add patch to remove /tmp/analogtv.size symlink attack (#41253). patch thanks to plasmagunman <plasmagunman@users.sourceforge.net>.

5 files changed, 191 insertions, 1 deletions

diff --git a/x11-misc/xscreensaver/ChangeLog b/x11-misc/xscreensaver/ChangeLog
index 6cbf0c536dcc..2c5b6a3fdf49 100644
--- a/x11-misc/xscreensaver/ChangeLog
+++ b/x11-misc/xscreensaver/ChangeLog
@@ -1,6 +1,13 @@
 # ChangeLog for x11-misc/xscreensaver
 # Copyright 2002-2004 Gentoo Technologies, Inc.; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/x11-misc/xscreensaver/ChangeLog,v 1.47 2004/02/07 00:53:54 pylon Exp $
+# $Header: /var/cvsroot/gentoo-x86/x11-misc/xscreensaver/ChangeLog,v 1.48 2004/02/19 11:21:21 liquidx Exp $
+
+*xscreensaver-4.14-r2 (19 Feb 2004)
+
+  19 Feb 2004; Alastair Tse <liquidx@gentoo.org> xscreensaver-4.14-r2.ebuild,
+  files/xscreensaver-4.14-analogtv_tmp.patch:
+  add patch to remove /tmp/analogtv.size symlink attack (#41253). patch thanks
+  to plasmagunman <plasmagunman@users.sourceforge.net>.
 
   07 Feb 2004; Lars Weiler <pylon@gentoo.org> xscreensaver-4.14-r1.ebuild:
   stable on ppc
diff --git a/x11-misc/xscreensaver/Manifest b/x11-misc/xscreensaver/Manifest
index a94fc8446457..931bed3d5f42 100644
--- a/x11-misc/xscreensaver/Manifest
+++ b/x11-misc/xscreensaver/Manifest
@@ -3,14 +3,17 @@ MD5 0c7e1c065d3ff356793aa700b36c3380 metadata.xml 309
 MD5 d0b26b109362d6e27f44c8b91efd5619 xscreensaver-4.05-r3.ebuild 2471
 MD5 31280a94b2c849cb1e791e966b111f3f xscreensaver-4.10.ebuild 4493
 MD5 7264ed9546ebf5c2e9ebff058d5decbf xscreensaver-4.14-r1.ebuild 4592
+MD5 26ffb460404c1b57e3c94560faa5fd86 xscreensaver-4.14-r2.ebuild 4707
 MD5 2626622aecb3ac1e23a98a135af75c56 xscreensaver-4.14.ebuild 4379
 MD5 ab5c2c76af72bf7bc833b2ad04a4875a files/digest-xscreensaver-4.05-r3 70
 MD5 090965baf6477220cda1f998feae72d6 files/digest-xscreensaver-4.10 70
 MD5 a7b4dde4c87b97301e1a02c7ddc2dfc9 files/digest-xscreensaver-4.14 70
 MD5 a7b4dde4c87b97301e1a02c7ddc2dfc9 files/digest-xscreensaver-4.14-r1 70
+MD5 a7b4dde4c87b97301e1a02c7ddc2dfc9 files/digest-xscreensaver-4.14-r2 70
 MD5 dc4579312065187f296cd6fdeba96664 files/xscreensaver-4.09-norpm.patch 1266
 MD5 51f90e218232e1e767a3962668c7ec9f files/xscreensaver-4.10-klein.c 10125
 MD5 dc4579312065187f296cd6fdeba96664 files/xscreensaver-4.10-norpm.patch 1266
 MD5 23c5d8085eb70d6dc6168857a31cc284 files/xscreensaver-4.14-fortune.patch 348
 MD5 18988e2c62fe964e00bc98c251dba3ee files/xscreensaver-4.14-icc.patch 8126
+MD5 8bd9730fb1f84b69efac29fab28d0db2 files/xscreensaver-4.14.analogtv_tmp.patch 419
 MD5 6eb40b28a36f889d0f1919cdbf160ef7 files/pam.d/xscreensaver 79
diff --git a/x11-misc/xscreensaver/files/digest-xscreensaver-4.14-r2 b/x11-misc/xscreensaver/files/digest-xscreensaver-4.14-r2
new file mode 100644
index 000000000000..496ba8a7d261
--- /dev/null
+++ b/x11-misc/xscreensaver/files/digest-xscreensaver-4.14-r2
@@ -0,0 +1 @@
