[pkgsrc/trunk]: pkgsrc/print/evince Fix CVE-2006-5864 using a patch from evin...

[wiz <wiz%pkgsrc.org@localhost>]

details:   https://anonhg.NetBSD.org/pkgsrc/rev/178e1ef25c0d
branches:  trunk
changeset: 522246:178e1ef25c0d
user:      wiz <wiz%pkgsrc.org@localhost>
date:      Wed Dec 06 14:48:35 2006 +0000

description:
Fix CVE-2006-5864 using a patch from evince CVS.
Bump PKGREVISION.

diffstat:

 print/evince/Makefile         |   3 ++-
 print/evince/distinfo         |   3 ++-
 print/evince/patches/patch-ac |  27 +++++++++++++++++++++++++++
 3 files changed, 31 insertions(+), 2 deletions(-)

diffs (57 lines):

diff -r 0b7918751b64 -r 178e1ef25c0d print/evince/Makefile
--- a/print/evince/Makefile     Wed Dec 06 14:45:42 2006 +0000
+++ b/print/evince/Makefile     Wed Dec 06 14:48:35 2006 +0000
@@ -1,7 +1,8 @@
-# $NetBSD: Makefile,v 1.26 2006/10/12 14:16:22 drochner Exp $
+# $NetBSD: Makefile,v 1.27 2006/12/06 14:48:35 wiz Exp $
 #
 
 .include "../../print/evince/Makefile.common"
+PKGREVISION=           1
 
 COMMENT=               Document viewer for the GNOME Desktop
 
diff -r 0b7918751b64 -r 178e1ef25c0d print/evince/distinfo
--- a/print/evince/distinfo     Wed Dec 06 14:45:42 2006 +0000
+++ b/print/evince/distinfo     Wed Dec 06 14:48:35 2006 +0000
@@ -1,7 +1,8 @@
-$NetBSD: distinfo,v 1.9 2006/10/12 14:16:22 drochner Exp $
+$NetBSD: distinfo,v 1.10 2006/12/06 14:48:35 wiz Exp $
 
 SHA1 (evince-0.6.1.tar.bz2) = bc314761ecc9c29d10d09294ad8e32bab3a5dbc6
 RMD160 (evince-0.6.1.tar.bz2) = ac94e1964f4f46e505fe945daa9de288c2587898
 Size (evince-0.6.1.tar.bz2) = 1212271 bytes
 SHA1 (patch-aa) = 65abdde02e6b72743d47e5c5d6156cbb4a74f0a6
 SHA1 (patch-ab) = 800d96b612b09976f8573b4caab40da1d5d838f6
+SHA1 (patch-ac) = a2f08a7d977b1e51a811c80c6abc8b8480dd3cda
diff -r 0b7918751b64 -r 178e1ef25c0d print/evince/patches/patch-ac
--- /dev/null   Thu Jan 01 00:00:00 1970 +0000
+++ b/print/evince/patches/patch-ac     Wed Dec 06 14:48:35 2006 +0000
@@ -0,0 +1,27 @@
+$NetBSD: patch-ac,v 1.1 2006/12/06 14:48:35 wiz Exp $
+
+Fix for CVE-2006-5864. From evince CVS
+http://cvs.gnome.org/viewcvs/evince/ps/ps.c?r1=1.6&r2=1.6.6.1
+
+--- ps/ps.c.orig       2006-01-07 00:03:44.000000000 +0100
++++ ps/ps.c
+@@ -1231,7 +1231,8 @@ get_next_text(line, next_char)
+     int level = 0;
+     quoted = 1;
+     line++;
+-    while(*line && !(*line == ')' && level == 0)) {
++    while(*line && !(*line == ')' && level == 0)
++        && (cp - text) < PSLINELENGTH - 1) {
+       if(*line == '\\') {
+         if(*(line + 1) == 'n') {
+           *cp++ = '\n';
+@@ -1302,7 +1303,8 @@ get_next_text(line, next_char)
+     }
+   }
+   else {
+-    while(*line && !(*line == ' ' || *line == '\t' || *line == '\n'))
++    while(*line && !(*line == ' ' || *line == '\t' || *line == '\n')
++        && (cp - text) < PSLINELENGTH - 1)
+       *cp++ = *line++;
+   }
+   *cp = '\0';