basebuilder_pel7x64builder0
7 years ago
2 changed files with 0 additions and 387 deletions
@ -1,52 +0,0 @@ |
|||||||
From 5d201df72f3d4f4cb8b8f75f980169b03507da38 Mon Sep 17 00:00:00 2001 |
|
||||||
From: Tobias Stoeckmann <tobias@stoeckmann.org> |
|
||||||
Date: Tue, 28 Nov 2017 21:38:07 +0100 |
|
||||||
Subject: [PATCH] cursor: Fix heap overflows when parsing malicious files. |
|
||||||
|
|
||||||
It is possible to trigger heap overflows due to an integer overflow |
|
||||||
while parsing images. |
|
||||||
|
|
||||||
The integer overflow occurs because the chosen limit 0x10000 for |
|
||||||
dimensions is too large for 32 bit systems, because each pixel takes |
|
||||||
4 bytes. Properly chosen values allow an overflow which in turn will |
|
||||||
lead to less allocated memory than needed for subsequent reads. |
|
||||||
|
|
||||||
See also: https://cgit.freedesktop.org/xorg/lib/libXcursor/commit/?id=4794b5dd34688158fb51a2943032569d3780c4b8 |
|
||||||
Fixes: https://bugs.freedesktop.org/show_bug.cgi?id=103961 |
|
||||||
|
|
||||||
Signed-off-by: Tobias Stoeckmann <tobias@stoeckmann.org> |
|
||||||
[Pekka: add link to the corresponding libXcursor commit] |
|
||||||
Signed-off-by: Pekka Paalanen <pekka.paalanen@collabora.co.uk> |
|
||||||
--- |
|
||||||
cursor/xcursor.c | 8 +++++++- |
|
||||||
1 file changed, 7 insertions(+), 1 deletion(-) |
|
||||||
|
|
||||||
diff --git a/cursor/xcursor.c b/cursor/xcursor.c |
|
||||||
index ca41c4a..689c702 100644 |
|
||||||
--- a/cursor/xcursor.c |
|
||||||
+++ b/cursor/xcursor.c |
|
||||||
@@ -202,6 +202,11 @@ XcursorImageCreate (int width, int height) |
|
||||||
{ |
|
||||||
XcursorImage *image; |
|
||||||
|
|
||||||
+ if (width < 0 || height < 0) |
|
||||||
+ return NULL; |
|
||||||
+ if (width > XCURSOR_IMAGE_MAX_SIZE || height > XCURSOR_IMAGE_MAX_SIZE) |
|
||||||
+ return NULL; |
|
||||||
+ |
|
||||||
image = malloc (sizeof (XcursorImage) + |
|
||||||
width * height * sizeof (XcursorPixel)); |
|
||||||
if (!image) |
|
||||||
@@ -482,7 +487,8 @@ _XcursorReadImage (XcursorFile *file, |
|
||||||
if (!_XcursorReadUInt (file, &head.delay)) |
|
||||||
return NULL; |
|
||||||
/* sanity check data */ |
|
||||||
- if (head.width >= 0x10000 || head.height > 0x10000) |
|
||||||
+ if (head.width > XCURSOR_IMAGE_MAX_SIZE || |
|
||||||
+ head.height > XCURSOR_IMAGE_MAX_SIZE) |
|
||||||
return NULL; |
|
||||||
if (head.width == 0 || head.height == 0) |
|
||||||
return NULL; |
|
||||||
-- |
|
||||||
2.14.3 |
|
||||||
|
|
||||||
@ -1,335 +0,0 @@ |
|||||||
Name: wayland |
|
||||||
Version: 1.14.0 |
|
||||||
Release: 2%{?dist} |
|
||||||
Summary: Wayland Compositor Infrastructure |
|
||||||
|
|
||||||
License: MIT |
|
||||||
URL: http://wayland.freedesktop.org/ |
|
||||||
Source0: http://wayland.freedesktop.org/releases/%{name}-%{version}.tar.xz |
|
||||||
|
|
||||||
Patch1: 0001-cursor-Fix-heap-overflows-when-parsing-malicious-fil.patch |
|
||||||
|
|
||||||
BuildRequires: chrpath |
|
||||||
BuildRequires: docbook-style-xsl |
|
||||||
BuildRequires: doxygen |
|
||||||
BuildRequires: expat-devel |
|
||||||
BuildRequires: graphviz |
|
||||||
BuildRequires: libxml2-devel |
|
||||||
BuildRequires: libxslt |
|
||||||
BuildRequires: pkgconfig(libffi) |
|
||||||
BuildRequires: xmlto |
|
||||||
|
|
||||||
