X-Original-To: alpine-aports@lists.alpinelinux.org Received: from mail-lf0-f66.google.com (mail-lf0-f66.google.com [209.85.215.66]) by lists.alpinelinux.org (Postfix) with ESMTP id 609E75C45DF for ; Mon, 19 Dec 2016 11:16:31 +0000 (GMT) Received: by mail-lf0-f66.google.com with SMTP id 30so5631040lfy.1 for ; Mon, 19 Dec 2016 03:16:31 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:to:cc:subject:date:message-id:mime-version :content-transfer-encoding; bh=0hkap/JzcAA0e0QHnmVYACuSoZPmsI/5qU9daaGmsEc=; b=GcWXaTOPYl9GCM45c+oOXVx6VNbiVRY/HNvvUFcJO77zMyu77FuNZ9Mn1dXIUlX9To 8NlnhbAddHnI4ig5YLi+0T8CUYPpFNBuAGfCU5EHbVJz7U2cWN5nytAH7ofQMI3svwYf iHPYH4cjueYTt/MOOJlPbjbiyxrBKRNYrIP7I+/okaMlKdz0OyZl93qu0oGNQd35dOYe BYaBl8kl02RViNSFPSqXQSSZ0wyrSyPvJp2YM1/UWnnqjG4nctD+E6bnUw1akXEUtrJg b37VJso63aZUILixi+ipAGMGDDNKyhM+bauvgTK5CEa00NqmDDe8hPs2hgGaUDB7HcJC Zwag== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:to:cc:subject:date:message-id:mime-version :content-transfer-encoding; bh=0hkap/JzcAA0e0QHnmVYACuSoZPmsI/5qU9daaGmsEc=; b=PZf+Z7SttOn06nuN57nOU+y5FzesEVaE20+/Y5BG5gQFzWPSzlF0UVSx2VNNIE5xco 2+Ntm1H8LQZW2IGXK/L8+wxWdrxBcXYklm6n0CzVFZWRG2t4vnrWFTff9tE/dTuknbJx gTh30KHCXx3TDJyHUgU6I+B8tWUltkINeNHRpWMomtna63GvXAT3xACee2qYrZZ/AGpZ OV4ZVS5E6zy5BgCefDRz7mn2I1vdJt4Vdskg9Pxzt6gLP7FlQbpzsCKNm1XjqvYFLgCn A7jwKuH6jcLt3k3q3IHsy7MmIdTovyoTLqmYMfENCNHOlqiq4ZW9+AG093aTaPBuPGXj PcoQ== X-Gm-Message-State: AKaTC00KzDN3HcG7KXJ3YaRpmDbaJoC5fMNH4bBIRMkMkHVWrVDI+swNYUDwFUYF/UqzmQ== X-Received: by 10.25.19.170 with SMTP id 42mr4575257lft.174.1482146190818; Mon, 19 Dec 2016 03:16:30 -0800 (PST) Received: from v3-3.util.wtbts.net ([83.145.235.199]) by smtp.gmail.com with ESMTPSA id a9sm3613848ljb.9.2016.12.19.03.16.29 (version=TLS1_2 cipher=ECDHE-RSA-AES128-SHA bits=128/128); Mon, 19 Dec 