From 1eb9bb6dc735dc71d8dee16868ee7f9f121db525 Mon Sep 17 00:00:00 2001
From: Holger Hans Peter Freyther <zecke@selfish.org>
Date: Tue, 16 Mar 2010 10:18:17 +0800
Subject: [PATCH] streamripper: Upgrade to 1.64.6 to address multiple buffer
 overflows

Address CVE-2008-4829 which was fixed in 1.64.0
---
 conf/checksums.ini                                        | 8 --------
 .../{streamripper_1.61.10.bb => streamripper_1.64.6.bb}   | 4 +++-
 2 files changed, 3 insertions(+), 9 deletions(-)
 rename recipes/streamripper/{streamripper_1.61.10.bb => streamripper_1.64.6.bb} (70%)

diff --git a/conf/checksums.ini b/conf/checksums.ini
index 63cf4156f0..0a63d0c752 100644
--- a/conf/checksums.ini
+++ b/conf/checksums.ini
@@ -25610,14 +25610,6 @@ sha256=ba8c492c1b2033d4e2131f05df9e3780d4bc35bea87aa32a6052dd53a814e288
 md5=e9449fcee97e6a8ed73934c883c870e0
 sha256=95e7b7470e04f22c3ec8dc6d0b1fdd8944306cb5313c84c4545cd83abada26d0
 
-[http://downloads.sourceforge.net/streamripper/streamripper-1.61.10.tar.gz]
-md5=2d62a4546521980e1ed705a5094a6ec3
-sha256=08ca63620c1c071f4b2d42c5f63f38cee920aa57cde151ac3cfcf344437e3f11
-
-[http://heanet.dl.sourceforge.net/streamripper/streamripper-1.61.10.tar.gz]
-md5=2d62a4546521980e1ed705a5094a6ec3
-sha256=08ca63620c1c071f4b2d42c5f63f38cee920aa57cde151ac3cfcf344437e3f11
-
 [http://downloads.sourceforge.net/streamripper/streamripper-1.61.3.tar.gz]
 md5=57cd09098917bda29f841d366649681c
 sha256=1747aee9fa4cc09b49e0fb14baace3293f8f870c0de27fd3550cde21d99e9cd7
diff --git a/recipes/streamripper/streamripper_1.61.10.bb b/recipes/streamripper/streamripper_1.64.6.bb
similarity index 70%
rename from recipes/streamripper/streamripper_1.61.10.bb
rename to recipes/streamripper/streamripper_1.64.6.bb
index fe691400ac..f8141cf06c 100644
--- a/recipes/streamripper/streamripper_1.61.10.bb
+++ b/recipes/streamripper/streamripper_1.64.6.bb
@@ -4,7 +4,9 @@ LICENSE = "GPL"
 DEPENDS= "libogg libvorbis"
 RDEPENDS= "libogg libvorbis"
 
-SRC_URI = "${SOURCEFORGE_MIRROR}/streamripper/streamripper-${PV}.tar.gz"
+SRC_URI = "${SOURCEFORGE_MIRROR}/streamripper/streamripper-${PV}.tar.gz;name=src"
+SRC_URI[src.md5sum] = "a37a1a8b8f9228522196a122a1c2dd32"
+SRC_URI[src.sha256sum] = "c1d75f2e9c7b38fd4695be66eff4533395248132f3cc61f375196403c4d8de42"
 
 EXTRA_OECONF="--disable-oggtest \
 		--disable-vorbistest \
-- 
2.39.2