diff options
author | Markus Meier <maekke@gentoo.org> | 2009-05-21 08:59:13 +0000 |
---|---|---|
committer | Markus Meier <maekke@gentoo.org> | 2009-05-21 08:59:13 +0000 |
commit | 52a8f4f0b0892f0d06c9a9c46f60510838ec9a0d (patch) | |
tree | b5aebeba15cd5984f7d7186fdc63731b19435d94 /media-gfx/jhead | |
parent | Version bump. (diff) | |
download | historical-52a8f4f0b0892f0d06c9a9c46f60510838ec9a0d.tar.gz historical-52a8f4f0b0892f0d06c9a9c46f60510838ec9a0d.tar.bz2 historical-52a8f4f0b0892f0d06c9a9c46f60510838ec9a0d.zip |
old
Package-Manager: portage-2.2_rc33/cvs/Linux i686
Diffstat (limited to 'media-gfx/jhead')
-rw-r--r-- | media-gfx/jhead/ChangeLog | 6 | ||||
-rw-r--r-- | media-gfx/jhead/Manifest | 15 | ||||
-rw-r--r-- | media-gfx/jhead/files/jhead-2.84-bug243238.patch | 122 | ||||
-rw-r--r-- | media-gfx/jhead/jhead-2.84-r1.ebuild | 32 |
4 files changed, 16 insertions, 159 deletions
diff --git a/media-gfx/jhead/ChangeLog b/media-gfx/jhead/ChangeLog index 5070985803db..68039089a4f5 100644 --- a/media-gfx/jhead/ChangeLog +++ b/media-gfx/jhead/ChangeLog @@ -1,6 +1,10 @@ # ChangeLog for media-gfx/jhead # Copyright 1999-2009 Gentoo Foundation; Distributed under the GPL v2 -# $Header: /var/cvsroot/gentoo-x86/media-gfx/jhead/ChangeLog,v 1.107 2009/05/20 17:57:04 armin76 Exp $ +# $Header: /var/cvsroot/gentoo-x86/media-gfx/jhead/ChangeLog,v 1.108 2009/05/21 08:59:12 maekke Exp $ + + 21 May 2009; Markus Meier <maekke@gentoo.org> -jhead-2.84-r1.ebuild, + -files/jhead-2.84-bug243238.patch: + old 20 May 2009; Raúl Porcel <armin76@gentoo.org> jhead-2.86.ebuild: ia64/sparc stable wrt #268864 diff --git a/media-gfx/jhead/Manifest b/media-gfx/jhead/Manifest index 3f8f36eac0fe..8461e3d68c60 100644 --- a/media-gfx/jhead/Manifest +++ b/media-gfx/jhead/Manifest @@ -1,7 +1,14 @@ -AUX jhead-2.84-bug243238.patch 4346 RMD160 3312ba98eb1743d059cc96ced9ef58df8ecbfe38 SHA1 bf70d638464cf8df84c715e0933f708cc066b804 SHA256 dd7a611a9ac66687d7386e880d8319b9cc4a7175e3f5fec961b596ffc137d458 -DIST jhead-2.84.tar.gz 64159 RMD160 018b75450d7a1e1c2018fd05b2c3c25f70cd8669 SHA1 63251c63a7d88e4f7b00f287ebc7b1095c2422f6 SHA256 c4811e7672703e09831bc931eac129a003a5949c43298ad8c6bba10e04797294 +-----BEGIN PGP SIGNED MESSAGE----- +Hash: SHA1 + DIST jhead-2.86.tar.gz 62325 RMD160 9755dcc0c74a068b6cf09f542f8a858087eced81 SHA1 fed6d7645b817b310892eaa5563ae30b428d174f SHA256 f4b369adb7d2032eeb0ac9cf2b212af070cb3bb72bdab82e88bece72d4c8bd2e -EBUILD jhead-2.84-r1.ebuild 770 RMD160 d8f090fde22a73ba4720520f9296a3bc3e39bd78 SHA1 203c44a480928dd303309e965e88cef775170cc1 SHA256 88df8cf6a5763b75d2091c88ce81a2e03715fe509165f5305acda983b2067eef EBUILD jhead-2.86.ebuild 673 RMD160 9f8d7141413311a2eff6fc8a31986eca0c8b47e7 SHA1 ae99fb8f335a40854e68fe5ee3342bc5f38d4f87 SHA256 61da73eed65dcc2e8d5b6c925b1cb4baac98a8a30d6c4cceb251ae3761cf2efe -MISC ChangeLog 11687 RMD160 