svn commit: r396263 - in branches/2015Q3/graphics/libwmf: . files

Jason Unovitch junovitch at FreeBSD.org
Mon Sep 7 11:51:47 UTC 2015


Author: junovitch
Date: Mon Sep  7 11:51:46 2015
New Revision: 396263
URL: https://svnweb.freebsd.org/changeset/ports/396263

Log:
  MFH: r396262
  
  graphics/libwmf: Fix bug introduced by patch for CVE-2015-4696
  
  - The original CVE-2015-4696 patch from upstream was missing line numbers
    in the first patch hunk.  The security issue was resolved by the
    restructured code but a new potential bug was introduced in the process.
  - While here, update to my FreeBSD.org email
  
  PR:		201513
  Reported by:	Sevan Janiyan <venture37 at geeklan.co.uk>
  Obtained from:	Fedora libwmf RPM git (commit c8bc53c1)
  Approved by:	ports-secteam (feld), feld (mentor)

Modified:
  branches/2015Q3/graphics/libwmf/Makefile
  branches/2015Q3/graphics/libwmf/files/patch-deb784192-CVE-2015-4696
Directory Properties:
  branches/2015Q3/   (props changed)

Modified: branches/2015Q3/graphics/libwmf/Makefile
==============================================================================
--- branches/2015Q3/graphics/libwmf/Makefile	Mon Sep  7 11:50:19 2015	(r396262)
+++ branches/2015Q3/graphics/libwmf/Makefile	Mon Sep  7 11:51:46 2015	(r396263)
@@ -3,11 +3,11 @@
 
 PORTNAME=	libwmf
 PORTVERSION=	0.2.8.4
-PORTREVISION=	14
+PORTREVISION=	15
 CATEGORIES=	graphics
 MASTER_SITES=	SF/wvware/${PORTNAME}/${PORTVERSION}
 
-MAINTAINER=	jason.unovitch at gmail.com
+MAINTAINER=	junovitch at FreeBSD.org
 COMMENT=	Tools and library for converting Microsoft WMF (windows metafile)
 
 LICENSE=	GPLv2 # or later

Modified: branches/2015Q3/graphics/libwmf/files/patch-deb784192-CVE-2015-4696
==============================================================================
--- branches/2015Q3/graphics/libwmf/files/patch-deb784192-CVE-2015-4696	Mon Sep  7 11:50:19 2015	(r396262)
+++ branches/2015Q3/graphics/libwmf/files/patch-deb784192-CVE-2015-4696	Mon Sep  7 11:51:46 2015	(r396263)
@@ -1,5 +1,8 @@
 --- src/player/meta.h
 +++ src/player/meta.h
+@@ -2585,6 +2585,8 @@
+ 			polyrect.BR[i] = clip->rects[i].BR;
+ 		}
  
 +		if (FR->region_clip) FR->region_clip (API,&polyrect);
 +


More information about the svn-ports-all mailing list