From owner-svn-ports-all@freebsd.org Sat Jul 15 06:26:49 2017 Return-Path: Delivered-To: svn-ports-all@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id EEC04DB75DF; Sat, 15 Jul 2017 06:26:49 +0000 (UTC) (envelope-from novel@FreeBSD.org) Received: from repo.freebsd.org (repo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:0]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id B1AA765A93; Sat, 15 Jul 2017 06:26:49 +0000 (UTC) (envelope-from novel@FreeBSD.org) Received: from repo.freebsd.org ([127.0.1.37]) by repo.freebsd.org (8.15.2/8.15.2) with ESMTP id v6F6QmoY008898; Sat, 15 Jul 2017 06:26:48 GMT (envelope-from novel@FreeBSD.org) Received: (from novel@localhost) by repo.freebsd.org (8.15.2/8.15.2/Submit) id v6F6QmN4008896; Sat, 15 Jul 2017 06:26:48 GMT (envelope-from novel@FreeBSD.org) Message-Id: <201707150626.v6F6QmN4008896@repo.freebsd.org> X-Authentication-Warning: repo.freebsd.org: novel set sender to novel@FreeBSD.org using -f From: Roman Bogorodskiy Date: Sat, 15 Jul 2017 06:26:48 +0000 (UTC) To: ports-committers@freebsd.org, svn-ports-all@freebsd.org, svn-ports-branches@freebsd.org Subject: svn commit: r445849 - in branches/2017Q3/audio/id3lib: . files X-SVN-Group: ports-branches X-SVN-Commit-Author: novel X-SVN-Commit-Paths: in branches/2017Q3/audio/id3lib: . files X-SVN-Commit-Revision: 445849 X-SVN-Commit-Repository: ports MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-BeenThere: svn-ports-all@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: SVN commit messages for the ports tree List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 15 Jul 2017 06:26:50 -0000 Author: novel Date: Sat Jul 15 06:26:48 2017 New Revision: 445849 URL: https://svnweb.freebsd.org/changeset/ports/445849 Log: MFH: r445652 audio/id3lib: fix stack corruption bug Add a patch to fix stack corruption bug when reading IDv3 tags and VBR header information. PR: 220374 Submitted by: bob@eager.cx Obtained from: https://sourceforge.net/p/id3lib/bugs/189/ Approved by: maintainer timeout Approved by: ports-secteam (junovitch) Added: branches/2017Q3/audio/id3lib/files/patch-src_mp3__parse.cpp - copied unchanged from r445652, head/audio/id3lib/files/patch-src_mp3__parse.cpp Modified: branches/2017Q3/audio/id3lib/Makefile Directory Properties: branches/2017Q3/ (props changed) Modified: branches/2017Q3/audio/id3lib/Makefile ============================================================================== --- branches/2017Q3/audio/id3lib/Makefile Sat Jul 15 06:16:09 2017 (r445848) +++ branches/2017Q3/audio/id3lib/Makefile Sat Jul 15 06:26:48 2017 (r445849) @@ -3,7 +3,7 @@ PORTNAME= id3lib PORTVERSION= 3.8.3 -PORTREVISION= 9 +PORTREVISION= 10 CATEGORIES= audio MASTER_SITES= SF Copied: branches/2017Q3/audio/id3lib/files/patch-src_mp3__parse.cpp (from r445652, head/audio/id3lib/files/patch-src_mp3__parse.cpp) ============================================================================== --- /dev/null 00:00:00 1970 (empty, because file is newly added) +++ branches/2017Q3/audio/id3lib/files/patch-src_mp3__parse.cpp Sat Jul 15 06:26:48 2017 (r445849, copy of r445652, head/audio/id3lib/files/patch-src_mp3__parse.cpp) @@ -0,0 +1,11 @@ +--- src/mp3_parse.cpp.orig 2017-07-13 13:36:15 UTC ++++ src/mp3_parse.cpp +@@ -465,7 +465,7 @@ bool Mp3Info::Parse(ID3_Reader& reader, size_t mp3size + // from http://www.xingtech.com/developer/mp3/ + + const size_t VBR_HEADER_MIN_SIZE = 8; // "xing" + flags are fixed +- const size_t VBR_HEADER_MAX_SIZE = 116; // frames, bytes, toc and scale are optional ++ const size_t VBR_HEADER_MAX_SIZE = 120; // frames, bytes, toc and scale are optional + + if (mp3size >= vbr_header_offest + VBR_HEADER_MIN_SIZE) + {