+MD5 84ef242bab91fc64a4370cbb90df06ed xscreensaver-4.14.tar.gz 3988251
diff --git a/x11-misc/xscreensaver/files/xscreensaver-4.14-analogtv_tmp.patch b/x11-misc/xscreensaver/files/xscreensaver-4.14-analogtv_tmp.patch
new file mode 100644
index 000000000000..786d5a08a09c
--- /dev/null
+++ b/x11-misc/xscreensaver/files/xscreensaver-4.14-analogtv_tmp.patch
@@ -0,0 +1,15 @@
+--- hacks/analogtv.c.orig	2004-02-19 10:07:05.331873912 +0000
++++ hacks/analogtv.c	2004-02-19 10:07:21.449423672 +0000
+@@ -292,12 +292,6 @@
+   /* Scale width proportionally */
+   wlim=wlim*hlim/ohlim;
+ 
+-  {
+-    FILE *fp=fopen("/tmp/analogtv.size","w");
+-    fprintf(fp,"wlim=%d hlim=%d\n", wlim, hlim);
+-    fclose(fp);
+-  }
+-
+   /* Most times this doesn't change */
+   if (wlim != oldwidth || hlim != oldheight) {
+ 
diff --git a/x11-misc/xscreensaver/xscreensaver-4.14-r2.ebuild b/x11-misc/xscreensaver/xscreensaver-4.14-r2.ebuild
new file mode 100644
index 000000000000..5cc497d5d2b3
--- /dev/null
+++ b/x11-misc/xscreensaver/xscreensaver-4.14-r2.ebuild
@@ -0,0 +1,164 @@
+# Copyright 1999-2004 Gentoo Technologies, Inc.
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/x11-misc/xscreensaver/xscreensaver-4.14-r2.ebuild,v 1.1 2004/02/19 11:21:21 liquidx Exp $
+
+IUSE="pam kerberos krb4 gtk gtk2 gnome opengl jpeg xinerama icc"
+
+DESCRIPTION="a modular screensaver for X11"
+SRC_URI="http://www.jwz.org/xscreensaver/${P}.tar.gz"
+HOMEPAGE="http://www.jwz.org/xscreensaver/"
+
+LICENSE="BSD"
+KEYWORDS="x86 ppc sparc alpha amd64 ia64 hppa"
+SLOT="0"
+
+# NOTE: the motif interface is not supported/developed anymore
+#       by xscreensaver devs. so we should deprecate it soon
+# FIXME: xscreensaver does it's own detection of gtk2 and uses gtk2
+#        automatically over gtk1. we need to patch the autoconf stuff
+#        to correctly allow users to choose gtk1/gtk2. right now it
+#        only selects the deps.
+# NOTE: ignore app-games/fortune-mod as a dep. it is pluggable and won't
+#       really matter if it isn't there. Maybe we should have a 'games'
+#       USE flag
+
+RDEPEND="virtual/x11
+	media-libs/netpbm
+	>=sys-libs/zlib-1.1.4
+	gtk? ( >=dev-libs/libxml2-2.5 )
+	gtk? ( gtk2? ( >=x11-libs/gtk+-2
+					>=gnome-base/libglade-1.99
+					>=dev-libs/glib-2 ) )
+	gtk? ( gtk2? ( gnome? ( >=gnome-extra/yelp-2 ) ) )
+	gtk? ( !gtk2? ( =x11-libs/gtk+-1.2*
+					=gnome-base/libglade-0.17* ) )
+	gtk? ( !gtk2? ( gnome? ( =gnome-base/control-center-1.4*
+							>=media-libs/gdk-pixbuf-0.18
+							>=gnome-base/gnome-libs-1.4 ) ) )
+	!gtk? ( x11-libs/openmotif )
+	pam? ( sys-libs/pam )
+	kerberos? ( krb4? ( >=app-crypt/mit-krb5-1.2.5 ) )
+	jpeg? ( media-libs/jpeg )
+	opengl? ( virtual/opengl
+	          >=media-libs/gle-3.0.1 )"
+
+DEPEND="${RDEPEND}
+	sys-devel/bc
+	dev-lang/perl
+	gtk2? ( dev-util/pkgconfig )
+	nls? ( sys-devel/gettext )"
+
+pkg_setup() {
+	if [ -n "`use kerberos`" -a -z "`use krb4`" ]; then
