Date: Sat, 17 May 2008 20:28:41 +0000 (UTC) From: Christian Weisgerber <naddy@FreeBSD.org> To: ports-committers@FreeBSD.org, cvs-ports@FreeBSD.org, cvs-all@FreeBSD.org Subject: cvs commit: ports/audio/libvorbis Makefile ports/audio/libvorbis/files patch-lib_codebook.c patch-lib_res0.c Message-ID: <200805172028.m4HKSfBp017100@repoman.freebsd.org>
next in thread | raw e-mail | index | archive | help
naddy 2008-05-17 20:28:41 UTC
FreeBSD ports repository
Modified files:
audio/libvorbis Makefile
Added files:
audio/libvorbis/files patch-lib_codebook.c patch-lib_res0.c
Log:
* add code to prevent heap attacks by exploiting dim=bignum and
partition_codewords = partion_values
* correctly handle the nonsensical codebook.dim==0 case
* dd checks/rejection for absurdly huge codebooks
Obtained from: Xiph SVN
Security: http://www.vuxml.org/freebsd/f5a76faf-244c-11dd-b143-0211d880e350
Revision Changes Path
1.35 +1 -1 ports/audio/libvorbis/Makefile
1.1 +23 -0 ports/audio/libvorbis/files/patch-lib_codebook.c (new)
1.1 +35 -0 ports/audio/libvorbis/files/patch-lib_res0.c (new)
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200805172028.m4HKSfBp017100>