openembedded-core.git/meta/recipes-multimedia/gstreamer, branch dylan Mirror of openembedded-core gst-ffmpeg: fix CVE-2013-3674 2013-12-12T17:24:47+00:00 Ming Liu ming.liu@windriver.com 2013-11-21T07:05:05+00:00 23f323b80cbef122a4ed0897dfff54bb1b0b8ec0 The cdg_decode_frame function in cdgraphics.c in libavcodec in FFmpeg before 1.2.1 does not validate the presence of non-header data in a buffer, which allows remote attackers to cause a denial of service (out-of-bounds array access and application crash) via crafted CD Graphics Video data. http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-3674 (From OE-Core master rev: f1721553a873b242bc26ad3e4d618aea39dfd507) Signed-off-by: Ming Liu <ming.liu@windriver.com> Signed-off-by: Jeff Polk <jeff.polk@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Robert Yang <liezhi.yang@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> 
The cdg_decode_frame function in cdgraphics.c in libavcodec in FFmpeg before
1.2.1 does not validate the presence of non-header data in a buffer, which
allows remote attackers to cause a denial of service (out-of-bounds array
access and application crash) via crafted CD Graphics Video data.

http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-3674

(From OE-Core master rev: f1721553a873b242bc26ad3e4d618aea39dfd507)

Signed-off-by: Ming Liu <ming.liu@windriver.com>
Signed-off-by: Jeff Polk <jeff.polk@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
gst-plugins-good: add PACKAGECONFIG for jpeg, wavpack, gdkpixbuf, v4l, bzip2, orc 2013-08-16T09:39:49+00:00 Martin Jansa Martin.Jansa@gmail.com 2013-07-21T14:55:26+00:00 d53a78dda428e872d97da88b79454d86f172fd3d (From OE-Core master rev: eb3a2553ed3b627cb25001b552624690b4959069) Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Saul Wold <sgw@linux.intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> 
(From OE-Core master rev: eb3a2553ed3b627cb25001b552624690b4959069)

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Saul Wold <sgw@linux.intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
gst-plugins-bad: add few more PACKAGECONFIGs 2013-08-16T09:39:45+00:00 Martin Jansa Martin.Jansa@gmail.com 2013-07-13T15:32:02+00:00 f9441ae21de7955f222309d1cee2afbb6a2f8bbd (From OE-Core master rev: cdf6172830bf052ca3a53d439f05ee40574e3968) Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Saul Wold <sgw@linux.intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> 
(From OE-Core master rev: cdf6172830bf052ca3a53d439f05ee40574e3968)

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Saul Wold <sgw@linux.intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
gst-plugins-bad: element selection rationalisation 2013-08-16T09:39:45+00:00 Ross Burton ross.burton@intel.com 2013-06-24T10:26:28+00:00 4b2a41e8c28e4f05f1623d1d36eb4de26e1c7fa4 Using --with-plugins means you only get the elements you enable, so we were dropping vast numbers of useful plugins such as the MPEG muxers. Instead, follow gst-plugins-base by using PACKAGECONFIG to enable/disable plugins with optional dependencies. (From OE-Core master rev: 7722fd48995d5d430d58b94ecf69a6ad9f1c741b) Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Saul Wold <sgw@linux.intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> 
Using --with-plugins means you only get the elements you enable, so we were
dropping vast numbers of useful plugins such as the MPEG muxers.

Instead, follow gst-plugins-base by using PACKAGECONFIG to enable/disable
plugins with optional dependencies.

