Security fix for CVE-2010-1028

- Various other fixes collected by Debian and contributed back upstream
  to the sfnt2woff-zopfli fork:
  https://github.com/bramstein/sfnt2woff-zopfli/pull/20

woff.spec

@@ -25,7 +25,7 @@ Source2:        woff2sfnt.1
 #
 # Fix a possible double free in woffEncode()
 # https://github.com/bramstein/sfnt2woff-zopfli/pull/18
-Patch:          possible-double-free.patch
+Patch0:         possible-double-free.patch
 
 # Add full text of the three WOFF licenses:
 #   - LICENSE-WOFF-MPL, from
@@ -35,10 +35,10 @@ Patch:          possible-double-free.patch
 #   - LICENSE-WOFF-LGPL, from
 #     https://www.gnu.org/licenses/old-licenses/lgpl-2.1.txt
 # https://github.com/bramstein/sfnt2woff-zopfli/commit/7e08f1c944142c8e37050d9e02d91ec326d60ba5
-Patch:          https://github.com/bramstein/sfnt2woff-zopfli/commit/7e08f1c944142c8e37050d9e02d91ec326d60ba5.patch
+Patch1:         https://github.com/bramstein/sfnt2woff-zopfli/commit/7e08f1c944142c8e37050d9e02d91ec326d60ba5.patch
 # Update GPL/LGPL license texts for remote-only FS
 # https://github.com/bramstein/sfnt2woff-zopfli/pull/21
-Patch:          https://github.com/bramstein/sfnt2woff-zopfli/pull/21.patch
+Patch2:         https://github.com/bramstein/sfnt2woff-zopfli/pull/21.patch
 
 # Fix segfault due to https://bugs.debian.org/785795.
 #   Remaining Debian patch rollup
@@ -49,16 +49,13 @@ Patch:          https://github.com/bramstein/sfnt2woff-zopfli/pull/21.patch
 # - Fix segfault due to https://bugs.debian.org/785795
 #   https://github.com/bramstein/sfnt2woff-zopfli/pull/20/commits/51d74ebc4ab782f9e272fa4f135ee2375c991a5b
 #   Rebased from the sfnt2woff-zopfli fork onto the original woff release
-Patch:          segfault-debian-bug-785795.patch
+Patch3:         segfault-debian-bug-785795.patch
 # - Add arithmetic overflow checks in woff encoding routines
-Patch:          https://sources.debian.org/data/main/w/woff-tools/0%3A2009.10.04-2/debian/patches/add-overflow-checks.patch
+Patch4:         https://sources.debian.org/data/main/w/woff-tools/0%3A2009.10.04-2/debian/patches/add-overflow-checks.patch
 # - Fix CVE-2010-1028: WOFF heap corruption due to integer overflow
-Patch:          https://sources.debian.org/data/main/w/woff-tools/0%3A2009.10.04-2/debian/patches/CVE-2010-1028.patch
+Patch5:         https://sources.debian.org/data/main/w/woff-tools/0%3A2009.10.04-2/debian/patches/CVE-2010-1028.patch
 # - fix some compiler and cppcheck warnings
-Patch:          https://sources.debian.org/data/main/w/woff-tools/0%3A2009.10.04-2/debian/patches/fix-compiler-and-cppcheck-warnings.patch
-
-# https://fedoraproject.org/wiki/Changes/EncourageI686LeafRemoval
-ExcludeArch:    %{ix86}
+Patch6:         https://sources.debian.org/data/main/w/woff-tools/0%3A2009.10.04-2/debian/patches/fix-compiler-and-cppcheck-warnings.patch
 
 BuildRequires:  make
 BuildRequires:  gcc
@@ -74,6 +71,7 @@ decoding Web Open Font Format (WOFF) files.
 
 
 %build
+%set_build_flags
 %make_build CFLAGS="${CFLAGS}"
 awk '
     /BEGIN LICENSE BLOCK/ { b = 1 }
@@ -84,10 +82,10 @@ awk '
 
 %install
 # The Makefile has no install target.
-install -D --preserve-timestamps \
-    --target='%{buildroot}%{_bindir}' sfnt2woff woff2sfnt
-install -D --preserve-timestamps --mode=0644 \
-    --target='%{buildroot}%{_mandir}/man1' '%{SOURCE1}' '%{SOURCE2}'
+install -d '%{buildroot}%{_bindir}'
+install -t '%{buildroot}%{_bindir}' -p sfnt2woff woff2sfnt
+install -d '%{buildroot}%{_mandir}/man1'
+install -t '%{buildroot}%{_mandir}/man1' -p -m 0644 '%{SOURCE1}' '%{SOURCE2}'
 
 
 # Upstream provides no tests