summaryrefslogtreecommitdiff
path: root/graphics/tiff/patches
AgeCommit message (Collapse)AuthorFilesLines
2010-08-04Add patches from either libtiff's or Red Hat's Bugzilla which fix thetron5-0/+188
following vulnerabilities: - CVE-2010-2233 - CVE-2010-2482 - CVE-2010-2483 - CVE-2010-2595 - CVE-2010-2597 There is no patch for CVE-2010-2596 yet. But it is low risk (an assertion gets triggered) and cannot be exploited after the above vulnerabilities are fixed (at least if I understood correctly). No butcher was involved in fixing this package.
2009-08-24Update to 3.9.0:wiz15-1103/+0
MAJOR CHANGES: * New tiffcrop utility contributed by Richard Nolde. tiffcrop does the same as tiffcp, but also can crop, extract, rotate and mirror images. * tif_jbig.c: Added support for JBIG compression scheme (34661 code), contributed by Lee Howard. * Totally new implementation of OJPEG module from Joris Van Damme. No need to patch libjpeg anymore. Many OJPEG files should be supported now that was not supported previously. ------------------------------------------------ CHANGES IN THE SOFTWARE CONFIGURATION: * tif_config.wince.h, tiffconf.wince.h, tif_wince.c: WinCE-specific compatibility stuff from Mateusz Loskot. * Rename config.h.vc and tif_config.h.vc to config.vc.h and tif_config.vc.h for easier identification by folks using an IDE. * configure, configure.ac: OJPEG support enabled by default (i.e., whe the conformant JPEG support enabled). * README.vms, Makefile.am, configure.com, libtiff/{Makefile.am, tif_config.h-vms, tif_stream.cxx, tif_vms.c, tiffconf.h-vms}: Added support for OpenVMS by Alexey Chupahin. * nmake.opt: use /EHsc for VS2005 compatibility. Also define _CRT_SECURE_NO_DEPRECATE to avoid noise on VS2005. ------------------------------------------------ CHANGES IN LIBTIFF: * tif_dirinfo.c (_TIFFFindFieldInfo): Don't attempt to bsearch() on a NULL fieldinfo list. (_TIFFFindFieldInfoByName): Don't attempt to lfind() on a NULL fieldinfo list. * tif_jpeg.c: Changed JPEGInitializeLibJPEG() so that it will convert from decompressor to compressor or compress to decompress if required by the force arguments. This works around a problem in where the JPEGFixupTestSubsampling() may cause a decompressor to be setup on a directory when later a compressor is required with the force flag set. Occurs with the addtiffo program for instance. * tif_dirwrite.c: Fixed swapping of byte arrays stored in-place in tag offsets as per bug http://bugzilla.remotesensing.org/show_bug.cgi?id=1363 * tif_getimage.c: workaround for 'Fractional scanline' error reading OJPEG images with rowsperstrip that is not a multiple of vertical subsampling factor. This bug is mentioned in http://bugzilla.remotesensing.org/show_bug.cgi?id=1390 and http://www.asmail.be/msg0054766825.html * tif_dirread.c: Added special function to handle SubjectDistance EXIF tag as per bug http://bugzilla.remotesensing.org/show_bug.cgi?id=1362 * tif_dirread.c, tif_read.c: Type of the byte counters changed from tsize_t to uint32 to be able to work with data arrays larger than 2GB. Fixes bug http://bugzilla.remotesensing.org/show_bug.cgi?id=89 Idea submitted by Matt Hancher. * tif_dir.c: Workaround for incorrect TIFFs with ExtraSamples == 999 produced by Corel Draw. As per bug http://bugzilla.remotesensing.org/show_bug.cgi?id=1490 * tif_write.c: TIFFAppendToStrip() - clear sorted flag if we move a strip. http://bugzilla.remotesensing.org/show_bug.cgi?id=1359 * tif_fax3.c: Save the state of printdir codec dependent method. * tif_jpeg.c: Save the state of printdir codec dependent method as per bug http://bugzilla.remotesensing.org/show_bug.cgi?id=1273 * tif_win32.c: Fixed problem with offset value manipulation as per bug http://bugzilla.remotesensing.org/show_bug.cgi?id=1322 * tif_fax3.c, tif_next.c, tif_pixarlog.c: Fixed multiple vulnerabilities, as per Gentoo bug (): http://bugs.gentoo.org/show_bug.cgi?id=142383 * tif_lzw.c, tif_zip.c: Fixed problems with mixing encoding and decoding on the same read-write TIFF handle. The LZW code can now maintain encode and decode state at the same time. The ZIP code will switch back and forth as needed. http://bugzilla.remotesensing.org/show_bug.cgi?id=757 * tif_msdos.c: Avoid handle leak for failed opens. c/o Thierry Pierron * tif_dirwrite.c: take care not to flush out buffer of strip/tile data in _TIFFWriteDirectory if TIFF_BEENWRITING not set. Relates to bug report by Peng Gao with black strip at bottom of images. * tif_dirwrite.c: make sure to use uint32 for wordcount in TIFFWriteNormanTag if writecount is VARIABLE2 for ASCII fields. It already seems to have been done for other field types. Needed for "tiffset" on files with geotiff ascii text. * tif_dirinfo.c: Added missed EXIF tag ColorSpace (40961). * tif_dirread.c: Move IFD fetching code in the separate function TIFFFetchDirectory() avoiding code duplication in TIFFReadDirectory() and TIFFReadCustomDirectory(). * tif_readdir.c: Added case in EstimateStripByteCounts() for tiled files. Modified TIFFReadDirectory() to not invoke EstimateStripByteCounts() for case where entry 0 and 1 are unequal but one of them is zero. http://bugzilla.remotesensing.org/show_bug.cgi?id=1204 * tif_open.c, tif_dirread.c, tiffiop.h: Move IFD looping checking code in the separate function TIFFCheckDirOffset(). * tif_aux.c: Added _TIFFCheckRealloc() function. * tif_fax3.c: Fixed problems in fax decoder as per bug http://bugzilla.remotesensing.org/show_bug.cgi?id=1194 * tif_jbig.c: Added support for JBIG compression scheme (34661 code) contributed by Lee Howard. As per bug http://bugzilla.remotesensing.org/show_bug.cgi?id=896 * tif_getimage.c: Added support for planarconfig separate non-subsampled YCbCr (i.e. separate YCbCr with subsampling [1,1]). * tif_getimage.c: Revision of all RGB(A) put routines: * Conversion of unassociated alpha to associated alpha now done with more performant LUT, and calculation more correct. * Conversion of 16bit data to 8bit data now done with more performant LUT, and calculation more correct * Bugfix of handling of 16bit RGB with unassociated alpha * tif_ojpeg.c: totally new implementation * tif_getimage.c: removed TIFFTAG_JPEGCOLORMODE handling of OJPEG images in favor of tif_getimage.c native handling of YCbCr and desubsampling. * tif_jpeg.c: JPEGVSetField() so that altering the photometric interpretation causes the "upsampled" flag to be recomputed. Fixes peculiar bug where photometric flag had to be set before jpegcolormode flag. ------------------------------------------------ CHANGES IN THE TOOLS: * tiff2ps.c: Added support 16-bit images as per bug http://bugzilla.remotesensing.org/show_bug.cgi?id=1566. Patch from William Bader. * tiff2pdf.c: Fix for TIFFTAG_JPEGTABLES tag fetching and significant upgrade of the whole utility as per bug http://bugzilla.remotesensing.org/show_bug.cgi?id=1560. Now we don't need tiffiop.h in tiff2pdf anymore and will open output PDF file using TIFFClientOpen() machinery as it is implemented by Leon Bottou. * tiffcrop.c: New tiffcrop utility contributed by Richard Nolde. As per bug http://bugzilla.remotesensing.org/show_bug.cgi?id=1383 * tiff2pdf.c: Do not assume inches when the resolution units do not specified. As per bug http://bugzilla.remotesensing.org/show_bug.cgi?id=1366 * tiffset.c: