%global majorver 1 %global minorver 3 %global tinyver 0 Name: compat-libvpx%{majorver}%{minorver} Summary: VP8 Video Codec SDK Version: %{majorver}.%{minorver}.%{tinyver} %global soversion %{version} Release: 9%{?dist} License: BSD Group: System Environment/Libraries Source0: http://webm.googlecode.com/files/libvpx-v%{version}.tar.bz2 # Thanks to debian. Source2: libvpx.ver Patch0: Bug-fix-in-ssse3-quantize-function.patch Patch1: x86inc-nasm.patch Patch2: vp9-nasm.patch Patch3: sectalign-nasm.patch Patch4: 0001-vp8-fix-threading-issues.patch Patch5: 0001-CVE-2019-9232-Fix-OOB-memory-access-on-fuzzed-data.patch Patch6: 0002-CVE-2019-9433-VP8-Fix-use-after-free-in-postproc.patch Patch7: 0001-vp8_decode_frame-fix-oob-read-on-truncated-key-frame.patch URL: http://www.webmproject.org/tools/vp8-sdk/ %ifarch %{ix86} x86_64 BuildRequires: nasm %endif BuildRequires: doxygen, php-cli %description libvpx provides the VP8 SDK, which allows you to integrate your applications with the VP8 video codec, a high quality, royalty free, open source codec deployed on millions of computers and devices worldwide. %package devel Summary: Development files for libvpx Group: Development/Libraries Requires: %{name}%{?_isa} = %{version}-%{release} Conflicts: libvpx-devel %description devel Development libraries and headers for developing software against libvpx. %package utils Summary: VP8 utilities and tools Group: Development/Tools Requires: %{name}%{?_isa} = %{version}-%{release} Conflicts: libvpx-utils %description utils A selection of utilities and tools for VP8, including a sample encoder and decoder. %prep %setup -q -n libvpx-v%{version} %patch0 -p1 -b .patch0 %patch1 -p1 -b .x86inc-nasm %patch2 -p1 -b .vp9-nasm %patch3 -p1 -b .sectalign-nasm %patch4 -p1 -b .0004 %patch5 -p1 -b .0005 %patch6 -p1 -b .0006 %patch7 -p1 -b .0007 sed -i -e 's/^\(global .*\) PRIVATE$/\1/' $(find -name "*.asm") %build %ifarch %{ix86} %global vpxtarget x86-linux-gcc %else %ifarch x86_64 %global vpxtarget x86_64-linux-gcc %else %ifarch armv7hl %global vpxtarget armv7-linux-gcc %else %global vpxtarget generic-gnu %endif %endif %endif # The configure script will reject the shared flag on the generic target # This means we need to fall back to the manual creation we did before. :P %if "%{vpxtarget}" == "generic-gnu" %global generic_target 1 %else %global generic_target 0 %endif %ifarch armv7hl CROSS=armv7hl-redhat-linux-gnueabi- CHOST=armv7hl-redhat-linux-gnueabi-hardfloat ./configure \ %else ./configure --target=%{vpxtarget} \ %endif --enable-pic --disable-install-srcs --as=nasm \ %if ! %{generic_target} --enable-shared \ %endif --prefix=%{_prefix} --libdir=%{_libdir} # Hack our optflags in. sed -i "s|-O3|%{optflags}|g" libs-%{vpxtarget}.mk sed -i "s|-O3|%{optflags}|g" examples-%{vpxtarget}.mk sed -i "s|-O3|%{optflags}|g" docs-%{vpxtarget}.mk %ifarch armv7hl #hackety hack hack sed -i "s|AR=armv7hl-redhat-linux-gnueabi-ar|AR=ar|g" libs-%{vpxtarget}.mk sed -i "s|AR=armv7hl-redhat-linux-gnueabi-ar|AR=ar|g" examples-%{vpxtarget}.mk sed -i "s|AR=armv7hl-redhat-linux-gnueabi-ar|AR=ar|g" docs-%{vpxtarget}.mk sed -i "s|AS=armv7hl-redhat-linux-gnueabi-as|AS=as|g" libs-%{vpxtarget}.mk sed -i "s|AS=armv7hl-redhat-linux-gnueabi-as|AS=as|g" examples-%{vpxtarget}.mk sed -i "s|AS=armv7hl-redhat-linux-gnueabi-as|AS=as|g" docs-%{vpxtarget}.mk sed -i "s|NM=armv7hl-redhat-linux-gnueabi-nm|NM=nm|g" libs-%{vpxtarget}.mk sed -i "s|NM=armv7hl-redhat-linux-gnueabi-nm|NM=nm|g" examples-%{vpxtarget}.mk sed -i "s|NM=armv7hl-redhat-linux-gnueabi-nm|NM=nm|g" docs-%{vpxtarget}.mk %endif make %{?_smp_mflags} verbose=true target=libs %if %{generic_target} # Manual shared library creation mkdir tmp cd tmp ar x ../libvpx_g.a cd .. gcc -fPIC -shared -pthread -lm -Wl,--no-undefined -Wl,-soname,libvpx.so.%{majorver} -Wl,--version-script,%{SOURCE2} -Wl,-z,noexecstack -o libvpx.so.%{soversion} tmp/*.o rm -rf tmp %endif # Temporarily dance the static libs out of the way mv libvpx.a libNOTvpx.a mv libvpx_g.a libNOTvpx_g.a # We need to do this so the examples can link against it. ln -sf libvpx.so.%{soversion} libvpx.so make %{?