[oCERT-2008-004] multiple speex implementations insufficient boundary checks

multiple speex implementations insufficient boundary checks reported in oCERT-2008-002 advisory. Bound the returned mode values in Speex >= 1.2beta3.2 to fix the issue. Affected versions: gstreamer-plugins-good <= 0.10.8, SDL_sound <= 1.0.1, Speex <= 1.1.12 (speexdec), Sweep <= 0.9.2, vorbis-tools <= 1.2.0, VLC Media Player <= 0.8.6f, xine-lib <= 1.1.11.1, XMMS speex plugin. Fixed versions: gstreamer-plugins-good, >= 0.10.8, SDL_sound, patched in CVS, Speex >= 1.2beta3.2, Sweep >= 0.9.3, vorbis-tools, patched in CVS, VLC Media Player, N/A, xine-lib >= 1.1.12, XMMS speex plugin, N/A. Timeline: 2008-04-11: contacted upstream maintainers and affected vendors 2008-04-17: advisory releas