[gentoo-commits] repo/gentoo:master commit in: media-sound/mp3gain/
commit: 5558437bb088158627def02161da522cf75e067e Author: Marek Szuba gentoo org> AuthorDate: Sun Sep 26 22:03:57 2021 + Commit: Marek Szuba gentoo org> CommitDate: Sun Sep 26 22:16:01 2021 + URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=5558437b media-sound/mp3gain: keyword 1.6.2 for ~riscv Signed-off-by: Marek Szuba gentoo.org> media-sound/mp3gain/mp3gain-1.6.2.ebuild | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/media-sound/mp3gain/mp3gain-1.6.2.ebuild b/media-sound/mp3gain/mp3gain-1.6.2.ebuild index 71da3cd40b6..77b53469929 100644 --- a/media-sound/mp3gain/mp3gain-1.6.2.ebuild +++ b/media-sound/mp3gain/mp3gain-1.6.2.ebuild @@ -14,7 +14,7 @@ S="${WORKDIR}" LICENSE="LGPL-2.1" SLOT="0" -KEYWORDS="~alpha amd64 ~hppa ~ppc ~ppc64 sparc x86 ~amd64-linux ~x86-linux ~ppc-macos" +KEYWORDS="~alpha amd64 ~hppa ~ppc ~ppc64 ~riscv sparc x86 ~amd64-linux ~x86-linux ~ppc-macos" BDEPEND="app-arch/unzip" RDEPEND="media-sound/mpg123"
[gentoo-commits] repo/gentoo:master commit in: media-sound/mp3gain/
commit: eaf56e7e4efc2c06122da1e88caf3e49381f9bbd Author: David Seifert gentoo org> AuthorDate: Mon May 31 17:48:38 2021 + Commit: David Seifert gentoo org> CommitDate: Mon May 31 17:48:38 2021 + URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=eaf56e7e media-sound/mp3gain: drop inactive maintainer Package-Manager: Portage-3.0.19, Repoman-3.0.3 Signed-off-by: David Seifert gentoo.org> media-sound/mp3gain/metadata.xml | 4 1 file changed, 4 deletions(-) diff --git a/media-sound/mp3gain/metadata.xml b/media-sound/mp3gain/metadata.xml index fd6447570dc..9fa30264512 100644 --- a/media-sound/mp3gain/metadata.xml +++ b/media-sound/mp3gain/metadata.xml @@ -1,10 +1,6 @@ http://www.gentoo.org/dtd/metadata.dtd;> - -chain...@gentoo.org -Tony Vroon - so...@gentoo.org Gentoo Sound project
[gentoo-commits] repo/gentoo:master commit in: media-sound/mp3gain/
commit: f03d88d52835c6a3d8ed334ef2e07600d9a3e19f Author: Fabian Groffen gentoo org> AuthorDate: Wed Jan 6 14:29:10 2021 + Commit: Fabian Groffen gentoo org> CommitDate: Wed Jan 6 14:29:10 2021 + URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=f03d88d5 media-sound/mp3gain: drop x86-macos Package-Manager: Portage-3.0.12, Repoman-3.0.2 Signed-off-by: Fabian Groffen gentoo.org> media-sound/mp3gain/mp3gain-1.6.2.ebuild | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/media-sound/mp3gain/mp3gain-1.6.2.ebuild b/media-sound/mp3gain/mp3gain-1.6.2.ebuild index 032698c2c63..71da3cd40b6 100644 --- a/media-sound/mp3gain/mp3gain-1.6.2.ebuild +++ b/media-sound/mp3gain/mp3gain-1.6.2.ebuild @@ -1,4 +1,4 @@ -# Copyright 1999-2020 Gentoo Authors +# Copyright 1999-2021 Gentoo Authors # Distributed under the terms of the GNU General Public License v2 EAPI=7 @@ -14,7 +14,7 @@ S="${WORKDIR}" LICENSE="LGPL-2.1" SLOT="0" -KEYWORDS="~alpha amd64 ~hppa ~ppc ~ppc64 sparc x86 ~amd64-linux ~x86-linux ~ppc-macos ~x86-macos" +KEYWORDS="~alpha amd64 ~hppa ~ppc ~ppc64 sparc x86 ~amd64-linux ~x86-linux ~ppc-macos" BDEPEND="app-arch/unzip" RDEPEND="media-sound/mpg123"
[gentoo-commits] repo/gentoo:master commit in: media-sound/mp3gain/files/, media-sound/mp3gain/
commit: 78ad7877efb30b4599320e7f81a15cb2527acdfe Author: Sam James gentoo org> AuthorDate: Sat Aug 29 00:26:26 2020 + Commit: Sam James gentoo org> CommitDate: Sat Aug 29 00:26:26 2020 + URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=78ad7877 media-sound/mp3gain: security cleanup Closes: https://bugs.gentoo.org/717940 Package-Manager: Portage-3.0.4, Repoman-3.0.1 Signed-off-by: Sam James gentoo.org> media-sound/mp3gain/Manifest | 1 - .../files/mp3gain-1.6.1-CVE-2017-12911.patch | 77 -- media-sound/mp3gain/mp3gain-1.6.1.ebuild | 34 -- 3 files changed, 112 deletions(-) diff --git a/media-sound/mp3gain/Manifest b/media-sound/mp3gain/Manifest index