Revbump. Fix buffer overflow.

Package-Manager: portage-2.2.10/cvs/Linux x86_64
Manifest-Sign-Key: 0xB427ABC8

4 files changed, 48 insertions, 18 deletions

diff --git a/dev-libs/libxdg-basedir/ChangeLog b/dev-libs/libxdg-basedir/ChangeLog
index a8bd8725fbe7..92e27d9749b6 100644
--- a/dev-libs/libxdg-basedir/ChangeLog
+++ b/dev-libs/libxdg-basedir/ChangeLog
@@ -1,6 +1,13 @@
 # ChangeLog for dev-libs/libxdg-basedir
 # Copyright 1999-2014 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/dev-libs/libxdg-basedir/ChangeLog,v 1.37 2014/04/16 07:06:27 polynomial-c Exp $
+# $Header: /var/cvsroot/gentoo-x86/dev-libs/libxdg-basedir/ChangeLog,v 1.38 2014/04/16 20:56:57 idl0r Exp $
+
+*libxdg-basedir-1.2.0-r1 (16 Apr 2014)
+
+  16 Apr 2014; Christian Ruppert <idl0r@gentoo.org>
+  -libxdg-basedir-1.2.0.ebuild, +libxdg-basedir-1.2.0-r1.ebuild,
+  +files/libxdg-basedir-1.2.0-buffer-overflow.patch:
+  Revbump. Fix buffer overflow.
 
   16 Apr 2014; Lars Wendler <polynomial-c@gentoo.org>
   libxdg-basedir-1.2.0.ebuild:
diff --git a/dev-libs/libxdg-basedir/Manifest b/dev-libs/libxdg-basedir/Manifest
index 61a89aff1fbb..3e07729d44c8 100644
--- a/dev-libs/libxdg-basedir/Manifest
+++ b/dev-libs/libxdg-basedir/Manifest
@@ -1,26 +1,21 @@
 -----BEGIN PGP SIGNED MESSAGE-----
 Hash: SHA256
 
