diff options
author | Johannes Huber <johu@gentoo.org> | 2017-01-25 17:32:49 +0100 |
---|---|---|
committer | Johannes Huber <johu@gentoo.org> | 2017-01-25 18:00:27 +0100 |
commit | 778e641bccb7b78418ac8afb74f247095783fc1e (patch) | |
tree | e56ce48b70ef51a555977135fdef8f817bec83cd /kde-frameworks/kcoreaddons | |
parent | app-backup/kfoldersync: remove old (diff) | |
download | gentoo-778e641bccb7b78418ac8afb74f247095783fc1e.tar.gz gentoo-778e641bccb7b78418ac8afb74f247095783fc1e.tar.bz2 gentoo-778e641bccb7b78418ac8afb74f247095783fc1e.zip |
kde-frameworks: Remove KDE Frameworks 5.26.0
Package-Manager: Portage-2.3.3, Repoman-2.3.1
Diffstat (limited to 'kde-frameworks/kcoreaddons')
3 files changed, 0 insertions, 376 deletions
diff --git a/kde-frameworks/kcoreaddons/Manifest b/kde-frameworks/kcoreaddons/Manifest index 7b676ebf5ebd..f3ba10ea775e 100644 --- a/kde-frameworks/kcoreaddons/Manifest +++ b/kde-frameworks/kcoreaddons/Manifest @@ -1,3 +1,2 @@ -DIST kcoreaddons-5.26.0.tar.xz 330764 SHA256 1fab3ca827cf74f0fdadd30d8b9b3fe53d4ba2d1afe7f23a90f3ff55f3c77982 SHA512 79b586a52e8a2ed5c804d25a2d97bd0ac5d4f8f60cd06496611fbef255d95ffe1a5a8c44d349e6bab7bee233481346b349f0ce5cf11942c43fffe32a54de7cc0 WHIRLPOOL 9e19dcc3335e956a8be2286a4ad3fbb2ffd74c3d6d8a1565f7ba5ac38eeb6e9f499ecf0612faebc4d7853d201936309c9e877fbcc3024d4e44ae14989b153e58 DIST kcoreaddons-5.29.0.tar.xz 2735576 SHA256 e28b39fada9b19b03c7c79fc7ac337c1b943b33dbb40967a5cc7ba9f314cb3f6 SHA512 93c2da7dec8deb92cb63706748d273d157b622a1c105ca315ef9c86c850f265bc9316678fb3af122ce6c8fb737f39c727f5d1c61d41f6b420e554e4a796a04b3 WHIRLPOOL 1db2aa2e5f8d220f0ff08dce4743cf99ff5a914ee1b7aa716aab796590d5e87da8eff513f5502b8edfdf5ccec85d72b9f8ed0e9e6e4ccaba775bd8a5d89eb063 DIST kcoreaddons-5.30.1.tar.xz 333496 SHA256 cdd29840c23ab3403eadff578a54e33a2c17b357b59e2ef8a8509ed436c33e70 SHA512 fa4e1a3fa523d3659cef06eab7c22903a838e782f7ef883ff4c78094640dbc2d5c0b61dcd35c2a4a7bd98b806ffef8457abce338cda92e567afb4729758bf564 WHIRLPOOL 8d421f46f4243da29415d5b6243a6b8867e1f89c9a8bdcd3b0f4a0fa88223464126f81285db7507e9abdaae85a394f4a1318e6c31e7e315025867ea486bacd01 diff --git a/kde-frameworks/kcoreaddons/files/kcoreaddons-5.26.0-CVE-2016-7966-r1.patch b/kde-frameworks/kcoreaddons/files/kcoreaddons-5.26.0-CVE-2016-7966-r1.patch deleted file mode 100644 index 92e255a4007f..000000000000 --- a/kde-frameworks/kcoreaddons/files/kcoreaddons-5.26.0-CVE-2016-7966-r1.patch +++ /dev/null @@ -1,342 +0,0 @@ -From 2a5142fecf8615ccfa3e7c1f9c088fa6ae5cc2a1 Mon Sep 17 00:00:00 2001 -From: Montel Laurent <montel@kde.org> -Date: Wed, 21 Sep 2016 07:24:30 +0200 -Subject: [PATCH 1/2] Fix very old bug when we remove space in url as "foo - <<url> <url>>" - ---- - autotests/ktexttohtmltest.cpp | 14 ++++++++++++++ - src/lib/text/ktexttohtml.cpp | 14 ++++++++++++-- - 2 files changed, 26 insertions(+), 2 deletions(-) - -diff --git a/autotests/ktexttohtmltest.cpp b/autotests/ktexttohtmltest.cpp -index 474f0ca..8fc0c56 100644 ---- a/autotests/ktexttohtmltest.cpp -+++ b/autotests/ktexttohtmltest.cpp -@@ -30,6 +30,15 @@ QTEST_MAIN(KTextToHTMLTest) - - Q_DECLARE_METATYPE(KTextToHTML::Options) - -+#ifndef Q_OS_WIN -+void initLocale() -+{ -+ setenv("LC_ALL", "en_US.utf-8", 1); -+} -+Q_CONSTRUCTOR_FUNCTION(initLocale) -+#endif -+ -+ - void KTextToHTMLTest::testGetEmailAddress() - { - // empty input -@@ -372,6 +381,11 @@ void KTextToHTMLTest::testHtmlConvert_data() - QTest::newRow("url-in-parenthesis-3") << "bla (http://www.kde.org - section 5.2)" - << KTextToHTML::Options(KTextToHTML::PreserveSpaces) - << "bla (<a href=\"http://www.kde.org\">http://www.kde.org</a> - section 5.2)"; -+ -+ // Fix url as foo <<url> <url>> when we concatened them. -+ QTest::newRow("url-with-url") << "foo <http://www.kde.org/ <http://www.kde.org/>>" -+ << KTextToHTML::Options(KTextToHTML::PreserveSpaces) -+ << "foo <<a href=\"http://www.kde.org/ \">http://www.kde.org/ </a><<a href=\"http://www.kde.org/\">http://www.kde.org/</a>>>"; - } - - -diff --git a/src/lib/text/ktexttohtml.cpp b/src/lib/text/ktexttohtml.cpp -index 8ed923d..b181f56 100644 ---- a/src/lib/text/ktexttohtml.cpp -+++ b/src/lib/text/ktexttohtml.cpp -@@ -228,11 +228,19 @@ QString KTextToHTMLHelper::getUrl() - - url.reserve(mMaxUrlLen); // avoid allocs - int start = mPos; -+ bool previousCharIsSpace = false; - while ((mPos < mText.length()) && - (mText[mPos].isPrint() || mText[mPos].isSpace()) && - ((afterUrl.isNull() && !mText[mPos].isSpace()) || - (!afterUrl.isNull() && mText[mPos] != afterUrl))) { -- if (!mText[mPos].isSpace()) { // skip whitespace -+ if (mText[mPos].isSpace()) { -+ previousCharIsSpace = true; -+ } else { // skip whitespace -+ if (previousCharIsSpace && mText[mPos] == QLatin1Char('<')) { -+ url.append(QLatin1Char(' ')); -+ break; -+ } -+ previousCharIsSpace = false; - url.append(mText[mPos]); - if (url.length() > mMaxUrlLen) { - break; -@@ -267,7 +275,6 @@ QString KTextToHTMLHelper::getUrl() - } - } while (url.length() > 1); - } -- - return url; - } - -@@ -334,6 +341,7 @@ QString KTextToHTML::convertToHtml(const QString &plainText, const KTextToHTML:: - QChar ch; - int x; - bool startOfLine = true; -+ //qDebug()<<" plainText"<<plainText; - - for (helper.mPos = 0, x = 0; helper.mPos < helper.mText.length(); - ++helper.mPos, ++x) { -@@ -402,6 +410,7 @@ QString KTextToHTML::convertToHtml(const QString &plainText, const KTextToHTML:: - const int start = helper.mPos; - if (!(flags & IgnoreUrls)) { - str = helper.getUrl(); -+ //qDebug()<<" str"<<str; - if (!str.isEmpty()) { - QString hyperlink; - if (str.left(4) == QLatin1String("www.")) { -@@ -455,6 +464,7 @@ QString KTextToHTML::convertToHtml(const QString &plainText, const KTextToHTML:: - - result = helper.emoticonsInterface()->parseEmoticons(result, true, exclude); - } -+ //qDebug()<<" result "<<result; - - return result; - } --- -2.7.3 - -From aa9281b7f95ce970603645d79f6f275d1ae7d2ed Mon Sep 17 00:00:00 2001 -From: Montel Laurent <montel@kde.org> -Date: Fri, 30 Sep 2016 