f6771ab442c..e76bdaa6317 100644 --- a/media-sound/mp3gain/Manifest +++ b/media-sound/mp3gain/Manifest @@ -1,2 +1 @@ -DIST mp3gain-1_6_1-src.zip 68932 BLAKE2B 8c1ed35123f1613e189ec7bd74ee9f6176404a1b79c660f8f1a6df461cdfd3c6bb505daa09b8cc4756e1755d0923fe473a45c3ae171fcf35df22daaa08a7717a SHA512 6d26a7716a1901c80caff9d7fb03a454a452c06c6a57a7a921d5979727e112ba139690d8a287dde7a6e5a09b022d3c6f57193b4756a9c25caa177cef65f9e375 DIST mp3gain-1_6_2-src.zip 71246 BLAKE2B 5172c2103bb2267bf819f36180e9cd7a9d57df6f7ddc29900e9063f97c4513972053bb0c3f1f69f7ddd12ec0cf4251e93e1b6920389a8246bfdd5650176a90d2 SHA512 ec9de6c755120480ccb72b34a0042aea7546ef923090ab04e420d5b189523b4504e29952a3d695d3c42c74348f5c3c9123ff090bcc671e43375711e085d67480 diff --git a/media-sound/mp3gain/files/mp3gain-1.6.1-CVE-2017-12911.patch b/media-sound/mp3gain/files/mp3gain-1.6.1-CVE-2017-12911.patch deleted file mode 100644 index 0b5a3228096..000 --- a/media-sound/mp3gain/files/mp3gain-1.6.1-CVE-2017-12911.patch +++ /dev/null @@ -1,77 +0,0 @@ a/apetag.c -+++ b/apetag.c -@@ -49,6 +49,12 @@ - - static int Lyrics3GetNumber6 ( const unsigned char* string ) - { -+ if (string[0] < '0' || string[0] > '9') return 0; -+ if (string[1] < '0' || string[1] > '9') return 0; -+ if (string[2] < '0' || string[2] > '9') return 0; -+ if (string[3] < '0' || string[3] > '9') return 0; -+ if (string[4] < '0' || string[4] > '9') return 0; -+ if (string[5] < '0' || string[5] > '9') return 0; - return ( string[0] - '0') * 10 + - ( string[1] - '0') * 1 + - ( string[2] - '0') * 1000 + -@@ -86,12 +92,14 @@ - free(*id3tagbuff); - *id3tagbuff = (unsigned char *)malloc(128); - memcpy(*id3tagbuff,tmpid3,128); -+ if ( *tag_offset < (128 + (long)(sizeof(T))) ) return 0; - if ( fseek (fp, *tag_offset - 128 - sizeof (T), SEEK_SET) ) return 0; - if ( fread (, 1, sizeof (T), fp) != sizeof (T) ) return 0; - // check for lyrics3 v2.00 tag - if ( memcmp (T.ID, "LYRICS200", sizeof (T.ID)) ) return 0; - len = Lyrics3GetNumber6 (T.Length); -- if ( fseek (fp, *tag_offset - 128 - (int)sizeof (T) - len, SEEK_SET) ) return 0; -+ if (*tag_offset < (128 + (long)(sizeof(T)) + len)) return 0; -+ if ( fseek (fp, *tag_offset - 128 - (long)sizeof (T) - len, SEEK_SET) ) return 0; - if ( fread (tmp, 1, 11, fp) != 11 ) return 0; - if ( memcmp (tmp, "LYRICSBEGIN", 11) ) return 0; - -@@ -167,6 +175,7 @@ - Ver = Read_LE_Uint32 (T.Version); - if ( (Ver != 1000) && (Ver != 2000) ) return 0; - if ( (TagLen = Read_LE_Uint32 (T.Length)) < sizeof (T) ) return 0; -+ if (*tag_offset < TagLen) return 0; - if ( fseek (fp, *tag_offset - TagLen, SEEK_SET) ) return 0; - buff = (char *)malloc (TagLen); - if ( fread (buff, 1, TagLen - sizeof (T), fp) != (TagLen - sizeof (T)) ) { -@@ -285,6 +294,7 @@ - (*apeTag)->originalTagSize = TagLen; - - if ( Read_LE_Uint32 (T.Flags) & (1<<31) ) { // Tag contains header -+ if (*tag_offset < (long)(sizeof(T))) return 0; - *tag_offset -= sizeof (T); - - fseek (fp, *tag_offset, SEEK_SET); -@@ -355,14 +365,14 @@ - */ - int ReadMP3GainAPETag (char *filename, struct MP3GainTagInfo *info, struct FileTagsStruct *fileTags) { - FILE *fi; --long tag_offset, offs_bk; -+long tag_offset, offs_bk, file_size; - - fi = fopen(filename, "rb"); - if (fi == NULL) - return 0; - - fseek(fi, 0, SEEK_END); --tag_offset = ftell(fi); -+tag_offset = file_size = ftell(fi); - - fileTags->lyrics3TagSize = 0; - -@@ -373,7 +383,11 @@ - ReadMP3ID3v1Tag ( fi, &(fileTags->id31tag), _offset ); - } while ( offs_bk != tag_offset ); - -- fileTags->tagOffset = tag_offset; -+ if (tag_offset >= 0 && tag_offset <= file_size) { -+ fileTags->tagOffset = tag_offset; -+ } else { //Corrupt tag information, simply default to end-of-file -+ fileTags->tagOffset = file_size; -+ } - - fclose(fi); - \ No newline at end of file diff --git a/media-sound/mp3gain/mp3gain-1.6.1.ebuild
[gentoo-commits] repo/gentoo:master commit in: media-sound/mp3gain/
