Date: Wed, 28 Jul 2004 21:39:53 +0000 (UTC) From: Oliver Eikemeier <eik@FreeBSD.org> To: ports-committers@FreeBSD.org, cvs-ports@FreeBSD.org, cvs-all@FreeBSD.org Subject: cvs commit: ports/audio/sox Makefile ports/audio/sox/files patch-wav.c Message-ID: <200407282139.i6SLdr3L012493@repoman.freebsd.org>
next in thread | raw e-mail | index | archive | help
eik 2004-07-28 21:39:53 UTC
FreeBSD ports repository
Modified files:
audio/sox Makefile
Added files:
audio/sox/files patch-wav.c
Log:
Fix SoX buffer overflows when handling .WAV files (CAN-2004-0557)
Buffer overflow when parsing .wav file headers in sox. The IFF chunks
concerned have a 2-byte size field, but sox reads them into a 256-byte
buffer.
portaudit reference:
<http://www.freebsd.org/ports/portaudit/3e4ffe76-e0d4-11d8-9b0a-000347a4fa7d.html>;
PR: 69725
Submitted by: Dan Nelson <dnelson@allantgroup.com> (maintainer)
Revision Changes Path
1.27 +1 -1 ports/audio/sox/Makefile
1.1 +24 -0 ports/audio/sox/files/patch-wav.c (new)
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200407282139.i6SLdr3L012493>