head 1.2; access; symbols pkgsrc-2026Q2:1.1.0.70 pkgsrc-2026Q2-base:1.1 pkgsrc-2026Q1:1.1.0.68 pkgsrc-2026Q1-base:1.1 pkgsrc-2025Q4:1.1.0.66 pkgsrc-2025Q4-base:1.1 pkgsrc-2025Q3:1.1.0.64 pkgsrc-2025Q3-base:1.1 pkgsrc-2025Q2:1.1.0.62 pkgsrc-2025Q2-base:1.1 pkgsrc-2025Q1:1.1.0.60 pkgsrc-2025Q1-base:1.1 pkgsrc-2024Q4:1.1.0.58 pkgsrc-2024Q4-base:1.1 pkgsrc-2024Q3:1.1.0.56 pkgsrc-2024Q3-base:1.1 pkgsrc-2024Q2:1.1.0.54 pkgsrc-2024Q2-base:1.1 pkgsrc-2024Q1:1.1.0.52 pkgsrc-2024Q1-base:1.1 pkgsrc-2023Q4:1.1.0.50 pkgsrc-2023Q4-base:1.1 pkgsrc-2023Q3:1.1.0.48 pkgsrc-2023Q3-base:1.1 pkgsrc-2023Q2:1.1.0.46 pkgsrc-2023Q2-base:1.1 pkgsrc-2023Q1:1.1.0.44 pkgsrc-2023Q1-base:1.1 pkgsrc-2022Q4:1.1.0.42 pkgsrc-2022Q4-base:1.1 pkgsrc-2022Q3:1.1.0.40 pkgsrc-2022Q3-base:1.1 pkgsrc-2022Q2:1.1.0.38 pkgsrc-2022Q2-base:1.1 pkgsrc-2022Q1:1.1.0.36 pkgsrc-2022Q1-base:1.1 pkgsrc-2021Q4:1.1.0.34 pkgsrc-2021Q4-base:1.1 pkgsrc-2021Q3:1.1.0.32 pkgsrc-2021Q3-base:1.1 pkgsrc-2021Q2:1.1.0.30 pkgsrc-2021Q2-base:1.1 pkgsrc-2021Q1:1.1.0.28 pkgsrc-2021Q1-base:1.1 pkgsrc-2020Q4:1.1.0.26 pkgsrc-2020Q4-base:1.1 pkgsrc-2020Q3:1.1.0.24 pkgsrc-2020Q3-base:1.1 pkgsrc-2020Q2:1.1.0.22 pkgsrc-2020Q2-base:1.1 pkgsrc-2020Q1:1.1.0.18 pkgsrc-2020Q1-base:1.1 pkgsrc-2019Q4:1.1.0.20 pkgsrc-2019Q4-base:1.1 pkgsrc-2019Q3:1.1.0.16 pkgsrc-2019Q3-base:1.1 pkgsrc-2019Q2:1.1.0.14 pkgsrc-2019Q2-base:1.1 pkgsrc-2019Q1:1.1.0.12 pkgsrc-2019Q1-base:1.1 pkgsrc-2018Q4:1.1.0.10 pkgsrc-2018Q4-base:1.1 pkgsrc-2018Q3:1.1.0.8 pkgsrc-2018Q3-base:1.1 pkgsrc-2018Q2:1.1.0.6 pkgsrc-2018Q2-base:1.1 pkgsrc-2018Q1:1.1.0.4 pkgsrc-2018Q1-base:1.1 pkgsrc-2017Q4:1.1.0.2 pkgsrc-2017Q4-base:1.1; locks; strict; comment @# @; 1.2 date 2026.07.12.12.54.39; author thor; state dead; branches; next 1.1; commitid eKLIKYCWaX8uDmNG; 1.1 date 2017.10.22.09.30.41; author tron; state Exp; branches; next ; commitid arpbdP85pafyT1cA; desc @@ 1.2 log @lame: update to 4.0 This drops one patch and adds usage of pkg-config and libmpg123. Also unicode option is now recommened. You really want unicode handling for metadata these days. Changes: LAME 4.0 July 11 2026 Security scores assume LAME runs under a non-privileged account. For frontend-only entries, scores also assume the command line is sanitized or restricted before reaching LAME; integrators who pass unsanitized or fully scripted command-line input directly may see higher practical severity than stated. Security Fixed a stack buffer overflow in the Blade-style encoder DLL (lame_enc.dll): beInitStream() copied a caller-supplied configuration structure using an unchecked, caller-controlled size, so an oversized or compiler-mismatched size could overwrite the stack. The size is now bounds-checked and the packed structure layout is consistent across MSVC and GCC/MinGW builds. [CVSS 8.4, Blade DLL]. Fix by Alexander Leidinger. Fixed an integer underflow in the AIFF header parser (parse_aiff_header()): a crafted file with a FORM chunk size below 4 wrapped the unsigned chunk-size counter to a huge value, sending the chunk-scanning loop into an effectively unbounded spin (a hang) on a tiny malicious input. The size is now validated before it is decremented. [CVSS 5.5, AIFF frontend]. Fix by Alexander Leidinger. Alexander Leidinger Bump the major version to 4.0 (minor reset to 0). The LAME tag embedded in every encoded MP3 has a fixed 9-byte field for the encoder version