[Bug 252321] multimedia/libdvdcss: Fix potential buffer overflow

bugzilla-noreply at freebsd.org bugzilla-noreply at freebsd.org
Fri Jan 1 11:20:53 UTC 2021


https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=252321

            Bug ID: 252321
           Summary: multimedia/libdvdcss: Fix potential buffer overflow
           Product: Ports & Packages
           Version: Latest
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Only Me
          Priority: ---
         Component: Individual Port(s)
          Assignee: jpaetzel at FreeBSD.org
          Reporter: daniel.engberg.lists at pyret.net
          Assignee: jpaetzel at FreeBSD.org
             Flags: maintainer-feedback?(jpaetzel at FreeBSD.org)

Created attachment 221155
  --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=221155&action=edit
Patch for libdvdcss

Buffer of size PATH_MAX is being written to with data that can theoretically
overflow (a string of maximum size PATH_MAX plus other constant-size strings)

Other minor fixes:
Switch from PORTVERSION to DISTVERSION
Use HTTPS for MASTER_SITES
Remove dependency of gmake

References:
https://code.videolan.org/videolan/libdvdcss/-/commit/f93ae872f22bc404aa998ef127242d2e10de1b3c
Porters Handbook: "Table 5.2. Package Naming Examples"

Compile tested on FreeBSD 13.0-CURRENT main-c1-g63f93c7e1 (amd64) (make, make
check-plist, make test)
Run-time tested on FreeBSD 13.0-CURRENT #0: Wed Dec 30 11:54:07 CET 2020
(arm64) (hash unavailable)
Poudriere testport OK 12.2-RELEASE (amd64)
Poudriere testport OK 11.4-RELEASE (amd64)

-- 
You are receiving this mail because:
You are the assignee for the bug.


More information about the freebsd-ports-bugs mailing list