13:21:45 +0200 -Subject: [PATCH 2/2] Don't convert as url an url which has a " - ---- - autotests/ktexttohtmltest.cpp | 6 ++++++ - src/lib/text/ktexttohtml.cpp | 25 +++++++++++++++++++------ - src/lib/text/ktexttohtml_p.h | 2 +- - 3 files changed, 26 insertions(+), 7 deletions(-) - -diff --git a/autotests/ktexttohtmltest.cpp b/autotests/ktexttohtmltest.cpp -index 8fc0c56..c5690e8 100644 ---- a/autotests/ktexttohtmltest.cpp -+++ b/autotests/ktexttohtmltest.cpp -@@ -386,6 +386,12 @@ void KTextToHTMLTest::testHtmlConvert_data() - QTest::newRow("url-with-url") << "foo <http://www.kde.org/ <http://www.kde.org/>>" - << KTextToHTML::Options(KTextToHTML::PreserveSpaces) - << "foo <<a href=\"http://www.kde.org/ \">http://www.kde.org/ </a><<a href=\"http://www.kde.org/\">http://www.kde.org/</a>>>"; -+ -+ //Fix url exploit -+ QTest::newRow("url-exec-html") << "https://\"><!--" -+ << KTextToHTML::Options(KTextToHTML::PreserveSpaces) -+ << "https://\"><!--"; -+ - } - - -diff --git a/src/lib/text/ktexttohtml.cpp b/src/lib/text/ktexttohtml.cpp -index b181f56..09b2483 100644 ---- a/src/lib/text/ktexttohtml.cpp -+++ b/src/lib/text/ktexttohtml.cpp -@@ -156,7 +156,6 @@ bool KTextToHTMLHelper::atUrl() - (allowedSpecialChars.indexOf(mText[mPos - 1]) != -1))) { - return false; - } -- - QChar ch = mText[mPos]; - return - (ch == QLatin1Char('h') && (mText.mid(mPos, 7) == QLatin1String("http://") || -@@ -192,7 +191,7 @@ bool KTextToHTMLHelper::isEmptyUrl(const QString &url) - url == QLatin1String("news://"); - } - --QString KTextToHTMLHelper::getUrl() -+QString KTextToHTMLHelper::getUrl(bool *badurl) - { - QString url; - if (atUrl()) { -@@ -229,6 +228,7 @@ QString KTextToHTMLHelper::getUrl() - url.reserve(mMaxUrlLen); // avoid allocs - int start = mPos; - bool previousCharIsSpace = false; -+ bool previousCharIsADoubleQuote = false; - while ((mPos < mText.length()) && - (mText[mPos].isPrint() || mText[mPos].isSpace()) && - ((afterUrl.isNull() && !mText[mPos].isSpace()) || -@@ -241,6 +241,18 @@ QString KTextToHTMLHelper::getUrl() - break; - } - previousCharIsSpace = false; -+ if (mText[mPos] == QLatin1Char('>') && previousCharIsADoubleQuote) { -+ //it's an invalid url -+ if (badurl) { -+ *badurl = true; -+ } -+ return QString(); -+ } -+ if (mText[mPos] == QLatin1Char('"')) { -+ previousCharIsADoubleQuote = true; -+ } else { -+ previousCharIsADoubleQuote = false; -+ } - url.append(mText[mPos]); - if (url.length() > mMaxUrlLen) { - break; -@@ -341,7 +353,6 @@ QString KTextToHTML::convertToHtml(const QString &plainText, const KTextToHTML:: - QChar ch; - int x; - bool startOfLine = true; -- //qDebug()<<" plainText"<<plainText; - - for (helper.mPos = 0, x = 0; helper.mPos < helper.mText.length(); - ++helper.mPos, ++x) { -@@ -409,8 +420,11 @@ QString KTextToHTML::convertToHtml(const QString &plainText, const KTextToHTML:: - } else { - const int start = helper.mPos; - if (!