commit: 256acb4ee25ac915ab25a3cf20e45f6910caa6ef Author: Agostino Sarubbo gentoo org> AuthorDate: Fri Aug 7 11:52:38 2020 + Commit: Agostino Sarubbo gentoo org> CommitDate: Fri Aug 7 11:52:38 2020 + URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=256acb4e media-sound/mp3gain: x86 stable wrt bug #717940 Package-Manager: Portage-2.3.99, Repoman-2.3.22 RepoMan-Options: --include-arches="x86" Signed-off-by: Agostino Sarubbo gentoo.org> media-sound/mp3gain/mp3gain-1.6.2.ebuild | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/media-sound/mp3gain/mp3gain-1.6.2.ebuild b/media-sound/mp3gain/mp3gain-1.6.2.ebuild index 4de02edd49c..032698c2c63 100644 --- a/media-sound/mp3gain/mp3gain-1.6.2.ebuild +++ b/media-sound/mp3gain/mp3gain-1.6.2.ebuild @@ -14,7 +14,7 @@ S="${WORKDIR}" LICENSE="LGPL-2.1" SLOT="0" -KEYWORDS="~alpha amd64 ~hppa ~ppc ~ppc64 sparc ~x86 ~amd64-linux ~x86-linux ~ppc-macos ~x86-macos" +KEYWORDS="~alpha amd64 ~hppa ~ppc ~ppc64 sparc x86 ~amd64-linux ~x86-linux ~ppc-macos ~x86-macos" BDEPEND="app-arch/unzip" RDEPEND="media-sound/mpg123"
[gentoo-commits] repo/gentoo:master commit in: media-sound/mp3gain/
commit: 0451eac63dc50478b9a0b29779bbb868b35cecf3 Author: Agostino Sarubbo gentoo org> AuthorDate: Fri Aug 7 11:43:02 2020 + Commit: Agostino Sarubbo gentoo org> CommitDate: Fri Aug 7 11:43:02 2020 + URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=0451eac6 media-sound/mp3gain: amd64 stable wrt bug #717940 Package-Manager: Portage-2.3.99, Repoman-2.3.22 RepoMan-Options: --include-arches="amd64" Signed-off-by: Agostino Sarubbo gentoo.org> media-sound/mp3gain/mp3gain-1.6.2.ebuild | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/media-sound/mp3gain/mp3gain-1.6.2.ebuild b/media-sound/mp3gain/mp3gain-1.6.2.ebuild index 2753c8f8d06..4de02edd49c 100644 --- a/media-sound/mp3gain/mp3gain-1.6.2.ebuild +++ b/media-sound/mp3gain/mp3gain-1.6.2.ebuild @@ -14,7 +14,7 @@ S="${WORKDIR}" LICENSE="LGPL-2.1" SLOT="0" -KEYWORDS="~alpha ~amd64 ~hppa ~ppc ~ppc64 sparc ~x86 ~amd64-linux ~x86-linux ~ppc-macos ~x86-macos" +KEYWORDS="~alpha amd64 ~hppa ~ppc ~ppc64 sparc ~x86 ~amd64-linux ~x86-linux ~ppc-macos ~x86-macos" BDEPEND="app-arch/unzip" RDEPEND="media-sound/mpg123"
[gentoo-commits] repo/gentoo:master commit in: media-sound/mp3gain/
commit: a9f937d95c4b4f33292bfc5b940a36a6bc520541 Author: Sam James gentoo org> AuthorDate: Wed Aug 5 23:47:00 2020 + Commit: Sam James gentoo org> CommitDate: Wed Aug 5 23:47:00 2020 + URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=a9f937d9 media-sound/mp3gain: Stabilize 1.6.2 sparc, #717940 Signed-off-by: Sam James gentoo.org> media-sound/mp3gain/mp3gain-1.6.2.ebuild | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/media-sound/mp3gain/mp3gain-1.6.2.ebuild b/media-sound/mp3gain/mp3gain-1.6.2.ebuild index 44bb5054568..2753c8f8d06 100644 --- a/media-sound/mp3gain/mp3gain-1.6.2.ebuild +++ b/media-sound/mp3gain/mp3gain-1.6.2.ebuild @@ -14,7 +14,7 @@ S="${WORKDIR}" LICENSE="LGPL-2.1" SLOT="0" -KEYWORDS="~alpha ~amd64 ~hppa ~ppc ~ppc64 ~sparc ~x86 ~amd64-linux ~x86-linux ~ppc-macos ~x86-macos" +KEYWORDS="~alpha ~amd64 ~hppa ~ppc ~ppc64 sparc ~x86 ~amd64-linux ~x86-linux ~ppc-macos ~x86-macos" BDEPEND="app-arch/unzip" RDEPEND="media-sound/mpg123"
[gentoo-commits] repo/gentoo:master commit in: media-sound/mp3gain/files/, media-sound/mp3gain/
