[Bug 252321] multimedia/libdvdcss: Fix potential buffer overflow
bugzilla-noreply at freebsd.org
bugzilla-noreply at freebsd.org
Fri Jan 1 11:20:53 UTC 2021
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=252321
Bug ID: 252321
Summary: multimedia/libdvdcss: Fix potential buffer overflow
Product: Ports & Packages
Version: Latest
Hardware: Any
OS: Any
Status: New
Severity: Affects Only Me
Priority: ---
Component: Individual Port(s)
Assignee: jpaetzel at FreeBSD.org
Reporter: daniel.engberg.lists at pyret.net
Assignee: jpaetzel at FreeBSD.org
Flags: maintainer-feedback?(jpaetzel at FreeBSD.org)
Created attachment 221155
--> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=221155&action=edit
Patch for libdvdcss
Buffer of size PATH_MAX is being written to with data that can theoretically
overflow (a string of maximum size PATH_MAX plus other constant-size strings)
Other minor fixes:
Switch from PORTVERSION to DISTVERSION
Use HTTPS for MASTER_SITES
Remove dependency of gmake
References:
https://code.videolan.org/videolan/libdvdcss/-/commit/f93ae872f22bc404aa998ef127242d2e10de1b3c
Porters Handbook: "Table 5.2. Package Naming Examples"
Compile tested on FreeBSD 13.0-CURRENT main-c1-g63f93c7e1 (amd64) (make, make
check-plist, make test)
Run-time tested on FreeBSD 13.0-CURRENT #0: Wed Dec 30 11:54:07 CET 2020
(arm64) (hash unavailable)
Poudriere testport OK 12.2-RELEASE (amd64)
Poudriere testport OK 11.4-RELEASE (amd64)
--
You are receiving this mail because:
You are the assignee for the bug.
More information about the freebsd-ports-bugs
mailing list