Compare commits

...
Sign in to create a new pull request.

6 commits

Author SHA1 Message Date
9cb5a1d4af fixup patch 2012-08-05 17:59:50 -05:00
5a11b2e718 backport msword filter overflow 2012-08-05 17:50:17 -05:00
Fedora Release Engineering
2bcc03006d dist-git conversion 2010-07-29 15:27:47 +00:00
Bill Nottingham
adafcaa842 Fix typo that causes a failure to update the common directory. (releng
#2781)
2009-11-26 01:19:13 +00:00
a667540849 Initialize branch EL-5 for wv2 2007-10-30 16:31:35 +00:00
Andreas Bierfert
7377212bdd - new license tag
- rebuild for buildid (devel)
2007-08-23 06:18:01 +00:00
4 changed files with 26 additions and 23 deletions

View file

View file

@ -1,21 +0,0 @@
# Makefile for source rpm: wv2
# $Id$
NAME := wv2
SPECFILE = $(firstword $(wildcard *.spec))
define find-makefile-common
for d in common ../common ../../common ; do if [ -f $$d/Makefile.common ] ; then if [ -f $$d/CVS/Root -a -w $$/Makefile.common ] ; then cd $$d ; cvs -Q update ; fi ; echo "$$d/Makefile.common" ; break ; fi ; done
endef
MAKEFILE_COMMON := $(shell $(find-makefile-common))
ifeq ($(MAKEFILE_COMMON),)
# attept a checkout
define checkout-makefile-common
test -f CVS/Root && { cvs -Q -d $$(cat CVS/Root) checkout common && echo "common/Makefile.common" ; } || { echo "ERROR: I can't figure out how to checkout the 'common' module." ; exit -1 ; } >&2
endef
MAKEFILE_COMMON := $(shell $(checkout-makefile-common))
endif
include $(MAKEFILE_COMMON)

15
wv2-0.2.3-overflow.patch Normal file
View file

@ -0,0 +1,15 @@
diff -up wv2-0.2.3/src/styles.cpp.overflow wv2-0.2.3/src/styles.cpp
--- wv2-0.2.3/src/styles.cpp.overflow 2006-06-12 11:40:11.000000000 -0500
+++ wv2-0.2.3/src/styles.cpp 2012-08-05 17:47:05.038101800 -0500
@@ -187,6 +187,11 @@ bool STD::read( U16 baseSize, U16 totalS
#ifdef WV2_DEBUG_STYLESHEET
wvlog << "cbUPX: " << cbUPX << std::endl;
#endif
+ // do not overflow the allocated buffer grupx
+ if (offset + cbUPX > grupxLen) {
+ wvlog << "====> Error: grupx would overflow!" << std::endl;
+ return false;
+ }
for ( U16 j = 0; j < cbUPX; ++j ) {
grupx[ offset + j ] = stream->readU8(); // read the whole UPX
#ifdef WV2_DEBUG_STYLESHEET

View file

@ -1,16 +1,18 @@
Name: wv2
Version: 0.2.3
Release: 2%{?dist}
Release: 4%{?dist}
Summary: A library which allows access to Microsoft® Word files
Group: System Environment/Libraries
License: LGPL
License: LGPLv2
URL: http://wvware.sourceforge.net
Source0: http://dl.sf.net/wvware/wv2-0.2.3.tar.bz2
# see bug #182293
Patch1: wv2-0.2.2-no-undefined.patch
# see bug #192291
Patch2: wv2-0.2.2-no-extra-libs.patch
# backport calligra msword-odf overflow
Patch3: wv2-0.2.3-overflow.patch
BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n)
@ -44,6 +46,7 @@ The wv2-devel package includes the header files necessary for developing.
%patch1 -p1 -b .no-undefined
%patch2 -p1 -b .extra_libs
%patch3 -p1 -b .overflow
./autogen.sh
@ -78,6 +81,12 @@ rm -rf $RPM_BUILD_ROOT
%{_includedir}/wv2
%changelog
* Sun Aug 05 2012 Rex Dieter <rdieter@fedoraproject.org> 0.2.3-4
- backport msword filter overflow
* Thu Aug 23 2007 Andreas Bierfert <andreas.bierfert[AT]lowlatency.de> 0.2.3-3
- new license tag
* Fri Sep 15 2006 Andreas Bierfert <andreas.bierfert[AT]lowlatency.de> 0.2.3-2
- FE6 rebuild
- fix BR