April 2005 - MPlayer-DOCS - lists.mplayerhq.hu

CVS: main/DOCS/man/en mplayer.1,1.939,1.940
by syncmail＠mplayerhq.hu 17 Apr '05

17 Apr '05

CVS change done by Diego Biurrun CVS Update of /cvsroot/mplayer/main/DOCS/man/en In directory mail:/var2/tmp/cvs-serv11978/DOCS/man/en Modified Files: mplayer.1 Log Message: 10l typo Index: mplayer.1 =================================================================== RCS file: /cvsroot/mplayer/main/DOCS/man/en/mplayer.1,v retrieving revision 1.939 retrieving revision 1.940 diff -u -r1.939 -r1.940 --- mplayer.1 16 Apr 2005 14:33:19 -0000 1.939 +++ mplayer.1 17 Apr 2005 12:23:18 -0000 1.940 @@ -3874,7 +3874,7 @@ Observe that the number of channels will automatically be increased to <ch> if necessary. .RE -.PD1 +.PD 1 . .TP .B surround[=delay]

1 0

CVS: homepage/src dload.src.en,1.153,1.154
by syncmail＠mplayerhq.hu 16 Apr '05

16 Apr '05

CVS change done by Roberto Togni CVS Update of /cvsroot/mplayer/homepage/src In directory mail:/var2/tmp/cvs-serv19508 Modified Files: dload.src.en Log Message: 1l update also release name Index: dload.src.en =================================================================== RCS file: /cvsroot/mplayer/homepage/src/dload.src.en,v retrieving revision 1.153 retrieving revision 1.154 diff -u -r1.153 -r1.154 --- dload.src.en 16 Apr 2005 22:11:29 -0000 1.153 +++ dload.src.en 16 Apr 2005 22:29:33 -0000 1.154 @@ -40,7 +40,7 @@ <th>FTP</th> </tr> <tr> - <td>MPlayer v1.0pre6a source</td> + <td>MPlayer v1.0pre7 source</td> <td class="mirror"> [ <a href="http://www1.mplayerhq.hu/MPlayer/releases/MPlayer-1.0pre7.tar.bz2">HU</a>

1 0

CVS: homepage/src dload.src.en,1.152,1.153
by syncmail＠mplayerhq.hu 16 Apr '05

16 Apr '05

CVS change done by Roberto Togni CVS Update of /cvsroot/mplayer/homepage/src In directory mail:/var2/tmp/cvs-serv10821 Modified Files: dload.src.en Log Message: Pre7 is out Index: dload.src.en =================================================================== RCS file: /cvsroot/mplayer/homepage/src/dload.src.en,v retrieving revision 1.152 retrieving revision 1.153 diff -u -r1.152 -r1.153 --- dload.src.en 14 Apr 2005 22:39:05 -0000 1.152 +++ dload.src.en 16 Apr 2005 22:11:29 -0000 1.153 @@ -43,22 +43,22 @@ <td>MPlayer v1.0pre6a source</td> <td class="mirror"> [ - <a href="http://www1.mplayerhq.hu/MPlayer/releases/MPlayer-1.0pre6a.tar.bz2">HU</a> + <a href="http://www1.mplayerhq.hu/MPlayer/releases/MPlayer-1.0pre7.tar.bz2">HU</a> | - <a href="http://www2.mplayerhq.hu/MPlayer/releases/MPlayer-1.0pre6a.tar.bz2">HU2</a> + <a href="http://www2.mplayerhq.hu/MPlayer/releases/MPlayer-1.0pre7.tar.bz2">HU2</a> | - <a href="http://ftp5.mplayerhq.hu/mplayer/releases/MPlayer-1.0pre6a.tar.bz2">US</a> + <a href="http://ftp5.mplayerhq.hu/mplayer/releases/MPlayer-1.0pre7.tar.bz2">US</a> | - <a href="http://www4.mplayerhq.hu/MPlayer/releases/MPlayer-1.0pre6a.tar.bz2">CH</a> + <a href="http://www4.mplayerhq.hu/MPlayer/releases/MPlayer-1.0pre7.tar.bz2">CH</a> ] </td> <td class="mirror"> [ - <a href="ftp://ftp1.mplayerhq.hu/MPlayer/releases/MPlayer-1.0pre6a.tar.bz2">HU</a> + <a href="ftp://ftp1.mplayerhq.hu/MPlayer/releases/MPlayer-1.0pre7.tar.bz2">HU</a> | - <a href="ftp://ftp2.mplayerhq.hu/MPlayer/releases/MPlayer-1.0pre6a.tar.bz2">HU2</a> + <a href="ftp://ftp2.mplayerhq.hu/MPlayer/releases/MPlayer-1.0pre7.tar.bz2">HU2</a> | - <a href="ftp://ftp5.mplayerhq.hu/mplayer/releases/MPlayer-1.0pre6a.tar.bz2">US</a> + <a href="ftp://ftp5.mplayerhq.hu/mplayer/releases/MPlayer-1.0pre7.tar.bz2">US</a> ] </td> </tr>