_smp_mflags} verbose=true target=examples CONFIG_SHARED=1 make %{?_smp_mflags} verbose=true target=docs # Put them back so the install doesn't fail mv libNOTvpx.a libvpx.a mv libNOTvpx_g.a libvpx_g.a %install make DIST_DIR=%{buildroot}%{_prefix} dist # Simpler to label the dir as %doc. mv %{buildroot}/usr/docs doc/ %if %{generic_target} install -p libvpx.so.%{soversion} %{buildroot}%{_libdir} pushd %{buildroot}%{_libdir} ln -sf libvpx.so.%{soversion} libvpx.so ln -sf libvpx.so.%{soversion} libvpx.so.%{majorver} ln -sf libvpx.so.%{soversion} libvpx.so.%{majorver}.%{minorver} popd %endif pushd %{buildroot} # Stuff we don't need. rm -rf usr/build/ usr/md5sums.txt usr/lib*/*.a usr/CHANGELOG usr/README # Rename a few examples mv usr/bin/postproc usr/bin/vp8_postproc mv usr/bin/simple_decoder usr/bin/vp8_simple_decoder mv usr/bin/simple_encoder usr/bin/vp8_simple_encoder mv usr/bin/twopass_encoder usr/bin/vp8_twopass_encoder # Fix the binary permissions chmod 755 usr/bin/* popd %post -p /sbin/ldconfig %postun -p /sbin/ldconfig %files %doc AUTHORS CHANGELOG LICENSE README %{_libdir}/libvpx.so.* %files devel # These are SDK docs, not really useful to an end-user. %doc docs/html/ %{_includedir}/vpx/ %{_libdir}/pkgconfig/vpx.pc %{_libdir}/libvpx.so %files utils %{_bindir}/* %changelog * Fri Sep 10 2021 Gary Buhrmaster - 1.3.0-9 - compat package * Wed Apr 15 2020 Taymans - 1.3.0-8 - Fix for CVE-2020-0034 - Resolves: rhbz#1823909 * Wed Mar 25 2020 Taymans - 1.3.0-7 - Fix for CVE-2019-9232 and CVE-2019-9433 - Resolves: rhbz#1796085, rhbz#1796099 * Tue Jan 7 2020 Taymans - 1.3.0-6 - Fix for CVE-2017-0393 - Resolves: rhbz#1779498 * Thu Mar 20 2014 Wim Taymans - 1.3.0-4 - fix Illegal Instruction abort * Thu Feb 13 2014 Dan Horák - 1.3.0-3 - update library symbol list for 1.3.0 from Debian * Tue Feb 11 2014 Tom Callaway - 1.3.0-2 - armv7hl specific target * Tue Feb 11 2014 Tom Callaway - 1.3.0-1 - update to 1.3.0 * Thu Feb 28 2013 Tom Callaway - 1.2.0-1 - update to 1.2.0 * Tue May 29 2012 Tom Callaway - 1.1.0-1 - update to 1.1.0 * Tue May 29 2012 Tom Callaway - 1.0.0-3 - fix vpx.pc file to include -lm (bz825754) * Fri May 11 2012 Tom Callaway - 1.0.0-2 - use included vpx.pc file (drop local libvpx.pc) - apply upstream fix to vpx.pc file (bz 814177) * Mon Jan 30 2012 Tom Callaway - 1.0.0-1 - update to 1.0.0 * Mon Oct 10 2011 Dan Horák - 0.9.7.1-3 - use macro instead of hard-coded version * Mon Sep 12 2011 Dan Horák - 0.9.7.1-2 - fix build on generic targets * Tue Aug 16 2011 Adam Jackson 0.9.7.1-1 - libvpx 0.9.7-p1 * Tue Aug 09 2011 Adam Jackson 0.9.7-1 - libvpx 0.9.7 * Mon Mar 21 2011 Dan Horák - 0.9.6-2 - add 2 symbols to the shared library for generic targets * Thu Mar 10 2011 Tom Callaway - 0.9.6-1 - update to 0.9.6 * Tue Feb 08 2011 Fedora Release Engineering - 0.9.5-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild * Wed Nov 17 2010 Tom "spot" Callaway 0.9.5-2 - apply patch from upstream git (Change I6266aba7), should resolve CVE-2010-4203 * Mon Nov 1 2010 Tom "spot" Callaway 0.9.5-1 - update to 0.9.5 * Wed Sep 1 2010 Tom "spot" Callaway 0.9.1-3 - only package html docs to avoid multilib conflict (bz 613185) * Thu Jun 24 2010 Tom "spot" Callaway 0.9.1-2 - build shared library the old way for generic arches * Thu Jun 24 2010 Tom "spot" Callaway 0.9.1-1 - update to 0.9.1 * Fri Jun 11 2010 Tom "spot" Callaway 0.9.0-7 - update to git revision 8389f1967c5f8b3819cca80705b1b4ba04132b93 - upstream fix for bz 599147 - proper shared library support * Wed Jun 2 2010 Tom "spot" Callaway 0.9.0-6 - add hackish fix for bz 599147 (upstream will hopefully fix properly in future release) * Fri May 21 2010 Tom "spot" Callaway 0.9.0-5 - fix noexecstack flag * Thu May 20 2010 Tom "spot" Callaway 0.9.0-4 - BuildRequires: yasm (we're optimized again) * Thu May 20 2010 Tom "spot" Callaway 0.9.0-3 - add pkg-config file - move headers into include/vpx/ - enable optimization * Thu May 20 2010 Tom "spot" Callaway 0.9.0-2 - fix permissions on binaries - rename generic binaries to v8_* - link shared library to -lm, -lpthread to resolve missing weak symbols * Wed May 19 2010 Tom "spot" Callaway 0.9.0-1 - Initial package for Fedora