-DIST soundtouch-2.0.0.tar.gz 455148 BLAKE2B e38358b0b773edc03a1b227222418d1e79a97f7a1c7abd22f2cb96bb2a7e3427802214775c908329eeec87710b4d199fba819ad7b99f3d58071749cf372991a1 SHA512 c916bdd2cb3d7547f264b1caf09b739b48a161c8c6288c3893fc97379546ed6b41dafaf603b583fbf64ae91270fdeb90811e5b0df0e9c051dc9f6ddca4d319f9
-DIST soundtouch-2.1.1.tar.bz2 526206 BLAKE2B bc5d2edef5ae7d297cd017968fb1206d14306c117a847ba34090dcd284a174edcc8f4694be4a98fee7a7d100e7a912e81c2e14a998a22ab2c50eb0d27ca823f7 SHA512 9272141e5c1a4def7356add524d861f2c78eb9574ebca2bab3a57190821fb1eb5c85624aa7b31d90ada38a5165bafd8445f6fdd51e2b3a262ca9a2f2db35a9aa
DIST soundtouch-2.1.2.tar.bz2 526281 BLAKE2B f15f004fd6abdf4cd6fdb842c650480c670a517c6d94365633a7cc4beb95447d7a8bee965d4b258da6c31630e370e3c1c1fc73abfe8568ace465ce41a87397cf SHA512 d45cb0f94e3df32e9c76722a148f201277b2ddc3e390394c1f4ae1263f13557c6b664e90301b5f62d7561d743ab4903a44a34ab7248880b343d581cebd5f0cd9
+++ /dev/null
-Description: Fix CVE-2017-9258, CVE-2017-9259, CVE-2017-9260\r
- Based on an upstream commit, original commit message was: "Added sanity\r
- checks against illegal input audio stream parameters e.g. wildly excessive\r
- samplerate".\r
- . \r
- There is no reference to CVEs or bugs, the commit was made after disclosure\r
- of the CVEs and all three proofs of concept (crafted wav files) fail after\r
- this commit.\r
- . \r
- The commit was made after version 2.0.0, so that version is also vulnerable.\r
- .\r
- Unrelated changes were stripped away by patch author, upstream commit author\r
- is Olli Parviainen <oparviai@iki.fi>.\r
-Author: Gabor Karsay <gabor.karsay@gmx.at>\r
-Origin: upstream, https://sourceforge.net/p/soundtouch/code/256/\r
-Bug-Debian: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=870854\r
-Bug-Debian: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=870856\r
-Bug-Debian: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=870857\r
----\r
-This patch header follows DEP-3: http://dep.debian.net/deps/dep3/\r
---- a/source/SoundTouch/TDStretch.cpp
-+++ b/source/SoundTouch/TDStretch.cpp
-@@ -128,7 +128,12 @@
- int aSeekWindowMS, int aOverlapMS)\r
- {\r
- // accept only positive parameter values - if zero or negative, use old values instead\r
-- if (aSampleRate > 0) this->sampleRate = aSampleRate;\r
-+ if (aSampleRate > 0)\r
-+ {\r
-+ if (aSampleRate > 192000) ST_THROW_RT_ERROR("Error: Excessive samplerate");\r
-+ this->sampleRate = aSampleRate;\r
-+ }\r
-+\r
- if (aOverlapMS > 0) this->overlapMs = aOverlapMS;\r
- \r
- if (aSequenceMS > 0)\r
+++ /dev/null
-# Copyright 1999-2018 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-
-EAPI=6
-
-MY_PN="${PN/lib}"
-inherit autotools flag-o-matic multilib-minimal
-
-DESCRIPTION="Audio processing library for changing tempo, pitch and playback rates"
-HOMEPAGE="https://www.surina.net/soundtouch/"
