Commit Graph

600 Commits

Author SHA1 Message Date
Weisser, Pascal
5f933c8988
v4l-utils: Add HOMEPAGE variable
Add HOMEPAGE variable to v4l-utils recipe.

Signed-off-by: Weisser, Pascal <pascal.weisser.ext@karlstorz.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-10 08:58:48 -08:00
Khem Raj
78f49691d7
audiofile: Fix build with clang++
When tests are enabled additional C++ code is compiled and clang does
not like the code.

Cc: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-11-14 07:36:56 -08:00
Gyorgy Sarvari
e16a7d11d1
audiofile: patch CVE-2018-13440 and CVE-2018-17059
Details:
https://nvd.nist.gov/vuln/detail/CVE-2018-13440
https://nvd.nist.gov/vuln/detail/CVE-2018-17059

The patches have been backported from Debian - upstream
has been inactive for almost a decade by now.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-11-14 07:36:56 -08:00
Gyorgy Sarvari
6c98db2449
audiofile: backport test for CVE-2015-7747
This is a backported patch from opensuse, which contains a testcase
for CVE-2015-7747 (which is already patched in ths recipe, but not
tested explicitly).

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-11-14 07:36:56 -08:00
Gyorgy Sarvari
85ded08df0
audiofile: add ptest support
It's under 15 seconds to execute it.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-11-14 07:36:55 -08:00
Gyorgy Sarvari
8ef997336a
audiofile: patch CVE-2019-13147 and CVE-2022-24599
Details: https://nvd.nist.gov/vuln/detail/CVE-2019-13147
https://nvd.nist.gov/vuln/detail/CVE-2022-24599

These patches are used by opensuse to mitigate the corresponding vulnerabulities.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-11-14 07:36:55 -08:00
Yi Zhao
b1721daf90
libmms: inherit sourceforge-releases class
Inherit sourceforge-releases class to check the correct latest stable
verison.

Before the patch:
$ devtool latest-version libmms
INFO: Current version: 0.6.4
INFO: Latest version:

After the patch:
$ devtool latest-version libmms
INFO: Current version: 0.6.4
INFO: Latest version: 0.6.4

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-11-12 09:38:59 -08:00
Gyorgy Sarvari
3a900f7596
id3lib: update remote patch SRC_URI
The URL of the patch archive from Debian got out of date - update it.

While touching it, also drop the old md5 hashes from the recipe.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-11-08 23:04:38 -08:00
Ankur Tyagi
ed29757825
libcdio-paranoia: upgrade 10.2+2.0.1 -> 10.2+2.0.2
The project switched to storing their releases on Github.

Changelog:
https://github.com/libcdio/libcdio-paranoia/releases/tag/release-10.2%2B2.0.2

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-11-04 23:14:25 -08:00
Ankur Tyagi
c62161e4ab
libcdio: upgrade 2.1.0 -> 2.2.0
* The project switched to storing their releases on Github
* Dropped patches which are now merged in the upstream
* There is API, ABI change between 2.1.0 and 2.1.1
- API change: Rename some fields in ecma_167.h from integer (prefix i_) to unsigned (prefix u_) to actually match their type
- ABI change: Add u_su_fields to the end of iso_rock_statbuf_t
- ABI change: Add total_size in the middle of iso9660_stat_t

Changelog:
https://github.com/libcdio/libcdio/releases/tag/2.1.1
https://github.com/libcdio/libcdio/releases/tag/2.2.0

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-11-04 23:14:25 -08:00
Leon Anavi
d804fb389f audiofile: Fix Upstream-Status
Fix a minor typo in the patches by replacing "Upstrem-Status" with
"Upstream-Status". The typo was not triggering a QA Issue because
there is a second "Upstream-Status" line in each patch.

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-24 09:06:24 -07:00
Changqing Li
c5d239faa6
cdrkit: fix reproducibility issue
Normally CMake uses the build tree for the RPATH when building
executables etc on systems that use RPATH.  This will make the buildpath
included in the binaries and not reproducible, so disable RPATHs.

