summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorPeter Marko <peter.marko@siemens.com>2024-12-27 11:56:10 +0100
committerKhem Raj <raj.khem@gmail.com>2024-12-27 09:21:43 -0800
commit74cda1df0ead2515e8454f1054708132575ae1e3 (patch)
tree46edd92a33c4fe2540d0fcb2cff822093144b340
parent1ed73b79de3dca64d6d68dc0c57e6b7b76efb869 (diff)
downloadmeta-openembedded-74cda1df0ead2515e8454f1054708132575ae1e3.tar.gz
limwmf: upgrade 0.2.8.4 -> 0.2.13
$ git log --oneline | grep CVE f58c813 merge in fixes for libgd CVE-2019-6978 407a58b CVE-2017-6362 dabcb8c CVE-2016-10168 b691e47 CVE-2016-10167 16919b4 CVE-2016-9317 2208b48 CVE-2016-9011 f47cbdf CVE-2015-4696 b5ae5d1 CVE-2015-4695 879d6bf CVE-2015-0848+CVE-2015-4588 44f37ac CVE-2009-3546 7bd8ce0 CVE-2007-2756 cfc0916 CVE-2007-3477 5ec7547 CVE-2007-3473 fdd21b1 CVE-2007-3472 5588450 CVE-2007-0455 2c84480 CVE-2009-1364, Use-after-free vulnerability b9cc022 CVE-2006-3376 Integer overflow in player.c Adaptations: * removed patches included in new version. * extended buildpaths fix to pc file * changed paths from libdir/gtk-2 to libdir/gdk-pixbuf-2.0 Test - built imagemagick (only recipe in meta-openembedded depending on libwmf) with wmf PACKAGECONFIG. Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
-rw-r--r--meta-oe/recipes-extended/libwmf/libwmf/0001-configure-use-pkg-config-for-freetype.patch67
-rw-r--r--meta-oe/recipes-extended/libwmf/libwmf/libwmf-0.2.8.4-intoverflow.patch33
-rw-r--r--meta-oe/recipes-extended/libwmf/libwmf/libwmf-0.2.8.4-useafterfree.patch16
-rw-r--r--meta-oe/recipes-extended/libwmf/libwmf_0.2.13.bb (renamed from meta-oe/recipes-extended/libwmf/libwmf_0.2.8.4.bb)18
4 files changed, 7 insertions, 127 deletions
diff --git a/meta-oe/recipes-extended/libwmf/libwmf/0001-configure-use-pkg-config-for-freetype.patch b/meta-oe/recipes-extended/libwmf/libwmf/0001-configure-use-pkg-config-for-freetype.patch
deleted file mode 100644
index 21a6f292c8..0000000000
--- a/meta-oe/recipes-extended/libwmf/libwmf/0001-configure-use-pkg-config-for-freetype.patch
+++ /dev/null
@@ -1,67 +0,0 @@
1From 61655f82224cadb261e81f8bae111eaaa7bdf531 Mon Sep 17 00:00:00 2001
2From: Koen Kooi <koen@dominion.thruhere.net>
3Date: Wed, 6 Aug 2014 14:53:03 +0200
4Subject: [PATCH] configure: use pkg-config for freetype
5
6Upstream-Status: Pending
7Signed-off-by: Koen Kooi <koen@dominion.thruhere.net>
8---
9 configure.ac | 37 ++++++++-----------------------------
10 1 file changed, 8 insertions(+), 29 deletions(-)
11
12diff --git a/configure.ac b/configure.ac
13index 3cfe974..0055a8c 100644
14--- a/configure.ac
15+++ b/configure.ac
16@@ -399,40 +399,19 @@ AC_ARG_WITH(freetype,[ --with-freetype=DIR use freetype2 in DIR],[
17 fi
18 ])
19
20-if [ test -n "$FREETYPE_DIR" ]; then