1 0

CVS: homepage/src news.src.en,1.194,1.195
by syncmail＠mplayerhq.hu 16 Apr '05

16 Apr '05

CVS change done by Roberto Togni CVS Update of /cvsroot/mplayer/homepage/src In directory mail:/var2/tmp/cvs-serv1236 Modified Files: news.src.en Log Message: Newsentries for rtsp and mmst security update Index: news.src.en =================================================================== RCS file: /cvsroot/mplayer/homepage/src/news.src.en,v retrieving revision 1.194 retrieving revision 1.195 diff -u -r1.194 -r1.195 --- news.src.en 11 Apr 2005 19:15:00 -0000 1.194 +++ news.src.en 15 Apr 2005 23:39:08 -0000 1.195 @@ -3,6 +3,130 @@  +<div class="newsentry"> + +<h2> + <a name="vuln11">2005.04.16, Saturday :: MMST heap overflow</a> + <br><span class="poster">posted by Roberto</span> +</h2> + +<h3>Summary</h3> + +<p> +A potential buffer overflow was found and fixed in code used to handle +MMST streams. +</p> + +<h3>Severity</h3> + +<p> +High (arbitrary remote code execution under the user ID running the player) +when streaming MMS/TCP data from a malicious server, null if you do not use +this feature. +At this time there is no known exploit. +</p> + +<h3>Description</h3> + +<p> +While enumerating streams from a server, MMST code stores stream IDs in a +fixed length array, but there is no check to stop the process if too many +stream IDs are received. A malicious server could announce more than 20 +streams and overflow the array. +</p> + +<h3>Solution</h3> + +<p> +A fix for the vulnerability was checked into MPlayer CVS on +Fri Apr 15 23:31:57 2005 UTC. Users of affected MPlayer +versions should upgrade to an unaffected MPlayer version. Alternatively a +<a href="../../MPlayer/patches/mmst_fix_20050415.diff">patch</a> +is available that can be applied to the MPlayer source tree. +</p> + + +<h3>Affected versions</h3> + +<p> +MPlayer 1.0pre6 and before (including pre6a) +</p> + + +<h3>Unaffected versions</h3> + +<p> +MPlayer 1.0pre7 and after<br> +CVS HEAD after Fri Apr 15 23:31:57 2005 UTC +</p> + +</div> + + + +<div class="newsentry"> + +<h2> + <a name="vuln10">2005.04.16, Saturday :: Real RTSP heap overflow</a> + <br><span class="poster">posted by Roberto</span> +</h2> + +<h3>Summary</h3> + +<p> +A potential buffer overflow was found and fixed in code used to handle +RealMedia RTSP streams. +</p> + +<h3>Severity</h3> + +<p> +High (arbitrary remote code execution under the user ID running the player) +when streaming RTSP data from a malicious server, null if you do not use +this feature. +At this time there is no known exploit. +</p> + +<h3>Description</h3> + +<p> +While getting lines from a server, Real RTSP code stores them in a fixed size +array of MAX_FIELDS elements, but there is no check to stop the process if +too many lines are received. A malicious server could send more than +MAX_FIELDS lines and overflow the array. Since the array holds pointers to +answer strings, an attacker cannot write arbitrary data into it, making an +exploit more difficult. +</p> + +<h3>Solution</h3> + +<p> +A fix for the vulnerability was checked into MPlayer CVS on +Fri Apr 15 23:30:44 2005 UTC. Users of affected MPlayer +versions should upgrade to an unaffected MPlayer version. Alternatively a +<a href="../../MPlayer/patches/rtsp_fix_20050415.diff">patch</a> +is available that can be applied to the MPlayer source tree. +</p> + + +<h3>Affected versions</h3> + +<p> +MPlayer 1.0pre6 and before (including pre6a) +</p> + + +<h3>Unaffected versions</h3> + +<p> +MPlayer 1.0pre7 and after<br> +CVS HEAD after Fri Apr 15 23:30:44 2005 UTC +</p> + +</div> + + + <h1>News</h1> <div class="newsentry">

