git-svn-id: https://svn.xiph.org/trunk/Tremor@17521 0101bb08-14d6-0310-b084-bc0e0c8e3800

Fix for bug #1456-- the 'bulletproofing' from CVE-2008-1420 inadvertantly 
 rejects a harmless/legal (if suboptimal) codebook arrangement that was 
 apparently used in 1.0b1.
Modify fix for Trac #1572; some files from the earliest beta
 accidentally used an oversized phrasebook in res decode; allow these.


git-svn-id: https://svn.xiph.org/trunk/Tremor@17520 0101bb08-14d6-0310-b084-bc0e0c8e3800

Correct an accidental dereference-before-check in error cleanup in comments.


git-svn-id: https://svn.xiph.org/trunk/Tremor@17519 0101bb08-14d6-0310-b084-bc0e0c8e3800

The vorbisfile part of this got merged in r16259, but the corresponding changes
 to voris_synthesis_init() to actually return a failure code did not.


git-svn-id: https://svn.xiph.org/trunk/Tremor@17518 0101bb08-14d6-0310-b084-bc0e0c8e3800

Actually allocate the right number of comments, and add an extra check against
 i+1 overflowing (which could happen with a 4 GB comment packet on a 64-bit
 machine... unlikely, but possible).


git-svn-id: https://svn.xiph.org/trunk/Tremor@17517 0101bb08-14d6-0310-b084-bc0e0c8e3800

This accidentally contained far more than I meant to commit.


git-svn-id: https://svn.xiph.org/trunk/Tremor@17516 0101bb08-14d6-0310-b084-bc0e0c8e3800

Actually allocate the right number of comments, and add an extra check against
 i+1 overflowing (which could happen with a 4 GB comment packet on a 64-bit
 machine... unlikely, but possible).


git-svn-id: https://svn.xiph.org/trunk/Tremor@17515 0101bb08-14d6-0310-b084-bc0e0c8e3800

Don't try to read past the end of the comment packet if the string lengths are
 corrupt.
Correct a potential comment length sanity check overflow.
Commit additional hardening to comment packet decode.

Also add allocation checks, since these can still run us out of address space
 if someone actually sends a GB or two of comment data.


git-svn-id: https://svn.xiph.org/trunk/Tremor@17514 0101bb08-14d6-0310-b084-bc0e0c8e3800

Add code to prevent heap attacks by exploiting dim==bignum and
 partition_codewords==partion_values^dim.


git-svn-id: https://svn.xiph.org/trunk/Tremor@17513 0101bb08-14d6-0310-b084-bc0e0c8e3800

Correctly handle the nonsensical codebook.dim==0 case.


git-svn-id: https://svn.xiph.org/trunk/Tremor@17512 0101bb08-14d6-0310-b084-bc0e0c8e3800

Add checks/rejection for absurdly huge codebooks.


git-svn-id: https://svn.xiph.org/trunk/Tremor@17511 0101bb08-14d6-0310-b084-bc0e0c8e3800

Additional bulletproofing to hufftree decoding; reject underpopulated trees
 up-front.
Handle the case of single-entry codebooks.


git-svn-id: https://svn.xiph.org/trunk/Tremor@17510 0101bb08-14d6-0310-b084-bc0e0c8e3800

Moral equivalent of r15937 for libvorbis.


git-svn-id: https://svn.xiph.org/trunk/Tremor@17509 0101bb08-14d6-0310-b084-bc0e0c8e3800

git-svn-id: https://svn.xiph.org/trunk/Tremor@17376 0101bb08-14d6-0310-b084-bc0e0c8e3800

This makes it easier to use Tremor as a drop-in replacement for libvorbis and
 reduces code size and overhead for those who don't want to use its built-in
 Ogg demuxer.
This commit also backports all of the changes that have accumulated in
 libvorbis's vorbisfile implementation, with the exception of halfrate decoding
 and cross-lapped seeking.
Those should not be too hard to add if someone really wants them.


git-svn-id: https://svn.xiph.org/trunk/Tremor@17375 0101bb08-14d6-0310-b084-bc0e0c8e3800

Add vorbis_synthesis_trackonly() instead, so that this part of the API works
 like mainline libvorbis now.


git-svn-id: https://svn.xiph.org/trunk/Tremor@17374 0101bb08-14d6-0310-b084-bc0e0c8e3800

fixes the message

configure: WARNING: unrecognized options: --enable-maintainer-mode

at the end of configure run when one was using autogen.sh.