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-10 09:46:48 -07:00
Markus Volk
997e47c590
mpv: fix build with ffmpeg 8.0
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-09-16 09:59:14 -07:00
Khem Raj
8090156082
libjxl: Upgrade to 0.11.1
Use -fno-integrated-as with clang on arm architecture

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-09-01 15:52:04 -07:00
Khem Raj
32f2857c67
libplacebo: Fix build with latest python 3.14
Fixes
 FAILED: [code=1] src/vulkan/utils_gen.c
   /home/kraj200/yoe/build/tmp/work/riscv64imafdc-yoe-linux/libplacebo/7.351.0/recipe-sysroot-native/usr/bin/meson.real --
   ↪ internal exe --unpickle /home/kraj200/yoe/build/tmp/work/riscv64imafdc-yoe-linux/libplacebo/7.351.0/build/meson-private/
   ↪ meson_exe_nativepython3_7e48a7413404982655e79073cf3065c6194271bf.dat
   while executing ['/home/kraj200/yoe/build/tmp/work/riscv64imafdc-yoe-linux/libplacebo/7.351.0/recipe-sysroot-native/usr/bin/
   ↪ nativepython3', '../sources/libplacebo-7.351.0/src/vulkan/utils_gen.py', '/usr/share', '/home/kraj200/yoe/build/tmp/work/
   ↪ riscv64imafdc-yoe-linux/libplacebo/7.351.0/recipe-sysroot/usr/share/vulkan/registry/vk.xml', 'src/vulkan/utils_gen.c']
   --- stdout ---

   --- stderr ---
   Traceback (most recent call last):
     File "/home/kraj200/yoe/build/tmp/work/riscv64imafdc-yoe-linux/libplacebo/7.351.0/build/../sources/libplacebo-7.351.0/src/
     ↪ vulkan/utils_gen.py", line 205, in <module>
       registry = VkXML(ET.parse(xmlfile))
     File "/home/kraj200/yoe/build/tmp/work/riscv64imafdc-yoe-linux/libplacebo/7.351.0/build/../sources/libplacebo-7.351.0/src/
     ↪ vulkan/utils_gen.py", line 50, in __init__
       super().__init__(*args, **kwargs)
       ~~~~~~~~~~~~~~~~^^^^^^^^^^^^^^^^^
     File "/home/kraj200/yoe/build/tmp/work/riscv64imafdc-yoe-linux/libplacebo/7.351.0/recipe-sysroot-native/usr/lib/python3.13/
     ↪ xml/etree/ElementTree.py", line 527, in __init__
       raise TypeError('expected an Element, not %s' %
                       type(element).__name__)
   TypeError: expected an Element, not ElementTree

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-08-13 10:09:25 -07:00
Jiaying Song
77b291c7c1
v4l-utils: Fix QA and build errors related to _TIME_BITS on 32-bit
* Remove GLIBC_64BIT_TIME_FLAGS="" to enable _TIME_BITS=64 by default,
  which avoids the following QA issue during builds on 32-bit systems:

  WARNING: lib32-v4l-utils-1.24.1+git-r0 do_package_qa: QA Issue: /usr/bin/cec-compliance uses 32-bit api 'time'

* Undefine _TIME_BITS to fix the build error:

  /usr/include/features-time64.h:26:5: error: #error "_TIME_BITS=64 is allowed only with _FILE_OFFSET_BITS=64"

Signed-off-by: Jiaying Song <jiaying.song.cn@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-07-28 14:36:25 -07:00
Alper Ak
1c7a73b3d0
wavpack: Upgrade 5.6.0 -> 5.8.1 to allow CMake 4+ compatibility
- Drop patches becaus already fixed in the newer version.
- The LICENSE file has changed so updated LIC_FILES_CHKSUM to match the new md5sum.

