[pkgsrc/trunk]: pkgsrc/print/luatex luatex: writet1 protection against buffer...

[markd <markd%pkgsrc.org@localhost>]

details:   https://anonhg.NetBSD.org/pkgsrc/rev/b99aef44db8a
branches:  trunk
changeset: 314592:b99aef44db8a
user:      markd <markd%pkgsrc.org@localhost>
date:      Thu Nov 01 10:59:15 2018 +0000

description:
luatex: writet1 protection against buffer overflow

diffstat:

 print/luatex/Makefile                                          |   4 +-
 print/luatex/distinfo                                          |   3 +-
 print/luatex/patches/patch-texk_web2c_luatexdir_font_writet1.w |  18 ++++++++++
 3 files changed, 22 insertions(+), 3 deletions(-)

diffs (52 lines):

diff -r 50b0327de660 -r b99aef44db8a print/luatex/Makefile
--- a/print/luatex/Makefile     Thu Nov 01 10:55:57 2018 +0000
+++ b/print/luatex/Makefile     Thu Nov 01 10:59:15 2018 +0000
@@ -1,8 +1,8 @@
-# $NetBSD: Makefile,v 1.76 2018/09/02 21:32:44 wiz Exp $
+# $NetBSD: Makefile,v 1.77 2018/11/01 10:59:15 markd Exp $
 
 DISTNAME=      texlive-20180414-source
 PKGNAME=       luatex-1.07.0
-PKGREVISION=   5
+PKGREVISION=   6
 CATEGORIES=    print
 MASTER_SITES=  ftp://tug.org/historic/systems/texlive/2018/
 EXTRACT_SUFX=  .tar.xz
diff -r 50b0327de660 -r b99aef44db8a print/luatex/distinfo
--- a/print/luatex/distinfo     Thu Nov 01 10:55:57 2018 +0000
+++ b/print/luatex/distinfo     Thu Nov 01 10:59:15 2018 +0000
@@ -1,4 +1,4 @@
-$NetBSD: distinfo,v 1.30 2018/05/13 12:46:27 markd Exp $
+$NetBSD: distinfo,v 1.31 2018/11/01 10:59:15 markd Exp $
 
 SHA1 (texlive-20180414-source.tar.xz) = 81bdd9999b6ab860d1d3c388cf27062aba960255
 RMD160 (texlive-20180414-source.tar.xz) = 0ff63bbd7f8a0fb6417089f5d1ae1e4124a1dd95
@@ -7,5 +7,6 @@
 SHA1 (patch-ac) = 1ee83833a03eace2eada892130ddb2198e829f3d
 SHA1 (patch-libs_luajit_LuaJIT-src_src_host_buildvm__asm.c) = 34fa742ed696f97df637c5086bf1faf3d718cb69
 SHA1 (patch-libs_luajit_LuaJIT-src_src_vm__x86.dasc) = 491d33adbbaab8b2b81a65a8d7ba30aee775b75f
+SHA1 (patch-texk_web2c_luatexdir_font_writet1.w) = c5d9b0bf411ff67028cbeee629bebc95f05c94e3
 SHA1 (patch-texk_web2c_luatexdir_image_pdftoepdf.w) = 9b6d637abe2fbb246a2435caf8aec5070abd1c5f
 SHA1 (patch-texk_web2c_luatexdir_lua_lepdflib.cc) = 24052cbff1a087badbeefe8b58bf7ce97e4ab4fb
diff -r 50b0327de660 -r b99aef44db8a print/luatex/patches/patch-texk_web2c_luatexdir_font_writet1.w
--- /dev/null   Thu Jan 01 00:00:00 1970 +0000
+++ b/print/luatex/patches/patch-texk_web2c_luatexdir_font_writet1.w    Thu Nov 01 10:59:15 2018 +0000
@@ -0,0 +1,18 @@
+$NetBSD: patch-texk_web2c_luatexdir_font_writet1.w,v 1.1 2018/11/01 10:59:15 markd Exp $
+
+writet1 protection against buffer overflow
+
+git-svn-id: svn://tug.org/texlive/trunk/Build/source@48697 c570f23f-e606-0410-a88d-b1316a301751
+
+--- texk/web2c/luatexdir/font/writet1.w.orig   2016-11-25 18:24:34.000000000 +0000
++++ texk/web2c/luatexdir/font/writet1.w
+@@ -1625,7 +1625,9 @@ static void t1_check_unusual_charstring(
+     if (sscanf(p, "%i", &i) != 1) {
+         strcpy(t1_buf_array, t1_line_array);
+         t1_getline();
++      alloc_array(t1_buf, strlen(t1_line_array) + strlen(t1_buf_array) + 1, T1_BUF_SIZE);
+         strcat(t1_buf_array, t1_line_array);
++      alloc_array(t1_line, strlen(t1_buf_array) + 1, T1_BUF_SIZE);
+         strcpy(t1_line_array, t1_buf_array);
+         t1_line_ptr = eol(t1_line_array);
+     }