%description |
|
||||||
Wayland is a protocol for a compositor to talk to its clients as well as a C |
|
||||||
library implementation of that protocol. The compositor can be a standalone |
|
||||||
display server running on Linux kernel modesetting and evdev input devices, |
|
||||||
an X application, or a wayland client itself. The clients can be traditional |
|
||||||
applications, X servers (rootless or fullscreen) or other display servers. |
|
||||||
|
|
||||||
%package devel |
|
||||||
Summary: Development files for %{name} |
|
||||||
Requires: libwayland-client%{?_isa} = %{version}-%{release} |
|
||||||
Requires: libwayland-cursor%{?_isa} = %{version}-%{release} |
|
||||||
Requires: libwayland-server%{?_isa} = %{version}-%{release} |
|
||||||
# For upgrade path from F24 |
|
||||||
Provides: libwayland-client-devel = %{version}-%{release} |
|
||||||
Obsoletes: libwayland-client-devel < 1.11.91 |
|
||||||
Provides: libwayland-cursor-devel = %{version}-%{release} |
|
||||||
Obsoletes: libwayland-cursor-devel < 1.11.91 |
|
||||||
Provides: libwayland-server-devel = %{version}-%{release} |
|
||||||
Obsoletes: libwayland-server-devel < 1.11.91 |
|
||||||
|
|
||||||
%description devel |
|
||||||
The %{name}-devel package contains libraries and header files for |
|
||||||
developing applications that use %{name}. |
|
||||||
|
|
||||||
%package doc |
|
||||||
Summary: Wayland development documentation |
|
||||||
BuildArch: noarch |
|
||||||
# For upgrade path from F22 |
|
||||||
Obsoletes: wayland < 1.8.91 |
|
||||||
%description doc |
|
||||||
Wayland development documentation |
|
||||||
|
|
||||||
%package -n libwayland-client |
|
||||||
Summary: Wayland client library |
|
||||||
%description -n libwayland-client |
|
||||||
Wayland client library |
|
||||||
|
|
||||||
%package -n libwayland-cursor |
|
||||||
Summary: Wayland cursor library |
|
||||||
Requires: libwayland-client%{?_isa} = %{version}-%{release} |
|
||||||
%description -n libwayland-cursor |
|
||||||
Wayland cursor library |
|
||||||
|
|
||||||
%package -n libwayland-server |
|
||||||
Summary: Wayland server library |
|
||||||
%description -n libwayland-server |
|
||||||
Wayland server library |
|
||||||
|
|
||||||
|
|
||||||
%prep |
|
||||||
%setup -q |
|
||||||
%patch1 -p1 -b .xcursor |
|
||||||
|
|
||||||
%build |
|
||||||
%configure --disable-static --enable-documentation |
|
||||||
make %{?_smp_mflags} |
|
||||||
|
|
||||||
|
|
||||||
%install |
|
||||||
%make_install |
|
||||||
|
|
||||||
find $RPM_BUILD_ROOT -name \*.la | xargs rm -f |
|
||||||
|
|
||||||
# Remove lib64 rpaths |
|
||||||
chrpath -d $RPM_BUILD_ROOT%{_libdir}/libwayland-cursor.so |
|
||||||
|
|
||||||
%check |
|
||||||
mkdir -m 700 tests/run |
|
||||||
XDG_RUNTIME_DIR=$PWD/tests/run make check || \ |
|
||||||
{ rc=$?; cat test-suite.log; exit $rc; } |
|
||||||
|
|
||||||
|
|
||||||
%post -n libwayland-client -p /sbin/ldconfig |
|
||||||
%postun -n libwayland-client -p /sbin/ldconfig |
|
||||||
|
|
||||||
%post -n libwayland-cursor -p /sbin/ldconfig |
|
||||||
%postun -n libwayland-cursor -p /sbin/ldconfig |
|
||||||
|
|
||||||
%post -n libwayland-server -p /sbin/ldconfig |
|
||||||
%postun -n libwayland-server -p /sbin/ldconfig |
|
||||||
|
|
||||||
|
|
||||||
%files devel |
|
||||||
%{_bindir}/wayland-scanner |
