Fix for format-security, #536118

Package-Manager: portage-2.2.17/cvs/Linux x86_64
Manifest-Sign-Key: 0xB9D4F231BD1558AB!

diff --git a/sci-libs/superlu/ChangeLog b/sci-libs/superlu/ChangeLog
index f27be4e9fb38328ba370dfe63dbf6c1ab66c412e..38a1616f40e45c2c8dbd5a9540dcf2d18a3a4b30 100644 (file)
--- a/sci-libs/superlu/ChangeLog
+++ b/sci-libs/superlu/ChangeLog
@@ -1,6 +1,12 @@
 # ChangeLog for sci-libs/superlu
 # Copyright 1999-2015 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sci-libs/superlu/ChangeLog,v 1.27 2015/01/26 11:33:35 jlec Exp $
+# $Header: /var/cvsroot/gentoo-x86/sci-libs/superlu/ChangeLog,v 1.28 2015/03/03 19:58:09 jlec Exp $
+
+*superlu-4.3-r1 (03 Mar 2015)
+
+  03 Mar 2015; Justin Lecher <jlec@gentoo.org>
+  +files/superlu-4.3-format-security.patch, +superlu-4.3-r1.ebuild:
+  Fix for format-security, #536118
 
   26 Jan 2015; Justin Lecher <jlec@gentoo.org> -superlu-4.1-r1.ebuild:
   Drop old

diff --git a/sci-libs/superlu/Manifest b/sci-libs/superlu/Manifest
index e1858dc6cf8cae8ff451162fc4a3165b8485805a..947f3e30dd05651df109a48a86a2d50d11ec1fce 100644 (file)
--- a/sci-libs/superlu/Manifest
+++ b/sci-libs/superlu/Manifest
@@ -3,26 +3,28 @@ Hash: SHA512
 
