diff options
| author | drochner <drochner> | 2011-01-19 19:31:05 +0000 |
|---|---|---|
| committer | drochner <drochner> | 2011-01-19 19:31:05 +0000 |
| commit | fe4ce402534ea5015bc109184930baa1348dbd7e (patch) | |
| tree | 0f70ddc506c1f1b17f16927d11444e0154cb2bea /graphics | |
| parent | e2081e7d411a99b47e3e7bc4b18be8a9efa6ea6a (diff) | |
| download | pkgsrc-fe4ce402534ea5015bc109184930baa1348dbd7e.tar.gz | |
being here, add a patch from
https://bugzilla.redhat.com/show_bug.cgi?id=659676
to fix a possible puffer overflow (CVE-2010-4262)
bump PKGREVISION
Diffstat (limited to 'graphics')
| -rw-r--r-- | graphics/xfig/Makefile | 4 | ||||
| -rw-r--r-- | graphics/xfig/distinfo | 3 | ||||
| -rw-r--r-- | graphics/xfig/patches/patch-aq | 24 |
3 files changed, 28 insertions, 3 deletions
diff --git a/graphics/xfig/Makefile b/graphics/xfig/Makefile index 97113eb677c..8bda7b2cb8c 100644 --- a/graphics/xfig/Makefile +++ b/graphics/xfig/Makefile @@ -1,8 +1,8 @@ -# $NetBSD: Makefile,v 1.64 2011/01/13 13:38:23 wiz Exp $ +# $NetBSD: Makefile,v 1.65 2011/01/19 19:31:05 drochner Exp $ DISTNAME= xfig.3.2.5b.full PKGNAME= xfig-3.2.5b -PKGREVISION= 8 +PKGREVISION= 9 CATEGORIES= graphics MASTER_SITES= ${MASTER_SITE_SOURCEFORGE:=mcj/} diff --git a/graphics/xfig/distinfo b/graphics/xfig/distinfo index ea89657d54e..f50fcd04421 100644 --- a/graphics/xfig/distinfo +++ b/graphics/xfig/distinfo @@ -1,4 +1,4 @@ -$NetBSD: distinfo,v 1.23 2011/01/19 19:03:11 drochner Exp $ +$NetBSD: distinfo,v 1.24 2011/01/19 19:31:05 drochner Exp $ SHA1 (xfig.3.2.5b.full.tar.gz) = 0730d7e6bc217c0de02682efb0078821512bb542 RMD160 (xfig.3.2.5b.full.tar.gz) = aad4cfd808c116d34218e9890a898652e4f52ab6 @@ -16,3 +16,4 @@ SHA1 (patch-am) = 72adbda34425fda49f2072a3d40a3d942e07e1ba SHA1 (patch-an) = 4bfce8dbd420bc4b4d8efa5b01a39e3a9ce03ca6 SHA1 (patch-ao) = 4b3878cd2a5ef57dd34d51604e204bd106261ad2 SHA1 (patch-ap) = 84a453de2badd82eb31d950981f086e48310d66f +SHA1 (patch-aq) = 83c15caff521ab857b0a2744590cbd17f678c107 diff --git a/graphics/xfig/patches/patch-aq b/graphics/xfig/patches/patch-aq new file mode 100644 index 00000000000..945b19c1c8e --- /dev/null +++ b/graphics/xfig/patches/patch-aq @@ -0,0 +1,24 @@ +$NetBSD: patch-aq,v 1.1 2011/01/19 19:31:05 drochner Exp $ + +--- w_msgpanel.c.orig 2009-03-30 15:52:41.000000000 +0000 ++++ w_msgpanel.c +@@ -60,7 +60,7 @@ DeclareStaticArgs(12); + /* for the popup message (file_msg) window */ + + static int file_msg_length=0; +-static char tmpstr[300]; ++static char tmpstr[512]; + static Widget file_msg_panel, + file_msg_win, file_msg_dismiss; + +@@ -582,8 +582,8 @@ file_msg(char *format,...) + } + + va_start(ap, format); +- /* format the string */ +- vsprintf(tmpstr, format, ap); ++ /* format the string (but leave room for \n and \0) */ ++ vsnprintf(tmpstr, sizeof(tmpstr)-2, format, ap); + va_end(ap); + + strcat(tmpstr,"\n"); |