UPDATE: print/lyx (long overdue)

2006-06-16 Thread Zvezdan Petkovic
Attached is the long overdue patch.
Please use patch -E to remove three source patches from the previous
version since they have been adopted by LyX developers.  The only
remaining source patch is shortened.

I tested both -qt and -xforms flavors.  They work fine.

Several issues while building the port:

1. This is caused by gettext module.  Do I need to do anything about it?

$ make lib-depends-check
/usr/ports/packages/i386/all/lyx-1.4.1-qt.tgz:
Extra: intl.3
Extra: iconv.4


2. Configuration consistently picked up aspell on my machine (used by
   kdelibs), and this port has traditionally depended on ispell.
   LyX can support both.  The problem with that is that aspell must be
   added to WANTLIB and that dependency is not really necessary.
   My way out of this was addition to CONFIGURE_ARGS

...
--without-aspell \
--without-pspell \
...

   Without this a package builder must have aspell when building lyx
   because of WANTLIB containing aspell.  With this I'm preventing lyx
   from using aspell even when it is available on the machine.
   I really do not think that a spell checker warrants another flavor.
   Any suggestions for a better way of doing this?

3. Nikolay Sturm has at one point committed a change to this port to
   speed up the build.  I added this option at the end of
   CONFIGURE_ARGS.  It doesn't seem to have any ill effects and
   according to ./configure --help it speeds up a one-time build. 

--disable-dependency-tracking

   Any comments on this?

4. No xfonts are distributed with LyX any more.
   Qt doesn't see them anyway because it uses fontconfig instead of
   old style X font path.

   For people who want to see all the math symbols in LyX instead of a
   TeX keyword, they suggest a download of contrib/latex-xft-fonts.
   These are apparently TrueType versions of TeX Computer Modern fonts.
   There are no guarantees from LyX developers about the quality or
   security of contrib/ part of FTP site.

   Besides, in that same directory are BaKoMa fonts that are recommended
   to users of LyX Windows port.  LyX wiki also recommends BaKoMa as a
   better quality over latex-xft-fonts tarball.
http://wiki.lyx.org/FAQ/Qt

   Finally, one can buy a quality Lucida fonts from TeX User Group and
   use them instead.
   
   Whatever fonts are chosen,  they should be put in
   /usr/local/share/fonts/somename as any other fonts and fc-cache
   should be rerun.  Also, an individual user can always put them in
   $HOME/.fonts.
   
   I do not see this as a LyX specific issue and I did not do anything
   about it.  It's well documented on LyX wiki and I believe it's an
   individual user choice whether they want (need) math fonts and then
   which ones they would choose.

   Am I correct in thinking this way?
   Should we put a message about the font availability to the port?

Best regards,

Zvezdan Petkovic
Index: Makefile
===
RCS file: /cvs/ports/print/lyx/Makefile,v
retrieving revision 1.36
diff -u -r1.36 Makefile
--- Makefile10 Feb 2006 21:17:01 -  1.36
+++ Makefile16 Jun 2006 06:49:43 -
@@ -2,18 +2,18 @@
 
 COMMENT=   graphical frontend for LaTeX (nearly WYSIWYG)
 
-DISTNAME=  lyx-1.3.4
-PKGNAME=   ${DISTNAME}p1
+DISTNAME=  lyx-1.4.1
 CATEGORIES=print
 
 HOMEPAGE=  http://www.lyx.org/
 
+EXTRACT_SUFX?= .tar.bz2
 MASTER_SITES=  ftp://ftp.lyx.org/pub/lyx/stable/ \
ftp://ftp.sdsc.edu/pub/other/lyx/stable/ \
ftp://ftp.lip6.fr/pub/lyx/stable/ \
ftp://ftp.chg.ru/pub/TeX/lyx/stable/
 
-MAINTAINER=Zvezdan Petkovic [EMAIL PROTECTED]
+MAINTAINER=Zvezdan Petkovic [EMAIL PROTECTED]
 