Properly handle tags with TIFF_VARIABLE writecount. As per bug http://bugzilla.remotesensing.org/show_bug.cgi?id=1350 * tif2rgba.c: This utility does not work properly on big-endian architectures. It was fixed including the bug http://bugzilla.remotesensing.org/show_bug.cgi?id=1149 * tiff2pdf.c: Fix handling of -q values. http://bugzilla.remotesensing.org/show_bug.cgi?id=587 * tiffcmp.c: Fixed floating point comparison logic as per bug http://bugzilla.remotesensing.org/show_bug.cgi?id=1191 * tiff2pdf.c: Fixed buffer overflow condition in t2p_write_pdf_string() as per bug http://bugzilla.remotesensing.org/show_bug.cgi?id=1196 ------------------------------------------------ CHANGES IN THE CONTRIB AREA: * contrib/addtiffo/tif_overview.c: Fix problems with odd sized output blocks in TIFF_DownSample_Subsampled() (bug 1542). * contrib/dbs/xtiff/xtiff.c: Make xtiff utility compilable. Though it is still far from the state of being working and useful.
2009-07-19Apply fix for integer overflows in various inter-color space conversiontron2-0/+173
tools taken from MapTools Bugzilla. This fixes CVE-2009-2347.
2009-06-22add a patch from upstreamdrochner1-6/+23
(http://bugzilla.maptools.org/show_bug.cgi?id=2065) to fix a buffer underflow which can cause DOS or system access (SA35515) bump PKGREVISION
2008-08-30Apply Debian's fix for the security vulnerability reported intron1-0/+60
CVE-2008-2327. Bump package revision.
2006-08-03Modify patch to tif_dir.c to be compiled by gcc prior to 3.x.taca1-11/+18
Requested by solo@.
2006-08-02Security fixes for SA21304:salo8-0/+666
"Some vulnerabilities have been reported in libTIFF, which can be exploited by malicious people to cause a DoS (Denial of Service) or potentially compromise a vulnerable system. The vulnerabilities are caused due to various heap and integer overflows when processing TIFF images and can be exploited via a specially crafted TIFF image. Successful exploitation allows crashing applications linked against libTIFF and may also allow execution of arbitrary code." http://secunia.com/advisories/21304/ http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3459 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3460 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3461 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3462 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3463 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3464 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3465 Patches from Tavis Ormandy, Google Security Team via SUSE. Bump PKGREVISION.
2006-06-08Security fix for CVE-2006-2193:salo1-0/+15
"A vulnerability in LibTIFF can be exploited by malicious people to cause a DoS (Denial of Service) and potentially compromise a user's system. The vulnerability is caused due to a boundary error within tiff2pdf when handling a TIFF file with a "DocumentName" tag that contains UTF-8 characters. This can be exploited to cause a stack-based buffer overflow and may allow arbitrary code execution." http://secunia.com/advisories/20488/ http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2193 Patch from Ubuntu.
2006-03-14update to 3.8.1drochner1-12/+3
changes: -many bugfixes -support PBM files in ppm2tiff -Added ability to create multipage TIFFs in bmp2tiff
2006-02-22The "--with-default-strip-size" did just help because it workeddrochner1-3/+12
around a problem caused by a bash'ism in the configure script. Fix the script instead. No functional change.
2006-02-20Include stddef.h instead of defining NULL manually. This fixesjoerg1-0/+26
the inclusion of tiffio.h from C++ as seen in digikam. Bump revision.
