Next | Query returned 86 messages, browsing 1 to 10 | Previous

History of commit frequency

CVS Commit History:


   2023-12-07 09:22:44 by Thomas Klausner | Files touched by this commit (2) | Package updated
Log message:
faad2: update to 2.11.1.

2.11.1 (2023-11-14):
	[ Fabian Greffrath ]
	* Build shared libraries and hide symbols by default.
	* Install man page by default.
	* Check for `lrintf()` availability, link with `-lm` and define `HAVE_LRINTF` \ 
accordingly.
	* Set a default build type if none was specified.
	* Build DLL name with SOVERSION by default on Windows.
	* Fix inlined `lrintf()` function signatures.
   2023-11-13 16:28:54 by Thomas Klausner | Files touched by this commit (1) | Package updated
Log message:
faad2: add PKGCONFIG_OVERRIDE

ride update
   2023-11-13 16:22:46 by Thomas Klausner | Files touched by this commit (13) | Package removed
Log message:
faad2: update to 2.11.0.

2.11.0:
	[ Eugène Filin ]
	* Fix incorrect variable initialization

	[ Eugene Kliuchnikov ]
	* CI/CD, build, etc

	   - setup GitHub workflows; test build under MSVC, OSX, MSYS2, Linux
	   - add CMake build system
	   - additionally add Bazel build
	   - remove automake and MSVC project files
	   - add fuzzers that cover almost all decoder code
	   - setup fuzzing for various builds: (no-)FIXED_POINT / (no-)DRM
	   - remove dead code
	   - address differes compilers warnings
	   - move version to distingished place that different build systems can read

	* "Safe" bugs

	   "Safe" means that it is unlikely to be exploited; those affect the \ 
decoded
	   result for (most likely) extreme inputs. Some fixes are useful only for
	   "FIXED_POINT" build, since it has more restrictions on \ 
intermediate values.

	   - "negative range" in estimate_current_envelope
	   - integer overflow in channel downmixing
	   - integer overflow in estimate_envelope
	   - integer overflows caused by "practical infinite" gain
	   - integer overflows in HF adjustment code
	   - several "left shift of negative value"
	   - priming RNG to avoid using values that does not look random at all
	   - do not drop the first frame of output; other decoders don't do this
	   - touching uninitialized values in lt_update_state
	   - touching uninitialized values in bit-reader buffers

	* "Almost Safe" bugs

	   "Almost safe" means that those are unlinkly to be exploited; if \ 
those surface
	   depends on build options / environment.

	   - division by zero in HF (noise?) generator and scale factor adjustment
	   - division by zero gen_rand_vector

	* "Unsafe" bugs

	   "Unsafe" means that those can cause crash, or could somehow else \ 
be exploited.

	   - CLI: accessing unallocated memory in mp4info (corrupted / zero-samples \ 
input) (CVE-2023-38857)
	   - CLI: out-of-bounds when parsing mp4 header
	   - CLI: crash because of wrong mp4 frame offset calculation (CVE-2023-38857)
	   - error handling rvlc_decode_scale_factors (CPU bomb?)
	   - null pointer dereference (in DRM + PS build)
	   - index-out-of-bounds / stack-buffer-overflow in decode_sce_lfe
		 (for streams with PCE)
	   - stack-buffer-overflow in pns_decode
	   - null pointer derefernce (when channels change their type in the middle
		 of the stream)
	   - infinite loop on currupted stream
	   - add practial limits for scale factors; otherwise calculated NaN/Inf values
		 could confuse further logic, resulting in access-out-of-bounds
	   - check sf_index in window_grouping_info to avoid access-out-of-bounds
	   - clamp bs_pointer values to avoid access-out-of-bounds
	   - infinite loop in fill_element
	   - sanitize input values in ps_mix_phase to avoid access-out-of-bounds
	   - fix internal decoder buffer size calculation to avoid heap-out-of-bounds
	   - calculate channel length multiplier even if main channel is already allocated
		 to avoid heap-out-of-bounds
	   - reserve enough slots for channels in decode_sce_lfe
		 to avoid heap-out-of-bounds

	[ David Korczynski ]
	* Fuzzing integration with oss-fuzz

	[ Steveice10 ]
	* Add define option to disable SBR/PS support
	* Fix coefficient table selection in tns_decode_coef
   2023-04-26 17:45:03 by Thomas Klausner | Files touched by this commit (2) | Package updated
Log message:
faad2: update to 2.10.1.

2.10.1:
	[David Korczynski]
	* Reject buffers of zero size.

