![Peter Korsgaard](/assets/img/avatar_default.png)
Fixes the following security issues: CVE-2017-9410: fill_buffer_resample function in libmp3lame/util.c heap-based buffer over-read and ap CVE-2017-9411: fill_buffer_resample function in libmp3lame/util.c invalid memory read and application crash CVE-2017-9412: unpack_read_samples function in frontend/get_audio.c invalid memory read and application crash Drop patches now upstream or no longer needed: 0001-configure.patch: Upstream as mentioned in patch description 0002-gtk1-ac-directives.patch: Upstream as mentioned in patch description/release notes: Resurrect Owen Taylor's code dated from 97-11-3 to properly deal with GTK1. This was transplanted back from aclocal.m4 with a patch provided by Andres Mejia. This change makes it easy to regenerate autotools' files with a simple invocation of autoconf -vfi. 0003-msse.patch: Not needed as -march <x86-variant-with-msse-support> nowadays implies -msse. With these removed, autoreconf is no longer needed. Also add a hash for the license file while we're at it. Signed-off-by: Peter Korsgaard <peter@korsgaard.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
34 lines
850 B
Makefile
34 lines
850 B
Makefile
################################################################################
|
|
#
|
|
# lame
|
|
#
|
|
################################################################################
|
|
|
|
LAME_VERSION = 3.100
|
|
LAME_SITE = http://downloads.sourceforge.net/project/lame/lame/$(LAME_VERSION)
|
|
LAME_DEPENDENCIES = host-pkgconf
|
|
LAME_INSTALL_STAGING = YES
|
|
LAME_CONF_ENV = GTK_CONFIG=/bin/false
|
|
LAME_CONF_OPTS = --enable-dynamic-frontends
|
|
LAME_LICENSE = LGPL-2.0+
|
|
LAME_LICENSE_FILES = COPYING
|
|
|
|
ifeq ($(BR2_PACKAGE_LIBSNDFILE),y)
|
|
LAME_DEPENDENCIES += libsndfile
|
|
LAME_CONF_OPTS += --with-fileio=sndfile
|
|
endif
|
|
|
|
ifeq ($(BR2_PACKAGE_NCURSES),y)
|
|
LAME_DEPENDENCIES += ncurses
|
|
endif
|
|
|
|
ifeq ($(BR2_ENDIAN),"BIG")
|
|
define LAME_BIGENDIAN_ARCH
|
|
echo "#define WORDS_BIGENDIAN 1" >>$(@D)/config.h
|
|
endef
|
|
endif
|
|
|
|
LAME_POST_CONFIGURE_HOOKS += LAME_BIGENDIAN_ARCH
|
|
|
|
$(eval $(autotools-package))
|