summaryrefslogtreecommitdiffstats
path: root/package/mpg123
Commit message (Collapse)AuthorAgeFilesLines
* package/mpg123: security bump to version 1.25.10Bernd Kuhls2018-06-102-4/+6
| | | | | | | | | | Version 1.25.4 fixes CVE-2017-9545, for details see release notes: http://www.mpg123.org/cgi-bin/news.cgi Added upstream hashes. Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
* package/*/Config.in: fix help text check-package warningsThomas Petazzoni2017-12-181-2/+2
| | | | | | | | | | | | | This commit fixes the warnings reported by check-package on the help text of all package Config.in files, related to the formatting of the help text: should start with a tab, then 2 spaces, then at most 62 characters. The vast majority of warnings fixed were caused by too long lines. A few warnings were related to spaces being used instead of a tab to indent the help text. Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* mpg123: security bump to version 1.25.2Peter Korsgaard2017-07-112-2/+5
| | | | | | | | | | | | | | | | | | >From the release notes: - Extend pow tables for layer III to properly handle files with i-stereo and 5-bit scalefactors. Never observed them for real, just as fuzzed input to trigger the read overflow. Note: This one goes on record as CVE-2017-11126, calling remote denial of service. While the accesses are out of bounds for the pow tables, they still are safely within libmpg123's memory (other static tables). Just wrong values are used for computation, no actual crash unless you use something like GCC's AddressSanitizer, nor any information disclosure. - Avoid left-shifts of negative integers in layer I decoding. While we're at it, add a hash for the license file. Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* mpg123: security bump to version 1.25.1Peter Korsgaard2017-07-032-6/+7
| | | | | | | | | | | | | | | | | | | | | | | | | >From the release notes: - Avoid memset(NULL, 0, 0) to calm down the paranoid. - Fix bug 252, invalid read of size 1 in ID3v2 parser due to forgotten offset from the frame flag bytes (unnoticed in practice for a long time). Fuzzers are in the house again. This one got CVE-2017-10683. https://sourceforge.net/p/mpg123/bugs/252/ - Avoid a mostly harmless conditional jump depending on uninitialised fr->lay in compute_bpf() (mpg123_position()) when track is not ready yet. - Fix undefined shifts on signed long mask in layer3.c (worked in practice, never right in theory). Code might be a bit faster now, even. Thanks to Agostino Sarubbo for reporting. dlopen() is now directly used to load output modules (and the --with-modules-suffix option has been removed), so adjust the modules logic to match. Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* boot, package: use SPDX short identifier for LGPLv2.1/LGPLv2.1+Rahul Bedarkar2017-04-011-1/+1
| | | | | | | | | | | We want to use SPDX identifier for license string as much as possible. SPDX short identifier for LGPLv2.1/LGPLv2.1+ is LGPL-2.1/LGPL-2.1+. This change is done using following command. find . -name "*.mk" | xargs sed -ri '/LICENSE( )?[\+:]?=/s/LGPLv2.1(\+)?/LGPL-2.1\1/g' Signed-off-by: Rahul Bedarkar <rahulbedarkar89@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* mpg123: security bump to version 1.23.8Gustavo Zacarias2016-09-272-2/+2
| | | | | | | | | Fixes an out-of-bounds memory read in the ID3v2 parser for tags that claim an unrealistically small length. This crashes mpg123 or any application using libmpg123 with activated ID3v2 parsing. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* mpg123: bump to version 1.23.7Gustavo Zacarias2016-09-252-2/+2
| | | | | Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* mpg123: bump to version 1.23.6Gustavo Zacarias2016-07-012-2/+2
| | | | | Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* mpg123: bump to version 1.23.5Gustavo Zacarias2016-06-263-50/+2
| | | | | | | Drop upstreamed patch and related autoreconf. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* Merge branch 'next'Peter Korsgaard2016-06-012-2/+2
|\ | | | | | | Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
| * mpg123: bump to version 1.23.4Gustavo Zacarias2016-05-152-2/+2
| | | | | | | | | | Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* | mpg123: unbreak static linking with alsa/portaudioPeter Korsgaard2016-05-252-0/+48
|/ | | | | | | | | | | | | | | | | Fixes: http://autobuild.buildroot.org/results/b2b/b2bc143fbd0b34e75a44af41ab6899dd9fa3c21a/ http://autobuild.buildroot.org/results/60d/60d56b0a75d209f2cfeff0727c2f900abc89d263/ http://autobuild.buildroot.org/results/6a8/6a8729ce69055821fdf0b91adcea2ea201d40189/ And many more. A recent upstream build system change caused LIBS to be ignored at build time (but still used a configure time), causing our static linking workarounds to no longer work. Fix it by adding a patch to cause it to no longer ignore LIBS. Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* mpg123: bump to version 1.23.3Gustavo Zacarias2016-03-252-4/+3
| | | | | Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* package/mpg123: fix static linking issue with alsaBernd Kuhls2015-11-081-0/+3
| | | | | | | | | | | | | | | | | | As opposed to the other audio backends, the configure script does NOT use pkg-config to figure out how to link with alsa, breaking static linking as alsa uses pthreads. This patch uses the same fix from Peter used for portaudio: http://git.buildroot.net/buildroot/commit/package/mpg123/mpg123.mk?id=dea306c78b5d4c571555c50512e212a725b594b9 Fixes http://autobuild.buildroot.net/results/796/79613fda3f51e969ecd46ae1151bd4c3316639c3/ http://autobuild.buildroot.net/results/b0a/b0a99ff1516602ed42c0cc14d9d2922a01cdf88f/ http://autobuild.buildroot.net/results/5bd/5bdfd2aa9de568d0f7be27ffb18d4541b0e1be0c/ and many others Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* mpg123: bump to version 1.22.4Gustavo Zacarias2015-10-022-4/+4
| | | | | Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* mpg123: replace $(shell ...) call with $(subst ...)Arnout Vandecappelle2015-07-151-1/+1
| | | | | | | There's no reason to use a shell here. Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* packages: use backtick instead of $(shell ...) make functionArnout Vandecappelle2015-07-151-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | It is often difficult to know exactly when make will expand the variable, and usually it can only be expanded after the dependencies have been built (e.g. pkg-config or the .pc file). Using a backtick instead makes it very clear that it will be expanded only while executing the command. This change is useful for two cases: 1. The per-package staging (and host) directory will be created as part of the configure step, so any $(shell ...) variable that is used in the configure step will fail because the directory doesn't exist yet. 2. 'make printvars' evaluates the variables it prints. It will therefore trigger a lot of errors from missing .pc files and others. The backticks, on the other hand, are not expanded, so with this change the output of 'make printvars' becomes clean again. This commit contains only the easy changes: replace $(shell ...) with `...`, and also replace ' with " where needed. Follow-up commits will tackle the more complicated cases that need additional explanation. After this change, the following instances of $(shell ...) will remain: - All assignments that use := - All variables that are used in make conditionals (which don't expand the backticks). - All variables that only refer to system executables and make variables that don't change. - The calls to check-host-* in dependencies.mk, because it is eval'ed. [Original patch by Fabio Porcedda, but extended quite a bit by Arnout.] Signed-off-by: Fabio Porcedda <fabio.porcedda@gmail.com> Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* mpg123: bump to version 1.22.2Gustavo Zacarias2015-06-022-4/+4
| | | | | Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* portaudio: fix static linking issue with portaudioPeter Korsgaard2015-05-221-0/+3
| | | | | | | | | | | Fixes: http://autobuild.buildroot.net/results/25f/25f8088ecb276ff4559a56fcc4f1b92d11f7deac/ As opposed to the other audio backends, the configure script does NOT use pkg-config to figure out how to link with portaudio, breaking static linking as portaudio uses pthreads. Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* package: kill pointless text justificationGustavo Zacarias2015-04-231-1/+1
| | | | | | Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Acked-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* mpg123: bump to version 1.22.1Gustavo Zacarias2015-04-022-4/+4
| | | | | Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* mpg123: bump to version 1.22.0Gustavo Zacarias2015-02-252-4/+4
| | | | | Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* mpg123: needs host-pkgconfPeter Korsgaard2014-11-281-0/+1
| | | | | | | | SDL detection is done using pkg-config. Fixes http://autobuild.buildroot.net/results/437/437f408122d7f21420a7cdc9758caf0ab1ba877d/ Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* mpg132: bump to version 1.21.0Gustavo Zacarias2014-10-122-1/+4
| | | | | | | Also add hash file. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* packages: rename FOO_CONF_OPT into FOO_CONF_OPTSThomas De Schampheleire2014-10-041-7/+7
| | | | | | | | | | | | To be consistent with the recent change of FOO_MAKE_OPT into FOO_MAKE_OPTS, make the same change for FOO_CONF_OPT. Sed command used: find * -type f | xargs sed -i 's#_CONF_OPT\>#&S#g' Signed-off-by: Thomas De Schampheleire <thomas.de.schampheleire@gmail.com> Reviewed-by: "Yann E. MORIN" <yann.morin.1998@free.fr> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* mpg123: bump to version 1.20.1Gustavo Zacarias2014-06-181-1/+1
| | | | | Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* mpg123: correct powerpc cpu variant selectionPeter Korsgaard2014-06-021-0/+2
