package/faad2: add upstream security fixes
authorBaruch Siach <baruch@tkos.co.il>
Mon, 1 Jul 2019 12:43:26 +0000 (15:43 +0300)
committerArnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
Wed, 3 Jul 2019 22:02:46 +0000 (00:02 +0200)
commit7f4dde33185f820fa37195cc9ab3bc0f4e45b9af
tree7ba00de88605bad8feea76fa274d10a6efedd6ba
parent946901317cc6442886e789c173c781e40f319e2b
package/faad2: add upstream security fixes

CVE-2018-20194: Stack buffer overflow on invalid input

CVE-2018-20362: Null pointer dereference when processing crafted AAC
input

Add two more crash fixes from upstream.

Signed-off-by: Baruch Siach <baruch@tkos.co.il>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
package/faad2/0001-syntax.c-check-for-syntax-element-inconsistencies.patch [new file with mode: 0644]
package/faad2/0002-sbr_hfadj-sanitize-frequency-band-borders.patch [new file with mode: 0644]
package/faad2/0003-Fix-a-couple-buffer-overflows.patch [new file with mode: 0644]
package/faad2/0004-add-patch-to-prevent-crash-on-SCE-followed-by-CPE.patch [new file with mode: 0644]