+AUX libxdg-basedir-1.2.0-buffer-overflow.patch 898 SHA256 cc6584b326983b82b69156c14dbe45a82396fb02e362d39c903964a8fb4c6358 SHA512 265ded0f9fc7448021281eb48ed77977eb2f8f6275a18ba329dc9ad5a8c7e41585add4cb989af34e8f135a8545b1548763253204ab5905f78d90c9852546aa25 WHIRLPOOL 0a58205ea7814f2110bde26cb77aa262b429c9404ac40ea0ebf737c59a03033185bc1e14e64f817fd65a36f56e2fa17dc45fd0a9af7b565b609b3493c78cb939
 DIST libxdg-basedir-1.1.1.tar.gz 316118 SHA256 2855b44619dc8d43ba7df995e538bf383f53b4276a26c7c26b7ec03c7b9be0ac SHA512 ece0c75ed1dee652ddc40e4262662dd89ff3365c015752b053cf89b42c4c4898d427128ac7883d80e595c6278c5a2c372ae83be80e503142de21c112872d6cc8 WHIRLPOOL 140f8684047bb0eb77e4ecb18ac969100abc98dbf55abe0f0abb4607f5a39a1fab018cda959321d9d587150f3e75c651d273f34db72bf252b5d386e7459d753c
 DIST libxdg-basedir-1.2.0.tar.gz 30159 SHA256 1c2b0032a539033313b5be2e48ddd0ae94c84faf21d93956d53562eef4614868 SHA512 8584405d45e0b57e570666b6eab6d99d70411d00f88965826c9ed0292372385668f190157a10ff536f3a5a59fd0031b332ecbb8a38ac64eda1b04a0603997406 WHIRLPOOL f8898e0063d8d9f99eb569a5f1fba81e4143a9c7b8c095f54b13a3960bdd297c57f5b534469166d52c5c7c03fe55bc8f8b246ec3c966f62507b220e8b4ad6d24
 EBUILD libxdg-basedir-1.1.1.ebuild 1052 SHA256 bd41243a3436ad40ad01ac81d0b77f59fefbea6dc95db6335264ba0e95b81104 SHA512 ff6edaeeefa66405f58e57dee203098dd1697e41cab5f28feced2f6d2a4019e661be95b323c272e6189b03dd77cd0fdb563346be13d3bf0db818cb5b94577f8c WHIRLPOOL 6cb4d66e8c48525f5583297771aafa27df13febe198eef7506b89f848365a7d2f507b0a6462e98a41e00e892cbc7af55c603e1b9fe93dfa2e971b4144edaf97c
-EBUILD libxdg-basedir-1.2.0.ebuild 1054 SHA256 5b242e9036ef69a70c9037ff8518084f8b1bd58264a91ab02b0a7a93e7f3fa24 SHA512 b55cd557399acd0f63c466de1865b5fa6757069b21c120316eb168048fbc875118bc32fed1ff48b200965460aeeb0e520210791ba0acdfa2563d72bf559530ec WHIRLPOOL bbbc91c2d96750994fd0766121a0b88c439f1f76505390340af3888f6824cb23471f7bae6515ed0ec8e983689c041e8bc85e3cdd3440f9613b5b974140404153
-MISC ChangeLog 5303 SHA256 0f75c1eb06f5332e42a1030a9eb92f53b0a6eea80b696259f711206b3e18c609 SHA512 91eac28fa2dc01c2f6fd485d70fc54a5231cb9fcbfc230ade45e09d0626de0d18738d163a10b4e2535b05ce5a92d69e92ec6b7b45d0ecd1e40e8300292bdc00e WHIRLPOOL 82e83cf6093612530bf3a99ea06542879a5541bde0d07dd82c9ec2b9974ea6b3444cbb12ac516693afe1e5821560a31f512d9310b1491b7241a107d9193717fe
+EBUILD libxdg-basedir-1.2.0-r1.ebuild 1107 SHA256 582fcfac6ceee5563f51c77af6620b08a7c422aa0736da31870f753ea8863f91 SHA512 f209df8b29de5cc98806cc909dc9538da8b6ada5eed60278999cda25e3936ff74555b8fd64f49d8708676834b1572cb243f5d8b447b3ab043ac66a68e099af59 WHIRLPOOL f6bf194136625e65c0a78729a3080db4cea3a1ba74d206fa959d9da81cc41754c29fbf47f5352bfe2589520e4a234f431d63cb81fbd12627ae621f19db33061f
+MISC ChangeLog 5539 SHA256 fd7688d3151c4764ca19fbea352846d90a6432959e7e092de0d81861e7e97117 SHA512 83d83a73fc66264f2d177e5abff9593d0db98718d6bb1293ecc3dd86d9228644ccf98c42e715cd3738504a04de954a9df97fa1bba6da37e2a5ffdeaf235615bc WHIRLPOOL 604cba04534b5a5246e576a5a43c2c872b6eeda0f0ae1e7c0abb2247affd7ffa63edfce4f8ad612a391a4ccc65387043ef92704fb0d068e8699db13f2eea4daa
 MISC metadata.xml 215 SHA256 2808a636bdee4cebf9d065c247f71edbe0a1546f7817f7978b29cc479fa5b34b SHA512 1d6576304369be7bdb0b0e27fdabb4615d7e89897a5233d8a267958f7aba707bc20a85adda858c2e840c0ed1be8656817616f194ee9abd80bb3d19d0f4d815a5 WHIRLPOOL d0b5480f109dc256a6d3209188944b6f78c8d5d1dcbe5dfd10de88fabd011f8b2a5c715b39155e69b1292e0a474d738464017e369b65e1967f7386eec8d4504d
 -----BEGIN PGP SIGNATURE-----
 Version: GnuPG v2.0.22 (GNU/Linux)
 