 # In XForms flavor: quasi-GPL (linked to closed source library)
 # In Qt flavor: GPL (this should be preferred for CD distribution)
@@ -23,11 +23,15 @@
 PERMIT_DISTFILES_CDROM=Yes
 PERMIT_DISTFILES_FTP=  Yes
 
-MODULES=   devel/gettext
+MODULES=   devel/gettext lang/python
+
+LYX_DEPENDS=   ::print/teTeX/base \
+   ::graphics/ImageMagick \
+   ::textproc/ispell
+BUILD_DEPENDS+=${LYX_DEPENDS}
+RUN_DEPENDS+=  ${LYX_DEPENDS}
+WANTLIB=   ICE SM X11 c m stdc++ z
 
-BUILD_DEPENDS+=:teTeX_base-*:print/teTeX/base
-RUN_DEPENDS+=  :teTeX_base-*:print/teTeX/base \
-   :ispell-*:textproc/ispell
 USE_GMAKE= Yes
 
 FLAVORS=   qt xforms
@@ -36,13 +40,13 @@
 .if ${FLAVOR:L} == qt
 MODULES+=  qt3
 MODQT_MT=  Yes
+WANTLIB+=  pthread
 CONFIGURE_ARGS=--with-frontend=qt ${MODQT_CONFIGURE_ARGS}
-CONFIGURE_ENV= LIBS=-pthread
-# A hack until LyX developers apply the patch to qt.m4 to respect $MOC and $UIC
-CONFIGURE_ENV+=ac_moc1=${MODQT_MOC} ac_uic=${MODQT_UIC}
-WANTLIB=   ICE stdc++ c X11 m SM pthread
+CONFIGURE_ENV+=LIBS=-pthread QTDIR=${MODQT_QTDIR}
 .elif 

Re: new: devel/p5-XML-Dumper

2006-06-16 Thread steven mestdagh
Srebrenko Sehic [2006-06-16, 09:57:10]:
 cat pkg/DESCR
 
 XML::Dumper dumps Perl data to XML format. XML::Dumper can also read XML
 data that was previously dumped by the module and convert it back to
 Perl. You can use the module read the XML from a file and write the XML
 to a file.
 
 Additionally, because XML benefits so nicely from compression,
 XML::Dumper understands gzipped XML files.
 
 Tested on i386 and amd64.

how about putting this under textproc ?

Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm



Re: new: devel/p5-XML-Dumper

2006-06-16 Thread Srebrenko Sehic

 XML::Dumper dumps Perl data to XML format. XML::Dumper can also read XML
 data that was previously dumped by the module and convert it back to
 Perl. You can use the module read the XML from a file and write the XML
 to a file.



how about putting this under textproc ?


It depends on what you're using it for. I guess both devel and
textproc are valid. Your call. I agree on both.



Re: new: devel/p5-XML-Dumper

2006-06-16 Thread Jasper Lievisse Adriaanse
On Fri, Jun 16, 2006 at 04:39:11PM +0200, Srebrenko Sehic wrote:
  XML::Dumper dumps Perl data to XML format. XML::Dumper can also read XML
  data that was previously dumped by the module and convert it back to
  Perl. You can use the module read the XML from a file and write the XML
  to a file.
 
 how about putting this under textproc ?
 
 It depends on what you're using it for. I guess both devel and
 textproc are valid. Your call. I agree on both.
I think it belongs in textproc, because all the other p5-XML-* ports are
in textproc too.

One little thing:

--- Makefile.orig   Fri Jun 16 16:50:34 2006
+++ MakefileFri Jun 16 16:51:07 2006
@@ -16,8 +16,9 @@
 PERMIT_DISTFILES_FTP=  Yes
 
 MASTER_SITES=  ${MASTER_SITE_PERL_CPAN:=XML/}
-RUN_DEPENDS=   ::textproc/p5-XML-Parser \
-   ::archivers/p5-Compress-Zlib
+BUILD_DEPENDS= ${RUN_DEPENDS}
+RUN_DEPENDS=   ::archivers/p5-Compress-Zlib \
+   ::textproc/p5-XML-Parser
 
 CONFIGURE_STYLE=   perl
 
Furthermore it looks ok to me.