string; since 3.100 the 3-digit minor version left no room for the trailing alpha/beta/release marker character, which was silently dropped. Fix building with recent GCC and Clang, which rejected the UTF-8 ID3 tag functions as an incompatible pointer type. Also fixes the corrupted genre written by --id3v2-utf8 --tg. Patch submitted by Rudi Heitbaum, patch ticket [ #102 ]; thanks to lazka for reporting, bug ticket [ #523 ]. Export the UTF-8 ID3 tag functions id3tag_set_textinfo_utf8 and id3tag_set_comment_utf8 from the shared library, and fix a possible crash on out-of-memory in the ID3v2 user-defined tag setters, bug ticket [ #518 ]. LAME 3.101 July 09 2026 Robert Hegemann Patch submitted by KO Myung-Hun, patch ticket [ #80 ] OS/2 patches Patch submitted by Elio Blanca, patch ticket [ #82 ] Take advantage of terminal width on printing file names Bug fix for item [ #496 ] A critical bug in init_xrpow_core_sse Bug fix for item [ #500 ] Buffer overflow in encoder Bug fix for item [ #501 ] Encoder: Assertion 'eov->bitrate_index <= cfg->vbr_max_bitrate_index' failed during ABR encoding Bug fix for item [ #444 ] msacmdrv.h (structure packing alignment) Alexander Leidinger Add faster CRC routine. The speed improvement is very small for typical use cases, but may be valuable if a lot of independent encodes are running and/or for a very long time. Patch by Robert Kausch of the fre:ac project. Fix configure script glob-ranges matching of compiler versions. This may result in faster code if no compiler optimization flags are specified during the configure step. This is part of patch ticket [ #491 ] lame 3.100 slower than 3.99.5 Disable Takehiros IEEE753 hack by default. On modern CPUs (anything more recent from AMD than hammer/k8; Intel: Core2, i3/5/7/9 and similar -- no idea about recent Atom/Pentium) it is a speed pessimization. Add a configure option for it so that it can be enabled on old CPUs. Update to more recent autotools based scripts, this may or may not fix issues during the configure stage for less popular or more recent OS or architectures. Use external libmpg123 instead of internal mpglib for mpeg decoding (unix-like systems which use the autotools ("configure; make; make install") build system). There are years of improvements in libmpg123 which we do not have in mpglib. Patch by Thomas Orgis of the mpg123 project. Update the Visual Studio project files to Visual Studio 2019. Patch by Michel Fink. Remove the macosx XCode project files, nobody stepped up to update them for the libmpg123 changes. Add ID3v2.4 support (UTF-8 ID3 tags). Patch by "kris". Add pkg-config support. Patch by Nicolas Boulenguez(Debian). Add IPv6 support for mp3rtp. This includes an incompatible change to the command line arguments for existing use cases / scripts. Patch by Surabhi. @ text @$NetBSD: patch-include_libmp3lame.sym,v 1.1 2017/10/22 09:30:41 tron Exp $ Fix build under macOS. Idea for patch taken from this mailing list post: https://hydrogenaud.io/index.php?PHPSESSID=n9gjuo3hnkrna4rt06g6j01r67&topic=114777.msg946373#msg946373 --- include/libmp3lame.sym.orig 2017-09-06 20:33:35.000000000 +0100 +++ include/libmp3lame.sym 2017-10-22 10:26:22.000000000 +0100 @@@@ -1,5 +1,4 @@@@ lame_init -lame_init_old lame_set_num_samples lame_get_num_samples lame_set_in_samplerate @ 1.1 log @Fix build under macOS @ text @d1 1 a1 1 $NetBSD$ @