Overview

Request 5003 (accepted)

- Update version to 2.9.1
* Include stdio.h in libfaad/ps_dec.c for stderr (Michael Fink)
* Fix Tille -> Title typo in frontend/mp4read.c (Alexander Thomas)
* Build system fixes and code clean-up
* Fix compiler warnings and code indentation
* Fix compilation with GCC <= 4.7.3
* MSVC solution file clean-up
* Fix compilation with GCC 4.7.4
* Fix compilation with MinGW
* MSVC 2017 project file update
* Fix crash with unsupported MP4 files (NULL pointer dereference,
* division by zero)
* CVE-2019-6956: ps_dec: sanitize iid_index before mixing
* CVE-2018-20196: sbr_fbt: sanitize sbr->M (should not exceed MAX_M)
* CVE-2018-20199, CVE-2018-20360: specrec: better handle unexpected
* parametric stereo (PS)
* CVE-2018-20362, CVE-2018-19504, CVE-2018-20195, CVE-2018-20198,
* CVE-2018-20358: syntax.c: check for syntax element inconsistencies
* CVE-2018-20194, CVE-2018-19503, CVE-2018-20197, CVE-2018-20357,
* CVE-2018-20359, CVE-2018-20361: sbr_hfadj: sanitize frequency band
* borders
* CVE-2019-15296, CVE-2018-19502: Fix a couple buffer overflows
* Prevent crash on SCE followed by CPE
* Fix linking with GCC 9 and "-Wl,--as-needed"
* Enable the frontend to be built reproducibly
- Drop patches: Fix-a-couple-buffer-overflows.patch,
syntax.c-check-for-syntax-element-inconsistencies.patch
sbr_hfadj-sanitize-frequency-band-borders.patch
merged by upstream.
- Drop faad2-pic-fix.patch, all files are non-existent which need to be patched.

