libcue: update to 2.3.0.

This commit is contained in:
John 2023-10-13 14:08:38 +02:00
parent f5332fee90
commit 733d1de6e5
2 changed files with 3 additions and 27 deletions

View File

@ -1,24 +0,0 @@
From fdf72c8bded8d24cfa0608b8e97f2eed210a920e Mon Sep 17 00:00:00 2001
From: Kevin Backhouse <kevinbackhouse@github.com>
Date: Wed, 27 Sep 2023 20:22:43 +0100
Subject: [PATCH] Check that the array index isn't negative. This fixes
CVE-2023-43641.
Signed-off-by: Kevin Backhouse <kevinbackhouse@github.com>
---
cd.c | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/cd.c b/cd.c
index cf77a18..4bbea19 100644
--- a/cd.c
+++ b/cd.c
@@ -339,7 +339,7 @@ track_get_rem(const Track* track)
void track_set_index(Track *track, int i, long ind)
{
- if (i > MAXINDEX) {
+ if (i < 0 || i > MAXINDEX) {
fprintf(stderr, "too many indexes\n");
return;
}

View File

@ -1,7 +1,7 @@
# Template file for 'libcue'
pkgname=libcue
version=2.2.1
revision=2
version=2.3.0
revision=1
build_style=cmake
configure_args="-DBUILD_SHARED_LIBS=ON"
hostmakedepends="bison flex"
@ -10,7 +10,7 @@ maintainer="John <me@johnnynator.dev>"
license="GPL-2.0-or-later, BSD-2-Clause"
homepage="https://github.com/lipnitsk/libcue"
distfiles="https://github.com/lipnitsk/libcue/archive/v${version}.tar.gz"
checksum=f27bc3ebb2e892cd9d32a7bee6d84576a60f955f29f748b9b487b173712f1200
checksum=cc1b3a65c60bd88b77a1ddd1574042d83cf7cc32b85fe9481c99613359eb7cfe
libcue-devel_package() {
depends="${sourcepkg}>=${version}_${revision}"