Hello community,

here is the log from the commit of package fontinfo for openSUSE:Factory 
checked in at 2015-04-12 00:10:14
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/fontinfo (Old)
 and      /work/SRC/openSUSE:Factory/.fontinfo.new (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Package is "fontinfo"

Changes:
--------
--- /work/SRC/openSUSE:Factory/fontinfo/fontinfo.changes        2014-10-29 
21:11:30.000000000 +0100
+++ /work/SRC/openSUSE:Factory/.fontinfo.new/fontinfo.changes   2015-04-12 
00:10:39.000000000 +0200
@@ -1,0 +2,8 @@
+Fri Apr 10 06:31:19 UTC 2015 - [email protected]
+
+- updated to version 20150410
+  * prevent buffer overflow for Supplementary Private Use Area-B
+  * reformat CHANGES file
+  * remove 1-click install for 12.2
+
+-------------------------------------------------------------------

Old:
----
  fontinfo-20141029.tar.bz2

New:
----
  fontinfo-20150410.tar.bz2

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Other differences:
------------------
++++++ fontinfo.spec ++++++
--- /var/tmp/diff_new_pack.squ5Qo/_old  2015-04-12 00:10:40.000000000 +0200
+++ /var/tmp/diff_new_pack.squ5Qo/_new  2015-04-12 00:10:40.000000000 +0200
@@ -1,7 +1,7 @@
 #
 # spec file for package fontinfo
 #
-# Copyright (c) 2014 SUSE LINUX Products GmbH, Nuernberg, Germany.
+# Copyright (c) 2015 SUSE LINUX GmbH, Nuernberg, Germany.
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -17,7 +17,7 @@
 
 
 Name:           fontinfo
-Version:        20141029
+Version:        20150410
 Release:        0
 Summary:        Overview of Installed Fonts
 License:        GPL-2.0+

++++++ fontinfo-20141029.tar.bz2 -> fontinfo-20150410.tar.bz2 ++++++
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' old/fontinfo-20141029/CHANGES 
new/fontinfo-20150410/CHANGES
--- old/fontinfo-20141029/CHANGES       2014-10-29 08:49:07.000000000 +0100
+++ new/fontinfo-20150410/CHANGES       2015-04-10 08:28:48.000000000 +0200
@@ -1,123 +1,74 @@
--------------------------------------------------------------------
-Wed Oct 29 07:46:21 UTC 2014 - [email protected]
+Version 20150410
+  * prevent buffer overflow for Supplementary Private Use Area-B
+  * reformat CHANGES file
+  * remove 1-click install for 12.2
 
 Version 20141029
   * 1-click install for 13.2 and sle12
 
--------------------------------------------------------------------
-Mon Jun  9 09:35:24 UTC 2014 - [email protected]
-
 Version 20140609
   * fixed 1-click-install link in detailed view
 
--------------------------------------------------------------------
-Fri May 30 09:50:32 UTC 2014 - [email protected]
-
 Version 20140530
   * 1-click-install link even in detailed view
 
--------------------------------------------------------------------
-Fri May 23 14:20:39 UTC 2014 - [email protected]
-
 Version 20140523
   * fix sle12 ymp distroversion
   * 1-click-install link explicitely visible on Font Card
   * 1-click-install link in Family Overview page
 
--------------------------------------------------------------------
-Fri Feb 28 08:21:49 UTC 2014 - [email protected]
-
 Version 2014028
   * added sle12 and 13.2 to ymps
 
--------------------------------------------------------------------
-Fri Feb 21 11:38:49 UTC 2014 - [email protected]
-
 Version 20140219
   * added sles11 to ymps
 
--------------------------------------------------------------------
-Tue Feb  4 13:31:19 UTC 2014 - [email protected]
-
 Version 20140204
   * improved and added several specimen strings
   * better align t2b layout
 
--------------------------------------------------------------------
-Mon Jan 20 10:31:49 UTC 2014 - [email protected]
-
 Version 20140120
   * use relative sorting for scripts again as absolute seem to
     have more cons than pros
 
--------------------------------------------------------------------
-Wed Jan 15 09:54:51 UTC 2014 - [email protected]
-
-- Version 20140115
+Version 20140115
   * add or fix some specimen strings
   * alow rotation of specimen images (needed for Phags Pa and
     Mongolian)
   * charset toggle links has now block interval ranges
   * minor fixes
 
--------------------------------------------------------------------
-Fri Dec 20 14:22:18 UTC 2013 - [email protected]
-
 Version 20131220
   * charset: view by unicode blocks, individual
     pngs download on demand
   * fixed or improve some specimen strings
 
--------------------------------------------------------------------
-Wed Dec 11 11:15:04 UTC 2013 - [email protected]
-
 Version 20131211
   * polishing specimen view
 