2016 03:16:30 -0800 (PST) From: Sergey Lukin To: alpine-aports@lists.alpinelinux.org Cc: Sergey Lukin Subject: [alpine-aports] [PATCH v3.3] main/libass: security fixes Date: Mon, 19 Dec 2016 11:16:23 +0000 Message-Id: <1482146183-139-1-git-send-email-sergej.lukin@gmail.com> X-Mailer: git-send-email 2.6.6 X-Mailinglist: alpine-aports Precedence: list List-Id: Alpine Development List-Unsubscribe: List-Post: List-Help: List-Subscribe: MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Q1ZFLTIwMTYtNzk2OSwgQ1ZFLTIwMTYtNzk3MCwgQ1ZFLTIwMTYtNzk3Mg0KLS0tDQogbWFpbi9s aWJhc3MvQVBLQlVJTEQgICAgICAgICAgICB8IDQ0ICsrKysrKysrKysrKysrKysrKysrKysrKysr KysrKysrKy0tLS0tLS0tDQogbWFpbi9saWJhc3MvQ1ZFLTIwMTYtNzk2OS5wYXRjaCB8IDE2ICsr KysrKysrKysrKysrKw0KIG1haW4vbGliYXNzL0NWRS0yMDE2LTc5NzAucGF0Y2ggfCAxNCArKysr KysrKysrKysrDQogbWFpbi9saWJhc3MvQ1ZFLTIwMTYtNzk3Mi5wYXRjaCB8IDEzICsrKysrKysr KysrKw0KIDQgZmlsZXMgY2hhbmdlZCwgNzkgaW5zZXJ0aW9ucygrKSwgOCBkZWxldGlvbnMoLSkN CiBjcmVhdGUgbW9kZSAxMDA2NDQgbWFpbi9saWJhc3MvQ1ZFLTIwMTYtNzk2OS5wYXRjaA0KIGNy ZWF0ZSBtb2RlIDEwMDY0NCBtYWluL2xpYmFzcy9DVkUtMjAxNi03OTcwLnBhdGNoDQogY3JlYXRl IG1vZGUgMTAwNjQ0IG1haW4vbGliYXNzL0NWRS0yMDE2LTc5NzIucGF0Y2gNCg0KZGlmZiAtLWdp dCBhL21haW4vbGliYXNzL0FQS0JVSUxEIGIvbWFpbi9saWJhc3MvQVBLQlVJTEQNCmluZGV4IGMw NDhhMmUuLjE2ODBjYTggMTAwNjQ0DQotLS0gYS9tYWluL2xpYmFzcy9BUEtCVUlMRA0KKysrIGIv bWFpbi9saWJhc3MvQVBLQlVJTEQNCkBAIC0xLDEwICsxLDExIEBADQogIyBDb250cmlidXRvcjog xYF1a2FzeiBKZW5kcnlzaWsgPHNjYWR1QHlhbmRleC5jb20+DQogIyBDb250cmlidXRvcjogQ2Fy bG8gTGFuZG1ldGVyIDxjbGFuZG1ldGVyQGdtYWlsLmNvbT4NCiAjIENvbnRyaWJ1dG9yOiBTw7Zy ZW4gVGVtcGVsIDxzb2VyZW4rYWxwaW5lQHNvZXJlbi10ZW1wZWwubmV0Pg0KKyMgQ29udHJpYnV0 b3I6IFNlcmdleSBMdWtpbiA8c2VyZ2VqLmx1a2luQGdtYWlsLmNvbT4NCiAjIE1haW50YWluZXI6 IE5hdGFuYWVsIENvcGEgPG5jb3BhQGFscGluZWxpbnV4Lm9yZz4NCiBwa2duYW1lPWxpYmFzcw0K