Cheers,
Jasper

-- 
Humppa is a serious thing!
NedBSD: http://nedbsd.nl/



Re: new: devel/p5-XML-Dumper

2006-06-16 Thread Srebrenko Sehic

Update port attached. Jasper's patch included. Thanks.


p5-XML-Dumper-0.81.tgz
Description: GNU Zip compressed data


UPDATE: moo-1.2

2006-06-16 Thread Ray Lai
This updates moo to support 64-bit integers.  Blood and sweat by
mbalmer@, credit taken by me.

Okay?

-Ray-

Index: Makefile
===
RCS file: /cvs/ports/math/moo/Makefile,v
retrieving revision 1.2
diff -u -p -r1.2 Makefile
--- Makefile6 Mar 2006 14:41:56 -   1.2
+++ Makefile16 Jun 2006 16:26:02 -
@@ -2,7 +2,7 @@
 
 COMMENT=   Marco's Object Oriented calculator
 
-DISTNAME=  moo-1.1
+DISTNAME=  moo-1.2
 CATEGORIES=math
 
 MAINTAINER=Raymond Lai [EMAIL PROTECTED]
Index: distinfo
===
RCS file: /cvs/ports/math/moo/distinfo,v
retrieving revision 1.2
diff -u -p -r1.2 distinfo
--- distinfo6 Mar 2006 14:41:56 -   1.2
+++ distinfo16 Jun 2006 16:26:02 -
@@ -1,4 +1,4 @@
-MD5 (moo-1.1.tgz) = 565a355a015a5954b6841aef77fcd603
-RMD160 (moo-1.1.tgz) = 8fef129b5234fbbdb5c057c692afbeed7ac3151a
-SHA1 (moo-1.1.tgz) = 0aba9925cb982fdd186efd5a69bd3f0d42e37bbe
-SIZE (moo-1.1.tgz) = 6963
+MD5 (moo-1.2.tgz) = e28b9a9db7a07dbfdb8180e03d3fc01e
+RMD160 (moo-1.2.tgz) = df690a4d910f2e23a216e86f97c56f9aafcf9f76
+SHA1 (moo-1.2.tgz) = d80f05a05956e7493a9ac2feb8aa1e4336a8b120
+SIZE (moo-1.2.tgz) = 6908



Re: gtk+2 fix untrusted X11 clients (was Re: FIX: graphics/cairo)

2006-06-16 Thread David Krause
works fine here on i386, tested gaim, gqview, gvim, and xnmap both
locally and remote through ssh -X

mozilla-firefox didn't work however, but there's probably more to it
than just fixing gtk+

ok david@

* steven mestdagh [EMAIL PROTECTED] [060610 08:38]:
 Brad [2006-06-10, 06:06:07]:
  I noticed this from the Gtk+ 2.9.2 release notes..
  
  * Make GTK+ work as an untrused X client
 
 applies reasonably well to the in tree version. i did some very minimal
 testing on i386, it seems to work. obviously, more testing with this is
 appreciated...
 
 Index: Makefile
 ===
 RCS file: /cvs/ports/x11/gtk+2/Makefile,v
 retrieving revision 1.38
 diff -u -r1.38 Makefile
 --- Makefile  2006/06/03 19:56:56 1.38
 +++ Makefile  2006/06/10 12:57:43
 @@ -7,7 +7,7 @@
  
  VERSION= 2.8.18
  DISTNAME=gtk+-${VERSION}
 -PKGNAME= gtk+2-${VERSION}p1
 +PKGNAME= gtk+2-${VERSION}p2
  PKGNAME-docs=gtk+2-docs-${VERSION}
  CATEGORIES=  x11 devel
  