21- AC_PATH_PROG(FREETYPE_CONFIG,freetype-config, ,[$FREETYPE_DIR/bin:$PATH])
22-else
23- AC_PATH_PROG(FREETYPE_CONFIG,freetype-config)
24-fi
25-
26-if [ test -n "$FREETYPE_CONFIG" ]; then
27- if [ test -n "$FREETYPE_DIR" ]; then
28- freetype_cflags="`$FREETYPE_CONFIG --cflags` -I$FREETYPE_DIR/include"
29- freetype_libs=`$FREETYPE_CONFIG --libs`
30- else
31- freetype_cflags=`$FREETYPE_CONFIG --cflags`
32- freetype_libs=`$FREETYPE_CONFIG --libs`
33- fi
34-else
35- if [ test -n "$FREETYPE_DIR" ]; then
36- freetype_cflags="-I$FREETYPE_DIR/include/freetype2 -I$FREETYPE_DIR/include"
37- freetype_libs="-L$FREETYPE_DIR/lib -lfreetype"
38- else
39- freetype_cflags=""
40- freetype_libs="-lfreetype"
41- fi
42-fi
43-
44-CPPFLAGS="$freetype_cflags $CPPFLAGS"
45-LDFLAGS="$LDFLAGS $freetype_libs"
46+PKG_CHECK_MODULES(FREETYPE2, freetype2,
47+ CFLAGS="$CFLAGS $FREETYPE2_CFLAGS"
48+ LDFLAGS="$LDFLAGS $FREETYPE2_LIBS",
49+ AC_MSG_ERROR([*** Unable to find FreeType2 library (http://www.freetype.org/)])
50+)
51
52 AC_CHECK_LIB(freetype,FT_Init_FreeType,[
53- WMF_FT_LDFLAGS="$freetype_libs"
54+ WMF_FT_LDFLAGS="$FREETYPE2_LIBS"
55 ],[ AC_MSG_ERROR([* * * freetype(2) is required * * *])
56 ])
57 AC_CHECK_HEADER(ft2build.h,[
58- WMF_FT_CFLAGS="$freetype_cflags"
59- WMF_FT_CONFIG_CFLAGS="$freetype_cflags"
60+ WMF_FT_CFLAGS="$FREETYPE2_CFLAGS"
61+ WMF_FT_CONFIG_CFLAGS="$FREETYPE2_CFLAGS"
62 ],[ AC_MSG_ERROR([* * * freetype(2) is required * * *])
63 ])
64
65--
661.9.0
67
diff --git a/meta-oe/recipes-extended/libwmf/libwmf/libwmf-0.2.8.4-intoverflow.patch b/meta-oe/recipes-extended/libwmf/libwmf/libwmf-0.2.8.4-intoverflow.patch
deleted file mode 100644
index 4e7cd8887a..0000000000
--- a/meta-oe/recipes-extended/libwmf/libwmf/libwmf-0.2.8.4-intoverflow.patch
+++ /dev/null
@@ -1,33 +0,0 @@
1Upstream-Status: Pending
2
3http://cvs.fedoraproject.org/viewvc/devel/libwmf/libwmf-0.2.8.4-intoverflow.patch?view=log
4
5CVE-2006-3376 libwmf integer overflow
6
7--- libwmf-0.2.8.4.orig/src/player.c 2002-12-10 19:30:26.000000000 +0000
8+++ libwmf-0.2.8.4/src/player.c 2006-07-12 15:12:52.000000000 +0100
9@@ -42,6 +42,7 @@
10 #include "player/defaults.h" /* Provides: default settings */
11 #include "player/record.h" /* Provides: parameter mechanism */
12 #include "player/meta.h" /* Provides: record interpreters */
13+#include <stdint.h>
14
15 /**
16 * @internal
17@@ -132,8 +134,14 @@
18 }
19 }
20
21-/* P->Parameters = (unsigned char*) wmf_malloc (API,(MAX_REC_SIZE(API)-3) * 2 * sizeof (unsigned char));
22- */ P->Parameters = (unsigned char*) wmf_malloc (API,(MAX_REC_SIZE(API) ) * 2 * sizeof (unsigned char));
23+ if (MAX_REC_SIZE(API) > UINT32_MAX / 2)
24+ {
25+ API->err = wmf_E_InsMem;
26+ WMF_DEBUG (API,"bailing...");
27+ return (API->err);
28+ }
29+
