Security bump for wallop off-by-one heap access, bug #271875.

Package-Manager: portage-2.2_rc33/cvs/Linux x86_64

4 files changed, 92 insertions, 6 deletions

diff --git a/net-irc/irssi/ChangeLog b/net-irc/irssi/ChangeLog
index 15892ca664c9..838a74f3ce26 100644
--- a/net-irc/irssi/ChangeLog
+++ b/net-irc/irssi/ChangeLog
@@ -1,6 +1,12 @@
 # ChangeLog for net-irc/irssi
-# Copyright 2002-2009 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/net-irc/irssi/ChangeLog,v 1.139 2009/04/01 08:19:09 swegener Exp $
+# Copyright 1999-2009 Gentoo Foundation; Distributed under the GPL v2
+# $Header: /var/cvsroot/gentoo-x86/net-irc/irssi/ChangeLog,v 1.140 2009/05/31 16:13:54 swegener Exp $
+
+*irssi-0.8.13-r1 (31 May 2009)
+
+  31 May 2009; Sven Wegener <swegener@gentoo.org> +irssi-0.8.13-r1.ebuild,
+  +files/irssi-0.8.13-svn-5068.patch:
+  Security bump for wallop off-by-one heap access, bug #271875.
 
 *irssi-0.8.13 (01 Apr 2009)
 
diff --git a/net-irc/irssi/Manifest b/net-irc/irssi/Manifest
index e58f6b53f367..677532785753 100644
--- a/net-irc/irssi/Manifest
+++ b/net-irc/irssi/Manifest
@@ -6,16 +6,18 @@ AUX irssi-0.8.12-svn-4627.patch 701 RMD160 a38716dedeee45a3cec0d34834df60bbcb72e
 AUX irssi-0.8.12-svn-4637.patch 747 RMD160 b645519cc7cde0668107f1f125054131db6de174 SHA1 0ae5f5e610ea78aacf46ac1c482b68d58827d8f1 SHA256 d2adcecf69f97a43e256752269e7c3696a5a74397b08fbbc871f5b0efbdbb4d7
 AUX irssi-0.8.12-svn-4640.patch 2630 RMD160 c261991ff8d2450dbe02b27133eeba2b7114e3ab SHA1 e000c414b4bbd37ad7d7ed7475b96c32516432b7 SHA256 d347e17bf7a10da09f883a33ca539ac5bd43cfecf7945e49c8223e33c8fe262e
 AUX irssi-0.8.12-svn-4829.patch 924 RMD160 35a9e33ff801663911c9c9a36af836733333a710 SHA1 11edfa08d880ab9b1f00c1e8cd973dc7d96f69f4 SHA256 eaebef6519a3f10b085547a6a18a768e68ac68b74ed7252d834e5cdb6e4335f5
+AUX irssi-0.8.13-svn-5068.patch 642 RMD160 ddf56bcf33e86a8bf1b57b261ef3f95abff0aded SHA1 9d6b25e5c1784bff4e5b6bd6d2fd8cabf82c0fb3 SHA256 5a45946646b2bc67fa73967b765a522d756d08928c248f7eccc032c05e7db94e
 DIST irssi-0.8.12.tar.bz2 935918 RMD160 0588e6c2df0425c4f36bd84c1621d9ad170b6a81 SHA1 00ecca04766c51feef057b2327f67166be473fa3 SHA256 462d634bb509cc2bdd550ee5c7b269495f3173721b7404f162ad1f69b49bfff0
 DIST irssi-0.8.13.tar.bz2 946203 RMD160 d09b76fcb6cbdacea510cefd63ad5638b623f5a3 SHA1 8ad6e5de345e64a2aad372ae237fd59a7b43f47b SHA256 896541ac837421290934e2658ab364d4d3f0326259489a94a0cd166e2b05d735
 EBUILD irssi-0.8.12.ebuild 1489 RMD160 3030634af02f2bb03a6ab8cd606afdfebf5a812d SHA1 ee1f45d1774a75e23be1aa188eccc9fd1e4edb80 SHA256 5175245a5219a5f5c597ded33514b673604ba7fce6364aab374b0e7f6bbd6e74
+EBUILD irssi-0.8.13-r1.ebuild 1328 RMD160 67aa5d8422d5073aeb7c7fde8ab30cb61a66025b SHA1 16691e4d37e7841f92fde87c834ef8fd5ed625be SHA256 6c24384d490756e67b1f4c45f73a27d66a570885a55b22396ed886867632500c
 EBUILD irssi-0.8.13.ebuild 1282 RMD160 f2ce9ef1b1c10784522f272ab17309408dbde749 SHA1 677dd84035d6b312dc7f6b0c1c6dd7bbee5f9cbc SHA256 b28298f1367fde62908c7b7ce3e61058af5d999bcdb534d510e88bcdc439eee6
-MISC ChangeLog 19021 RMD160 df166b43057771c0e707b526c220ff282af1c241 SHA1 45b44ef58ddb6fd3d7cff070a64d33e6b4dda589 SHA256 91b71986cf31e5581305555839d5b9a8c68441447bd4fb58d03b5e3c3d00e010
+MISC ChangeLog 19231 RMD160 b92e5fd83290bafd4180f4b4d027d9d15e0d1cda SHA1 c0c6d220296dc595d4d5b9d66fe2ded7fb71045a SHA256 8d7558979171cf1924d364179a482f731824d28f6e6c85019f79901d21362211
 MISC metadata.xml 270 RMD160 217b6381a937b94caa61f5d1dcbcdf24fe2852f1 SHA1 1e8951324990f813bd348ce2b1c4fc75cb097250 SHA256 4962741e0eded229c8ac0cca6dc8fed203d9b63ed7d8de546c661e6661579c75
 -----BEGIN PGP SIGNATURE-----
 Version: GnuPG v2.0.11 (GNU/Linux)
 