Patch by Stefan Kost

git-svn-id: https://svn.xiph.org/trunk/Tremor@17157 0101bb08-14d6-0310-b084-bc0e0c8e3800

normal vorbisdec.

Patch by Stefan Kost

git-svn-id: https://svn.xiph.org/trunk/Tremor@17156 0101bb08-14d6-0310-b084-bc0e0c8e3800

git-svn-id: https://svn.xiph.org/trunk/Tremor@17152 0101bb08-14d6-0310-b084-bc0e0c8e3800

Patch by Stefan Kost

git-svn-id: https://svn.xiph.org/trunk/Tremor@17151 0101bb08-14d6-0310-b084-bc0e0c8e3800

git-svn-id: https://svn.xiph.org/trunk/Tremor@17150 0101bb08-14d6-0310-b084-bc0e0c8e3800

There are 3 public symbols in the headers, which are missing in the
linker script and thus marked as private again. This causes issues for
e.g. gstreamer (https://bugzilla.gnome.org/show_bug.cgi?id=616194).

git-svn-id: https://svn.xiph.org/trunk/Tremor@17149 0101bb08-14d6-0310-b084-bc0e0c8e3800

Removed Release_SSE and Release SSE2 configurations. Changed Windows Mobile 5.0 configuration from "Pocket PC SDK 2 (ARMV4I)" to "Pocket PC SDK (ARMV4I)", version "2" was generated by versions of Windows Mobile 5.0 SDK which are no longer available on MSDN.

git-svn-id: https://svn.xiph.org/trunk/Tremor@16913 0101bb08-14d6-0310-b084-bc0e0c8e3800

git-svn-id: https://svn.xiph.org/trunk/Tremor@16724 0101bb08-14d6-0310-b084-bc0e0c8e3800

git-svn-id: https://svn.xiph.org/trunk/Tremor@16641 0101bb08-14d6-0310-b084-bc0e0c8e3800

reference 1.2.2 and 1.2.3 into tremor.



git-svn-id: https://svn.xiph.org/trunk/Tremor@16259 0101bb08-14d6-0310-b084-bc0e0c8e3800

git-svn-id: https://svn.xiph.org/trunk/Tremor@15687 0101bb08-14d6-0310-b084-bc0e0c8e3800

git-svn-id: https://svn.xiph.org/trunk/Tremor@15546 0101bb08-14d6-0310-b084-bc0e0c8e3800

git-svn-id: https://svn.xiph.org/trunk/Tremor@15417 0101bb08-14d6-0310-b084-bc0e0c8e3800

git-svn-id: https://svn.xiph.org/trunk/Tremor@15207 0101bb08-14d6-0310-b084-bc0e0c8e3800

git-svn-id: https://svn.xiph.org/trunk/Tremor@14507 0101bb08-14d6-0310-b084-bc0e0c8e3800

git-svn-id: https://svn.xiph.org/trunk/Tremor@14419 0101bb08-14d6-0310-b084-bc0e0c8e3800

overrun our destination array for > 2 channels.


git-svn-id: https://svn.xiph.org/trunk/Tremor@13794 0101bb08-14d6-0310-b084-bc0e0c8e3800

linker supports it (GNU ld on linux or solaris) to avoid conflicts
from internal symbols, most specifically the ogg implementation.


git-svn-id: https://svn.xiph.org/trunk/Tremor@13291 0101bb08-14d6-0310-b084-bc0e0c8e3800

git-svn-id: https://svn.xiph.org/trunk/Tremor@13185 0101bb08-14d6-0310-b084-bc0e0c8e3800

forcing buffer eop correctly when it hit end of packet (as it was using 
look() not read())



git-svn-id: https://svn.xiph.org/trunk/Tremor@13180 0101bb08-14d6-0310-b084-bc0e0c8e3800

git-svn-id: https://svn.xiph.org/trunk/Tremor@13173 0101bb08-14d6-0310-b084-bc0e0c8e3800

Eliminate electric fence from debug Makefile; valgrind supercedes.



git-svn-id: https://svn.xiph.org/trunk/Tremor@13164 0101bb08-14d6-0310-b084-bc0e0c8e3800

 illegal map/floor/residue type. The cleanup subdispatch was done by
 type, unfortunately, the invalid type just read in. Fixed.



git-svn-id: https://svn.xiph.org/trunk/Tremor@13161 0101bb08-14d6-0310-b084-bc0e0c8e3800

is *larger* than the current blocksize.  Handle according to spec.



git-svn-id: https://svn.xiph.org/trunk/Tremor@13156 0101bb08-14d6-0310-b084-bc0e0c8e3800