rpms/libsndfile
7
0
Fork 0
Code Issues Pull Requests Releases Activity

import CS git libsndfile-1.0.28-17.el8_10

Browse Source
This commit is contained in:
AlmaLinux RelEng Bot 2026-05-20 06:19:46 -04:00
parent bb6a60e399
commit 6b6bee3d0a
2 changed files with 46 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

38
SOURCES/0001-ima_adpcm-fix-int-overflow-when-calculating-sf.frame.patch Normal file
View File

@ -0,0 +1,38 @@
From 0e1d2664822358ebae3fdb8ca15ba1b4ed99f22f Mon Sep 17 00:00:00 2001
From: Wim Taymans <wtaymans@redhat.com>
Date: Mon, 18 May 2026 14:33:55 +0200
Subject: [PATCH] ima_adpcm: fix int overflow when calculating sf.frames
When calculating sf.frames, pre-cast samplesperblock to sf_count_t, to
provide the calculation with enough numeric space to avoid overflows.
CVE: CVE-2026-37555
---
src/ima_adpcm.c | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
diff --git a/src/ima_adpcm.c b/src/ima_adpcm.c
index 18b56c49..168aec62 100644
--- a/src/ima_adpcm.c
+++ b/src/ima_adpcm.c
@@ -164,7 +164,7 @@ ima_close (SF_PRIVATE *psf)
if (pima->samplecount && pima->samplecount < pima->samplesperblock)
pima->encode_block (psf, pima) ;
- psf->sf.frames = pima->samplesperblock * pima->blockcount / psf->sf.channels ;
+ psf->sf.frames = (sf_count_t) pima->samplesperblock * pima->blockcount / psf->sf.channels ;
} ;
return 0 ;
@@ -232,7 +232,7 @@ ima_reader_init (SF_PRIVATE *psf, int blockalign, int samplesperblock)
pima->decode_block = wavlike_ima_decode_block ;
- psf->sf.frames = pima->samplesperblock * pima->blocks ;
+ psf->sf.frames = (sf_count_t) pima->samplesperblock * pima->blocks ;
break ;
case SF_FORMAT_AIFF :
--
2.54.0

9
SPECS/libsndfile.spec
View File

@ -1,7 +1,7 @@
Summary: Library for reading and writing sound files
Name: libsndfile
Version: 1.0.28
Release: 16%{?dist}
Release: 17%{?dist}
License: LGPLv2+ and GPLv2+ and BSD
Group: System Environment/Libraries
URL: http://www.mega-nerd.com/libsndfile/
@ -26,6 +26,8 @@ Patch12: libsndfile-1.0.31-pullrequest979.patch
# from upstream, for <= 1.2.2, #RHEL-65095
Patch13: libsndfile-1.0.28-cve-2024-50612prereq.patch
Patch14: libsndfile-1.2.2-cve-2024-50612.patch
Patch16: 0001-ima_adpcm-fix-int-overflow-when-calculating-sf.frame.patch
BuildRequires: alsa-lib-devel
BuildRequires: flac-devel
BuildRequires: libogg-devel
@ -85,6 +87,7 @@ This package contains command line utilities for libsndfile.
%patch -P 12 -p1 -b .pullrequest979
%patch -P 13 -p1 -b .cve-2024-50612prereq
%patch -P 14 -p1 -b .cve-2024-50612
%patch -P 16 -p1 -b .0016
rm -r src/GSM610
%build
@ -180,6 +183,10 @@ LD_LIBRARY_PATH=$PWD/src/.libs make check
%changelog
* Mon May 18 2026 Wim Taymans <wtaymans@redhat.com> - 1.0.28-17
- apply patch for CVE-2026-37555
Resolves: RHEL-174533
* Tue Nov 26 2024 Michal Hlavinka <mhlavink@redhat.com> - 1.0.28-16
- fix prerequisit patch (#RHEL-65093)