f629714a7f1d9b23af45b9387f46d6340ac2a31f SHA1 9fe44b0217e42d334834c108aace994923b9454f SHA256 e0fd6746004571fa070b5f3158f485e99d2c27cf5702400dcf221d0476760e0c +MISC ChangeLog 11801 RMD160 fde5b5733a4b94751b8059f63316ed7366ee1de2 SHA1 f37b49615d21cb065c3183b6b6bc3b64c30298f4 SHA256 9b0798d8ba0b724d44509476ac7f0fef109498b384394e16a2e3e6c63e437c62 MISC metadata.xml 227 RMD160 e1ab24e5aae2199305750580205194b20071be60 SHA1 95d0602c6bd3ca036ca5c87a48130a7c6bda9dcb SHA256 98c6fc5ae01a9eb624c22cd78347eeb8cf84db19737690c37f232b0b7000930c +-----BEGIN PGP SIGNATURE----- +Version: GnuPG v2.0.11 (GNU/Linux) + +iEYEARECAAYFAkoVGEYACgkQkKaRLQcq0GLcSACgjGsxZ0iK7aTQ8BqFHaLH6diR +t0UAnAgZ03eEg8caXA4ZXplomu300NdD +=+p2U +-----END PGP SIGNATURE----- diff --git a/media-gfx/jhead/files/jhead-2.84-bug243238.patch b/media-gfx/jhead/files/jhead-2.84-bug243238.patch deleted file mode 100644 index 4ed8ff5c715b..000000000000 --- a/media-gfx/jhead/files/jhead-2.84-bug243238.patch +++ /dev/null @@ -1,122 +0,0 @@ -this patch fixes gentoo bug #243238 (CVE-2008-{4640,4641}) - -diff -ru jhead-2.84.orig/jhead.c jhead-2.84/jhead.c ---- jhead-2.84.orig/jhead.c 2008-10-04 18:10:35.000000000 +0200 -+++ jhead-2.84/jhead.c 2008-11-28 18:51:52.000000000 +0100 -@@ -295,44 +295,88 @@ - - - //-------------------------------------------------------------------------- -+// Escape an argument such that it is interpreted literally by the shell -+// (returns the number of written characters) -+//-------------------------------------------------------------------------- -+static int shellescape(char* to, const char* from) -+{ -+ int i, j; -+ i = j = 0; -+ -+ // Enclosing characters in double quotes preserves the literal value of -+ // all characters within the quotes, with the exception of $, `, and \. -+ to[j++] = '"'; -+ while(from[i]) -+ { -+#ifdef _WIN32 -+ // Under WIN32, there isn't really anything dangerous you can do with -+ // escape characters, plus windows users aren't as sercurity paranoid. -+ // Hence, no need to do fancy escaping. -+ to[j++] = from[i++]; -+#else -+ switch(from[i]) { -+ case '"': -+ case '$': -+ case '`': -+ case '\\': -+ to[j++] = '\\'; -+ default: -+ to[j++] = from[i++]; -+ } -+#endif -+ if (j >= PATH_MAX) ErrFatal("max path exceeded"); -+ } -+ to[j++] = '"'; -+ return j; -+} -+ -+ -+//-------------------------------------------------------------------------- - // Apply the specified command to the JPEG file. - //-------------------------------------------------------------------------- - static void DoCommand(const char * FileName, int ShowIt) - { - int a,e; -- char ExecString[PATH_MAX*2]; -- char TempName[PATH_MAX+1]; -+ char ExecString[PATH_MAX*3]; -+ char TempName[PATH_MAX+10]; - int TempUsed = FALSE; - - e = 0; - -- // Make a temporary file in the destination directory by changing last char. -- strcpy(TempName, FileName); -- a = strlen(TempName)-1; -- TempName[a] = (char)(TempName[a] == 't' ? 