commit: 36f8689f7903548f5d89827a6e7bdf70a9882cee Author: Sam James gentoo org> AuthorDate: Mon Aug 3 05:11:12 2020 + Commit: Sam James gentoo org> CommitDate: Mon Aug 3 05:12:45 2020 + URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=36f8689f media-sound/mp3gain: bump to 1.6.2 (+ CVE patch) Bump to 1.6.2, which includes an upstreamed patch for a previous CVE, and include openSUSE's patch for CVE-2019-18359 (and others). Bug: https://bugs.gentoo.org/717940 Package-Manager: Portage-3.0.1, Repoman-2.3.23 Signed-off-by: Sam James gentoo.org> media-sound/mp3gain/Manifest | 1 + .../files/mp3gain-1.6.2-CVE-2019-18359-plus.patch | 183 + media-sound/mp3gain/mp3gain-1.6.2.ebuild | 33 3 files changed, 217 insertions(+) diff --git a/media-sound/mp3gain/Manifest b/media-sound/mp3gain/Manifest index 796440a5be0..f6771ab442c 100644 --- a/media-sound/mp3gain/Manifest +++ b/media-sound/mp3gain/Manifest @@ -1 +1,2 @@ DIST mp3gain-1_6_1-src.zip 68932 BLAKE2B 8c1ed35123f1613e189ec7bd74ee9f6176404a1b79c660f8f1a6df461cdfd3c6bb505daa09b8cc4756e1755d0923fe473a45c3ae171fcf35df22daaa08a7717a SHA512 6d26a7716a1901c80caff9d7fb03a454a452c06c6a57a7a921d5979727e112ba139690d8a287dde7a6e5a09b022d3c6f57193b4756a9c25caa177cef65f9e375 +DIST mp3gain-1_6_2-src.zip 71246 BLAKE2B 5172c2103bb2267bf819f36180e9cd7a9d57df6f7ddc29900e9063f97c4513972053bb0c3f1f69f7ddd12ec0cf4251e93e1b6920389a8246bfdd5650176a90d2 SHA512 ec9de6c755120480ccb72b34a0042aea7546ef923090ab04e420d5b189523b4504e29952a3d695d3c42c74348f5c3c9123ff090bcc671e43375711e085d67480 diff --git a/media-sound/mp3gain/files/mp3gain-1.6.2-CVE-2019-18359-plus.patch b/media-sound/mp3gain/files/mp3gain-1.6.2-CVE-2019-18359-plus.patch new file mode 100644 index 000..5f05fc1bf27 --- /dev/null +++ b/media-sound/mp3gain/files/mp3gain-1.6.2-CVE-2019-18359-plus.patch @@ -0,0 +1,183 @@ +openSUSE patch: https://build.opensuse.org/package/view_file/openSUSE:Factory/mp3gain/0001-fix-security-bugs.patch?expand=1 +Gentoo bug: https://bugs.gentoo.org/717940 + +From: Jason Craig +Date: Mon, 30 Mar 2020 12:43:20 -0600 +Subject: [PATCH] Fix various security issues including CVE-2019-18359 +References: boo#1154971 +Upstream: dead + +Multiple POCs at https://github.com/zjuchenyuan/fuzzpoc were fixed. +--- a/apetag.c b/apetag.c +@@ -16,6 +16,13 @@ + #define _stricmp strcasecmp + #endif /* WIN32 */ + ++// Min and max values for gain and peak in order to fit in allotted space in the APE tags. For gain that is nine chars, ++// including a + or -. For peak that is eight chars, including a - but no +. Both will always have six precision digits. ++#define MIN_GAIN -9.99 ++#define MAX_GAIN 9.99 ++#define MIN_PEAK -9.9 ++#define MAX_PEAK 9.99 ++ + int ReadMP3ID3v1Tag(FILE *fi, unsigned char **tagbuff, long *tag_offset) { + char tmp[128]; + +@@ -102,9 +109,9 @@ static int ReadMP3Lyrics3v2Tag ( FILE *fp, unsigned char **tagbuff, unsigned lon + if ( fseek (fp, *tag_offset - 128 - (long)sizeof (T) - len, SEEK_SET) ) return 0; + if ( fread (tmp, 1, 11, fp) != 11 ) return 0; + if ( memcmp (tmp, "LYRICSBEGIN", 11) ) return 0; +- ++ + taglen = 128 + Lyrics3GetNumber6(T.Length) + sizeof(T); +- ++ + *tag_offset -= taglen; + if (*tagbuff != NULL) { + free(*tagbuff); +@@ -142,7 +149,7 @@ enum { + + unsigned long strlen_max(const char * ptr, unsigned long max) { + unsigned long n = 0; +- while (ptr[n] && n < max) n++; ++ while (n < max && ptr[n]) n++; + return n; + } + +@@ -234,6 +241,14 @@ int ReadMP3APETag ( FILE *fp, struct MP3GainTagInfo *info, struct APETagStruct + info->albumPeak = atof(value); + } else if (!_stricmp(name,"MP3GAIN_UNDO")) { + /* value should be something like "+003,+003,W" */ ++ /* If the file didn't specify enough bytes for the value (at least 11...see above), skip the tag. */ ++ if(vsize < 11) ++ { ++ free(value); ++ free(name); ++ p += isize + 1 + vsize; ++ continue; ++ } + info->haveUndo = !0; + vp = value; + memcpy(tmpString,vp,4); +@@ -251,6 +266,14 @@ int ReadMP3APETag ( FILE *fp, struct MP3GainTagInfo *info, struct APETagStruct + } + } else if (!_stricmp(name,"MP3GAIN_MINMAX")) { + /* value should be something like "001,153" */ ++ /* If the file didn't specify enough bytes for the value (at least 7...see above), skip the tag. */ ++ if(vsize < 7) ++
[gentoo-commits] repo/gentoo:master commit in: media-sound/mp3gain/
