summaryrefslogtreecommitdiff
path: root/user
diff options
context:
space:
mode:
Diffstat (limited to 'user')
-rw-r--r--user/libid3tag/APKBUILD60
-rw-r--r--user/libid3tag/CVE-2008-2109.patch11
2 files changed, 71 insertions, 0 deletions
diff --git a/user/libid3tag/APKBUILD b/user/libid3tag/APKBUILD
new file mode 100644
index 000000000..fd871acf9
--- /dev/null
+++ b/user/libid3tag/APKBUILD
@@ -0,0 +1,60 @@
+# Contributor: Carlo Landmeter <clandmeter@gmail.com>
+# Maintainer:
+pkgname=libid3tag
+pkgver=0.15.1b
+pkgrel=8
+pkgdesc="Library for manipulating IDv3 tags in MP3 audio files"
+url="http://www.underbit.com/products/mad/"
+arch="all"
+license="GPL-2.0+"
+depends=""
+makedepends="zlib-dev"
+subpackages="$pkgname-dev"
+source="ftp://ftp.mars.org/pub/mpeg/libid3tag-$pkgver.tar.gz
+ CVE-2008-2109.patch
+ "
+
+prepare() {
+ cd "$builddir"
+ update_config_sub
+ default_prepare
+}
+
+build() {
+ cd "$builddir"
+ ./configure \
+ --build=$CBUILD \
+ --host=$CHOST \
+ --prefix=/usr \
+ --sysconfdir=/etc \
+ --mandir=/usr/share/man \
+ --infodir=/usr/share/info
+ make
+}
+
+check() {
+ cd "$builddir"
+ make check
+}
+
+package() {
+ cd "$builddir"
+ make DESTDIR="$pkgdir" install
+ mkdir -p "$pkgdir"/usr/lib/pkgconfig
+ cat > "$pkgdir"/usr/lib/pkgconfig/id3tag.pc <<EOF
+prefix=/usr
+exec_prefix=/usr/bin
+libdir=/usr/lib
+includedir=/usr/include
+
+Name: id3tag
+Description: ID3 tag manipulation library
+Requires:
+Version: $pkgver
+Libs: -lid3tag
+Cflags:
+EOF
+}
+
+sha512sums="ade7ce2a43c3646b4c9fdc642095174b9d4938b078b205cd40906d525acd17e87ad76064054a961f391edcba6495441450af2f68be69f116549ca666b069e6d3 libid3tag-0.15.1b.tar.gz
+fc79d44ca9d1435ab5b11d4da6b46d3684827a1384a0156cd88242225f98f3a0668c0d6e6a88159f0c4985fcbdc636777c2f100d7f371eef258a6050d6fde567 CVE-2008-2109.patch"
diff --git a/user/libid3tag/CVE-2008-2109.patch b/user/libid3tag/CVE-2008-2109.patch
new file mode 100644
index 000000000..6226d14af
--- /dev/null
+++ b/user/libid3tag/CVE-2008-2109.patch
@@ -0,0 +1,11 @@
+--- a/field.c.orig 2008-05-05 09:49:15.000000000 -0400
++++ b/field.c 2008-05-05 09:49:25.000000000 -0400
+@@ -291,7 +291,7 @@
+
+ end = *ptr + length;
+
+- while (end - *ptr > 0) {
++ while (end - *ptr > 0 && **ptr != '\0') {
+ ucs4 = id3_parse_string(ptr, end - *ptr, *encoding, 0);
+ if (ucs4 == 0)
+ goto fail;