Gentoo Archives: gentoo-commits

From: Tim Harder <radhermit@g.o>
To: gentoo-commits@l.g.o
Subject: [gentoo-commits] repo/gentoo:master commit in: media-gfx/ufraw/, media-gfx/ufraw/files/
Date: Thu, 31 Aug 2017 12:37:51
Message-Id: 1504182039.5e188d57a4d15b54693f00ab812279ea1b9544c7.radhermit@gentoo
1 commit: 5e188d57a4d15b54693f00ab812279ea1b9544c7
2 Author: Tim Harder <radhermit <AT> gentoo <DOT> org>
3 AuthorDate: Thu Aug 31 12:20:39 2017 +0000
4 Commit: Tim Harder <radhermit <AT> gentoo <DOT> org>
5 CommitDate: Thu Aug 31 12:20:39 2017 +0000
6 URL: https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=5e188d57
7
8 media-gfx/ufraw: remove old
9
10 media-gfx/ufraw/Manifest | 1 -
11 .../ufraw/files/ufraw-0.21-CVE-2015-3885.patch | 52 --------------
12 media-gfx/ufraw/ufraw-0.21-r1.ebuild | 80 ----------------------
13 3 files changed, 133 deletions(-)
14
15 diff --git a/media-gfx/ufraw/Manifest b/media-gfx/ufraw/Manifest
16 index 751154ec8ef..de09e896d61 100644
17 --- a/media-gfx/ufraw/Manifest
18 +++ b/media-gfx/ufraw/Manifest
19 @@ -1,2 +1 @@
20 -DIST ufraw-0.21.tar.gz 1016298 SHA256 2a6a1bcc633bdc8e15615cf726befcd7f27ab00e7c2a518469a24e1a96964d87 SHA512 e1fbfcf7b6f15089d51626a3e2d3dc694aa79edfc0bdfe4a8be6f684d4a31a91c56502942174c0708de91413fe907acb5d2fa2ad9d1a5404eb66b14764909ae9 WHIRLPOOL 84e96894f9ecc9d3a81f96f7c58165e095553b9bab69343754c8a89ef18480f751745cb48e8846ea5db26d1077ace4104ef18d0c0546b2b54439819b81ee3a7c
21 DIST ufraw-0.22.tar.gz 1103554 SHA256 f7abd28ce587db2a74b4c54149bd8a2523a7ddc09bedf4f923246ff0ae09a25e SHA512 a42eff5052c18afec90245cf97ceeade78e3f288186cf697ac4abf2e8290d4081db8ac4de3ae47b3774f30a6cb4cbda392099e6fd2125fe751abb40d9b065ad2 WHIRLPOOL 5cb53f83d2f2baccd0752a0898eb894b8e15ad234962f3e3cc4ae2166309cd68893dceef28d32018aa486da1a09c64df378a2569f764a42f8251f5a568c14e5f
22
23 diff --git a/media-gfx/ufraw/files/ufraw-0.21-CVE-2015-3885.patch b/media-gfx/ufraw/files/ufraw-0.21-CVE-2015-3885.patch
24 deleted file mode 100644
25 index c17c66c41ab..00000000000
26 --- a/media-gfx/ufraw/files/ufraw-0.21-CVE-2015-3885.patch
27 +++ /dev/null
28 @@ -1,52 +0,0 @@
29 -From 6b4ff65c6fc1a88eaa7bfc1ee5a25413d171b5f7 Mon Sep 17 00:00:00 2001
30 -From: Nils Philippsen <nils@××××××.com>
31 -Date: Thu, 21 May 2015 13:47:29 +0200
32 -Subject: [PATCH] patch: CVE-2015-3885
33 -
34 -Squashed commit of the following:
35 -
36 -commit 8f2a2348638f74e059069d98a6329fcc656ae4b5
37 -Author: Nils Philippsen <nils@××××××.com>
38 -Date: Tue May 19 11:36:57 2015 +0200
39 -
40 - CVE-2015-3885: avoid overflowing array
41 -
42 - When reading raw image files containing lossless JPEG data, headers
43 - could be manipulated to make the signed int variable 'len' negative
44 - which specifies how much actual data follows. Interpreted as unsigned,
45 - this could lead to reading file data past the 64k boundary of the array
46 - used for storing it. To avoid that, make 'len' unsigned short, and bail
47 - out early if its value would become invalid (i.e. <= 0).