commit: 9bcede0bcab7d70844542a84c9ad76bfacd7cd6a Author: Rolf Eike Beer sf-mail de> AuthorDate: Sun Apr 12 10:31:04 2020 + Commit: Sergei Trofimovich gentoo org> CommitDate: Sun Apr 12 11:02:40 2020 + URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=9bcede0b media-sound/mp3gain: drop to ~hppa Package-Manager: Portage-2.3.89, Repoman-2.3.20 RepoMan-Options: --include-arches="hppa" Signed-off-by: Rolf Eike Beer sf-mail.de> Signed-off-by: Sergei Trofimovich gentoo.org> media-sound/mp3gain/mp3gain-1.6.1.ebuild | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/media-sound/mp3gain/mp3gain-1.6.1.ebuild b/media-sound/mp3gain/mp3gain-1.6.1.ebuild index 2882bf05221..11c40690473 100644 --- a/media-sound/mp3gain/mp3gain-1.6.1.ebuild +++ b/media-sound/mp3gain/mp3gain-1.6.1.ebuild @@ -12,7 +12,7 @@ SRC_URI="mirror://sourceforge/${PN}/${MY_P}-src.zip" LICENSE="LGPL-2.1" SLOT="0" -KEYWORDS="~alpha amd64 hppa ~ppc ~ppc64 sparc x86 ~amd64-linux ~x86-linux ~ppc-macos ~x86-macos" +KEYWORDS="~alpha amd64 ~hppa ~ppc ~ppc64 sparc x86 ~amd64-linux ~x86-linux ~ppc-macos ~x86-macos" IUSE="" RDEPEND="
[gentoo-commits] repo/gentoo:master commit in: media-sound/mp3gain/
commit: c1fd2a3efff669160051b646a1bd48c419be2fdd Author: Rolf Eike Beer sf-mail de> AuthorDate: Tue May 8 18:20:17 2018 + Commit: Sergei Trofimovich gentoo org> CommitDate: Tue May 8 18:42:40 2018 + URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=c1fd2a3e media-sound/mp3gain: stable 1.6.1 for sparc Bug: https://bugs.gentoo.org/635548 Package-Manager: Portage-2.3.24, Repoman-2.3.6 RepoMan-Options: --include-arches="sparc" media-sound/mp3gain/mp3gain-1.6.1.ebuild | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/media-sound/mp3gain/mp3gain-1.6.1.ebuild b/media-sound/mp3gain/mp3gain-1.6.1.ebuild index 8999596cf53..ac0cf8381c3 100644 --- a/media-sound/mp3gain/mp3gain-1.6.1.ebuild +++ b/media-sound/mp3gain/mp3gain-1.6.1.ebuild @@ -12,7 +12,7 @@ SRC_URI="mirror://sourceforge/${PN}/${MY_P}-src.zip" LICENSE="LGPL-2.1" SLOT="0" -KEYWORDS="alpha amd64 hppa ~ppc ~ppc64 ~sparc x86 ~amd64-linux ~x86-linux ~ppc-macos ~x86-macos" +KEYWORDS="alpha amd64 hppa ~ppc ~ppc64 sparc x86 ~amd64-linux ~x86-linux ~ppc-macos ~x86-macos" IUSE="" RDEPEND="
[gentoo-commits] repo/gentoo:master commit in: media-sound/mp3gain/
commit: 55b974d195ec90dbe2dc612406252dee1331bfdf Author: Matt Turner gentoo org> AuthorDate: Sun Apr 22 20:28:46 2018 + Commit: Matt Turner gentoo org> CommitDate: Sun Apr 22 20:28:46 2018 + URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=55b974d1 media-sound/mp3gain-1.6.1: alpha stable, bug 635548 media-sound/mp3gain/mp3gain-1.6.1.ebuild | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/media-sound/mp3gain/mp3gain-1.6.1.ebuild b/media-sound/mp3gain/mp3gain-1.6.1.ebuild index 70ec77c26f2..8999596cf53 100644 --- a/media-sound/mp3gain/mp3gain-1.6.1.ebuild +++ b/media-sound/mp3gain/mp3gain-1.6.1.ebuild @@ -12,7 +12,7 @@ SRC_URI="mirror://sourceforge/${PN}/${MY_P}-src.zip" LICENSE="LGPL-2.1" SLOT="0" -KEYWORDS="~alpha amd64 hppa ~ppc ~ppc64 ~sparc x86 ~amd64-linux ~x86-linux ~ppc-macos ~x86-macos" +KEYWORDS="alpha amd64 hppa ~ppc ~ppc64 ~sparc x86 ~amd64-linux ~x86-linux ~ppc-macos ~x86-macos" IUSE="" RDEPEND="
[gentoo-commits] repo/gentoo:master commit in: media-sound/mp3gain/
commit: 9b3f92bef02d8c3063b970130f7e533c2736d83d Author: Matt Turner gentoo org> AuthorDate: Sun Apr 22 19:08:12 2018 + Commit: Matt Turner gentoo org> CommitDate: Sun Apr 22 19:17:54 2018 + URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=9b3f92be media-sound/mp3gain-1.6.1: hppa stable, bug 635548 media-sound/mp3gain/mp3gain-1.6.1.ebuild | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/media-sound/mp3gain/mp3gain-1.6.1.ebuild b/media-sound/mp3gain/mp3gain-1.6.1.ebuild index 87dce052e2a..70ec77c26f2 100644 --- a/media-sound/mp3gain/mp3gain-1.6.1.ebuild +++ b/media-sound/mp3gain/mp3gain-1.6.1.ebuild @@ -12,7 +12,7 @@ SRC_URI="mirror://sourceforge/${PN}/${MY_P}-src.zip" LICENSE="LGPL-2.1" SLOT="0" -KEYWORDS="~alpha amd64 ~hppa ~ppc ~ppc64 ~sparc x86 ~amd64-linux ~x86-linux ~ppc-macos ~x86-macos" +KEYWORDS="~alpha amd64 hppa ~ppc ~ppc64 ~sparc x86 ~amd64-linux ~x86-linux ~ppc-macos ~x86-macos" IUSE="" RDEPEND="