 Index: patches/patch-gdk_x11_gdkdisplay-x11_c
 ===
 RCS file: patch-gdk_x11_gdkdisplay-x11_c
 diff -N patch-gdk_x11_gdkdisplay-x11_c
 --- /dev/null Sat Aug 30 18:16:59 1997
 +++ patches/patch-gdk_x11_gdkdisplay-x11_cSat Jun 10 12:57:43 2006
 @@ -0,0 +1,38 @@
 +$OpenBSD$
 +--- gdk/x11/gdkdisplay-x11.c.origThu Jun 30 05:35:30 2005
  gdk/x11/gdkdisplay-x11.c Sat Jun 10 14:32:57 2006
 +@@ -224,6 +224,24 @@ gdk_display_open (const gchar *display_n
 + #endif
 +   display_x11-have_xfixes = FALSE;
 + 
 ++  display_x11-trusted_client = TRUE;
 ++  {
 ++Window root, child;
 ++int rootx, rooty, winx, winy;
 ++unsigned int xmask;
 ++
 ++gdk_error_trap_push ();
 ++XQueryPointer (display_x11-xdisplay, 
 ++   GDK_SCREEN_X11 (display_x11-default_screen)-xroot_window,
 ++   root, child, rootx, rooty, winx, winy, xmask);
 ++gdk_flush ();
 ++if (G_UNLIKELY (gdk_error_trap_pop () == BadWindow)) 
 ++  {
 ++g_warning (Connection to display %s appears to be untrusted. Pointer 
 and keyboard grabs and inter-client communication may not work as expected., 
 gdk_display_get_name (display));
 ++display_x11-trusted_client = FALSE;
 ++  }
 ++  }
 ++
 +   if (_gdk_synchronize)
 + XSynchronize (display_x11-xdisplay, True);
 +   
 +@@ -1043,6 +1061,9 @@ gdk_notify_startup_complete (void)
 +   display_x11 = GDK_DISPLAY_X11 (display);
 + 
 +   if (display_x11-startup_notification_id == NULL)
 ++return;
 ++
 ++  if (!G_LIKELY (display_x11-trusted_client))
 + return;
 + 
 +   escaped_id = escape_for_xmessage (display_x11-startup_notification_id);
 Index: patches/patch-gdk_x11_gdkdisplay-x11_h
 ===
 RCS file: patch-gdk_x11_gdkdisplay-x11_h
 diff -N patch-gdk_x11_gdkdisplay-x11_h
 --- /dev/null Sat Aug 30 18:16:59 1997
 +++ patches/patch-gdk_x11_gdkdisplay-x11_hSat Jun 10 12:57:43 2006
 @@ -0,0 +1,15 @@
 +$OpenBSD$
 +--- gdk/x11/gdkdisplay-x11.h.origThu Jun 30 05:35:30 2005
  gdk/x11/gdkdisplay-x11.h Sat Jun 10 14:32:57 2006
 +@@ -81,6 +81,11 @@ struct _GdkDisplayX11
 +   gboolean have_xfixes;
 +   gint xfixes_event_base;
 + 
 ++  /* If the SECURITY extension is in place, whether this client holds 
 ++   * a trusted authorization and so is allowed to make various requests 
 ++   * (grabs, properties etc.) Otherwise always TRUE. */
 ++  gboolean trusted_client;
 ++
 +   /* Information about current pointer and keyboard grabs held by this
 +* client. If gdk_pointer_xgrab_window or gdk_keyboard_xgrab_window
 +* window is NULL, then the other associated fields are ignored
 Index: patches/patch-gdk_x11_gdkdnd-x11_c
 ===
 RCS file: patch-gdk_x11_gdkdnd-x11_c
 diff -N patch-gdk_x11_gdkdnd-x11_c
 --- /dev/null Sat Aug 30 18:16:59 1997
 +++ patches/patch-gdk_x11_gdkdnd-x11_cSat Jun 10 12:57:43 2006
 @@ -0,0 +1,39 @@
 +$OpenBSD$
 +--- gdk/x11/gdkdnd-x11.c.origThu May 18 20:15:40 2006
  gdk/x11/gdkdnd-x11.c Sat Jun 10 14:32:57 2006
 +@@ -489,6 +489,25 @@ gdk_window_cache_new (GdkScreen *screen)
 + 
 +   XGetWindowAttributes (xdisplay, GDK_WINDOW_XWINDOW (root_window), xwa);
 +   result-old_event_mask = xwa.your_event_mask;
 ++
 ++  if (G_UNLIKELY (!GDK_DISPLAY_X11 (GDK_SCREEN_X11 
 (screen)-display)-trusted_client)) 
 ++{
 ++  GList *toplevel_windows, *list;
 ++  GdkWindow *window;
 ++  gint x, y, width, height;
 ++  
 ++  toplevel_windows = gdk_screen_get_toplevel_windows (screen);
 ++  for (list = toplevel_windows; list; list = list-next) {
 ++window = GDK_WINDOW (list-data);
 ++gdk_window_get_geometry (window, x, y, width, height, NULL);
 ++gdk_window_cache_add (result, GDK_WINDOW_XID 

