CVS commit: pkgsrc/print/ghostscript-gpl

["Havard Eidnes" <he%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   he
Date:           Mon Nov 13 16:41:48 UTC 2017

Modified Files:
        pkgsrc/print/ghostscript-gpl: Makefile distinfo
Added Files:
        pkgsrc/print/ghostscript-gpl/patches: patch-base_gsdevice.c

Log Message:
Apply fix for CVE-2016-7978,
fixing bug 697179, fixing a double free and memory corruption.
Fix from http://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=6f749c0c44e


To generate a diff of this commit:
cvs rdiff -u -r1.34 -r1.35 pkgsrc/print/ghostscript-gpl/Makefile
cvs rdiff -u -r1.20 -r1.21 pkgsrc/print/ghostscript-gpl/distinfo
cvs rdiff -u -r0 -r1.1 \
    pkgsrc/print/ghostscript-gpl/patches/patch-base_gsdevice.c

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/print/ghostscript-gpl/Makefile
diff -u pkgsrc/print/ghostscript-gpl/Makefile:1.34 pkgsrc/print/ghostscript-gpl/Makefile:1.35
--- pkgsrc/print/ghostscript-gpl/Makefile:1.34  Mon Nov 13 15:10:05 2017
+++ pkgsrc/print/ghostscript-gpl/Makefile       Mon Nov 13 16:41:48 2017
@@ -1,8 +1,8 @@
-# $NetBSD: Makefile,v 1.34 2017/11/13 15:10:05 he Exp $
+# $NetBSD: Makefile,v 1.35 2017/11/13 16:41:48 he Exp $
 
 DISTNAME=      ghostscript-${GS_VERSION}
 PKGNAME=       ${DISTNAME:S/ghostscript/ghostscript-gpl/}
-PKGREVISION=   17
+PKGREVISION=   18
 CATEGORIES=    print
 MASTER_SITES=  ${MASTER_SITE_SOURCEFORGE:=ghostscript/}
 MASTER_SITES+= https://ghostscript.com/releases/

Index: pkgsrc/print/ghostscript-gpl/distinfo
diff -u pkgsrc/print/ghostscript-gpl/distinfo:1.20 pkgsrc/print/ghostscript-gpl/distinfo:1.21
--- pkgsrc/print/ghostscript-gpl/distinfo:1.20  Fri Nov 10 18:17:55 2017
+++ pkgsrc/print/ghostscript-gpl/distinfo       Mon Nov 13 16:41:48 2017
@@ -1,4 +1,4 @@
-$NetBSD: distinfo,v 1.20 2017/11/10 18:17:55 khorben Exp $
+$NetBSD: distinfo,v 1.21 2017/11/13 16:41:48 he Exp $
 
 SHA1 (ghostscript-9.06.tar.bz2) = 4c1c2b4cddd16d86b21f36ad4fc15f6100162238
 RMD160 (ghostscript-9.06.tar.bz2) = 11ef74cf783ec5f7cde0ceaaf2823a1f62fb4d1d
@@ -24,8 +24,10 @@ SHA1 (patch-al) = e5a5be44f997a450afef15
 SHA1 (patch-an) = 22ed9965aec5d540adb31334d8dd9e05eab8e0c2
 SHA1 (patch-base_configure_ac) = c0f5ee586df05d1d136b7c89b4776c0bf480cc57
 SHA1 (patch-base_gdevpng.c) = 24120e26bd2a846f6d4c8ab9753dfe91f151343f
+SHA1 (patch-base_gsdevice.c) = fc9a17b3e8a7ac517b1faecdc1b1df31491ff36f
 SHA1 (patch-base_gserrors_h) = fde64bd096a6e6f94005c8352a6295df06c19bae
 SHA1 (patch-base_gsmalloc.c) = 891bdcef49e0f2c435744eaf7bbcd31f5dbcbaba
 SHA1 (patch-base_memento.c) = d30cfb9285a0268e743c90cdf831674eaa24789b
 SHA1 (patch-cups_colord.h) = ab5c4bfa7184d2c1756697b87e7046645bdc2bc2
 SHA1 (patch-openjpeg_libopenjpeg_opj_malloc_h) = 24f15c55cd7961afc1254f6c4bccd6d0c2a5e737
+SHA1 (patch-psi_zfrsd.c) = fe46c6fe763b56779fdd66404324eb92971890a6

Added files:

Index: pkgsrc/print/ghostscript-gpl/patches/patch-base_gsdevice.c
diff -u /dev/null pkgsrc/print/ghostscript-gpl/patches/patch-base_gsdevice.c:1.1
--- /dev/null   Mon Nov 13 16:41:48 2017
+++ pkgsrc/print/ghostscript-gpl/patches/patch-base_gsdevice.c  Mon Nov 13 16:41:48 2017
@@ -0,0 +1,15 @@
+$NetBSD: patch-base_gsdevice.c,v 1.1 2017/11/13 16:41:48 he Exp $
+
+Apply fix for CVE-2016-7978,
+fixing bug 697179, fixing a double free and memory corruption.
+
+--- base/gsdevice.c.orig       2012-08-08 08:01:36.000000000 +0000
++++ base/gsdevice.c
+@@ -540,6 +540,7 @@ gx_device_init(gx_device * dev, const gx
+     dev->memory = mem;
+     dev->retained = !internal;
+     rc_init(dev, mem, (internal ? 0 : 1));
++    rc_increment(dev->icc_struct);
+ }
+ 
+ /* Make a null device. */