[gentoo-commits] repo/gentoo:master commit in: media-sound/mp3gain/
commit: 5ae45e0db27dedf7054e417e7c75350ecaacfc17 Author: Thomas Deutschmann gentoo org> AuthorDate: Sun Apr 22 01:32:17 2018 + Commit: Thomas Deutschmann gentoo org> CommitDate: Sun Apr 22 01:35:20 2018 + URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=5ae45e0d media-sound/mp3gain: x86 stable (bug #635548) Package-Manager: Portage-2.3.31, Repoman-2.3.9 media-sound/mp3gain/mp3gain-1.6.1.ebuild | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/media-sound/mp3gain/mp3gain-1.6.1.ebuild b/media-sound/mp3gain/mp3gain-1.6.1.ebuild index 80d456f597e..87dce052e2a 100644 --- a/media-sound/mp3gain/mp3gain-1.6.1.ebuild +++ b/media-sound/mp3gain/mp3gain-1.6.1.ebuild @@ -12,7 +12,7 @@ SRC_URI="mirror://sourceforge/${PN}/${MY_P}-src.zip" LICENSE="LGPL-2.1" SLOT="0" -KEYWORDS="~alpha amd64 ~hppa ~ppc ~ppc64 ~sparc ~x86 ~amd64-linux ~x86-linux ~ppc-macos ~x86-macos" +KEYWORDS="~alpha amd64 ~hppa ~ppc ~ppc64 ~sparc x86 ~amd64-linux ~x86-linux ~ppc-macos ~x86-macos" IUSE="" RDEPEND="
[gentoo-commits] repo/gentoo:master commit in: media-sound/mp3gain/
commit: 5162ff386be42cbfaadbb0bfa40aa41308c5b4ae Author: Aaron Bauman gentoo org> AuthorDate: Sat Apr 21 23:18:27 2018 + Commit: Aaron Bauman gentoo org> CommitDate: Sat Apr 21 23:18:27 2018 + URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=5162ff38 media-sound/mp3gain: amd64 stable wrt bug #635548 Bug: https://bugs.gentoo.org/635548 Package-Manager: Portage-2.3.31, Repoman-2.3.9 media-sound/mp3gain/mp3gain-1.6.1.ebuild | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/media-sound/mp3gain/mp3gain-1.6.1.ebuild b/media-sound/mp3gain/mp3gain-1.6.1.ebuild index 81548cbb0e1..80d456f597e 100644 --- a/media-sound/mp3gain/mp3gain-1.6.1.ebuild +++ b/media-sound/mp3gain/mp3gain-1.6.1.ebuild @@ -12,7 +12,7 @@ SRC_URI="mirror://sourceforge/${PN}/${MY_P}-src.zip" LICENSE="LGPL-2.1" SLOT="0" -KEYWORDS="~alpha ~amd64 ~hppa ~ppc ~ppc64 ~sparc ~x86 ~amd64-linux ~x86-linux ~ppc-macos ~x86-macos" +KEYWORDS="~alpha amd64 ~hppa ~ppc ~ppc64 ~sparc ~x86 ~amd64-linux ~x86-linux ~ppc-macos ~x86-macos" IUSE="" RDEPEND="
[gentoo-commits] repo/gentoo:master commit in: media-sound/mp3gain/, media-sound/mp3gain/files/
commit: d3251f82484c3f9b488a3f1fa1d87f9e0172cdbd Author: Pacho Ramos gentoo org> AuthorDate: Sat Apr 21 14:34:19 2018 + Commit: Pacho Ramos gentoo org> CommitDate: Sat Apr 21 14:37:51 2018 + URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=d3251f82 media-sound/mp3gain: Bump (#630954), fix CVE-2017-12911 (#635548) Package-Manager: Portage-2.3.28, Repoman-2.3.9 media-sound/mp3gain/Manifest | 1 + .../files/mp3gain-1.6.1-CVE-2017-12911.patch | 77 ++ media-sound/mp3gain/mp3gain-1.6.1.ebuild | 34 ++ 3 files changed, 112 insertions(+) diff --git a/media-sound/mp3gain/Manifest b/media-sound/mp3gain/Manifest index e9eedc0a445..8dadde8a3c5 100644 --- a/media-sound/mp3gain/Manifest +++ b/media-sound/mp3gain/Manifest @@ -1 +1,2 @@ DIST mp3gain-1_5_2-src.zip 129435 BLAKE2B 39ad12a09e58375c23602939097622fda0cb6b7487e95947d5443fce55f4d2163c15df619f96b1839acf99bba9ed8ad1990bab287e1392c30813d185d823d734 SHA512 1a7ac51bf0108c1f6fbd610c513bf7fd2c64d340a2ba23dc9fa5c3b896b279474f31f2d60318f409576e39f7643dd585d3e159e2a4db4553f7c9cc3761b7f388 +DIST mp3gain-1_6_1-src.zip 68932 BLAKE2B 8c1ed35123f1613e189ec7bd74ee9f6176404a1b79c660f8f1a6df461cdfd3c6bb505daa09b8cc4756e1755d0923fe473a45c3ae171fcf35df22daaa08a7717a SHA512 6d26a7716a1901c80caff9d7fb03a454a452c06c6a57a7a921d5979727e112ba139690d8a287dde7a6e5a09b022d3c6f57193b4756a9c25caa177cef65f9e375 diff --git a/media-sound/mp3gain/files/mp3gain-1.6.1-CVE-2017-12911.patch