Changelog:

https://github.com/dbry/WavPack/blob/5.8.1/ChangeLog

Fix:

| CMake Error at CMakeLists.txt:1 (cmake_minimum_required):
|   Compatibility with CMake < 3.5 has been removed from CMake.
|
|   Update the VERSION argument <min> value.  Or, use the <min>...<max> syntax
|   to tell CMake that the project requires at least <min> but has been updated
|   to work with policies introduced by <max> or earlier.
|
|   Or, add -DCMAKE_POLICY_VERSION_MINIMUM=3.5 to try configuring anyway.
|
|
| -- Configuring incomplete, errors occurred!

Signed-off-by: Alper Ak <alperyasinak1@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-07-09 09:16:06 -07:00
Alper Ak
5acdf49830
cdrkit: Add patch for CMake 4+ compatibility
Fix:

| CMake Error in CMakeLists.txt:
|   No cmake_minimum_required command is present.  A line of code such as
|
|     cmake_minimum_required(VERSION 4.0)
|
|   should be added at the top of the file.  The version specified may be lower
|   if you wish to support older CMake versions for this project.  For more
|   information run "cmake --help-policy CMP0000".
|
|
| -- Configuring incomplete, errors occurred!

Signed-off-by: Alper Ak <alperyasinak1@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-07-08 23:40:33 -07:00
Alexander Kanavin
fc78d37ff0
meta-openembedded/all: adapt to UNPACKDIR changes
Please see
https://git.yoctoproject.org/poky/commit/?id=4dd321f8b83afecd962393101b2a6861275b5265
for what changes are needed, and sed commands that can be used to make them en masse.

I've verified that bitbake -c patch world works with these, but did not run a world
build; the majority of recipes shouldn't need further fixups, but if there are
some that still fall out, they can be fixed in followups.

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-06-25 06:44:52 -07:00
Wang Mingyu
e68f8d53b9
libvpx: upgrade 1.15.1 -> 1.15.2
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-06-09 21:24:10 -07:00
Wang Mingyu
4a20c58f12
libass: upgrade 0.17.3 -> 0.17.4
Changelog:
==========
- add new API to prune old events from memory
- ass_prune_events for manual pruning
- ass_configure_prune to set up automatic pruning
- add ASS_OVERRIDE_BIT_BLUR flag
- fontconfig: fix minor memory leaks in pathological font setups
- coretext: fix build on older compilers or Mac OS X 10.5
- checkasm: fix build for older compilers
- aarch64: fix assembly build on strict compilers due to oversized align
- meson: improve ASM configuration on x86 Android
- meson: align MSVC warnings and optimisations closer to gcc-like compilers
- meson can now build all dev utility executables

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-06-09 21:24:09 -07:00
Markus Volk
3f77bb395c
libplacebo: update 7.349.0 -> 7.351.0
This release mainly introduces a variety of miscellaneous bug fixes, alongside two minor / maintenance changes.

Additions:

    add pl_{opengl,vulkan,d3d11}_params.no_compute to suppress the use of
    compute shaders
    add pl_cache_{set,get}_file()

Changes:

    libav vulkan interop now requires lavu 58.11.100+ and vulkan 1.2.175+
    "sinc" filter preset radius dropped from 3 to 2

Fixes and performance enhancements:

    fix compilation of fuzzer test
    fix shader variable renaming loop
    fix error when the same gpu descriptor is used twice in one shader
    don't expose unsupported d3d11 formats
    fix rendering with flipped planes and user shaders
    fix rendering of textures with unusual channel order
    don't apply sigmoidization to alpha channel
    attach correctly normalized extension list to vulkan device creation
    fix orthogonal scaling fast path leaking garbage pixels
    some GLES 2.0 fixes
    fix DCDM XYZ decoding into DCI-P3
    fix build with glslang 15
    fix compilation without nuklear
    fix backwards compatibility with pl_render_params.skip_target_clearing
    correctly output requested alpha mode
    preserve alpha channel when blending subsampled formats
    multiply plane scale even when not scaling
    propagate correct plane format after plane merging
    fix build with instrumentation enabled
    fix bug where layout transitions happened too early in some cases
    fix handling of promoted extension and function names
    don't scale alpha when blending low bit depth YUV planes
    fix build error with recent libavformat
    fix plane channel order when merging planes
    invalidate shader cache when GL version strings change
    fix compute shader promotion for flipped outputs
    fix upload of YUVA formats with reduced bit depths

Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-06-07 17:59:12 -07:00
Wang Mingyu
52d028ae75
libxmp: upgrade 4.6.2 -> 4.6.3
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-05-21 07:38:24 -07:00
Markus Volk
3d34b1d6ad
libplacebo: make use of virtual/libsdl2
Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-04-25 14:47:11 -07:00
mark.yang
6a9d7817d8
xsp: fix build error in gcc-15
* fix following build error in gcc-15:
../Xsp/Xsp.c:37:9: error: initialization of 'int (*)(Display *, XExtCodes *)' from incompatible pointer type 'int (*)(void)' [-Wincompatible-pointer-types]
   37 |         XSPCloseDisplay,                    /* close_display */
      |         ^~~~~~~~~~~~~~~
../Xsp/Xsp.c:37:9: note: (near initialization for 'xsp_extension_hooks.close_display')
../Xsp/Xsp.c:23:12: note: 'XSPCloseDisplay' declared here
   23 | static int XSPCloseDisplay();
      |            ^~~~~~~~~~~~~~~
In file included from ../Xsp/Xsp.c:6:
../Xsp/Xsp.c:49:37: error: conflicting types for 'XSPCloseDisplay'; have 'int(Display *, XExtCodes *)'
   49 | static XEXT_GENERATE_CLOSE_DISPLAY (XSPCloseDisplay, xsp_info)
      |                                     ^~~~~~~~~~~~~~~
../Xsp/Xsp.c:36:9: error: 'XSPCloseDisplay' undeclared here (not in a function); did you mean 'XCloseDisplay'?
   36 |         XSPCloseDisplay,                    /* close_display */
      |         ^~~~~~~~~~~~~~~
      |         XCloseDisplay

Signed-off-by: mark.yang <mark.yang@lge.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-04-24 08:45:52 -07:00
Markus Volk
9214b0bcda
libxmp: add recipe
libxmp is a requirement for libsdl2-mixer

Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-04-22 09:10:56 -07:00
Wang Mingyu
e8a0c63bbb
libvpx: upgrade 1.15.0 -> 1.15.1
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-04-16 08:18:05 -07:00
Markus Volk
619f07545c
mpv: build libmpv by default
Add libmpv to PACKAGECONFIG. It is the default setting for mpv_0.40.0
and will be a requirement for recipes like mpvpaper or celluloid

Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-31 14:42:05 -07:00
Markus Volk
47757aab70
mpv: remove unused patch
Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-31 07:41:47 -07:00
Markus Volk
a0bcaba7cd
mpv: update 0.39 -> 0.40
- license files have been updated without change
- add dependency on 'libdisplay-info'

Release 0.40.0
==============

We are excited to announce the release of mpv 0.40.0.

Key highlights:

* Console: Enhanced autocompletion and visual styling
* OSC: New selection menu accessible by right-clicking common buttons
* HDR is now natively supported when using direct rendering (DRM),
  as well as dmabuf-wayland on Linux
* Native clipboard access for scripts via new `clipboard` property
* New command menu, with common actions easily accessible
* Enhanced select.lua with new selection options for watch history, editions, DVD/Blu-Ray titles
* New positioning.lua script script for cursor-centric zooming and drag to pan
* Better stream support for Blu-ray, DVD and CDDA
* Track selection improvements and better metadata display
* Added osd-box / sub-box / box profiles to easily enable box styled OSD/OSC
* Windows support in umpv helper script

This release requires FFmpeg 6.1 or newer and libplacebo 6.338.2 or newer.

