 22:33:57 +00:00
sthen
adfaa8987d - chase the library change in multimedia/schroedinger; oil->orc
- add various other missing WANTLIB (and LIB_DEPENDS in some cases)
- while there move PKGNAME=..pX to REVISION, and move some ports
to new-style LIB_DEPENDS

original diff from Brad, extensive checking by me (clean build of everything
related to liboil).
2010-08-25 23:27:21 +00:00