head 1.2; access; symbols pkgsrc-2026Q1:1.2.0.140 pkgsrc-2026Q1-base:1.2 pkgsrc-2025Q4:1.2.0.138 pkgsrc-2025Q4-base:1.2 pkgsrc-2025Q3:1.2.0.136 pkgsrc-2025Q3-base:1.2 pkgsrc-2025Q2:1.2.0.134 pkgsrc-2025Q2-base:1.2 pkgsrc-2025Q1:1.2.0.132 pkgsrc-2025Q1-base:1.2 pkgsrc-2024Q4:1.2.0.130 pkgsrc-2024Q4-base:1.2 pkgsrc-2024Q3:1.2.0.128 pkgsrc-2024Q3-base:1.2 pkgsrc-2024Q2:1.2.0.126 pkgsrc-2024Q2-base:1.2 pkgsrc-2024Q1:1.2.0.124 pkgsrc-2024Q1-base:1.2 pkgsrc-2023Q4:1.2.0.122 pkgsrc-2023Q4-base:1.2 pkgsrc-2023Q3:1.2.0.120 pkgsrc-2023Q3-base:1.2 pkgsrc-2023Q2:1.2.0.118 pkgsrc-2023Q2-base:1.2 pkgsrc-2023Q1:1.2.0.116 pkgsrc-2023Q1-base:1.2 pkgsrc-2022Q4:1.2.0.114 pkgsrc-2022Q4-base:1.2 pkgsrc-2022Q3:1.2.0.112 pkgsrc-2022Q3-base:1.2 pkgsrc-2022Q2:1.2.0.110 pkgsrc-2022Q2-base:1.2 pkgsrc-2022Q1:1.2.0.108 pkgsrc-2022Q1-base:1.2 pkgsrc-2021Q4:1.2.0.106 pkgsrc-2021Q4-base:1.2 pkgsrc-2021Q3:1.2.0.104 pkgsrc-2021Q3-base:1.2 pkgsrc-2021Q2:1.2.0.102 pkgsrc-2021Q2-base:1.2 pkgsrc-2021Q1:1.2.0.100 pkgsrc-2021Q1-base:1.2 pkgsrc-2020Q4:1.2.0.98 pkgsrc-2020Q4-base:1.2 pkgsrc-2020Q3:1.2.0.96 pkgsrc-2020Q3-base:1.2 pkgsrc-2020Q2:1.2.0.92 pkgsrc-2020Q2-base:1.2 pkgsrc-2020Q1:1.2.0.72 pkgsrc-2020Q1-base:1.2 pkgsrc-2019Q4:1.2.0.94 pkgsrc-2019Q4-base:1.2 pkgsrc-2019Q3:1.2.0.90 pkgsrc-2019Q3-base:1.2 pkgsrc-2019Q2:1.2.0.88 pkgsrc-2019Q2-base:1.2 pkgsrc-2019Q1:1.2.0.86 pkgsrc-2019Q1-base:1.2 pkgsrc-2018Q4:1.2.0.84 pkgsrc-2018Q4-base:1.2 pkgsrc-2018Q3:1.2.0.82 pkgsrc-2018Q3-base:1.2 pkgsrc-2018Q2:1.2.0.80 pkgsrc-2018Q2-base:1.2 pkgsrc-2018Q1:1.2.0.78 pkgsrc-2018Q1-base:1.2 pkgsrc-2017Q4:1.2.0.76 pkgsrc-2017Q4-base:1.2 pkgsrc-2017Q3:1.2.0.74 pkgsrc-2017Q3-base:1.2 pkgsrc-2017Q2:1.2.0.70 pkgsrc-2017Q2-base:1.2 pkgsrc-2017Q1:1.2.0.68 pkgsrc-2017Q1-base:1.2 pkgsrc-2016Q4:1.2.0.66 pkgsrc-2016Q4-base:1.2 pkgsrc-2016Q3:1.2.0.64 pkgsrc-2016Q3-base:1.2 pkgsrc-2016Q2:1.2.0.62 pkgsrc-2016Q2-base:1.2 pkgsrc-2016Q1:1.2.0.60 pkgsrc-2016Q1-base:1.2 pkgsrc-2015Q4:1.2.0.58 pkgsrc-2015Q4-base:1.2 pkgsrc-2015Q3:1.2.0.56 pkgsrc-2015Q3-base:1.2 pkgsrc-2015Q2:1.2.0.54 pkgsrc-2015Q2-base:1.2 pkgsrc-2015Q1:1.2.0.52 pkgsrc-2015Q1-base:1.2 pkgsrc-2014Q4:1.2.0.50 