md4sum: fix out of bounds write, new upstream URLs

Package-Manager: portage-2.2.17/cvs/Linux x86_64
Manifest-Sign-Key: 0xBBB51E42

diff --git a/app-crypt/md4sum/ChangeLog b/app-crypt/md4sum/ChangeLog
index 2a35b3c0c409316d3724fb96c34ed75bd19d7b02..01813f3336dd83955242ac0133e21f65b11de575 100644 (file)
--- a/app-crypt/md4sum/ChangeLog
+++ b/app-crypt/md4sum/ChangeLog
@@ -1,6 +1,12 @@
 # ChangeLog for app-crypt/md4sum
-# Copyright 1999-2009 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/app-crypt/md4sum/ChangeLog,v 1.9 2009/07/13 12:28:29 flameeyes Exp $
+# Copyright 1999-2015 Gentoo Foundation; Distributed under the GPL v2
+# $Header: /var/cvsroot/gentoo-x86/app-crypt/md4sum/ChangeLog,v 1.10 2015/02/15 21:07:45 hanno Exp $
+
+*md4sum-0.02.03-r1 (15 Feb 2015)
+
+  15 Feb 2015; <hanno@gentoo.org> +md4sum-0.02.03-r1.ebuild,
+  +files/md4sum-fix-out-of-bounds-write.diff:
+  Fix out of bounds write, new upstream URLs.
 
   13 Jul 2009; Diego E. Pettenò <flameeyes@gentoo.org>
   md4sum-0.02.03.ebuild:

diff --git a/app-crypt/md4sum/Manifest b/app-crypt/md4sum/Manifest
index 5fb032c6d1a30f4d7baf6a41607c932a36d11318..5dda51109890f0bf9f9ede1d088849097cc745b7 100644 (file)
--- a/app-crypt/md4sum/Manifest
+++ b/app-crypt/md4sum/Manifest
@@ -1,4 +1,26 @@
+-----BEGIN PGP SIGNED MESSAGE-----
+Hash: SHA256
+
+AUX md4sum-fix-out-of-bounds-write.diff 271 SHA256 29548c9e6cd3db8cefe08ded0cf9893942376922eb573a1a979e0837878332bb SHA512 bcf06b6da80b67965547d359774c4462516dd69d36ed84723d9baaa93472405ed4d790ce687affa148be39157137ef46399e355540c18271f9164318f7731d65 WHIRLPOOL b13ab81b9add57a71cec10d58bee25c15a6f698b19f244af7e73d533bf0a67124de10a6fae92df3dbe5fea2ea7cf69e606689f9c7fb7573c280527900c16a42f
 DIST md4sum-0.02.03.tar.gz 26819 SHA256 241eb780282923fbaba5c2b2f1d72516bd47a14924c57790fc18ba05480e57c7 SHA512 5a05760aa6a770d9f55a41e42bdf6801dcd67bc804ead5bd84aecc48e5ee5a7c8b01d4a1e1767a4cc1f8695d66ed16c6a1f09b58d236c27db317f227e02e3762 WHIRLPOOL 90db3f2aa906d647d095d876ea471d01674b65e654b7fb5d56c19c0f5964814509a24351fe92279c63aae5bf74dc2e71e232f638289164403d6d9496236f92bd
+EBUILD md4sum-0.02.03-r1.ebuild 802 SHA256 c7539f3e68bb535e5782977965650c194ac62e0fab0ad5a4db2ca84431f242be SHA512 ec2b603c4ef77a029c65be8055945df6fbd0452e2ed9ff17a8cf801f74c78c4b1761e10806a3fd0f6d766ede0cd19cfdd1e50cca2791d19ce0ebbadb067685b9 WHIRLPOOL aa32f55e86574aae68dc6c6673ecb2ddeea0dd6fbd9e2c58080a8ae5b2c260908238ff43fb55fb4f9dc26d9fc45eac0c236a6026df9573e122af1397c996c9c2
 EBUILD md4sum-0.02.03.ebuild 767 SHA256 cd3d72398daf2938d252eeb3b825e22a000e1c8919ae86247dad846dc40436d5 SHA512 684117e188afe1a93649f7125dece0a5bcce6ecc18cd54d5bb53841aa5168e5751ddb9c15084d15ecf57f01a281a153dc9066580f719bd6626f96083a63ad4a0 WHIRLPOOL b7463742b1624442971c9acfe5b2a685d94db628dfd866dabb2181ec8410f99e93b2d809009250779ab4a88b93de10f00ee933fb072565d98dc4c299092baf08
-MISC ChangeLog 1286 SHA256 ca40580121620224103cab0fe72a4c9f91cb5bcd48eb4f6f289404a7a4ad55c4 SHA512 d22f9700b5b38db23fcbf14f6788ff3cefe5930f10593482db463719efdf0054324ebffc1206fc8daef05c3464e75d344d0a59f9b0901d0eee828b8e864a5b40 WHIRLPOOL d8c777594d1129b2d9d1e5401ddf525b207580d11df93c4a23525c624d1a87de91d3109bdd5ec373af3a5ff2914497167feb3d6934e143dd3e607cdfb8c80948
+MISC ChangeLog 1471 SHA256 8422a80c4007fefa8635969187c81c647daef065eff50bf6741cc7968ebcf48c SHA512 02adfa9da0bc848521c511de5479c08d1f89ccb52d9212c49e9986c2d5cee299c2bfad57ce0a80eab60c5a0d4346b2a2da6d4ceb5cafa358306eebfa36872f2f WHIRLPOOL cee16cb2401d2ce34fbd6ff3e10f03afcb22bb9176bf28e85052e3ac33d34e2a71116fea87c2f6716a67cb4571fc7b2b7fcc244650b13dd6ea17bddc0f293ecb
 MISC metadata.xml 196 SHA256 e8ef5daeda229c876fcf81068b64452d16ca1674618ee72fe8c294f6ead29445 SHA512 ba2a04029fc9fd51726e618311fc0d5ca87333acb0c067a353000a5e0cd31a9f4095adc14faae4d1f14409303051f381c66c3a4cd6ac6699a9476193ac7030f4 WHIRLPOOL 002f8951fc98cfd1917aeef67a1ef0fbc7b662f4cce3c4d9735f198ec8fcaa7e258524a80dbdea1eb485db6faae224dfb317af827582c0777faeba8cd2950ccb
+-----BEGIN PGP SIGNATURE-----
+Version: GnuPG v2
+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+=VpYW
+-----END PGP SIGNATURE-----

