CVS log for pkgsrc/audio/libvorbis/Makefile

Up to [NetBSD + pkgsrc-wip] / pkgsrc / audio / libvorbis

Request diff between arbitrary revisions - Display revisions graphically

Keyword substitution: kv
Default branch: MAIN

Reset maintainer, do not use it much any longer.

update to 1.3.3
integrates the fix for CVE-2012-0444

Pullup ticket #3684 - requested by drochner
audio/libvorbis: security patch

Revisions pulled up:
- audio/libvorbis/Makefile                                      1.52
- audio/libvorbis/distinfo                                      1.21
- audio/libvorbis/patches/patch-CVE-2012-0444                   1.1

---
   Module Name:    pkgsrc
   Committed By:   drochner
   Date:           Fri Feb 17 12:23:24 UTC 2012

   Modified Files:
           pkgsrc/audio/libvorbis: Makefile distinfo
   Added Files:
           pkgsrc/audio/libvorbis/patches: patch-CVE-2012-0444

   Log Message:
   add patch from upstream to fix possible memory corruption by
   malicious Ogg Vorbis files
   bump PKGREV

add patch from upstream to fix possible memory corruption by
malicious Ogg Vorbis files
bump PKGREV

Changes 1.3.2:
* vorbis: additional proofing against invalid/malicious
  streams in floor, residue, and bos/eos packet trimming
  code (see SVN for details).
* vorbis: Added programming documentation tree for the
  low-level calls
* vorbisfile: Correct handling of serial numbers array
  element [0] on non-seekable streams
* vorbisenc: Back out an [old] AoTuV HF weighting that was
  first enabled in 1.3.0; there are a few samples where I
  really don't like the effect it causes.
* vorbis: return correct timestamp for granule positions
  with high bit set.
* vorbisfile: the [undocumented] half-rate decode api made no
  attempt to keep the pcm offset tracking consistent in seeks.
  Fix and add a testing mode to seeking_example.c to torture
  test seeking in halfrate mode.  Also remove requirement that
  halfrate mode only work with seekable files.
* vorbisfile:  Fix a chaining bug in raw_seeks where seeking
  out of the current link would fail due to not
  reinitializing the decode machinery.
* vorbisfile: improve seeking strategy. Reduces the
  necessary number of seek callbacks in an open or seek
  operation by well over 2/3.

Update to 1.3.1:

libvorbis 1.3.1 (2010-02-26) -- "Xiph.Org libVorbis I 20100325 (Everywhere)"

 * tweak + minor arithmetic fix in floor1 fit
 * revert noise norm to conservative 1.2.3 behavior pending
   more listening testing

libvorbis 1.3.0 (2010-02-25) -- unreleased staging snapshot

 * Optimized surround support for 5.1 encoding at 44.1/48kHz
 * Added encoder control call to disable channel coupling
 * Correct an overflow bug in very low-bitrate encoding on 32 bit
   machines that caused inflated bitrates
 * Numerous API hardening, leak and build fixes
 * Correct bug in 22kHz compand setup that could cause a crash
 * Correct bug in 16kHz codebooks that could cause unstable pure
   tones at high bitrates

Pullup ticket #2943 - requested by wiz
libvorbis: security patch

Revisions pulled up:
- audio/libvorbis/Makefile			1.49
- audio/libvorbis/distinfo			1.18
- audio/libvorbis/patches/patch-aa		1.5
- audio/libvorbis/patches/patch-ab		1.5
---
Module Name:	pkgsrc
Committed By:	wiz
Date:		Wed Dec  2 12:41:25 UTC 2009

Modified Files:
	pkgsrc/audio/libvorbis: Makefile distinfo
Added Files:
	pkgsrc/audio/libvorbis/patches: patch-aa patch-ab

Log Message:
Apply some possible security fixes from upstream SVN.
Glanced from links in mozilla advisory
http://www.mozilla.org/security/announce/2009/mfsa2009-63.html
and Fedora Core patches for 1.2.0.

Bump PKGREVISION.

Apply some possible security fixes from upstream SVN.
Glanced from links in mozilla advisory
http://www.mozilla.org/security/announce/2009/mfsa2009-63.html
and Fedora Core patches for 1.2.0.

Bump PKGREVISION.

