kumquat-buildroot/package/opusfile/opusfile.mk
Fabrice Fontaine ae65870e65 package/opusfile: fix CVE-2022-47021
A null pointer dereference issue was discovered in functions op_get_data
and op_open1 in opusfile.c in xiph opusfile 0.9 thru 0.12 allows
attackers to cause denial of service or other unspecified impacts.

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2023-02-05 15:24:34 +01:00

29 lines
807 B
Makefile

################################################################################
#
# opusfile
#
################################################################################
OPUSFILE_VERSION = 0.12
OPUSFILE_SITE = https://downloads.xiph.org/releases/opus
OPUSFILE_DEPENDENCIES = host-pkgconf libogg opus
OPUSFILE_LICENSE = BSD-3-Clause
OPUSFILE_LICENSE_FILES = COPYING
OPUSFILE_INSTALL_STAGING = YES
# 0001-Propagate-allocation-failure-from-ogg_sync_buffer.patch
OPUSFILE_IGNORE_CVES += CVE-2022-47021
ifeq ($(BR2_PACKAGE_OPENSSL),y)
OPUSFILE_DEPENDENCIES += openssl
else
OPUSFILE_CONF_OPTS += --disable-http
endif
# Use the same as opus package since it's a dep and we can't mix
ifeq ($(BR2_PACKAGE_OPUS_FIXED_POINT),y)
OPUSFILE_CONF_OPTS += --enable-fixed-point
endif
$(eval $(autotools-package))