Git-Url: http://git.frugalware.org/gitweb/gitweb.cgi?p=frugalware-current.git;a=commitdiff;h=fa9907718faf6b818820a97cc1a9aba60678a8e8
commit fa9907718faf6b818820a97cc1a9aba60678a8e8 Author: DeX77 <[email protected]> Date: Fri Dec 4 15:35:51 2015 +0100 Revert "enscript-1.6.4-5-x86_64" This reverts commit dd29052bcd5d57bcbf36bf1954ddee3e536f3a52. diff --git a/source/apps/enscript/CVE-2008-3863.patch b/source/apps/enscript/CVE-2008-3863.patch new file mode 100644 index 0000000..57bdc91 --- /dev/null +++ b/source/apps/enscript/CVE-2008-3863.patch @@ -0,0 +1,53 @@ +Index: enscript-1.6.4/src/psgen.c +=================================================================== +--- enscript-1.6.4.orig/src/psgen.c 2008-10-28 12:36:22.000000000 -0700 ++++ enscript-1.6.4/src/psgen.c 2008-10-28 12:37:43.000000000 -0700 +@@ -978,6 +978,9 @@ + FATAL ((stderr, + _("user font encoding can be only the system's default or `ps'"))); + ++ if (strlen(token.u.font.name) >= sizeof (user_font_name)) ++ FATAL ((stderr, ++ _("user font name too long: %s"), token.u.font.name)); + strcpy (user_font_name, token.u.font.name); + user_font_pt.w = token.u.font.size.w; + user_font_pt.h = token.u.font.size.h; +@@ -1444,7 +1447,7 @@ + buf[i] = ch; + if (i + 1 >= sizeof (buf)) + FATAL ((stderr, _("too long argument for %s escape:\n%.*s"), +- escapes[i].name, i, buf)); ++ escapes[e].name, i, buf)); + } + buf[i] = '\0'; + +@@ -1452,6 +1455,9 @@ + switch (escapes[e].escape) + { + case ESC_FONT: ++ if (strlen(buf) >= sizeof (token->u.font.name)) ++ FATAL ((stderr, _("too long font name for font escape:\n%s"), ++ buf)); + strcpy (token->u.font.name, buf); + + /* Check for the default font. */ +@@ -1465,6 +1471,9 @@ + FATAL ((stderr, _("malformed font spec for ^@font escape: %s"), + token->u.font.name)); + ++ if (strlen(cp) >= sizeof (token->u.font.name)) ++ FATAL ((stderr, _("too long font spec for font escape:\n%s"), ++ cp)); + strcpy (token->u.font.name, cp); + xfree (cp); + } +@@ -1544,6 +1553,9 @@ + break; + + case ESC_SETFILENAME: ++ if (strlen(buf) >= sizeof (token->u.filename)) ++ FATAL ((stderr, _("too long file name for setfilename escape:\n%s"), ++ buf)); + strcpy (token->u.filename, buf); + token->type = tSETFILENAME; + break; diff --git a/source/apps/enscript/FrugalBuild b/source/apps/enscript/FrugalBuild new file mode 100644 index 0000000..69c52eb --- /dev/null +++ b/source/apps/enscript/FrugalBuild @@ -0,0 +1,23 @@ +# Compiling Time: 0.07 SBU +# Maintainer: Miklos Vajna <[email protected]> + +pkgname=enscript +pkgver=1.6.4 +pkgrel=5 +pkgdesc="Converts text files to PostScript" +url="http://www.codento.com/people/mtr/genscript/"; +depends=('glibc') +groups=('apps') +archs=('i686' 'x86_64') +up2date="lynx -dump $url|grep tar.gz$|sed 's/.*-\(.*\)\.t.*/\1/;q'" +source=($url/$pkgname-$pkgver.tar.gz CVE-2008-3863.patch) +sha1sums=('9dd7128a508d4c9671659b9520028d12add50cfa' \ + '912ba3b0254b4fa05dbfff1ac6d7be2e70a45b60') + +build() { + Fpatchall + Fmake --sysconfdir=/etc/enscript + make prefix=$Fdestdir/usr sysconfdir=$Fdestdir/etc/enscript install || Fdie +} + +# optimization OK _______________________________________________ Frugalware-git mailing list [email protected] http://frugalware.org/mailman/listinfo/frugalware-git
