aboutsummaryrefslogtreecommitdiff
path: root/audio/sox
diff options
context:
space:
mode:
authorOliver Eikemeier <eik@FreeBSD.org>2004-07-28 21:39:53 +0000
committerOliver Eikemeier <eik@FreeBSD.org>2004-07-28 21:39:53 +0000
commit279ef0a0449e9554466f3014818f6f5be8412a61 (patch)
treef251cc426e61f51cde14c9c14defc1f3cf510ac9 /audio/sox
parent4bb553fa46939aa0b92139af1473510681a66b76 (diff)
downloadports-279ef0a0449e9554466f3014818f6f5be8412a61.tar.gz
ports-279ef0a0449e9554466f3014818f6f5be8412a61.zip
Notes
Diffstat (limited to 'audio/sox')
-rw-r--r--audio/sox/Makefile2
-rw-r--r--audio/sox/files/patch-wav.c24
2 files changed, 25 insertions, 1 deletions
diff --git a/audio/sox/Makefile b/audio/sox/Makefile
index 0936d55e2a59..4b10f7a15bef 100644
--- a/audio/sox/Makefile
+++ b/audio/sox/Makefile
@@ -7,7 +7,7 @@
PORTNAME= sox
PORTVERSION= 12.17.4
-PORTREVISION= 1
+PORTREVISION= 2
CATEGORIES= audio
MASTER_SITES= ${MASTER_SITE_SOURCEFORGE}
MASTER_SITE_SUBDIR= sox
diff --git a/audio/sox/files/patch-wav.c b/audio/sox/files/patch-wav.c
new file mode 100644
index 000000000000..2e7600888252
--- /dev/null
+++ b/audio/sox/files/patch-wav.c
@@ -0,0 +1,24 @@
+--- wav.c.old 2002-12-31 04:19:22.000000000 +0100
++++ wav.c 2004-07-18 19:25:46.000000000 +0200
+@@ -917,6 +917,10 @@
+ } else if(strncmp(magic,"ICRD",4) == 0){
+ st_readdw(ft,&len);
+ len = (len + 1) & ~1;
++ if (len > 254) {
++ fprintf(stderr, "Possible buffer overflow hack attack (ICRD)!\n");
++ exit(109);
++ }
+ st_reads(ft,text,len);
+ if (strlen(ft->comment) + strlen(text) < 254)
+ {
+@@ -926,6 +930,10 @@
+ } else if(strncmp(magic,"ISFT",4) == 0){
+ st_readdw(ft,&len);
+ len = (len + 1) & ~1;
++ if (len > 254) {
++ fprintf(stderr, "Possible buffer overflow hack attack (ISFT)!\n");
++ exit(110);
++ }
+ st_reads(ft,text,len);
+ if (strlen(ft->comment) + strlen(text) < 254)
+ {