[pkgsrc/pkgsrc-2015Q1]: pkgsrc/archivers/libarchive Pullup ticket #4715 - req...

[tron <tron%pkgsrc.org@localhost>]

details:   https://anonhg.NetBSD.org/pkgsrc/rev/3a920c856123
branches:  pkgsrc-2015Q1
changeset: 649247:3a920c856123
user:      tron <tron%pkgsrc.org@localhost>
date:      Sun May 17 08:15:38 2015 +0000

description:
Pullup ticket #4715 - requested by sevan
archivers/libarchive: security patch

Revisions pulled up:
- archivers/libarchive/Makefile.common                          1.3
- archivers/libarchive/files/libarchive/archive_read.c          1.5

---
   Module Name:    pkgsrc
   Committed By:   sevan
   Date:           Thu May 14 14:54:55 UTC 2015

   Modified Files:
           pkgsrc/archivers/libarchive: Makefile.common
           pkgsrc/archivers/libarchive/files/libarchive: archive_read.c

   Log Message:
   Patch an out of bounds reads obtained from:
   https://github.com/libarchive/libarchive/issues/502
   https://github.com/libarchive/libarchive/commit/e6c9668f3202215ddb71617b41c19b6f05acf008
   Bump PKGREVISION.

   Reviewed by bsiegert@

diffstat:

 archivers/libarchive/Makefile.common                 |  3 ++-
 archivers/libarchive/files/libarchive/archive_read.c |  2 ++
 2 files changed, 4 insertions(+), 1 deletions(-)

diffs (26 lines):

diff -r c33c5d4dc29a -r 3a920c856123 archivers/libarchive/Makefile.common
--- a/archivers/libarchive/Makefile.common      Sun May 17 08:10:35 2015 +0000
+++ b/archivers/libarchive/Makefile.common      Sun May 17 08:15:38 2015 +0000
@@ -1,8 +1,9 @@
-# $NetBSD: Makefile.common,v 1.2 2015/02/08 00:14:33 wiz Exp $
+# $NetBSD: Makefile.common,v 1.2.2.1 2015/05/17 08:15:38 tron Exp $
 # used by archivers/bsdtar/Makefile
 # used by archivers/libarchive/Makefile
 
 DISTNAME=      libarchive-3.1.2
+PKGREVISION=   1
 CATEGORIES=    archivers
 MASTER_SITES=  http://www.libarchive.org/downloads/
 DISTFILES=     # empty
diff -r c33c5d4dc29a -r 3a920c856123 archivers/libarchive/files/libarchive/archive_read.c
--- a/archivers/libarchive/files/libarchive/archive_read.c      Sun May 17 08:10:35 2015 +0000
+++ b/archivers/libarchive/files/libarchive/archive_read.c      Sun May 17 08:15:38 2015 +0000
@@ -1394,6 +1394,8 @@
 {
        int64_t skipped;
 
+       if (request < 0)
+               return ARCHIVE_FATAL;
        if (request == 0)
                return 0;