Subject: CVS commit: pkgsrc/audio/faad2
From: Thomas Klausner
Date: 2023-11-13 16:22:46
Message id: 20231113152246.34DCCFA3D@cvs.NetBSD.org

Log Message:
faad2: update to 2.11.0.

2.11.0:
	[ Eugène Filin ]
	* Fix incorrect variable initialization

	[ Eugene Kliuchnikov ]
	* CI/CD, build, etc

	   - setup GitHub workflows; test build under MSVC, OSX, MSYS2, Linux
	   - add CMake build system
	   - additionally add Bazel build
	   - remove automake and MSVC project files
	   - add fuzzers that cover almost all decoder code
	   - setup fuzzing for various builds: (no-)FIXED_POINT / (no-)DRM
	   - remove dead code
	   - address differes compilers warnings
	   - move version to distingished place that different build systems can read

	* "Safe" bugs

	   "Safe" means that it is unlikely to be exploited; those affect the \ 
decoded
	   result for (most likely) extreme inputs. Some fixes are useful only for
	   "FIXED_POINT" build, since it has more restrictions on \ 
intermediate values.

	   - "negative range" in estimate_current_envelope
	   - integer overflow in channel downmixing
	   - integer overflow in estimate_envelope
	   - integer overflows caused by "practical infinite" gain
	   - integer overflows in HF adjustment code
	   - several "left shift of negative value"
	   - priming RNG to avoid using values that does not look random at all
	   - do not drop the first frame of output; other decoders don't do this
	   - touching uninitialized values in lt_update_state
	   - touching uninitialized values in bit-reader buffers

	* "Almost Safe" bugs

	   "Almost safe" means that those are unlinkly to be exploited; if \ 
those surface
	   depends on build options / environment.

	   - division by zero in HF (noise?) generator and scale factor adjustment
	   - division by zero gen_rand_vector

	* "Unsafe" bugs

	   "Unsafe" means that those can cause crash, or could somehow else \ 
be exploited.

	   - CLI: accessing unallocated memory in mp4info (corrupted / zero-samples \ 
input) (CVE-2023-38857)
	   - CLI: out-of-bounds when parsing mp4 header
	   - CLI: crash because of wrong mp4 frame offset calculation (CVE-2023-38857)
	   - error handling rvlc_decode_scale_factors (CPU bomb?)
	   - null pointer dereference (in DRM + PS build)
	   - index-out-of-bounds / stack-buffer-overflow in decode_sce_lfe
		 (for streams with PCE)
	   - stack-buffer-overflow in pns_decode
	   - null pointer derefernce (when channels change their type in the middle
		 of the stream)
	   - infinite loop on currupted stream
	   - add practial limits for scale factors; otherwise calculated NaN/Inf values
		 could confuse further logic, resulting in access-out-of-bounds
	   - check sf_index in window_grouping_info to avoid access-out-of-bounds
	   - clamp bs_pointer values to avoid access-out-of-bounds
	   - infinite loop in fill_element
	   - sanitize input values in ps_mix_phase to avoid access-out-of-bounds
	   - fix internal decoder buffer size calculation to avoid heap-out-of-bounds
	   - calculate channel length multiplier even if main channel is already allocated
		 to avoid heap-out-of-bounds
	   - reserve enough slots for channels in decode_sce_lfe
		 to avoid heap-out-of-bounds

	[ David Korczynski ]
	* Fuzzing integration with oss-fuzz

	[ Steveice10 ]
	* Add define option to disable SBR/PS support
	* Fix coefficient table selection in tns_decode_coef

Files:
RevisionActionfile
1.60modifypkgsrc/audio/faad2/Makefile
1.18modifypkgsrc/audio/faad2/PLIST
1.15modifypkgsrc/audio/faad2/buildlink3.mk
1.36modifypkgsrc/audio/faad2/distinfo
1.1addpkgsrc/audio/faad2/patches/patch-CMakeLists.txt
1.1removepkgsrc/audio/faad2/patches/patch-configure.ac
1.4removepkgsrc/audio/faad2/patches/patch-frontend_Makefile.am
1.2removepkgsrc/audio/faad2/patches/patch-frontend_getopt.c
1.3removepkgsrc/audio/faad2/patches/patch-frontend_mp4read.c
1.3removepkgsrc/audio/faad2/patches/patch-libfaad_Makefile.am
1.1removepkgsrc/audio/faad2/patches/patch-libfaad_common.h
1.1removepkgsrc/audio/faad2/patches/patch-plugins_xmms_src_Makefile.am
1.1removepkgsrc/audio/faad2/patches/patch-plugins_xmms_src_libmp4.c