| | | | | | | | | | | Fixes http://autobuild.buildroot.net/results/d8a/d8af8f991b4429cf06081ddf2f08043861842a50/ ppc_nofpu should (as the name indicates) only be used for powerpc. It is not clear to me if this code works for powerpc64(le) as well, so this is only selected for classic ppc32. Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* mpg123: bump to 1.20.0, providing better optimizations for ARM and AArch64Thomas Petazzoni2014-06-011-1/+9
| | | | | | | | | | | | | | As suggested by Gustavo, this patch bumps mpg123 to 1.20.0, and therefore superseds the patch initially provided by Sven Neumann. In 1.20.0, there is a new CPU type arm_fpu, which will compile code for both VFP and NEON, and choose at runtime which one to use. Similarly for AArch64, the option --with-cpu=aarch64 will compile both the NEON and generic decoders, and select at runtime which one to use. Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> Reviewed-by: "Yann E. MORIN" <yann.morin.1998@free.fr> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* powerpc: add BR2_POWERPC_CPU_HAS_ALTIVEC to replace adhoc deps/checksCody P Schafer2014-05-261-3/+1
| | | | | Signed-off-by: Cody P Schafer <cody@linux.vnet.ibm.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* mpg123: needs MMURyan Barnett2014-02-221-0/+1
| | | | | | | | | | | | | | | | mpg123 needs MMU because the application that is built with this package uses fork. Currently it is difficult to only build the libraries for mpg123 so disabling the package all together when there is no MMU support. Note: mpg123 is an optional dependency of mpd but mpd already requires BR2_USE_MMU so there is no need to add this as a dependency. Fixes: http://autobuild.buildroot.net/results/5b0/5b053af566dd122ae7e58893e77d5d5f3070fb9e Signed-off-by: Ryan Barnett <rjbarnet@rockwellcollins.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* mpg132: bump to version 1.18.0Gustavo Zacarias2014-02-041-1/+1
| | | | | | | | Fixes a couple of buffer overflows so it should be considered as a security bump (no CVEs though). Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* mpg123: bump to version 1.17.0Gustavo Zacarias2014-01-131-1/+1
| | | | | Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* mpg123: do not disable optimizationsSven Neumann2013-11-221-1/+1
| | | | | | | | | It seems pointless to disable even the default optimizations. If at all this should be made dependant on the values of the BR2_OPTIMIZE variables. Signed-off-by: Sven Neumann <neumann@teufel.de> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* mpg123: bump to version 1.16.0Axel Lin2013-10-071-1/+1
| | | | | Signed-off-by: Axel Lin <axel.lin@ingics.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* Remove multimedia subdirectoryJérôme Pouiller2013-09-082-0/+75
| | | | | | | | | | | Unless it was a group of sub-packages, packages was never regrouped by category. multimedia/ was an exception to this rule. This patch move packages/multimedia/ sub-directories to packages/. It keeps two subdirectories for gstream 0.10 and gstreamer 1.X. Signed-off-by: Jérôme Pouiller <jezz@sysmic.org> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
* audio: Move all audio packages into audio subdirDaniel Laird2008-09-053-129/+0
| | | | | | | | Moved all audio packages into a subdir called audio. I then created a Config.in and made sure that a audio.mk existed. Daniel Laird
* Kconfig: remove 'default n'Peter Korsgaard2008-07-171-1/+0
| | | | 'default n' is the default, so there's no need to say it explicitly.
* - just use the strip binary to avoid confusing libtool (quotes)Bernhard Reutner-Fischer2007-10-011-1/+1
| | | | - use $(STRIPCMD) in packages to avoid clashes with $(STRIP)
* Use correct location of mpg123 binaryUlf Samuelsson2007-09-231-3/+3
|
* Remove renamed mpg123 patchUlf Samuelsson2007-08-281-44/+0
|
* Remove mpg123 patch from current build, full removal pendingUlf Samuelsson2007-08-282-1/+45
|
* - sed -i -e "/;$/s/;$//g" $(egrep ";$" package/* package/*/*.mk toolchain/* ↵Bernhard Reutner-Fischer2007-08-211-1/+1
| | | | toolchain/*/*.mk */Makefile.in -l)
* Remove switches if sstrip is runUlf Samuelsson2007-08-211-1/+1
|
* SED away some whitespaceUlf Samuelsson2007-08-201-2/+2
|
* Revert bad patch of mpg123Ulf Samuelsson2007-08-011-3/+1
|
* Use TARGET_CONFIGURE_ARGS in some packages lackingUlf Samuelsson2007-07-301-0/+1
|
* Bump version of mpg123,use configure, change site to SourceforgeUlf Samuelsson2007-07-282-29/+48
|
* Cleanup, get rid of MPG123_WORKDIR, use $@, libmad not neededPeter Korsgaard2007-05-311-15/+12
|
* - forgot to add the cross patch.Bernhard Reutner-Fischer2006-12-141-0/+44
|
* - Ulrich Hecht writes: The current mpg123 packageBernhard Reutner-Fischer2006-12-141-1/+10
| | | | | | - ignores TARGET_CC (overwritten in Makefile) - ignores TARGET_CFLAGS - is hardcoded to use the i386 target
OpenPOWER on IntegriCloud