Re: [BLFS Trac] #23198: mpg123-1.33.5

#23198: mpg123-1.33.5
-------------------------+-------------------------
 Reporter:  Bruce Dubbs  |       Owner:  Joe Locash
     Type:  enhancement  |      Status:  closed
 Priority:  normal       |   Milestone:  13.1
Component:  BOOK         |     Version:  git
 Severity:  normal       |  Resolution:  fixed
 Keywords:               |
-------------------------+-------------------------
Changes (by Joe Locash):

 * resolution:   => fixed
 * status:  assigned => closed

Comment:

 {{{
 1.33.5
 ------
 - mpg123: Fix generic control mode for largefile-sensitive builds, where
 32 bit
   off_t was used with mpg123 API calls expecting 64 bit off_t.
   I am appalled that it took a user on 32 bit ARM and a specific https
 stream
   to notice this (bug 385, regression since 1.32.0).
   The security impact of this could be serious, with memory corruption
 including
   segfault being observed.
 - mpg123-id3dump, out123: Enable 64 bit offset usage on largefile-
 sensitive
   platforms (regression since 1.32.0).
 - libmpg123:
 -- Announce support for shadow stack / IBT in x86-64 assembly.
 -- Also announce PAC/BTI for non-accurate neon64 (aarch64) synth.
 - libout123: Add a safeguard to ensure variable-length records from buffer
   communication are always zero-terminated.
 - libsyn123: Use union work buffer to avoid casts that may look like
 breaking
   strict aliasing.
 }}}
 Fixed at 7ea4df919a.
-- 
Ticket URL: <https://wiki.linuxfromscratch.org/blfs/ticket/23198#comment:2>
BLFS Trac <https://wiki.linuxfromscratch.org/blfs/>
Beyond Linux From Scratch

-- 
http://lists.linuxfromscratch.org/sympa/info/blfs-book
Unsubscribe: See the above information page