[pkgsrc/trunk]: pkgsrc/graphics/gd Add upstream patch to address CVE-2018-100...

[kim <kim%pkgsrc.org@localhost>]

details:   https://anonhg.NetBSD.org/pkgsrc/rev/4a81aa35c2e3
branches:  trunk
changeset: 312676:4a81aa35c2e3
user:      kim <kim%pkgsrc.org@localhost>
date:      Mon Sep 10 13:34:16 2018 +0000

description:
Add upstream patch to address CVE-2018-1000222.
Restore the tiff option, so libtiff can be avoided.
Ok by adam@.

diffstat:

 graphics/gd/Makefile      |  10 ++++++----
 graphics/gd/buildlink3.mk |   7 +++++--
 graphics/gd/distinfo      |   6 +++++-
 graphics/gd/options.mk    |  12 ++++++++++--
 4 files changed, 26 insertions(+), 9 deletions(-)

diffs (104 lines):

diff -r 7437c24fbb29 -r 4a81aa35c2e3 graphics/gd/Makefile
--- a/graphics/gd/Makefile      Mon Sep 10 12:18:18 2018 +0000
+++ b/graphics/gd/Makefile      Mon Sep 10 13:34:16 2018 +0000
@@ -1,12 +1,16 @@
-# $NetBSD: Makefile,v 1.120 2018/08/22 09:45:12 wiz Exp $
+# $NetBSD: Makefile,v 1.121 2018/09/10 13:34:16 kim Exp $
 
 DISTNAME=      libgd-2.2.5
 PKGNAME=       ${DISTNAME:S/libgd/gd/}
-PKGREVISION=   3
+PKGREVISION=   4
 CATEGORIES=    graphics
 MASTER_SITES=  ${MASTER_SITE_GITHUB:=libgd/}
 EXTRACT_SUFX=  .tar.xz
 
+PATCH_SITES=   ${MASTER_SITE_GITHUB:=libgd/libgd/commit/}
+PATCHFILES=    4b1e18a00ce7c4b7e6919c3b3109a034393b805a.patch
+PATCH_DIST_STRIP=      -p1
+
 MAINTAINER=    adam%NetBSD.org@localhost
 HOMEPAGE=      https://libgd.github.io/
 COMMENT=       Graphics library for the dynamic creation of images
@@ -25,7 +29,6 @@
 CONFIGURE_ARGS+=       --with-jpeg=${BUILDLINK_PREFIX.jpeg}
 CONFIGURE_ARGS+=       --with-liq=${BUILDLINK_PREFIX.libimagequant}
 CONFIGURE_ARGS+=       --with-png=${BUILDLINK_PREFIX.png}
-CONFIGURE_ARGS+=       --with-tiff=${BUILDLINK_PREFIX.tiff}
 CONFIGURE_ARGS+=       --with-webp=${BUILDLINK_PREFIX.libwebp}
 CONFIGURE_ARGS+=       --with-zlib=${BUILDLINK_PREFIX.zlib}
 REPLACE_PERL+=         src/bdftogd
@@ -38,7 +41,6 @@
 .include "../../graphics/libimagequant/buildlink3.mk"
 .include "../../graphics/libwebp/buildlink3.mk"
 .include "../../graphics/png/buildlink3.mk"
-.include "../../graphics/tiff/buildlink3.mk"
 .include "../../mk/jpeg.buildlink3.mk"
 .include "../../mk/pthread.buildlink3.mk"
 .include "../../mk/bsd.pkg.mk"
diff -r 7437c24fbb29 -r 4a81aa35c2e3 graphics/gd/buildlink3.mk
--- a/graphics/gd/buildlink3.mk Mon Sep 10 12:18:18 2018 +0000
+++ b/graphics/gd/buildlink3.mk Mon Sep 10 13:34:16 2018 +0000
@@ -1,4 +1,4 @@
-# $NetBSD: buildlink3.mk,v 1.43 2018/03/12 11:15:34 wiz Exp $
+# $NetBSD: buildlink3.mk,v 1.44 2018/09/10 13:34:16 kim Exp $
 
