dev-libs/libf2c: Add patch for format-security, #538342; thanks Ted Tanberry for the patch

Package-Manager: portage-2.2.15/cvs/Linux x86_64
Manifest-Sign-Key: 0xB9D4F231BD1558AB!

4 files changed, 96 insertions, 17 deletions

diff --git a/dev-libs/libf2c/ChangeLog b/dev-libs/libf2c/ChangeLog
index b13eb64b4102..1ac36b467248 100644
--- a/dev-libs/libf2c/ChangeLog
+++ b/dev-libs/libf2c/ChangeLog
@@ -1,6 +1,12 @@
 # ChangeLog for dev-libs/libf2c
-# Copyright 1999-2014 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/dev-libs/libf2c/ChangeLog,v 1.62 2014/02/03 09:34:00 jlec Exp $
+# Copyright 1999-2015 Gentoo Foundation; Distributed under the GPL v2
+# $Header: /var/cvsroot/gentoo-x86/dev-libs/libf2c/ChangeLog,v 1.63 2015/02/02 08:28:51 jlec Exp $
+
+*libf2c-20110801-r4 (02 Feb 2015)
+
+  02 Feb 2015; Justin Lecher <jlec@gentoo.org> +libf2c-20110801-r4.ebuild,
+  +files/libf2c-20110801-format-security.patch:
+  Add patch for format-security, #538342; thanks Ted Tanberry for the patch
 
   03 Feb 2014; Justin Lecher <jlec@gentoo.org>
   -files/20070912-link-shared-libf2c-correctly.patch,
diff --git a/dev-libs/libf2c/Manifest b/dev-libs/libf2c/Manifest
index e06809339d9d..1b2a5fd9c7ca 100644
--- a/dev-libs/libf2c/Manifest
+++ b/dev-libs/libf2c/Manifest
@@ -4,25 +4,29 @@ Hash: SHA512
 AUX 20051004-add-ofiles-dep.patch 439 SHA256 3f688297b45515c1e386bb7f94ad36bf0f6a3497a0baff759b54d943cbec7d8f SHA512 f1453a782b593744cceaff2cabcd0aae605324ebfd0e66505d55c4483374e3845710d4c1a6b71c4939adf588466f55d6a5856cd97a8e1c52a751151e9c2ee409 WHIRLPOOL 055db6e8bc28fb186a0e0357e7bd45f919f715828dab90e0907879343d0f749999e1781b468c8014ee979070966c6465ba219843cbf687c00c9d706ddfaaf25b
 AUX 20090407-link-shared-libf2c-correctly.patch 358 SHA256 28e04d4fe1279ad37fba92f1fc9acb3110778a02f4c15da6b659b04baa3d2df0 SHA512 6edc5e0d418b4d87597c696623aacf1b15a526b2f2739726220b6302f3ad444bf01ebcd672f7ae40698f0e524d3019decad751490f38c1b2f32d2fd943df8a72 WHIRLPOOL 97592dd5af100647a4bb82b4254cb0f212b25dad40f599d8acb069fba6432989b30f12d0b56e16aa9e73b96977d4e5dc6ffbaa0a12aa419651a799abae948c63
 AUX libf2c-20110801-64bit-long.patch 1784 SHA256 919698643f12b2fc4b9f4ebac395a8b2c9c01e83028907621b95dee8db4d5653 SHA512 69f2553473b940ab78e185dc17b94513bca2cde4f9a32d60b09183d853096fbe6de2dfc8354d44cdaf04bf5852674d4f31b4a11c8c761c0c802694537156edb1 WHIRLPOOL dacdd83b8dfea14bf6af9c56031a34ae7809140ebdfae311fd947ea887648ebe12eb76b4e509edd5ca66d5ed74556db9b8538bb5d213fd06d322098a3eced516