 AUX superlu-4.1-autotools.patch 19217 SHA256 cfdf7e039c7b0fcbf49b4f756678b2d3b120527345f7221347d0e02dc6705607 SHA512 fffdb04646e86fbe133bb211166b890790e2e3da542af7280830ecbe50655bd31441f24f8886d16618a12f2dc3e14ce45065df2095e77cff56c8f18d1a5b7612 WHIRLPOOL 96ea380b08f6b92a77a55da3f56193a797460ecad15fcf84714520be6eb048a615a9e1e3334d08f3fcb8c70bb923ed53bd855f6372ebe80ef2e65fd25eec9f92
 AUX superlu-4.3-autotools.patch 18676 SHA256 6dea0fca12629825ec729fafa488ff2025cd950e93b768d5636fa4d05c760291 SHA512 62f868126af7acc3658bdff6eda8839d06dd14b5195d23a2b7bbbe1008e9258875ac3c9bc4ed40f4ac58443ac4aeef786499b02ff45f2adb304160f3b25b0bf3 WHIRLPOOL 68082a67aec45d6a94daa15d90727eebf2e2f67f3df85b7f6f08a253179c71d21b364822a15f1d9e2a107d56c1157ce995222ce42b5013d9b109bfa36adf8284
+AUX superlu-4.3-format-security.patch 312 SHA256 bd877b50b244617f5de8a7cd17e8743b00a79dffbfd043994cffca9c0e7f6730 SHA512 86072c671b946a73e8857fcf60499c589c0de8ca2433c2310701a2249eb32968e7ab83e638be1fcee3358d3b1432cba988cf11644962dbf09045b4907b9ebf6a WHIRLPOOL 924eb83342f1b99a01c668981ea38045baeb95252281dbcfc4cda9fbeabb1fcfd5dfdd64e4a9037ac5ea005245a393621d73d682ae47ae3ef7838ddec577377b
 DIST superlu_4.3.tar.gz 2876631 SHA256 7aa08e75fba6b242aef20f10a31d7e052ad74ad29384e68d41a61d1d642f18da SHA512 5c13da47b79160be14719f62ccdf5d59142a172e25a988fa340eaeb001a64d7f45ba39e675cb7aa3571bec52cb3a7cda0bb7a708c9608184ba6251edb7990e8c WHIRLPOOL 034d924a736d101497df13f4f69d96b9e375c78a207df1615a7d22b639e24d755e9cb16e952c57ee8eece8d4ea7aa9f9d0576aaaee19ae0b0898698973864c15
+EBUILD superlu-4.3-r1.ebuild 1715 SHA256 8a2463585a70c46b7e4e62acc047a9735d5d1ddbe47484b02f0f60f143e13221 SHA512 22c7f10c7d6ea1b1e620903c66d1d0eed32948fd15d0a7e35110ca9d2c56014ea75323b621ac2e1ac2d738a246cae4cdf7006817d07e0b3b791b679f3821e3be WHIRLPOOL 96ce731c81d5f2cd636d12fdb55603d53e3074660201297109363a1f32785985ddf18a577082f9245bb9398395924ad98f5a92d73cfb7bbd0649ff8fb7afd518
 EBUILD superlu-4.3.ebuild 1664 SHA256 c808c7844d36642fb109f81d631e5c476a88deba57859a52f0ba920a9e926f31 SHA512 4eb707bfca00b2c118f51e0a1a75b9779242bae30240dcb71ada0f0d70ef8014d8fc7deb2fdca3254f9b293b9b5197c605cf36dd0dc99853105f3bb4d5e52be8 WHIRLPOOL 3ec0b77fb2d693f00bce5340aca352196a2203b9bb124ab29d15d31c4dc8cc4478caeabb2889651d3ba99787f3777f7dbec55971af758bbed60716dc6e2bd982
-MISC ChangeLog 4357 SHA256 239346a6e4a20f93b6149cafd7a9fe0750a81017e126feb31476f123d2fe2842 SHA512 0ea1a98a24d90f4b611e8cb72cd5b35d3608a5b85eaf20db9f699e9ce4423d0f0dfa921a3068fe0058b6b6449fd4207ce7f2d89e524987cc1dab5bd0afbbb2d6 WHIRLPOOL 9c947299e55be472a1c520b976056ab3b3a18a81c8d18ad477f66f8cdf8d93563f185d0c4d5d10ce71b43771c25b0983e8fad2d66e5802f1185f154127ecc326
+MISC ChangeLog 4539 SHA256 de5b8ecd70c3f8a48d6f507ad1a5776f62b66bda723266f2bbc66a1bd82bd5af SHA512 cc347c94525cc4566a4939c418e6ea5e9c3622562005ffafb02def67f0036b77c15e0d2220894beed2b58c52d098c984a35ef181866090eba98ecef640e92f61 WHIRLPOOL 7f69092717c5bb7ff561b21fa80fd239eaee71301b861c9736c54d4618a97645e56ba990d4e89a9c860579e9c62723a46edf6ca9307c5cf8e35d656a6dea92eb
 MISC metadata.xml 1187 SHA256 d710cf5bb2c56a504e3a534efa2672e569f270f23fe78055083207afe6264c9a SHA512 21a81338608770c9b7f5fa53c69e7574a4b08c2a6fd1c84054106097ec7eb8efc51ccda2197c93d519b1e5d389d323b6d8de9972764d533711882cb007370bf0 WHIRLPOOL dee0258c58ebd0b34a464cd70ea16be084817e8f14a743fcd89c9c033a25f1c9bb1050e8b5208bb725ba601389c4b17b29444b3ef06b56a3af4eec54d5586001
 -----BEGIN PGP SIGNATURE-----
 Version: GnuPG v2.0
 
-iQJ8BAEBCgBmBQJUxiYQXxSAAAAAAC4AKGlzc3Vlci1mcHJAbm90YXRpb25zLm9w
+iQJ8BAEBCgBmBQJU9hJWXxSAAAAAAC4AKGlzc3Vlci1mcHJAbm90YXRpb25zLm9w
 ZW5wZ3AuZmlmdGhob3JzZW1hbi5uZXQyQ0JDQjFGMzBDQ0UxMjFGNENDNDgxMDdC
-OUQ0RjIzMUJEMTU1OEFCAAoJELnU8jG9FVirt4cP/RUrW76nK1qIFWPKygq/UOJJ
-1BdDMxAtyk9K5Evxs0qRQ6O3EtUwVnhbhQcAQNzJr1CLGrR0bTbDbPvSrIQP9sT5
-mL+YMIv7VheTgF6QF13ZRIiFlxxr4SwIoPfwhgGtTV2wzEnG0NBMi4PC1A7tr1rE
-LRtr1jTX6qa/8fpVBfMC/pnw0kFB/UlAWMa0gpGeUWuvUD1uk3yaynItUVgFwkYE
-zkuJJIF/6P3xaPaVorLT0QrG8RscPa3HuvWrq7cAlY+qgz5DTPhh+uxloXZwUDym
-pEPu+Il5ywmIstVrYZolK235E81t43Qt04SfxnlGWD3LMqzCbdSBV4CA4imPYPXv
-ndwBtgkPw+bEzmkAZ9rnFEOk6G+hniE4xwm5eCes93eiQ/pamIyFw2e6ktiGEELG
-7MWQq7PcYX9X44PVw5sLYjIyi3HqKFBPS5XbhSMu5WVZ64ar6Xlm9z5UwHXCQ8kY
-mmo28TWmwRKn/F+0OZakjbf1eH06BdyRAq07x+IAExrK8DEFRDTuoo1lmALmJWES
-0vCUp4d9ZRGbQdZohqPmlVPUO6udGPofqqbmXp2Cg8z2b12wD3LvgXVskmSmkOfr
-YJ4jFVSk2YX1qtxwBwmXub4mypjcwsoiZu/PvbsSVyYFlyLzuO8beqL0GS1y2jLK
-qXv0l4TShYkakUTlCHLx
-=wS3A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+=d8ki
 -----END PGP SIGNATURE-----