Pullup ticket #2871 - requested by wiz
libvorbis: security update

Revisions pulled up:
- audio/libvorbis/Makefile			1.48
- audio/libvorbis/PLIST				1.10
- audio/libvorbis/distinfo			1.17
- audio/libvorbis/patches/patch-aa		delete
- audio/libvorbis/patches/patch-ab		delete
- audio/libvorbis/patches/patch-ac		delete
- audio/libvorbis/patches/patch-ad		delete
---
Module Name:	pkgsrc
Committed By:	wiz
Date:		Fri Jul 17 20:28:21 UTC 2009

Modified Files:
	pkgsrc/audio/libvorbis: Makefile PLIST distinfo
Removed Files:
	pkgsrc/audio/libvorbis/patches: patch-aa patch-ab patch-ac patch-ad

Log Message:
Update to 1.2.3. Set LICENSE.
Two of the patches were from upstream CVS, the other two are not needed
any longer because the configure script was improved.

libvorbis 1.2.3 (2009-07-09) -- "Xiph.Org libVorbis I 20090709"

 * correct a vorbisfile bug that prevented proper playback of
   Vorbis files where all audio in a logical stream is in a
   single page
 * Additional decode setup hardening against malicious streams
 * Add 'OV_EXCLUDE_STATIC_CALLBACKS' define for developers who
   wish to avoid avoid unused symbol warnings from the static
   callbacks defined in vorbisfile.h

libvorbis 1.2.2 (2009-06-24) -- "Xiph.Org libVorbis I 20090624"

 * define VENDOR and ENCODER strings
 * seek correctly in files bigger than 2 GB (Windows)
 * fix regression from CVE-2008-1420; 1.0b1 files work again
 * mark all tables as constant to reduce memory occupation
 * additional decoder hardening against malicious streams
 * substantially reduce amount of seeking performed by Vorbisfile
 * Multichannel decode bugfix
 * build system updates
 * minor specification clarifications/fixes

libvorbis 1.2.1 (unreleased) -- "Xiph.Org libVorbis I 20080501"

 * Improved robustness with corrupt streams.
 * New ov_read_filter() vorbisfile call allows filtering decoded
   audio as floats before converting to integer samples.
 * Fix an encoder bug with multichannel streams.
 * Replaced RTP payload format draft with RFC 5215.
 * Bare bones self test under 'make check'.
 * Fix a problem encoding some streams between 14 and 28 kHz.
 * Fix a numerical instability in the edge extrapolation filter.
 * Build system improvements.
 * Specification correction.

Update to 1.2.3. Set LICENSE.
Two of the patches were from upstream CVS, the other two are not needed
any longer because the configure script was improved.

libvorbis 1.2.3 (2009-07-09) -- "Xiph.Org libVorbis I 20090709"

 * correct a vorbisfile bug that prevented proper playback of
   Vorbis files where all audio in a logical stream is in a
   single page
 * Additional decode setup hardening against malicious streams
 * Add 'OV_EXCLUDE_STATIC_CALLBACKS' define for developers who
   wish to avoid avoid unused symbol warnings from the static
   callbacks defined in vorbisfile.h

libvorbis 1.2.2 (2009-06-24) -- "Xiph.Org libVorbis I 20090624"

 * define VENDOR and ENCODER strings
 * seek correctly in files bigger than 2 GB (Windows)
 * fix regression from CVE-2008-1420; 1.0b1 files work again
 * mark all tables as constant to reduce memory occupation
 * additional decoder hardening against malicious streams
 * substantially reduce amount of seeking performed by Vorbisfile
 * Multichannel decode bugfix
 * build system updates
 * minor specification clarifications/fixes

libvorbis 1.2.1 (unreleased) -- "Xiph.Org libVorbis I 20080501"

 * Improved robustness with corrupt streams.
 * New ov_read_filter() vorbisfile call allows filtering decoded
   audio as floats before converting to integer samples.
 * Fix an encoder bug with multichannel streams.
 * Replaced RTP payload format draft with RFC 5215.
 * Bare bones self test under 'make check'.
 * Fix a problem encoding some streams between 14 and 28 kHz.
 * Fix a numerical instability in the edge extrapolation filter.
 * Build system improvements.
 * Specification correction.

