Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 7 Sep 2015 11:51:47 +0000 (UTC)
From:      Jason Unovitch <junovitch@FreeBSD.org>
To:        ports-committers@freebsd.org, svn-ports-all@freebsd.org, svn-ports-branches@freebsd.org
Subject:   svn commit: r396263 - in branches/2015Q3/graphics/libwmf: . files
Message-ID:  <201509071151.t87BplOB014209@repo.freebsd.org>

next in thread | raw e-mail | index | archive | help
Author: junovitch
Date: Mon Sep  7 11:51:46 2015
New Revision: 396263
URL: https://svnweb.freebsd.org/changeset/ports/396263

Log:
  MFH: r396262
  
  graphics/libwmf: Fix bug introduced by patch for CVE-2015-4696
  
  - The original CVE-2015-4696 patch from upstream was missing line numbers
    in the first patch hunk.  The security issue was resolved by the
    restructured code but a new potential bug was introduced in the process.
  - While here, update to my FreeBSD.org email
  
  PR:		201513
  Reported by:	Sevan Janiyan <venture37@geeklan.co.uk>
  Obtained from:	Fedora libwmf RPM git (commit c8bc53c1)
  Approved by:	ports-secteam (feld), feld (mentor)

Modified:
  branches/2015Q3/graphics/libwmf/Makefile
  branches/2015Q3/graphics/libwmf/files/patch-deb784192-CVE-2015-4696
Directory Properties:
  branches/2015Q3/   (props changed)

Modified: branches/2015Q3/graphics/libwmf/Makefile
==============================================================================
--- branches/2015Q3/graphics/libwmf/Makefile	Mon Sep  7 11:50:19 2015	(r396262)
+++ branches/2015Q3/graphics/libwmf/Makefile	Mon Sep  7 11:51:46 2015	(r396263)
@@ -3,11 +3,11 @@
 
 PORTNAME=	libwmf
 PORTVERSION=	0.2.8.4
-PORTREVISION=	14
+PORTREVISION=	15
 CATEGORIES=	graphics
 MASTER_SITES=	SF/wvware/${PORTNAME}/${PORTVERSION}
 
-MAINTAINER=	jason.unovitch@gmail.com
+MAINTAINER=	junovitch@FreeBSD.org
 COMMENT=	Tools and library for converting Microsoft WMF (windows metafile)
 
 LICENSE=	GPLv2 # or later

Modified: branches/2015Q3/graphics/libwmf/files/patch-deb784192-CVE-2015-4696
==============================================================================
--- branches/2015Q3/graphics/libwmf/files/patch-deb784192-CVE-2015-4696	Mon Sep  7 11:50:19 2015	(r396262)
+++ branches/2015Q3/graphics/libwmf/files/patch-deb784192-CVE-2015-4696	Mon Sep  7 11:51:46 2015	(r396263)
@@ -1,5 +1,8 @@
 --- src/player/meta.h
 +++ src/player/meta.h
+@@ -2585,6 +2585,8 @@
+ 			polyrect.BR[i] = clip->rects[i].BR;
+ 		}
  
 +		if (FR->region_clip) FR->region_clip (API,&polyrect);
 +



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?201509071151.t87BplOB014209>