--------------------------------------------------------------------
-Fri Dec  6 12:06:30 UTC 2013 - [email protected]
-
 Version 20131206
   * improve opentype shaping (fix script tag indexing)
 
--------------------------------------------------------------------
-Thu Dec  5 16:09:03 UTC 2013 - [email protected]
-
 Version 20131205
   * improve opentype shaping
 
--------------------------------------------------------------------
-Tue Dec  3 15:52:49 UTC 2013 - [email protected]
-
 Version 20131203
   * involve harfbuzz to opentype shaping (not completely done)
 
--------------------------------------------------------------------
-Tue Nov 26 10:36:47 UTC 2013 - [email protected]
-
 Verison 20131126
   * new string for Byzantine Musical Symbols (thanks to Konstantinos
     Terzopoulos)
 
--------------------------------------------------------------------
-Thu Nov 21 13:25:57 UTC 2013 - [email protected]
-
 Version 20131119
   * no underscores in script names above specimens
   * languages <-> sentences mapping as preparation
     for opentype shaping
   * new sentences for e. g. Math, Sundanese, etc.
 
--------------------------------------------------------------------
-Thu Nov 14 08:21:42 UTC 2013 - [email protected]
-
 Version 20131114
   * extend Math and Musical_Symbols collections coverage
   * added sentences for Math and Musical_Symbols collections
 
--------------------------------------------------------------------
-Tue Nov 12 16:22:30 UTC 2013 - [email protected]
-
 Version 20131112
   * index fonts by unicode blocks
   * introduce 'collections' (now Math and Musical_Symbols); they 
@@ -125,90 +76,51 @@
   * display software package description
   * added CHANGES
 
--------------------------------------------------------------------
-Fri Nov  8 11:47:40 UTC 2013 - [email protected]
-
 Version 20131108
   * do not display 'unknown' language anywhere
 
--------------------------------------------------------------------
-Thu Nov  7 10:04:35 UTC 2013 - [email protected]
-
 Version 20131107
   * check for markdown command in Makefile, and fallback to cat
     if not found
 
--------------------------------------------------------------------
-Wed Nov  6 05:39:06 UTC 2013 - [email protected]
-
 Version 20131106
   * bento: very minor improvement in menu boxes
 
--------------------------------------------------------------------
-Tue Nov  5 13:13:24 UTC 2013 - [email protected]
-
 Version 20131105
   * font format index marks fonts with bitmap strikes
   * bento: improved menu boxes
 
--------------------------------------------------------------------
-Fri Nov  1 11:06:09 UTC 2013 - [email protected]
-
 Version 20131101
   * added specimen sentences for few scripts
   * better names for generated indexes
 
--------------------------------------------------------------------
-Thu Oct 31 08:25:21 UTC 2013 - [email protected]
-
 Version 20131031
   * added specimen sentences for few scripts
   * script names displays now without underscores
 
--------------------------------------------------------------------
-Wed Oct 23 12:06:34 UTC 2013 - [email protected]
-
 Version 20131023
   * display truetype tables used in font
   * do not crash when no fonts found
   * escape dashes in pattern
 
--------------------------------------------------------------------
-Wed Oct 16 12:15:39 UTC 2013 - [email protected]
-
 Version 20131016
   * png charset as an table, generate vertical header
   * split long charsets in parts
 
--------------------------------------------------------------------
-Tue Oct 15 13:38:18 UTC 2013 - [email protected]
-
 Version 20131015
   * better appearance of charsets and specimens of bitmap fonts
 
--------------------------------------------------------------------
-Mon Oct 14 10:29:35 UTC 2013 - [email protected]
-
 Version 20131014
   * minor fixes in script and family indexes (do not display certain 
     fonts multiple times)
 
--------------------------------------------------------------------
-Fri Oct 11 16:12:50 UTC 2013 - [email protected]
-
 Version 20131011
   * larger default size for charsets, trim large specimens
 
--------------------------------------------------------------------
-Thu Oct 10 13:57:19 UTC 2013 - [email protected]
-
 Version 20131010
   * added sentences which fit special fonts
   * debug output, see new -g option
 
--------------------------------------------------------------------
-Tue Oct  8 10:37:27 UTC 2013 - [email protected]
-
 Version 20131008
   * support for right to left text direction in specimens
   * polishing displaying specimens:
@@ -216,33 +128,16 @@
     -> if font doesn't cover minispecimen sentence
   * legal stuff
 
--------------------------------------------------------------------
-Fri Sep 13 09:22:42 UTC 2013 - [email protected]
-
 Version 20130913
   * script font index displays script blocks with ranges
 
