From 52ca1eb7ed6235d8cd3ae3e342b0e2fc0a150ff1 Mon Sep 17 00:00:00 2001
From: "A. Wilcox" <AWilcox@Wilcox-Tech.com>
Date: Wed, 18 Jul 2018 20:11:13 -0500
Subject: user/libid3tag: pull in, modernise

---
 user/libid3tag/APKBUILD            | 60 ++++++++++++++++++++++++++++++++++++++
 user/libid3tag/CVE-2008-2109.patch | 11 +++++++
 2 files changed, 71 insertions(+)
 create mode 100644 user/libid3tag/APKBUILD
 create mode 100644 user/libid3tag/CVE-2008-2109.patch

(limited to 'user/libid3tag')

diff --git a/user/libid3tag/APKBUILD b/user/libid3tag/APKBUILD
new file mode 100644
index 000000000..fd871acf9
--- /dev/null
+++ b/user/libid3tag/APKBUILD
@@ -0,0 +1,60 @@
+# Contributor: Carlo Landmeter <clandmeter@gmail.com>
+# Maintainer: 
+pkgname=libid3tag
+pkgver=0.15.1b
+pkgrel=8
+pkgdesc="Library for manipulating IDv3 tags in MP3 audio files"
+url="http://www.underbit.com/products/mad/"
+arch="all"
+license="GPL-2.0+"
+depends=""
+makedepends="zlib-dev"
+subpackages="$pkgname-dev"
+source="ftp://ftp.mars.org/pub/mpeg/libid3tag-$pkgver.tar.gz
+	CVE-2008-2109.patch
+	"
+
+prepare() {
+	cd "$builddir"
+	update_config_sub
+	default_prepare
+}
+
+build() {
+	cd "$builddir"
+	./configure \
+		--build=$CBUILD \
+		--host=$CHOST \
+		--prefix=/usr \
+		--sysconfdir=/etc \
+		--mandir=/usr/share/man \
+		--infodir=/usr/share/info
+	make
+}
+
+check() {
+	cd "$builddir"
+	make check
+}
+
+package() {
+	cd "$builddir"
+	make DESTDIR="$pkgdir" install
+	mkdir -p "$pkgdir"/usr/lib/pkgconfig
+	cat > "$pkgdir"/usr/lib/pkgconfig/id3tag.pc <<EOF
+prefix=/usr
+exec_prefix=/usr/bin
+libdir=/usr/lib
+includedir=/usr/include
+
+Name: id3tag
+Description: ID3 tag manipulation library
+Requires:
+Version: $pkgver
+Libs: -lid3tag
+Cflags:
+EOF
+}
+
+sha512sums="ade7ce2a43c3646b4c9fdc642095174b9d4938b078b205cd40906d525acd17e87ad76064054a961f391edcba6495441450af2f68be69f116549ca666b069e6d3  libid3tag-0.15.1b.tar.gz
+fc79d44ca9d1435ab5b11d4da6b46d3684827a1384a0156cd88242225f98f3a0668c0d6e6a88159f0c4985fcbdc636777c2f100d7f371eef258a6050d6fde567  CVE-2008-2109.patch"
diff --git a/user/libid3tag/CVE-2008-2109.patch b/user/libid3tag/CVE-2008-2109.patch
new file mode 100644
index 000000000..6226d14af
--- /dev/null
+++ b/user/libid3tag/CVE-2008-2109.patch
@@ -0,0 +1,11 @@
+--- a/field.c.orig	2008-05-05 09:49:15.000000000 -0400
++++ b/field.c	2008-05-05 09:49:25.000000000 -0400
+@@ -291,7 +291,7 @@
+ 
+       end = *ptr + length;
+ 
+-      while (end - *ptr > 0) {
++      while (end - *ptr > 0 && **ptr != '\0') {
+ 	ucs4 = id3_parse_string(ptr, end - *ptr, *encoding, 0);
+ 	if (ucs4 == 0)
+ 	  goto fail;
-- 
cgit v1.2.3-70-g09d2