-SRC_URI="https://www.surina.net/soundtouch/${P/lib}.tar.gz"
-
-LICENSE="LGPL-2.1"
-# subslot = libSoundTouch.so soname
-SLOT="0/1"
-KEYWORDS="amd64 ~arm hppa ~mips ppc ppc64 x86 ~amd64-linux ~x86-linux ~ppc-macos ~x86-solaris"
-IUSE="cpu_flags_x86_sse openmp static-libs"
-
-DEPEND=">=virtual/pkgconfig-0-r1[${MULTILIB_USEDEP}]"
-
-S="${WORKDIR}/${MY_PN}"
-
-PATCHES=( "${FILESDIR}/${P}-CVE-2017-92xx.patch" )
-
-src_prepare() {
- default
- if use openmp ; then
- tc-has-openmp || die "Please switch to an openmp compatible compiler"
- fi
- sed -i "s:^\(dist_doc_DATA=\)COPYING.TXT :\1:" Makefile.am || die
- sed -i 's:AM_CONFIG_HEADER:AC_CONFIG_HEADERS:g' configure.ac || die
- eautoreconf
-}
-
-multilib_src_configure() {
- local myeconfargs=(
- --enable-shared
- --disable-integer-samples
- $(use_enable cpu_flags_x86_sse x86-optimizations)
- $(use_enable openmp)
- $(use_enable static-libs static)
- )
- ECONF_SOURCE="${S}" econf "${myeconfargs[@]}"
-}
-
-multilib_src_compile() {
- emake CFLAGS="${CFLAGS}" CXXFLAGS="${CXXFLAGS}"
-}
-
-multilib_src_install() {
- emake DESTDIR="${D}" pkgdocdir="${EPREFIX}"/usr/share/doc/${PF}/html install
-}
-
-multilib_src_install_all() {
- find "${D}" -name '*.la' -delete || die
-}
+++ /dev/null
-# Copyright 1999-2019 Gentoo Authors
-# Distributed under the terms of the GNU General Public License v2
-
-EAPI=7
-
-inherit autotools flag-o-matic multilib-minimal
-
-MY_PN=${PN/lib}
-MY_P=${MY_PN}-${PV}
-DESCRIPTION="Audio processing library for changing tempo, pitch and playback rates"
-HOMEPAGE="https://www.surina.net/soundtouch/ https://gitlab.com/soundtouch/soundtouch"
-SRC_URI="https://gitlab.com/${MY_PN}/${MY_PN}/-/archive/${PV}/${MY_P}.tar.bz2"
-
-LICENSE="LGPL-2.1"
-# subslot = libSoundTouch.so soname
-SLOT="0/1"
-KEYWORDS="~amd64 ~arm ~hppa ~mips ~ppc ~ppc64 ~x86 ~amd64-linux ~x86-linux ~ppc-macos ~x86-solaris"
-IUSE="cpu_flags_x86_sse openmp static-libs"
-
-DEPEND=">=virtual/pkgconfig-0-r1[${MULTILIB_USEDEP}]"
-
-S="${WORKDIR}/${MY_P}"
-
-src_prepare() {
- default
- if use openmp ; then
- tc-has-openmp || die "Please switch to an openmp compatible compiler"
- fi
- sed -i "s:^\(dist_doc_DATA=\)COPYING.TXT :\1:" Makefile.am || die
- sed -i 's:AM_CONFIG_HEADER:AC_CONFIG_HEADERS:g' configure.ac || die
- eautoreconf
-}
-
-multilib_src_configure() {
- local myeconfargs=(
- --enable-shared
- --disable-integer-samples
- $(use_enable cpu_flags_x86_sse x86-optimizations)
- $(use_enable openmp)
- $(use_enable static-libs static)
- )
- ECONF_SOURCE="${S}" econf "${myeconfargs[@]}"
-}
-
-multilib_src_compile() {
- emake CFLAGS="${CFLAGS}" CXXFLAGS="${CXXFLAGS}"
-}
-
-multilib_src_install() {
- emake DESTDIR="${D}" pkgdocdir="${EPREFIX}"/usr/share/doc/${PF}/html install
-}
-
-multilib_src_install_all() {
- find "${D}" -name '*.la' -delete || die
-}