Projects
Essentials
faad2
Sign Up
Log In
Username
Password
Overview
Repositories
Revisions
Requests
Users
Attributes
Meta
Expand all
Collapse all
Changes of Revision 27
View file
faad2.changes
Changed
@@ -1,4 +1,10 @@ ------------------------------------------------------------------- +Tue Aug 25 18:59:46 UTC 2020 - Bjørn Lie <zaitor@opensuse.org> + +- Add faad2-fix-stack-overflow.patch: mp4read.c: fix + stack-buffer-overflow in stringin()/ftypin(). + +------------------------------------------------------------------- Thu Jun 4 14:02:05 UTC 2020 - aloisio@gmx.com - Buildrequire pkgconfig to make sure faad2.pc is properly indexed.
View file
faad2.spec
Changed
@@ -37,6 +37,7 @@ Source0: https://github.com/knik0/faad2/archive/%{_version}/%{name}-%{version}.tar.gz Patch0: %{name}-visibility.patch Patch1: faad2-PACKAGE_VERSION.patch +Patch2: faad2-fix-stack-overflow.patch BuildRequires: libtool BuildRequires: pkgconfig Requires: %{libname} = %{version}
View file
faad2-fix-stack-overflow.patch
Added
@@ -0,0 +1,24 @@ +From 1073aeef823cafd844704389e9a497c257768e2f Mon Sep 17 00:00:00 2001 +From: Fabian Greffrath <fabian@greffrath.com> +Date: Mon, 17 Aug 2020 07:37:09 +0200 +Subject: [PATCH] mp4read.c: fix stack-buffer-overflow in stringin()/ftypin() + +Terminate the string read into the stack buffer, +fixes #56. +--- + frontend/mp4read.c | 1 + + 1 file changed, 1 insertion(+) + +diff --git a/frontend/mp4read.c b/frontend/mp4read.c +index 1b24f18..1414684 100644 +--- a/frontend/mp4read.c ++++ b/frontend/mp4read.c +@@ -95,6 +95,7 @@ static int stringin(char *txt, int sizemax) + if (!txt[size]) + break; + } ++ txt[sizemax-1] = '\0'; + + return size; + } +
Locations
Projects
Search
Status Monitor
Help
Open Build Service
OBS Manuals
API Documentation
OBS Portal
Reporting a Bug
Contact
Mailing List
Forums
Chat (IRC)
Twitter
Open Build Service (OBS)
is an
openSUSE project
.