Commit Graph

4 Commits

Author SHA1 Message Date
Tanu Kaskinen 20d103d881 libvorbis: CVE-2017-14633
In Xiph.Org libvorbis 1.3.5, an out-of-bounds array read vulnerability
exists in the function mapping0_forward() in mapping0.c, which may lead
to DoS when operating on a crafted audio file with vorbis_analysis().

References:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14633

(From OE-Core rev: 3ea65ee8b31a16a20f5c28c19f4c758f8deabf6e)

Signed-off-by: Tanu Kaskinen <tanuk@iki.fi>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2018-04-02 17:06:25 +01:00
Khem Raj c6344d3b6a libvorbis: Contain gcc specific compiler flags using configure option
(From OE-Core rev: b6cdbf50e5c26c406e4ddecd66202ff7324f5468)

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-03-24 23:43:32 +00:00
Stefan Müller-Klieser d0b71dd0e9 libvorbis: remove legacy options
Those code fragments date back to ancient times. EXTRA_OECONF is not
required anymore and we should give gcc another try to do it right.
Testing on cortex-a8 with thumb and -O2 reveals a performance boost of
82 percent during encoding in comparison to -O0. -O4 gives another 7
percent.

(From OE-Core rev: ea04f05710a9a2a1e9561fe87579d0ae9690bd21)

Signed-off-by: Stefan Müller-Klieser <s.mueller-klieser@phytec.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-09-03 12:43:20 +01:00
Khem Raj 99e67db3b9 libvorbis: Update libvorbis_1.3.4.bb -> libvorbis_1.3.5.bb
Licence years have changes causing checksum changes

-Copyright (c) 2002-2008 Xiph.org Foundation
+Copyright (c) 2002-2015 Xiph.org Foundation

(From OE-Core rev: cb034175054ae31f7065677ba36b6a45dc067be0)

(From OE-Core rev: 49e5f3fca65133a83f124324011d7bee18fd3aa1)

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-08-30 12:35:53 +01:00