pkgsrc-2014Q4-base:1.2 pkgsrc-2014Q3:1.2.0.48 pkgsrc-2014Q3-base:1.2 pkgsrc-2014Q2:1.2.0.46 pkgsrc-2014Q2-base:1.2 pkgsrc-2014Q1:1.2.0.44 pkgsrc-2014Q1-base:1.2 pkgsrc-2013Q4:1.2.0.42 pkgsrc-2013Q4-base:1.2 pkgsrc-2013Q3:1.2.0.40 pkgsrc-2013Q3-base:1.2 pkgsrc-2013Q2:1.2.0.38 pkgsrc-2013Q2-base:1.2 pkgsrc-2013Q1:1.2.0.36 pkgsrc-2013Q1-base:1.2 pkgsrc-2012Q4:1.2.0.34 pkgsrc-2012Q4-base:1.2 pkgsrc-2012Q3:1.2.0.32 pkgsrc-2012Q3-base:1.2 pkgsrc-2012Q2:1.2.0.30 pkgsrc-2012Q2-base:1.2 pkgsrc-2012Q1:1.2.0.28 pkgsrc-2012Q1-base:1.2 pkgsrc-2011Q4:1.2.0.26 pkgsrc-2011Q4-base:1.2 pkgsrc-2011Q3:1.2.0.24 pkgsrc-2011Q3-base:1.2 pkgsrc-2011Q2:1.2.0.22 pkgsrc-2011Q2-base:1.2 pkgsrc-2011Q1:1.2.0.20 pkgsrc-2011Q1-base:1.2 pkgsrc-2010Q4:1.2.0.18 pkgsrc-2010Q4-base:1.2 pkgsrc-2010Q3:1.2.0.16 pkgsrc-2010Q3-base:1.2 pkgsrc-2010Q2:1.2.0.14 pkgsrc-2010Q2-base:1.2 pkgsrc-2010Q1:1.2.0.12 pkgsrc-2010Q1-base:1.2 pkgsrc-2009Q4:1.2.0.10 pkgsrc-2009Q4-base:1.2 pkgsrc-2009Q3:1.2.0.8 pkgsrc-2009Q3-base:1.2 pkgsrc-2009Q2:1.2.0.6 pkgsrc-2009Q2-base:1.2 pkgsrc-2009Q1:1.2.0.4 pkgsrc-2009Q1-base:1.2 pkgsrc-2008Q4:1.2.0.2 pkgsrc-2008Q4-base:1.2 pkgsrc-2008Q3:1.1.0.34 pkgsrc-2008Q3-base:1.1 cube-native-xorg:1.1.0.32 cube-native-xorg-base:1.1 pkgsrc-2008Q2:1.1.0.30 pkgsrc-2008Q2-base:1.1 cwrapper:1.1.0.28 pkgsrc-2008Q1:1.1.0.26 pkgsrc-2008Q1-base:1.1 pkgsrc-2007Q4:1.1.0.24 pkgsrc-2007Q4-base:1.1 pkgsrc-2007Q3:1.1.0.22 pkgsrc-2007Q3-base:1.1 pkgsrc-2007Q2:1.1.0.20 pkgsrc-2007Q2-base:1.1 pkgsrc-2007Q1:1.1.0.18 pkgsrc-2007Q1-base:1.1 pkgsrc-2006Q4:1.1.0.16 pkgsrc-2006Q4-base:1.1 pkgsrc-2006Q3:1.1.0.14 pkgsrc-2006Q3-base:1.1 pkgsrc-2006Q2:1.1.0.12 pkgsrc-2006Q2-base:1.1 pkgsrc-2006Q1:1.1.0.10 pkgsrc-2006Q1-base:1.1 pkgsrc-2005Q4:1.1.0.8 pkgsrc-2005Q4-base:1.1 pkgsrc-2005Q3:1.1.0.6 pkgsrc-2005Q3-base:1.1 pkgsrc-2005Q2:1.1.0.4 pkgsrc-2005Q2-base:1.1 pkgsrc-2005Q1:1.1.0.2; locks; strict; comment @# @; 1.2 date 2008.11.21.10.38.19; author drochner; state Exp; branches; next 1.1; 1.1 date 2005.04.15.01.50.57; author rh; state Exp; branches 1.1.2.1; next ; 1.1.2.1 date 2005.04.15.01.50.57; author snj; state dead; branches; next 1.1.2.2; 1.1.2.2 date 2005.04.16.19.23.22; author