OpenPKG CVS Repository
  http://cvs.openpkg.org/
  ____________________________________________________________________________

  Server: cvs.openpkg.org                  Name:   Ralf S. Engelschall
  Root:   /e/openpkg/cvs                   Email:  [EMAIL PROTECTED]
  Module: openpkg-src openpkg-web          Date:   15-Jan-2003 14:50:47
  Branch: HEAD                             Handle: 2003011513504502

  Added files:
    openpkg-src/png         png.patch
  Modified files:
    openpkg-src/png         png.spec
    openpkg-web             news.txt

  Log:
    fix security bug

  Summary:
    Revision    Changes     Path
    1.1         +24 -0      openpkg-src/png/png.patch
    1.29        +3  -1      openpkg-src/png/png.spec
    1.2824      +1  -0      openpkg-web/news.txt
  ____________________________________________________________________________

  patch -p0 <<'@@ .'
  Index: openpkg-src/png/png.patch
  ============================================================================
  $ cvs diff -u -r0 -r1.1 png.patch
  --- /dev/null 2003-01-15 14:50:47.000000000 +0100
  +++ png.patch 2003-01-15 14:50:47.000000000 +0100
  @@ -0,0 +1,24 @@
  +--- pngrtran.c.orig  Wed Oct  2 20:20:24 2002
  ++++ pngrtran.c       Wed Jan 15 11:30:23 2003
  +@@ -1965,8 +1965,8 @@
  +          /* This changes the data from RRGGBB to RRGGBBXX */
  +          if (flags & PNG_FLAG_FILLER_AFTER)
  +          {
  +-            png_bytep sp = row + (png_size_t)row_width * 3;
  +-            png_bytep dp = sp  + (png_size_t)row_width;
  ++            png_bytep sp = row + (png_size_t)row_width * 6;
  ++            png_bytep dp = sp  + (png_size_t)row_width * 2;
  +             for (i = 1; i < row_width; i++)
  +             {
  +                *(--dp) = hi_filler;
  +@@ -1987,8 +1987,8 @@
  +          /* This changes the data from RRGGBB to XXRRGGBB */
  +          else
  +          {
  +-            png_bytep sp = row + (png_size_t)row_width * 3;
  +-            png_bytep dp = sp  + (png_size_t)row_width;
  ++            png_bytep sp = row + (png_size_t)row_width * 6;
  ++            png_bytep dp = sp  + (png_size_t)row_width * 2;
  +             for (i = 0; i < row_width; i++)
  +             {
  +                *(--dp) = *(--sp);
  @@ .
  patch -p0 <<'@@ .'
  Index: openpkg-src/png/png.spec
  ============================================================================
  $ cvs diff -u -r1.28 -r1.29 png.spec
  --- openpkg-src/png/png.spec  3 Jan 2003 10:54:17 -0000       1.28
  +++ openpkg-src/png/png.spec  15 Jan 2003 13:50:47 -0000      1.29
  @@ -33,10 +33,11 @@
   Group:        Graphics
   License:      BSD
   Version:      1.2.5
  -Release:      20021003
  +Release:      20030115
   
   #   list of sources
   Source0:      
http://osdn.dl.sourceforge.net/sourceforge/libpng/libpng-%{version}.tar.gz
  +Patch0:       png.patch
   
   #   build information
   Prefix:       %{l_prefix}
  @@ -53,6 +54,7 @@
   
   %prep
       %setup -q -n libpng-%{version}
  +    %patch -p0
   
   %build
       %{l_make} %{l_mflags} \
  @@ .
  patch -p0 <<'@@ .'
  Index: openpkg-web/news.txt
  ============================================================================
  $ cvs diff -u -r1.2823 -r1.2824 news.txt
  --- openpkg-web/news.txt      15 Jan 2003 13:24:01 -0000      1.2823
  +++ openpkg-web/news.txt      15 Jan 2003 13:50:45 -0000      1.2824
  @@ -1,3 +1,4 @@
  +15-Jan-2003: Upgraded package: P<png-1.2.5-20030115>
   15-Jan-2003: Upgraded package: P<tetex-1.0.7-20030115>
   15-Jan-2003: Upgraded package: P<xdelta-1.1.3-20030115>
   15-Jan-2003: Upgraded package: P<libgdome-0.7.2-20030115>
  @@ .
______________________________________________________________________
The OpenPKG Project                                    www.openpkg.org
CVS Repository Commit List                     [EMAIL PROTECTED]

Reply via email to