mirror of
https://github.com/gentoo-mirror/gentoo.git
synced 2026-09-24 04:59:14 -07:00
media-libs/lcms: Cleanup vulnerable
Bug: https://bugs.gentoo.org/628478 Package-Manager: Portage-2.3.49, Repoman-2.3.10
This commit is contained in:
@@ -1,2 +1 @@
|
||||
DIST lcms2-2.8.tar.gz 6687005 BLAKE2B fb187eeb5ffbd5bc9c836fa75c26111605c582281edcdf27c91175248b8b71c69017b9bcd632b5a51360173777c87dff58cab51d209c0e8dda9f329f0d2e3eaf SHA512 a9478885b4892c79314a2ef9ab560e6655ac8f2d17abae0805e8b871138bb190e21f0e5c805398449f9dad528dc50baaf9e3cce8b8158eb8ff74179be5733f8f
|
||||
DIST lcms2-2.9.tar.gz 10953949 BLAKE2B 6f22a0a8901562e8a84a82c077f31b0155bf81d2b5023211059fa157061e78ebe170bd4744f6d15ab76c96ff9dae521a7560e9665a230337d149e1f0c9018788 SHA512 d91e320a97ef9d64cce31585b7df7c85accb52a0c46a10ed0f45a0ba46cc2ad6687de5151e59ac62170ea878ab48595c1493125f4afb1872824afe1c3f3c459b
|
||||
|
||||
@@ -1,22 +0,0 @@
|
||||
From 5ca71a7bc18b6897ab21d815d15e218e204581e2 Mon Sep 17 00:00:00 2001
|
||||
From: Marti <marti.maria@tktbrainpower.com>
|
||||
Date: Mon, 15 Aug 2016 23:31:39 +0200
|
||||
Subject: [PATCH] Added an extra check to MLU bounds
|
||||
|
||||
Thanks to Ibrahim el-sayed for spotting the bug
|
||||
---
|
||||
src/cmstypes.c | 1 +
|
||||
1 file changed, 1 insertion(+)
|
||||
|
||||
diff --git a/src/cmstypes.c b/src/cmstypes.c
|
||||
index cb61860..c7328b9 100644
|
||||
--- a/src/cmstypes.c
|
||||
+++ b/src/cmstypes.c
|
||||
@@ -1460,6 +1460,7 @@ void *Type_MLU_Read(struct _cms_typehandler_struct* self, cmsIOHANDLER* io, cmsU
|
||||
|
||||
// Check for overflow
|
||||
if (Offset < (SizeOfHeader + 8)) goto Error;
|
||||
+ if ((Offset + Len) > SizeOfTag + 8) goto Error;
|
||||
|
||||
// True begin of the string
|
||||
BeginOfThisString = Offset - SizeOfHeader - 8;
|
||||
@@ -1,46 +0,0 @@
|
||||
# Copyright 1999-2018 Gentoo Foundation
|
||||
# Distributed under the terms of the GNU General Public License v2
|
||||
|
||||
EAPI=6
|
||||
AUTOTOOLS_PRUNE_LIBTOOL_FILES="modules"
|
||||
inherit eutils multilib-minimal
|
||||
|
||||
DESCRIPTION="A lightweight, speed optimized color management engine"
|
||||
HOMEPAGE="http://www.littlecms.com/"
|
||||
SRC_URI="mirror://sourceforge/${PN}/lcms2-${PV}.tar.gz"
|
||||
|
||||
LICENSE="MIT"
|
||||
SLOT="2"
|
||||
KEYWORDS="alpha amd64 arm arm64 hppa ia64 ~m68k ~mips ppc ppc64 ~s390 ~sh sparc x86 ~x64-cygwin ~amd64-fbsd ~x86-fbsd ~amd64-linux ~x86-linux ~ppc-macos ~x64-macos ~x86-macos ~m68k-mint ~sparc-solaris ~x64-solaris ~x86-solaris"
|