add www to index

2006-06-16 Thread Douglas Santos
Sometimes is interesting to see the homepage of a specific port
when doing a 'make search key/name'.
Diff attached.
Index: Makefile
===
RCS file: /cvs/ports/Makefile,v
retrieving revision 1.50
diff -u -r1.50 Makefile
--- Makefile	2 Sep 2005 00:43:50 -	1.50
+++ Makefile	16 Jun 2006 18:46:06 -
@@ -81,7 +81,7 @@
 	@echo Done.
 
 print-index:	${.CURDIR}/INDEX
-	@awk -F\| '{ printf(Port:\t%s\nPath:\t%s\nInfo:\t%s\nMaint:\t%s\nIndex:\t%s\nL-deps:\t%s\nB-deps:\t%s\nR-deps:\t%s\n\n, $$1, $$2, $$4, $$6, $$7, $$8, $$9, $$10); }'  ${.CURDIR}/INDEX
+	@awk -F\| '{ printf(Port:\t%s\nPath:\t%s\nInfo:\t%s\nMaint:\t%s\nWWW:\t%s\nIndex:\t%s\nL-deps:\t%s\nB-deps:\t%s\nR-deps:\t%s\n\n, $$1, $$2, $$4, $$6, $$7, $$8, $$9, $$10, $$11); }'  ${.CURDIR}/INDEX
 
 print-licenses: ${.CURDIR}/INDEX
 	@printf PortPC PF DC DF Maint\n
@@ -93,9 +93,9 @@
 	@echo e.g.: \make search key=somekeyword\ \make search name=somename\
 .else
 . if defined(key)
-	@egrep -i -- ${key} ${.CURDIR}/INDEX | awk -F\| '{ printf(Port:\t%s\nPath:\t%s\nInfo:\t%s\nMaint:\t%s\nIndex:\t%s\nL-deps:\t%s\nB-deps:\t%s\nR-deps:\t%s\nArchs:\t%s\n\n, $$1, $$2, $$4, $$6, $$7, $$8, $$9, $$10, $$11); }'
+	@egrep -i -- ${key} ${.CURDIR}/INDEX | awk -F\| '{ printf(Port:\t%s\nPath:\t%s\nInfo:\t%s\nMaint:\t%s\nWWW:\t%s\nIndex:\t%s\nL-deps:\t%s\nB-deps:\t%s\nR-deps:\t%s\nArchs:\t%s\n\n, $$1, $$2, $$4, $$6, $$7, $$8, $$9, $$10, $$11, $$12); }'
 . else
-	@awk -F\| '$$1 ~ /${name}/ { printf(Port:\t%s\nPath:\t%s\nInfo:\t%s\nMaint:\t%s\nIndex:\t%s\nL-deps:\t%s\nB-deps:\t%s\nR-deps:\t%s\nArchs:\t%s\n\n, $$1, $$2, $$4, $$6, $$7, $$8, $$9, $$10, $$11); }' ${.CURDIR}/INDEX
+	@awk -F\| '$$1 ~ /${name}/ { printf(Port:\t%s\nPath:\t%s\nInfo:\t%s\nMaint:\t%s\nWWW:\t%s\nIndex:\t%s\nL-deps:\t%s\nB-deps:\t%s\nR-deps:\t%s\nArchs:\t%s\n\n, $$1, $$2, $$4, $$6, $$7, $$8, $$9, $$10, $$11, $$12); }' ${.CURDIR}/INDEX
 . endif
 .endif
 
