2017-11-04 21:43 GMT+01:00 Jaromír Mikeš <mira.mi...@gmail.com>:

>
>
> 2017-11-04 21:10 GMT+01:00 Måns Rullgård <m...@mansr.com>:
>
>> Eric Wong <normalper...@yhbt.net> writes:
>>
>> > Jaromír Mikeš <mira.mi...@gmail.com> wrote:
>> >> Please let me know if you can provide patches for these fixes
>> >> or make new release to fix these issues.
>> >
>> > Thanks for the email.  I guess neither Mans or I pay attention
>> > to the bugtrackers :x, and the original developers are busy.
>> > (and I don't like web-based UIs)
>> >
>> > Anyways, I'll try to take a look at the CVEs this weekend or next
>> > week, at latest.
>>
>> I started looking at them today.  At least some of them seem easy to
>> fix.
>>
>
> ​Thank you Eric and Mans for quick answer ... let me informed please about
> progress.
> Good to hear ​that at least some CVE are not difficult
>

​While I am playing a little bit with sox package debian spell checking
tool find some spelling errors in sox source code.
You might be interested apply attached patch upstream.
Hope attachments are allowed in mailing list

best regards

mira
Index: sox/ChangeLog
===================================================================
--- sox.orig/ChangeLog
+++ sox/ChangeLog
@@ -916,7 +916,7 @@ sox-12.18.1	2006-05-07
 
   o The "filter" effect could go into infinite drain mode.  Now
     only drain 1 buffer.  noisered as well.
-  o SoX was ignoring user aborts (ctrl-c) if it occured during
+  o SoX was ignoring user aborts (ctrl-c) if it occurred during
     effect drain operations.  This was bad if effects had
     bugs and stuck in infinite loop.
   o Stop SoX from crashing when file type could not be auto
Index: sox/libsox.3
===================================================================
--- sox.orig/libsox.3
+++ sox/libsox.3
@@ -175,7 +175,7 @@ failures. Currently, relies on \fBsox_wa
 successfully read or written. If an error occurs, or the end-of-file
 is reached, the return value is a short item count or SOX_EOF. TODO:
 \fBsox_read\fR does not distiguish between end-of-file and error. Need
-an feof() and ferror() concept to determine which occured.
+an feof() and ferror() concept to determine which occurred.
 .P
 Upon successful completion \fBsox_close\fR returns 0. Otherwise, SOX_EOF
 is returned. In either case, any further access (including another
Index: sox/libsox.txt
===================================================================
--- sox.orig/libsox.txt
+++ sox/libsox.txt
@@ -148,7 +148,7 @@ RETURN VALUE
        or  written.  If  an  error  occurs, or the end-of-file is reached, the
        return value is a short item count or SOX_EOF. TODO: sox_read does  not
        distiguish  between  end-of-file and error. Need an feof() and ferror()
-       concept to determine which occured.
+       concept to determine which occurred.
 
        Upon successful completion sox_close returns 0. Otherwise,  SOX_EOF  is
        returned. In either case, any further access (including another call to
Index: sox/src/sox.c
===================================================================
--- sox.orig/src/sox.c
+++ sox/src/sox.c
@@ -1960,7 +1960,7 @@ static void usage(char const * message)
 "FORMAT OPTIONS (fopts):",
 "Input file format options need only be supplied for files that are headerless.",
 "Output files will have the same format as the input file where possible and not",
-"overriden by any of various means including providing output format options.",
+"overridden by any of various means including providing output format options.",
 "",
 "-v|--volume FACTOR       Input file volume adjustment factor (real number)",
 "--ignore-length          Ignore input file length given in header; read to EOF",
Index: sox/sox.1
===================================================================
--- sox.orig/sox.1
+++ sox/sox.1
@@ -880,7 +880,7 @@ If the \fB\-\-multi\-threaded\fR option
 will process audio channels for most multi-channel
 effects in parallel on hyper-threading/multi-core architectures. This
 may reduce processing time, though sometimes it may be necessary to use
-this option in conjuction with a larger buffer size than is the default
+this option in conjunction with a larger buffer size than is the default
 to gain any benefit from multi-threaded processing
 (e.g. 131072; see \fB\-\-buffer\fR above).
 .TP
@@ -3133,7 +3133,7 @@ effect (above):
 .EX
    rate 2k spectrogram \-X 200 \-Z \-10 \-w kaiser
 .EE
-Options are also avaliable to control the appearance (colour-set,
+Options are also available to control the appearance (colour-set,
 brightness, contrast, etc.) and filename of the spectrogram; e.g. with
 .EX
    sox my.wav \-n spectrogram \-m \-l \-o print.png
Index: sox/sox.txt
===================================================================
--- sox.orig/sox.txt
+++ sox/sox.txt
@@ -681,7 +681,7 @@ OPTIONS
               option is given however then SoX will process audio channels for
               most multi-channel effects in parallel on hyper-threading/multi-
               core  architectures.  This  may  reduce  processing time, though
-              sometimes it may be necessary to use this option  in  conjuction
+              sometimes it may be necessary to use this option  in conjunction
               with  a larger buffer size than is the default to gain any bene‐
               fit from multi-threaded processing (e.g.  131072;  see  --buffer
               above).
@@ -2366,7 +2366,7 @@ EFFECTS
               lar example, append the following to the `chime' command in  the
               description of the delay effect (above):
                  rate 2k spectrogram -X 200 -Z -10 -w kaiser
-              Options  are  also  avaliable to control the appearance (colour-
+              Options  are  also  available to control the appearance (colour-
               set, brightness, contrast, etc.) and filename  of  the  spectro‐
               gram; e.g. with
                  sox my.wav -n spectrogram -m -l -o print.png
Index: sox/src/fap.c
===================================================================
--- sox.orig/src/fap.c
+++ sox/src/fap.c
@@ -26,7 +26,7 @@ LSX_FORMAT_HANDLER(fap)
   static sox_format_handler_t handler;
   handler = *lsx_sndfile_format_fn();
   handler.description =
-    "Ensoniq PARIS digitial audio editing system (little endian)";
+    "Ensoniq PARIS digital audio editing system (little endian)";
   handler.names = names;
   handler.write_formats = write_encodings;
   return &handler;
Index: sox/src/paf.c
===================================================================
--- sox.orig/src/paf.c
+++ sox/src/paf.c
@@ -26,7 +26,7 @@ LSX_FORMAT_HANDLER(paf)
   static sox_format_handler_t handler;
   handler = *lsx_sndfile_format_fn();
   handler.description =
-    "Ensoniq PARIS digitial audio editing system (big endian)";
+    "Ensoniq PARIS digital audio editing system (big endian)";
   handler.names = names;
   handler.write_formats = write_encodings;
   return &handler;
Index: sox/src/oss.c
===================================================================
--- sox.orig/src/oss.c
+++ sox/src/oss.c
@@ -230,7 +230,7 @@ LSX_FORMAT_HANDLER(oss)
     SOX_ENCODING_UNSIGNED, 8, 0,
     0};
   static sox_format_handler_t const handler = {SOX_LIB_VERSION_CODE,
-    "Open Sound Sytem device driver for unix-like systems",
+    "Open Sound System device driver for unix-like systems",
     names, SOX_FILE_DEVICE,
     ossinit, lsx_rawread, lsx_rawstopread,
     ossinit, lsx_rawwrite, lsx_rawstopwrite,
------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
SoX-devel mailing list
SoX-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/sox-devel

Reply via email to