diff --git a/sci-libs/superlu/files/superlu-4.3-format-security.patch b/sci-libs/superlu/files/superlu-4.3-format-security.patch
new file mode 100644 (file)
index 0000000..809408a
--- /dev/null
+++ b/sci-libs/superlu/files/superlu-4.3-format-security.patch
@@ -0,0 +1,16 @@
+ SRC/util.c | 2 +-
+ 1 file changed, 1 insertion(+), 1 deletion(-)
+
+diff --git a/SRC/util.c b/SRC/util.c
+index 858fbbc..c038ccf 100644
+--- a/SRC/util.c
++++ b/SRC/util.c
+@@ -29,7 +29,7 @@
+ 
+ void superlu_abort_and_exit(char* msg)
+ {
+-    fprintf(stderr, msg);
++    fprintf(stderr, "%s", msg);
+     exit (-1);
+ }
+ 

diff --git a/sci-libs/superlu/superlu-4.3-r1.ebuild b/sci-libs/superlu/superlu-4.3-r1.ebuild
new file mode 100644 (file)
index 0000000..7a6b6d5
--- /dev/null
+++ b/sci-libs/superlu/superlu-4.3-r1.ebuild
@@ -0,0 +1,74 @@
+# Copyright 1999-2015 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/sci-libs/superlu/superlu-4.3-r1.ebuild,v 1.1 2015/03/03 19:58:09 jlec Exp $
+
+EAPI=5
+
+AUTOTOOLS_AUTORECONF=true
+AUTOTOOLS_IN_SOURCE_BUILD=1
+
+inherit autotools-utils fortran-2 toolchain-funcs multilib
+
+MY_PN=SuperLU
+
+DESCRIPTION="Sparse LU factorization library"
+HOMEPAGE="http://crd.lbl.gov/~xiaoye/SuperLU/"
+SRC_URI="${HOMEPAGE}/${PN}_${PV}.tar.gz"
+
+LICENSE="BSD"
+SLOT="0"
+KEYWORDS="~amd64 ~ppc ~ppc64 ~x86 ~amd64-linux ~x86-linux"
+IUSE="doc examples static-libs test"
+
+RDEPEND="
+       virtual/blas"
+DEPEND="${RDEPEND}
+       virtual/pkgconfig
+       test? ( app-shells/tcsh )"
+
+S="${WORKDIR}/${MY_PN}_${PV}"
+
+PATCHES=(
+       "${FILESDIR}"/${P}-autotools.patch
+       "${FILESDIR}"/${P}-format-security.patch
+       )
+
+src_prepare() {
+       unset VERBOSE
+       sed \
+               -e "s:= ar:= $(tc-getAR):g" \
+               -e "s:= ranlib:= $(tc-getRANLIB):g" \
+               -i make.inc || die
+
+       autotools-utils_src_prepare
+}
+
+src_configure() {
+       local myeconfargs=( --with-blas="$($(tc-getPKG_CONFIG) --libs blas)" )
+       autotools-utils_src_configure
+       rm EXAMPLE/*itersol1 || die
+}
+
+src_test() {
+       cd "${BUILD_DIR}"/TESTING
+       emake -j1 \
+               CC="$(tc-getCC)" \
+               FORTRAN="$(tc-getFC)" \
+               LOADER="$(tc-getCC)" \
+               CFLAGS="${CFLAGS}" \
+               FFLAGS="${FFLAGS}" \
+               LOADOPTS="${LDFLAGS}" \
+               BLASLIB="$($(tc-getPKG_CONFIG) --libs blas)" \
+               SUPERLULIB="${S}/SRC/.libs/libsuperlu$(get_libname)" \
+               LD_LIBRARY_PATH="${S}/SRC/.libs" \
+               DYLD_LIBRARY_PATH="${S}/SRC/.libs"
+}
+
+src_install() {
+       autotools-utils_src_install
+       use doc && dodoc DOC/ug.pdf && dohtml DOC/html/*
+       if use examples; then
+               insinto /usr/share/doc/${PF}/examples
+               doins -r EXAMPLE FORTRAN
+       fi
+}