|
||||||
%{_includedir}/wayland-*.h |
|
||||||
%{_libdir}/pkgconfig/wayland-*.pc |
|
||||||
%{_libdir}/libwayland-*.so |
|
||||||
%{_datadir}/aclocal/wayland-scanner.m4 |
|
||||||
%dir %{_datadir}/wayland |
|
||||||
%{_datadir}/wayland/wayland-scanner.mk |
|
||||||
%{_datadir}/wayland/wayland.xml |
|
||||||
%{_datadir}/wayland/wayland.dtd |
|
||||||
%{_mandir}/man3/*.3* |
|
||||||
|
|
||||||
%files doc |
|
||||||
%doc README TODO |
|
||||||
%{_datadir}/doc/wayland/ |
|
||||||
|
|
||||||
%files -n libwayland-client |
|
||||||
%license COPYING |
|
||||||
%{_libdir}/libwayland-client.so.0* |
|
||||||
|
|
||||||
%files -n libwayland-cursor |
|
||||||
%license COPYING |
|
||||||
%{_libdir}/libwayland-cursor.so.0* |
|
||||||
|
|
||||||
%files -n libwayland-server |
|
||||||
%license COPYING |
|
||||||
%{_libdir}/libwayland-server.so.0* |
|
||||||
|
|
||||||
%changelog |
|
||||||
* Wed Nov 29 2017 Olivier Fourdan <ofourdan@redhat.com> - 1.14.0-2 |
|
||||||
- Add libwayland-cursor heap overflow fix (#1518615) |
|
||||||
|
|
||||||
* Fri Sep 22 2017 Olivier Fourdan <ofourdan@redhat.com> - 1.14.0-1 |
|
||||||
- Update to 1.14.0 |
|
||||||
|
|
||||||
* Thu Jun 1 2017 Owen Taylor <otaylor@redhat.com> - 1.13.0-2 |
|
||||||
- Add a patch fixing a build error with newer versions of graphviz |
|
||||||
|
|
||||||
* Wed Feb 22 2017 Kalev Lember <klember@redhat.com> - 1.13.0-1 |
|
||||||
- Update to 1.13.0 |
|
||||||
|
|
||||||
* Sat Feb 11 2017 Fedora Release Engineering <releng@fedoraproject.org> - 1.12.91-2 |
|
||||||
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild |
|
||||||
|
|
||||||
* Wed Jan 25 2017 Kalev Lember <klember@redhat.com> - 1.12.91-1 |
|
||||||
- Update to 1.12.91 |
|
||||||
|
|
||||||
* Wed Sep 21 2016 Kalev Lember <klember@redhat.com> - 1.12.0-1 |
|
||||||
- Update to 1.12.0 |
|
||||||
|
|
||||||
* Wed Sep 14 2016 Kalev Lember <klember@redhat.com> - 1.11.94-1 |
|
||||||
- Update to 1.11.94 |
|
||||||
|
|
||||||
* Thu Sep 08 2016 Kalev Lember <klember@redhat.com> - 1.11.93-1 |
|
||||||
- Update to 1.11.93 |
|
||||||
|
|
||||||
* Wed Aug 31 2016 Kalev Lember <klember@redhat.com> - 1.11.92-1 |
|
||||||
- Update to 1.11.92 |
|
||||||
|
|
||||||
* Wed Aug 17 2016 Kalev Lember <klember@redhat.com> - 1.11.91-1 |
|
||||||
- Update to 1.11.91 |
|
||||||
- Simplify -devel subpackage packaging |
|
||||||
- Include license files in packaging |
|
||||||
|
|
||||||
* Wed Jun 01 2016 Kalev Lember <klember@redhat.com> - 1.11.0-1 |
|
||||||
- Update to 1.11.0 |
|
||||||
|
|
||||||
* Wed May 25 2016 Kalev Lember <klember@redhat.com> - 1.10.93-1 |
|
||||||
- Update to 1.10.93 |
|
||||||
|
|
||||||
* Wed May 18 2016 Kalev Lember <klember@redhat.com> - 1.10.92-1 |
|
||||||
- Update to 1.10.92 |
|
||||||
|
|
||||||
* Sun May 08 2016 Kalev Lember <klember@redhat.com> - 1.10.91-1 |
|
||||||
- Update to 1.10.91 |
|
||||||
|
|
||||||
* Thu Feb 18 2016 Kalev Lember <klember@redhat.com> - 1.10.0-1 |
|
||||||
- Update to 1.10.0 |
|
||||||
|
|
||||||
* Thu Feb 04 2016 Kalev Lember <klember@redhat.com> - 1.9.92-1 |
|
||||||
- Update to 1.9.92 |
|
||||||
|
|
||||||
* Wed Jan 20 2016 Kalev Lember <klember@redhat.com> - 1.9.91-1 |
|
||||||
- Update to 1.9.91 |
|
||||||
|
|
||||||
* Tue Sep 22 2015 Kalev Lember <klember@redhat.com> - 1.9.0-1 |