IHBrZ3Zlcj0wLjEzLjANCi1wa2dyZWw9MA0KK3BrZ3JlbD0xDQogcGtnZGVzYz0iQSBwb3J0YWJs ZSBsaWJyYXJ5IGZvciBTU0EvQVNTIHN1YnRpdGxlcyByZW5kZXJpbmciDQogdXJsPSJodHRwczov L2dpdGh1Yi5jb20vbGliYXNzL2xpYmFzcyINCiBhcmNoPSJhbGwiDQpAQCAtMTMsMTEgKzE0LDI5 IEBAIGRlcGVuZHM9IiINCiBkZXBlbmRzX2Rldj0iZW5jYS1kZXYgZm9udGNvbmZpZy1kZXYgZnJp YmlkaS1kZXYgZnJlZXR5cGUtZGV2Ig0KIG1ha2VkZXBlbmRzPSIkZGVwZW5kc19kZXYiDQogc3Vi cGFja2FnZXM9IiRwa2duYW1lLWRldiINCi1zb3VyY2U9Imh0dHA6Ly9naXRodWIuY29tLyRwa2du YW1lLyRwa2duYW1lL3JlbGVhc2VzL2Rvd25sb2FkLyRwa2d2ZXIvJHBrZ25hbWUtJHBrZ3Zlci50 YXIueHoiDQorc291cmNlPSJodHRwOi8vZ2l0aHViLmNvbS8kcGtnbmFtZS8kcGtnbmFtZS9yZWxl YXNlcy9kb3dubG9hZC8kcGtndmVyLyRwa2duYW1lLSRwa2d2ZXIudGFyLnh6DQorCUNWRS0yMDE2 LTc5NjkucGF0Y2gNCisJQ1ZFLTIwMTYtNzk3MC5wYXRjaA0KKwlDVkUtMjAxNi03OTcyLnBhdGNo DQorCSINCisNCitidWlsZGRpcj0iJHNyY2RpciIvJHBrZ25hbWUtJHBrZ3Zlcg0KKw0KK3ByZXBh cmUoKSB7DQorCWxvY2FsIGkNCisNCisJY2QgIiRidWlsZGRpciIgfHwgcmV0dXJuIDENCisNCisJ Zm9yIGkgaW4gJHNvdXJjZTsgZG8NCisJCWNhc2UgJGkgaW4NCisJCSoucGF0Y2gpIG1zZyAkaTsg cGF0Y2ggLXAxIC1pICIkc3JjZGlyIi8kaSB8fCBfZmFpbGVkPSIkX2ZhaWxlZCAkaSI7Ow0KKwkJ ZXNhYw0KKwlkb25lDQorfQ0KKw0KIA0KLV9idWlsZGRpcj0iJHNyY2RpciIvJHBrZ25hbWUtJHBr Z3Zlcg0KIGJ1aWxkKCkgew0KLQljZCAiJF9idWlsZGRpciINCisJY2QgIiRidWlsZGRpciINCiAJ Li9jb25maWd1cmUgXA0KIAkJLS1idWlsZD0kQ0JVSUxEIFwNCiAJCS0taG9zdD0kQ0hPU1QgXA0K QEAgLTMxLDEwICs1MCwxOSBAQCBidWlsZCgpIHsNCiB9DQogDQogcGFja2FnZSgpIHsNCi0JY2Qg IiRfYnVpbGRkaXIiDQorCWNkICIkYnVpbGRkaXIiDQogCW1ha2UgREVTVERJUj0iJHBrZ2RpciIg aW5zdGFsbA0KIH0NCiANCi1tZDVzdW1zPSI4ZTZhNTA2YjRlNWE2Mzc3NjQxODMwODM0MjFkYzgy NyAgbGliYXNzLTAuMTMuMC50YXIueHoiDQotc2hhMjU2c3Vtcz0iZTAwNzFhM2IyZTk1NDExYzhk NDc0MDE0Njc4MzY4ZTNmMGI4NTJmN2Q2NjNlMDU2NGIzNDRlNzMzNWViMDY3MSAgbGliYXNzLTAu MTMuMC50YXIueHoiDQotc2hhNTEyc3Vtcz0iMDI1M2QwY2QzMDY2MDNiMjcyMWJkMTI4YWQ2ZWIw