||||
IUSE="doc jpeg static-libs +threads test tiff zlib"
|
||||
|
||||
RDEPEND="jpeg? ( >=virtual/jpeg-0-r2:0[${MULTILIB_USEDEP}] )
|
||||
tiff? ( >=media-libs/tiff-4.0.3-r6:0=[${MULTILIB_USEDEP}] )
|
||||
zlib? ( >=sys-libs/zlib-1.2.8-r1:=[${MULTILIB_USEDEP}] )"
|
||||
DEPEND="${RDEPEND}"
|
||||
|
||||
S=${WORKDIR}/lcms2-${PV}
|
||||
|
||||
PATCHES=(
|
||||
"${FILESDIR}/${P}-CVE-2016-10165.patch"
|
||||
)
|
||||
|
||||
multilib_src_configure() {
|
||||
local myeconfargs=(
|
||||
$(use_with jpeg)
|
||||
$(use_with tiff)
|
||||
$(use_with zlib)
|
||||
$(use_with threads)
|
||||
)
|
||||
ECONF_SOURCE="${S}" \
|
||||
econf ${myeconfargs[@]}
|
||||
}
|
||||
|
||||
multilib_src_install_all() {
|
||||
find "${ED}" \( -name "*.la" -o -name "*.a" \) -delete || die
|
||||
|
||||
if use doc; then
|
||||
docinto pdf
|
||||
dodoc doc/*.pdf
|
||||
fi
|
||||
}
|
||||
@@ -1,51 +0,0 @@
|
||||
# Copyright 1999-2018 Gentoo Foundation
|
||||
# Distributed under the terms of the GNU General Public License v2
|
||||
|
||||
EAPI=6
|
||||
|
||||
inherit libtool multilib-minimal
|
||||
|
||||
DESCRIPTION="A lightweight, speed optimized color management engine"
|
||||
HOMEPAGE="http://www.littlecms.com/"
|
||||
SRC_URI="mirror://sourceforge/${PN}/lcms2-${PV}.tar.gz"
|
||||
|
||||
LICENSE="MIT"
|
||||
SLOT="2"
|
||||
KEYWORDS="~alpha ~amd64 ~arm ~arm64 ~hppa ~ia64 ~m68k ~mips ~ppc ~ppc64 ~s390 ~sh ~sparc ~x86 ~x64-cygwin ~amd64-fbsd ~x86-fbsd ~amd64-linux ~x86-linux ~ppc-macos ~x64-macos ~x86-macos ~m68k-mint ~sparc-solaris ~x64-solaris ~x86-solaris"
|
||||
IUSE="doc jpeg static-libs test +threads tiff"
|
||||
|
||||
RDEPEND="
|
||||
jpeg? ( >=virtual/jpeg-0-r2:0[${MULTILIB_USEDEP}] )
|
||||
tiff? ( >=media-libs/tiff-4.0.3-r6:0=[${MULTILIB_USEDEP}] )
|
||||
"
|
||||
DEPEND="${RDEPEND}"
|
||||
|
||||
S="${WORKDIR}/lcms2-${PV}"
|
||||
|
||||
PATCHES=( "${FILESDIR}/${P}-CVE-2016-10165.patch" )
|
||||
|
||||
src_prepare() {
|
||||
default
|
||||
elibtoolize # for Prefix/Solaris
|
||||
}
|
||||
|
||||
multilib_src_configure() {
|
||||
local myeconfargs=(
|
||||
$(use_with jpeg)
|
||||
$(use_enable static-libs static)
|
||||
$(use_with threads)
|
||||
$(use_with tiff)
|
||||
--without-zlib
|
||||
)
|
||||
ECONF_SOURCE="${S}" \
|
||||
econf ${myeconfargs[@]}
|
||||
}
|
||||
|
||||
multilib_src_install_all() {
|
||||
find "${ED}" -name "*.la" -delete || die
|
||||
|
||||
if use doc; then
|
||||
docinto pdf
|
||||
dodoc doc/*.pdf
|
||||
fi
|
||||
}
|
||||
Reference in New Issue
Block a user