From b17a3ef12038de50228bade1f05502c74e135321 Mon Sep 17 00:00:00 2001 From: V3n3RiX Date: Wed, 2 Sep 2020 14:09:07 +0100 Subject: gentoo resync : 02.09.2020 --- media-sound/mp3gain/Manifest | 3 - .../files/mp3gain-1.6.1-CVE-2017-12911.patch | 77 ---------------------- media-sound/mp3gain/mp3gain-1.6.1.ebuild | 34 ---------- 3 files changed, 114 deletions(-) delete mode 100644 media-sound/mp3gain/files/mp3gain-1.6.1-CVE-2017-12911.patch delete mode 100644 media-sound/mp3gain/mp3gain-1.6.1.ebuild (limited to 'media-sound/mp3gain') diff --git a/media-sound/mp3gain/Manifest b/media-sound/mp3gain/Manifest index 16541bfa70cf..dc90129ec59f 100644 --- a/media-sound/mp3gain/Manifest +++ b/media-sound/mp3gain/Manifest @@ -1,7 +1,4 @@ -AUX mp3gain-1.6.1-CVE-2017-12911.patch 2804 BLAKE2B 71d410abe4196cb47d4f006af7d8fd73a0308280ce57aaa955434c9f7b1bb8bf3363eb1ad8dbe0da3b5dd79e4ac5a355b796cdc253608c5bf2ba7c03527c3b32 SHA512 b5b093f18160cd4205870952d8f092c300f66d6fa025ac09114f55b1e5b37af6ab8ea1b505e33446f6c7153a5ffad04c001b67f9a069db8d3418c6fae3e73002 AUX mp3gain-1.6.2-CVE-2019-18359-plus.patch 6742 BLAKE2B 1216085064f712751ad9c7739a5d7a3ae9ca258ce41860a177756005b911371b6784a6ee4b7b68e829e5e1b4eede86287abd048cca01db99c53aa1ac9ff94c8f SHA512 b795167c594b106b8f6336d4c975bb73812a4fbcd5e16cfcedfaeff0c291f6ea01e62f20318d5107e62c9c42e843e8cd618745acdd17fd35c4e9a5052d85227e -DIST mp3gain-1_6_1-src.zip 68932 BLAKE2B 8c1ed35123f1613e189ec7bd74ee9f6176404a1b79c660f8f1a6df461cdfd3c6bb505daa09b8cc4756e1755d0923fe473a45c3ae171fcf35df22daaa08a7717a SHA512 6d26a7716a1901c80caff9d7fb03a454a452c06c6a57a7a921d5979727e112ba139690d8a287dde7a6e5a09b022d3c6f57193b4756a9c25caa177cef65f9e375 DIST mp3gain-1_6_2-src.zip 71246 BLAKE2B 5172c2103bb2267bf819f36180e9cd7a9d57df6f7ddc29900e9063f97c4513972053bb0c3f1f69f7ddd12ec0cf4251e93e1b6920389a8246bfdd5650176a90d2 SHA512 ec9de6c755120480ccb72b34a0042aea7546ef923090ab04e420d5b189523b4504e29952a3d695d3c42c74348f5c3c9123ff090bcc671e43375711e085d67480 -EBUILD mp3gain-1.6.1.ebuild 672 BLAKE2B f4bc25038d8ffde1df40f0a08b602f2c05e88870b6495cf83022acc273736ec19f1ca76e5451e07ffc1d1ed657fc6d92700d56eb5c92dfe60d5690d6c7284c22 SHA512 770d05807d4529c126a9b113dd95cf4b04abd8a5d0d3e8a9f3fe8a4d5a4f5c9ea96366eb293f8070a856694b3d6c1771d4273addc213e55f5616f6c63e7ea443 EBUILD mp3gain-1.6.2.ebuild 683 BLAKE2B 0c38eb9b821c7514d02a9420035cd13d3edfc1cfb22883a2d408d37db2132c1f5dc98f3c9a33af7396e4e7919acf18b65f82d431f68cbfdb245d6ff24351e5bc SHA512 34cc9782ca9752e7fe9500d805277fc26bdf1293832d69c1fcb8b3db63f0aadd2f4ba2c9c7f03fb9569abb1038015a0b1bc206a8604c8e5b5d01dd67bf37499d MISC metadata.xml 452 BLAKE2B c0b22d81f8e91934b834281f256b67e4e61a86fe9cfee08ace713baa8ff28221393594e9199aa631889c2b7e25b50bc108876b3f991ea7bef7575e486d5b206a SHA512 8ab00c2369fea3ed2ae75f5d04939ac81f4f227236215556157c3616ce1d72636c94af0988f06c995a08dd95c3774635c5d954e6992a077c20c7472be907a119 diff --git a/media-sound/mp3gain/files/mp3gain-1.6.1-CVE-2017-12911.patch b/media-sound/mp3gain/files/mp3gain-1.6.1-CVE-2017-12911.patch deleted file mode 100644 index 0b5a32280963..000000000000 --- a/media-sound/mp3gain/files/mp3gain-1.6.1-CVE-2017-12911.patch +++ /dev/null @@ -1,77 +0,0 @@ ---- a/apetag.c -+++ b/apetag.c -@@ -49,6 +49,12 @@ - - static int Lyrics3GetNumber6 ( const unsigned char* string ) - { -+ if (string[0] < '0' || string[0] > '9') return 0; -+ if (string[1] < '0' || string[1] > '9') return 0; -+ if (string[2] < '0' || string[2] > '9') return 