|
||||||
- Update to 1.9.0 |
|
||||||
- Use make_install macro |
|
||||||
|
|
||||||
* Wed Sep 16 2015 Kalev Lember <klember@redhat.com> - 1.8.93-1 |
|
||||||
- Update to 1.8.93 |
|
||||||
|
|
||||||
* Wed Sep 02 2015 Kalev Lember <klember@redhat.com> - 1.8.92-1 |
|
||||||
- Update to 1.8.92 |
|
||||||
|
|
||||||
* Fri Aug 21 2015 Kalev Lember <klember@redhat.com> - 1.8.91-2 |
|
||||||
- Split out wayland-doc subpackage for documentation |
|
||||||
|
|
||||||
* Fri Aug 21 2015 Kalev Lember <klember@redhat.com> - 1.8.91-1 |
|
||||||
- Update to 1.8.91 |
|
||||||
|
|
||||||
* Mon Jul 20 2015 Adam Jackson <ajax@redhat.com> 1.8.0-1 |
|
||||||
- wayland 1.8.0 |
|
||||||
|
|
||||||
* Fri Jun 19 2015 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.7.92-2 |
|
||||||
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild |
|
||||||
|
|
||||||
* Tue May 26 2015 Adam Jackson <ajax@redhat.com> 1.7.92-1 |
|
||||||
- wayland 1.7.92 |
|
||||||
|
|
||||||
* Sat Feb 21 2015 Till Maas <opensource@till.name> - 1.7.0-2 |
|
||||||
- Rebuilt for Fedora 23 Change |
|
||||||
https://fedoraproject.org/wiki/Changes/Harden_all_packages_with_position-independent_code |
|
||||||
|
|
||||||
* Tue Feb 17 2015 Richard Hughes <rhughes@redhat.com> - 1.7.0-1 |
|
||||||
- Wayland 1.7.0 |
|
||||||
|
|
||||||
* Fri Sep 19 2014 Kalev Lember <kalevlember@gmail.com> - 1.6.0-1 |
|
||||||
- Update to 1.6.0 |
|
||||||
- Remove lib64 rpaths |
|
||||||
|
|
||||||
* Fri Aug 22 2014 Kevin Fenzi <kevin@scrye.com> 1.5.91-1 |
|
||||||
- Update to 1.5.90 |
|
||||||
|
|
||||||
* Mon Aug 18 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.5.0-5 |
|
||||||
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild |
|
||||||
|
|
||||||
* Wed Jul 02 2014 Adam Jackson <ajax@redhat.com> 1.5.0-4 |
|
||||||
- Update protocol: new surface error enums |
|
||||||
|
|
||||||
* Mon Jun 30 2014 Adam Jackson <ajax@redhat.com> 1.5.0-3 |
|
||||||
- Remove blocking flush patch as it actually introduces deadlocks now |
|
||||||
|
|
||||||
* Sun Jun 08 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.5.0-2 |
|
||||||
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild |
|
||||||
|
|
||||||
* Wed May 21 2014 Richard Hughes <rhughes@redhat.com> - 1.5.0-1 |
|
||||||
- Wayland 1.5.0 |
|
||||||
|
|
||||||
* Tue May 13 2014 Richard Hughes <rhughes@redhat.com> - 1.4.93-1 |
|
||||||
- Wayland 1.4.93 |
|
||||||
|
|
||||||
* Fri Jan 24 2014 Richard Hughes <rhughes@redhat.com> - 1.4.0-1 |
|
||||||
- Wayland 1.4.0 |
|
||||||
|
|
||||||
* Mon Jan 20 2014 Richard Hughes <rhughes@redhat.com> - 1.3.93-1 |
|
||||||
- Wayland 1.3.93 |
|
||||||
|
|
||||||
* Sat Dec 21 2013 Ville Skyttä <ville.skytta@iki.fi> - 1.3.91-2 |
|
||||||
- Call ldconfig in libwayland-cursor %%post* scripts. |
|
||||||
- Run test suite during build. |
|
||||||
- Compress snapshot tarballs with xz. |
|
||||||
|
|
||||||
* Tue Dec 17 2013 Richard Hughes <rhughes@redhat.com> - 1.3.91-1 |
|
||||||
- Wayland 1.3.91 |
|
||||||
|
|
||||||
* Mon Nov 25 2013 Lubomir Rintel <lkundrak@v3.sk> - 1.3.0-1 |
|
||||||
- Wayland 1.3.0 |
|
||||||
|
|
||||||
* Mon Oct 07 2013 Adam Jackson <ajax@redhat.com> 1.2.0-3 |
|
||||||
- Don't use MSG_DONTWAIT in wl_connection_flush. |
|
||||||
|
|
||||||
* Sun Aug 04 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.2.0-2 |