'z' : 't'); -+ // Generate an unused temporary file name in the destination directory -+ // (a is the number of characters to copy from FileName) -+ a = strlen(FileName)-1; -+ while(a > 0 && FileName[a-1] != '/') a--; -+ memcpy(TempName, FileName, a); -+ strcpy(TempName+a, "XXXXXX"); -+ mkstemp(TempName); -+ if(!TempName[0]) { -+ ErrFatal("Cannot find available temporary file name"); -+ } -+ -+ - - // Build the exec string. &i and &o in the exec string get replaced by input and output files. - for (a=0;;a++){ - if (ApplyCommand[a] == '&'){ - if (ApplyCommand[a+1] == 'i'){ - // Input file. -- e += sprintf(ExecString+e, "\"%s\"",FileName); -+ e += shellescape(ExecString+e, FileName); - a += 1; - continue; - } - if (ApplyCommand[a+1] == 'o'){ - // Needs an output file distinct from the input file. -- e += sprintf(ExecString+e, "\"%s\"",TempName); -+ e += shellescape(ExecString+e, TempName); - a += 1; - TempUsed = TRUE; -- unlink(TempName);// Remove any pre-existing temp file - continue; - } - } - ExecString[e++] = ApplyCommand[a]; - if (ApplyCommand[a] == 0) break; - } -- -+ShowIt = 1; - if (ShowIt) printf("Cmd:%s\n",ExecString); - - errno = 0; -@@ -638,7 +682,7 @@ - ErrFatal("Orientation screwup"); - } - -- sprintf(RotateCommand, "jpegtran -%s -outfile &o &i", Argument); -+ sprintf(RotateCommand, "jpegtran -trim -%s -outfile &o &i", Argument); - ApplyCommand = RotateCommand; - DoCommand(FileName, FALSE); - ApplyCommand = NULL; -@@ -657,7 +701,7 @@ - strcpy(ThumbTempName_out, FileName); - strcat(ThumbTempName_out, ".tho"); - SaveThumbnail(ThumbTempName_in); -- sprintf(RotateCommand,"jpegtran -%s -outfile \"%s\" \"%s\"", -+ sprintf(RotateCommand,"jpegtran -trim -%s -outfile \"%s\" \"%s\"", - Argument, ThumbTempName_out, ThumbTempName_in); - - if (system(RotateCommand) == 0){ diff --git a/media-gfx/jhead/jhead-2.84-r1.ebuild b/media-gfx/jhead/jhead-2.84-r1.ebuild deleted file mode 100644 index 6ffa7b12935c..000000000000 --- a/media-gfx/jhead/jhead-2.84-r1.ebuild +++ /dev/null @@ -1,32 +0,0 @@ -# Copyright 1999-2008 Gentoo Foundation -# Distributed under the terms of the GNU General Public License v2 -# $Header: /var/cvsroot/gentoo-x86/media-gfx/jhead/jhead-2.84-r1.ebuild,v 1.6 2008/12/01 15:51:59 ranger Exp $ - -inherit toolchain-funcs eutils - -DESCRIPTION="Exif Jpeg camera setting parser and thumbnail remover" -HOMEPAGE="http://www.sentex.net/~mwandel/jhead" -SRC_URI="http://www.sentex.net/~mwandel/${PN}/${P}.tar.gz" - -LICENSE="public-domain" -SLOT="0" -KEYWORDS="alpha amd64 hppa ia64 ppc ppc64 sparc x86" -IUSE="" - -src_unpack() { - unpack ${A} - cd "${S}" - epatch "${FILESDIR}"/${P}-bug243238.patch -} - -src_compile() { - tc-export CC - emake || die "emake failed." -} - -src_install() { - dobin ${PN} || die "dobin failed." - dodoc *.txt - dohtml *.html - doman ${PN}.1.gz -} |