0; -+ if (string[3] < '0' || string[3] > '9') return 0; -+ if (string[4] < '0' || string[4] > '9') return 0; -+ if (string[5] < '0' || string[5] > '9') return 0; - return ( string[0] - '0') * 100000 + - ( string[1] - '0') * 10000 + - ( string[2] - '0') * 1000 + -@@ -86,12 +92,14 @@ - free(*id3tagbuff); - *id3tagbuff = (unsigned char *)malloc(128); - memcpy(*id3tagbuff,tmpid3,128); -+ if ( *tag_offset < (128 + (long)(sizeof(T))) ) return 0; - if ( fseek (fp, *tag_offset - 128 - sizeof (T), SEEK_SET) ) return 0; - if ( fread (&T, 1, sizeof (T), fp) != sizeof (T) ) return 0; - // check for lyrics3 v2.00 tag - if ( memcmp (T.ID, "LYRICS200", sizeof (T.ID)) ) return 0; - len = Lyrics3GetNumber6 (T.Length); -- if ( fseek (fp, *tag_offset - 128 - (int)sizeof (T) - len, SEEK_SET) ) return 0; -+ if (*tag_offset < (128 + (long)(sizeof(T)) + len)) return 0; -+ if ( fseek (fp, *tag_offset - 128 - (long)sizeof (T) - len, SEEK_SET) ) return 0; - if ( fread (tmp, 1, 11, fp) != 11 ) return 0; - if ( memcmp (tmp, "LYRICSBEGIN", 11) ) return 0; - -@@ -167,6 +175,7 @@ - Ver = Read_LE_Uint32 (T.Version); - if ( (Ver != 1000) && (Ver != 2000) ) return 0; - if ( (TagLen = Read_LE_Uint32 (T.Length)) < sizeof (T) ) return 0; -+ if (*tag_offset < TagLen) return 0; - if ( fseek (fp, *tag_offset - TagLen, SEEK_SET) ) return 0; - buff = (char *)malloc (TagLen); - if ( fread (buff, 1, TagLen - sizeof (T), fp) != (TagLen - sizeof (T)) ) { -@@ -285,6 +294,7 @@ - (*apeTag)->originalTagSize = TagLen; - - if ( Read_LE_Uint32 (T.Flags) & (1<<31) ) { // Tag contains header -+ if (*tag_offset < (long)(sizeof(T))) return 0; - *tag_offset -= sizeof (T); - - fseek (fp, *tag_offset, SEEK_SET); -@@ -355,14 +365,14 @@ - */ - int ReadMP3GainAPETag (char *filename, struct MP3GainTagInfo *info, struct FileTagsStruct *fileTags) { - FILE *fi; -- long tag_offset, offs_bk; -+ long tag_offset, offs_bk, file_size; - - fi = fopen(filename, "rb"); - if (fi == NULL) - return 0; - - fseek(fi, 0, SEEK_END); -- tag_offset = ftell(fi); -+ tag_offset = file_size = ftell(fi); - - fileTags->lyrics3TagSize = 0; - -@@ -373,7 +383,11 @@ - ReadMP3ID3v1Tag ( fi, &(fileTags->id31tag), &tag_offset ); - } while ( offs_bk != tag_offset ); - -- fileTags->tagOffset = tag_offset; -+ if (tag_offset >= 0 && tag_offset <= file_size) { -+ fileTags->tagOffset = tag_offset; -+ } else { //Corrupt tag information, simply default to end-of-file -+ fileTags->tagOffset = file_size; -+ } - - fclose(fi); - \ No newline at end of file diff --git a/media-sound/mp3gain/mp3gain-1.6.1.ebuild b/media-sound/mp3gain/mp3gain-1.6.1.ebuild deleted file mode 100644 index 11c40690473f..000000000000 --- a/media-sound/mp3gain/mp3gain-1.6.1.ebuild +++ /dev/null @@ -1,34 +0,0 @@ -# Copyright 1999-2020 Gentoo Authors -# Distributed under the terms of the GNU General Public License v2 - -EAPI=6 -inherit toolchain-funcs - -MY_P="${P//./_}" - -DESCRIPTION="A program to analyze and adjust MP3 files to same volume" -HOMEPAGE="http://mp3gain.sourceforge.net/" -SRC_URI="mirror://sourceforge/${PN}/${MY_P}-src.zip" - -LICENSE="LGPL-2.1" -SLOT="0" -KEYWORDS="~alpha amd64 ~hppa ~ppc ~ppc64 sparc x86 ~amd64-linux ~x86-linux ~ppc-macos ~x86-macos" -IUSE="" - -RDEPEND=" - app-arch/unzip - media-sound/mpg123 -" -DEPEND="${RDEPEND}" - -PATCHES=( "${FILESDIR}"/${P}-CVE-2017-12911.patch ) - -S="${WORKDIR}" - -src_compile() { - emake CC="$(tc-getCC)" -} - -src_install() { - dobin mp3gain -} -- cgit v1.2.3