Index: infrastructure/mk/bsd.port.mk
===
RCS file: /cvs/ports/infrastructure/mk/bsd.port.mk,v
retrieving revision 1.747
diff -u -r1.747 bsd.port.mk
--- infrastructure/mk/bsd.port.mk	4 Jun 2006 14:56:10 -	1.747
+++ infrastructure/mk/bsd.port.mk	16 Jun 2006 18:46:42 -
@@ -2304,8 +2304,9 @@
 # a large index.  Format is:
 #
 # distribution-name|port-path|installation-prefix|comment| \
-#  description-file|maintainer|categories|lib-deps|build-deps|run-deps| \
-#  for-arch|package-cdrom|package-ftp|distfiles-cdrom|distfiles-ftp
+#  description-file|maintainer|www|categories|lib-deps|build-deps| \
+#  run-deps|for-arch|package-cdrom|package-ftp|distfiles-cdrom| \
+#  distfiles-ftp|
 #
 describe:
 .if defined(MULTI_PACKAGES)  !defined(PACKAGING)
@@ -2328,7 +2329,7 @@
 	else \
 		echo -n /dev/null|; \
 	fi; \
-	echo -n ${MAINTAINER}|${CATEGORIES}|
+	echo -n ${MAINTAINER}|${HOMEPAGE}|${CATEGORIES}|
 .  for _d in LIB BUILD RUN
 .if !empty(_${_d}_DEP2)
 	@cd ${.CURDIR}  _FINAL_ECHO=: _INITIAL_ECHO=: exec ${MAKE} ${_d:L}-depends-list


trivial update of sqlite 3.3.6

2006-06-16 Thread Marc Espie
Still passes all its regression tests, the Changelog is pretty uneventful.

Any objections ?

Index: Makefile
===
RCS file: /cvs/ports/databases/sqlite3/Makefile,v
retrieving revision 1.17
diff -u -p -r1.17 Makefile
--- Makefile13 Apr 2006 05:09:52 -  1.17
+++ Makefile16 Jun 2006 22:09:27 -
@@ -2,7 +2,7 @@
 
 COMMENT=   Embedded SQL implementation
 COMMENT-tcl=   TCL bindings for Sqlite3
-V= 3.3.5
+V= 3.3.6
 DISTNAME=  sqlite-${V}
 PKGNAME=   sqlite3-${V}
 PKGNAME-tcl=   sqlite3-tcl-${V}
Index: distinfo
===
RCS file: /cvs/ports/databases/sqlite3/distinfo,v
retrieving revision 1.10
diff -u -p -r1.10 distinfo
--- distinfo13 Apr 2006 05:09:52 -  1.10
+++ distinfo16 Jun 2006 22:09:27 -
@@ -1,4 +1,4 @@
-MD5 (sqlite-3.3.5.tar.gz) = dd2a7b6f2a07a4403a0b5e17e8ed5b88
-RMD160 (sqlite-3.3.5.tar.gz) = 7dd7c1d2a2f10132a4ef0f6972ddca4d5767b9d6
-SHA1 (sqlite-3.3.5.tar.gz) = 015fe7b3992c9db97bb40cfd9958b31d457f7c33
-SIZE (sqlite-3.3.5.tar.gz) = 1651536
+MD5 (sqlite-3.3.6.tar.gz) = a2cb1fafad5c2587e513dcbd18ace097
+RMD160 (sqlite-3.3.6.tar.gz) = 37d140d5670b39a7da79f9f3d2ac31c521d90676
+SHA1 (sqlite-3.3.6.tar.gz) = 0db38ab2df86946a5059f09b6a8758026d9eab59
+SIZE (sqlite-3.3.6.tar.gz) = 1671437
Index: patches/patch-Makefile_in
===
RCS file: /cvs/ports/databases/sqlite3/patches/patch-Makefile_in,v
retrieving revision 1.2
diff -u -p -r1.2 patch-Makefile_in
--- patches/patch-Makefile_in   22 Mar 2006 01:36:11 -  1.2
+++ patches/patch-Makefile_in   16 Jun 2006 22:09:27 -
@@ -1,7 +1,7 @@
 $OpenBSD: patch-Makefile_in,v 1.2 2006/03/22 01:36:11 jolan Exp $
 Makefile.in.orig   Wed Jan 25 09:52:16 2006
-+++ Makefile.inWed Feb  1 02:04:19 2006
-@@ -242,7 +242,8 @@ last_change:   $(SRC)
+--- Makefile.in.orig   Tue Jun  6 12:52:26 2006
 Makefile.inFri Jun 16 23:57:37 2006
+@@ -249,7 +249,8 @@ last_change:   $(SRC)
  
