diff options
Diffstat (limited to 'user')
-rw-r--r-- | user/libid3tag/APKBUILD | 60 | ||||
-rw-r--r-- | user/libid3tag/CVE-2008-2109.patch | 11 |
2 files changed, 71 insertions, 0 deletions
diff --git a/user/libid3tag/APKBUILD b/user/libid3tag/APKBUILD new file mode 100644 index 000000000..fd871acf9 --- /dev/null +++ b/user/libid3tag/APKBUILD @@ -0,0 +1,60 @@ +# Contributor: Carlo Landmeter <clandmeter@gmail.com> +# Maintainer: +pkgname=libid3tag +pkgver=0.15.1b +pkgrel=8 +pkgdesc="Library for manipulating IDv3 tags in MP3 audio files" +url="http://www.underbit.com/products/mad/" +arch="all" +license="GPL-2.0+" +depends="" +makedepends="zlib-dev" +subpackages="$pkgname-dev" +source="ftp://ftp.mars.org/pub/mpeg/libid3tag-$pkgver.tar.gz + CVE-2008-2109.patch + " + +prepare() { + cd "$builddir" + update_config_sub + default_prepare +} + +build() { + cd "$builddir" + ./configure \ + --build=$CBUILD \ + --host=$CHOST \ + --prefix=/usr \ + --sysconfdir=/etc \ + --mandir=/usr/share/man \ + --infodir=/usr/share/info + make +} + +check() { + cd "$builddir" + make check +} + +package() { + cd "$builddir" + make DESTDIR="$pkgdir" install + mkdir -p "$pkgdir"/usr/lib/pkgconfig + cat > "$pkgdir"/usr/lib/pkgconfig/id3tag.pc <<EOF +prefix=/usr +exec_prefix=/usr/bin +libdir=/usr/lib +includedir=/usr/include + +Name: id3tag +Description: ID3 tag manipulation library +Requires: +Version: $pkgver +Libs: -lid3tag +Cflags: +EOF +} + +sha512sums="ade7ce2a43c3646b4c9fdc642095174b9d4938b078b205cd40906d525acd17e87ad76064054a961f391edcba6495441450af2f68be69f116549ca666b069e6d3 libid3tag-0.15.1b.tar.gz +fc79d44ca9d1435ab5b11d4da6b46d3684827a1384a0156cd88242225f98f3a0668c0d6e6a88159f0c4985fcbdc636777c2f100d7f371eef258a6050d6fde567 CVE-2008-2109.patch" diff --git a/user/libid3tag/CVE-2008-2109.patch b/user/libid3tag/CVE-2008-2109.patch new file mode 100644 index 000000000..6226d14af --- /dev/null +++ b/user/libid3tag/CVE-2008-2109.patch @@ -0,0 +1,11 @@ +--- a/field.c.orig 2008-05-05 09:49:15.000000000 -0400 ++++ b/field.c 2008-05-05 09:49:25.000000000 -0400 +@@ -291,7 +291,7 @@ + + end = *ptr + length; + +- while (end - *ptr > 0) { ++ while (end - *ptr > 0 && **ptr != '\0') { + ucs4 = id3_parse_string(ptr, end - *ptr, *encoding, 0); + if (ucs4 == 0) + goto fail; |