NTBjNzRmMWVlNDE1MTQ1ZjIzOGYzYTEwYzQwNDFiMDU0YmY5NDg1N2Y0YzAwNDNhNjU3OGM0ZmQw ODY1ZTgwOWUyNWZhOWY2MTA3MTYzMWJhNjQ3YzczMWMxMzQxODYyN2YgIGxpYmFzcy0wLjEzLjAu dGFyLnh6Ig0KK21kNXN1bXM9IjhlNmE1MDZiNGU1YTYzNzc2NDE4MzA4MzQyMWRjODI3ICBsaWJh c3MtMC4xMy4wLnRhci54eg0KKzFjOGIzZDZjZDJmZmMxYTQ1OWZiYzEwNTY4OWNkNTdmICBDVkUt MjAxNi03OTY5LnBhdGNoDQorMzg5ZDNkOWRiMjRmM2NjMmMxZWFkYjdmODAxM2RlOTggIENWRS0y MDE2LTc5NzAucGF0Y2gNCisxYTcyN2JmZTJmYWYzZjYwZGVlNmRkNWU0ZmMxZjE3YyAgQ1ZFLTIw MTYtNzk3Mi5wYXRjaCINCitzaGEyNTZzdW1zPSJlMDA3MWEzYjJlOTU0MTFjOGQ0NzQwMTQ2Nzgz NjhlM2YwYjg1MmY3ZDY2M2UwNTY0YjM0NGU3MzM1ZWIwNjcxICBsaWJhc3MtMC4xMy4wLnRhci54 eg0KKzk4M2M5NTgzZTczNGRkMDM3MGIzNDAxM2MxNzAxYTMyMmVjMTIzNWJlYmFlMzVlNmQzYzA4 MGExYzk3YWRiMGQgIENWRS0yMDE2LTc5NjkucGF0Y2gNCitkNGU2YzE4YzZlZTA2NTViZDE3Zjhk ZDYyMDg3MmQ3YTBiODE4ZDVjOWZhZTYxNTJmZjE1MzA4MTIzZmY4ODcxICBDVkUtMjAxNi03OTcw LnBhdGNoDQorNTQ3ZjNjNzU2OTg4ZjA5NjI2MTJiZjVhYzliN2I0NzcxYjA0YTYwZjg2Y2Q3Nzc0 ZmQyMWRjMDI2YTljNjk4MCAgQ1ZFLTIwMTYtNzk3Mi5wYXRjaCINCitzaGE1MTJzdW1zPSIwMjUz ZDBjZDMwNjYwM2IyNzIxYmQxMjhhZDZlYjA1MGM3NGYxZWU0MTUxNDVmMjM4ZjNhMTBjNDA0MWIw NTRiZjk0ODU3ZjRjMDA0M2E2NTc4YzRmZDA4NjVlODA5ZTI1ZmE5ZjYxMDcxNjMxYmE2NDdjNzMx YzEzNDE4NjI3ZiAgbGliYXNzLTAuMTMuMC50YXIueHoNCisyNzcxNTRiNDMzODZjMDNiNWQ4NWE1 YTQxNjY1ODBlZjY2Njc2Yzg2OWNmNjAwYmIxZjAyNzM4MGE3ZTUwYTI2YzRhN2MyNTA4NTcwY2M4 MTIxOTU2YmE3OGQ4NTQ0ZWUzNzJjZTdiOGY3NGMxMWZhZWY1Y2U5NjUxMjExZjRjZCAgQ1ZFLTIw MTYtNzk2OS5wYXRjaA0KKzA4MDAyN2FjNWY0ZDc3NmFjNjc4YjM0ZjlkNjllYzIzNmY3MmZmYjQ2 YTVhZmM1ZGI1MzIzNjc4NTRkZDFiMzg0NTMwY2ViZjJhM2E4ZTdhYjkzNDdiOGI1Y2Q2M2QzZDJl YTcwNTk0Mjc5NTNlOWI4MDNkZGFhYTk4MGZjMTQyICBDVkUtMjAxNi03OTcwLnBhdGNoDQorZGFh Y2NjMzA4ZmJlYzgxNDdlYzg5YTcxZDgyZTAwMzgxN2JmMjVhNDNmOTBlNTczODE5ZDAwMWM1N2Vl MDExZmVkYzA1NjYzZjhlYjA5NTIyMGRiNGFjNThiN2UzODNhYzE4ZjQ1NGMyOTI5Nzk1MzU5ODNm