audacity: fix CVE-2020-11867 fix pkglint warnings

To: pkgsrc-wip-changes%NetBSD.org@localhost
Subject: audacity: fix CVE-2020-11867 fix pkglint warnings
From: kikadf (via pkgsrc-wip) <commit-notify%pkgsrc.org@localhost>
Date: Mon, 1 Sep 2025 14:46:16 +0000
Module Name:	pkgsrc-wip
Committed By:	kikadf <kikadf.01%gmail.com@localhost>
Pushed By:	kikadf
Date:		Mon Sep 1 16:45:29 2025 +0200
Changeset:	35c9833c58994d494f1a8e09e8aafdfc40b8ff2c

Modified Files:
	audacity/Makefile
	audacity/distinfo
Added Files:
	audacity/patches/patch-lib-src_portmixer_src_Makefile.am
	audacity/patches/patch-lib-src_sbsms_src_Makefile.am
	audacity/patches/patch-src_AudacityApp.cpp
Removed Files:
	audacity/patches/patch-lib-src_portmixer_src-extra_Makefile.am
	audacity/patches/patch-lib-src_sbsms_src-extra_Makefile.am

Log Message:
audacity: fix CVE-2020-11867
fix pkglint warnings

To see a diff of this commit:
https://wip.pkgsrc.org/cgi-bin/gitweb.cgi?p=pkgsrc-wip.git;a=commitdiff;h=35c9833c58994d494f1a8e09e8aafdfc40b8ff2c

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

diffstat:
 audacity/Makefile                                         |  2 +-
 audacity/distinfo                                         |  5 +++--
 .../patches/patch-lib-src_portmixer_src-extra_Makefile.am | 12 ------------
 audacity/patches/patch-lib-src_portmixer_src_Makefile.am  | 12 ++++++++++++
 .../patches/patch-lib-src_sbsms_src-extra_Makefile.am     | 15 ---------------
 audacity/patches/patch-lib-src_sbsms_src_Makefile.am      | 15 +++++++++++++++
 audacity/patches/patch-src_AudacityApp.cpp                | 15 +++++++++++++++
 7 files changed, 46 insertions(+), 30 deletions(-)

