aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorNatanael Copa <ncopa@alpinelinux.org>2014-04-14 07:36:22 +0000
committerNatanael Copa <ncopa@alpinelinux.org>2014-04-14 07:36:48 +0000
commit2a171f24b7e00170234f0e8e464afa79e34d2e32 (patch)
treef926faf8fb20dd2f1de2bd2f756e6dc10de1a560
parent59917f61e8b96f7eb5f3fc6c9a159c0fc03f1b8e (diff)
downloadalpine_aports-2a171f24b7e00170234f0e8e464afa79e34d2e32.tar.bz2
alpine_aports-2a171f24b7e00170234f0e8e464afa79e34d2e32.tar.xz
alpine_aports-2a171f24b7e00170234f0e8e464afa79e34d2e32.zip
main/libjpeg-turbo: upgrade to 1.3.1
-rw-r--r--main/libjpeg-turbo/APKBUILD14
-rw-r--r--main/libjpeg-turbo/CVE-2013-6629-CVE-2013-6630.patch34
2 files changed, 5 insertions, 43 deletions
diff --git a/main/libjpeg-turbo/APKBUILD b/main/libjpeg-turbo/APKBUILD
index d41b68e6b4..24c04bdb3c 100644
--- a/main/libjpeg-turbo/APKBUILD
+++ b/main/libjpeg-turbo/APKBUILD
@@ -1,8 +1,8 @@
1# Contributor: Carlo Landmeter <clandmeter@gmail.com> 1# Contributor: Carlo Landmeter <clandmeter@gmail.com>
2# Maintainer: Natanael Copa <ncopa@alpinelinux.org> 2# Maintainer: Natanael Copa <ncopa@alpinelinux.org>
3pkgname=libjpeg-turbo 3pkgname=libjpeg-turbo
4pkgver=1.3.0 4pkgver=1.3.1
5pkgrel=1 5pkgrel=0
6pkgdesc="accelerated baseline JPEG compression and decompression library" 6pkgdesc="accelerated baseline JPEG compression and decompression library"
7url="http://libjpeg-turbo.virtualgl.org/" 7url="http://libjpeg-turbo.virtualgl.org/"
8arch="all" 8arch="all"
@@ -14,7 +14,6 @@ install=""
14replaces="libjpeg" 14replaces="libjpeg"
15subpackages="$pkgname-dev $pkgname-doc $pkgname-utils" 15subpackages="$pkgname-dev $pkgname-doc $pkgname-utils"
16source="http://downloads.sourceforge.net/libjpeg-turbo/libjpeg-turbo-$pkgver.tar.gz 16source="http://downloads.sourceforge.net/libjpeg-turbo/libjpeg-turbo-$pkgver.tar.gz
17 CVE-2013-6629-CVE-2013-6630.patch
18 " 17 "
19 18
20_builddir="$srcdir"/libjpeg-turbo-$pkgver 19_builddir="$srcdir"/libjpeg-turbo-$pkgver
@@ -68,9 +67,6 @@ dev() {
68 replaces="jpeg-dev" 67 replaces="jpeg-dev"
69} 68}
70 69
71md5sums="e1e65cc711a1ade1322c06ad4a647741 libjpeg-turbo-1.3.0.tar.gz 70md5sums="2c3a68129dac443a72815ff5bb374b05 libjpeg-turbo-1.3.1.tar.gz"
727205b1ed38d47e8736c34c972b1f0367 CVE-2013-6629-CVE-2013-6630.patch" 71sha256sums="c132907417ddc40ed552fe53d6b91d5fecbb14a356a60ddc7ea50d6be9666fb9 libjpeg-turbo-1.3.1.tar.gz"
73sha256sums="2657008cfc08aadbaca065bd9f8964b8a2c0abd03e73da5b5f09c1216be31234 libjpeg-turbo-1.3.0.tar.gz 72sha512sums="6b02dc617e291b357230ef3e8cfcd27f9acc8c3e9f1c869ab0a08e9e13711b87156c6cd1aaa1a6406a873fc6732f44c8a7d94a5d6688d24b14ac63a96ee52081 libjpeg-turbo-1.3.1.tar.gz"
743fa40eecb3d80c7c5a12e6ba86e95f381dcacf302d2d72f24858472999b72278 CVE-2013-6629-CVE-2013-6630.patch"
75sha512sums="4d34c3c5f2cdd70b2a3d1b55eeb4ce59cb3d4b8d22bb6d43c2ec844b7eb5685b55a9b1b46ad2bc5f2756b5f5535ccad032791c3b932af9c1efc502aa5e701053 libjpeg-turbo-1.3.0.tar.gz
764ed52c38b9d3dc27f4665216b9d8ca91dbf8e8c7aefc9016e9dd86b7f18cc763223db517fc8545732e28df766630c126c0c0cbe237a51070b0ba140cce4c8b73 CVE-2013-6629-CVE-2013-6630.patch"
diff --git a/main/libjpeg-turbo/CVE-2013-6629-CVE-2013-6630.patch b/main/libjpeg-turbo/CVE-2013-6629-CVE-2013-6630.patch
deleted file mode 100644
index 7a93d4be23..0000000000
--- a/main/libjpeg-turbo/CVE-2013-6629-CVE-2013-6630.patch
+++ /dev/null
@@ -1,34 +0,0 @@
1--- a/jdmarker.c
2+++ b/jdmarker.c
3@@ -304,7 +304,7 @@
4 /* Process a SOS marker */
5 {
6 INT32 length;
7- int i, ci, n, c, cc;
8+ int i, ci, n, c, cc, pi;
9 jpeg_component_info * compptr;
10 INPUT_VARS(cinfo);
11
12@@ -348,6 +348,13 @@
13
14 TRACEMS3(cinfo, 1, JTRC_SOS_COMPONENT, cc,
15 compptr->dc_tbl_no, compptr->ac_tbl_no);
16+
17+ /* This CSi (cc) should differ from the previous CSi */
18+ for (pi = 0; pi < i; pi++) {
19+ if (cinfo->cur_comp_info[pi] == compptr) {
20+ ERREXIT1(cinfo, JERR_BAD_COMPONENT_ID, cc);
21+ }
22+ }
23 }
24
25 /* Collect the additional scan parameters Ss, Se, Ah/Al. */
26@@ -464,6 +471,8 @@
27
28 for (i = 0; i < count; i++)
29 INPUT_BYTE(cinfo, huffval[i], return FALSE);
30+
31+ MEMZERO(&huffval[count], (256 - count) * SIZEOF(UINT8));
32
33 length -= count;
34