Patch by Tim Yamin to fix security issues #121605.

Package-Manager: portage-2.1_pre4-r1

5 files changed, 127 insertions, 3 deletions

diff --git a/games-action/bomberclone/ChangeLog b/games-action/bomberclone/ChangeLog
index 5d006b4e5e47..4b9fb9f04bef 100644
--- a/games-action/bomberclone/ChangeLog
+++ b/games-action/bomberclone/ChangeLog
@@ -1,6 +1,13 @@
 # ChangeLog for games-action/bomberclone
-# Copyright 2000-2006 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/games-action/bomberclone/ChangeLog,v 1.19 2006/01/13 22:08:31 genstef Exp $
+# Copyright 1999-2006 Gentoo Foundation; Distributed under the GPL v2
+# $Header: /var/cvsroot/gentoo-x86/games-action/bomberclone/ChangeLog,v 1.20 2006/02/12 22:02:53 vapier Exp $
+
+*bomberclone-0.11.6.2-r1 (12 Feb 2006)
+
+  12 Feb 2006; Mike Frysinger <vapier@gentoo.org>
+  +files/bomberclone-0.11.6.2-fix-kaboom.patch,
+  +bomberclone-0.11.6.2-r1.ebuild:
+  Patch by Tim Yamin to fix security issues #121605.
 