--------------------------------------------------------------------
-Wed Sep 11 12:28:12 UTC 2013 - [email protected]
-
 Version 20130911
   * minor fix in Makefile to be parallel buildable
 - enable paralell build
 
--------------------------------------------------------------------
-Wed Sep 11 11:56:04 UTC 2013 - [email protected]
-
-- format specfile
-
--------------------------------------------------------------------
-Thu Sep  5 07:23:17 UTC 2013 - [email protected]
-
-Version 20130904:
+Version 20130904
   * script indexes
 
--------------------------------------------------------------------
-Tue Sep  3 14:29:07 UTC 2013 - [email protected]
-
 Version 20130903
   * added support for unicode scripts: 
     -> on fontcard show scripts, which the font is covering well
@@ -252,114 +147,66 @@
   * -s now 'enforces' one sentence for all fonts
   * new -e option specifies text direction of sentence specified in -s
 
--------------------------------------------------------------------
-Fri May 10 07:20:58 UTC 2013 - [email protected]
-
 Version 20130510
   * minor improvement of font format index
 
--------------------------------------------------------------------
-Thu May  9 07:42:56 UTC 2013 - [email protected]
-
-Version 20130509:
+Version 20130509
   * new index added: Families by Font Formats
 
--------------------------------------------------------------------
-Fri Apr 12 07:31:02 UTC 2013 - [email protected]
-
-Version 20130412:
+Version 20130412
   * slash in family name caught me unprepared
 
--------------------------------------------------------------------
-Thu Apr 11 10:41:50 UTC 2013 - [email protected]
-
-Version 20130411:
+Version 20130411
   * font card lists also rgba and lcdfilter pattern elements
     if available
   * other minor improvements, such as embeddedbitmaps element
     is shown only if the font have at least one bitmap strike
 
--------------------------------------------------------------------
-Mon Apr  8 12:31:24 UTC 2013 - [email protected]
-
-Version 20130408:
+Version 20130408
   * implement repository links (generic) and one click install 
     (openSUSE); see new -n and -r options
 
--------------------------------------------------------------------
-Thu Apr  4 11:37:43 UTC 2013 - [email protected]
-
-Version 20130404:
+Version 20130404
   * can display both bitmap and outline specimen and switch
     between them (to see the difference between font rendered
     by default and font rendered on client's system); see new -a
     option
 
--------------------------------------------------------------------
-Mon Mar 25 13:27:18 UTC 2013 - [email protected]
-
-Version 20130325:
+Version 20130325
   * render embedded bitmaps correctly
 
--------------------------------------------------------------------
-Thu Mar 21 13:49:47 UTC 2013 - [email protected]
-
-Version 20130321:
+Version 20130321
   * display use of embedded bitmaps and available bitmaps in font
   * better rendered specimen of bitmap fonts
 
--------------------------------------------------------------------
-Fri Mar 15 09:42:25 UTC 2013 - [email protected]
-
-Version 20130315:
+Version 20130315
   * display tooltips in specimens: font sizes (see new -z option)
   * display more files in File(s): section for bitmap fonts
 
--------------------------------------------------------------------
-Tue Mar 12 15:20:15 UTC 2013 - [email protected]
-
-Version 20130312:
+Version 20130312
   * use freetype2 and libpng for image rendering, don't use
     ImageMagick
 
--------------------------------------------------------------------
-Fri Mar  1 11:29:22 UTC 2013 - [email protected]
-
-Version 20130301:
+Version 20130301
   * detailed view also for ALL families
   * other minor improvements
 
--------------------------------------------------------------------
-Thu Feb 14 08:16:02 UTC 2013 - [email protected]
-
-Version 20130214:
+Version 20130214
   * added forgotten package-manager.sh, which caused empty
     Software Package Information section
   * do not leak file descriptors
 
--------------------------------------------------------------------
-Wed Feb 13 07:46:55 UTC 2013 - [email protected]
-
-Version 20130213:
+Version 20130213
   * added Software Package Information section to Font Card
   * added foundry, capability and fontformat to Family Overview
 
--------------------------------------------------------------------
-Thu Feb  7 08:06:15 UTC 2013 - [email protected]
-
-Version 20130207:
+Version 20130207
   * minor improvements
 
--------------------------------------------------------------------
-Wed Feb  6 08:11:35 UTC 2013 - [email protected]
-
-Version 20130206:
+Version 20130206
   * minor improvements
 
--------------------------------------------------------------------
-Tue Feb  5 15:08:15 UTC 2013 - [email protected]
-
-Version 20130205:
+Version 20130205
   * code refactorized to be able to easily add styles
   * added bento style
   * possibility to switch between plain and bento style, 
@@ -367,16 +214,10 @@
   * when charset doesn't cover given specimen sentence, take
     first few characters from the charset as sentence
 