- vf_d3d11vpp: add NVIDIA RTX Video HDR support
- context_drm_gl: add support for HDR metadata
- positioning.lua: add new script for video alignment and zooming
- umpv: add Windows support
- command: add clipboard property with native backends for Windows, macOS, and Wayland
- select.lua: add watch history, edition, DVD/Blu-Ray titles and more selection options
- input.conf: add cursor-centric zoom and drag-to-pan bindings
- wayland: add support for wp-color-management-v1 protocol
- console.lua: add persistent command history
- stats.lua: add timecode display
- options: add --playlist-exts and --archive-exts
- wayland_common: support IME usage via text-input-v3
- command: add multiple track metadata and properties
- vo_gpu_next: add chroma location and HDR metadata to shader parameters
- player/screenshot: support more formats for screenshot-raw command
- demux_mkv: add `--demuxer-mkv-crop-compat` option
- misc/language: parse hi/sdh/cc tags from external subtitle tracks
- wayland: support xdg-activation
- player: add mpv:// protocol

- meson: build libmpv by default
- command: enhance track and playlist display information
- input.conf: improve numpad key bindings
- osc.lua: add custom buttons support and improved mouse bindings
- console.lua: inherit OSD styles and colors
- options: default to --prefetch-playlist=yes
- osc.lua: add slimbottombar and slimtopbar layouts
- command: improve frame-step to go through multiple frames
- wayland: use wp-presentation v2 if available
- various: reorganize options into more logical groups
- vo_gpu_next: improve target colorspace handling
- options: disable `--input-ime` by default (enabled on demand)

- sd_ass: introduce sub-ass-prune-delay
- player: add an optional mute flag when framestepping
- command: add clipboard/text-primary property
- command: add current-clipboard-backend property
- command: add notify-property command
- options: add --script-opt alias for --script-opts-append
- options: add --osd-bar-marker-{size,style} options
- options: add --input-ime for improved text input
- options: add --video-recenter
- options: add --clipboard-backends
- options: add --wayland-internal-vsync
- options: add --sub-scale-signs

- options: rename --load-osd-console to --load-console
- player: improve track selection for multi-component languages
- options: improve frame-step command to handle multiple frames
- input.conf: make Alt+BS reset --video-align-{x,y}
- command: print track metadata when changing track
- command: print track-list with enhanced metadata

- options: deprecate `--gamma-auto` (use gamma-auto.lua script instead)
- options: deprecate undocumented --cdda-span-{a,b} options

- f_hwtransfer: ensure that we convert to full range rgb with scale_vaapi
- win32: fix window size restore after maximize state
- build: fix dynamic generation of mpv.desktop file protocols
- player/sub: avoid pointlessly redecoding subs
- x11: remove nvidia blacklist logic from --x11-present=auto
- osc.lua: seek to the nearest chapter when right clicking the seekbar
- command: fix keybind command with sequence keys
- video/out/wayland_common: fix crash with multi-seat drag and drop
- demux: reclaim demux_packets to reduce memory allocator pressure
- demux_cue: only accept TRACK with AUDIO type
- player/loadfile: strip common filename part from external track title
- build: remove unused dvdread dependency
- wayland: fix vertical resizing and scaling issues
- console.lua: improve completion and visual appearance
- sub/osd: default to a semitransparent black back color
- player: improve playlist handling with prefetch
- drm: parse EDID using libdisplay-info (which is now a required dependency)
- win32: fix window size restore after maximize state
- hwdec_d3d11va: align image mapper dimensions to a multiple of 2
- wayland: fix DnD with focus follow mouse
- player: store external filenames as normalized
- player: properly handle secondary subtitles on the terminal
- demux_mkv: add support for chroma location
- vo_dmabuf_wayland: improve and fix format selection
- player: fix combination of --loop-playlist + --shuffle + --prefetch-playlist

Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-28 19:40:58 -07:00
Thomas Perrot
3b448edbf3
jack: apply some improvements
- Remove the do_install append because jack_control no longer
  builds when the dbus pkgconfig is disabled.
- Add python3-core to the runtime dependencies when D-Bus is
  enabled, because jack_control requires /usr/bin/python3.
- Use PACKAGE_BEFORE_PN to enable additional packages.
- Remove the HTML documentation because it no longer builds.

