Showing with 14 additions and 2 deletions.

+1 −1 CMakeLists.txt

+6 −0 ChangeLog

+2 −0 README.md

+1 −1 cd.c

+4 −0 cue_scanner.l
diff --git a/CMakeLists.txt b/CMakeLists.txt
@@ -1,6 +1,6 @@
 SET(PACKAGE libcue)
 SET(PACKAGE_NAME libcue)
-SET(PACKAGE_VERSION 2.2.1)
+SET(PACKAGE_VERSION 2.3.0)
 SET(PACKAGE_SOVERSION 2)
 
 CMAKE_MINIMUM_REQUIRED(VERSION 2.8 FATAL_ERROR)

diff --git a/ChangeLog b/ChangeLog
@@ -1,3 +1,9 @@
+libcue (2.3.0)
+	[Vlad Stulikov, Vasiliy Sazonov]
+	* Bug fix - no EOF handling
+
+	[Kevin Backhouse]
+	* Fix CVE-2023-43641
 libcue (2.2.1)
 	[Ilya Lipnitskiy]
 	* cmake: Check for __attribute__ format

diff --git a/README.md b/README.md
@@ -10,6 +10,8 @@ Some usage examples are also available in the test cases under [t/](https://gith
 
 # Compiling
 
+NOTE: Use `-DBUILD_SHARED_LIBS=ON` to build as a shared library.
+
 ```
 mkdir bin
 cd bin

diff --git a/cd.c b/cd.c
@@ -339,7 +339,7 @@ track_get_rem(const Track* track)
 
 void track_set_index(Track *track, int i, long ind)
 {
-	if (i > MAXINDEX) {
+	if (i < 0 || i > MAXINDEX) {
 		fprintf(stderr, "too many indexes\n");
                 return;
         }

diff --git a/cue_scanner.l b/cue_scanner.l
@@ -23,6 +23,7 @@ nonws		[^ \t\r\n]
 %option noyywrap
 %option noinput
 %option nounput
+%option caseless
 
 %s NAME
 %x REM
@@ -136,4 +137,7 @@ REM		{ BEGIN(REM); /* exclusive rules for special exceptions */ }
 \n		{ yylineno++; return '\n'; }
 .		{ fprintf(stderr, "bad character '%c'\n", yytext[0]); }
 
+<<EOF>> { static int once = 0; return (once = !once) ? '\n' : 0; }
+
+
 %%