Attachment 208100 Details for Bug 241066 – Fix for CVE-2019-16927, CVE-2019-9877; update WWW and master sites

[patch] Fix for CVE-2019-16927, CVE-2019-9877; update WWW and master sites

xpdf3.patch (text/plain), 1.99 KB, created by Christian Weisgerber on 2019-10-04 20:06:57 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Christian Weisgerber

Created: 2019-10-04 20:06:57 UTC

Size: 1.99 KB

patch

obsolete

>Index: Makefile
>===================================================================
>--- Makefile	(revision 513640)
>+++ Makefile	(working copy)
>@@ -2,12 +2,9 @@
> 
> PORTNAME=	xpdf
> PORTVERSION=	3.04
>-PORTREVISION=	10
>+PORTREVISION=	11
> CATEGORIES=	graphics print
>-MASTER_SITES=	http://mirrors.rit.edu/zi/ \
>-		ftp://ftp.foolabs.com/pub/xpdf/ \
>-		TEX_CTAN/support/xpdf \
>-		http://komquats.com/distfiles/
>+MASTER_SITES=	https://xpdfreader-dl.s3.amazonaws.com/old/
> .if !defined(MASTERDIR)
> PKGNAMESUFFIX=	3
> CONFLICTS_INSTALL=	xpdf4-* xpdf-*
>Index: files/patch-xpdf_TextOutputDev.cc
>===================================================================
>--- files/patch-xpdf_TextOutputDev.cc	(nonexistent)
>+++ files/patch-xpdf_TextOutputDev.cc	(working copy)
>@@ -0,0 +1,15 @@
>+--- xpdf/TextOutputDev.cc.orig	2019-10-04 19:39:06 UTC
>++++ xpdf/TextOutputDev.cc
>+@@ -2472,6 +2472,12 @@ TextBlock *TextPage::split(GList *charsA, int rot) {
>+ 
>+   //----- compute the horizontal and vertical profiles
>+ 
>++  if (xMin / splitPrecision < 0.5 * INT_MIN ||
>++      xMax / splitPrecision > 0.5 * INT_MAX ||
>++      yMin / splitPrecision < 0.5 * INT_MIN ||
>++      xMax / splitPrecision > 0.5 * INT_MAX) {
>++    return NULL;
>++  }
>+   // add some slack to the array bounds to avoid floating point
>+   // precision problems
>+   xMinI = (int)floor(xMin / splitPrecision) - 1;
>
>Property changes on: files/patch-xpdf_TextOutputDev.cc
>___________________________________________________________________
>Added: fbsd:nokeywords
>## -0,0 +1 ##
>+yes
>\ No newline at end of property
>Added: svn:eol-style
>## -0,0 +1 ##
>+native
>\ No newline at end of property
>Added: svn:mime-type
>## -0,0 +1 ##
>+text/plain
>\ No newline at end of property
>Index: pkg-descr
>===================================================================
>--- pkg-descr	(revision 513640)
>+++ pkg-descr	(working copy)
>@@ -5,4 +5,4 @@
> It can also convert PDF input to ps, text, and info formats; and
> split out fonts and images.
> 
>-WWW: http://www.foolabs.com/xpdf/
>+WWW: https://www.xpdfreader.com/

Actions: View | Diff

Attachments on bug 241066: 208100