]>
git.ipfire.org Git - thirdparty/shairport-sync.git/log
Mike Brady [Wed, 29 Jul 2026 10:15:36 +0000 (12:15 +0200)]
Remove reference to log_to_syslog() if libdaemon support is included.
Mike Brady [Wed, 29 Jul 2026 09:57:42 +0000 (11:57 +0200)]
Merge pull request #2243 from daeho-ro/fix-log-to-syslog-libdaemon-build [skip ci]
Comment out the last remaining call to log_to_syslog()
Daeho Ro [Wed, 29 Jul 2026 07:30:28 +0000 (16:30 +0900)]
Comment out the last remaining call to log_to_syslog()
Its definition in common.c and its declaration in common.h are commented
out, but the call in the libdaemon daemonise path was left behind, so
building with --with-libdaemon fails: clang reports "use of undeclared
identifier 'log_to_syslog'" and gcc fails to link with "undefined
reference to `log_to_syslog'".
Mike Brady [Tue, 28 Jul 2026 16:29:53 +0000 (18:29 +0200)]
Update release notes for Version 5.3-dev [skip ci]
Added details for Version 5.3-dev and metadata feature restoration.
Mike Brady [Tue, 28 Jul 2026 16:26:37 +0000 (17:26 +0100)]
5.3-dev is essentially 5.2.
Mike Brady [Tue, 28 Jul 2026 16:15:07 +0000 (17:15 +0100)]
This is version 5.2
Mike Brady [Tue, 28 Jul 2026 15:58:55 +0000 (16:58 +0100)]
Drop references to log-to and friends -- no longer used. [skip ci].
Mike Brady [Tue, 28 Jul 2026 15:25:43 +0000 (17:25 +0200)]
Merge pull request #2242 from mikebrady/dependabot/github_actions/development/docker/login-action-4.5.1 [skip ci]
Bump docker/login-action from 4.4.0 to 4.5.1
Mike Brady [Tue, 28 Jul 2026 15:25:15 +0000 (17:25 +0200)]
Merge pull request #2241 from mikebrady/dependabot/github_actions/development/actions/checkout-7.0.1 [skip ci]
Bump actions/checkout from 7.0.0 to 7.0.1
dependabot[bot] [Sun, 26 Jul 2026 10:02:31 +0000 (10:02 +0000)]
Bump docker/login-action from 4.4.0 to 4.5.1
Bumps [docker/login-action](https://github.com/docker/login-action) from 4.4.0 to 4.5.1.
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](https://github.com/docker/login-action/compare/v4.4.0...v4.5.1)
---
updated-dependencies:
- dependency-name: docker/login-action
dependency-version: 4.5.1
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
dependabot[bot] [Sun, 26 Jul 2026 10:02:27 +0000 (10:02 +0000)]
Bump actions/checkout from 7.0.0 to 7.0.1
Bumps [actions/checkout](https://github.com/actions/checkout) from 7.0.0 to 7.0.1.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v7.0.0...v7.0.1)
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: 7.0.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Mike Brady [Fri, 24 Jul 2026 15:40:50 +0000 (17:40 +0200)]
Quieten a debug message. [skip ci]
Mike Brady [Thu, 23 Jul 2026 17:01:22 +0000 (19:01 +0200)]
Merge branch 'development' of github.com:mikebrady/shairport-sync into development
Online documention updates.
Mike Brady [Thu, 23 Jul 2026 17:00:06 +0000 (19:00 +0200)]
Remove the redundant "--log-to-syslog" setting from the startup script [skip ci]
Mike Brady [Thu, 23 Jul 2026 16:40:06 +0000 (18:40 +0200)]
Default to receiving metadata the older "classic" way for compatibility. Add a temporary setting to change this in the "diagnostics" part of the configuration file.
Mike Brady [Thu, 23 Jul 2026 14:45:04 +0000 (16:45 +0200)]
Update release notes for version 5.2-dev-46 [skip ci]
Restores previous metadata receiving method for compatibility and adds temporary configuration option for plist-based metadata.
Mike Brady [Mon, 20 Jul 2026 17:33:45 +0000 (19:33 +0200)]
Update version to
5.2-dev-44-geb49aaab [skip ci]
Updated version number and enhanced bug fix acknowledgment.
Mike Brady [Mon, 20 Jul 2026 17:26:23 +0000 (18:26 +0100)]
Settle on a convolver block size of 1024.
