CVS commit: pkgsrc/archivers/libmspack

["Thomas Klausner" <wiz%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   wiz
Date:           Thu Jul 26 08:37:40 UTC 2018

Modified Files:
        pkgsrc/archivers/libmspack: Makefile PLIST distinfo

Log Message:
libmspack: update to 0.7alpha.

2018-04-26  Stuart Caie <kyzer%cabextract.org.uk@localhost>

        * read_chunk(): the test that chunk numbers are in bounds was off
        by one, so read_chunk() returned a pointer taken from outside
        allocated memory that usually crashes libmspack when accessed.
        Thanks to Hanno Böck for finding the issue and providing a sample.

        * chmd_read_headers(): reject files with blank filenames. Thanks
        again to Hanno Böck for finding the issue and providing a sample file.

2018-02-06  Stuart Caie <kyzer%cabextract.org.uk@localhost>

        * chmd.c: fixed an off-by-one error in the TOLOWER() macro, reported
        by Dmitry Glavatskikh. Thanks Dmitry!

2017-11-26  Stuart Caie <kyzer%cabextract.org.uk@localhost>

        * kwajd_read_headers(): fix up the logic of reading the filename and
        extension headers to avoid a one or two byte overwrite. Thanks to
        Jakub Wilk for finding the issue.

        * test/kwajd_test.c: add tests for KWAJ filename.ext handling

2017-10-16  Stuart Caie <kyzer%cabextract.org.uk@localhost>

        * test/cabd_test.c: update the short string tests to expect not only
        MSPACK_ERR_DATAFORMAT but also MSPACK_ERR_READ, because of the recent
        change to cabd_read_string(). Thanks to maitreyee43 for spotting this.

        * test/msdecompile_md5: update the setup instructions for this script,
        and also change the script so it works with current Wine. Again, thanks
        to maitreyee43 for trying to use it and finding it not working.

2017-08-13  Stuart Caie <kyzer%cabextract.org.uk@localhost>

        * src/chmextract.c: support MinGW one-arg mkdir(). Thanks to AntumDeluge
        for reporting this.

2017-08-13  Stuart Caie <kyzer%cabextract.org.uk@localhost>

        * read_spaninfo(): a CHM file can have no ResetTable and have a
        negative length in SpanInfo, which then feeds a negative output length
        to lzxd_init(), which then sets frame_size to a value of your choosing,
        the lower 32 bits of output length, larger than LZX_FRAME_SIZE. If the
        first LZX block is uncompressed, this writes data beyond the end of the
        window. This issue was raised by ClamAV as CVE-2017-6419.  Thanks to
        Sebastian Andrzej Siewior for finding this by chance!

        * lzxd_init(), lzxd_set_output_length(), mszipd_init(): due to the issue
        mentioned above, these functions now reject negative lengths

2017-08-05  Stuart Caie <kyzer%cabextract.org.uk@localhost>

        * cabd_read_string(): add missing error check on result of read().
        If an mspack_system implementation returns an error, it's interpreted
        as a huge positive integer, which leads to reading past the end of the
        stack-based buffer. Thanks to Sebastian Andrzej Siewior for explaining
        the problem. This issue was raised by ClamAV as CVE-2017-11423

2016-04-20  Stuart Caie <kyzer%cabextract.org.uk@localhost>

        * configure.ac: change my email address to kyzer%cabextract.org.uk@localhost

2015-05-10  Stuart Caie <kyzer%4u.net@localhost>

        * cabd_read_string(): correct rejection of empty strings. Thanks to
        Hanno Böck for finding the issue and providing a sample file.

2015-05-10  Stuart Caie <kyzer%4u.net@localhost>

        * Makefile.am: Add subdir-objects option as suggested by autoreconf.

        * configure.ac: Add AM_PROG_AR as suggested by autoreconf.

2015-01-29  Stuart Caie <kyzer%4u.net@localhost>

        * system.h: if C99 inttypes.h exists, use its PRI{d,u}{32,64} macros.
        Thanks to Johnathan Kollasch for the suggestion.


