Fix a stack overflow vulnerability while parsing malformed cue files.
The vulnerability may be exploited by a (remote) attacker to execute
arbitrary code in the context of VLC media player.
PR: 128656
Submitted by: "Joseph S. Atkinson" <jsa@wickedmachine.net> (maintainer)
Security: http://www.vuxml.org/freebsd/4b09378e-addb-11dd-a578-0030843d3802.html
Reported by: many
Note: Only difference is every locale has
-"POT-Creation-Date: 2005-05-17 22:58+0200\n"
+"POT-Creation-Date: 2005-05-17 14:36+0200\n"
- Use OPTIONS
- Install .desktop file and icon in share/applications and
share/pixmaps instead of share/gnome/
- Changed Knobs
WITHOUT_FAAD --> WITH_FAAD (disabled by default)
WITH_LAME --> WITHOUT_LAME (enabled by default, disabled for package building) WITHOUT_SDL --> WITH_SDL (disabled by default)
WITHOUT_TRANSCODE --> WITH_TRANSCODE (disabled by default)
WITHOUT_DVD removed.
- New knobs
WITH_CORBA -- Corba interface via orbit2
WITH_DAAP -- iTunes(R) music shares
WITHOUT_DVDNAV -- DVD (dvd menus) support
WITH_DVDREAD -- Regular DVD support (non-menu)
WITH_DIRAC -- diace general-purpose video codec
WITHOUT_OGG -- OGG audio decoder
WITH_SMB -- Samba access module
WITH_TWOLAME -- Mpeg layer 2 audio Support
NOTE: WITH_ knobs are disabled by default.
WITHOUT_ knobs are enabled by default.
NOTE2: It is recommended that you use multimedia/ffmpeg-devel
instead of multimedia/ffmpeg if you want to use any of
ffmpeg's postprocess features.
PR: ports/80963 [1]
Repocopied by: marcus [1]
- Default X11 interface is now WxWindows (gtk2.0 version)
- Removed Gtk 1.2 & Gnome 1.4 support. (depreciated to wxgtk)
- Removed WITH_AUTODETECT, vlc is very modular at runtime
- Add skins2 interface (similar to xmms)
- Merge mad and id3lib support (can be disabled with WITHOUT_MAD)
- Added support for a mozilla plugin
Lots of stuff obtained from ports/www/mplayer-plugin
and some help from marcus
- Auto-generated pkg-plist (make life EASY :) )
- s/Linux/FreeBSD/ through out the program.
- Statically link to libavcodec/libavformat from vlc's supported
ffmpeg snapshot for greater performance.
- Knob Changes or New Knobs:
WITHOUT_FAAD (Enabled default)
WITHOUT_FLAC (Enabled default)
WITHOUT_DTS (Enabled default)
WITHOUT_DVD (Enabled default)
WITHOUT_CDROM (Enabled default, this is vcd & cddb support)
WITHOUT_LAME (Enabled default)
WITHOUT_MAD (Enabled default)
WITHOUT_HTTPD (Enabled default)
WITHOUT_VORBIS (Enabled default)
WITHOUT_LIBMATROSKA (Enabled default)
WITHOUT_LIVEMEDIA (Enabled default)
WITHOUT_SDL (Enabled default)
WITHOUT_SLP (Enabled default)
WITHOUT_LIBMPEG2 (Enabled default)
WITH_MOZILLA_PLUGIN (Disabled default, defaults to www/mozilla if defined)
[mozilla|mozilla-devel|firefox]
WITH_ARTS (Disabled default)
WITH_TOOLAME (Disabled default)
WITH_LIBCACA (Disabled default)
WITH_LIBTREMOR (Disabled default)
WITH_LIBTHEORA (Disabled defalut)
WITH_OPENGL (Disabled default)
WITH_SSL (Disabled default)
WITH_SVG (Disabled default)
WITH_SKINS (Disabled default)
DEBUG (Disabled default)
Note: WITH_ Knobs are disabled default unless auto-detected
WITHOUT_ Knobs are enabled default unless defined
Please read the first section of ports/multimedia/Makefile before building
to tune VLC towards your personal preferences.
ffmpeg-patch partly obtained from gentoo
Changelog: http://developers.videolan.org/vlc/NEWS
Approved by: pav (co mentor)
-------------------------------------------------------------
- add patches to not expect postprocessing in ffmpeg, our ffmpeg don't
have postprocessing built in
- use gtk2 variant of wxWindows
PR: 58969
Submitted by: Pav Lucistnik
This version uses graphics/libdvdread rather than insisting on using the
internal libdvdread as previous versions did.
Mostly submitted by: Scott Lambert <lambert@lambertfam.org>