Submit package home:hillwood:branches:Staging / faad2 to package Staging / faad2

faad2.changes Changed
faad2.spec Changed
Fix-a-couple-buffer-overflows.patch Deleted
faad2-PACKAGE_VERSION.patch Changed
faad2-pic-fix.patch Deleted
faad2-visibility.patch Changed
sbr_hfadj-sanitize-frequency-band-borders.patch Deleted
syntax.c-check-for-syntax-element-inconsistencies.patch Deleted
faad2-2.8.8.tar.gz/INSTALL Deleted
faad2-2.8.8.tar.gz/Makefile.in Deleted
faad2-2.8.8.tar.gz/aclocal.m4 Deleted
faad2-2.8.8.tar.gz/common Deleted
faad2-2.8.8.tar.gz/common/Makefile.am Deleted
faad2-2.8.8.tar.gz/common/Makefile.in Deleted
faad2-2.8.8.tar.gz/common/mp4ff Deleted
faad2-2.8.8.tar.gz/common/mp4ff/Makefile.am Deleted
faad2-2.8.8.tar.gz/common/mp4ff/Makefile.in Deleted
faad2-2.8.8.tar.gz/common/mp4ff/mp4atom.c Deleted
faad2-2.8.8.tar.gz/common/mp4ff/mp4ff.c Deleted
faad2-2.8.8.tar.gz/common/mp4ff/mp4ff.h Deleted
faad2-2.8.8.tar.gz/common/mp4ff/mp4ffint.h Deleted
faad2-2.8.8.tar.gz/common/mp4ff/mp4meta.c Deleted
faad2-2.8.8.tar.gz/common/mp4ff/mp4sample.c Deleted
faad2-2.8.8.tar.gz/common/mp4ff/mp4tagupdate.c Deleted
faad2-2.8.8.tar.gz/common/mp4ff/mp4util.c Deleted
faad2-2.8.8.tar.gz/compile Deleted
faad2-2.8.8.tar.gz/config.guess Deleted
faad2-2.8.8.tar.gz/config.h.in Deleted
faad2-2.8.8.tar.gz/config.sub Deleted
faad2-2.8.8.tar.gz/configure Deleted
faad2-2.8.8.tar.gz/depcomp Deleted
faad2-2.8.8.tar.gz/faad2.spec Deleted
faad2-2.8.8.tar.gz/frontend/Makefile.in Deleted
faad2-2.8.8.tar.gz/install-sh Deleted
faad2-2.8.8.tar.gz/libfaad/Makefile.in Deleted
faad2-2.8.8.tar.gz/ltmain.sh Deleted
faad2-2.8.8.tar.gz/missing Deleted
faad2-2.8.8.tar.gz/plugins/Makefile.in Deleted
faad2-2.8.8.tar.gz/plugins/mpeg4ip/Makefile.in Deleted
faad2-2.8.8.tar.gz/plugins/xmms/Makefile.in Deleted
faad2-2.8.8.tar.gz/plugins/xmms/src/Makefile.in Deleted
faad2-2.8.8.tar.gz/project/msvc/aacinfo.vcxproj Deleted
faad2-2.8.8.tar.gz/project/msvc/aacinfo.vcxproj.filters Deleted
faad2-2.9.1.tar.gz/.gitignore Added
faad2-2.8.8.tar.gz/ChangeLog -> faad2-2.9.1.tar.gz/ChangeLog Changed
faad2-2.8.8.tar.gz/Makefile.am -> faad2-2.9.1.tar.gz/Makefile.am Changed
faad2-2.9.1.tar.gz/README.linux Added
faad2-2.9.1.tar.gz/aacDECdrop Added
faad2-2.9.1.tar.gz/aacDECdrop/Script.rc Added
faad2-2.9.1.tar.gz/aacDECdrop/aacDECdrop Added
faad2-2.9.1.tar.gz/aacDECdrop/aacDECdrop/aacDECdrop.sln Added
faad2-2.9.1.tar.gz/aacDECdrop/aacDECdrop/aacDECdrop.vcproj Added
faad2-2.9.1.tar.gz/aacDECdrop/audio.c Added
faad2-2.9.1.tar.gz/aacDECdrop/audio.h Added
faad2-2.9.1.tar.gz/aacDECdrop/decode.c Added
faad2-2.9.1.tar.gz/aacDECdrop/decode.h Added
faad2-2.9.1.tar.gz/aacDECdrop/decthread.c Added
faad2-2.9.1.tar.gz/aacDECdrop/decthread.h Added
faad2-2.9.1.tar.gz/aacDECdrop/main.c Added
faad2-2.9.1.tar.gz/aacDECdrop/misc.c Added
faad2-2.9.1.tar.gz/aacDECdrop/misc.h Added
faad2-2.9.1.tar.gz/aacDECdrop/resource Added
faad2-2.9.1.tar.gz/aacDECdrop/resource.h Added
faad2-2.9.1.tar.gz/aacDECdrop/resource/AAC01.bmp Added
faad2-2.9.1.tar.gz/aacDECdrop/resource/AAC01.ico Added
faad2-2.9.1.tar.gz/aacDECdrop/resource/AAC02.bmp Added
faad2-2.9.1.tar.gz/aacDECdrop/resource/AAC03.bmp Added
faad2-2.9.1.tar.gz/aacDECdrop/resource/AAC04.bmp Added
faad2-2.9.1.tar.gz/aacDECdrop/resource/AAC05.bmp Added
faad2-2.9.1.tar.gz/aacDECdrop/resource/AAC06.bmp Added
faad2-2.9.1.tar.gz/aacDECdrop/resource/AAC07.bmp Added
faad2-2.9.1.tar.gz/aacDECdrop/resource/AAC08.bmp Added