Signed-off-by: Thomas Perrot <thomas.perrot@bootlin.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-27 17:05:46 -07:00
Peter Marko
60eb0214e7
libmad: patch CVE-2017-8372 and CVE-2017-8373
Pick patch [1] from Debian based on [2].

[1] https://salsa.debian.org/multimedia-team/libmad/-/raw/debian/0.15.1b-11/debian/patches/length-check.patch?ref_type=tags
[2] https://security-tracker.debian.org/tracker/CVE-2017-8374

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-20 19:36:50 -07:00
Peter Marko
437635f608
libmad: patch CVE-2017-8372 and CVE-2017-8373
Pick patch [1] from Debian based on [2] and [3].

[1] https://salsa.debian.org/multimedia-team/libmad/-/blob/debian/0.15.1b-11/debian/patches/md_size.diff?ref_type=tags
[2] https://security-tracker.debian.org/tracker/CVE-2017-8372
[3] https://security-tracker.debian.org/tracker/CVE-2017-8373

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-20 19:36:50 -07:00
Peter Marko
fee86a312f
libmad: ignore CVE-2017-11552 and CVE-2018-7263
These CVEs are for mpg321, not libmad.
See Debian assessment:
* https://security-tracker.debian.org/tracker/CVE-2017-11552
* https://security-tracker.debian.org/tracker/CVE-2018-7263

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-20 19:36:50 -07:00
Peter Marko
0dcbb0b5d4
libmad: extend CVE_PRODUCT
Catch more CVEs by adding additional product per

sqlite> select vendor, product, count(*) from products where product like '%libmad%' group by vendor, product;
underbit|libmad|1
underbit|mad_libmad|4

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-20 19:36:50 -07:00
Richard Purdie
eac1f5b9c0
recipes: Fix variable assignment whitespace
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-20 08:46:56 -07:00
Wang Mingyu
459e24c3b3
faad2: upgrade 2.11.1 -> 2.11.2
Changelog:
============
* Add option BUILD_FAAD_CLI
* Add conditional build with DRC
* Use adts_frame for adts header detection
* Fix gapless calculation in frontend
* Fix write_audio_* function heap buffer overflow

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-11 17:17:20 -07:00
Gyorgy Sarvari
bdd2b53408
libplacebo: fix demos PACKAGECONFIG
In case the demos PACKAGECONFIG is enabled, linking fails with
the following error:

| /usr/src/debug/libplacebo/7.349.0/demos/plplay.c:669:(.text.startup+0x90): undefined reference to `parse_args'
| collect2: error: ld returned 1 exit status

The implementation of the missing function is guarded erroneously by
an ifdef flag (HAVE_NUKLEAR, which is only true in case headers from the nuklear
library are present - but in this recipe they are not included).

This patch moves the implementation of this function outside of the ifdef to
avoid the build failure.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-02-16 08:10:20 -08:00
Gyorgy Sarvari
964f55887a
libplacebo: fix glslang PACKAGECONFIG
In case glslang PACKAGECONFIG is enabled, compilation fails with
a lot of errors about undefined references from the glslang namespace, e.g.

| /usr/src/debug/libplacebo/7.349.0/src/glsl/glslang.cc:79:(.text+0x160): undefined reference to `glslang::TShader::TShader(EShLanguage)'

This has been solved in the upstream project, and this change backports
the commit that fixes the meson.build file to find the correct libraries
during compilation.

