head	1.2;
access;
symbols
	pkgsrc-2026Q2:1.1.0.24
	pkgsrc-2026Q2-base:1.1
	pkgsrc-2026Q1:1.1.0.22
	pkgsrc-2026Q1-base:1.1
	pkgsrc-2025Q4:1.1.0.20
	pkgsrc-2025Q4-base:1.1
	pkgsrc-2025Q3:1.1.0.18
	pkgsrc-2025Q3-base:1.1
	pkgsrc-2025Q2:1.1.0.16
	pkgsrc-2025Q2-base:1.1
	pkgsrc-2025Q1:1.1.0.14
	pkgsrc-2025Q1-base:1.1
	pkgsrc-2024Q4:1.1.0.12
	pkgsrc-2024Q4-base:1.1
	pkgsrc-2024Q3:1.1.0.10
	pkgsrc-2024Q3-base:1.1
	pkgsrc-2024Q2:1.1.0.8
	pkgsrc-2024Q2-base:1.1
	pkgsrc-2024Q1:1.1.0.6
	pkgsrc-2024Q1-base:1.1
	pkgsrc-2023Q4:1.1.0.4
	pkgsrc-2023Q4-base:1.1
	pkgsrc-2023Q3:1.1.0.2;
locks; strict;
comment	@ * @;


1.2
date	2026.08.30.15.42.00;	author ryoon;	state dead;
branches;
next	1.1;
commitid	QEKd13731Lp40GTG;

1.1
date	2023.10.09.17.35.38;	author wiz;	state Exp;
branches
	1.1.2.1;
next	;
commitid	fxOBF0VmQF0zzYHE;

1.1.2.1
date	2023.10.09.17.35.38;	author spz;	state dead;
branches;
next	1.1.2.2;
commitid	8XYWyWFJd8jtuDJE;

1.1.2.2
date	2023.10.22.15.35.31;	author spz;	state Exp;
branches;
next	;
commitid	8XYWyWFJd8jtuDJE;


desc
@@


1.2
log
@textproc/libcue: Update to 2.3.0

Changelog:
libcue (2.3.0)
	[Vlad Stulikov, Vasiliy Sazonov]
	* Bug fix - no EOF handling

	[Kevin Backhouse]
	* Fix CVE-2023-43641
@
text
@$NetBSD: patch-cd.c,v 1.1 2023/10/09 17:35:38 wiz Exp $

Fix for CVE-2023-43641.

--- cd.c.orig	2018-05-02 00:51:51.000000000 +0000
+++ cd.c
@@@@ -339,7 +339,7 @@@@ track_get_rem(const Track* track)
 
 void track_set_index(Track *track, int i, long ind)
 {
-	if (i > MAXINDEX) {
+	if (i < 0 || i > MAXINDEX) {
 		fprintf(stderr, "too many indexes\n");
                 return;
         }
@


1.1
log
@libcue: add fix for CVE-2023-43641

Bump PKGREVISION
@
text
@d1 1
a1 1
$NetBSD$
@


1.1.2.1
log
@file patch-cd.c was added on branch pkgsrc-2023Q3 on 2023-10-22 15:35:31 +0000
@
text
@d1 15
@


1.1.2.2
log
@Pullup ticket #6811 - requested by bsiegert
textproc/libcue: security patch

Revisions pulled up:
- textproc/libcue/Makefile                                      1.2
- textproc/libcue/distinfo                                      1.4
- textproc/libcue/patches/patch-cd.c                            1.1

-------------------------------------------------------------------
   Module Name:    pkgsrc
   Committed By:   wiz
   Date:           Mon Oct  9 17:35:38 UTC 2023

   Modified Files:
           pkgsrc/textproc/libcue: Makefile distinfo
   Added Files:
           pkgsrc/textproc/libcue/patches: patch-cd.c

   Log Message:
   libcue: add fix for CVE-2023-43641

   Bump PKGREVISION


   To generate a diff of this commit:
   cvs rdiff -u -r1.1 -r1.2 pkgsrc/textproc/libcue/Makefile
   cvs rdiff -u -r1.3 -r1.4 pkgsrc/textproc/libcue/distinfo
   cvs rdiff -u -r0 -r1.1 pkgsrc/textproc/libcue/patches/patch-cd.c
@
text
@a0 15
$NetBSD$

Fix for CVE-2023-43641.

--- cd.c.orig	2018-05-02 00:51:51.000000000 +0000
+++ cd.c
@@@@ -339,7 +339,7 @@@@ track_get_rem(const Track* track)
 
 void track_set_index(Track *track, int i, long ind)
 {
-	if (i > MAXINDEX) {
+	if (i < 0 || i > MAXINDEX) {
 		fprintf(stderr, "too many indexes\n");
                 return;
         }
@