Re: [xine-devel] Re: two new security announcements

[R. B. <ro...@pa...>]

Michael Roitzsch queries:
 > Would you recommend us to update our internal copy of libcdio to 0.70?
 > What about libvcd (we have 0.7.20), any interesting fixes?

Probably, but here are the details...

A vcdimager release has been bogged down because hvr hasn't gotten his
GPG key entered by GNU and releases now *must* be signed. When he gets
the time I should become a co-maintainer and able to make a
release. What is in CVS will become release 0.7.21, pending last
minute validation. To use vcdimager 0.7.20 with the newer libcdio 0.69
and above a small type change has to be made:

http://developers.videolan.org/cgi-bin/viewcvs.cgi/trunk/extras/contrib/src/Patches/vcdimager.patch?view=markup&rev=8120

As for libcdio 0.69-0.70, I guess the changes relevant to xine would
be the addition of cdrdao TOC image support, better FreeBSD and OSX
driver support and also possibly better CUE/BIN and NRG image support.

The xine CD-DA plugin doesn't use libcdio; However there is a plugin
in in xine-vcdnav CVS which does. With libcdio 0.70 it can now read
CD-Text information from a CD, although the CD-Text reading code is
not all that robust and isn't implimented on OSX yet. The libcdio
CD-DA plugin does not current handle MusicBrainz information, but I
have submitted a patch which Robert Kaye hasn't had time to look at -
he's on vacaton. It should make it possible to use the libmusicbrainz
library for MusicBrainz info.

For even more detail here are the NEWS entries for libcdio
0.69-0.70 and vcdimager 0.7.21CVS:

0.70

- SCSI MMC interface routine (all except Darwin)
- CD-Text support (all except Darwin)
- Distinguish DVD's from CD's
- Code clean-ups and reduced code duplication
- Better CUE parsing 
- Reporting drive capability is more accurate 
- add constant driver_id for kind of hardware driver in build
- new drive scanning routines which pass back driver as well 
  as drive string. Speeds up subsequent opens.

0.69
- Add interface returning drive capabilities (cdio_get_drive_cap).
- Minimal cdrdao image reading (thanks to Svend S. Sorensen)
- Some important (I think) bug fixes
- Redo types of lsn and lba to allow negative values. Should model MMC3
  specs. Add max/min values for lsn.
- More complete MMC command set
- FreeBSD driver ioctl and CAM reading works better (thanks to Heiner)
- OSX drive reading works better (thanks to Justin F. Hallett)
- cd-read allows dumping bytes to stdout and hexdumps to a file
  via options --no-hexdump and --hexdump
- fewer error exits in drivers. Instead, a failure code is returned.
- better NRG reading (thanks to Michael Kukat via extractnrg.pl)
- better tracking of allocated variables (cd-read, cd-info, FreeBSD)
- iso9660: Add interface to read PVD and pick out some of the fields in that.
  cd-info now shows more PVD info for ISO 9660 filesystems
- cd-info: X-Box CD detection (via xbox team mediacenter)


version 0.7.21CVS
=====================================

* More libcdio things moved into libcdio (e.g. MSF printing, 
  iso9660 PVD handling)
* add --without-versioned-libs option
* Fix bug in vcd-info showing sequence number
* make -mno-cygwin work
* release number is now preprocessor symbol so applications can make use of
  for compatibility
* LSN's match MMC-3 specs better.


Lastly, I'll be heading to Indonesia around Sept 12th for about 3
weeks which means limited Internet access.