Prince Gupta authored 4 years ago and Pierre Lamot committed 4 years ago

Signed-off-by: Pierre Lamot <pierre@videolabs.io>

Prince Gupta authored 4 years ago and Pierre Lamot committed 4 years ago

Signed-off-by: Pierre Lamot <pierre@videolabs.io>

Open panel was showing only half of the tab view, because
the animation was interrupted right in the middle.

François Cartegnie authored 4 years ago and Hugo Beauzée-Luyssen committed 4 years ago

Signed-off-by: Hugo Beauzée-Luyssen <hugo@beauzee.fr>

Which would in turn cause a size verification failure, leading to a
buffer overflow
Reported by: Zhen Zhou, NSFOCUS Security Team

François Cartegnie authored 4 years ago and Hugo Beauzée-Luyssen committed 4 years ago

the stored track index might not match the one
at parsing time

Reported by: Zhen Zhou, NSFOCUS Security Team

Signed-off-by: Hugo Beauzée-Luyssen <hugo@beauzee.fr>

François Cartegnie authored 4 years ago and Hugo Beauzée-Luyssen committed 4 years ago

Reported by: Zhen Zhou, NSFOCUS Security Team

Signed-off-by: Hugo Beauzée-Luyssen <hugo@beauzee.fr>

François Cartegnie authored 4 years ago and Hugo Beauzée-Luyssen committed 4 years ago

Reported by: Zhen Zhou, NSFOCUS Security Team
Signed-off-by: Hugo Beauzée-Luyssen <hugo@beauzee.fr>

Reported by: Zhen Zhou, NSFOCUS Security

Romain Vimont authored 4 years ago and Hugo Beauzée-Luyssen committed 4 years ago

The function vlc_tls_GetLine() forgot to truncate the string if a line
sent by the server did not end with `\r\n`. As a consequence, it returned a
non-NUL-terminated string.

Signed-off-by: Hugo Beauzée-Luyssen <hugo@beauzee.fr>

Check whether vlc-cache-gen can actually be executed, to
detect whether it is available for the right architecture.

If it is not available, support the possibility to not
sign the plugins.dat cache file. Also support the case
the cache file is not there from the beginning.

Calling on the symlink replaces that symlink with the real file
with latest versions of that tool. This invalidated the
framework structure of the Sparkle.framework.

This partially reverts commit d3485272.

all good for 4 months

Calling front() on an empty container is undefined behavior

The longuest string is 26 characters long, not including terminal null
byte

Otherwise link might fail

We don't want the symbol to be mangled when building C++

No functional change

Using va_arg with the function pointer type spelled out can be
considered ill-formed as per C11 §7.16.1.1
See http://c-faq.com/varargs/funcptr.html

All checks were nested which was really hard to read and modify
correctly. Instead use a state variable to track the detection status
and chain AS_IF condition for each test.