Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 01 Jan 2021 11:20:52 +0000
From:      bugzilla-noreply@freebsd.org
To:        ports-bugs@FreeBSD.org
Subject:   [Bug 252321] multimedia/libdvdcss: Fix potential buffer overflow
Message-ID:  <bug-252321-7788@https.bugs.freebsd.org/bugzilla/>

next in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D252321

            Bug ID: 252321
           Summary: multimedia/libdvdcss: Fix potential buffer overflow
           Product: Ports & Packages
           Version: Latest
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Only Me
          Priority: ---
         Component: Individual Port(s)
          Assignee: jpaetzel@FreeBSD.org
          Reporter: daniel.engberg.lists@pyret.net
          Assignee: jpaetzel@FreeBSD.org
             Flags: maintainer-feedback?(jpaetzel@FreeBSD.org)

Created attachment 221155
  --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=3D221155&action=
=3Dedit
Patch for libdvdcss

Buffer of size PATH_MAX is being written to with data that can theoretically
overflow (a string of maximum size PATH_MAX plus other constant-size string=
s)

Other minor fixes:
Switch from PORTVERSION to DISTVERSION
Use HTTPS for MASTER_SITES
Remove dependency of gmake

References:
https://code.videolan.org/videolan/libdvdcss/-/commit/f93ae872f22bc404aa998=
ef127242d2e10de1b3c
Porters Handbook: "Table 5.2. Package Naming Examples"

Compile tested on FreeBSD 13.0-CURRENT main-c1-g63f93c7e1 (amd64) (make, ma=
ke
check-plist, make test)
Run-time tested on FreeBSD 13.0-CURRENT #0: Wed Dec 30 11:54:07 CET 2020
(arm64) (hash unavailable)
Poudriere testport OK 12.2-RELEASE (amd64)
Poudriere testport OK 11.4-RELEASE (amd64)

--=20
You are receiving this mail because:
You are the assignee for the bug.=



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-252321-7788>