-iQIcBAEBCAAGBQJTTiv0AAoJEPiazRVxLXTFTZ8P/jsrHYgDBDNSbOo156CTRPxe
-dflS5lgJgqQrtTx528Dyn5Rl3b/PwM2Hx0L+uQiZ9BIlI9gTBRMbaOLmv7wCBjOf
-r3BkZhujlHKTU29oPDg/6HoKyarvzP+eLCO+0f3A34cux97kXxNlSW2mltugBE2B
-vX8eW2UfbmfL+lBh514/yISwXJWfaMA4GXPWhAkXuuMyhfwgRbQc8WBeTZJ635oa
-7lJlaTeVFwU+HqmEYpsdgKb1YkZfqOo7OseumL+XBWx5cTznUSgCkpxjU1du7GNC
-MjPO1SpY4ei8H7YyMZSJbOA11TOGRKq4miY1MXosuB9ZtjQICUyOjQ1Hk4sRhO5X
-HN5zjwDrdUqjMCaTJQ0A5Tca4fZdN6RPXaXHH1e57sFL9sNEzFPfZ2mywPMXljDk
-C6V2PL9i+/4bJKJ6047DNr+XE2bSD1h8fhko3GHtKzKqm20J127Mr4A8+1/Onfc2
-HcbUvGYNAqpG/lXppbM/pz39uO34vyxWuWxTSotYQuBPDjqpxcnC+QE6RdWBbqW+
-mqVhc2G/yttl7etLbOFpWd13ttNYkvzQWLz++Ar2S46pm5jJo6Phrlee+5kO4IVr
-sv9bkAgGDGVuuh4UMWqe1ZXqlz1WUiIkCo162NrEaF8vQKw7EA3Di4DbCDN06Bah
-u5/gNWzEkIeQxK7u3X2x
-=cl6d
+iQEcBAEBCAAGBQJTTu6dAAoJEMOx0zmdw4Z1nKoIAKBXru6vZY3yBcuI/qJH9+O0
+zHVpl5IIkkKOn1umSwO3JsmqB4jP5fnNKiWNiq5ks4ZVwLZf5KQqb7P8x2iZ2JLQ
+TTBCWCMz639VR4XE6t1dSRlyoHzbUyi931lUdZJgKI5QSgsaygtkqGECOQGX6zXd
+6JimZIDTGft5IOSjb2BluDg9qOYjavUk8eYRJjveDHzONatfCPIJKB9WzLdlQDDA
+dpq2pe8a4aX4BPTrMb0VfYUUKK9mQPcc6ucJCnqMQ3/sLz9kXmM6vm0AEDCKj/Cn
+A0Fasp/K//krbYVTg/e1gzvC5P83j85AF3e8RIruKMuMB/xz/Mlrggb561wfuGk=
+=Ojbm
 -----END PGP SIGNATURE-----
diff --git a/dev-libs/libxdg-basedir/files/libxdg-basedir-1.2.0-buffer-overflow.patch b/dev-libs/libxdg-basedir/files/libxdg-basedir-1.2.0-buffer-overflow.patch
new file mode 100644
index 000000000000..4cd601cbde54
--- /dev/null
+++ b/dev-libs/libxdg-basedir/files/libxdg-basedir-1.2.0-buffer-overflow.patch
@@ -0,0 +1,26 @@
+From 14e000f696ef8b83264b0ca4407669bdb365fb23 Mon Sep 17 00:00:00 2001
+From: Timmy Weerwag <timmy@timmyweerwag.nl>
+Date: Sun, 16 Mar 2014 17:54:14 +0100
+Subject: [PATCH] Overflow bug
+
+Signed-off-by: Christian Ruppert <idl0r@gentoo.org>
+---
+ src/basedir.c | 2 +-
+ 1 file changed, 1 insertion(+), 1 deletion(-)
+
+diff --git a/src/basedir.c b/src/basedir.c
+index 68ab879..1a2a8c4 100644
+--- a/src/basedir.c
++++ b/src/basedir.c
+@@ -574,7 +574,7 @@ static char * xdgGetRelativeHome(const char *envname, const char *relativefallba
+ 		unsigned int homelen;
+ 		if (!(home = xdgGetEnv("HOME")))
+ 			return NULL;
+-		if (!(relhome = (char*)malloc((homelen = strlen(home))+fallbacklength))) return NULL;
++		if (!(relhome = (char*)malloc((homelen = strlen(home))+fallbacklength+1))) return NULL;
+ 		memcpy(relhome, home, homelen);
+ 		memcpy(relhome+homelen, relativefallback, fallbacklength+1);
+ 	}
+-- 
+1.8.3.2
+
diff --git a/dev-libs/libxdg-basedir/libxdg-basedir-1.2.0.ebuild b/dev-libs/libxdg-basedir/libxdg-basedir-1.2.0-r1.ebuild
index 578753ecc685..b58c22945f51 100644
--- a/dev-libs/libxdg-basedir/libxdg-basedir-1.2.0.ebuild
+++ b/dev-libs/libxdg-basedir/libxdg-basedir-1.2.0-r1.ebuild
@@ -1,9 +1,9 @@
 # Copyright 1999-2014 Gentoo Foundation
 # Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/dev-libs/libxdg-basedir/libxdg-basedir-1.2.0.ebuild,v 1.2 2014/04/16 07:06:27 polynomial-c Exp $
+# $Header: /var/cvsroot/gentoo-x86/dev-libs/libxdg-basedir/libxdg-basedir-1.2.0-r1.ebuild,v 1.1 2014/04/16 20:56:57 idl0r Exp $
 
 EAPI=5
-inherit autotools
+inherit autotools eutils
 
 DESCRIPTION="Small library to access XDG Base Directories Specification paths"
 HOMEPAGE="http://repo.or.cz/w/libxdg-basedir.git"
@@ -20,6 +20,8 @@ DEPEND="doc? ( app-doc/doxygen )"
 S="${WORKDIR}/${PN}-${P}"
 
 src_prepare() {
+	epatch "${FILESDIR}/${P}-buffer-overflow.patch"
+
 	eautoreconf
 }