pool/gd
SHA256
4
0
Fork 1
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gd?expand=0&rev=5

Browse Source
This commit is contained in:
OBS User unknown 2007-07-10 12:34:15 +00:00 committed by Git OBS Bridge
parent 38bd119cba
commit b9a6e5a681
7 changed files with 63 additions and 36 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
gd-2.0.34.tar.bz2
View File

@ -1,3 +0,0 @@
version https://git-lfs.github.com/spec/v1
oid sha256:66baa531a860ca3e071d47eec7c0823c534a8a4dadf4cba6d17eeb6d4159d22f
size 1135372

0
gd-2.0.34-warn.patch → gd-2.0.35-warn.patch
View File

3
gd-2.0.35.tar.bz2 Normal file
View File

@ -0,0 +1,3 @@
version https://git-lfs.github.com/spec/v1
oid sha256:bf222490749d2a9a9ac3593b01eb55aed98461ff81202414707f61b42aa300f9
size 1212730

15
gd-png-loop-CVE-2007-2756.patch
View File

@ -1,15 +0,0 @@
--- gd_png.c 1 Apr 2007 20:41:01 -0000 1.21.2.1
+++ gd_png.c 16 May 2007 19:06:11 -0000
@@ -81,7 +81,11 @@ gdPngErrorHandler (png_structp png_ptr,
static void
gdPngReadData (png_structp png_ptr, png_bytep data, png_size_t length)
{
- gdGetBuf (data, length, (gdIOCtx *) png_get_io_ptr (png_ptr));
+ int check;
+ check = gdGetBuf (data, length, (gdIOCtx *) png_get_io_ptr (png_ptr));
+ if (check != length) {
+ png_error(png_ptr, "Read Error: truncated data");
+ }
}
static void

15
gd-security.patch
View File

@ -1,22 +1,13 @@
--- gd.c
+++ gd.c
@@ -147,6 +151,7 @@
@@ -147,6 +147,7 @@
}
memset (im, 0, sizeof (gdImage));
if (overflow2(sizeof (int *), sy)) {
+ gdFree(im);
return 0;
}
im->tpixels = (int **) gdMalloc (sizeof (int *) * sy);
@@ -2757,6 +2762,8 @@
}
bytes = (w * h / 8) + 1;
im = gdImageCreate (w, h);
+ if (!im)
+ return NULL;
gdImageColorAllocate (im, 255, 255, 255);
gdImageColorAllocate (im, 0, 0, 0);
x = 0;
--- gd_gd.c
+++ gd_gd.c
@@ -149,6 +149,8 @@

28
gd.changes
View File

@ -1,3 +1,31 @@
-------------------------------------------------------------------
Mon Jul 9 09:09:51 CEST 2007 - anosek@suse.cz
- updated to version 2.0.35
* Fix valgrind error in gdImageFillTiled (Nuno Lopes)
* Add missing custom cmake macros (required for the tests suite)
* Avoid signature buffer copy in gd_gif_c (Nuno Lopes)
* Race condition in gdImageStringFTEx (Antony Dogval, Pierre
Scott MacVicar)
* Reading GIF images is not thread safe (static usage in private
functions) (Roman Nemecek, Nuno Lopes, Pierre)
* GIF Local palette is read twice
* GIF, Use local frame dimension when possible instead of the
logical screen size (Pierre)
* GIF, do not try to use the global colmap if it does not exist
(Nuno Lopes, Pierre)
* gdImageAALine draws axis lines with two pixels width (Pierre)
* gdImageArc CPU usage with large angles (Pierre)
* gdImageFilledRectangle regression fixed when used with reversed
edges (Pierre)
* Possible infinite loop in libgd/gd_png.c, flaw found by Xavier
Roche (Pierre)
* Fixed segfault when an invalid color index is present in a GIF
image data, reported by Elliot <wccode at gmail dot com> (Pierre)
* Possible integer overflow in gdImageCreateTrueColor (Pierre)
gdImageCreateXbm can crash if gdImageCreate fails (Pierre)
- dropped obsolete patches (png-loop-CVE-2007-2756.patch)
-------------------------------------------------------------------
Tue May 29 17:16:32 CEST 2007 - nadvornik@suse.cz

35
gd.spec
View File

@ -1,5 +1,5 @@
#
# spec file for package gd (Version 2.0.34)
# spec file for package gd (Version 2.0.35)
#
# Copyright (c) 2007 SUSE LINUX Products GmbH, Nuernberg, Germany.
# This file and all modifications and additions to the pristine
@ -16,9 +16,9 @@ License: X11/MIT
Group: System/Libraries
Obsoletes: gdlib
Autoreqprov: on
Version: 2.0.34
Release: 21
URL: http://www.boutell.com/gd/
Version: 2.0.35
Release: 1
URL: http://www.libgd.org/
Summary: A Drawing Library for Programs That Use PNG and JPEG Output
Source: gd-%{version}.tar.bz2
Patch0: gd-%{version}-warn.patch
@ -27,7 +27,6 @@ Patch2: gd-format.patch
Patch3: gd-aliasing.patch
Patch4: gd-security.patch
Patch6: gd-fontpath.patch
Patch7: gd-png-loop-CVE-2007-2756.patch
BuildRoot: %{_tmppath}/%{name}-%{version}-build
%description
@ -69,7 +68,6 @@ Authors:
%patch3
%patch4
%patch6
%patch7
%build
%{suse_update_config -f}
@ -138,6 +136,31 @@ rm -rf $RPM_BUILD_ROOT
%{_libdir}/*.la
%changelog
* Mon Jul 09 2007 - anosek@suse.cz
- updated to version 2.0.35
* Fix valgrind error in gdImageFillTiled (Nuno Lopes)
* Add missing custom cmake macros (required for the tests suite)
* Avoid signature buffer copy in gd_gif_c (Nuno Lopes)
* Race condition in gdImageStringFTEx (Antony Dogval, Pierre
Scott MacVicar)
* Reading GIF images is not thread safe (static usage in private
functions) (Roman Nemecek, Nuno Lopes, Pierre)
* GIF Local palette is read twice
* GIF, Use local frame dimension when possible instead of the
logical screen size (Pierre)
* GIF, do not try to use the global colmap if it does not exist
(Nuno Lopes, Pierre)
* gdImageAALine draws axis lines with two pixels width (Pierre)
* gdImageArc CPU usage with large angles (Pierre)
* gdImageFilledRectangle regression fixed when used with reversed
edges (Pierre)
* Possible infinite loop in libgd/gd_png.c, flaw found by Xavier
Roche (Pierre)
* Fixed segfault when an invalid color index is present in a GIF
image data, reported by Elliot <wccode at gmail dot com> (Pierre)
* Possible integer overflow in gdImageCreateTrueColor (Pierre)
gdImageCreateXbm can crash if gdImageCreate fails (Pierre)
- dropped obsolete patches (png-loop-CVE-2007-2756.patch)
* Tue May 29 2007 - nadvornik@suse.cz
- fixed infinite loop on truncated png images
CVE-2007-2756 [#276525]