[arch-commits] Commit in lasem/repos/extra-x86_64 (3 files)

[Jan de Groot]

    Date: Wednesday, February 14, 2018 @ 22:51:13
  Author: jgc
Revision: 317048

archrelease: copy trunk to extra-x86_64

Added:
  lasem/repos/extra-x86_64/CVE-2013-7447.patch
    (from rev 317047, lasem/trunk/CVE-2013-7447.patch)
  lasem/repos/extra-x86_64/PKGBUILD
    (from rev 317047, lasem/trunk/PKGBUILD)
Deleted:
  lasem/repos/extra-x86_64/PKGBUILD

---------------------+
 CVE-2013-7447.patch |   28 ++++++++++++++++++++++
 PKGBUILD            |   63 +++++++++++++++++++++++++++-----------------------
 2 files changed, 63 insertions(+), 28 deletions(-)

Copied: lasem/repos/extra-x86_64/CVE-2013-7447.patch (from rev 317047, lasem/trunk/CVE-2013-7447.patch)
===================================================================
--- CVE-2013-7447.patch	                        (rev 0)
+++ CVE-2013-7447.patch	2018-02-14 22:51:13 UTC (rev 317048)
@@ -0,0 +1,28 @@
+From 6f2feed780d9139a45c06e1ad399d06a4f351fbf Mon Sep 17 00:00:00 2001
+From: RyuzakiKK <aasonykk at gmail.com>
+Date: Sat, 5 Aug 2017 21:40:55 +0200
+Subject: cairo: Avoid integer overflow CVE-2013-7447
+
+lasem is affected by a possible integer overflow, that was also
+found and patched upstream in gtk+
+https://git.gnome.org/browse/gtk+/commit/?id=894b1ae76a32720f4bb3d39cf460402e3ce331d6
+---
+ src/lsmcairo.c | 2 +-
+ 1 file changed, 1 insertion(+), 1 deletion(-)
+
+diff --git a/src/lsmcairo.c b/src/lsmcairo.c
+index c568fd5..73fb93e 100644
+--- a/src/lsmcairo.c
++++ b/src/lsmcairo.c
+@@ -528,7 +528,7 @@ lsm_cairo_set_source_pixbuf (cairo_t *cairo,
+ 		format = CAIRO_FORMAT_ARGB32;
+ 
+ 	cairo_stride = cairo_format_stride_for_width (format, width);
+-	cairo_pixels = g_malloc (height * cairo_stride);
++	cairo_pixels = g_malloc_n (height, cairo_stride);
+ 	surface = cairo_image_surface_create_for_data ((unsigned char *)cairo_pixels,
+ 						       format,
+ 						       width, height, cairo_stride);
+-- 
+cgit v0.12
+

Deleted: PKGBUILD
===================================================================
--- PKGBUILD	2018-02-14 22:50:46 UTC (rev 317047)
+++ PKGBUILD	2018-02-14 22:51:13 UTC (rev 317048)
@@ -1,28 +0,0 @@
-# $Id$
-# Maintainer: Jan de Groot <jgc at archlinux.org>
-# Contributor: Adria Arrufat <adria.arrufat at protonmail.ch>
-pkgname=lasem
-pkgver=0.4.3
-pkgrel=2
-pkgdesc="SVG and Mathml rendering library"
-arch=('i686' 'x86_64')
-url="https://wiki.gnome.org/Projects/Lasem"
-license=('LGPL')
-depends=('gtk3')
-makedepends=('intltool')
-options=('!libtool')
-source=(http://ftp.gnome.org/pub/GNOME/sources/$pkgname/${pkgver:0:3}/$pkgname-$pkgver.tar.xz)
-sha256sums=('e7d950f9579defc7bb9d4159a0bfff165a3a621945ac9f202c930f2fea2dd58f')
-
-build() {
-  cd "$pkgname-$pkgver"
-  ./configure --prefix=/usr --sysconfdir=/etc --localstatedir=/var \
-      --disable-static
-  make
-}
-
-package() {
-  cd "$pkgname-$pkgver"
-  make DESTDIR="$pkgdir" install
-  mv "$pkgdir/usr/doc" "$pkgdir/usr/share/doc"
-}

Copied: lasem/repos/extra-x86_64/PKGBUILD (from rev 317047, lasem/trunk/PKGBUILD)
===================================================================
--- PKGBUILD	                        (rev 0)
+++ PKGBUILD	2018-02-14 22:51:13 UTC (rev 317048)
@@ -0,0 +1,35 @@
+# $Id$
+# Maintainer: Jan de Groot <jgc at archlinux.org>
+# Contributor: Adria Arrufat <adria.arrufat at protonmail.ch>
+pkgname=lasem
+pkgver=0.4.3
+pkgrel=3
+pkgdesc="SVG and Mathml rendering library"
+arch=('x86_64')
+url="https://wiki.gnome.org/Projects/Lasem"
+license=('LGPL')
+depends=('gtk3')
+makedepends=('intltool' 'python')
+options=('!libtool')
+source=(https://download.gnome.org/sources/$pkgname/${pkgver:0:3}/$pkgname-$pkgver.tar.xz
+        CVE-2013-7447.patch)
+sha256sums=('e7d950f9579defc7bb9d4159a0bfff165a3a621945ac9f202c930f2fea2dd58f'
+            'd9e836934655db45e52f6ab1923866a5010a071c1c62fcbcb6c2fd999e978d2c')
+
+prepare() {
+  cd $pkgname-$pkgver
+  patch -Np1 -i ../CVE-2013-7447.patch
+}
+
+build() {
+  cd "$pkgname-$pkgver"
+  ./configure --prefix=/usr --sysconfdir=/etc --localstatedir=/var \
+      --disable-static
+  make
+}
+
+package() {
+  cd "$pkgname-$pkgver"
+  make DESTDIR="$pkgdir" install
+  mv "$pkgdir/usr/doc" "$pkgdir/usr/share/doc"
+}