From 8ccc17d5595b8780b6ab38a2b8b65aeb3b8f0eb0 Mon Sep 17 00:00:00 2001
From: Gyorgy Sarvari <skandigraun@gmail.com>
Date: Tue, 21 Oct 2025 16:53:45 +0200
Subject: [PATCH] wavpack: patch CVE-2016-10169

Details: https://nvd.nist.gov/vuln/detail/CVE-2016-10169

Backport the relevant part of the linked patch.

(The full patch contains fixes for other vulnerabilities also, which
were introduced after v4.60)

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
---
 .../wavpack/wavpack/CVE-2016-10169.patch      | 27 +++++++++++++++++++
 .../wavpack/wavpack_4.60.1.bb                 |  4 ++-
 2 files changed, 30 insertions(+), 1 deletion(-)
 create mode 100644 meta-oe/recipes-multimedia/wavpack/wavpack/CVE-2016-10169.patch

diff --git a/meta-oe/recipes-multimedia/wavpack/wavpack/CVE-2016-10169.patch b/meta-oe/recipes-multimedia/wavpack/wavpack/CVE-2016-10169.patch
new file mode 100644
index 0000000000..22dbc2648c
--- /dev/null
+++ b/meta-oe/recipes-multimedia/wavpack/wavpack/CVE-2016-10169.patch
@@ -0,0 +1,27 @@
+From 847968ff66f0d743ed2cf3d5f1f7d8d8dafcf42d Mon Sep 17 00:00:00 2001
+From: David Bryant <david@wavpack.com>
+Date: Wed, 21 Dec 2016 22:18:36 -0800
+Subject: [PATCH] CVE-2016-10169
+
+CVE: CVE-2016-10169
+Upstream-Status: Backport [https://github.com/dbry/WavPack/commit/4bc05fc490b66ef2d45b1de26abf1455b486b0dc]
+Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
+---
+ src/words.c | 4 ++++
+ 1 file changed, 4 insertions(+)
+
+diff --git a/src/words.c b/src/words.c
+index c87b8d2..272760a 100644
+--- a/src/words.c
++++ b/src/words.c
+@@ -1117,6 +1117,10 @@ int32_t FASTCALL get_word (WavpackStream *wps, int chan, int32_t *correction)
+ 
+     low &= 0x7fffffff;
+     high &= 0x7fffffff;
++
++    if (low > high)         // make sure high and low make sense
++        high = low;
++
+     mid = (high + low + 1) >> 1;
+ 
+     if (!c->error_limit)
diff --git a/meta-oe/recipes-multimedia/wavpack/wavpack_4.60.1.bb b/meta-oe/recipes-multimedia/wavpack/wavpack_4.60.1.bb
index 021496bd43..8dbeb9883c 100644
--- a/meta-oe/recipes-multimedia/wavpack/wavpack_4.60.1.bb
+++ b/meta-oe/recipes-multimedia/wavpack/wavpack_4.60.1.bb
@@ -2,7 +2,9 @@ DESCRIPTION = "WavPack is a completely open audio compression format providing l
 LICENSE = "BSD-3-Clause"
 LIC_FILES_CHKSUM = "file://license.txt;md5=f596650807588c61fcab60bec8242df8"
 
-SRC_URI = "http://wavpack.com/wavpack-${PV}.tar.bz2"
+SRC_URI = "http://wavpack.com/wavpack-${PV}.tar.bz2 \
+           file://CVE-2016-10169.patch \
+           "
 SRC_URI[md5sum] = "7bb1528f910e4d0003426c02db856063"
 SRC_URI[sha256sum] = "175ee4f2effd6f51e6ec487956f41177256bf892c2e8e07de5d27ed4ee6888c5"