+AUX libf2c-20110801-format-security.patch 341 SHA256 a1b7a36fb9fd237e5d2cee83363875cf13cda5d59e425602a86b28844ac32920 SHA512 f630296167fffed0cf707430af2f546bcfd77d6443bcec15b24a1c8bdf923f92411b86a37079bd6a73b36baf9caf7d51312b32ff5a669097f3c41fc0bb525f5a WHIRLPOOL 68f448492dfc3a83f76c21b1893e6ea5a5b2f3e197271b0ad511b45f520b26577fc9adc5d279ced8e7ece63c32603327c284c4cdf7a72a2abc7317505e8d1ec8
 AUX libf2c-20110801-main.patch 1708 SHA256 1054e609ec311fe8f8da43d400e762e650bb37405676903b281eed5bdf59535a SHA512 f2c8574f45580d2bf99e5506266668c615f19a985ffa27eefe38d373f083da61dbe486d5c27e034bd38029b46a4a77285e175a7285b1acb37e7a1ecfea6a2bbc WHIRLPOOL 24aefb349f2db7d772fd773039a639eb819cd2be7159e443bb26f0e13929c0409c68f34917bcab09c9eec8a967ec77c4805705c529837028b5b344ff4e372d95
 DIST libf2c-20110801.zip 128845 SHA256 f13c01421e9668dc86c78159d87c2f802dd1f8e62037834285c7ab77200d97d5 SHA512 7a7b7b02ca2b11456aa0deba5094aebc1e9f7070d1742ad76450ec79de7eed967fbd7446524b66c52295ed911471d2dc396d171569b5d37079bdca8220fd2fb6 WHIRLPOOL 7bc8fa6c016dbb860863b39939f27f99156de017a2847764698bc0b5bbf21ff183e783991d6c5200ddba1b636e9a8bb93d560c00344db94b4e9a7b254abdafde
 EBUILD libf2c-20110801-r3.ebuild 1343 SHA256 eacab755832580da86a74de0d4a9807b74d16d9d74b5b008cc4fabd8b575d8e6 SHA512 18b357a87ef38e90c643be87c6fb5f3d5f52a18474ec1c6a6d5d3e3b7981efd2b37f54b2110b139e07dc5c4aea5740b209c94e0bc7d773804caf99bd1d9b0278 WHIRLPOOL fe1b5bc10c99ab160a318271bba6516c1820c727dfc3ad3c442fc1035dbc6539bf636487a3f36488aafa010a2c7c6f554b0cd910563a6e9bae5b36f6aea9dbf5
-MISC ChangeLog 8457 SHA256 cc020290598cbcc369e7693409bc76cd0424491d0dffef647cee9f348c1d99c1 SHA512 40bcd9915b03629600995db0b3514620bd2511723b11e15c5738e156472788708648af5f93fc0fbadb22ee09255fd891557ef7e9caa694808f544f74363ed9f6 WHIRLPOOL d14e951bd5c3b1955a0fcfe6dd137584815887babbd77980bb70a9dab0f055acb5196c4b9ba9bd51916b6d5ceebc9bf2d75f6677bb34cb99e5c49c5f479d3bdd
+EBUILD libf2c-20110801-r4.ebuild 1374 SHA256 a9d8526a81d7480f3c2c7a868cbdbea16cf09070a154d1e98a3f6578964ed7da SHA512 9a3657ac607a8b2c289c82962551dcb4c2192be4fc50fa8dedae688f089b255d1afea71fecf95398d0850d5bf646a4161237ee672504760c66571d3280d86814 WHIRLPOOL b103fe8f9c357a58bed10070a7447098f90300f58d51351ffb6e8254181e4012723dfabf0cc33953b63344816432be4448e51de7f8bac044010660313eb1614e