2005-10-15Update to 3.7.4:wiz7-195/+3
MAJOR CHANGES: * Fixed important bug in custom tags handling code.. ------------------------------------------------ CHANGES IN THE SOFTWARE CONFIGURATION: * Applied patch from Patrick Welche (all scripts moved in the 'config' and 'm4' directories). * SConstruct, libtiff/SConstruct: Added the first very preliminary support for SCons software building tool (http://www.scons.org/). This is experimental infrastructure and it will exist along with the autotools stuff. * port/lfind.c: Added lfind() replacement module. ------------------------------------------------ CHANGES IN LIBTIFF: * tif_dir.c: When prefreeing tv->value in TIFFSetFieldV also set it to NULL to avoid double free when re-setting custom string fields as per: http://bugzilla.remotesensing.org/show_bug.cgi?id=922 * tif_dir.c: Fixed up support for swapping "double complex" values (128 bits as 2 64 bits doubles). GDAL gcore tests now pass on bigendian (macosx) system. * libtiff/{tif_dirread.c, tif_dirinfo.c}: Do not upcast BYTEs to SHORTs in the TIFFFetchByteArray(). Remove TIFFFetchExtraSamples() function, use TIFFFetchNormalTag() instead as per bug http://bugzilla.remotesensing.org/show_bug.cgi?id=831 Remove TIFFFetchExtraSamples() function, use TIFFFetchNormalTag() instead. * tif_print.c: Fixed printing of the BYTE and SBYTE arrays. * tif_write.c: Do not check the PlanarConfiguration field in the TIFFWriteCheck() function in case of single band images (as per TIFF spec). * libtiff/{tif_dir.c, tif_dir.h, tif_dirinfo.c, tif_print.c}: Make FieldOfViewCotangent, MatrixWorldToScreen, MatrixWorldToCamera, ImageFullWidth, ImageFullLength and PrimaryChromaticities tags custom. ------------------------------------------------ CHANGES IN THE TOOLS: * tiffcp.c: Fixed WhitePoint tag copying. ------------------------------------------------ CHANGES IN THE CONTRIB AREA: * tiffdump.c: Added support for TIFF_IFD datatype. * addtiffo/{tif_overview.c, tif_ovrcache.c, tif_ovrcache.h}: Make overviews working for contiguous images.
2005-07-14Add lfind replacement function. From libtiff CVS.wiz6-0/+301
2005-07-14Update to 3.7.3:wiz4-129/+7
Many bugfixes and several new features. The runtime endianness check has been replaced with the compile time one. Support has been added for the new predictor type (floating point predictor) defined at the TIFF Technical Note 3, for custom tags passed by value, and for all DNG tags.
2005-05-12Security fix:salo1-0/+64
"A vulnerability in libTIFF was found, it can be potentially exploited by malicious people to compromise a vulnerable system." http://secunia.com/advisories/15320/ http://bugzilla.remotesensing.org/show_bug.cgi?id=843 Bump PKGREVISION, patch from libtiff cvs repository.
2005-05-07Fix for NetBSD LP64 arches by checking if _LP64 is defined. These archestoshii1-0/+13
don't define __LP64__. This is basically same as patch-ab rev. 1.13, which was probably removed by mistake.
2005-03-24Pull in libtiff/Makefile.in rev. 1.54 and 1.55 without the rpath changesrecht1-0/+58
from libtiff CVS to fix the build on Darwin.
2005-03-23Update to 3.7.2.wiz8-97/+3
Package changes: Put options in options.mk, and retire support for USE_GIF; turn on the lzw option by default (since USE_GIF was on by default). C++ library's name changed, to be in sync with tiff distribution's name for it (libtiffcxx -> libtiffxx). Changes in 3.7.2: Maintainance [sic] release. Many bugfixes in the build environment and compatibility improvements.
2005-01-17Add patch-ah that is adapted from http://bugzilla.remotesensing.org/jlam1-0/+13
that fixes a bug where docked TIFF icons in WindowMaker have a black background rather than a transparent background. Ride the previous PKGREVISION bump to 3. This fixes PR pkg/28989.