|
||||||
- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild |
|
||||||
|
|
||||||
* Mon Jul 15 2013 Richard Hughes <rhughes@redhat.com> - 1.2.0-1 |
|
||||||
- wayland 1.2.0 |
|
||||||
|
|
||||||
* Wed May 15 2013 Richard Hughes <rhughes@redhat.com> - 1.1.90-0.1.20130515 |
|
||||||
- Update to a git snapshot based on what will become 1.1.90 |
|
||||||
|
|
||||||
* Tue Apr 16 2013 Richard Hughes <rhughes@redhat.com> - 1.1.0-1 |
|
||||||
- wayland 1.1.0 |
|
||||||
|
|
||||||
* Wed Mar 27 2013 Richard Hughes <rhughes@redhat.com> - 1.0.6-1 |
|
||||||
- wayland 1.0.6 |
|
||||||
|
|
||||||
* Thu Feb 21 2013 Adam Jackson <ajax@redhat.com> 1.0.5-1 |
|
||||||
- wayland 1.0.5 |
|
||||||
|
|
||||||
* Fri Feb 15 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.0.3-2 |
|
||||||
- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild |
|
||||||
|
|
||||||
* Wed Jan 02 2013 Adam Jackson <ajax@redhat.com> 1.0.3-1 |
|
||||||
- wayland 1.0.3 |
|
||||||
|
|
||||||
* Tue Oct 23 2012 Adam Jackson <ajax@redhat.com> 1.0.0-1 |
|
||||||
- wayland 1.0 |
|
||||||
|
|
||||||
* Thu Oct 18 2012 Adam Jackson <ajax@redhat.com> 0.99.0-1 |
|
||||||
- wayland 0.99.0 |
|
||||||
|
|
||||||
* Tue Sep 04 2012 Adam Jackson <ajax@redhat.com> 0.95.0-1 |
|
||||||
- wayland 0.95.0 (#843738) |
|
||||||
|
|
||||||
* Sun Jul 22 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.89.0-2.20120424 |
|
||||||
- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild |
|
||||||
|
|
||||||
* Tue Apr 24 2012 Richard Hughes <rhughes@redhat.com> - 0.89.0-1 |
|
||||||
- Update to a git snapshot based on 0.89.0 |
|
||||||
|
|
||||||
* Sat Feb 18 2012 Thorsten Leemhuis <fedora@leemhuis.info> - 0.85.0-1 |
|
||||||
- update to 0.85.0 |
|
||||||
- adjust license, as upstream changed it to MIT |
|
||||||
- update make-git-snapshot.sh to current locations and scheme |
|
||||||
- drop common package, not needed anymore |
|
||||||
- compositor is now in a separate package, hence reduce BuildRequires to what |
|
||||||
is actually needed (a lot less) and adjust summary |
|
||||||
- make usage of a git checkout in spec file optional |
|
||||||
- a %%{?_isa} to requires where it makes sense |
|
||||||
|
|
||||||
* Sat Jan 14 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.1-0.6.20101221 |
|
||||||
- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild |
|
||||||
|
|
||||||
* Tue Dec 06 2011 Adam Jackson <ajax@redhat.com> - 0.1-0.5.20101221 |
|
||||||
- Rebuild for new libpng |
|
||||||
|
|
||||||
* Wed Jun 15 2011 Lubomir Rintel <lkundrak@v3.sk> - 0.1-0.4.20101221 |
|
||||||
- Install real compositor binary instead of a libtool wrapper |
|
||||||
|
|
||||||
* Mon Feb 07 2011 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.1-0.3.20101221 |
|
||||||
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild |
|
||||||
|
|
||||||
* Tue Dec 21 2010 Adam Jackson <ajax@redhat.com> 0.1-0.2.20101221 |
|
||||||
- Today's git snap |
|
||||||
|
|
||||||
* Tue Nov 23 2010 Adam Jackson <ajax@redhat.com> 0.1-0.2.20101123 |
|
||||||
- Today's git snap |
|
||||||
- Fix udev rule install (#653353) |
|
||||||
|
|
||||||
* Mon Nov 15 2010 Adam Jackson <ajax@redhat.com> 0.1-0.1.20101111 |
|
||||||
- Initial packaging |
|
||||||
Loading…
Reference in new issue