- added CVE-2010-2642 patch from t1lib-5.1.2-10.1.src.rpm (OpenSuSE), rel. 4

Changed files:
    t1lib-5.1.2-CVE-2010-2642.patch -> 1.1
    t1lib.spec -> 1.83

diff --git a/t1lib-5.1.2-CVE-2010-2642.patch b/t1lib-5.1.2-CVE-2010-2642.patch
new file mode 100644 (file)
index 0000000..933666c
--- /dev/null
+++ b/t1lib-5.1.2-CVE-2010-2642.patch
@@ -0,0 +1,13 @@
+Index: t1lib-5.1.2/lib/t1lib/parseAFM.c
+===================================================================
+--- t1lib-5.1.2.orig/lib/t1lib/parseAFM.c      2007-12-23 16:49:42.000000000 +0100
++++ t1lib-5.1.2/lib/t1lib/parseAFM.c   2011-01-07 10:52:38.953106681 +0100
+@@ -199,7 +199,7 @@
+     idx = 0;
+     
+     while (ch != EOF && ch != ' ' && ch != CR  && ch != LF &&
+-         ch != CTRL_Z && ch != '\t' && ch != ':' && ch != ';'){
++         ch != CTRL_Z && ch != '\t' && ch != ':' && ch != ';' && idx < MAX_NAME){
+       ident[idx++] = ch;
+       ch = fgetc(stream);
+     } /* while */

diff --git a/t1lib.spec b/t1lib.spec
index c6da1dd820789991e29961949166c260e383b07e..d8a1097aaa3646f00b149721cd905a9d5eaced9a 100644 (file)
--- a/t1lib.spec
+++ b/t1lib.spec
@@ -9,7 +9,7 @@ Summary(ru.UTF-8):      Растеризатор шрифтов Type 1
 Summary(uk.UTF-8):     Растеризатор шрифтів Type 1
 Name:          t1lib
 Version:       5.1.2
-Release:       3
+Release:       4
 License:       GPL v2
 Group:         Libraries
 Source0:       ftp://sunsite.unc.edu/pub/Linux/libs/graphics/%{name}-%{version}.tar.gz
@@ -25,6 +25,7 @@ Patch3:               %{name}-man.patch
 Patch4:                %{name}-xglyph.patch
 Patch5:                %{name}-aclocal.patch
 Patch6:                %{name}-link.patch
+Patch7:                %{name}-5.1.2-CVE-2010-2642.patch
 BuildRequires: autoconf
 BuildRequires: automake
 BuildRequires: libtool
@@ -245,6 +246,7 @@ Program testowy dla t1lib z interfejsem X11.
 %patch4 -p1
 %patch5 -p1
 %patch6 -p1
+%patch7 -p1
 
 rm -f ac-tools/aclocal.m4