Mike Brady [Mon, 20 Jul 2026 16:47:12 +0000 (18:47 +0200)]
Update version to 5.2-dev-42 and fix bugs [skip ci]
Updated version number and fixed bugs in convolution and loudness code related to input/output rates and channel counts.
Mike Brady [Mon, 20 Jul 2026 16:37:07 +0000 (17:37 +0100)]
Temporarily stop block length check.
Mike Brady [Mon, 20 Jul 2026 14:24:15 +0000 (16:24 +0200)]
Fix typo in comment out of convolution_ir_files in config [skip ci]
Comment out the convolution_ir_files configuration line.
Mike Brady [Mon, 20 Jul 2026 10:48:18 +0000 (11:48 +0100)]
Update convolution comments in the configuration file. [skip ci]
Mike Brady [Mon, 20 Jul 2026 10:25:33 +0000 (12:25 +0200)]
Update release notes for version 5.2-dev-38 [skip ci]
Fixed bugs in convolution and loudness code related to input/output rates and channel counts. Added acknowledgment for the bug report.
Mike Brady [Mon, 20 Jul 2026 10:19:54 +0000 (11:19 +0100)]
Fix mixups between input and output rates and channel counts during convolution initialisation and in convolution attenuation and loudness application.
Mike Brady [Thu, 16 Jul 2026 14:25:50 +0000 (16:25 +0200)]
Update release notes with deprecations and bug fixes [skip ci]
Added deprecation notice for obsolete logging options.
Mike Brady [Thu, 16 Jul 2026 14:07:28 +0000 (16:07 +0200)]
Update release notes for version 5.2-dev-35 [skip ci]
Added a new exit handler for clean exits and fixed various bugs related to mutex handling and compiler warnings.
Mike Brady [Thu, 16 Jul 2026 13:51:06 +0000 (14:51 +0100)]
Add a new exit handler to enable Shairport Sync to exit cleanly — that is, on exit, to clean up everything, e.g. open files, ports, sockets, devices, threads, it has been using.
If cleanup isn’t finished after one second, exit will occur unconditionally.
Use the new exit handler for normal exit, for SIGINT and SIGTERM handling, for abnormal exit after fatal errors, and for handling quit requests from the D-Bus and MPRIS interfaces.
When an unfixable error occurs without an installed unfixable error handler, unlock the mutex protecting Shairport Sync’s alsa backend to permit a clean exit.
Fix a very low-level mutex-locking error that interfered with debugging.
Simplify much mutex lock handling.
Remove lots of old and unused code, variables and definitions.
Update audio_sndio.c to remove some harmless compiler warnings.
Undo adding two seconds for messages to be output before _Exit() on die() to allow messages to be output...
Undo making die() exit unconditionally.
Mike Brady [Mon, 13 Jul 2026 07:01:15 +0000 (08:01 +0100)]
Add 2 seconds for messages to be output before _Exit() on die() to allow messages to be output...
Mike Brady [Sun, 12 Jul 2026 16:07:11 +0000 (17:07 +0100)]
Make die() exit unconditionally. Clean up some more redundant code. Revert unfixable error to use die() rather than warn() and _Exit().
Mike Brady [Sun, 12 Jul 2026 15:26:34 +0000 (17:26 +0200)]
Update release notes for version 5.2-dev-31 [skip ci]
Added a bug fix for Shairport Sync hanging on unfixable errors and updated version number.
Mike Brady [Sun, 12 Jul 2026 15:19:39 +0000 (17:19 +0200)]
Merge pull request #2237 from mikebrady/dependabot/github_actions/development/actions/stale-10.4.0 [skip ci]
Bump actions/stale from 10.3.0 to 10.4.0
Mike Brady [Sun, 12 Jul 2026 15:18:31 +0000 (16:18 +0100)]
Exit immediately when an unfixable error is detected. Don't try to clean up before exit.
dependabot[bot] [Sun, 12 Jul 2026 10:02:28 +0000 (10:02 +0000)]
Bump actions/stale from 10.3.0 to 10.4.0
Bumps [actions/stale](https://github.com/actions/stale) from 10.3.0 to 10.4.0.
