David Runge pushed to branch main at Arch Linux / Packaging / Packages / barcode


Commits:
43e18f89 by David Runge at 2026-02-02T17:03:59+01:00
Remove unnecessary use of srcdir

Signed-off-by: David Runge <[email protected]>

- - - - -
c96cf8bc by David Runge at 2026-02-02T17:05:27+01:00
Switch to https for source

Signed-off-by: David Runge <[email protected]>

- - - - -
974cc881 by David Runge at 2026-02-02T17:06:24+01:00
Switch to correct SPDX license identifier

Signed-off-by: David Runge <[email protected]>

- - - - -
a4c58b7e by David Runge at 2026-02-02T17:07:11+01:00
Replace use of md5sums with b2sums

Signed-off-by: David Runge <[email protected]>

- - - - -
5970a3d9 by David Runge at 2026-02-02T17:16:04+01:00
Add patch to fix issues with `sprintf` being called without format arg

Signed-off-by: David Runge <[email protected]>

- - - - -
1750a209 by David Runge at 2026-02-02T17:18:13+01:00
upgpkg: 0.99-6

Rebuild to fix various issues and re-sign the package.

- - - - -


4 changed files:

- .SRCINFO
- PKGBUILD
- REUSE.toml
- + barcode-0.99-format-security.patch


Changes:

=====================================
.SRCINFO
=====================================
@@ -1,13 +1,16 @@
 pkgbase = barcode
        pkgdesc = A tool to convert text strings to printed bars
        pkgver = 0.99
-       pkgrel = 5
+       pkgrel = 6
        url = https://www.gnu.org/software/barcode/
        arch = x86_64
-       license = GPL
+       license = GPL-3.0-or-later
        depends = glibc
-       source = ftp://ftp.gnu.org/gnu/barcode/barcode-0.99.tar.xz
-       md5sums = cdc504ee1020e27fbfeebcb0718de054
+       source = https://ftp.gnu.org/gnu/barcode/barcode-0.99.tar.xz
+       source = barcode-0.99-format-security.patch
        sha256sums = 
e87ecf6421573e17ce35879db8328617795258650831affd025fba42f155cdc6
+       sha256sums = 
bdfd711f0430127943ab48cf2d834c8e5ef5877902dad70676f9318c8ddbe880
+       b2sums = 
a6ef5a4f0061bd0f0cb65a791516383259f317801e9f5ea02c626735cd3ed5f00e0a92502b9b5e3dcb8ea95c313e10f5abf9c172e1094111dea7f3cfb45ec032
+       b2sums = 
08911f2c538f4915ea02352273596011431b34f4b63cccb0a9b603ee83cf19301cb59b289d06831b762c2da43cfbc340b07bce458c82e6aaf75a8c6732646c38
 
 pkgname = barcode


=====================================
PKGBUILD
=====================================
@@ -2,18 +2,31 @@
 
 pkgname=barcode
 pkgver=0.99
-pkgrel=5
+pkgrel=6
 pkgdesc="A tool to convert text strings to printed bars"
 arch=('x86_64')
 url="https://www.gnu.org/software/barcode/";
-license=('GPL')
+license=('GPL-3.0-or-later')
 depends=('glibc')
-source=("ftp://ftp.gnu.org/gnu/${pkgname}/${pkgname}-${pkgver}.tar.xz";)
-md5sums=('cdc504ee1020e27fbfeebcb0718de054')
-sha256sums=('e87ecf6421573e17ce35879db8328617795258650831affd025fba42f155cdc6')
+source=(
+  "https://ftp.gnu.org/gnu/${pkgname}/${pkgname}-${pkgver}.tar.xz";
+  $pkgname-0.99-format-security.patch
+)
+sha256sums=('e87ecf6421573e17ce35879db8328617795258650831affd025fba42f155cdc6'
+            'bdfd711f0430127943ab48cf2d834c8e5ef5877902dad70676f9318c8ddbe880')
+b2sums=('a6ef5a4f0061bd0f0cb65a791516383259f317801e9f5ea02c626735cd3ed5f00e0a92502b9b5e3dcb8ea95c313e10f5abf9c172e1094111dea7f3cfb45ec032'
+        
'08911f2c538f4915ea02352273596011431b34f4b63cccb0a9b603ee83cf19301cb59b289d06831b762c2da43cfbc340b07bce458c82e6aaf75a8c6732646c38')
+
+prepare() {
+  # Fix sprintf format
+  patch -Np1 -d $pkgname-$pkgver -i ../$pkgname-0.99-format-security.patch
+
+  cd $pkgname-$pkgver
+  autoreconf -fiv
+}
 
 build() {
-  cd "${srcdir}/${pkgname}-${pkgver}"
+  cd "${pkgname}-${pkgver}"
 
   CFLAGS+=' -fcommon' # 
https://wiki.gentoo.org/wiki/Gcc_10_porting_notes/fno_common
 
@@ -23,7 +36,7 @@ build() {
 }
 
 package() {
-  cd "${srcdir}/${pkgname}-${pkgver}"
+  cd "${pkgname}-${pkgver}"
 
   make prefix="${pkgdir}/usr" install
 }


=====================================
REUSE.toml
=====================================
@@ -17,6 +17,7 @@ path = [
     "*.timer",
     "*.desktop",
     "*.hook",
+    "*.patch"
 ]
 SPDX-FileCopyrightText = "Arch Linux contributors"
 SPDX-License-Identifier = "0BSD"


=====================================
barcode-0.99-format-security.patch
=====================================
@@ -0,0 +1,12 @@
+diff -ruN a/plessey.c b/plessey.c
+--- a/plessey.c        2013-03-29 23:23:36.000000000 +0100
++++ b/plessey.c        2026-02-02 17:11:15.738936726 +0100
+@@ -149,7 +149,7 @@
+                         checkptr[i+j] ^= check[j];
+     }
+     for (i = 0; i < 8; i++) {
+-        sprintf(ptr, patterns[checkptr[strlen(text) * 4 + i]]);
++        sprintf(ptr, "%s", patterns[checkptr[strlen(text) * 4 + i]]);
+       ptr += 2;
+     }
+     fprintf(stderr, _("CRC: "));



View it on GitLab: 
https://gitlab.archlinux.org/archlinux/packaging/packages/barcode/-/compare/08ae289fed8cb3dc38a47710190ca5d101ddfc1b...1750a20926ae1c37a08bec7dd4fc69c468a67bbb

-- 
View it on GitLab: 
https://gitlab.archlinux.org/archlinux/packaging/packages/barcode/-/compare/08ae289fed8cb3dc38a47710190ca5d101ddfc1b...1750a20926ae1c37a08bec7dd4fc69c468a67bbb
You're receiving this email because of your account on gitlab.archlinux.org.


Reply via email to