From patchwork Mon Oct 26 15:59:41 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Adolf Belka X-Patchwork-Id: 10503 Return-Path: Received: from mail01.ipfire.org (mail01.haj.ipfire.org [172.28.1.202]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519) (Client CN "mail01.haj.ipfire.org", Issuer "YR1" (not verified)) by web04.haj.ipfire.org (Postfix) with ESMTPS id 4jCyxj28g8z3xWc for ; Mon, 26 Oct 2026 15:59:53 +0000 (UTC) Received: from mail02.haj.ipfire.org (mail02.haj.ipfire.org [172.28.1.201]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519) (Client CN "mail02.haj.ipfire.org", Issuer "YE2" (not verified)) by mail01.ipfire.org (Postfix) with ESMTPS id 4jCyxh4QGrz6c1 for ; Mon, 26 Oct 2026 15:59:52 +0000 (UTC) Received: from mail02.haj.ipfire.org (localhost [IPv6:::1]) by mail02.haj.ipfire.org (Postfix) with ESMTP id 4jCyxf4KFkz2xXH for ; Mon, 26 Oct 2026 15:59:50 +0000 (UTC) X-Original-To: development@lists.ipfire.org Received: from mail01.ipfire.org (mail01.haj.ipfire.org [172.28.1.202]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519) (Client CN "mail01.haj.ipfire.org", Issuer "YR1" (not verified)) by mail02.haj.ipfire.org (Postfix) with ESMTPS id 4jCyxb52ffz36WF for ; Mon, 26 Oct 2026 15:59:47 +0000 (UTC) Received: from [127.0.0.1] (localhost [127.0.0.1]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) by mail01.ipfire.org (Postfix) with ESMTPSA id 4jCyxb3cL8z1Pw; Mon, 26 Oct 2026 15:59:47 +0000 (UTC) DKIM-Signature: v=1; a=ed25519-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003ed25519; t=1793030387; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=3F0vRMnUcL1PSdql5yVZX9yeYLTCreL8g4Ra1qwTnqE=; b=5WUR8Z2nJ+kODj3eTm+b+wXizyWfGn6+64SAjHdogVOwMLz0b+F27AABgmChgtJ8j1C+Hk QWuq8WyLReyVX1Aw== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003rsa; t=1793030387; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=3F0vRMnUcL1PSdql5yVZX9yeYLTCreL8g4Ra1qwTnqE=; b=ZPoB3SL/gi7Mh34CgBLmhG4Aba15Upk+1E70U7cirRC9wt3cZyqLuzI6pDumCoAJ62S8UL QJKtdeiLEjrG15awUQl+8Da/LaEhIfTTbYwV/ROqo/ewIg0asj58r+XZvW6Jfqt/lI/BM+ IG8RuBGmKveQptpdYjoullUXgb0wpuMuj3GpH6H4QVUQijeUu+k287NjqymiwLQwpeGFxU JGOh5l23VPiwPu13Ko3yS/eMkYx1SJKWJEZMEsF8KFiPEzNK8x4z0SCcS/CXNbOnH6K3yf UrehbA9jiMvcpaLCV04vsQaZK0O+YvrIeTJi7T8NNb+AkeRWaRyEQ4pgSypXpw== From: Adolf Belka To: development@lists.ipfire.org Cc: Adolf Belka Subject: [PATCH] shairport-sync: Update to version 5.6.2 Date: Mon, 26 Oct 2026 16:59:41 +0100 Message-ID: <20261026155942.2122609-5-adolf.belka@ipfire.org> In-Reply-To: <20261026155942.2122609-1-adolf.belka@ipfire.org> References: <20261026155942.2122609-1-adolf.belka@ipfire.org> Precedence: list List-Id: List-Subscribe: , List-Unsubscribe: , List-Post: List-Help: Sender: Mail-Followup-To: MIME-Version: 1.0 - Update from version 5.6.1 to 5.6.2 - No change in rootfile - Changelog 5.6.2 Security-Related Bug Fix Malformed DACP TLV (Tag-Length-Value) tokens could generate out-of-bounds (OOB) reads in Shairport Sync. The bug fix was to improve checking of DACP TLV payloads. Thanks to memoriaru for their report. Enhancement This enhancement changes how frames of audio are referenced, so that long sessions (greater than about 12.5 hours) do not go silent due to signed 32-bit integer sign overflow. Background: AirPlay associates a 32-bit RTP timestamp, a timing reference number, with every audio frame. After playing 2^31 - 1 frames of buffered audio -- about 12.5 hours at 48,000 frames per second -- the total number of frames played exceeds 2^31 -1 and goes negative due to sign overflow. Timing calculations fail, causing frames to be dropped and the player to go silent. The enhancement develops 64-bit timestamps from RTP timestamps of the frames as they are processed in preparation for playing. Many thanks to Martin Man for their patient troubleshooting, PR and initial report. Signed-off-by: Adolf Belka --- lfs/shairport-sync | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/lfs/shairport-sync b/lfs/shairport-sync index 04a468754..af68ab0b4 100644 --- a/lfs/shairport-sync +++ b/lfs/shairport-sync @@ -26,7 +26,7 @@ include Config SUMMARY = An AirPlay audio player -VER = 5.6.1 +VER = 5.6.2 THISAPP = shairport-sync-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -34,7 +34,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = shairport-sync -PAK_VER = 21 +PAK_VER = 22 DEPS = alsa avahi ffmpeg libdaemon libplist nqptp soxr @@ -48,7 +48,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = 7761d774d99b0d0c3adcd10a439aabbf365151676b2e831d60130328566daade09b00055736e6e65e8174f7c150fca5fd7cd6d1c39291d605cc323c20419b0a6 +$(DL_FILE)_BLAKE2 = 6017dd15818ae3f561d8f2a6572bf9368f970d29ec394e7e3041726474e8fb66a9a421aac36159ee8287c03ddb06a185688b913602dbef969eb3906f7654aaa5 install : $(TARGET)