summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorThomas Beierlein <tomjbe@gentoo.org>2010-09-29 18:45:06 +0000
committerThomas Beierlein <tomjbe@gentoo.org>2010-09-29 18:45:06 +0000
commitb72dc8171bf0313e2b7bc41a73dc19272d1ac49b (patch)
treef5557a6907aa30b0856f19a1533a1b33738d0525 /sci-astronomy
parentVersion bump. Fixes CVE-2010-3077, bug 336319. (diff)
downloadhistorical-b72dc8171bf0313e2b7bc41a73dc19272d1ac49b.tar.gz
historical-b72dc8171bf0313e2b7bc41a73dc19272d1ac49b.tar.bz2
historical-b72dc8171bf0313e2b7bc41a73dc19272d1ac49b.zip
Fix buffer overflow and index out of bounds problem. (Bug 339109). Thanks Diego for reporting.
Package-Manager: portage-2.1.8.3/cvs/Linux x86_64
Diffstat (limited to 'sci-astronomy')
-rw-r--r--sci-astronomy/predict/ChangeLog8
-rw-r--r--sci-astronomy/predict/Manifest14
-rw-r--r--sci-astronomy/predict/predict-2.2.3.ebuild11
3 files changed, 17 insertions, 16 deletions
diff --git a/sci-astronomy/predict/ChangeLog b/sci-astronomy/predict/ChangeLog
index 9ac7bb031f77..c9d882405d65 100644
--- a/sci-astronomy/predict/ChangeLog
+++ b/sci-astronomy/predict/ChangeLog
@@ -1,6 +1,10 @@
# ChangeLog for sci-astronomy/predict
-# Copyright 2002-2009 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sci-astronomy/predict/ChangeLog,v 1.12 2009/02/23 18:31:04 bicatali Exp $
+# Copyright 1999-2010 Gentoo Foundation; Distributed under the GPL v2
+# $Header: /var/cvsroot/gentoo-x86/sci-astronomy/predict/ChangeLog,v 1.13 2010/09/29 18:45:06 tomjbe Exp $
+
+ 29 Sep 2010; Thomas Beierlein <tomjbe@gentoo.org> predict-2.2.3.ebuild:
+ Fix buffer overflow and index out of bounds problem. (Bug 339109). Thanks
+ Diego for reporting.
23 Feb 2009; SĂ©bastien Fabbro <bicatali@gentoo.org> predict-2.2.3.ebuild:
Now propagate LDFLAGS, respect as-needed, and simplified/modernized ebuild
diff --git a/sci-astronomy/predict/Manifest b/sci-astronomy/predict/Manifest
index 96e48434aebe..5229e1b122bb 100644
--- a/sci-astronomy/predict/Manifest
+++ b/sci-astronomy/predict/Manifest
@@ -1,16 +1,6 @@
------BEGIN PGP SIGNED MESSAGE-----
-Hash: SHA1
-
AUX predict-2.2.3-xforms.patch 2498 RMD160 168a806d750d2b3bd17cf8f21c44a1de1376cefa SHA1 e59d8e756b604cd549e06dbb6a01ca87e135ae1e SHA256 b639b8674b907692ff8780d9df8ae07d17c8e235f201635bccb2f2a6a941fe89
AUX predict-update 4039 RMD160 85c5c74dcf7cbdb0a8520790309fc7b1025246f1 SHA1 c5f78498c411f6dfa5e828f65deb6d1a36fcab2a SHA256 83dbf5f5e08f7d017391f7cfa7a30730f8930dec195dfa60bcd075188275d892
DIST predict-2.2.3.tar.gz 1639784 RMD160 b0ec4efcad5ca530f787b2a83d3ba9bb80489d6e SHA1 1eb4fcc9cf1aca79d890ef62b512763617453c9e SHA256 fbaa7c78227a2216ee22b25c914c4dd538abfc22d96f0bb5d21e3e61976e5166
-EBUILD predict-2.2.3.ebuild 4271 RMD160 7c377683acb043bba6c84aa67928e57856059ef2 SHA1 8a342fe6f3664d32cf674c0328861d28c7c016a7 SHA256 5103e17b748eeabda0e5bf0c0130257aa02aeea1f52106c55213f63dfc45ebfa
-MISC ChangeLog 3186 RMD160 328760f0e7dd0619aa48b5285d7b7b9f4813de11 SHA1 2fc56e37fbb53f5be1f6deca4634a628058aae16 SHA256 8120131910f86c9da74a31849aadbb21ec9c3423b39a3c3d882bd6a6cca74db6
+EBUILD predict-2.2.3.ebuild 4584 RMD160 1c3c9fdd90b3aec40741caa5a3a84afdc3531014 SHA1 a278e3743441c3bc85c4af2edaf08fd00e59f6c5 SHA256 d5e3dc82f33e18d733593411cf443d09fa6ffd5e967189bab74c3fc2a5238d1a
+MISC ChangeLog 3358 RMD160 6ae047c282f53fc7cf0de01807ff1250859375de SHA1 6b7b93dde104f00659eea37ce2c6427fa77838e2 SHA256 fbfe368c2d5d61d74cccdaabb9dd5030ba0f1436f42516cbf96ccdbdcf53180a
MISC metadata.xml 721 RMD160 eca740a430836ec206a589bf646a0124bb041934 SHA1 f343261b49356dbac97c85d1e9abe73aef224ae6 SHA256 6ec1aaa2cbda03f5fe1cdb2aaebe15a095468353316d80a9700537119a64d810
------BEGIN PGP SIGNATURE-----
-Version: GnuPG v2.0.10 (GNU/Linux)
-
-iEYEARECAAYFAkmi63MACgkQ1ycZbhPLE2BSkwCgjfX5BcqOcBmh2swUKPwZRGLs
-0UYAmgNtgY0earV0eA5AUOUZCCFLNp9h
-=vnKF
------END PGP SIGNATURE-----
diff --git a/sci-astronomy/predict/predict-2.2.3.ebuild b/sci-astronomy/predict/predict-2.2.3.ebuild
index 9f24708adcda..7db04c880caf 100644
--- a/sci-astronomy/predict/predict-2.2.3.ebuild
+++ b/sci-astronomy/predict/predict-2.2.3.ebuild
@@ -1,6 +1,6 @@
-# Copyright 1999-2009 Gentoo Foundation
+# Copyright 1999-2010 Gentoo Foundation
# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sci-astronomy/predict/predict-2.2.3.ebuild,v 1.5 2009/02/23 18:31:04 bicatali Exp $
+# $Header: /var/cvsroot/gentoo-x86/sci-astronomy/predict/predict-2.2.3.ebuild,v 1.6 2010/09/29 18:45:06 tomjbe Exp $
inherit toolchain-funcs eutils
@@ -22,6 +22,13 @@ src_unpack() {
unpack ${A}
cd "${S}"
epatch "${FILESDIR}"/${P}-xforms.patch
+ # fix for buffer overflow (Bug #339109)
+ sed -i -e "s/netport\[6\]/netport\[7\]/g" predict.c || die
+ # fix some further array out of bounds errors
+ sed -i -e "s/satname\[ 26/satname\[ 25/g" \
+ clients/gsat-1.1.0/src/db.c || die
+ sed -i -e "s/satname\[ 26/satname\[ 25/g" \
+ clients/gsat-1.1.0/src/comms.c || die
}
src_compile() {