(From OE-Core master rev: 7722fd48995d5d430d58b94ecf69a6ad9f1c741b)

Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Saul Wold <sgw@linux.intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
gst-plugins-base: add missing dependency on glib-2.0-native 2013-08-16T09:39:43+00:00 Martin Jansa Martin.Jansa@gmail.com 2013-07-04T08:03:54+00:00 51f38d088107c28bca6604deb688b31b0799d09b * glib-genmarshal is needed during do_compile: | /bin/bash: line 1: glib-genmarshal: command not found (From OE-Core master rev: 50fdebe819e4d51bc8ba011a0d4a090a8ded64b8) Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Saul Wold <sgw@linux.intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> 
* glib-genmarshal is needed during do_compile:
  | /bin/bash: line 1: glib-genmarshal: command not found

(From OE-Core master rev: 50fdebe819e4d51bc8ba011a0d4a090a8ded64b8)

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Saul Wold <sgw@linux.intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
gst-plugins-bad: inherit gsettings 2013-08-16T09:39:42+00:00 Martin Jansa Martin.Jansa@gmail.com 2013-07-04T08:01:24+00:00 9ad60f1b5ecbe716f14e7d43b16c532383c8a8f8 * do_configure fails without native glib-compile-schemas: | checking for glib-compile-schemas... no | configure: error: glib-compile-schemas not found. (From OE-Core master rev: c8ba0ab9ba2a13eab3fdc6aed148c5ee3b53e253) Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Saul Wold <sgw@linux.intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> 
* do_configure fails without native glib-compile-schemas:
  | checking for glib-compile-schemas... no
  | configure: error: glib-compile-schemas not found.

(From OE-Core master rev: c8ba0ab9ba2a13eab3fdc6aed148c5ee3b53e253)

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Saul Wold <sgw@linux.intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
gst-plugins-gl: add explicit dependency on libpng 2013-08-16T09:39:42+00:00 Eric Nelson eric.nelson@boundarydevices.com 2013-07-30T21:01:07+00:00 ae8f56fbc6f40a42c357f95611b4dad04025e786 (From OE-Core master rev: 2cd01fdc26ee4f444635ad8e9d3956b9e764dc82) Signed-off-by: Eric Nelson <eric.nelson@boundarydevices.com> Signed-off-by: Saul Wold <sgw@linux.intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> 
(From OE-Core master rev: 2cd01fdc26ee4f444635ad8e9d3956b9e764dc82)

Signed-off-by: Eric Nelson <eric.nelson@boundarydevices.com>
Signed-off-by: Saul Wold <sgw@linux.intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
gst-plugins-ugly: add PACKAGECONFIG for x264, cdio, dvdread 2013-07-29T08:24:55+00:00 Martin Jansa Martin.Jansa@gmail.com 2013-07-11T20:27:43+00:00 93e147d0c0d52d349fd644f45831a961a3551d4b * they are autodetected from sysroot (From OE-Core master rev: b253bbe742c016a07b67cfaa65b28895118c5bd8) Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Saul Wold <sgw@linux.intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> 
* they are autodetected from sysroot

(From OE-Core master rev: b253bbe742c016a07b67cfaa65b28895118c5bd8)

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Saul Wold <sgw@linux.intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
gst-plugins-good: add PACKAGECONFIG for jack 2013-07-29T08:24:55+00:00 Martin Jansa Martin.Jansa@gmail.com 2013-07-11T20:24:08+00:00 e17f49ddcdbcf3fc4f6c974488a104c2cdcf8f8c * jack is autodetected from sysroot (From OE-Core master rev: 00872ded9e4f492f146175be41435902aaf45ad7) Signed-off-by: Saul Wold <sgw@linux.intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> 
* jack is autodetected from sysroot

(From OE-Core master rev: 00872ded9e4f492f146175be41435902aaf45ad7)

Signed-off-by: Saul Wold <sgw@linux.intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
gst-plugins-bad: tremor was moved from here to -base 2013-07-08T09:30:21+00:00 Ross Burton ross.burton@intel.com 2013-06-24T10:26:26+00:00 837078125286eb15965a2407e9633e4f4f67868d (From OE-Core master rev: 6e149551a36825ac5e25b14dbaa62b794154c11d) Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Saul Wold <sgw@linux.intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> 
(From OE-Core master rev: 6e149551a36825ac5e25b14dbaa62b794154c11d)

Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Saul Wold <sgw@linux.intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>