+MISC ChangeLog 8692 SHA256 9fbc820cd826668012b04b818cc9e42b4e0543f2c44c55cc905ccfe7ebc73983 SHA512 6efcf15aab9c776c9be7b60684366286de54c09779de1ed92e777f3beb7e1a562b84ef78ef0bd1ee789b72aedb464107426722e766ed067f2f0f241b6445f588 WHIRLPOOL b9e696a41e1ae49a9158b4fee235c159278d65792ed67c58d167fbbb9bb5f25272d8f0685844b95dd32cd0be3ed68554c5c543f7166a8eadf4e2b321d50a2a72
 MISC metadata.xml 262 SHA256 104aaf008a1e944d29258b95337ac85f5fe5acb142b0ecd7d182f78c4e4b51c7 SHA512 1fffa1f2d70400c79b48a40a884f2b4f7f85cc303de7913f3c48055e94157693d640eb58ff953416beebc043b2fcef61eec5a27e71dde48966e3cb8353e16c6b WHIRLPOOL 100e2b4fd2deeff7e2a0e95457845d65f44cc7881d23a2d49f3a4fafb38b5893d8b3abbc4939cb7543b40db98256fedc5c8c03b9f7fd92b150e158a83b6e8119
 -----BEGIN PGP SIGNATURE-----
-Version: GnuPG v2.0.22 (GNU/Linux)
+Version: GnuPG v2.0
 
-iQIcBAEBCgAGBQJS72KJAAoJELnU8jG9FVirQyUP+gKn3i+nuYclKZvm5Rdv4Ya5
-fd9xA9184mWM6zqqIk/HK+a7wMF8GciA0TnlxuFcwXfI+i8xO5i0z8zd7AG1k9iJ
-bpNGq4b9DSIyHTOZD3ov5kSEXZtt/8lV8hMr97zv2uSfmpzJbK3SZ/6pEwiiXyvI
-8Eg67+Ji23wLdT6YfzqINIK1cABZ2KQ6KoahkjdiGKuIWCS7XKux5vgdEWB7umyV
-d4zSPeYLtJxL9d+2a9FR9fnUIXknhvY71PeTEofLutxLV/lQBaaPPEapE/4PspIg
-jbadSKtbr/kwTu73TZqlL86dpCJ0yWCh6hZ8M38hoqZg3XhRqgJT/fl++TkRcfWm
-eTXOoIjlKOCmNNk5HePvdDVCrv5ymjnQ/85iOrK9ibf6oNUjuQnfSCPzQjo4tgpG
-hSWpB6kCuKdYN5GuRheQfMqVo6Td1OpyKcyTUT3NpzxFt+QSFrPh1zK8uruPCAIQ
-FaM1uvdQ3SOOUWVJlQkscalAZdfwYNgrIVWj3yFyzEbpZfEU2wI1ENbTqn/oc8hc
-7ylkXNuQ4Eu58JCnH8Fu7J7MSu93fO8NxhAC2oAga1pFbtEyX8Lb2NGf5P+yfWpb
-YDEf84Tu+xNAK5s5jeWjYO7eSHZa1rMvoj2yUkC7jT4E8wLcSy6tvXNX9Do4c9QQ
-0alsFXGI0fvrKHmCSHGb
-=9IyZ
+iQJ8BAEBCgBmBQJUzzVEXxSAAAAAAC4AKGlzc3Vlci1mcHJAbm90YXRpb25zLm9w
+ZW5wZ3AuZmlmdGhob3JzZW1hbi5uZXQyQ0JDQjFGMzBDQ0UxMjFGNENDNDgxMDdC
+OUQ0RjIzMUJEMTU1OEFCAAoJELnU8jG9FVirGc4P/RLrp7KgyB+eLfCbLPyXbs1n
+/MbEaxBejEmd3myll7tJNqbQ9k7Hk5dKyBwwCHioKEMoQ+Qma8sxiSJnctHci52u
+WY2cMQ63WnWgPzcQbcxK7CWLkf7MwOKc5Phe5/rcfpfp4F6JgdRLl12IVfNzvMyp
+HGglDyq8Waq+vrLA2V7LHXstTyUBjI8xriHpiOw5JDyVycq4MJOmqjBmtP/y06ov
+H/A+Ggkm/6e5ZtZDR0DvOrVAq8/TtDLoZcjZKXB+I0Bq637OJRKOeqJPvL/L6WfK
+HNAvDLaIHrOnNC6mif+RmVV1z0RJ9mgvSpZ5LFsr5SFhJ0tiou8Z8Ro1nlYVKSyj
+BQHfUpeltxkLiajLX1mgqDYRFEZmmh9ImH0S2Ol+/A0W/KAS+XlSAOQDFQa+TCG3
+UORQxW6Ya209g1PfoUkZbgIrstK1Jbg2ATyyv9pKu1iAj7g2MXCOgZuIKm/LdcDN
+hlWrkOMfTee5FsJUVQC6yoUcZNOz9fyKtPyddhD/WW9s6h/cBvWobE5IOV2QbNz5
+7kVEF6gRbWGqP9a+KgChW9yq8D4Z7dtIn8BdAQDXeTz/PZtCG9j44UTTXJKMU3kL