snj; state Exp; branches; next ; desc @@ 1.2 log @fixa possible heap overflow due to wrong buffer length check (CVE-2008-5030), from Debian, bump PKGREVISION @ text @$NetBSD$ --- src/cddb.c.orig 2004-09-09 03:26:39.000000000 +0200 +++ src/cddb.c @@@@ -1052,7 +1052,7 @@@@ cddb_query(int cd_desc, int sock, } query->query_matches = 0; - while(!cddb_read_line(sock, inbuffer, 256)) { + while(query->query_matches < MAX_INEXACT_MATCHES && !cddb_read_line(sock, inbuffer, 256)) { slashed = 0; if(strchr(inbuffer, '/') != NULL && parse_disc_artist) { index = 0; @@@@ -1679,7 +1679,7 @@@@ cddb_read_disc_data(int cd_desc, struct free(file); while(!feof(cddb_data)) { - fgets(inbuffer, 512, cddb_data); + fgets(inbuffer, 256, cddb_data); cddb_process_line(inbuffer, data); } @ 1.1 log @Fix vulnerability pointed out in http://secunia.com/advisories/14877/ Bump PKGREVISION Update BUILDLINK_RECOMMENDED @ text @d3 1 a3 1 --- src/cddb.c.orig 2004-09-09 11:26:39.000000000 +1000 d14 9 @ 1.1.2.1 log @file patch-ac was added on branch pkgsrc-2005Q1 on 2005-04-15 01:50:57 +0000 @ text @d1 13 @ 1.1.2.2 log @Pullup ticket 447 - requested by Lubomir Sedlacik security fix for libcdaudio Revisions pulled up: - pkgsrc/audio/libcdaudio/Makefile 1.25 - pkgsrc/audio/libcdaudio/buildlink3.mk 1.3 - pkgsrc/audio/libcdaudio/distinfo 1.11 - pkgsrc/audio/libcdaudio/patches/patch-ac 1.1 Module Name: pkgsrc Committed By: rh Date: Fri Apr 15 01:50:57 UTC 2005 Modified Files: pkgsrc/audio/libcdaudio: Makefile buildlink3.mk distinfo Added Files: pkgsrc/audio/libcdaudio/patches: patch-ac Log Message: Fix vulnerability pointed out in http://secunia.com/advisories/14877/ Bump PKGREVISION Update BUILDLINK_RECOMMENDED @ text @a0 13 $NetBSD: patch-ac,v 1.1.2.1 2005/04/16 19:23:22 snj Exp $ --- src/cddb.c.orig 2004-09-09 11:26:39.000000000 +1000 +++ src/cddb.c @@@@ -1052,7 +1052,7 @@@@ cddb_query(int cd_desc, int sock, } query->query_matches = 0; - while(!cddb_read_line(sock, inbuffer, 256)) { + while(query->query_matches < MAX_INEXACT_MATCHES && !cddb_read_line(sock, inbuffer, 256)) { slashed = 0; if(strchr(inbuffer, '/') != NULL && parse_disc_artist) { index = 0; @