  libsqlite3.la:$(LIBOBJ)
$(LTLINK) -o libsqlite3.la $(LIBOBJ) $(LIBPTHREAD) \



Re: trivial update of sqlite 3.3.6

2006-06-16 Thread Marc Balmer
* Marc Espie wrote:
 Still passes all its regression tests, the Changelog is pretty uneventful.
 
 Any objections ?

yes, remove the ${V} variable.



Re: trivial update of sqlite 3.3.6

2006-06-16 Thread Marc Espie
On Sat, Jun 17, 2006 at 12:19:44AM +0200, Marc Balmer wrote:
 * Marc Espie wrote:
  Still passes all its regression tests, the Changelog is pretty uneventful.
  
  Any objections ?
 
 yes, remove the ${V} variable.

Joker.


Any *real* serious objection ?



security of devel/cscope

2006-06-16 Thread Tobias Ulmer
Hi,

i've looked into the sourcecode of cscope over the last few weeks
because i got alarmed by a advisory from Debian. I knew that the port
was old, so i thought, lets create some patches for the outstanding
issues:

- CVE-2004-0996
  Insecure creation of temporary files, fixed in cvs. The authors didn't
  bother to release a fixed version.

- CVE-2004-2541 
  about 50 sprintfs. The bugreport is not resolved yet
  and the devs care more about a obscure system like dos, because it
  has no snprintf. Debian has a fix included for this recently.
  shellcode can be injected in all sorts of stuff, it's really fun:
  functionnames, #defines, #includes, struct names, ...

- My own findings includes even more stuff like insecure usage of fscanf
  This allows e.g. for puting shellcode into cscope.out...
  
While i like this tool well, the attitude of the main developer
regarding security issues is very disturbing. (The bugtracker of the
project and securityfocus are a good read on that)

My question is, should we bother and fix these issues? I have some but
by far not all patches ready. The sad part of it is that most won't
make it back into cscope...

IMHO, cscope could as well be 'cvs rm -f'ed

Tobias



Error when updating gtk+2 [ 2.6.10p2 - 2.8.18p1]

2006-06-16 Thread Iain Kyte
I am having trouble upgrading gkt+2 from 2.6.10p2 to 2.8.18p1.

Every time I try and upgrade I get the following error
: undefined reference to 'gtk_icon_view_set_reorderable' 

In the past I have searched on the Net for a solution but no one seems to have
had this issue and posted the problem and solution.  

Bellow is more detail about the error:
/usr/bin/ld: warning: libpangoft2-1.0.so.1001.1, needed by
/usr/local/lib/libpan
goxft-1.0.so.1001.1, may conflict with libpangoft2-1.0.so.1200.3
iconview_edit.o(.text+0x251): In function `do_iconview_edit':
: undefined reference to `gtk_icon_view_set_reorderable'
collect2: ld returned 1 exit status
gmake[5]: *** [gtk-demo] Error 1
gmake[5]: Leaving directory
`/usr/ports/x11/gtk+2/w-gtk+2-2.8.18p1/gtk+-2.8.18/d
emos/gtk-demo'
gmake[4]: *** [all] Error 2
gmake[4]: Leaving directory
`/usr/ports/x11/gtk+2/w-gtk+2-2.8.18p1/gtk+-2.8.18/d
emos/gtk-demo'
gmake[3]: *** [all-recursive] Error 1

I have compressed a logg of the error though it is a rebuild logg.  

Iain 



__
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com 



__
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com 

logg.0.gz
Description: 2303844745-logg.0.gz