2005-01-17Link the tiff library, which has no C++ functions, with $(CC) insteadjlam1-6/+8
of $(CXX) so that applications needing libtiff don't also need to be linked against $(CXX). Bump the PKGREVISION to 3. This should fix PR pkg/28961.
2005-01-13Fix error in patch to build libtiffcxx.la that tried to create librariesjlam1-2/+2
with no objects. libtiffcxx.la now correctly builds using tif_stream.lo. Bump the PKGREVISION to 2.
2005-01-11Create a separate libtiffcxx.so library for use by C++ applications.jlam2-0/+27
It's meant to be used directly in place of libtiff.so, i.e. instead of linking against -ltiff, you link against -ltiffcxx. It also leaves libtiff.so as a plain C-linkage library again, as it was in tiff-3.6.x, and avoids needing to patch tiff-using packages to link using the C++ compiler. Bump the PKGREVISION to 1.
2004-12-28Upgrade tiff to 3.7.1.reed24-1477/+64
Remove OpenWindows workaround in pkgsrc for this. Too many changes to include here. See http://www.remotesensing.org/libtiff/v3.7.1.html and http://www.remotesensing.org/libtiff/v3.7.0.html and previous change files for changes information. tiff-3.7.1 now includes the lzw compression code again. It also uses autoconf and libtool now. A new tool is bmp2tiff. Docs are placed under share/doc/tiff/html instead of share/doc/html/tiff. Many manpage symlinks are now missing. (This was reported to tiff list.)
2004-12-22patch-ag and patch-ao already had security fixes for CESA-2004-006.reed2-4/+4
But now these are improved in response to iDEFENSE Security Advisory 12.21.04 www.idefense.com/application/poi/display?id=173&type=vulnerabilities libtiff STRIPOFFSETS Integer Overflow Vulnerability December 21, 2004 This fix (in two files) was from that advisory and also seen in tiff 3.7.1. PKGREVISION is bumped to 6 and BUILDLINK_RECOMMENDED is adjusted for this possible security issue. Other packages depending on this are not bumped.
2004-10-18Add various bug fixes taken from Debian's unstable distribution whichtron17-14/+1218
include fixes for CESA-2004-006. Bump package revision.
2004-09-05When ``relativize''-ing CFLAGS, don't substitute anything that beginsjschauma1-2/+3
with a '-' as '../-', as this is basically guaranteed to be wrong. Examples: -n32 or -64 for IRIX ABI would be substituted as '../-64', which of course breaks the package. Other possible CFLAGS would have the same result.
2004-04-27Use INSTALL_LIB instead of INSTALL_SCRIPT.tv1-2/+2
2004-04-27nb2: Obey PKGDIRMODE, and install shlibs as executable.tv4-20/+62
2004-04-12don't ``relativize'' -rpath - fixes build on Irix.jschauma1-7/+8
2004-03-22Add back previous patch to libtiff/tif_fax3.c lost in last commit.abs1-2/+11
Flagged by wizd :) - many thanks. Note to self: Running patch on a file twice does tend to make the .orig file less than useful for comparing to the original state...
2004-03-22Update tiff to tiff-3.6.1nb1:abs1-11/+21
Add a patch to fix fax3 tiff handling. Without this hylafax generates completely garbled tiff images unless error correction was disabled: http://bugs.hylafax.org/bugzilla/show_bug.cgi?id=500
2004-01-03Update to tiff-3.6.1. This is many changes and fixes.reed5-65/+54
The main changes include: new utility tiff2pdf for converting a TIFF image to a PDF document new utility raw2tiff for converting raw rasters into TIFF files new tiff2ps options new fax2tiff options bug fixes for LZW, JPEG and OJPEG compression. more documentation and upgrade to libtiff.so.3.6 other changes at http://www.libtiff.org/v3.6.0.html Removed patch-ab because html/Makefile.in: added missing images per bug 92 Removed patch-ag because http://bugzilla.remotesensing.org/show_bug.cgi?id=315 Other changes: HOMEPAGE changed due to libtiff.org has been hijacked INSTALL.OpenWindows updated (thank you to dieter) tiff is backward compatible with older version, but buildlink2.mk version is increased because libtiff was broken for amd64 support.
