[pkgsrc/trunk]: pkgsrc/sysutils/gnome-vfs Patch remote code execution securit...

[rh <rh%pkgsrc.org@localhost>]

details:   https://anonhg.NetBSD.org/pkgsrc/rev/32ecb26f4ad6
branches:  trunk
changeset: 492523:32ecb26f4ad6
user:      rh <rh%pkgsrc.org@localhost>
date:      Fri Apr 15 02:09:26 2005 +0000

description:
Patch remote code execution security hole pointed out in advisory at
http://secunia.com/advisories/14877/
Bump PKGREVISION
Set BUILDLINK_RECOMMENDED to gnome-vfs>=1.0.5nb8

diffstat:

 sysutils/gnome-vfs/Makefile         |   4 ++--
 sysutils/gnome-vfs/buildlink3.mk    |   5 +++--
 sysutils/gnome-vfs/distinfo         |   3 ++-
 sysutils/gnome-vfs/patches/patch-aa |  13 +++++++++++++
 4 files changed, 20 insertions(+), 5 deletions(-)

diffs (63 lines):

diff -r 213ee1b2e679 -r 32ecb26f4ad6 sysutils/gnome-vfs/Makefile
--- a/sysutils/gnome-vfs/Makefile       Fri Apr 15 02:04:57 2005 +0000
+++ b/sysutils/gnome-vfs/Makefile       Fri Apr 15 02:09:26 2005 +0000
@@ -1,7 +1,7 @@
-# $NetBSD: Makefile,v 1.46 2005/04/11 21:47:24 tv Exp $
+# $NetBSD: Makefile,v 1.47 2005/04/15 02:09:26 rh Exp $
 
 DISTNAME=              gnome-vfs-1.0.5
-PKGREVISION=           7
+PKGREVISION=           8
 CATEGORIES=            sysutils gnome
 MASTER_SITES=          ${MASTER_SITE_GNOME:=sources/gnome-vfs/1.0/}
 
diff -r 213ee1b2e679 -r 32ecb26f4ad6 sysutils/gnome-vfs/buildlink3.mk
--- a/sysutils/gnome-vfs/buildlink3.mk  Fri Apr 15 02:04:57 2005 +0000
+++ b/sysutils/gnome-vfs/buildlink3.mk  Fri Apr 15 02:09:26 2005 +0000
@@ -1,4 +1,4 @@
-# $NetBSD: buildlink3.mk,v 1.7 2004/11/30 18:26:40 wiz Exp $
+# $NetBSD: buildlink3.mk,v 1.8 2005/04/15 02:09:26 rh Exp $
 
 BUILDLINK_DEPTH:=              ${BUILDLINK_DEPTH}+
 GNOME_VFS_BUILDLINK3_MK:=      ${GNOME_VFS_BUILDLINK3_MK}+
@@ -11,7 +11,8 @@
 BUILDLINK_PACKAGES+=   gnome-vfs
 
 .if !empty(GNOME_VFS_BUILDLINK3_MK:M+)
-BUILDLINK_DEPENDS.gnome-vfs+=  gnome-vfs>=1.0.5nb7
+BUILDLINK_DEPENDS.gnome-vfs+=          gnome-vfs>=1.0.5nb7
+BUILDLINK_RECOMMENDED.gnome-vfs+=      gnome-vfs>=1.0.5nb8
 BUILDLINK_PKGSRCDIR.gnome-vfs?=        ../../sysutils/gnome-vfs
 .endif # GNOME_VFS_BUILDLINK3_MK
 
diff -r 213ee1b2e679 -r 32ecb26f4ad6 sysutils/gnome-vfs/distinfo
--- a/sysutils/gnome-vfs/distinfo       Fri Apr 15 02:04:57 2005 +0000
+++ b/sysutils/gnome-vfs/distinfo       Fri Apr 15 02:09:26 2005 +0000
@@ -1,8 +1,9 @@
-$NetBSD: distinfo,v 1.15 2005/02/24 13:40:53 agc Exp $
+$NetBSD: distinfo,v 1.16 2005/04/15 02:09:27 rh Exp $
 
 SHA1 (gnome-vfs-1.0.5.tar.gz) = 41156323969d44e3f14ce481b81bfdb5d1deba49
 RMD160 (gnome-vfs-1.0.5.tar.gz) = 76fbf8e590e41d2cac39faef9edc85e2df02c21a
 Size (gnome-vfs-1.0.5.tar.gz) = 1048954 bytes
+SHA1 (patch-aa) = 9bb8ed4b9fbab1ff21d86b3d1e297cb89544137b
 SHA1 (patch-ab) = 6d038601f881185f8a4c55a604f7baccb8693ffe
 SHA1 (patch-ac) = 4da6d9b46d059710dcd8248dd9d23cb79e5253e1
 SHA1 (patch-ae) = a0906ba19a6953aca3b173f03fb1b2d9bf742a09
diff -r 213ee1b2e679 -r 32ecb26f4ad6 sysutils/gnome-vfs/patches/patch-aa
--- /dev/null   Thu Jan 01 00:00:00 1970 +0000
+++ b/sysutils/gnome-vfs/patches/patch-aa       Fri Apr 15 02:09:26 2005 +0000
@@ -0,0 +1,13 @@
+$NetBSD: patch-aa,v 1.7 2005/04/15 02:09:27 rh Exp $
+
+--- modules/cdda-cddb.c.orig   2001-03-16 12:44:25.000000000 +1000
++++ modules/cdda-cddb.c
+@@ -339,7 +339,7 @@ CDDBDoQuery (cdrom_drive *cd_desc, CDDBS
+     query->query_match=MATCH_INEXACT;
+     query->query_matches=0;
+ 
+-    while(!CDDBReadLine(socket,inbuffer,256)) {
++    while(query->query_matches < MAX_INEXACT_MATCHES && !CDDBReadLine(socket,inbuffer,256)) {
+       query->query_list[query->query_matches].list_genre=
+       CDDBGenreValue(ChopWhite(strtok(inbuffer," ")));
+