30+ P->Parameters = (unsigned char*) wmf_malloc (API,(MAX_REC_SIZE(API) ) * 2 * sizeof (unsigned char));
31
32 if (ERR (API))
33 { WMF_DEBUG (API,"bailing...");
diff --git a/meta-oe/recipes-extended/libwmf/libwmf/libwmf-0.2.8.4-useafterfree.patch b/meta-oe/recipes-extended/libwmf/libwmf/libwmf-0.2.8.4-useafterfree.patch
deleted file mode 100644
index 9a8cbcb508..0000000000
--- a/meta-oe/recipes-extended/libwmf/libwmf/libwmf-0.2.8.4-useafterfree.patch
+++ /dev/null
@@ -1,16 +0,0 @@
1Upstream-Status: Pending
2
3
4http://cvs.fedoraproject.org/viewvc/devel/libwmf/libwmf-0.2.8.4-useafterfree.patch?view=log
5Resolves: CVE-2009-1364
6
7--- libwmf-0.2.8.4/src/extra/gd/gd_clip.c.CVE-2009-1364-im-clip-list 2009-04-24 04:06:44.000000000 -0400
8+++ libwmf-0.2.8.4/src/extra/gd/gd_clip.c 2009-04-24 04:08:30.000000000 -0400
9@@ -70,6 +70,7 @@ void gdClipSetAdd(gdImagePtr im,gdClipRe
10 { more = gdRealloc (im->clip->list,(im->clip->max + 8) * sizeof (gdClipRectangle));
11 if (more == 0) return;
12 im->clip->max += 8;
13+ im->clip->list = more;
14 }
15 im->clip->list[im->clip->count] = (*rect);
16 im->clip->count++;
diff --git a/meta-oe/recipes-extended/libwmf/libwmf_0.2.8.4.bb b/meta-oe/recipes-extended/libwmf/libwmf_0.2.13.bb
index 5e530b35de..7a82f6b4b6 100644
--- a/meta-oe/recipes-extended/libwmf/libwmf_0.2.8.4.bb
+++ b/meta-oe/recipes-extended/libwmf/libwmf_0.2.13.bb
@@ -16,21 +16,17 @@ inherit features_check autotools pkgconfig
16 16
17REQUIRED_DISTRO_FEATURES = "x11" 17REQUIRED_DISTRO_FEATURES = "x11"
18 18
19SRC_URI = "git://github.com/caolanm/libwmf.git;protocol=https;branch=master \ 19SRC_URI = "git://github.com/caolanm/libwmf.git;protocol=https;branch=master"
20 file://libwmf-0.2.8.4-intoverflow.patch \ 20SRCREV = "9e4737f2293c0d127bda92e5b01896df10571424"
21 file://libwmf-0.2.8.4-useafterfree.patch \
22 file://0001-configure-use-pkg-config-for-freetype.patch \
23 "
24SRCREV = "27b4aaf8cf653b4cd2ebe14717ffa9e76560485e"
25 21
26S = "${WORKDIR}/git" 22S = "${WORKDIR}/git"
27 23
28do_install:append() { 24do_install:append() {
29 sed -i -e 's@${RECIPE_SYSROOT}@@g' ${D}${bindir}/libwmf-config 25 sed -i -e 's@${RECIPE_SYSROOT}@@g' ${D}${bindir}/libwmf-config ${D}${libdir}/pkgconfig/libwmf.pc
30} 26}
31 27
32FILES:${PN}-dbg += "${libdir}/gtk-2.0/2.10.0/loaders/.debug" 28FILES:${PN}-dbg += "${libdir}/gdk-pixbuf-2.0/2.10.0/loaders/.debug"
33FILES:${PN}-dev += "${libdir}/gtk-2.0/2.10.0/loaders/*.la" 29FILES:${PN}-dev += "${libdir}/gdk-pixbuf-2.0/2.10.0/loaders/*.la"
34FILES:${PN}-staticdev += "${libdir}/gtk-2.0/2.10.0/loaders/*.a" 30FILES:${PN}-staticdev += "${libdir}/gdk-pixbuf-2.0/2.10.0/loaders/*.a"
35FILES:${PN} += "${libdir}/gtk-2.0/2.10.0/loaders/*.so" 31FILES:${PN} += "${libdir}/gdk-pixbuf-2.0/2.10.0/loaders/*.so"
36 32