head	1.2;
access;
symbols
	pkgsrc-2013Q2:1.2.0.10
	pkgsrc-2013Q2-base:1.2
	pkgsrc-2012Q4:1.2.0.8
	pkgsrc-2012Q4-base:1.2
	pkgsrc-2011Q4:1.2.0.6
	pkgsrc-2011Q4-base:1.2
	pkgsrc-2011Q2:1.2.0.4
	pkgsrc-2011Q2-base:1.2
	pkgsrc-2009Q4:1.2.0.2
	pkgsrc-2009Q4-base:1.2;
locks; strict;
comment	@# @;


1.2
date	2009.03.05.22.46.24;	author snj;	state dead;
branches;
next	1.1;

1.1
date	2009.02.11.12.42.59;	author drochner;	state Exp;
branches;
next	;


desc
@@


1.2
log
@Say goodbye to gstreamer-0.8 and its friends.
@
text
@$NetBSD: patch-am,v 1.1 2009/02/11 12:42:59 drochner Exp $

--- gst/qtdemux/qtdemux.c.orig	2005-08-29 13:50:51.000000000 +0200
+++ gst/qtdemux/qtdemux.c
@@@@ -2360,7 +2360,7 @@@@ qtdemux_parse_trak (GstQTDemux * qtdemux
     n_sample_times = QTDEMUX_GUINT32_GET (stts->data + 12);
     timestamp = 0;
     index = 0;
-    for (i = 0; i < n_sample_times; i++) {
+    for (i = 0; (i < n_sample_times) && (index < n_samples); i++) {
       int n;
       int duration;
       guint64 time;
@@@@ -2368,7 +2368,7 @@@@ qtdemux_parse_trak (GstQTDemux * qtdemux
       n = QTDEMUX_GUINT32_GET (stts->data + 16 + 8 * i);
       duration = QTDEMUX_GUINT32_GET (stts->data + 16 + 8 * i + 4);
       time = (GST_SECOND * duration) / stream->timescale;
-      for (j = 0; j < n; j++) {
+      for (j = 0; (j < n) && (index < n_samples); j++) {
         //GST_INFO("moo %lld", timestamp);
         samples[index].timestamp = timestamp;
         samples[index].duration = time;
@


1.1
log
@old gstreamer0.8 is also affected by the qt demux security problem
recently fixed in 0.10 (known as CVE-2009-0398 now), so add
the applicable part of the upstream patch and bump PKGREVISION
(this has reached the end of its useful life anyway, it is only
used by "tunesbrowser" and as non-default option in KDE3)
@
text
@d1 1
a1 1
$NetBSD$
@