b/media-sound/mp3gain/files/mp3gain-1.6.1-CVE-2017-12911.patch new file mode 100644 index 000..0b5a3228096 --- /dev/null +++ b/media-sound/mp3gain/files/mp3gain-1.6.1-CVE-2017-12911.patch @@ -0,0 +1,77 @@ +--- a/apetag.c b/apetag.c +@@ -49,6 +49,12 @@ + + static int Lyrics3GetNumber6 ( const unsigned char* string ) + { ++ if (string[0] < '0' || string[0] > '9') return 0; ++ if (string[1] < '0' || string[1] > '9') return 0; ++ if (string[2] < '0' || string[2] > '9') return 0; ++ if (string[3] < '0' || string[3] > '9') return 0; ++ if (string[4] < '0' || string[4] > '9') return 0; ++ if (string[5] < '0' || string[5] > '9') return 0; + return ( string[0] - '0') * 10 + + ( string[1] - '0') * 1 + + ( string[2] - '0') * 1000 + +@@ -86,12 +92,14 @@ + free(*id3tagbuff); + *id3tagbuff = (unsigned char *)malloc(128); + memcpy(*id3tagbuff,tmpid3,128); ++ if ( *tag_offset < (128 + (long)(sizeof(T))) ) return 0; + if ( fseek (fp, *tag_offset - 128 - sizeof (T), SEEK_SET) ) return 0; + if ( fread (, 1, sizeof (T), fp) != sizeof (T) ) return 0; + // check for lyrics3 v2.00 tag + if ( memcmp (T.ID, "LYRICS200", sizeof (T.ID)) ) return 0; + len = Lyrics3GetNumber6 (T.Length); +- if ( fseek (fp, *tag_offset - 128 - (int)sizeof (T) - len, SEEK_SET) ) return 0; ++ if (*tag_offset < (128 + (long)(sizeof(T)) + len)) return 0; ++ if ( fseek (fp, *tag_offset - 128 - (long)sizeof (T) - len, SEEK_SET) ) return 0; + if ( fread (tmp, 1, 11, fp) != 11 ) return 0; + if ( memcmp (tmp, "LYRICSBEGIN", 11) ) return 0; + +@@ -167,6 +175,7 @@ + Ver = Read_LE_Uint32 (T.Version); + if ( (Ver != 1000) && (Ver != 2000) ) return 0; + if ( (TagLen = Read_LE_Uint32 (T.Length)) < sizeof (T) ) return 0; ++ if (*tag_offset < TagLen) return 0; + if ( fseek (fp, *tag_offset - TagLen, SEEK_SET) ) return 0; + buff = (char *)malloc (TagLen); + if ( fread (buff, 1, TagLen - sizeof (T), fp) != (TagLen - sizeof (T)) ) { +@@ -285,6 +294,7 @@ + (*apeTag)->originalTagSize = TagLen; + + if ( Read_LE_Uint32 (T.Flags) & (1<<31) ) { // Tag contains header ++ if (*tag_offset < (long)(sizeof(T))) return 0; + *tag_offset -= sizeof (T); + + fseek (fp, *tag_offset, SEEK_SET); +@@ -355,14 +365,14 @@ + */ + int ReadMP3GainAPETag (char *filename, struct MP3GainTagInfo *info, struct FileTagsStruct *fileTags) { + FILE *fi; +-long tag_offset, offs_bk; ++long tag_offset, offs_bk, file_size; + + fi = fopen(filename, "rb"); + if (fi == NULL) + return 0; + + fseek(fi, 0, SEEK_END); +-tag_offset = ftell(fi); ++tag_offset = file_size = ftell(fi); + + fileTags->lyrics3TagSize = 0; + +@@ -373,7 +383,11 @@ + ReadMP3ID3v1Tag ( fi, &(fileTags->id31tag), _offset ); + } while ( offs_bk != tag_offset ); + +- fileTags->tagOffset = tag_offset; ++ if (tag_offset >= 0 && tag_offset <= file_size) { ++ fileTags->tagOffset = tag_offset; ++ } else { //Corrupt tag information, simply default to end-of-file ++ fileTags->tagOffset = file_size; ++ } + + fclose(fi); + \ No newline at end of file diff --git a/media-sound/mp3gain/mp3gain-1.6.1.ebuild b/media-sound/mp3gain/mp3gain-1.6.1.ebuild new file
[gentoo-commits] repo/gentoo:master commit in: media-sound/mp3gain/
commit: d94a51a89beac55b46ef9c4ebd7de6cd7feba72a Author: Pacho Ramos gentoo org> AuthorDate: Sat Apr 21 14:37:24 2018 + Commit: Pacho Ramos gentoo org> CommitDate: Sat Apr 21 14:37:52 2018 + URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=d94a51a8 media-sound/mp3gain: Drop old and vulnerable version Package-Manager: Portage-2.3.28, Repoman-2.3.9 media-sound/mp3gain/Manifest | 1 - media-sound/mp3gain/mp3gain-1.5.2.ebuild | 36 2 files changed, 37 deletions(-) diff --git a/media-sound/mp3gain/Manifest b/media-sound/mp3gain/Manifest index 8dadde8a3c5..796440a5be0 100644 --- a/media-sound/mp3gain/Manifest +++ b/media-sound/mp3gain/Manifest @@ -1,2 +1 @@ -DIST mp3gain-1_5_2-src.zip 129435 BLAKE2B 