(flags & IgnoreUrls)) { -- str = helper.getUrl(); -- //qDebug()<<" str"<<str; -+ bool badUrl = false; -+ str = helper.getUrl(&badUrl); -+ if (badUrl) { -+ return helper.mText; -+ } - if (!str.isEmpty()) { - QString hyperlink; - if (str.left(4) == QLatin1String("www.")) { -@@ -464,7 +478,6 @@ QString KTextToHTML::convertToHtml(const QString &plainText, const KTextToHTML:: - - result = helper.emoticonsInterface()->parseEmoticons(result, true, exclude); - } -- //qDebug()<<" result "<<result; - - return result; - } -diff --git a/src/lib/text/ktexttohtml_p.h b/src/lib/text/ktexttohtml_p.h -index 74ad7a0..fc43613 100644 ---- a/src/lib/text/ktexttohtml_p.h -+++ b/src/lib/text/ktexttohtml_p.h -@@ -49,7 +49,7 @@ public: - QString getEmailAddress(); - bool atUrl(); - bool isEmptyUrl(const QString &url); -- QString getUrl(); -+ QString getUrl(bool *badurl = Q_NULLPTR); - QString pngToDataUrl(const QString &pngPath); - QString highlightedText(); - --- -2.7.3 - -From a06cef31cc4c908bc9b76bd9d103fe9c60e0953f Mon Sep 17 00:00:00 2001 -From: Montel Laurent <montel@kde.org> -Date: Tue, 11 Oct 2016 11:11:08 +0200 -Subject: [PATCH] Add more autotests - ---- - autotests/ktexttohtmltest.cpp | 15 +++++++++++++++ - 1 file changed, 15 insertions(+) - -diff --git a/autotests/ktexttohtmltest.cpp b/autotests/ktexttohtmltest.cpp -index c5690e8..0179a00 100644 ---- a/autotests/ktexttohtmltest.cpp -+++ b/autotests/ktexttohtmltest.cpp -@@ -392,6 +392,21 @@ void KTextToHTMLTest::testHtmlConvert_data() - << KTextToHTML::Options(KTextToHTML::PreserveSpaces) - << "https://\"><!--"; - -+ QTest::newRow("url-exec-html-2") << "https://192.168.1.1:\"><!--" -+ << KTextToHTML::Options(KTextToHTML::PreserveSpaces) -+ << "https://192.168.1.1:\"><!--"; -+ -+ QTest::newRow("url-exec-html-3") << "https://<IP>:\"><!--" -+ << KTextToHTML::Options(KTextToHTML::PreserveSpaces) -+ << "https://<IP>:\"><!--"; -+ -+ QTest::newRow("url-exec-html-4") << "https://<IP>:/\"><!--" -+ << KTextToHTML::Options(KTextToHTML::PreserveSpaces) -+ << "https://<IP>:/\"><!--"; -+ -+ QTest::newRow("url-exec-html-5") << "https://<IP>:/\"><script>alert(1);</script><!--" -+ << KTextToHTML::Options(KTextToHTML::PreserveSpaces) -+ << "https://<IP>:/\"><script>alert(1);</script><!--"; - } - - --- -2.7.3 - -From 5e13d2439dbf540fdc840f0b0ab5b3ebf6642c6a Mon Sep 17 00:00:00 2001 -From: Montel Laurent <montel@kde.org> -Date: Tue, 11 Oct 2016 11:40:10 +0200 -Subject: [PATCH] Display bad url - ---- - autotests/ktexttohtmltest.cpp | 14 +++++++++----- - src/lib/text/ktexttohtml.cpp | 18 +++++++++++++++++- - 2 files changed, 26 insertions(+), 6 deletions(-) - -diff --git a/autotests/ktexttohtmltest.cpp b/autotests/ktexttohtmltest.cpp -index 0179a00..ccac29a 100644 ---- a/autotests/ktexttohtmltest.cpp -+++ b/autotests/ktexttohtmltest.cpp -@@ -390,23 +390,27 @@ void KTextToHTMLTest::testHtmlConvert_data() - //Fix url exploit - QTest::newRow("url-exec-html") << "https://\"><!--" - << KTextToHTML::Options(KTextToHTML::PreserveSpaces) -- << "https://\"><!--"; -+ << "https://"><!--"; - - QTest::newRow("url-exec-html-2") << "https://192.168.1.1:\"><!