48 ----
49 - dcraw.cc | 8 +++++---
50 - 1 file changed, 5 insertions(+), 3 deletions(-)
51 -
52 -diff --git a/dcraw.cc b/dcraw.cc
53 -index 75ea121..d9f96ff 100644
54 ---- a/dcraw.cc
55 -+++ b/dcraw.cc
56 -@@ -934,7 +934,8 @@ struct jhead {
57 -
58 - int CLASS ljpeg_start (struct jhead *jh, int info_only)
59 - {
60 -- int c, tag, len;
61 -+ int c, tag;
62 -+ ushort len;
63 - uchar data[0x10000];
64 - const uchar *dp;
65 -
66 -@@ -945,8 +946,9 @@ int CLASS ljpeg_start (struct jhead *jh, int info_only)
67 - do {
68 - fread (data, 2, 2, ifp);
69 - tag = data[0] << 8 | data[1];
70 -- len = (data[2] << 8 | data[3]) - 2;
71 -- if (tag <= 0xff00) return 0;
72 -+ len = (data[2] << 8 | data[3]);
73 -+ if (tag <= 0xff00 || len <= 2) return 0;
74 -+ len -= 2;
75 - fread (data, 1, len, ifp);
76 - switch (tag) {
77 - case 0xffc3:
78 ---
79 -2.4.1
80 -
81
82 diff --git a/media-gfx/ufraw/ufraw-0.21-r1.ebuild b/media-gfx/ufraw/ufraw-0.21-r1.ebuild
83 deleted file mode 100644
84 index d5fd804c5dc..00000000000
85 --- a/media-gfx/ufraw/ufraw-0.21-r1.ebuild
86 +++ /dev/null
87 @@ -1,80 +0,0 @@
88 -# Copyright 1999-2017 Gentoo Foundation
89 -# Distributed under the terms of the GNU General Public License v2
90 -
91 -EAPI=5
92 -inherit autotools eutils fdo-mime gnome2-utils toolchain-funcs
93 -
94 -DESCRIPTION="RAW Image format viewer and GIMP plugin"
95 -HOMEPAGE="http://ufraw.sourceforge.net/"
96 -SRC_URI="mirror://sourceforge/${PN}/${P}.tar.gz"
97 -
98 -LICENSE="GPL-2"
99 -SLOT="0"
100 -KEYWORDS="~alpha ~amd64 ~arm ~hppa ~ia64 ~ppc ~ppc64 ~s390 ~sh ~sparc ~x86 ~amd64-fbsd ~amd64-linux ~x86-linux ~x64-solaris ~x86-solaris"
101 -IUSE="contrast fits gimp gnome gtk openmp timezone"
102 -
103 -REQUIRED_USE="gimp? ( gtk )"
104 -
105 -RDEPEND="
106 - dev-libs/glib:2=
107 - >=media-gfx/exiv2-0.11:0=
108 - media-libs/lcms:2=
109 - >=media-libs/lensfun-0.2.5:=
110 - media-libs/libpng:0=
111 - media-libs/tiff:0=
112 - virtual/jpeg:0=
113 - fits? ( sci-libs/cfitsio:0= )
114 - gnome? ( >=gnome-base/gconf-2 )
115 - gtk? ( >=x11-libs/gtk+-2.6:2
116 - >=media-gfx/gtkimageview-1.5 )
117 - gimp? ( >=media-gfx/gimp-2 )
118 -"
119 -DEPEND="${RDEPEND}
120 - virtual/pkgconfig"
121 -
122 -src_prepare() {
123 - epatch "${FILESDIR}"/${PN}-0.17-cfitsio-automagic.patch
124 - epatch "${FILESDIR}"/${P}-CVE-2015-3885.patch
125 - eautoreconf
126 -}
127 -
128 -src_configure() {
129 - econf \
130 - $(use_enable contrast) \
131 - $(use_with fits cfitsio) \
132 - $(use_with gimp) \
133 - $(use_enable gnome mime) \
134 - $(use_with gtk) \
135 - $(use_enable openmp) \
136 - $(use_enable timezone dst-correction)
137 -}
138 -
139 -src_compile() {
140 - emake AR="$(tc-getAR)"
141 -}
142 -
143 -src_install() {
144 - emake DESTDIR="${D}" schemasdir=/etc/gconf/schemas install
145 - dodoc README TODO
146 -}
147 -
148 -pkg_preinst() {
149 - if use gnome; then
150 - gnome2_gconf_savelist
151 - fi
152 -}
153 -
154 -pkg_postinst() {
155 - if use gnome; then
156 - fdo-mime_mime_database_update
157 - fdo-mime_desktop_database_update
158 - gnome2_gconf_install
159 - fi
160 -}
161 -
162 -pkg_postrm() {
163 - if use gnome; then
164 - fdo-mime_desktop_database_update
165 - fdo-mime_mime_database_update
166 - fi
167 -}