Patches should fix all CVEs reported by `guix lint`: CVE-2015-7747; CVE-2017-6827, CVE-2017-6828, CVE-2017-6829, CVE-2017-6830, CVE-2017-6831, CVE-2017-6832, CVE-2017-6833, CVE-2017-6834, CVE-2017-6835, CVE-2017-6836, CVE-2017-6837, CVE-2017-6838, CVE-2017-6839; CVE-2018-13440; CVE-2018-17095 Since the patches do not reference to CVEs, it's a bit hard to tell which patch actually closes which CVE. Debian reports all these to be closed by the patches below and NixPkgs provides references. * gnu/packages/audio.scm (audiofile): New variable. * gnu/packages/patches/audiofile-fix-datatypes-in-tests.patch, gnu/packages/patches/audiofile-fix-sign-conversion.patch, gnu/packages/patches/audiofile-CVE-2015-7747.patch, gnu/packages/patches/audiofile-CVE-2018-13440.patch, gnu/packages/patches/audiofile-CVE-2018-17095.patch, gnu/packages/patches/audiofile-Check-the-number-of-coefficients.patch, gnu/packages/patches/audiofile-Fail-on-error-in-parseFormat.patch, gnu/packages/patches/audiofile-Fix-index-overflow-in-IMA.cpp.patch, gnu/packages/patches/audiofile-Fix-multiply-overflow-sfconvert.patch, gnu/packages/patches/audiofile-Fix-overflow-in-MSADPCM-decodeSam.patch, gnu/packages/patches/audiofile-division-by-zero-BlockCodec-runPull.patch, gnu/packages/patches/audiofile-hurd.patch, gnu/packages/patches/audiofile-signature-of-multiplyCheckOverflow.patch: New files. * gnu/local.mk: Add them.
		
			
				
	
	
		
			26 lines
		
	
	
	
		
			845 B
		
	
	
	
		
			Diff
		
	
	
	
	
	
			
		
		
	
	
			26 lines
		
	
	
	
		
			845 B
		
	
	
	
		
			Diff
		
	
	
	
	
	
From 822b732fd31ffcb78f6920001e9b1fbd815fa712 Mon Sep 17 00:00:00 2001
 | 
						|
From: Wim Taymans <wtaymans@redhat.com>
 | 
						|
Date: Thu, 27 Sep 2018 12:11:12 +0200
 | 
						|
Subject: [PATCH] SimpleModule: set output chunk framecount after pull
 | 
						|
 | 
						|
After pulling the data, set the output chunk to the amount of
 | 
						|
frames we pulled so that the next module in the chain has the correct
 | 
						|
frame count.
 | 
						|
 | 
						|
Fixes #50 and #51
 | 
						|
---
 | 
						|
 libaudiofile/modules/SimpleModule.cpp | 1 +
 | 
						|
 1 file changed, 1 insertion(+)
 | 
						|
 | 
						|
diff --git a/libaudiofile/modules/SimpleModule.cpp b/libaudiofile/modules/SimpleModule.cpp
 | 
						|
index 2bae1eb..e87932c 100644
 | 
						|
--- a/libaudiofile/modules/SimpleModule.cpp
 | 
						|
+++ b/libaudiofile/modules/SimpleModule.cpp
 | 
						|
@@ -26,6 +26,7 @@
 | 
						|
 void SimpleModule::runPull()
 | 
						|
 {
 | 
						|
 	pull(m_outChunk->frameCount);
 | 
						|
+	m_outChunk->frameCount = m_inChunk->frameCount;
 | 
						|
 	run(*m_inChunk, *m_outChunk);
 | 
						|
 }
 | 
						|
 
 |