Pullup ticket 2393 - requested by drochner
security fixes for libvorbis

- pkgsrc/audio/libvorbis/Makefile			1.47
- pkgsrc/audio/libvorbis/distinfo			1.15
- pkgsrc/audio/libvorbis/patches/patch-aa		1.3
- pkgsrc/audio/libvorbis/patches/patch-ab		1.3

   Module Name:    pkgsrc
   Committed By:   drochner
   Date:           Wed May 14 16:36:18 UTC 2008

   Modified Files:
           pkgsrc/audio/libvorbis: Makefile distinfo
   Added Files:
           pkgsrc/audio/libvorbis/patches: patch-aa patch-ab

   Log Message:
   pull some patches from upstream CVS to fix integer overflows /
   buffer overflows (CVE-2008-1419, CVE-2008-1420, CVE-2008-1423),
   bump PKGREVISION

pull some patches from upstream CVS to fix integer overflows /
buffer overflows (CVE-2008-1419, CVE-2008-1420, CVE-2008-1423),
bump PKGREVISION

Update to 1.2.0:

libvorbis 1.2.0 (2007-07-25) -- "Xiph.Org libVorbis I 20070622"

 * new ov_fopen() convenience call that avoids the common
   stdio conflicts with ov_open() and MSVC runtimes.
 * libvorbisfile now handles multiplexed streams
 * improve robustness to corrupt input streams
 * fix a minor encoder bug
 * updated RTP draft
 * build system updates
 * minor corrections to the specification

DESTDIR support.

Update MASTER_SITES and HOMEPAGE, from Sergey Svishchev.

Take maintainership.

Reset MAINTAINER; I don't have the time nor inclination to maintain
these any more.

Update to 1.1.2:

libvorbis 1.1.2 (2005-11-27) -- "Xiph.Org libVorbis I 20050304"

 * fix a serious encoder bug with gcc 4 optimized builds
 * documentation and spec fixes
 * updated VS2003 and XCode builds
 * new draft RTP encapsulation spec

Fixed pkglint warnings. The warnings are mostly quoting issues, for
example MAKE_ENV+=FOO=${BAR} is changed to MAKE_ENV+=FOO=${BAR:Q}. Some
other changes are outlined in

    http://mail-index.netbsd.org/tech-pkg/2005/12/02/0034.html

Update to 1.1.1.
This releases includes some bug and documentation fixes, but no new
encoder modes.

Pullup ticket 710 - requested by Grant Beattie
portability PKGREVISION bump for libvorbis

Revisions pulled up:
- pkgsrc/audio/libvorbis/Makefile		1.38

   Module Name:		pkgsrc
   Committed By:	grant
   Date:		Sat Aug 20 11:36:05 UTC 2005

   Modified Files:
   	pkgsrc/audio/libvorbis: Makefile

   Log Message:
   bump PKGREVISION for wrapper -fast -xnolibmopt fix. this was the only
   package which used -fast which was actually building.

bump PKGREVISION for wrapper -fast -xnolibmopt fix. this was the only
package which used -fast which was actually building.

Remove USE_BUILDLINK3 and NO_BUILDLINK; these are no longer used.

Libtool fix for PR pkg/26633, and other issues.  Update libtool to 1.5.10
in the process.  (More information on tech-pkg.)

Bump PKGREVISION and BUILDLINK_DEPENDS of all packages using libtool and
installing .la files.

Bump PKGREVISION (only) of all packages depending directly on the above
via a buildlink3 include.

Update to 1.1.0:
libvorbis 1.1.0 (2004-09-22) -- "Xiph.Org libVorbis I 20040629"

* merges tuning improvements from Aoyumi's aoTuV with fixups
* new managed bitrate (CBR) mode support
* new vorbis_encoder_ctl() interface
* extensive documentation updates
* application/ogg mimetype is now official
* autotools cleanup from Thomas Vander Stichele
* SymbianOS build support from Colin Ward at CSIRO
* various bugfixes
* various packaging improvements

Package change:
install documentation in share/doc instead of share/doc/html.

Enable pkgviews installation.  Patches provided by Joachim Kuebart on
tech-pkg@.

Follow libogg into multimedia/.

Fix build with gcc2 on sparc64.

bl3ify

PKGCONFIG_OVERRIDE is relative to WRKSRC.

LIBTOOL_OVERRIDE and SHLIBTOOL_OVERRIDE are now lists of shell globs
relative to ${WRKSRC}.  Remove redundant LIBTOOL_OVERRIDE settings that
are automatically handled by the default setting in bsd.pkg.mk.

In the new compiler selection framework, GCC_REQD is appended to, not
overridden.

Update to 1.0.1:
    * Corrects errors in the Vorbis specification documentation.
    * Specification converted to DocBook format.
    * Added timebase conversion call to libvorbis.
    * Fixes ov_time_tell() bug for non-seekable streams.
    * Various decoding fixes.
    * Addition of ov_crosslap() which allows smooth transitions between
      two vorbis segments.
    * Numerous seeking fixes and optimizations.
    * Fixed bugs affecting decode of one-audio-page samples.
    * Added ov_halfrate() which allows a "free" conversion from the
      source sample rate to half of the source rate.
    * Improved handling of quiet signals in low bitrate modes

set GCC_REQD=2.95.3. noted by seb.

don't include mk/compiler.mk, it isn't necessary and breaks things.

gcc.buildlink2.mk is no more. So, include compiler.mk instead.

s/netbsd.org/NetBSD.org/

Use mk/gcc.buildlink2.mk rather than gcc/buildlink2.mk so lang/gcc3
is accepted. Suggested by Grant.

