include/STTypes.h | 7 0 + 7 - 0 !
1 file changed, 7 deletions(-)

 do not use integer samples when __softfp__ is defined
 On armel __SOFTFP__ is defined. Hence in 1.7.1 SAMPLETYPE changed from float to
 short. Unfortunately, this changes some function signatures and thus breaks the
 ABI.

source/SoundTouch/PeakFinder.cpp | 16 13 + 3 - 0 !
1 file changed, 13 insertions(+), 3 deletions(-)

 fix rounding error in peakfinder::getpeakcenter
 Avoid recalculating cutLevel and groundLevel when all of them are equal to

source/SoundTouch/TDStretch.cpp | 7 6 + 1 - 0 !
1 file changed, 6 insertions(+), 1 deletion(-)

 fix cve-2017-9258, cve-2017-9259, cve-2017-9260
 Based on an upstream commit, original commit message was: "Added sanity
 checks against illegal input audio stream parameters e.g. wildly excessive
 samplerate".
 . 
 There is no reference to CVEs or bugs, the commit was made after disclosure
 of the CVEs and all three proofs of concept (crafted wav files) fail after
 this commit.
 . 
 The commit was made after version 2.0.0, so that version is also vulnerable.
 .
 Unrelated changes were stripped away by patch author, upstream commit author
 is Olli Parviainen <oparviai@iki.fi>.