--" - << KTextToHTML::Options(KTextToHTML::PreserveSpaces) -- << "https://192.168.1.1:\"><!--"; -+ << "https://192.168.1.1:"><!--"; - - QTest::newRow("url-exec-html-3") << "https://<IP>:\"><!--" - << KTextToHTML::Options(KTextToHTML::PreserveSpaces) -- << "https://<IP>:\"><!--"; -+ << "https://<IP>:"><!--"; - - QTest::newRow("url-exec-html-4") << "https://<IP>:/\"><!--" - << KTextToHTML::Options(KTextToHTML::PreserveSpaces) -- << "https://<IP>:/\"><!--"; -+ << "https://<IP>:/"><!--"; - - QTest::newRow("url-exec-html-5") << "https://<IP>:/\"><script>alert(1);</script><!--" - << KTextToHTML::Options(KTextToHTML::PreserveSpaces) -- << "https://<IP>:/\"><script>alert(1);</script><!--"; -+ << "https://<IP>:/"><script>alert(1);</script><!--"; -+ -+ QTest::newRow("url-exec-html-6") << "https://<IP>:/\"><script>alert(1);</script><!--\nTest2" -+ << KTextToHTML::Options(KTextToHTML::PreserveSpaces) -+ << "https://<IP>:/"><script>alert(1);</script><!--\nTest2"; - } - - -diff --git a/src/lib/text/ktexttohtml.cpp b/src/lib/text/ktexttohtml.cpp -index 97c5eab..30e0b5d 100644 ---- a/src/lib/text/ktexttohtml.cpp -+++ b/src/lib/text/ktexttohtml.cpp -@@ -423,7 +423,23 @@ QString KTextToHTML::convertToHtml(const QString &plainText, const KTextToHTML:: - bool badUrl = false; - str = helper.getUrl(&badUrl); - if (badUrl) { -- return helper.mText; -+ QString resultBadUrl; -+ const int helperTextSize(helper.mText.count()); -+ for (int i = 0; i < helperTextSize; ++i) { -+ const QChar chBadUrl = helper.mText[i]; -+ if (chBadUrl == QLatin1Char('&')) { -+ resultBadUrl += QLatin1String("&"); -+ } else if (chBadUrl == QLatin1Char('"')) { -+ resultBadUrl += QLatin1String("""); -+ } else if (chBadUrl == QLatin1Char('<')) { -+ resultBadUrl += QLatin1String("<"); -+ } else if (chBadUrl == QLatin1Char('>')) { -+ resultBadUrl += QLatin1String(">"); -+ } else { -+ resultBadUrl += chBadUrl; -+ } -+ } -+ return resultBadUrl; - } - if (!str.isEmpty()) { - QString hyperlink; --- -2.7.3 - diff --git a/kde-frameworks/kcoreaddons/kcoreaddons-5.26.0-r2.ebuild b/kde-frameworks/kcoreaddons/kcoreaddons-5.26.0-r2.ebuild deleted file mode 100644 index 1b558d13b3af..000000000000 --- a/kde-frameworks/kcoreaddons/kcoreaddons-5.26.0-r2.ebuild +++ /dev/null @@ -1,33 +0,0 @@ -# Copyright 1999-2016 Gentoo Foundation -# Distributed under the terms of the GNU General Public License v2 -# $Id$ - -EAPI=6 - -inherit kde5 - -DESCRIPTION="Framework for solving common problems such as caching, randomisation, and more" -LICENSE="LGPL-2+" -KEYWORDS="amd64 ~arm x86" -IUSE="fam nls" - -RDEPEND=" - $(add_qt_dep qtcore 'icu') - fam? ( virtual/fam ) - !<kde-frameworks/kservice-5.2.0:5 -" -DEPEND="${RDEPEND} - x11-misc/shared-mime-info - nls? ( $(add_qt_dep linguist-tools) ) -" - -PATCHES=( "${FILESDIR}/${P}-CVE-2016-7966-r1.patch" ) - -src_configure() { - local mycmakeargs=( - -D_KDE4_DEFAULT_HOME_POSTFIX=4 - $(cmake-utils_use_find_package fam FAM) - ) - - kde5_src_configure -} |