--------------------------------------------------------------------
-Tue Jan 15 11:43:59 UTC 2013 - [email protected]
-
-Version 20130115:
+Version 20130115
   * character set is enriched by tooltips, see new -u option
 
--------------------------------------------------------------------
-Thu Dec 20 13:35:19 UTC 2012 - [email protected]
-
-Version 20121220:
+Version 20121220
   * implement some suggestions: offer splitted index of families,
     increase fontsize in character set, minispecimens along family
     names, etc.
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' old/fontinfo-20141029/Makefile 
new/fontinfo-20150410/Makefile
--- old/fontinfo-20141029/Makefile      2014-10-29 08:49:07.000000000 +0100
+++ new/fontinfo-20150410/Makefile      2015-04-10 08:28:48.000000000 +0200
@@ -17,7 +17,7 @@
 # Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA  02110-1301, 
USA.
 
 DIRS           = languages
-VERSION                 = 20141029
+VERSION                 = 20150410
 PKGMAN_CFLAGS   = $(shell sh ./package-manager.sh --cflags)
 PKGMAN_LIBS     = $(shell sh ./package-manager.sh --libs)
 LIBPNG_CFLAGS   = $(shell pkg-config --cflags libpng)
@@ -115,6 +115,4 @@
                cp unicode/collections.sh fontinfo-$(VERSION)/unicode
                cp unicode/collections-map.sh fontinfo-$(VERSION)/unicode
                tar cvjf fontinfo-$(VERSION).tar.bz2 fontinfo-$(VERSION)
-               mkdir -p releases
-               mv fontinfo-$(VERSION) releases
-
+               rm -r fontinfo-$(VERSION)
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' old/fontinfo-20141029/fontinfo-suse.sh 
new/fontinfo-20150410/fontinfo-suse.sh
--- old/fontinfo-20141029/fontinfo-suse.sh      2014-10-29 08:49:07.000000000 
+0100
+++ new/fontinfo-20150410/fontinfo-suse.sh      2015-04-10 08:28:48.000000000 
+0200
@@ -26,6 +26,5 @@
          -r 'SUSE Linux Enterprise Desktop 
12,http://download.opensuse.org/repositories/M17N:/fonts/openSUSE_Factory' \
          -r 'openSUSE 
13.1,http://download.opensuse.org/repositories/M17N:/fonts/openSUSE_13.1' \
          -r 'openSUSE 
12.3,http://download.opensuse.org/repositories/M17N:/fonts/openSUSE_12.3' \
-         -r 'openSUSE 
12.2,http://download.opensuse.org/repositories/M17N:/fonts/openSUSE_12.2' \
          -r 'SUSE Linux Enterprise Server 
11,http://download.opensuse.org/repositories/M17N:/fonts/SLE_11_SP3/' \
          -r 'SUSE Linux Enterprise Desktop 
11,http://download.opensuse.org/repositories/M17N:/fonts/SLE_11_SP3/' \
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' old/fontinfo-20141029/img_png.c 
new/fontinfo-20150410/img_png.c
--- old/fontinfo-20141029/img_png.c     2014-10-29 08:49:07.000000000 +0100
+++ new/fontinfo-20150410/img_png.c     2015-04-10 08:28:48.000000000 +0200
@@ -336,13 +336,13 @@
   FcChar32 char_index, first_char_in_line;
   FcChar32 text[2] = { '\0', '\0' };
   FcChar32 head_text[8] = { 'U', '+', 'x', 'x', 'x', 'x', 'x', '\0' };
-  char ucode[6];
+  char ucode[7];
 
   int line, column, nlines;
   int png_nparts, nlines_part, line_part;
   int empty_lines_part, last_line;
   int png_width, png_height_part;
-  int c, charset_head_width;
+  int c, d, charset_head_width;
 
   const FcChar8 *uchar_name;
 
@@ -462,9 +462,10 @@
       if (first_char_in_line < available) /* -> first_char_in_line set */
       {
         ft_bitmap_set_font(&bitmap, monospace, 0, NULL, 0, 0, NULL, NULL);
-        sprintf(ucode, "%05X", chars[first_char_in_line]);
-        for (c = 0; c < 4; c++)
-          head_text[c + 2] = ucode[c];
+        snprintf(ucode, 7, "%05X", chars[first_char_in_line]);
+        /* this will omit '+' after 'U' for Supplementary Private Use Area-B */
+        for (c = strlen(ucode) - 2, d = sizeof(head_text)/sizeof(head_text[0]) 
- 3; c >= 0; c--, d--)
+          head_text[d] = ucode[c];
         ft_draw_text(head_text,
                      0,
                      (line_part + 1)*(bs + CHARSET_PNG_HDIST)


Reply via email to