 BUILDLINK_TREE+=       gd
 
@@ -14,6 +14,10 @@
 pkgbase := gd
 .include "../../mk/pkg-build-options.mk"
 
+.if !empty(PKG_BUILD_OPTIONS.gd:Mtiff)
+.include "../../graphics/tiff/buildlink3.mk"
+.endif
+
 .if !empty(PKG_BUILD_OPTIONS.gd:Mx11)
 .include "../../x11/libXpm/buildlink3.mk"
 .endif
@@ -24,7 +28,6 @@
 .include "../../graphics/libimagequant/buildlink3.mk"
 .include "../../graphics/libwebp/buildlink3.mk"
 .include "../../graphics/png/buildlink3.mk"
-.include "../../graphics/tiff/buildlink3.mk"
 .include "../../mk/jpeg.buildlink3.mk"
 .include "../../mk/pthread.buildlink3.mk"
 .endif # GD_BUILDLINK3_MK
diff -r 7437c24fbb29 -r 4a81aa35c2e3 graphics/gd/distinfo
--- a/graphics/gd/distinfo      Mon Sep 10 12:18:18 2018 +0000
+++ b/graphics/gd/distinfo      Mon Sep 10 13:34:16 2018 +0000
@@ -1,5 +1,9 @@
-$NetBSD: distinfo,v 1.46 2018/02/25 14:34:22 rillig Exp $
+$NetBSD: distinfo,v 1.47 2018/09/10 13:34:16 kim Exp $
 
+SHA1 (4b1e18a00ce7c4b7e6919c3b3109a034393b805a.patch) = 3e063656c754229b56137f8213e726ff976043c0
+RMD160 (4b1e18a00ce7c4b7e6919c3b3109a034393b805a.patch) = b1bf60fa82dd125f9440547e75ab27be40ffa720
+SHA512 (4b1e18a00ce7c4b7e6919c3b3109a034393b805a.patch) = d94e4bf09e450936d2946292deee0223614a9c4461a2b8e0509e67f82ae191deabe0e1007b92fa17c99704a00085f08110cf04a4869e1b1af837a1931180737f
+Size (4b1e18a00ce7c4b7e6919c3b3109a034393b805a.patch) = 2561 bytes
 SHA1 (libgd-2.2.5.tar.xz) = b777b005c401b6fa310ccf09eeb29f6c6e17ab2c
 RMD160 (libgd-2.2.5.tar.xz) = 1c20f719161da596dac6c5c5b92bde71ddc9aedb
 SHA512 (libgd-2.2.5.tar.xz) = e4598e17a277a75e02255402182cab139cb3f2cffcd68ec05cc10bbeaf6bc7aa39162c3445cd4a7efc1a26b72b9152bbedb187351e3ed099ea51767319997a6b
diff -r 7437c24fbb29 -r 4a81aa35c2e3 graphics/gd/options.mk
--- a/graphics/gd/options.mk    Mon Sep 10 12:18:18 2018 +0000
+++ b/graphics/gd/options.mk    Mon Sep 10 13:34:16 2018 +0000
@@ -1,10 +1,18 @@
-# $NetBSD: options.mk,v 1.7 2017/09/04 06:20:45 adam Exp $
+# $NetBSD: options.mk,v 1.8 2018/09/10 13:34:16 kim Exp $
 
 PKG_OPTIONS_VAR=       PKG_OPTIONS.gd
-PKG_SUPPORTED_OPTIONS= x11
+PKG_SUPPORTED_OPTIONS= tiff x11
+PKG_SUGGESTED_OPTIONS= tiff
 
 .include "../../mk/bsd.options.mk"
 
+.if !empty(PKG_OPTIONS:Mtiff)
+.include "../../graphics/tiff/buildlink3.mk"
+CONFIGURE_ARGS+=       --with-tiff=${BUILDLINK_PREFIX.tiff}
+.else
+CONFIGURE_ARGS+=       --without-tiff
+.endif
+
 .if !empty(PKG_OPTIONS:Mx11)
 .include "../../x11/libXpm/buildlink3.mk"
 CONFIGURE_ENV+=                X11BASE=${X11BASE}