[vlc-commits] [Git][videolan/vlc][3.0.x] 2 commits: contrib: update Lua to 5.1.5

[Steve Lhomme (@robUx4)]

Steve Lhomme pushed to branch 3.0.x at VideoLAN / VLC


Commits:
4cbcfa74 by Steve Lhomme at 2025-09-24T08:19:31+00:00
contrib: update Lua to 5.1.5

This is the latest (and last) version of 5.1.

- - - - -
8052b3a8 by Steve Lhomme at 2025-09-24T08:19:31+00:00
contrib: lua: fix CVE-2014-5461

Using debian's patch [^1].

Co-authored-by: Thomas Guillem <thomas at gllm.fr>

[^1]: https://sources.debian.org/data/main/l/lua5.1/5.1.5-11/debian/patches/0004-Fix-stack-overflow-in-vararg-functions.patch

- - - - -


3 changed files:

- + contrib/src/lua/0004-Fix-stack-overflow-in-vararg-functions.patch
- contrib/src/lua/SHA512SUMS
- contrib/src/lua/rules.mak


Changes:

=====================================
contrib/src/lua/0004-Fix-stack-overflow-in-vararg-functions.patch
=====================================
@@ -0,0 +1,21 @@
+From: Enrico Tassi <gareuselesinge at debian.org>
+Date: Tue, 26 Aug 2014 16:20:55 +0200
+Subject: Fix stack overflow in vararg functions
+
+---
+ src/ldo.c | 2 +-
+ 1 file changed, 1 insertion(+), 1 deletion(-)
+
+diff --git a/src/ldo.c b/src/ldo.c
+index d1bf786..30333bf 100644
+--- a/src/ldo.c
++++ b/src/ldo.c
+@@ -274,7 +274,7 @@ int luaD_precall (lua_State *L, StkId func, int nresults) {
+     CallInfo *ci;
+     StkId st, base;
+     Proto *p = cl->p;
+-    luaD_checkstack(L, p->maxstacksize);
++    luaD_checkstack(L, p->maxstacksize + p->numparams);
+     func = restorestack(L, funcr);
+     if (!p->is_vararg) {  /* no varargs? */
+       base = func + 1;


=====================================
contrib/src/lua/SHA512SUMS
=====================================
@@ -1 +1 @@
-bc542fe8535826ac1e49b03a8f238cf049724b02c14718f8162cfeaf735a5e6c58412ff18dbe7a38e4cc4433f3d1e702554e9b24b5f021634b4280880980f40f  lua-5.1.4.tar.gz
+0142fefcbd13afcd9b201403592aa60620011cc8e8559d4d2db2f92739d18186860989f48caa45830ff4f99bfc7483287fd3ff3a16d4dec928e2767ce4d542a9  lua-5.1.5.tar.gz


=====================================
contrib/src/lua/rules.mak
=====================================
@@ -1,6 +1,6 @@
 # Lua 5.1
 
-LUA_VERSION := 5.1.4
+LUA_VERSION := 5.1.5
 LUA_URL := http://www.lua.org/ftp/lua-$(LUA_VERSION).tar.gz
 
 # Reverse priority order
@@ -41,6 +41,7 @@ $(TARBALLS)/lua-$(LUA_VERSION).tar.gz:
 
 lua: lua-$(LUA_VERSION).tar.gz .sum-lua
 	$(UNPACK)
+	$(APPLY) $(SRC)/lua/0004-Fix-stack-overflow-in-vararg-functions.patch
 	$(APPLY) $(SRC)/lua/lua-noreadline.patch
 	$(APPLY) $(SRC)/lua/no-dylibs.patch
 	$(APPLY) $(SRC)/lua/luac-32bits.patch



View it on GitLab: https://code.videolan.org/videolan/vlc/-/compare/4a645203d3b88f56e5d83925650373a1e450182a...8052b3a827571387dae28667c4916aefc76309a0

-- 
View it on GitLab: https://code.videolan.org/videolan/vlc/-/compare/4a645203d3b88f56e5d83925650373a1e450182a...8052b3a827571387dae28667c4916aefc76309a0
You're receiving this email because of your account on code.videolan.org.


VideoLAN code repository instance