diffs:
diff --git a/audacity/Makefile b/audacity/Makefile
index 1b38ab97b6..f2dc84e7ea 100644
--- a/audacity/Makefile
+++ b/audacity/Makefile
@@ -8,7 +8,7 @@
 #   This should be disabled by default, Audacity is offline software.
 # - Please test usage on NetBSD.
 DISTNAME=	audacity-2.4.1
-PKGREVISION=	27
+PKGREVISION=	28
 CATEGORIES=	audio
 MASTER_SITES=	${MASTER_SITE_GITHUB:=audacity/}
 GITHUB_PROJECT=	Audacity
diff --git a/audacity/distinfo b/audacity/distinfo
index a31e9ae48d..12a90d1f6c 100644
--- a/audacity/distinfo
+++ b/audacity/distinfo
@@ -15,8 +15,9 @@ SHA1 (patch-lib-src_libnyquist_nyquist_cmupv_src_cmupv.c) = 3d6cb845d82b1bcbe31d
 SHA1 (patch-lib-src_libnyquist_nyquist_nyqsrc_sndread.c) = dbc0b5b88043c7b2895742e78e6a5990f65012ef
 SHA1 (patch-lib-src_libnyquist_nyquist_sys_unix_switches.h) = 9401ac521d5a2aa8600a465b9133dff7e7b2ea35
 SHA1 (patch-lib-src_libnyquist_nyquist_xlisp_xlisp.h) = a79f2f58f32f96fc67bc2420bef6c812d37c96f0
-SHA1 (patch-lib-src_portmixer_src-extra_Makefile.am) = 9a0d5be37753683a2cade42673edb3d08e01ab4d
-SHA1 (patch-lib-src_sbsms_src-extra_Makefile.am) = 2beca18a286de1b26f4f96976fb58e1665d0531c
+SHA1 (patch-lib-src_portmixer_src_Makefile.am) = 9a0d5be37753683a2cade42673edb3d08e01ab4d
+SHA1 (patch-lib-src_sbsms_src_Makefile.am) = 2beca18a286de1b26f4f96976fb58e1665d0531c
+SHA1 (patch-src_AudacityApp.cpp) = 3ae757ada999f1e56fae0499137f37b51bdd7fec
 SHA1 (patch-src_AudioIO.cpp) = 1b44c68c4233b24a5fa4e17515eb237fee0e283a
 SHA1 (patch-src_audacity.desktop.in) = 66e43b6cba4d0245210fb6e9b7345abef1828e89
 SHA1 (patch-src_effects_NoiseRemoval.cpp) = 6d72545cde66ac90d4eb3821a3a3f384ccbf46f2
diff --git a/audacity/patches/patch-lib-src_portmixer_src-extra_Makefile.am b/audacity/patches/patch-lib-src_portmixer_src-extra_Makefile.am
deleted file mode 100644
index 7a432f6b1f..0000000000
--- a/audacity/patches/patch-lib-src_portmixer_src-extra_Makefile.am
+++ /dev/null
@@ -1,12 +0,0 @@
-$NetBSD: patch-lib-src_portmixer_src-extra_Makefile.am,v 1.1 2015/09/18 21:19:07 mrg Exp $
-
-don't build a shared library of this.
-
---- lib-src/portmixer/src/Makefile.am.orig	2015-03-01 17:07:05.000000000 -0800
-+++ lib-src/portmixer/src/Makefile.am	2015-09-18 11:29:08.000000000 -0700
-@@ -1,4 +1,4 @@
--lib_LTLIBRARIES = libportmixer.la
-+noinst_LTLIBRARIES = libportmixer.la
- 
- libportmixer_la_CPPFLAGS = -I$(top_srcdir)/include $(PORTAUDIO_CFLAGS)
- libportmixer_la_SOURCES = \
diff --git a/audacity/patches/patch-lib-src_portmixer_src_Makefile.am b/audacity/patches/patch-lib-src_portmixer_src_Makefile.am
new file mode 100644
index 0000000000..7a432f6b1f
--- /dev/null
+++ b/audacity/patches/patch-lib-src_portmixer_src_Makefile.am
@@ -0,0 +1,12 @@
+$NetBSD: patch-lib-src_portmixer_src-extra_Makefile.am,v 1.1 2015/09/18 21:19:07 mrg Exp $
+
+don't build a shared library of this.
+
+--- lib-src/portmixer/src/Makefile.am.orig	2015-03-01 17:07:05.000000000 -0800
++++ lib-src/portmixer/src/Makefile.am	2015-09-18 11:29:08.000000000 -0700
+@@ -1,4 +1,4 @@
+-lib_LTLIBRARIES = libportmixer.la
++noinst_LTLIBRARIES = libportmixer.la
+ 
+ libportmixer_la_CPPFLAGS = -I$(top_srcdir)/include $(PORTAUDIO_CFLAGS)
+ libportmixer_la_SOURCES = \
diff --git a/audacity/patches/patch-lib-src_sbsms_src-extra_Makefile.am b/audacity/patches/patch-lib-src_sbsms_src-extra_Makefile.am
deleted file mode 100644
index f4532b9da2..0000000000
--- a/audacity/patches/patch-lib-src_sbsms_src-extra_Makefile.am
+++ /dev/null
@@ -1,15 +0,0 @@
-$NetBSD: patch-lib-src_sbsms_src-extra_Makefile.am,v 1.1 2015/09/18 21:19:07 mrg Exp $
-
-don't build a shared library of this.
-
---- lib-src/sbsms/src/Makefile.am.orig	2015-03-01 17:07:04.000000000 -0800
-+++ lib-src/sbsms/src/Makefile.am	2015-09-18 11:29:19.000000000 -0700
-@@ -3,7 +3,7 @@
- libsbsmsincludedir = $(includedir)
- libsbsmsinclude_HEADERS = ../include/sbsms.h
- 
--lib_LTLIBRARIES = libsbsms.la
-+noinst_LTLIBRARIES = libsbsms.la
- libsbsms_la_SOURCES = \
- 	sms.cpp \
- 	track.cpp \
diff --git a/audacity/patches/patch-lib-src_sbsms_src_Makefile.am b/audacity/patches/patch-lib-src_sbsms_src_Makefile.am
new file mode 100644
index 0000000000..f4532b9da2
--- /dev/null
+++ b/audacity/patches/patch-lib-src_sbsms_src_Makefile.am
@@ -0,0 +1,15 @@
+$NetBSD: patch-lib-src_sbsms_src-extra_Makefile.am,v 1.1 2015/09/18 21:19:07 mrg Exp $
+
+don't build a shared library of this.
+
+--- lib-src/sbsms/src/Makefile.am.orig	2015-03-01 17:07:04.000000000 -0800
++++ lib-src/sbsms/src/Makefile.am	2015-09-18 11:29:19.000000000 -0700
+@@ -3,7 +3,7 @@
+ libsbsmsincludedir = $(includedir)
+ libsbsmsinclude_HEADERS = ../include/sbsms.h
+ 
+-lib_LTLIBRARIES = libsbsms.la
++noinst_LTLIBRARIES = libsbsms.la
+ libsbsms_la_SOURCES = \
+ 	sms.cpp \
+ 	track.cpp \
diff --git a/audacity/patches/patch-src_AudacityApp.cpp b/audacity/patches/patch-src_AudacityApp.cpp
new file mode 100644
index 0000000000..17922cf741
--- /dev/null
+++ b/audacity/patches/patch-src_AudacityApp.cpp
@@ -0,0 +1,15 @@
+$NetBSD$
+
+* Fix CVE-2020-11867, https://github.com/audacity/audacity/commit/8bb55b8bbf0f0030224d0bfa1b290c4bc1d91b6a
+
+--- src/AudacityApp.cpp.orig	2025-09-01 16:24:41.676126412 +0200
++++ src/AudacityApp.cpp
+@@ -1786,7 +1786,7 @@ bool AudacityApp::InitTempDir()
+    // The permissions don't always seem to be set on
+    // some platforms.  Hopefully this fixes it...
+    #ifdef __UNIX__
+-   chmod(OSFILENAME(temp), 0755);
++   chmod(OSFILENAME(temp), 0700);
+    #endif
+ 
+    bool bSuccess = gPrefs->Write(wxT("/Directories/TempDir"), temp) && gPrefs->Flush();
Prev by Date: Import audio/audacity
Next by Date: nextpnr-himbaechel-gowin: Add nextpnr-himbaechel-gowin version 0.0.20250829
Previous by Thread: Import audio/audacity
Next by Thread: nextpnr-himbaechel-gowin: Add nextpnr-himbaechel-gowin version 0.0.20250829
Indexes:
Home | Main Index | Thread Index | Old Index