YmE0Y2NmMDlmZmEgIENWRS0yMDE2LTc5NzIucGF0Y2giDQpkaWZmIC0tZ2l0IGEvbWFpbi9saWJh c3MvQ1ZFLTIwMTYtNzk2OS5wYXRjaCBiL21haW4vbGliYXNzL0NWRS0yMDE2LTc5NjkucGF0Y2gN Cm5ldyBmaWxlIG1vZGUgMTAwNjQ0DQppbmRleCAwMDAwMDAwLi5mYjY4YmJkDQotLS0gL2Rldi9u dWxsDQorKysgYi9tYWluL2xpYmFzcy9DVkUtMjAxNi03OTY5LnBhdGNoDQpAQCAtMCwwICsxLDE2 IEBADQorQmFzZWQgb24gaHR0cHM6Ly9naXRodWIuY29tL2xpYmFzcy9saWJhc3MvcHVsbC8yNDAv Y29tbWl0cy9iNzJiMjgzYjkzNmE2MDBjNzMwZTAwODc1ZDdkMDY3YmRlZDNmYzI2DQorDQorZGlm ZiAtcnUgbGliYXNzLTAuMTMuMC5vcmlnL2xpYmFzcy9hc3NfcmVuZGVyLmMgbGliYXNzLTAuMTMu MC9saWJhc3MvYXNzX3JlbmRlci5jDQorLS0tIGxpYmFzcy0wLjEzLjAub3JpZy9saWJhc3MvYXNz X3JlbmRlci5jDQorKysrIGxpYmFzcy0wLjEzLjAvbGliYXNzL2Fzc19yZW5kZXIuYw0KK0BAIC0x NjA5LDcgKzE2MDksOSBAQA0KKyAgICAgICAgICAgICAgICAgICAgICAgICAoKHMzIC0gMSktPmJi b3gueE1heCArIChzMyAtIDEpLT5wb3MueCkgLQ0KKyAgICAgICAgICAgICAgICAgICAgICAgICAo dy0+YmJveC54TWluICsgdy0+cG9zLngpKTsNCisgDQorLSAgICAgICAgICAgICAgICAgICAgaWYg KERJRkYobDFfbmV3LCBsMl9uZXcpIDwgRElGRihsMSwgbDIpKSB7DQorKyAgICAgICAgICAgICAg ICAgICAgaWYgKERJRkYobDFfbmV3LCBsMl9uZXcpIDwgRElGRihsMSwgbDIpICYmIHcgPiB0ZXh0 X2luZm8tPmdseXBocykgew0KKysgICAgICAgICAgICAgICAgICAgICAgICBpZiAody0+bGluZWJy ZWFrKQ0KKysgICAgICAgICAgICAgICAgICAgICAgICAgICAgdGV4dF9pbmZvLT5uX2xpbmVzLS07 DQorICAgICAgICAgICAgICAgICAgICAgICAgIHctPmxpbmVicmVhayA9IDE7DQorICAgICAgICAg ICAgICAgICAgICAgICAgIHMyLT5saW5lYnJlYWsgPSAwOw0KKyAgICAgICAgICAgICAgICAgICAg ICAgICBleGl0ID0gMDsNCmRpZmYgLS1naXQgYS9tYWluL2xpYmFzcy9DVkUtMjAxNi03OTcwLnBh dGNoIGIvbWFpbi9saWJhc3MvQ1ZFLTIwMTYtNzk3MC5wYXRjaA0KbmV3IGZpbGUgbW9kZSAxMDA2 NDQNCmluZGV4IDAwMDAwMDAuLmQ3ZTIyOWQNCi0tLSAvZGV2L251bGwNCisrKyBiL21haW4vbGli YXNzL0NWRS0yMDE2LTc5NzAucGF0Y2gNCkBAIC0wLDAgKzEsMTQgQEANCitCYXNlZCBvbiBodHRw czovL2dpdGh1Yi5jb20vbGliYXNzL2xpYmFzcy9wdWxsLzI0MC9jb21taXRzLzA4ZTc1NDYxMjAx OWVkODRkMWRiMGQxZmM0ZjU3OTgyNDhkZWNkNzUNCisNCitkaWZmIC1ydSBsaWJhc3MtMC4xMy4w