+		ewarn "You have enabled kerberos without krb4 support. Kerberos will be"
+		ewarn "disabled unless kerberos 4 support has been compiled with your"
+		ewarn "kerberos libraries. To do that, you should abort now and do:"
+		ewarn ""
+		ewarn " USE=\"krb4\" emerge mit-krb5"
+		ewarn
+		sleep 2
+	fi
+}
+
+src_unpack() {
+	unpack ${A}
+
+	# disable rpm -q checking, otherwise it breaks sandbox if rpm is installed
+	EPATCH_OPTS="-d ${S}" epatch ${FILESDIR}/${PN}-4.10-norpm.patch
+	# set default fortune to /usr/bin/fortune even if one can't be found
+	EPATCH_OPTS="-d ${S}" epatch ${FILESDIR}/${PN}-4.14-fortune.patch
+	use icc && EPATCH_OPTS="-d ${S}" epatch ${FILESDIR}/${P}-icc.patch
+	# remove possible symlink attack (#41253)
+	EPATCH_OPTS="-d ${S}" epatch ${FILESDIR}/${PN}-4.14-analogtv_tmp.patch
+
+}
+
+src_compile() {
+	local myconf=""
+
+	myconf="--with-fortune=/usr/bin/fortune"
+
+	use gtk \
+		&& myconf="${myconf} --without-motif --with-gtk --with-xml" \
+		|| myconf="${myconf} --with-motif --without-gtk --without-gdk-pixbuf"
+
+	use xinerama \
+		&& myconf="${myconf} --with-xinerama-ext" \
+		|| myconf="${myconf} --without-xinerama-ext"
+
+	use pam \
+		&& myconf="${myconf} --with-pam" \
+		|| myconf="${myconf} --without-pam"
+
+	use kerberos && use krb4 \
+		&& myconf="${myconf} --with-kerberos" \
+		|| myconf="${myconf} --without-kerberos"
+
+	use opengl \
+		&& myconf="${myconf} --with-gl --with-gle" \
+		|| myconf="${myconf} --without-gl --without-gle"
+
+	use jpeg \
+		&& myconf="${myconf} --with-jpeg" \
+		|| myconf="${myconf} --without-jpeg"
+
+	use nls \
+		&& myconf="${myconf} --enable-nls" \
+		|| myconf="${myconf} --disable-nls"
+
+
+	if [ -z "`use gtk2`" -a -n "`use gtk`" ]; then
+		if [ -n "`use gnome`" ]; then
+			myconf="${myconf} --with-gnome --with-pixbuf"
+		fi
+	fi
+
+	use icc && export CC=icc
+	use icc && autoconf
+
+	econf \
+		--enable-hackdir=/usr/lib/xscreensaver \
+		--x-libraries=/usr/X11R6/lib \
+		--x-includes=/usr/X11R6/include \
+		--with-mit-ext \
+		--with-dpms-ext \
+		--with-xf86vmode-ext \
+		--with-xf86gamma-ext \
+		--with-proc-interrupts \
+		--with-xpm \
+		--with-xshm-ext \
+		--with-xdbe-ext \
+		--enable-locking \
+		${myconf} || die
+
+	emake || die
+}
+
+src_install() {
+	[ -n "${KDEDIR}" ] && dodir ${KDEDIR}/bin
+
+	make install_prefix="${D}" install || die
+
+	# install correctly in gnome2
+	use gnome && ( \
+		dodir /usr/share/gnome/capplets
+		insinto /usr/share/gnome/capplets
+		doins driver/screensaver-properties.desktop
+	)
+
+	# install symlink to satisfy kde
+	use kde && dosym /usr/share/control-center/screensavers /usr/lib/xscreensaver/config
+
+	# Remove "extra" capplet
+	rm -f ${D}/usr/share/control-center/capplets/screensaver-properties.desktop
+
+	use gnome && ( \
+		insinto /usr/share/pixmaps
+		newins ${S}/utils/images/logo-50.xpm xscreensaver.xpm
+	)
+
+	use pam && ( \
+		insinto /etc/pam.d
+		doins ${FILESDIR}/pam.d/xscreensaver
+	)
+}