- [Release notes](https://github.com/actions/stale/releases)
- [Changelog](https://github.com/actions/stale/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/stale/compare/v10.3.0...v10.4.0)
---
updated-dependencies:
- dependency-name: actions/stale
dependency-version: 10.4.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Mike Brady [Sat, 11 Jul 2026 08:03:55 +0000 (10:03 +0200)]
Fix broken link in RELEASENOTES-DEVELOPMENT.md [skip ci]
typo
Mike Brady [Sat, 11 Jul 2026 08:02:44 +0000 (10:02 +0200)]
Fix broken link in RELEASENOTES-DEVELOPMENT.md [skip ci]
Fixed a broken link in the documentation referencing CONFIGURATION FLAGS.md from ADVANCED TOPICS.
Mike Brady [Sat, 11 Jul 2026 07:48:59 +0000 (09:48 +0200)]
Merge pull request #2235 from int3rrupt/fix-broken-doc-link [skip ci]
Fix broken link to `CONFIGURATION_FLAGS.md`
Adrián Reyes [Sat, 11 Jul 2026 00:04:38 +0000 (17:04 -0700)]
Fix broken link to `CONFIGURATION_FLAGS.md`
Mike Brady [Thu, 9 Jul 2026 16:32:37 +0000 (18:32 +0200)]
Update documentation for FreeBSD build requirements [skip ci]
Updated documentation to include 'gcrypt' in the FreeBSD build guide.
Mike Brady [Thu, 9 Jul 2026 15:14:11 +0000 (17:14 +0200)]
Update FreeBSD version in BUILD.md [skip ci]
Updated FreeBSD version from 14.3 to 15.1 in the documentation and adjusted related notes.
Mike Brady [Thu, 9 Jul 2026 15:03:43 +0000 (17:03 +0200)]
Fix package list for AirPlay 2 build [skip ci]
Updated package list for building Shairport Sync for AirPlay 2.
Mike Brady [Mon, 6 Jul 2026 11:25:41 +0000 (13:25 +0200)]
Update release notes for version 5.2-dev-10 [skip ci]
Added details about new MQTT command and bug fix.
Mike Brady [Mon, 6 Jul 2026 10:47:02 +0000 (12:47 +0200)]
Merge pull request #2226 from zutroy97/queue-next-track-id
Add MQTT queue_next command and fix track_id byte order.
Mike Brady [Mon, 6 Jul 2026 10:06:07 +0000 (12:06 +0200)]
Merge pull request #2232 from mikebrady/dependabot/github_actions/development/docker/login-action-4.4.0 [skip ci]
Bump docker/login-action from 4.2.0 to 4.4.0
Mike Brady [Mon, 6 Jul 2026 10:05:23 +0000 (12:05 +0200)]
Merge pull request #2231 from mikebrady/dependabot/github_actions/development/docker/build-push-action-7.3.0 [skip ci]
Bump docker/build-push-action from 7.2.0 to 7.3.0
Mike Brady [Mon, 6 Jul 2026 10:04:42 +0000 (12:04 +0200)]
Merge pull request #2230 from mikebrady/dependabot/github_actions/development/docker/setup-qemu-action-4.2.0 [skip ci]
Bump docker/setup-qemu-action from 4.1.0 to 4.2.0
Mike Brady [Mon, 6 Jul 2026 10:04:08 +0000 (12:04 +0200)]
Merge pull request #2229 from mikebrady/dependabot/github_actions/development/docker/setup-buildx-action-4.2.0 [skip ci]
Bump docker/setup-buildx-action from 4.1.0 to 4.2.0
zutroy97 [Sun, 5 Jul 2026 22:45:24 +0000 (17:45 -0500)]
Reverted back track_id as hex string
dependabot[bot] [Sun, 5 Jul 2026 10:02:30 +0000 (10:02 +0000)]
Bump docker/login-action from 4.2.0 to 4.4.0
Bumps [docker/login-action](https://github.com/docker/login-action) from 4.2.0 to 4.4.0.
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](https://github.com/docker/login-action/compare/v4.2.0...v4.4.0)
---
updated-dependencies:
- dependency-name: docker/login-action
dependency-version: 4.4.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
dependabot[bot] [Sun, 5 Jul 2026 10:02:27 +0000 (10:02 +0000)]
Bump docker/build-push-action from 7.2.0 to 7.3.0
Bumps [docker/build-push-action](https://github.com/docker/build-push-action) from 7.2.0 to 7.3.0.
