c59a9d12b7
Fix the following security issues: - Heap buffer overflow in wavlike_ima_decode_block() - Heap buffer overflow in msadpcm_decode_block() - Heap buffer overflow in psf_binheader_readf() - Index out of bounds in psf_nms_adpcm_decode_block() - Heap buffer overflow in flac_buffer_copy() - Heap buffer overflow in copyPredictorTo24() - Uninitialized variable in psf_binheader_readf() Drop patch (already in version) While at it, also drop mention of CVE-2018-13419 which is correctly tagged as only affecting version 1.0.28 in NVD NIST database: https://nvd.nist.gov/vuln/detail/CVE-2018-13419 https://github.com/libsndfile/libsndfile/releases/tag/1.1.0 Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
29 lines
921 B
Makefile
29 lines
921 B
Makefile
################################################################################
|
|
#
|
|
# libsndfile
|
|
#
|
|
################################################################################
|
|
|
|
LIBSNDFILE_VERSION = 1.1.0
|
|
LIBSNDFILE_SOURCE = libsndfile-$(LIBSNDFILE_VERSION).tar.xz
|
|
LIBSNDFILE_SITE = https://github.com/libsndfile/libsndfile/releases/download/$(LIBSNDFILE_VERSION)
|
|
LIBSNDFILE_INSTALL_STAGING = YES
|
|
LIBSNDFILE_LICENSE = LGPL-2.1+
|
|
LIBSNDFILE_LICENSE_FILES = COPYING
|
|
LIBSNDFILE_CPE_ID_VENDOR = libsndfile_project
|
|
|
|
LIBSNDFILE_CONF_ENV = ac_cv_prog_cc_c99='-std=gnu99'
|
|
LIBSNDFILE_CONF_OPTS = \
|
|
--disable-sqlite \
|
|
--disable-alsa \
|
|
--disable-full-suite
|
|
|
|
ifeq ($(BR2_PACKAGE_FLAC)$(BR2_PACKAGE_LIBVORBIS)$(BR2_PACKAGE_OPUS),yyy)
|
|
LIBSNDFILE_DEPENDENCIES += flac host-pkgconf libvorbis opus
|
|
LIBSNDFILE_CONF_OPTS += --enable-external-libs
|
|
else
|
|
LIBSNDFILE_CONF_OPTS += --disable-external-libs
|
|
endif
|
|
|
|
$(eval $(autotools-package))
|