buildroot/package/libsndfile, branch 2017.02.2

libsndfile: security bump to version 1.0.28

2017-04-28T12:31:24+00:00

Fixes: CVE-2017-7585 - In libsndfile before 1.0.28, an error in the "flac_buffer_copy()" function (flac.c) can be exploited to cause a stack-based buffer overflow via a specially crafted FLAC file. CVE-2017-7586 - In libsndfile before 1.0.28, an error in the "header_read()" function (common.c) when handling ID3 tags can be exploited to cause a stack-based buffer overflow via a specially crafted FLAC file. CVE-2017-7741 - In libsndfile before 1.0.28, an error in the "flac_buffer_copy()" function (flac.c) can be exploited to cause a segmentation violation (with write memory access) via a specially crafted FLAC file during a resample attempt, a similar issue to CVE-2017-7585. CVE-2017-7742 - In libsndfile before 1.0.28, an error in the "flac_buffer_copy()" function (flac.c) can be exploited to cause a segmentation violation (with read memory access) via a specially crafted FLAC file during a resample attempt, a similar issue to CVE-2017-7585. Dop undocumented patch adjusting SUBDIRS in Makefile.in as it no longer applies. Instead pass --disable-full-suite to disable man pages, documentation and programs, as that was presumably the reason for the patch. Signed-off-by: Peter Korsgaard (cherry picked from commit c363e070d8ee036052fbcadd153d8c39ce0db55b) Signed-off-by: Peter Korsgaard

libsndfile: disable external library dependencies

2017-01-20T02:22:14+00:00

Fixes static linking of pifmrds [1]: host/usr/bin/arm-linux-gcc -static -o pi_fm_rds rds.o waveforms.o pi_fm_rds.o fm_mpx.o control_pipe.o -lsndfile -lm .../host/usr/arm-buildroot-linux-uclibcgnueabi/sysroot/usr/lib/libsndfile.a(flac.o): In function `sf_flac_error_callback': flac.c:(.text+0x44c): undefined reference to `FLAC__StreamDecoderErrorStatusString' host/usr/arm-buildroot-linux-uclibcgnueabi/sysroot/usr/lib/libsndfile.a(ogg.o): In function `ogg_close': ogg.c:(.text+0x10): undefined reference to `ogg_sync_clear' host/usr/arm-buildroot-linux-uclibcgnueabi/sysroot/usr/lib/libsndfile.a(ogg_vorbis.o): In function `vorbis_read_sample': ogg_vorbis.c:(.text+0x26c): undefined reference to `vorbis_synthesis_pcmout' [1] http://autobuild.buildroot.net/results/9b7/9b7638caa8f3e82e38fb68b0321cb649618a0131 Signed-off-by: Peter Seiderer Signed-off-by: Thomas Petazzoni

package/libsndfile: bump version to 1.0.27

2016-07-07T09:48:50+00:00

Signed-off-by: Bernd Kuhls Signed-off-by: Thomas Petazzoni

libsndfile: security bump to version 1.0.26

2015-12-15T20:36:02+00:00

Fixes: CVE-2014-9496 - SD2 buffer read overflow. CVE-2014-9756 - file_io.c divide by zero. CVE-2015-7805 - AIIF heap write overflow. Signed-off-by: Gustavo Zacarias Signed-off-by: Thomas Petazzoni

libsndfile: add hash file

2015-07-16T20:36:36+00:00

Signed-off-by: Gustavo Zacarias

packages: remove (non-)lfs dependencies and tweaks

2015-04-01T20:47:22+00:00

Now that largefile is mandatory removes package dependencies and conditionals. Signed-off-by: Gustavo Zacarias Signed-off-by: Thomas Petazzoni

package/*: rename patches according to the new policy

2015-02-03T13:52:56+00:00

Autogenerated from rename-patch.py (http://patchwork.ozlabs.org/patch/403345) Signed-off-by: Samuel Martin Signed-off-by: Peter Korsgaard

libsndfile: add licensing info

2013-12-11T21:21:01+00:00

Signed-off-by: Gustavo Zacarias Signed-off-by: Peter Korsgaard

Config.in files: unify comments of toolchain option dependencies

2013-10-14T20:45:57+00:00

This patch lines up the comments in Config.in files that clarify which toolchain options the package depends on. Signed-off-by: Thomas De Schampheleire Signed-off-by: Peter Korsgaard

Normalize separator size to 80

2013-06-06T20:30:24+00:00

Signed-off-by: Alexandre Belloni Signed-off-by: Peter Korsgaard