Additionally, fix also the TMPDIR QA error that popped up after fixing
the above issue: remove the RECIPE_SYSROOT value from the generated
pkgconf file (and instead of referring to the libraries by absolute path,
just refer to them by name, as they are supposed to be present in the
standard library lookup path).

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-02-16 08:10:20 -08:00
Peter Marko
68f55c158e
audiofile: mark CVE-2020-18781 as patched
Per [1] this CVE is already patched by commit [2].

This can be also verified with yocto build.

Running without this patch:
root@qemux86-64:~# sfconvert poc.wav output format wave
malloc(): corrupted top size
Aborted

Running with it:
root@qemux86-64:~# sfconvert poc.wav output format wave
Audio File Library: Bad number of coefficients [error 62]
Could not open file 'poc.wav' for reading.

[1] https://github.com/mpruett/audiofile/issues/56
[2] c48e4c6503

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-17 16:39:40 -08:00
Peter Marko
88faae83b2
audiofile: patch CVE-2017-6839
Use patch from buildroot:
844a7c6281

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-27 09:21:44 -08:00
Peter Marko
9d668989b1
audiofile: patch CVE-2017-6831
Use patch from buildroot:
bd5f84d301

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-27 09:21:44 -08:00
Peter Marko
75f2bd2b3b
audiofile: fix multiple CVEs
CVE-2017-6830 / CVE-2017-6834 / CVE-2017-6836 / CVE-2017-6838

Use patch from buildroot:
4a1a8277bb

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-27 09:21:44 -08:00
Peter Marko
f29fbaa465
audiofile: patch CVE-2017-6829
Use patch from buildroot:
434890df2a

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-27 09:21:44 -08:00
Peter Marko
634cbcb91c
audiofile: fix multiple CVEs
CVE-2017-6827 / CVE-2017-6828 / CVE-2017-6832 / CVE-2017-6833 / CVE-2017-6835 / CVE-2017-6837

Use patch from buildroot:
cc00bde57f

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-27 09:21:44 -08:00
Peter Marko
9fff0040f1
id3lib: mark CVE-2007-4460 as fixed
This is fixed in id3lib3.8.3_3.8.3-16.2.debian.tar.xz patch included in
SRC_URI.
Version 3.8.3-7 contains patch for this CVE, we use 3.8.3-16.2.
This can be verified by checking the debian/changelog within this patch
or diffing [1] and [2] and verifying that this can be reverse-applied.

[1] https://snapshot.debian.org/archive/debian/20070819T000000Z/pool/main/i/id3lib3.8.3/id3lib3.8.3_3.8.3-6.diff.gz
[2] https://snapshot.debian.org/archive/debian/20070819T000000Z/pool/main/i/id3lib3.8.3/id3lib3.8.3_3.8.3-7.diff.gz

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-27 09:21:42 -08:00
David Sands
608f9aab51
jack-example-tools: add new recipe
This commit adds a package that provides jack-utils (along with jack example clients) that are broken out from the main jack repo since jack v1.9.22

Signed-off-by: David Sands <david.sands3@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-11-19 16:59:11 -08:00
David Sands
e8ad9b41dd
jack: remove jack-utils
This commit removes jack-utils from the jack recipe as it has been broken out into it's own repo from jack v1.9.22 onwards.

Signed-off-by: David Sands <david.sands3@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-11-19 16:59:10 -08:00
Wang Mingyu
ea3363dcc0
libvpx: upgrade 1.14.1 -> 1.15.0
libvpx-configure-support-blank-prefix.patch
refreshed for 1.15.0

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-11-05 22:45:17 -08:00
J. S.
d2f631c763
Drop unnecessary SRC_URI md5sum from the recipes in meta-oe.
Signed-off-by: Jason Schonberg <schonm@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-11-05 19:19:22 -08:00