Mercurial > vanilla
changeset 122:05d3be6e849b
core/bzip2: initial import: closes #1014
author | David Demelier <markand@malikania.fr> |
---|---|
date | Sun, 10 Mar 2019 13:56:10 +0100 |
parents | f2c94d482098 |
children | 391d5093e930 |
files | core/bzip2/CVE-2016-3189.patch core/bzip2/bzip2.info core/bzip2/bzip2.sh |
diffstat | 3 files changed, 78 insertions(+), 0 deletions(-) [+] |
line wrap: on
line diff
--- /dev/null Thu Jan 01 00:00:00 1970 +0000 +++ b/core/bzip2/CVE-2016-3189.patch Sun Mar 10 13:56:10 2019 +0100 @@ -0,0 +1,12 @@ +diff --git a/bzip2recover.c b/bzip2recover.c +index f9de049..d159c92 100644 +--- a/bzip2recover.c ++++ b/bzip2recover.c +@@ -457,6 +457,7 @@ Int32 main ( Int32 argc, Char** argv ) + bsPutUChar ( bsWr, 0x50 ); bsPutUChar ( bsWr, 0x90 ); + bsPutUInt32 ( bsWr, blockCRC ); + bsClose ( bsWr ); ++ outFile = NULL; + } + if (wrBlock >= rbCtr) break; + wrBlock++;
--- /dev/null Thu Jan 01 00:00:00 1970 +0000 +++ b/core/bzip2/bzip2.info Sun Mar 10 13:56:10 2019 +0100 @@ -0,0 +1,23 @@ +#!/bin/sh +# +# Copyright (c) 2019 David Demelier <markand@malikania.fr> +# +# Permission to use, copy, modify, and/or distribute this software for any +# purpose with or without fee is hereby granted, provided that the above +# copyright notice and this permission notice appear in all copies. +# +# THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES +# WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF +# MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR +# ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES +# WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN +# ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF +# OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. +# + +PKGNAME=bzip2 +PKGVERSION=1.0.6 +PKGREVISION=1 +PKGLICENSE="BSD" +PKGSUMMARY="data compression program and library" +PKGDOWNLOAD="https://downloads.sourceforge.net/$PKGNAME/$PKGNAME-$PKGVERSION.tar.gz"
--- /dev/null Thu Jan 01 00:00:00 1970 +0000 +++ b/core/bzip2/bzip2.sh Sun Mar 10 13:56:10 2019 +0100 @@ -0,0 +1,43 @@ +#!/bin/sh +# +# Copyright (c) 2019 David Demelier <markand@malikania.fr> +# +# Permission to use, copy, modify, and/or distribute this software for any +# purpose with or without fee is hereby granted, provided that the above +# copyright notice and this permission notice appear in all copies. +# +# THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES +# WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF +# MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR +# ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES +# WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN +# ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF +# OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. +# + +: ${CC:=gcc} +: ${CFLAGS:=-O2} + +source ./bzip2.info + +set -ex + +rm -rf $PKGNAME-$PKGVERSION +tar xvaf $PKGNAME-$PKGVERSION.tar.gz +pushd $PKGNAME-$PKGVERSION + +if [ "$(uname -m)" = "x86_64" ]; then + CFLAGS="-fPIC $CFLAGS" +fi + +sed -i -e 's/$(PREFIX)/$(DESTDIR)$(PREFIX)/g' Makefile +patch -p1 < ../CVE-2016-3189.patch +make CC="$CC" CFLAGS="$CFLAGS" -f Makefile-libbz2_so all +make install DESTDIR=$DESTDIR PREFIX=/usr +install -D libbz2.so.$PKGVERSION $DESTDIR/usr/lib/libbz2.so.$PKGVERSION +ln -s libbz2.so.$PKGVERSION $DESTDIR/usr/lib/libbz2.so +ln -s libbz2.so.$PKGVERSION $DESTDIR/usr/lib/libbz2.so.${PKGVERSION%%.*} +rm -f $DESTDIR/usr/lib/libbz2.a + +popd +rm -rf $PKGNAME-$PKGVERSION