Changelog for Winff SlackBuild Script
--------------------------------------------------------------------

09/09/2022:

Took over as maintainer for the Winff SlackBuild
script.

The Original author of Winff no longer maintains and is
now maintained by Debian Maintainer Paul Gevers.

Corrected the various dead URL.Updated the various URL to
https.patched it to look in the slackware's doc folder.
see these posts for details.
https://github.com/WinFF/winff/issues/250
https://ffmpeg.org/download.html#build-windows

24/09/2022:

Winff will now use the users default pdf viewer using
xdg-open also added support for Okular pdf reader. It will
now use the -O2 optimization and added some hardening flags
to the linker and fix wrongly escaped single quote in the
man page.I've added these patches from Debian Maintainer
Paul Gevers.

Removed the hint that said TEST in the lower left side corner
of the GUI,when you hover the mouse in the area between the
convert button and options button.Fixed the Dialog boxes under
the Ffmpeg tab were it will now show pass 1 and pass 2 separately
previously the pass 1 dialog was merged with the top parameter
dialog box.Put Underscore between the "Cancel Changes",
"Apply Changes" and "Apply to All" buttons and will now be
further apart for clarity. From FFmpeg versions 5 and later
the -vol command will fail.For example -vol 512 has been changed
to -filter:a "volume=1.5", since slackware uses FFmpeg4
this is not a problem for now.Added Hints to the 2 buttons
next to the folder path.The open  was not working due to
older lazarus not passing commands updating to Lazarus 2.2.2-0
will solve that problem.If you cross compile winff for windows
without patching the language files it will show the old links.
Thanks to David Miller for patches,Improvments and testing Winff.

Created a set of patches instead of sed commands.

Extended the Copyright, which previously was upto the year 2016.

GTK2 has reached end of life also GTK3 widget set support in
lazarus is in alpha stage in lazarus.See the following post
for details.

https://blog.gtk.org/2020/12/16/gtk-4-0/
https://wiki.freepascal.org/Widgetset

As such it no longer make sense to default to GTK.We will
now default to qt5 nstead of GTK.Therefore libqtpas is now a
dependency. Install libqtpas before installing lazarus.

Removed a Dangling link to AV GNU/Linux Distro.

If for Some reason "Cancel changes","Apply to all" and
"Apply changes" button does not appear do not fret, Enter the
Values you need to modify in Video/Audio/Crop/Time and then
add the file to convert it would pass the options.You can check
the Command in the FFmpeg tab. This is a workaround.

Patched the manpage to show the winff docmentation location
in slackware.

This build removes all other localization files except english
since it contains outdated links and may pose security risk.
Bumped the build no.

20/01/2023:

Fixed $ARCH issue for 32-bit systems. freepascal supports i386
only. The SlackBuild is modified to reflect that.Bumped the
build no.

Users of WinFF must be aware of these two security issues that are
still unresolved upstream.

a. The first one is due to the way filenames are inserted in the
temporary shell scripts generated to convert the media. Due to the
lack of character escaping, it is possible to insert system command using
specially crafted filename such as 'aaa";xcalc;".avi' or "aaa$(xcalc).mp4'
Thus leading to an arbitrary command execution.

b. The second issue is related to the permission of this temporary shell
script.  every users can access to them and modify them. Even if those files
are  only temporary and launched right after generation, it leads to a
race-condition case where another user may try to replace the script content
before its  execution in order to execute its own command with the winff
user permission.

you can read about this issue here:
https://github.com/WinFF/winff/issues/242

As for first issue check the filename before converting otherwise it
will compromise your system and don't download from untrusted sources.
For the second I have no clue and this is beyond my abilities.If you have
a patch for these issue feel free to send it to me.


11/01/2024:

Upgraded to the latest git commit 31b79e3.

22/01/2024:

Added -pie and -zdefs hardening flags to linker.
Bumped the build no.

27/02/2024:

Updated to version 1.6.3

03/03/2024:

Resubmit to SBo
Modify the SlackBuild to avoid creating object code files to /usr/share/lazarus
when compiling winff and remove unused function in doinst.sh Thanks to Andrew Clemons
for pointing it out.

27/04/2024:

Updated to version 1.6.4
Fixed  dead links. Fix documentation to properly open the pdf.