2003-05-23Remove -O from default CFLAGS. Requested by Adam Ciarcinski.wiz1-5/+14
2002-12-25Fix core dump when fax2tiff is started without arguments.wiz1-0/+27
Patch from Ingolf Steinbach in PR 19306. Bump PKGREVISION to 1.
2002-03-05Updated tiff to 3.5.7martti6-46/+50
* many bug fixes * added support for 16bit minisblack/miniswhite images in RGBA interface * integrated experimental OJPEG support * updated tiffcp utility * substantial changes to tiff2ps
2001-08-23Lets compile libtiff on sparc64, gcc 2.95.3.abs6-163/+177
2001-05-28Find location of zlib using EVAL_PREFIX. Use buildlink.mk files to findjlam1-9/+20
the required headers and libraries for jpeg and zlib.
2001-05-03Pass CC down to configure script and make sure its used properly.skrll1-2/+11
This fixes pkg/12797
2001-02-27Don't expand compiler to include full path as this confuses the newskrll1-3/+12
libtool.
2001-02-27Update patches so that patchdiff works.skrll4-12/+12
2000-06-03Fix dependency on libjpeg and libm.wiz1-2/+2
Use USE_LIBTOOL instead of USE_PKGLIBTOOL.
2000-04-01Update tiff-library to 3.5.5. Changes from 3.5.4 are some bugfixeswiz2-15/+14
and beginning support for 2-4GB files. Complete list of changes at http://www.libtiff.org/v3.5.5.html
2000-03-18Don't create /tiff.sw.tools on installation.jlam1-5/+7
2000-01-06tiff library upgraded from 3.5.2 to 3.5.4. LZW compression part is nowwiz6-16/+51
optional and controlled by USE_GIF in mk.conf, decompression is unchanged. Comment for USE_GIF in mk.conf has been updated. Some HTML documentation gets installed now, too. Changes: A Y2K bugfix in ras2tiff, removal of LZW compression, new Pixar tags, and Adobe ZIP support, as well as removal of some compiler warnings and minor fixes.
1999-10-08Update tiff to version 3.5.2.jlam4-417/+47
Changes in TIFF v3.5.1 * Support was added for IPTC Newsphoto metadata (TIFFTAGE_IPTCNEWSPHOTO) * Support was added for photoshop caption handling (TIFFTAG_PHOTOSHOP) Changes in TIFF v3.5.2 * Added TIFFReassignTagToIgnore() API on behalf of Bruce Cameron <cameron@petris.com>. Man page still pending. * Fixed problem with cvtcmap() in tif_getimage.c modifying the colormaps owned by the TIFF handle itself when trying to fixup wrong (eight bit) colormaps. Corrected by maintaining a private copy of the colormap. * Added TIFFReadRGBATile()/TIFFReadRGBAStrip() support in tif_getimage.c. * Applied "a" mode fix to tif_win32.c/TIFFOpen() as suggested by Christopher Lawton <clawton@mathworks.com> * Set O_BINARY for tif_unix.c open() ... used on cygwin for instance. * Applied Francois Dagand's patch to handle fax decompression bug. (sizes >= 65536 were failing)
1999-05-20Link programs with "${LDFLAGS}" so that we get "-Wl,-R${PREFIX}/lib".tron1-18/+18
1999-03-31Make sure the linkname does not exist before trying to create it, whenagc1-3/+5
installing manual pages.
1998-10-02Get libtool from the right place.tv2-22/+22
1998-08-07Add NetBSD RCS Ids.agc3-0/+6
1998-07-20Use libtool to create the shared library. Strip binaries usingtv2-29/+183
BSD_INSTALL_PROGRAM.