3 2

CVS: homepage/src news.src.en,1.195,1.196
by syncmail＠mplayerhq.hu 16 Apr '05

16 Apr '05

CVS change done by Roberto Togni CVS Update of /cvsroot/mplayer/homepage/src In directory mail:/var2/tmp/cvs-serv13658 Modified Files: news.src.en Log Message: 1000l Fix title Patch by Julian Nunes Index: news.src.en =================================================================== RCS file: /cvsroot/mplayer/homepage/src/news.src.en,v retrieving revision 1.195 retrieving revision 1.196 diff -u -r1.195 -r1.196 --- news.src.en 15 Apr 2005 23:39:08 -0000 1.195 +++ news.src.en 16 Apr 2005 18:40:35 -0000 1.196 @@ -3,6 +3,8 @@  +<h1>News</h1> + <div class="newsentry"> <h2> @@ -127,8 +129,6 @@ -<h1>News</h1> - <div class="newsentry"> <h2>

1 0

CVS: main/DOCS/man/en mplayer.1,1.938,1.939
by syncmail＠mplayerhq.hu 16 Apr '05

16 Apr '05

CVS change done by Diego Biurrun CVS Update of /cvsroot/mplayer/main/DOCS/man/en In directory mail:/var2/tmp/cvs-serv23167/DOCS/man/en Modified Files: mplayer.1 Log Message: Document af_gate, put af_gate and af_comp at the end, they're untested (broken). Index: mplayer.1 =================================================================== RCS file: /cvsroot/mplayer/main/DOCS/man/en/mplayer.1,v retrieving revision 1.938 retrieving revision 1.939 diff -u -r1.938 -r1.939 --- mplayer.1 16 Apr 2005 14:13:35 -0000 1.938 +++ mplayer.1 16 Apr 2005 14:33:19 -0000 1.939 @@ -3625,13 +3625,6 @@ .PD 1 . .TP -.B comp\ \ \ -Compressor/expander filter usable for microphone input. -Prevents artifacts on very loud sound and raises the volume on -very low sound. -This filter is untested, maybe even unusable. -. -.TP .B hrtf[=flag] Head-related transfer function: Converts multichannel audio to 2 channel output for headphones, preserving the spatiality of the sound. @@ -4017,6 +4010,18 @@ .RE .PD 1 . +.TP +.B comp\ \ \ +Compressor/expander filter usable for microphone input. +Prevents artifacts on very loud sound and raises the volume on +very low sound. +This filter is untested, maybe even unusable. +. +.TP +.B gate\ \ \ +Noise gate filter similar to the comp audio filter. +This filter is untested, maybe even unusable. +. . . .SH "VIDEO FILTERS"

1 0

CVS: main/DOCS/man/en mplayer.1,1.937,1.938
by syncmail＠mplayerhq.hu 16 Apr '05

16 Apr '05

CVS change done by Diego Biurrun CVS Update of /cvsroot/mplayer/main/DOCS/man/en In directory mail:/var2/tmp/cvs-serv18221/DOCS/man/en Modified Files: mplayer.1 Log Message: af_comp, af_center parameter, some af fixes Index: mplayer.1 =================================================================== RCS file: /cvsroot/mplayer/main/DOCS/man/en/mplayer.1,v retrieving revision 1.937 retrieving revision 1.938 diff -u -r1.937 -r1.938 --- mplayer.1 16 Apr 2005 13:14:38 -0000 1.937 +++ mplayer.1 16 Apr 2005 14:13:35 -0000 1.938 @@ -3616,15 +3616,22 @@ . .TP .B sweep[=speed] -sine sweep +Produces a sine sweep. .PD 0 .RSs -.IPs <speed> -sine function speed +.IPs <0.0\-1.0> +Sine function delta, use very low values to hear the sweep. .RE .PD 1 . .TP +.B comp\ \ \ +Compressor/expander filter usable for microphone input. +Prevents artifacts on very loud sound and raises the volume on +very low sound. +This filter is untested, maybe even unusable. +. +.TP .B hrtf[=flag] Head-related transfer function: Converts multichannel audio to 2 channel output for headphones, preserving the spatiality of the sound. @@ -3861,11 +3868,20 @@ .PD 1 . .TP -.B center +.B center\ Creates a center channel from the front channels. May currently be low quality as it does not implement a -high-pass filter for proper extracting yet, but averages and +high-pass filter for proper extraction yet, but averages and halves the channels instead. +.PD 0 +.RSs +.IPs <ch>\ +Determines the channel number in which to insert the center channel. +Channel number can be between 0 and 5 (default: 5). +Observe that the number of channels will automatically +be increased to <ch> if necessary. +.RE +.PD1 . .TP .B surround[=delay]