- [Release notes](https://github.com/docker/build-push-action/releases)
- [Commits](https://github.com/docker/build-push-action/compare/v7.2.0...v7.3.0)
---
updated-dependencies:
- dependency-name: docker/build-push-action
dependency-version: 7.3.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
dependabot[bot] [Sun, 5 Jul 2026 10:02:25 +0000 (10:02 +0000)]
Bump docker/setup-qemu-action from 4.1.0 to 4.2.0
Bumps [docker/setup-qemu-action](https://github.com/docker/setup-qemu-action) from 4.1.0 to 4.2.0.
- [Release notes](https://github.com/docker/setup-qemu-action/releases)
- [Commits](https://github.com/docker/setup-qemu-action/compare/v4.1.0...v4.2.0)
---
updated-dependencies:
- dependency-name: docker/setup-qemu-action
dependency-version: 4.2.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
dependabot[bot] [Sun, 5 Jul 2026 10:02:22 +0000 (10:02 +0000)]
Bump docker/setup-buildx-action from 4.1.0 to 4.2.0
Bumps [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) from 4.1.0 to 4.2.0.
- [Release notes](https://github.com/docker/setup-buildx-action/releases)
- [Commits](https://github.com/docker/setup-buildx-action/compare/v4.1.0...v4.2.0)
---
updated-dependencies:
- dependency-name: docker/setup-buildx-action
dependency-version: 4.2.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
zutroy97 [Sat, 4 Jul 2026 12:55:01 +0000 (07:55 -0500)]
Publish and accept track_id as decimal instead of hex
Changes the mper-derived track_id published over MQTT from hex to
decimal, and updates queue_next to embed the value in the DACP
persistentid query without a 0x prefix, matching the new format.
Queueing behavior (command=add&mode=3) is unchanged.
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
Mike Brady [Sat, 4 Jul 2026 11:10:58 +0000 (13:10 +0200)]
Fix wording in release notes for version 5.2-dev [skip ci]
Mike Brady [Sat, 4 Jul 2026 11:10:32 +0000 (13:10 +0200)]
Update release notes for version 5.2-dev [skip ci]
Added notes for version 5.2-dev, including bug fixes and improvements.
Mike Brady [Sat, 4 Jul 2026 11:07:10 +0000 (12:07 +0100)]
This is 5.2-dev
zutroy97 [Sat, 4 Jul 2026 02:57:25 +0000 (21:57 -0500)]
Fix build: restore stop_play() for MQTT disconnect command
An unrelated change in a prior commit swapped stop_play() for
release_play_lock(NULL), which isn't declared in rtsp.h and broke
the build with an implicit-declaration error.
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
Mike Brady [Fri, 3 Jul 2026 20:47:09 +0000 (22:47 +0200)]
Fix formatting in AirPlay 2 release notes [skip ci]
Corrected formatting in the release notes regarding AirPlay 2.
Scott Simon [Fri, 3 Jul 2026 20:30:34 +0000 (15:30 -0500)]
Remove commented-out code from mqtt.c
Scott Simon [Fri, 3 Jul 2026 04:50:23 +0000 (23:50 -0500)]
Fix byte order of track_id published over MQTT
The 'mper' handler cast the raw big-endian persistent-id bytes directly
to a host-native uint64_t, which reverses the value on little-endian
hosts (e.g. Raspberry Pi). metadata_hub.c already reconstructs the same
field correctly by applying ntohl() to each 32-bit half; mqtt.c now does
the same, so the published track_id matches the real dmap.persistentid
and can be used directly with the queue_next command.
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
Scott Simon [Fri, 3 Jul 2026 04:20:28 +0000 (23:20 -0500)]
Add test track_id reference notes to mqtt.c
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
Scott Simon [Wed, 1 Jul 2026 18:20:49 +0000 (13:20 -0500)]
Fix command format in MQTT queue_next function
Scott Simon [Wed, 1 Jul 2026 17:57:08 +0000 (12:57 -0500)]
Update MQTT command for queue_next functionality
Scott Simon [Wed, 1 Jul 2026 15:56:07 +0000 (10:56 -0500)]
Add queue_next MQTT remote command to enqueue a track by persistent ID
Sends ctrl-int/1/cue?command=add&query='dmap.persistentid:0x<id>'&mode=3
to the DACP source, where <id> is the hex track_id string taken directly
from the MQTT payload after "queue_next ".
