# Contributor: Sergei Lukin <sergej.lukin@gmail.com>
# Maintainer: Natanael Copa <ncopa@alpinelinux.org>
pkgname=libsndfile
pkgver=1.0.28
pkgrel=2
pkgdesc="A C library for reading and writing files containing sampled sound"
url="http://www.mega-nerd.com/libsndfile"
arch="all"
license="LGPL2+"
subpackages="$pkgname-dev $pkgname-doc"
depends=
depends_dev="flac-dev libvorbis-dev libogg-dev"
makedepends="linux-headers alsa-lib-dev $depends_dev"
source="http://www.mega-nerd.com/$pkgname/files/$pkgname-$pkgver.tar.gz
	CVE-2017-8361_CVE-2017-8363_CVE-2017-8365.patch
	CVE-2017-8362.patch
	CVE-2017-12562.patch
	"

# secfixes:
#   1.0.28-r2:
#   - CVE-2017-12562
#   1.0.28-r0:
#   - CVE-2017-7585
#   - CVE-2017-7741
#   - CVE-2017-7742
#   1.0.28-r1:
#   - CVE-2017-8361
#   - CVE-2017-8362
#   - CVE-2017-8363
#   - CVE-2017-8365

_builddir="$srcdir/$pkgname-$pkgver"
build () {
	cd "$_builddir"
	ac_cv_sys_largefile_CFLAGS="-D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64" \
	./configure \
		--build=$CBUILD \
		--host=$CHOST \
		--prefix=/usr \
		--disable-sqlite \
		--enable-largefile \
		|| return 1
	make || return 1
}

package() {
	cd "$_builddir"
	make DESTDIR="$pkgdir" install || return 1
}
md5sums="646b5f98ce89ac60cdb060fcd398247c  libsndfile-1.0.28.tar.gz
cdd75dee754a3f97a2b9852193858e8b  CVE-2017-8361_CVE-2017-8363_CVE-2017-8365.patch
883e150165932d7dc89aee64795a5e5e  CVE-2017-8362.patch
bcee757ad4ec56f92c0c2ad5c9c9bf96  CVE-2017-12562.patch"
sha256sums="1ff33929f042fa333aed1e8923aa628c3ee9e1eb85512686c55092d1e5a9dfa9  libsndfile-1.0.28.tar.gz
c2d2665744b32facab093540bd0b0c28e72496dd03f8fd51e0aef42fb76d9631  CVE-2017-8361_CVE-2017-8363_CVE-2017-8365.patch
3dc977a26f36a779874bda304685a221a9da08d3e6b8d239f19785a31e18dbf7  CVE-2017-8362.patch
5e13e843a247c5cc3e33e926183281003512bd34dbb32acab6c9360e06e6e3c9  CVE-2017-12562.patch"
sha512sums="890731a6b8173f714155ce05eaf6d991b31632c8ab207fbae860968861a107552df26fcf85602df2e7f65502c7256c1b41735e1122485a3a07ddb580aa83b57f  libsndfile-1.0.28.tar.gz
f98c40696fca3e7bca867df993de55bb4145c23428e65d1a669182eb2293046478ac727ae7f94bb77123ef0355c3c53be4f9d6a432665c90c74687d8d3afd9e3  CVE-2017-8361_CVE-2017-8363_CVE-2017-8365.patch
dfd4b5f1c7471fc416eed5c6040580a020543f145de9103751adaad6ce1c5c6a22abc1cf0ffd381aed3072644cd5ee03ba3598265aa7d202d63167da251cb595  CVE-2017-8362.patch
814139567d90fb07908014e858c341fe933e04dca69b88ad66078910888237bbeba94f85d9e1489883c424f35fca312eb98c21ae2b122d9289bb6418725cd02e  CVE-2017-12562.patch"