39ad12a09e58375c23602939097622fda0cb6b7487e95947d5443fce55f4d2163c15df619f96b1839acf99bba9ed8ad1990bab287e1392c30813d185d823d734 SHA512 1a7ac51bf0108c1f6fbd610c513bf7fd2c64d340a2ba23dc9fa5c3b896b279474f31f2d60318f409576e39f7643dd585d3e159e2a4db4553f7c9cc3761b7f388 DIST mp3gain-1_6_1-src.zip 68932 BLAKE2B 8c1ed35123f1613e189ec7bd74ee9f6176404a1b79c660f8f1a6df461cdfd3c6bb505daa09b8cc4756e1755d0923fe473a45c3ae171fcf35df22daaa08a7717a SHA512 6d26a7716a1901c80caff9d7fb03a454a452c06c6a57a7a921d5979727e112ba139690d8a287dde7a6e5a09b022d3c6f57193b4756a9c25caa177cef65f9e375 diff --git a/media-sound/mp3gain/mp3gain-1.5.2.ebuild b/media-sound/mp3gain/mp3gain-1.5.2.ebuild deleted file mode 100644 index f97e02d40f5..000 --- a/media-sound/mp3gain/mp3gain-1.5.2.ebuild +++ /dev/null @@ -1,36 +0,0 @@ -# Copyright 1999-2015 Gentoo Foundation -# Distributed under the terms of the GNU General Public License v2 - -EAPI=2 -inherit toolchain-funcs - -MY_P=${P//./_} - -DESCRIPTION="A program to analyze and adjust MP3 files to same volume" -HOMEPAGE="http://mp3gain.sourceforge.net/; -SRC_URI="mirror://sourceforge/${PN}/${MY_P}-src.zip" - -LICENSE="LGPL-2.1" -SLOT="0" -KEYWORDS="alpha amd64 hppa ppc ppc64 sparc x86 ~amd64-linux ~x86-linux ~ppc-macos ~x86-macos" -IUSE="" - -RDEPEND="" -DEPEND="app-arch/unzip" - -S=${WORKDIR} - -src_prepare() { - sed -i \ - -e 's:CFLAGS= -Wall -O2:CFLAGS+= -Wall:' \ - -e 's:$(CC) -o:$(CC) $(LDFLAGS) -o:' \ - Makefile || die -} - -src_compile() { - emake CC="$(tc-getCC)" || die -} - -src_install() { - dobin mp3gain || die -}
[gentoo-commits] repo/gentoo:master commit in: media-sound/mp3gain/
commit: edc6bfb7d0fac4c2cd72aca3df21ae8766f05686 Author: Manuel Rüger mrueg AT gentoo DOT org AuthorDate: Fri Aug 28 01:03:15 2015 + Commit: Manuel Rüger mrueg AT gentoo DOT org CommitDate: Fri Aug 28 01:03:15 2015 + URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=edc6bfb7 media-sound/mp3gain: Remove old Package-Manager: portage-2.2.20.1 media-sound/mp3gain/Manifest| 1 - media-sound/mp3gain/mp3gain-1.4.6-r3.ebuild | 38 - 2 files changed, 39 deletions(-) diff --git a/media-sound/mp3gain/Manifest b/media-sound/mp3gain/Manifest index fbe3300..ddb2810 100644 --- a/media-sound/mp3gain/Manifest +++ b/media-sound/mp3gain/Manifest @@ -1,2 +1 @@ -DIST mp3gain-1_4_6-src.zip 111408 SHA256 e1ad9aeb18403cf9ea54af830e1371523d6d5373bfef01a8964e3735deaf7d4f DIST mp3gain-1_5_2-src.zip 129435 SHA256 dbadc7a41a8a3b87d3a21a1989701cfe72d2090c3ead02b0b396a19a8acf6fca SHA512 1a7ac51bf0108c1f6fbd610c513bf7fd2c64d340a2ba23dc9fa5c3b896b279474f31f2d60318f409576e39f7643dd585d3e159e2a4db4553f7c9cc3761b7f388 WHIRLPOOL 4a0584c52090100e9f9fe2c53ac6614965976f1ada9134212734966199a6c116ce2e304ed54ec240c489c293928daf664f109d003d29c5c79c1e3b4a6ee08403 diff --git a/media-sound/mp3gain/mp3gain-1.4.6-r3.ebuild b/media-sound/mp3gain/mp3gain-1.4.6-r3.ebuild deleted file mode 100644 index 5c29def..000 --- a/media-sound/mp3gain/mp3gain-1.4.6-r3.ebuild +++ /dev/null @@ -1,38 +0,0 @@ -# Copyright 1999-2010 Gentoo Foundation -# Distributed under the terms of the GNU General Public License v2 -# $Id$ - -inherit eutils flag-o-matic toolchain-funcs - -IUSE= - -MY_P=${P//./_} -S=${WORKDIR} - -DESCRIPTION=MP3Gain automatically adjusts mp3s so that they all have the same volume -HOMEPAGE=http://mp3gain.sourceforge.net; -SRC_URI=mirror://sourceforge/${PN}/${MY_P}-src.zip - -SLOT=0 -LICENSE=LGPL-2.1 -KEYWORDS=alpha amd64 hppa ppc ppc64 sparc x86 ~amd64-linux ~x86-linux ~ppc-macos ~x86-macos - -DEPEND=app-arch/unzip -RDEPEND= - -src_unpack() { - unpack ${A} - cd ${S} - - filter-flags -O* - sed -i -e s:CC=.*:CC=$(tc-getCC): \ - -e s:CFLAGS= -Wall -O3 -DHAVE_MEMCPY:CFLAGS+= -Wall -DHAVE_MEMCPY: \ - -e s:LIBS=.*:LIBS= ${LDFLAGS} -lm: \ - ${S}/Makefile \ - || die Unable to adjust build system compiler/flags. - epatch ${FILESDIR}/${PV}-option-parser.patch -} - -src_install () { - dobin mp3gain -}