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
Mike Brady [Fri, 3 Jul 2026 20:34:43 +0000 (22:34 +0200)]
Fix grammatical error in README.md [skip ci]
Mike Brady [Fri, 3 Jul 2026 20:13:59 +0000 (22:13 +0200)]
Add systemctl daemon-reload command after cleanup [skip ci]
Added instructions for reloading systemd daemon after removing service files.
Mike Brady [Fri, 3 Jul 2026 19:58:13 +0000 (21:58 +0200)]
Update BUILD.md with repository setup instructions [skip ci]
Added instructions for cloning and updating the Shairport Sync repository.
Mike Brady [Thu, 2 Jul 2026 13:17:53 +0000 (14:17 +0100)]
Bug fix, docker-compose updates, statistics readoout improvement.
Mike Brady [Sun, 28 Jun 2026 16:34:25 +0000 (17:34 +0100)]
Update RELEASENOTES-DEVELOPMENT.md for version 5.1-dev-52 [skip ci]
Document bug fixes and minor improvements in release notes.
Mike Brady [Sun, 28 Jun 2026 16:23:14 +0000 (17:23 +0100)]
Add sys-nice request to docker compose file and comment out unnecessary stuff.
Mike Brady [Sun, 28 Jun 2026 16:08:56 +0000 (17:08 +0100)]
Add a few tools and do a recompile for more comportable troubleshooting.
Mike Brady [Sun, 28 Jun 2026 16:08:11 +0000 (17:08 +0100)]
If the minimum DAC queue size is not changed from maxint, assume it has never been set and indicate that it is not available.
Mike Brady [Sun, 28 Jun 2026 16:06:40 +0000 (17:06 +0100)]
Stop allocating large buffers on the stack, as it will overflow on, e.g. Alpine and embedded Linuxes, where the stack frame allocations are smaller. Use mallocs instead.
Mike Brady [Sat, 27 Jun 2026 17:52:36 +0000 (18:52 +0100)]
Merge branch 'master' of github.com:mikebrady/shairport-sync
Online update.
Mike Brady [Mon, 22 Jun 2026 17:53:51 +0000 (18:53 +0100)]
Add Jack deprecation note to the configuration file.
Mike Brady [Mon, 22 Jun 2026 17:51:25 +0000 (18:51 +0100)]
Add Jack deprecation note to the configuration file. [skip ci]
Mike Brady [Mon, 22 Jun 2026 17:48:02 +0000 (18:48 +0100)]
Add note about new --with-metadata-pipe and --with-metadata-multicast configuration flags.
Mike Brady [Mon, 22 Jun 2026 17:39:13 +0000 (18:39 +0100)]
Add note about new --with-metadata- configuration settings.
Mike Brady [Mon, 22 Jun 2026 15:55:05 +0000 (16:55 +0100)]
Remove markdown test from Bug Report template [skip ci]
Removed markdown test section from Bug Report template.
Mike Brady [Mon, 22 Jun 2026 15:53:45 +0000 (16:53 +0100)]
Add markdown test section to Bug Report template [skip ci]
Added a markdown test section to the Bug Report template.
Mike Brady [Mon, 22 Jun 2026 12:09:06 +0000 (13:09 +0100)]
Merge branch 'development'
Update of configuration flag documentation.
Mike Brady [Mon, 22 Jun 2026 12:08:32 +0000 (13:08 +0100)]
Merge branch 'development' of github.com:mikebrady/shairport-sync into development
Online update.
Mike Brady [Mon, 22 Jun 2026 12:08:08 +0000 (13:08 +0100)]
Remove redundant text formatting in flags section [skip ci]
Mike Brady [Mon, 22 Jun 2026 12:05:53 +0000 (13:05 +0100)]
Merge branch 'development'
Update settings document.
Mike Brady [Mon, 22 Jun 2026 11:59:50 +0000 (12:59 +0100)]
Merge branch 'development' of github.com:mikebrady/shairport-sync into development
online update
Mike Brady [Mon, 22 Jun 2026 11:57:18 +0000 (12:57 +0100)]
Revise configuration flags and add metadata options [skip ci]
Updated the configuration flags documentation to indicate deprecation of the --with-jack flag and added new sections for metadata pipe and multicast.
Mike Brady [Mon, 22 Jun 2026 10:54:59 +0000 (11:54 +0100)]
Merge branch 'development'
Mike Brady [Mon, 22 Jun 2026 10:43:17 +0000 (11:43 +0100)]
Update copyright notice in the man source file.