   13 Jan 2006; Stefan Schweizer <genstef@gentoo.org>
   bomberclone-0.11.6.2.ebuild:
diff --git a/games-action/bomberclone/Manifest b/games-action/bomberclone/Manifest
index c25270fc88c6..3a95425abdce 100644
--- a/games-action/bomberclone/Manifest
+++ b/games-action/bomberclone/Manifest
@@ -1,4 +1,31 @@
-MD5 8011ddd0a84d8313815553b5206a21b6 ChangeLog 2581
+-----BEGIN PGP SIGNED MESSAGE-----
+Hash: SHA1
+
+MD5 74e997c3889251ee5d7afca9a6cbf780 ChangeLog 2807
+RMD160 28c247f7ed711685de823db41a74fef3800a79c8 ChangeLog 2807
+SHA256 66e93085435968ff382ae19b29418a0ea06ca849e451805b95964ee11c3e8be8 ChangeLog 2807
+MD5 8648be9da694042dcc92bdacea6fa061 bomberclone-0.11.6.2-r1.ebuild 1296
+RMD160 9b1860cecbff6df20dbab7c167fa9ceb7ace28a8 bomberclone-0.11.6.2-r1.ebuild 1296
+SHA256 9fc0c9c3700dfec158ae93773e0ce4919e1b520081e266825ff097771bfb70bd bomberclone-0.11.6.2-r1.ebuild 1296
 MD5 d78e8491b5858e0c52032d7afcaadfe1 bomberclone-0.11.6.2.ebuild 1241
+RMD160 66df9db82667de8894b3cf06758b4981ca274729 bomberclone-0.11.6.2.ebuild 1241
+SHA256 3e2100d0c2001ae012f0001652d8e8cb3142db5349eb2e9dac68a7172db9bf00 bomberclone-0.11.6.2.ebuild 1241
+MD5 cf00be379440775b274915a122dfe2c1 files/bomberclone-0.11.6.2-fix-kaboom.patch 1333
+RMD160 ccf098c585a3b35083f78e313902a91aac20287e files/bomberclone-0.11.6.2-fix-kaboom.patch 1333
+SHA256 2036451da14f5dba93ae569223bfbf9d24326c483c9beb628231870ce048d4e6 files/bomberclone-0.11.6.2-fix-kaboom.patch 1333
 MD5 a2e7f79d1bc6b86d7c48e712d469eba9 files/digest-bomberclone-0.11.6.2 73
+RMD160 df9906fbfc0a3db4ab7d77d8b5b9d1605592f68b files/digest-bomberclone-0.11.6.2 73
+SHA256 4983de79346a5157156954bbe52eac33837c6525302d90172d1f519d4da99643 files/digest-bomberclone-0.11.6.2 73
+MD5 a2e7f79d1bc6b86d7c48e712d469eba9 files/digest-bomberclone-0.11.6.2-r1 73
+RMD160 df9906fbfc0a3db4ab7d77d8b5b9d1605592f68b files/digest-bomberclone-0.11.6.2-r1 73
+SHA256 4983de79346a5157156954bbe52eac33837c6525302d90172d1f519d4da99643 files/digest-bomberclone-0.11.6.2-r1 73
 MD5 f17b9b8fa07a38914fe1c03268f51678 metadata.xml 158
+RMD160 cbd9984bb6b426c8c9cee5022fe0a26261612fea metadata.xml 158
+SHA256 1423a4fdd4a79b1728a2056d9e300f7e1074253095d82726218d9e9b953888a3 metadata.xml 158
+-----BEGIN PGP SIGNATURE-----
+Version: GnuPG v1.4.2 (GNU/Linux)
+
+iD8DBQFD77Cp2+ySkm8kpY0RAra1AJwLAjQUgTwerUy+PCdLeRtLIWaoHQCfRZFK
+8BPWlyN78uuBtOdQ8GhXjTw=
+=r4BV
+-----END PGP SIGNATURE-----
diff --git a/games-action/bomberclone/bomberclone-0.11.6.2-r1.ebuild b/games-action/bomberclone/bomberclone-0.11.6.2-r1.ebuild
new file mode 100644
index 000000000000..4d19e980b768
--- /dev/null
+++ b/games-action/bomberclone/bomberclone-0.11.6.2-r1.ebuild
@@ -0,0 +1,50 @@
+# Copyright 1999-2006 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/games-action/bomberclone/bomberclone-0.11.6.2-r1.ebuild,v 1.1 2006/02/12 22:02:53 vapier Exp $
+
+inherit eutils games
+
+DESCRIPTION="BomberMan clone with network game support"
+HOMEPAGE="http://www.bomberclone.de/"
+SRC_URI="mirror://sourceforge/${PN}/${P}.tar.gz"
+
+LICENSE="GPL-2"
+SLOT="0"
+KEYWORDS="amd64 ~mips ppc ppc64 x86"
+IUSE="X"
+
+DEPEND=">=media-libs/libsdl-1.1.0
+	media-libs/sdl-image
+	media-libs/sdl-mixer
+	X? ( || ( x11-libs/libXt virtual/x11 ) )"
+
+src_unpack() {
+	unpack ${A}
+	cd "${S}"
+	epatch "${FILESDIR}"/${P}-fix-kaboom.patch
+}
+
+src_compile() {
+	egamesconf \
+		--disable-dependency-tracking \
+		$(use_with X x) \
+		--datadir="${GAMES_DATADIR_BASE}" || die
+	sed -i \
+		-e "/PACKAGE_DATA_DIR/ s:/usr/games/share/games/:${GAMES_DATADIR}/:" \
+		config.h \
+		|| die "sed config.h failed"
+	emake || die "emake failed"
+}
+
+src_install() {
+	dogamesbin src/${PN} || die "dogamesbin failed"
+
+	dodir "${GAMES_DATADIR}/${PN}"
+	cp -R data/{gfx,maps,player,tileset}/ "${D}/${GAMES_DATADIR}/${PN}" \
+		|| die "cp failed"
+
+	dodoc AUTHORS ChangeLog README TODO
+	doicon data/pixmaps/bomberclone.png
+	make_desktop_entry bomberclone Bomberclone
+	prepgamesdirs
+}
diff --git a/games-action/bomberclone/files/bomberclone-0.11.6.2-fix-kaboom.patch b/games-action/bomberclone/files/bomberclone-0.11.6.2-fix-kaboom.patch
new file mode 100644
index 000000000000..78ae160197ba
--- /dev/null
+++ b/games-action/bomberclone/files/bomberclone-0.11.6.2-fix-kaboom.patch
@@ -0,0 +1,39 @@
+# Fix remote buffer overflow vulnerability if an excessive remote error is sent
+# and processed due to the text buffer overflowing.
+
+# Discovery: Stefan Cornelius <dercorny@gentoo.org> of Gentoo Security
+# Patch: Tim Yamin <plasmaroo@gentoo.org> of Gentoo Auditing
+
+http://bugs.gentoo.org/121605
+
+--- bomberclone-0.11.6.2/src/menu.c
++++ bomberclone-0.11.6.2/src/menu.c
+@@ -629,7 +629,7 @@
+     memset (text, 0, sizeof (text));
+     memset (out, 0, sizeof (out));
+     va_start (args, fmt);
+-    vsprintf (text, fmt, args);
++    vsnprintf (text, 512, fmt, args);
+     va_end (args);
+ 
+     menu_formattext (text, out, lines, &linenr, &maxlinelen, MENU_MESSAGES_MAXLINELEN,
+@@ -722,7 +724,7 @@
+     memset (text, 0, sizeof (text));
+     memset (out, 0, sizeof (out));
+     va_start (args, fmt);
+-    vsprintf (text, fmt, args);
++    vsnprintf (text, 512, fmt, args);
+     va_end (args);
+ 
+     menu_formattext (text, out, lines, &linenr, &maxlinelen, MENU_MESSAGES_MAXLINELEN,
+--- bomberclone-0.11.6.2/src/menulabels.c
++++ bomberclone-0.11.6.2/src/menulabels.c
+@@ -72,7 +72,7 @@
+ 	memset (text, 0, sizeof (text));
+ 	memset (out, 0, sizeof (out));
+ 	va_start (args, fmt);
+-	vsprintf (text, fmt, args);
++	vsnprintf (text, 1024, fmt, args);
+ 	va_end (args);
+ 
+ 	menu_formattext (text, out, lineptr, &linecnt, &maxchar, maxlen, maxlines);
diff --git a/games-action/bomberclone/files/digest-bomberclone-0.11.6.2-r1 b/games-action/bomberclone/files/digest-bomberclone-0.11.6.2-r1
new file mode 100644
index 000000000000..74f35eed963e
--- /dev/null
+++ b/games-action/bomberclone/files/digest-bomberclone-0.11.6.2-r1
@@ -0,0 +1 @@
+MD5 07de9f101645999ad86699daf3d9a56c bomberclone-0.11.6.2.tar.gz 8001287