faad2-2.9.1.tar.gz/aacDECdrop/wave_out.c Added
faad2-2.9.1.tar.gz/aacDECdrop/wave_out.h Added
faad2-2.9.1.tar.gz/bootstrap Added
faad2-2.8.8.tar.gz/configure.ac -> faad2-2.9.1.tar.gz/configure.ac Changed
faad2-2.9.1.tar.gz/docs/Ahead AAC Decoder library documentation.doc Added
faad2-2.9.1.tar.gz/docs/Ahead AAC Decoder library documentation.pdf Added
faad2-2.8.8.tar.gz/frontend/Makefile.am -> faad2-2.9.1.tar.gz/frontend/Makefile.am Changed
faad2-2.9.1.tar.gz/frontend/getopt.h Added
faad2-2.8.8.tar.gz/frontend/main.c -> faad2-2.9.1.tar.gz/frontend/main.c Changed
faad2-2.8.8.tar.gz/frontend/mp4read.c -> faad2-2.9.1.tar.gz/frontend/mp4read.c Changed
faad2-2.9.1.tar.gz/in_mpeg4aac.nsi Added
faad2-2.8.8.tar.gz/libfaad/bits.c -> faad2-2.9.1.tar.gz/libfaad/bits.c Changed
faad2-2.8.8.tar.gz/libfaad/decoder.c -> faad2-2.9.1.tar.gz/libfaad/decoder.c Changed
faad2-2.8.8.tar.gz/libfaad/hcr.c -> faad2-2.9.1.tar.gz/libfaad/hcr.c Changed
faad2-2.8.8.tar.gz/libfaad/pns.c -> faad2-2.9.1.tar.gz/libfaad/pns.c Changed
faad2-2.8.8.tar.gz/libfaad/ps_dec.c -> faad2-2.9.1.tar.gz/libfaad/ps_dec.c Changed
faad2-2.8.8.tar.gz/libfaad/sbr_fbt.c -> faad2-2.9.1.tar.gz/libfaad/sbr_fbt.c Changed
faad2-2.8.8.tar.gz/libfaad/sbr_hfadj.c -> faad2-2.9.1.tar.gz/libfaad/sbr_hfadj.c Changed
faad2-2.8.8.tar.gz/libfaad/sbr_syntax.c -> faad2-2.9.1.tar.gz/libfaad/sbr_syntax.c Changed
faad2-2.8.8.tar.gz/libfaad/specrec.c -> faad2-2.9.1.tar.gz/libfaad/specrec.c Changed
faad2-2.8.8.tar.gz/libfaad/syntax.c -> faad2-2.9.1.tar.gz/libfaad/syntax.c Changed
faad2-2.9.1.tar.gz/plugins/QCD Added
faad2-2.9.1.tar.gz/plugins/QCD/QCDFAAD.c Added
faad2-2.9.1.tar.gz/plugins/QCD/QCDFAAD.sln Added
faad2-2.9.1.tar.gz/plugins/QCD/QCDFAAD.vcproj Added
faad2-2.9.1.tar.gz/plugins/QCD/QCDInputDLL.h Added
faad2-2.9.1.tar.gz/plugins/QCD/QCDModDefs.h Added
faad2-2.9.1.tar.gz/plugins/QCD/QCDModInput.h Added
faad2-2.9.1.tar.gz/plugins/QCD/ReadMe.txt Added
faad2-2.9.1.tar.gz/plugins/QCD/logo.bmp Added
faad2-2.9.1.tar.gz/plugins/QCD/plugin_dlg.rc Added
faad2-2.9.1.tar.gz/plugins/QCD/resource.h Added
faad2-2.9.1.tar.gz/plugins/QCDMp4 Added
faad2-2.9.1.tar.gz/plugins/QCDMp4/QCDInputDLL.h Added
faad2-2.9.1.tar.gz/plugins/QCDMp4/QCDModDefs.h Added
faad2-2.9.1.tar.gz/plugins/QCDMp4/QCDModInput.h Added
faad2-2.9.1.tar.gz/plugins/QCDMp4/QCDModTagEditor.h Added
faad2-2.9.1.tar.gz/plugins/QCDMp4/QCDMp4.c Added
faad2-2.9.1.tar.gz/plugins/QCDMp4/QCDMp4.rc Added
faad2-2.9.1.tar.gz/plugins/QCDMp4/QCDMp4.sln Added
faad2-2.9.1.tar.gz/plugins/QCDMp4/QCDMp4.vcproj Added
faad2-2.9.1.tar.gz/plugins/QCDMp4/QCDMp4Tag.cpp Added
faad2-2.9.1.tar.gz/plugins/QCDMp4/QCDTagsDLL.h Added
faad2-2.9.1.tar.gz/plugins/QCDMp4/aac2mp4.cpp Added
faad2-2.9.1.tar.gz/plugins/QCDMp4/aac2mp4.h Added
faad2-2.9.1.tar.gz/plugins/QCDMp4/aacinfo.c Added
faad2-2.9.1.tar.gz/plugins/QCDMp4/aacinfo.h Added
faad2-2.9.1.tar.gz/plugins/QCDMp4/config.c Added
faad2-2.9.1.tar.gz/plugins/QCDMp4/config.h Added
faad2-2.9.1.tar.gz/plugins/QCDMp4/mbs.h Added
faad2-2.9.1.tar.gz/plugins/QCDMp4/resource.h Added
faad2-2.9.1.tar.gz/plugins/QCDMp4/utils.c Added
faad2-2.9.1.tar.gz/plugins/QCDMp4/utils.h Added
faad2-2.9.1.tar.gz/plugins/mpeg4ip/README_WIN32.txt Added
faad2-2.8.8.tar.gz/project/msvc/faad2.sln -> faad2-2.9.1.tar.gz/project/msvc/faad2.sln Changed
faad2-2.8.8.tar.gz/project/msvc/libfaad2_dll.vcxproj -> faad2-2.9.1.tar.gz/project/msvc/libfaad2_dll.vcxproj Changed
Request History
Hillwood Yang's avatar