Mike Brady [Mon, 22 Jun 2026 10:34:06 +0000 (11:34 +0100)]
Merge pull request #2220 from mikebrady/dependabot/github_actions/development/actions/checkout-7.0.0 [skip ci]
Bump actions/checkout from 6.0.3 to 7.0.0
dependabot[bot] [Sun, 21 Jun 2026 10:02:16 +0000 (10:02 +0000)]
Bump actions/checkout from 6.0.3 to 7.0.0
Bumps [actions/checkout](https://github.com/actions/checkout) from 6.0.3 to 7.0.0.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v6.0.3...v7.0.0)
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: 7.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
Mike Brady [Thu, 18 Jun 2026 08:36:44 +0000 (09:36 +0100)]
Update release notes with security bug fixes [skip ci]
Documented fixes for two security issues in pair_ap/pair-tlv.c and rtsp.c, including bounds checks and validation improvements. Acknowledged contributions from TristanInSec for reporting and fixing the issues.
Mike Brady [Thu, 18 Jun 2026 08:27:43 +0000 (09:27 +0100)]
Merge pull request #2218 from TristanInSec/fix-tlv-dmap-oob-reads-v2
Fix Out-Of-Bounds reads and infinite loop in TLV and DMAP parsers.
TristanInSec [Tue, 16 Jun 2026 14:33:18 +0000 (10:33 -0400)]
Fix OOB reads and infinite loop in TLV and DMAP parsers
pair_ap/pair-tlv.c (pair_tlv_parse):
- Add bounds check before reading type and length bytes (i + 2 > length)
- Fix off-by-one in chunked TLV scan loop (j + 1 < length)
- Add bounds checks inside data copy loop to prevent OOB memcpy
- Add else branch to advance index when size == 0 (prevents infinite loop)
rtsp.c (handle_set_parameter_metadata):
- Require 8 bytes remaining for tag + length fields (off + 8 <= cl)
- Validate value length against remaining buffer before read
Reported-by: Tristan Madani <tristan@talencesecurity.com>
Signed-off-by: Tristan Madani <tristan@talencesecurity.com>
Mike Brady [Sun, 14 Jun 2026 14:28:12 +0000 (15:28 +0100)]
Correct grammar in bug fix note for Classic operation [skip ci]
Mike Brady [Sun, 14 Jun 2026 14:27:29 +0000 (15:27 +0100)]
Update release notes with new bug fix details [skip ci]
Added a new bug fix related to immediate flush and PTP clock anchor reset.
Mike Brady [Sun, 14 Jun 2026 14:21:11 +0000 (15:21 +0100)]
When an immediate flush is requested, reset the PTP clock anchor information immediately to disable clocking until play is resumed.
Mike Brady [Sat, 13 Jun 2026 12:18:52 +0000 (13:18 +0100)]
Merge pull request #2212 from mikebrady/dependabot/github_actions/development/actions/checkout-6.0.3 [skip ci]
Bump actions/checkout from 6.0.2 to 6.0.3
Mike Brady [Sat, 13 Jun 2026 12:17:50 +0000 (13:17 +0100)]
Merge pull request #2209 from mikebrady/dependabot/github_actions/development/docker/setup-qemu-action-4.1.0 [skip ci]
Bump docker/setup-qemu-action from 4.0.0 to 4.1.0
Mike Brady [Sat, 13 Jun 2026 12:17:17 +0000 (13:17 +0100)]
Merge pull request #2207 from mikebrady/dependabot/github_actions/development/docker/setup-buildx-action-4.1.0 [skip ci]
Bump docker/setup-buildx-action from 4.0.0 to 4.1.0
dependabot[bot] [Sat, 13 Jun 2026 08:57:47 +0000 (08:57 +0000)]
Bump docker/setup-buildx-action from 4.0.0 to 4.1.0
Bumps [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) from 4.0.0 to 4.1.0.
- [Release notes](https://github.com/docker/setup-buildx-action/releases)
- [Commits](https://github.com/docker/setup-buildx-action/compare/v4.0.0...v4.1.0)
---
updated-dependencies:
- dependency-name: docker/setup-buildx-action
dependency-version: 4.1.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Mike Brady [Sat, 13 Jun 2026 08:57:16 +0000 (09:57 +0100)]
Merge pull request #2206 from mikebrady/dependabot/github_actions/development/actions/stale-10.3.0 [skip ci]
Bump actions/stale from 10.2.0 to 10.3.0