-iEYEARECAAYFAknTI4gACgkQI1lqEGTUzyRiKwCfeUcEOD3aJp6zm5ulTk5aVBRX
-pJ8An2O26MTAZNS2szKvNg2RHZlzbTeE
-=oWxI
+iEYEARECAAYFAkoirMoACgkQI1lqEGTUzyQNRACcC9+2kRU7szIuFkcHL1G9ZepB
+nsgAn2xBZiy28pLUIKq4pijklQBED7E8
+=SI4O
 -----END PGP SIGNATURE-----
diff --git a/net-irc/irssi/files/irssi-0.8.13-svn-5068.patch b/net-irc/irssi/files/irssi-0.8.13-svn-5068.patch
new file mode 100644
index 000000000000..1c93fda42807
--- /dev/null
+++ b/net-irc/irssi/files/irssi-0.8.13-svn-5068.patch
@@ -0,0 +1,20 @@
+r5068 | jilles | 2009-05-15 11:54:33 +0000 (Fri, 15 May 2009) | 5 lines
+
+Fix out of bounds access in event_wallops().
+
+bug #662
+Submitted by: nemo
+
+Index: irssi/src/fe-common/irc/fe-events.c
+===================================================================
+--- irssi/src/fe-common/irc/fe-events.c	(revision 5067)
++++ irssi/src/fe-common/irc/fe-events.c	(revision 5068)
+@@ -298,7 +298,7 @@
+ 
+ 		tmp = g_strdup(data+8);
+ 		len = strlen(tmp);
+-		if (tmp[len-1] == 1) tmp[len-1] = '\0';
++		if (len >= 1 && tmp[len-1] == 1) tmp[len-1] = '\0';
+ 		printformat(server, NULL, MSGLEVEL_WALLOPS, IRCTXT_ACTION_WALLOPS, nick, tmp);
+ 		g_free(tmp);
+ 	}
diff --git a/net-irc/irssi/irssi-0.8.13-r1.ebuild b/net-irc/irssi/irssi-0.8.13-r1.ebuild
new file mode 100644
index 000000000000..0e3ec8652696
--- /dev/null
+++ b/net-irc/irssi/irssi-0.8.13-r1.ebuild
@@ -0,0 +1,58 @@
+# Copyright 1999-2009 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/net-irc/irssi/irssi-0.8.13-r1.ebuild,v 1.1 2009/05/31 16:13:54 swegener Exp $
+
+inherit perl-module
+
+DESCRIPTION="A modular textUI IRC client with IPv6 support"
+HOMEPAGE="http://irssi.org/"
+SRC_URI="http://irssi.org/files/${P}.tar.bz2"
+
+LICENSE="GPL-2"
+SLOT="0"
+KEYWORDS="~alpha ~amd64 ~arm ~hppa ~ia64 ~mips ~ppc ~ppc64 ~s390 ~sh ~sparc ~x86 ~x86-fbsd"
+IUSE="ipv6 perl ssl socks5"
+
+RDEPEND="sys-libs/ncurses
+	>=dev-libs/glib-2.2.1
+	ssl? ( dev-libs/openssl )
+	perl? ( dev-lang/perl )
+	socks5? ( >=net-proxy/dante-1.1.18 )"
+DEPEND="${RDEPEND}
+	>=dev-util/pkgconfig-0.9.0"
+RDEPEND="${RDEPEND}
+	perl? ( !net-im/silc-client )
+	!net-irc/irssi-svn"
+
+src_unpack() {
+	unpack ${A}
+	cd "${S}"
+
+	epatch "${FILESDIR}"/${P}-svn-5068.patch
+
+	epunt_cxx
+}
+
+src_compile() {
+	econf \
+		--with-proxy \
+		--with-ncurses \
+		--with-perl-lib=vendor \
+		$(use_with perl) \
+		$(use_with socks5 socks) \
+		$(use_enable ssl) \
+		$(use_enable ipv6) \
+		|| die "econf failed"
+	emake || die "emake failed"
+}
+
+src_install() {
+	make \
+		DESTDIR="${D}" \
+		docdir=/usr/share/doc/${PF} \
+		install || die "make install failed"
+
+	use perl && fixlocalpod
+
+	dodoc AUTHORS ChangeLog README TODO NEWS || die "dodoc failed"
+}