This patch was downloaded from https://sourceforge.net/p/mpg321/bugs/51/ and
fixes CVE-2019-14247.

Description: Handle illegal bitrate value
Author: Chrysostomos Nanakos <cnanakos@debian.org>
Bug-Debian: https://bugs.debian.org/870406
Bug-Debian: https://bugs.debian.org/887057

--- mpg321-0.3.2.orig/mad.c
+++ mpg321-0.3.2/mad.c
@@ -574,6 +574,12 @@ void scan(void const *ptr, ssize_t len,
 
     if (!is_vbr)
     {
+	if (header.bitrate <= 0)                                                
+        {                                                                       
+            fprintf(stderr, "Illegal bit allocation value\n");                                                                              
+            return;                                                             
+        }    
+
         double time = (len * 8.0) / (header.bitrate); /* time in seconds */
         double timefrac = (double)time - ((long)(time));
         long nsamples = 32 * MAD_NSBSAMPLES(&header); /* samples per frame */
<a href='/guix/about/'>about</a><a href='/guix/'>summary</a><a href='/guix/refs/?id=964731ca524dd03a7a175f262a47a61e924a8cf6'>refs</a><a class='active' href='/guix/log/etc/completion/zsh/_guix'>log</a><a href='/guix/tree/etc/completion/zsh/_guix?id=964731ca524dd03a7a175f262a47a61e924a8cf6'>tree</a><a href='/guix/commit/etc/completion/zsh/_guix?id=964731ca524dd03a7a175f262a47a61e924a8cf6'>commit</a><a href='/guix/diff/etc/completion/zsh/_guix?id=964731ca524dd03a7a175f262a47a61e924a8cf6'>diff</a></td><td class='form'><form class='right' method='get' action='/guix/log/etc/completion/zsh/_guix'>
<input type='hidden' name='id' value='964731ca524dd03a7a175f262a47a61e924a8cf6'/><select name='qt'>
<option value='grep'>log msg</option>
<option value='author'>author</option>
<option value='committer'>committer</option>
<option value='range'>range</option>
</select>
<input class='txt' type='search' size='10' name='q' value=''/>
<input type='submit' value='search'/>
</form>
</td></tr></table>
<div class='path'>path: <a href='/guix/log/?id=964731ca524dd03a7a175f262a47a61e924a8cf6'>root</a>/<a href='/guix/log/etc?id=964731ca524dd03a7a175f262a47a61e924a8cf6'>etc</a>/<a href='/guix/log/etc/completion?id=964731ca524dd03a7a175f262a47a61e924a8cf6'>completion</a>/<a href='/guix/log/etc/completion/zsh?id=964731ca524dd03a7a175f262a47a61e924a8cf6'>zsh</a>/<a href='/guix/log/etc/completion/zsh/_guix?id=964731ca524dd03a7a175f262a47a61e924a8cf6'>_guix</a></div><div class='content'><table class='list nowrap'><tr class='nohover'><th class='left'>Age</th><th class='left'>Commit message (<a href='/guix/log/etc/completion/zsh/_guix?id=964731ca524dd03a7a175f262a47a61e924a8cf6&amp;showmsg=1'>Expand</a>)</th><th class='left'>Author</th></tr>
<tr><td><span title='2021-10-24 20:17:05 +0200'>2021-10-24</span></td><td><a href='/guix/commit/etc/completion/zsh/_guix?id=55f6d9e818512b4e3e4adacfa99deb201b6854be'>etc: completion: Filter gratuitous spaces from available packages.</a><span class='msg-avail'>...<span class='msg-tooltip'>Tested with:

  guix environment --{ad-hoc,pure} zsh guix bash-completion coreutils -- zsh
  % fpath=(~/guix/etc/completion/zsh $fpath)
  % autoload -U compinit; compinit

* etc/completion/zsh/_guix (_guix_list_available_packages): Remove spaces.

Co-authored-by: Tobias Geerinckx-Rice &lt;me@tobias.gr&gt;
</span></span></td><td>Liliana Marie Prikler</td></tr>
<tr><td><span title='2021-08-28 17:57:50 +0200'>2021-08-28</span></td><td><a href='/guix/commit/etc/completion/zsh/_guix?id=a8dd285d5a0670abf124a721e6ba94da045b24ba'>zsh completion: Add missing commands and arguments.</a><span class='msg-avail'>...<span class='msg-tooltip'>* etc/completion/zsh/_guix (_guix_install, _guix_remove, _guix_upgrade):
  New functions.
  (_guix_build, _guix_challenge, _guix_download, _guix_environment,
  _guix_packages, _guix_gc, _guix_hash, _guix_lint, _guix_package,
  _guix_publish, _guix_pull, _guix_refresh, _guix_size, _guix_system):
  Add some of the missing arguments.
  (_guix_cmds): Add missing commands.

Co-authored-by: Brice Waegeneire &lt;brice@waegenei.re&gt;
</span></span></td><td>Noah Evans</td></tr>
<tr><td><span title='2021-02-17 10:52:28 +0100'>2021-02-17</span></td><td><a href='/guix/commit/etc/completion/zsh/_guix?id=ee2a5da80a9bda25542c00a7a35a9ddddcbd58af'>scripts: system: Remove 'vm-image' command.</a><span class='msg-avail'>...<span class='msg-tooltip'>Remove the 'vm-image' command that has been superseded by the 'image'
command.

* gnu/system/vm.scm (system-qemu-image): Remove it.
* guix/scripts/system.scm (system-derivation-for-action): Mark 'vm-image'
command as deprecated and use the image API to produce the VM image.
(perform-action, show-help): Adapt accordingly.
* tests/guix-system.sh: Ditto.
* doc/guix.texi (Invoking guix system,
Running Guix in a VM): Ditto.
* etc/completion/fish/guix.fish: Ditto.
* etc/completion/zsh/_guix: Ditto.
</span></span></td><td>Mathieu Othacehe</td></tr>
<tr><td><span title='2019-11-26 00:16:36 +0100'>2019-11-26</span></td><td><a href='/guix/commit/etc/completion/zsh/_guix?id=dc209d5a5ddba4320c9a4f893d6df4b70f3685a0'>guix build, daemon: Rename "--no-build-hook" to "--no-offload".</a><span class='msg-avail'>...<span class='msg-tooltip'>This is a followup to bc69ea2d605810cc32e13ed03d5848b8dc358b61.

* guix/scripts/build.scm (show-build-options-help): Rename
"--no-build-hook" to "--no-offload".
(%standard-build-options): Likewise, and warn when "--no-build-hook" is
passed.
* nix/nix-daemon/guix-daemon.cc (options): Add "--no-offload" and mark
"--no-build-hook" as hidden.
* guix/scripts/offload.scm: Adjust comment.
* doc/guix.texi (Invoking guix-daemon, Common Build Options): Replace
"--no-build-hook" with "--no-offload".
* etc/completion/fish/guix.fish, etc/completion/zsh/_guix: Adjust
accordingly.
</span></span></td><td>Ludovic Courtès</td></tr>