Lm9yaWcvbGliYXNzL2Fzc19ibHVyLmMgbGliYXNzLTAuMTMuMC9saWJhc3MvYXNzX2JsdXIuYw0K Ky0tLSBsaWJhc3MtMC4xMy4wLm9yaWcvbGliYXNzL2Fzc19ibHVyLmMNCisrKysgbGliYXNzLTAu MTMuMC9saWJhc3MvYXNzX2JsdXIuYw0KK0BAIC03NDQsNyArNzQ0LDcgQEANCisgICAgICAgICAo ICAxNyAtICAxMjYgKiBtdWwgKyAgMjczICogbXVsMiAtICAxNjQgKiBtdWwzKSAvIDEyMDk2LA0K KyAgICAgfTsNCisgDQorLSAgICBkb3VibGUgbWF0X2ZyZXFbMTNdOw0KKysgICAgZG91YmxlIG1h dF9mcmVxWzE0XTsNCisgICAgIG1lbWNweShtYXRfZnJlcSwga2VybmVsLCBzaXplb2Yoa2VybmVs KSk7DQorICAgICBtZW1zZXQobWF0X2ZyZXEgKyA0LCAwLCBzaXplb2YobWF0X2ZyZXEpIC0gc2l6 ZW9mKGtlcm5lbCkpOw0KKyAgICAgaW50IG4gPSA2Ow0KZGlmZiAtLWdpdCBhL21haW4vbGliYXNz L0NWRS0yMDE2LTc5NzIucGF0Y2ggYi9tYWluL2xpYmFzcy9DVkUtMjAxNi03OTcyLnBhdGNoDQpu ZXcgZmlsZSBtb2RlIDEwMDY0NA0KaW5kZXggMDAwMDAwMC4uOTFmMmNiZQ0KLS0tIC9kZXYvbnVs bA0KKysrIGIvbWFpbi9saWJhc3MvQ1ZFLTIwMTYtNzk3Mi5wYXRjaA0KQEAgLTAsMCArMSwxMyBA QA0KK0Jhc2VkIG9uIGh0dHBzOi8vZ2l0aHViLmNvbS9saWJhc3MvbGliYXNzL3B1bGwvMjQwL2Nv bW1pdHMvYWE1NGUwYjU5MjAwYTk5NGQ1MGEzNDZiNWQ3YWM4MThlYmNmMmQ0Yg0KKw0KK2RpZmYg LXJ1IGxpYmFzcy0wLjEzLjAub3JpZy9saWJhc3MvYXNzX3NoYXBlci5jIGxpYmFzcy0wLjEzLjAv bGliYXNzL2Fzc19zaGFwZXIuYw0KKy0tLSBsaWJhc3MtMC4xMy4wLm9yaWcvbGliYXNzL2Fzc19z aGFwZXIuYw0KKysrKyBsaWJhc3MtMC4xMy4wL2xpYmFzcy9hc3Nfc2hhcGVyLmMNCitAQCAtMTAw LDYgKzEwMCw3IEBADQorICAgICAgICAgICAgICFBU1NfUkVBTExPQ19BUlJBWShzaGFwZXItPmVt YmxldmVscywgbmV3X3NpemUpIHx8DQorICAgICAgICAgICAgICFBU1NfUkVBTExPQ19BUlJBWShz aGFwZXItPmNtYXAsIG5ld19zaXplKSkNCisgICAgICAgICAgICAgcmV0dXJuIGZhbHNlOw0KKysg ICAgICAgIHNoYXBlci0+bl9nbHlwaHMgPSBuZXdfc2l6ZTsNCisgICAgIH0NCisgICAgIHJldHVy biB0cnVlOw0KKyB9DQotLSANCjIuNi42DQoNCg0KDQotLS0NClVuc3Vic2NyaWJlOiAgYWxwaW5l LWFwb3J0cyt1bnN1YnNjcmliZUBsaXN0cy5hbHBpbmVsaW51eC5vcmcNCkhlbHA6ICAgICAgICAg YWxwaW5lLWFwb3J0cytoZWxwQGxpc3RzLmFscGluZWxpbnV4Lm9yZw0KLS0tDQo=