snailed
/
void-packages
2
0
Fork 0
Code Issues 1 Pull Requests 3 Actions Activity

autotrace: remove, dead upstream, insecure, unmaintained. 

See:
  https://www.openwall.com/lists/oss-security/2017/05/23/11
  https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=863210

autotrace(autotrace)0.31.1:
  CVE-2013-19536.8
  CVE-2016-73924.3
  CVE-2017-91517.5
  CVE-2017-91527.5
  CVE-2017-91537.5
  CVE-2017-91545.0
  CVE-2017-91555.0
  CVE-2017-91565.0
  CVE-2017-91575.0
  CVE-2017-91585.0
  CVE-2017-91595.0
  CVE-2017-91607.5
  CVE-2017-91617.5
  CVE-2017-91627.5
  CVE-2017-91637.5
  CVE-2017-91647.5
  CVE-2017-91657.5
  CVE-2017-91667.5
  CVE-2017-91677.5
  CVE-2017-91687.5
  CVE-2017-91697.5
  CVE-2017-91707.5
  CVE-2017-91717.5
  CVE-2017-91727.5
  CVE-2017-91737.5
  CVE-2017-91745.0
  CVE-2017-91755.0
  CVE-2017-91765.0
  CVE-2017-91775.0
  CVE-2017-91785.0
  CVE-2017-91795.0
  CVE-2017-91805.0
  CVE-2017-91815.0
  CVE-2017-91825.0
  CVE-2017-91837.5
  CVE-2017-91847.5
  CVE-2017-91857.5
  CVE-2017-91867.5
  CVE-2017-91877.5
  CVE-2017-91887.5
  CVE-2017-91895.0
  CVE-2017-91905.0
  CVE-2017-91917.5
  CVE-2017-91927.5
  CVE-2017-91937.5
  CVE-2017-91947.5
  CVE-2017-91957.5
  CVE-2017-91967.5
  CVE-2017-91977.5
  CVE-2017-91987.5
  CVE-2017-91997.5
  CVE-2017-92007.5
This commit is contained in:
maxice8 2018-10-04 19:56:09 -03:00 committed by Enno Boland
parent d1361ee992
commit 389bbce514
3 changed files with 0 additions and 98 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
srcpkgs/autotrace-devel
View File

@ -1 +0,0 @@
autotrace

65
srcpkgs/autotrace/patches/libpng-1.5.patch
View File

@ -1,65 +0,0 @@
More information on this patch:
http://sourceforge.net/mailarchive/forum.php?thread_name=01e601cbc22e%24f45d7200%24dd185600%24%40acm.org&forum_name=png-mng-implement
$NetBSD$
Fix build with png-1.5.
--- input-png.c.orig 2002-10-10 20:44:14.000000000 +0000
+++ input-png.c
@@ -42,17 +42,17 @@ static png_bytep * read_png(png_structp
static void handle_warning(png_structp png, const at_string message) {
LOG1("PNG warning: %s", message);
- at_exception_warning((at_exception_type *)png->error_ptr,
+ at_exception_warning((at_exception_type *)png_get_error_ptr(png),
message);
- /* at_exception_fatal((at_exception_type *)at_png->error_ptr,
+ /* at_exception_fatal((at_exception_type *)png_get_error_ptr(at_png),
"PNG warning"); */
}
static void handle_error(png_structp png, const at_string message) {
LOG1("PNG error: %s", message);
- at_exception_fatal((at_exception_type *)png->error_ptr,
+ at_exception_fatal((at_exception_type *)png_get_error_ptr(png),
message);
- /* at_exception_fatal((at_exception_type *)at_png->error_ptr,
+ /* at_exception_fatal((at_exception_type *)png_get_error_ptr(at_png),
"PNG error"); */
}
@@ -157,8 +157,8 @@ read_png(png_structp png_ptr, png_infop
png_set_strip_16(png_ptr);
png_set_packing(png_ptr);
- if ((png_ptr->bit_depth < 8) ||
- (png_ptr->color_type == PNG_COLOR_TYPE_PALETTE) ||
+ if ((png_get_bit_depth(png_ptr, info_ptr) < 8) ||
+ (png_get_color_type(png_ptr, info_ptr) == PNG_COLOR_TYPE_PALETTE) ||
(png_get_valid(png_ptr, info_ptr, PNG_INFO_tRNS)))
png_set_expand(png_ptr);
@@ -181,20 +181,10 @@ read_png(png_structp png_ptr, png_infop
PNG_BACKGROUND_GAMMA_FILE, 1, 1.0);
} else
png_set_strip_alpha(png_ptr);
+ png_set_interlace_handling(png_ptr);
png_read_update_info(png_ptr, info_ptr);
-
- info_ptr->row_pointers = (png_bytepp)png_malloc(png_ptr,
- info_ptr->height * sizeof(png_bytep));
-#ifdef PNG_FREE_ME_SUPPORTED
- info_ptr->free_me |= PNG_FREE_ROWS;
-#endif
- for (row = 0; row < (int)info_ptr->height; row++)
- info_ptr->row_pointers[row] = (png_bytep)png_malloc(png_ptr,
- png_get_rowbytes(png_ptr, info_ptr));
-
- png_read_image(png_ptr, info_ptr->row_pointers);
- info_ptr->valid |= PNG_INFO_IDAT;
+ png_read_png(png_ptr, info_ptr, PNG_TRANSFORM_IDENTITY, NULL);
png_read_end(png_ptr, info_ptr);
return png_get_rows(png_ptr, info_ptr);
}

32
srcpkgs/autotrace/template
View File

@ -1,32 +0,0 @@
# Template file for 'autotrace'
pkgname=autotrace
version=0.31.1
revision=9
build_style=gnu-configure
hostmakedepends="pkg-config libtool automake"
makedepends="libmagick6-devel libpng-devel libxml2-devel libXext-devel"
short_desc="Converts bitmap image data into vector graphics"
maintainer="Christian Neukirchen <chneukirchen@gmail.com>"
license="GPL-3"
homepage="http://autotrace.sourceforge.net/"
distfiles="${SOURCEFORGE_SITE}/${pkgname}/${pkgname}-${version}.tar.gz"
checksum=5a1a923c3335dfd7cbcccb2bbd4cc3d68cafe7713686a2f46a1591ed8a92aff6
pre_configure() {
libtoolize -f
sed -i '/AM_PATH_PSTOEDIT/d' configure.in
autoreconf -fi
}
autotrace-devel_package() {
depends="${sourcepkg}>=${version}_${revision}"
short_desc+=" -- development files"
pkg_install() {
vmove usr/include
vmove "usr/lib/*.a"
vmove "usr/lib/*.so"
vmove usr/lib/pkgconfig
vmove usr/bin/autotrace-config
vmove usr/share/aclocal
}
}