Remove commented out BUILD_DEPENDS.

Use gcc/buildlink2.mk instead of Makefile.gcc.

Merge changes in packages from the buildlink2 branch that have
buildlink2.mk files back into the main trunk.  This provides sufficient
buildlink2 infrastructure to start merging other packages from the
buildlink2 branch that have already been converted to use the buildlink2
framework.

Merge changes from pkgsrc-current into the buildlink2 branch for the
packages that have buildlink2.mk files.

Update to libvorbis 1.0.

Rename USE_BUILDLINK2_ONLY to USE_BUILDLINK2 for less verbosity.  Also
convert a few more packages to use the buildlink2 framework.

* Convert some more packages to use the buildlink2 framework.
* Re-add EVAL_PREFIX lines that I shouldn't have removed from the
  buildlink2.mk files.
* Add several more new buildlink2.mk files to facilitate converting more
  packages.

This pkg doesn't need automake to build.

Add a comment why the "gcc" package is used on system with "egcs" in the
base system.

Build package with "gcc" package systems with "egcs" in base distribution
instead of bailing out.

Update from 1.0.0.6 (1.0 rc2) to 1.0.0.7 (1.0 rc3).
No real notable changes.

don't compile these packages if egcs is the compiler, as it generates
bad ogg files.

Fix audio/libvorbis to work on 1.5 arm32 platforms - avoid optimisation when
compiling floor1.c

A dependency on automake implies a dependency on autoconf; there's no need
to list them both when we listing just automake will do.

Workaround a bug in the configure script where the prefix used to search
for the Ogg headers and libraries is missing when it's not supplied to the
configure script.

Use wildcard dependence on "autoconf" package.

Update automake to 1.4-p5 (1.5 is available)

Include a bugfix for lisp_LISP independently discovered by me that has
been pulled up to the automake-1-4 branch of automake cvs.

Changes are:
New in 1.4-p5:
* Allow AM_PROG_LIBTOOL again.
* Diagnose AC_CONFIG_HEADERS the same as AC_CONFIG_HEADER.
* Display distributed file list correctly in usage message.
* Allow numbers in macro names.
* Bugfixes.

New in 1.4-p4:
* Deal with configure.ac as well as configure.in -- this time for real!
* The version numbering system now allows three point version numbers,
  such as 1.4.4, without thinking they are alpha release numbers.

New in 1.4-p3:
* Deal with configure.ac as well as configure.in.
* Don't complain if `version.texi' is included in multiple places.

New in 1.4-p2:
* Deal with AC_CONFIG_FILES from autoconf-2.50.
* Improvements to f77 support.
* DESTDIR now works for script targets.
* distcheck-hook works correctly.

New in 1.4-p1:
* The version numbering system now allows fork identifiers (such as
  the p1 in this version of automake).
* Cope gracefully with various versions of libtool which may or may not
  require ltconfig, ltcf-c.sh, ltcf-cxx.sh or ltcf-gcj.sh.
* Bugfixes.

update from libvorbis-1.0rc1 to libvorbis-1.0rc2.

changes:
* Powerful channel coupling system takes advantage of similarities between
  channels to reduce bitrate.
* Additional encoding modes give more flexibility in bitrate selection.
  64,80,96,128,160,192,256,350 stereo; 32,48,64,80,112,140 mono modes.
* Only 44.1KHz/48KHz is officially supported in this release. Lower
  sample rates will work, but with much lower quality.
* Cascaded encoding makes libvorbis ready for future bitrate reduction tools.
* Decode engine bugfix ensures better compatibility with future Vorbis codecs.

update libvorbis from 1.0beta4 -> 1.0rc1, including removing a bunch
of patches which are now in the mainline code

o convert to use buildlink.mk
o add buildlink.mk for use by other packages

Update package list for changed version number.

Make dewey in PKGNAME sane, and update dependencies.

Add missing build dependences on "autoconf" and "automake".

Initial import of libvorbis, the library for the ogg vorbis audio
encoding format.
Package by Jeremy C. Reed, submitted in pkg/12414.

Initial revision