hillwood created request almost 5 years ago

- Update version to 2.9.1
* Include stdio.h in libfaad/ps_dec.c for stderr (Michael Fink)
* Fix Tille -> Title typo in frontend/mp4read.c (Alexander Thomas)
* Build system fixes and code clean-up
* Fix compiler warnings and code indentation
* Fix compilation with GCC <= 4.7.3
* MSVC solution file clean-up
* Fix compilation with GCC 4.7.4
* Fix compilation with MinGW
* MSVC 2017 project file update
* Fix crash with unsupported MP4 files (NULL pointer dereference,
* division by zero)
* CVE-2019-6956: ps_dec: sanitize iid_index before mixing
* CVE-2018-20196: sbr_fbt: sanitize sbr->M (should not exceed MAX_M)
* CVE-2018-20199, CVE-2018-20360: specrec: better handle unexpected
* parametric stereo (PS)
* CVE-2018-20362, CVE-2018-19504, CVE-2018-20195, CVE-2018-20198,
* CVE-2018-20358: syntax.c: check for syntax element inconsistencies
* CVE-2018-20194, CVE-2018-19503, CVE-2018-20197, CVE-2018-20357,
* CVE-2018-20359, CVE-2018-20361: sbr_hfadj: sanitize frequency band
* borders
* CVE-2019-15296, CVE-2018-19502: Fix a couple buffer overflows
* Prevent crash on SCE followed by CPE
* Fix linking with GCC 9 and "-Wl,--as-needed"
* Enable the frontend to be built reproducibly
- Drop patches: Fix-a-couple-buffer-overflows.patch,
syntax.c-check-for-syntax-element-inconsistencies.patch
sbr_hfadj-sanitize-frequency-band-borders.patch
merged by upstream.
- Drop faad2-pic-fix.patch, all files are non-existent which need to be patched.


Hillwood Yang's avatar

hillwood accepted request almost 5 years ago