diff --git a/app-crypt/md4sum/files/md4sum-fix-out-of-bounds-write.diff b/app-crypt/md4sum/files/md4sum-fix-out-of-bounds-write.diff
new file mode 100644 (file)
index 0000000..1275996
--- /dev/null
+++ b/app-crypt/md4sum/files/md4sum-fix-out-of-bounds-write.diff
@@ -0,0 +1,11 @@
+--- a/md4sum.c 2007-04-11 23:22:38.000000000 +0200
++++ b/md4sum.c 2015-02-15 21:57:59.699682995 +0100
+@@ -126,7 +126,7 @@
+   int i;
+   static char s[33];
+   for( i=0; i<16; i++ ) sprintf( &s[2*i], "%02x", digest[i] );
+-  s[33]= '\0';
++  s[32]= '\0';
+   return( s );
+ }
+ 

diff --git a/app-crypt/md4sum/md4sum-0.02.03-r1.ebuild b/app-crypt/md4sum/md4sum-0.02.03-r1.ebuild
new file mode 100644 (file)
index 0000000..c37fb63
--- /dev/null
+++ b/app-crypt/md4sum/md4sum-0.02.03-r1.ebuild
@@ -0,0 +1,31 @@
+# Copyright 1999-2015 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/app-crypt/md4sum/md4sum-0.02.03-r1.ebuild,v 1.1 2015/02/15 21:07:45 hanno Exp $
+
+EAPI=5
+
+inherit eutils
+
+DESCRIPTION="md4 and edonkey hash algorithm tool"
+HOMEPAGE="http://linux.xulin.de/c/"
+SRC_URI="http://linux.xulin.de/c/${P}.tar.gz"
+LICENSE="GPL-2"
+SLOT="0"
+KEYWORDS="~amd64 ~x86 ~ppc"
+IUSE=""
+
+src_prepare() {
+       epatch "${FILESDIR}/md4sum-fix-out-of-bounds-write.diff"
+}
+
+src_compile() {
+       sed -i -e "s:CFLAGS=:CFLAGS=${CFLAGS} :g" \
+               -e "s:install -s:install:g" Makefile
+       emake LDFLAGS="${LDFLAGS}" CC="$(tc-getCC)" || die "emake failed"
+}
+
+src_install() {
+       mkdir -p "${D}/usr/bin"
+       mkdir -p "${D}/usr/share/man/man1"
+       einstall || die "einstall failed"
+}