+bZuX48aNWyGJQDlvny+99JM1nhqoj9wbDOF9f9ccRNMSvdDmz6AWl2QToT1jK/6B
+vKe453amRxtGRPHTKCbc
+=+7vT
 -----END PGP SIGNATURE-----
diff --git a/dev-libs/libf2c/files/libf2c-20110801-format-security.patch b/dev-libs/libf2c/files/libf2c-20110801-format-security.patch
new file mode 100644
index 000000000000..669da2d694b4
--- /dev/null
+++ b/dev-libs/libf2c/files/libf2c-20110801-format-security.patch
@@ -0,0 +1,11 @@
+--- arithchk.c
++++ arithchk.c
+@@ -122,7 +122,7 @@
+ 	long Cray1;
+ 
+ 	/* Cray1 = 4617762693716115456 -- without overflow on non-Crays */
+-	Cray1 = printf(emptyfmt) < 0 ? 0 : 4617762;
++	Cray1 = fputs(emptyfmt, stdout) < 0 ? 0 : 4617762;
+ 	if (printf(emptyfmt, Cray1) >= 0)
+ 		Cray1 = 1000000*Cray1 + 693716;
+ 	if (printf(emptyfmt, Cray1) >= 0)
diff --git a/dev-libs/libf2c/libf2c-20110801-r4.ebuild b/dev-libs/libf2c/libf2c-20110801-r4.ebuild
new file mode 100644
index 000000000000..cf96c434bdcf
--- /dev/null
+++ b/dev-libs/libf2c/libf2c-20110801-r4.ebuild
@@ -0,0 +1,58 @@
+# Copyright 1999-2015 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/dev-libs/libf2c/libf2c-20110801-r4.ebuild,v 1.1 2015/02/02 08:28:51 jlec Exp $
+
+EAPI=5
+
+inherit eutils multilib toolchain-funcs
+
+DESCRIPTION="Library that converts FORTRAN to C source"
+HOMEPAGE="http://www.netlib.org/f2c/"
+SRC_URI="${HOMEPAGE}/${PN}.zip -> ${P}.zip"
+
+LICENSE="HPND"
+SLOT="0"
+KEYWORDS="~amd64 ~ppc ~ppc64 ~x86 ~x86-fbsd ~amd64-linux ~x86-linux"
+IUSE="static-libs"
+
+RDEPEND=""
+DEPEND="${RDEPEND}
+	app-arch/unzip"
+
+S="${WORKDIR}"
+
+src_prepare() {
+	epatch \
+		"${FILESDIR}"/20051004-add-ofiles-dep.patch \
+		"${FILESDIR}"/20090407-link-shared-libf2c-correctly.patch \
+		"${FILESDIR}"/${P}-main.patch\
+		"${FILESDIR}"/${P}-64bit-long.patch \
+		"${FILESDIR}"/${P}-format-security.patch
+	sed -i -e "s/ld /$(tc-getLD) /" makefile.u || die
+}
+
+src_compile() {
+	emake \
+		-f makefile.u \
+		libf2c.so \
+		CFLAGS="${CFLAGS} -fPIC" \
+		CC="$(tc-getCC)"
+
+	# Clean up files so we can recompile without PIC for the static lib
+	if use static-libs; then
+		rm *.o || die "clean failed"
+		emake \
+			-f makefile.u \
+			all \
+			CFLAGS="${CFLAGS}" \
+			CC="$(tc-getCC)"
+	fi
+}
+
+src_install () {
+	dolib libf2c.so.2
+	dosym libf2c.so.2 /usr/$(get_libdir)/libf2c.so
+	use static-libs && dolib.a libf2c.a
+	doheader f2c.h
+	dodoc README Notice
+}