	[François Cartegnie]
	* Fix 7.1 with PCE mapping.
	* Have proper version string in `faad.h`.
	* Add conditional build with DRC.
   2022-05-15 04:35:33 by David A. Holland | Files touched by this commit (2)
Log message:
In audio/faad2, use -I instead -iquote; latter is gcc-only.

(and was being used for no real reason)

Should fix PR 42117.
   2021-10-26 11:59:39 by Nia Alarie | Files touched by this commit (455)
Log message:
audio: Replace RMD160 checksums with BLAKE2s checksums

All checksums have been double-checked against existing RMD160 and
SHA512 hashes.

The following distfiles couldn't be fetched (possibly they are fetched
conditionally):

./audio/freeswitch-sounds-ru/distinfo \ 
freeswitch/freeswitch-sounds-ru-RU-elena-32000-1.0.13.tar.gz
./audio/freeswitch-sounds-ru/distinfo \ 
freeswitch/freeswitch-sounds-ru-RU-elena-48000-1.0.13.tar.gz
./audio/freeswitch-music/distinfo \ 
freeswitch/freeswitch-sounds-music-32000-1.0.8.tar.gz
./audio/freeswitch-music/distinfo \ 
freeswitch/freeswitch-sounds-music-48000-1.0.8.tar.gz
./audio/freeswitch-sounds-fr/distinfo \ 
freeswitch/freeswitch-sounds-fr-ca-june-32000-1.0.18.tar.gz
./audio/freeswitch-sounds-fr/distinfo \ 
freeswitch/freeswitch-sounds-fr-ca-june-48000-1.0.18.tar.gz
./audio/freeswitch-sounds-en/distinfo \ 
freeswitch/freeswitch-sounds-en-us-callie-32000-1.0.22.tar.gz
./audio/freeswitch-sounds-en/distinfo \ 
freeswitch/freeswitch-sounds-en-us-callie-48000-1.0.22.tar.gz
   2021-10-07 15:10:03 by Nia Alarie | Files touched by this commit (459)
Log message:
audio: Remove SHA1 hashes for distfiles
   2020-11-19 11:41:27 by Nia Alarie | Files touched by this commit (2) | Package updated
Log message:
faad2: Update to 2.10.0

2.10.0:
	[ tatsuz ]
	* updated Visual Studio projects to VS 2019 (#54)

	[ Fabian Greffrath ]
	* mp4read.c: fix stack-buffer-overflow in stringin()/ftypin()
	* fix heap-buffer-overflow in mp4read.c

	[ Clayton Smith ]
	* Remove non-ASCII characters
	* Remove trailing whitespace

	[ Andrew Wesie ]
	* Check return value of ltp_data.
	* Restrict SBR frame length to 960 and 1024 samples.
	* Support object type 29.
	* Support implicit SBR signaling in frontend.
	* Fix PNS decoding when only right channel is noise.
	* Initialize element_id array with an invalid id.
	* Fix NULL pointer dereferences.
	* Fix infinite loop in adts_parse.
	* Fix infinite loop in huffman_getescape.
	* Check for error after each channel decode.
	* Check for inconsistent number of channels.
   2020-05-08 15:03:20 by Nia Alarie | Files touched by this commit (3) | Package updated
Log message:
faad2: Update to 2.9.2

2.9.2:
	[ Michał Janiszewski ]
	* Only use x86-assembly when explicitly on x86
	* Use unsigned integers correctly
	* Initialize pointers that might otherwise not be

	[ Fabian Greffrath ]
	* update README esp. WRT directory structure

	[ Rosen Penev ]
	* fix compilation without SBR/PS_DEC (#48)
	* fix compilation with LC_ONLY_DECODER (#47)

	[ Fabian Greffrath ]
	* fix "inline function 'cfftf1' declared but never defined" compiler \ 
warning
	* fix some inconsistencies in the frontend output
	* mp4read_open: add check for failed frame buffer allocation
	* stszin: add check for allocation error and integer overflow
	* add a pkg-config file

	[ Stefan Pöschel ]
	* frontend: address compile warning + add missing LF (#50)

	[ François Cartegnie ]
	* library name is faad (#52)
	* Unbreak PS audio (#51)
   2019-11-08 12:10:02 by Nia Alarie | Files touched by this commit (2)
Log message:
faad2: Update to 2.9.1

[ Fabian Greffrath ]

    Include stdio.h in libfaad/ps_dec.c for stderr (Michael Fink)
    Fix Tille -> Title typo in frontend/mp4read.c (Alexander Thomas)

Next | Query returned 86 messages, browsing 1 to 10 | Previous