1 0

CVS: main/DOCS/man/en mplayer.1,1.936,1.937
by syncmail＠mplayerhq.hu 16 Apr '05

16 Apr '05

CVS change done by Diego Biurrun CVS Update of /cvsroot/mplayer/main/DOCS/man/en In directory mail:/var2/tmp/cvs-serv11673/DOCS/man/en Modified Files: mplayer.1 Log Message: af_center, af_sweep parameter, misc fixes Index: mplayer.1 =================================================================== RCS file: /cvsroot/mplayer/main/DOCS/man/en/mplayer.1,v retrieving revision 1.936 retrieving revision 1.937 diff -u -r1.936 -r1.937 --- mplayer.1 16 Apr 2005 11:31:17 -0000 1.936 +++ mplayer.1 16 Apr 2005 13:14:38 -0000 1.937 @@ -2390,7 +2390,7 @@ .RSs .IPs port=<number> Select a specific XVideo port. -.IPs ck=cur|use|set +.IPs ck=<cur|use|set> Select the source from which the colorkey is taken (default: cur). .RSss .IPs cur @@ -2401,7 +2401,7 @@ .IPs set Same as use but also sets the supplied colorkey. .RE -.IPs ck-method=man|bg|auto +.IPs ck-method=<man|bg|auto> Sets the colorkey drawing method (default: man). .RSss .IPs man @@ -3617,6 +3617,12 @@ .TP .B sweep[=speed] sine sweep +.PD 0 +.RSs +.IPs <speed> +sine function speed +.RE +.PD 1 . .TP .B hrtf[=flag] @@ -3855,6 +3861,13 @@ .PD 1 . .TP +.B center +Creates a center channel from the front channels. +May currently be low quality as it does not implement a +high-pass filter for proper extracting yet, but averages and +halves the channels instead. +. +.TP .B surround[=delay] Decoder for matrix encoded surround sound like Dolby Surround. Many files with 2 channel audio actually contain matrixed surround sound. @@ -8023,7 +8036,7 @@ .TP .B vframerate=<24000/1001 | 24 | 25 | 30000/1001 | 30 | 50 | 60000/1001 | 60 > Sets the framerate for MPEG-1/2 video. -This option will be ignored if used with option telecine. +This option will be ignored if used with the telecine option. . .TP .B telecine

1 0

CVS: main/DOCS/man/en mplayer.1,1.935,1.936
by syncmail＠mplayerhq.hu 16 Apr '05

16 Apr '05

CVS change done by Diego Biurrun CVS Update of /cvsroot/mplayer/main/DOCS/man/en In directory mail:/var2/tmp/cvs-serv19699/DOCS/man/en Modified Files: mplayer.1 Log Message: noluma suboption for vf_pp Index: mplayer.1 =================================================================== RCS file: /cvsroot/mplayer/main/DOCS/man/en/mplayer.1,v retrieving revision 1.935 retrieving revision 1.936 diff -u -r1.935 -r1.936 --- mplayer.1 13 Apr 2005 22:33:20 -0000 1.935 +++ mplayer.1 16 Apr 2005 11:31:17 -0000 1.936 @@ -4310,6 +4310,8 @@ Do chrominance filtering, too (default). .IPs y/nochrom Do luminance filtering only (no chrominance). +.IPs n/noluma +Do chrominance filtering only (no luminance). .RE .PD 1 .sp 1

1 0

faq.xml
by Torinthiel 16 Apr '05

16 Apr '05

faq.xml, lines 775-784: Check <command>ldd /usr/local/bin/mplayer</command> output. If it contains <screen>libc.so.6 => /lib/libc.so.6 (0x4???????)</screen> where "?" is any number then it's OK, the error is not here. If it is: <screen>libc.so.6 => /lib/libc.so.6 (0x00??????)</screen> then there is a problem with your kernel/libc. Maybe you are using some security patches (for example Solar Designer's OpenWall patch) which forces loading libraries to very low addresses. Because <filename>l3codeca.acm</filename> is a non-relocatable DLL, it must be loaded to <literal>0x40000000</literal>, we can't change this. You should use a non-patched kernel, or use <application>MPlayer</application>'s <option>-afm 1</option> option to disable using <filename>l3codeca.acm</filename>. Now there is something strange here. Assume l3codeca.acm has to be loaded at 0x40000000 (as written, I haven't looked at the code). Then how low-loading libc (low means 0x00??????) breaks the code? IMHO the high-loading (0x4???????) can (but not necessary does) overlap. Again, I haven't looked at the code, and it might be something really simple, but I'm a bit confused. Torinthiel -- Waclaw "Torinthiel" Schiller GG#: 542916, 3073512 torinthiel(at)megapolis(dot)pl gpg: 0906A2CE fpr: EE3E DFB4 C4D6 E22E 8999 D714 7CEB CDDC 0906 A2CE "No classmates may be used during this examination"

2 1