To generate a diff of this commit:
cvs rdiff -u -r1.2 -r1.3 pkgsrc/archivers/libmspack/Makefile \
    pkgsrc/archivers/libmspack/distinfo
cvs rdiff -u -r1.1 -r1.2 pkgsrc/archivers/libmspack/PLIST

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/archivers/libmspack/Makefile
diff -u pkgsrc/archivers/libmspack/Makefile:1.2 pkgsrc/archivers/libmspack/Makefile:1.3
--- pkgsrc/archivers/libmspack/Makefile:1.2     Tue Aug  1 14:58:51 2017
+++ pkgsrc/archivers/libmspack/Makefile Thu Jul 26 08:37:40 2018
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.2 2017/08/01 14:58:51 wiz Exp $
+# $NetBSD: Makefile,v 1.3 2018/07/26 08:37:40 wiz Exp $
 
-DISTNAME=      libmspack-0.5alpha
+DISTNAME=      libmspack-0.7alpha
 CATEGORIES=    devel
 MASTER_SITES=  https://www.cabextract.org.uk/libmspack/
 
Index: pkgsrc/archivers/libmspack/distinfo
diff -u pkgsrc/archivers/libmspack/distinfo:1.2 pkgsrc/archivers/libmspack/distinfo:1.3
--- pkgsrc/archivers/libmspack/distinfo:1.2     Thu Mar 23 17:06:45 2017
+++ pkgsrc/archivers/libmspack/distinfo Thu Jul 26 08:37:40 2018
@@ -1,6 +1,6 @@
-$NetBSD: distinfo,v 1.2 2017/03/23 17:06:45 joerg Exp $
+$NetBSD: distinfo,v 1.3 2018/07/26 08:37:40 wiz Exp $
 
-SHA1 (libmspack-0.5alpha.tar.gz) = 226f19b1fc58e820671a1749983b06896e108cc4
-RMD160 (libmspack-0.5alpha.tar.gz) = b1aae1671cfa5fa7b830bed6255d52da513337e4
-SHA512 (libmspack-0.5alpha.tar.gz) = 6d4efa0f43c43185ef91c97c1518aa70f09109d7332cda7e12019e146ec9cb0f2065fb1b57683b48bae9a7eaf8e82eb94096644c6d25c56d45878f630b719231
-Size (libmspack-0.5alpha.tar.gz) = 654193 bytes
+SHA1 (libmspack-0.7alpha.tar.gz) = 47d03d757c1cc22fa1203bf6ca1f54af4d181038
+RMD160 (libmspack-0.7alpha.tar.gz) = 0e2ead79bc744d72ae301701f3ce1e9e0dcdab9e
+SHA512 (libmspack-0.7alpha.tar.gz) = 0b59e4bb90bdab3eb3fcb9cff7e85ce0f3f2878aac259fa8b1ebed9ef14d2c03b33072dd5645f8e72f0c9b89a73c9a27ef6d86aed2aafb517ac43b6bc912c75a
+Size (libmspack-0.7alpha.tar.gz) = 486173 bytes

Index: pkgsrc/archivers/libmspack/PLIST
diff -u pkgsrc/archivers/libmspack/PLIST:1.1 pkgsrc/archivers/libmspack/PLIST:1.2
--- pkgsrc/archivers/libmspack/PLIST:1.1        Sun Oct  9 03:11:25 2016
+++ pkgsrc/archivers/libmspack/PLIST    Thu Jul 26 08:37:40 2018
@@ -1,4 +1,8 @@
-@comment $NetBSD: PLIST,v 1.1 2016/10/09 03:11:25 ryoon Exp $
+@comment $NetBSD: PLIST,v 1.2 2018/07/26 08:37:40 wiz Exp $
+bin/cabrip
+bin/chmextract
+bin/msexpand
+bin/oabextract
 include/mspack.h
 lib/libmspack.la
 lib/pkgconfig/libmspack.pc