From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by finch.gentoo.org (Postfix) with ESMTPS id 7CDDB1382C5 for ; Mon, 9 Apr 2018 00:16:03 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 21646E0D14; Mon, 9 Apr 2018 00:16:01 +0000 (UTC) Received: from smtp.gentoo.org (smtp.gentoo.org [140.211.166.183]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id E78E7E0D14 for ; Mon, 9 Apr 2018 00:16:00 +0000 (UTC) Received: from oystercatcher.gentoo.org (oystercatcher.gentoo.org [148.251.78.52]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by smtp.gentoo.org (Postfix) with ESMTPS id 5B490335C72 for ; Mon, 9 Apr 2018 00:15:59 +0000 (UTC) Received: from localhost.localdomain (localhost [IPv6:::1]) by oystercatcher.gentoo.org (Postfix) with ESMTP id 26065288 for ; Mon, 9 Apr 2018 00:15:56 +0000 (UTC) From: "Aaron Bauman" To: gentoo-commits@lists.gentoo.org Content-Transfer-Encoding: 8bit Content-type: text/plain; charset=UTF-8 Reply-To: gentoo-dev@lists.gentoo.org, "Aaron Bauman" Message-ID: <1523232670.f3fa85eb2b74e9b20f8fe42e4f320543339adb59.bman@gentoo> Subject: [gentoo-commits] repo/gentoo:master commit in: lxde-base/menu-cache/files/, lxde-base/menu-cache/ X-VCS-Repository: repo/gentoo X-VCS-Files: lxde-base/menu-cache/files/menu-cache-1.0.2-CVE-2017-8933.patch lxde-base/menu-cache/menu-cache-1.0.2-r1.ebuild X-VCS-Directories: lxde-base/menu-cache/files/ lxde-base/menu-cache/ X-VCS-Committer: bman X-VCS-Committer-Name: Aaron Bauman X-VCS-Revision: f3fa85eb2b74e9b20f8fe42e4f320543339adb59 X-VCS-Branch: master Date: Mon, 9 Apr 2018 00:15:56 +0000 (UTC) Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-commits@lists.gentoo.org X-Archives-Salt: 549a40b7-f9a4-4cb4-b6c2-e9f208b99759 X-Archives-Hash: dcf7eee27880ccb80db89e25c2a4dba4 commit: f3fa85eb2b74e9b20f8fe42e4f320543339adb59 Author: charIes17 arcor de> AuthorDate: Sat Apr 7 06:43:58 2018 +0000 Commit: Aaron Bauman gentoo org> CommitDate: Mon Apr 9 00:11:10 2018 +0000 URL: https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=f3fa85eb lxde-base/menu-cache: Remove old Version 1.1.0 is in the tree since over a month Removing 1.0.2-r1 whiich never got stabilized Package-Manager: Portage-2.3.24, Repoman-2.3.6 .../files/menu-cache-1.0.2-CVE-2017-8933.patch | 122 --------------------- lxde-base/menu-cache/menu-cache-1.0.2-r1.ebuild | 22 ---- 2 files changed, 144 deletions(-) diff --git a/lxde-base/menu-cache/files/menu-cache-1.0.2-CVE-2017-8933.patch b/lxde-base/menu-cache/files/menu-cache-1.0.2-CVE-2017-8933.patch deleted file mode 100644 index 89ce5c501b0..00000000000 --- a/lxde-base/menu-cache/files/menu-cache-1.0.2-CVE-2017-8933.patch +++ /dev/null @@ -1,122 +0,0 @@ -diff --git a/NEWS b/NEWS -index dcc572a..6177e9d 100644 ---- a/NEWS -+++ b/NEWS -@@ -1,3 +1,12 @@ -+* Fixed crash with invalid tag in a menu. -+ -+* Added new API menu_cache_app_get_generic_name() to get generic -+ name for application. -+ -+* Fixed potential access violation, use runtime user dir instead of tmp dir. -+ It limits libmenu-cache compatibility to menu-cached >= 0.7.0. -+ -+ - Changes in 1.0.2 since 1.0.1: - - * Fixed crash in menu-cached if cache regeneration fails. -diff --git a/libmenu-cache/menu-cache.c b/libmenu-cache/menu-cache.c -index 3bc9cfc..d914127 100644 ---- a/libmenu-cache/menu-cache.c -+++ b/libmenu-cache/menu-cache.c -@@ -3,7 +3,7 @@ - * - * Copyright 2008 PCMan - * Copyright 2009 Jürgen Hötzel -- * Copyright 2012-2015 Andriy Grytsenko (LStranger) -+ * Copyright 2012-2017 Andriy Grytsenko (LStranger) - * - * This library is free software; you can redistribute it and/or - * modify it under the terms of the GNU Lesser General Public -@@ -1234,6 +1234,22 @@ gboolean menu_cache_dir_is_visible(MenuCacheDir *dir) - } - - /** -+ * menu_cache_app_get_generic_name -+ * @app: a menu cache item -+ * -+ * Retrieves generic name for @app. Returned data are owned by menu -+ * cache and should not be freed by caller. -+ * -+ * Returns: (transfer none): app's generic name or %NULL. -+ * -+ * Since: 1.0.3 -+ */ -+const char* menu_cache_app_get_generic_name( MenuCacheApp* app ) -+{ -+ return app->generic_name; -+} -+ -+/** - * menu_cache_app_get_exec - * @app: a menu cache item - * -@@ -1522,8 +1538,13 @@ static void get_socket_name( char* buf, int len ) - if(*p) - *p = '\0'; - } -+#if GLIB_CHECK_VERSION(2, 28, 0) -+ g_snprintf( buf, len, "%s/menu-cached-%s", g_get_user_runtime_dir(), -+ dpy ? dpy : ":0" ); -+#else - g_snprintf( buf, len, "%s/.menu-cached-%s-%s", g_get_tmp_dir(), - dpy ? dpy : ":0", g_get_user_name() ); -+#endif - g_free(dpy); - } - -diff --git a/libmenu-cache/menu-cache.h.in b/libmenu-cache/menu-cache.h.in -index 76ea7b4..cded59d 100644 ---- a/libmenu-cache/menu-cache.h.in -+++ b/libmenu-cache/menu-cache.h.in -@@ -151,6 +151,7 @@ MenuCacheItem *menu_cache_find_child_by_name(MenuCacheDir *dir, const char *name - - char* menu_cache_dir_make_path( MenuCacheDir* dir ); - -+const char* menu_cache_app_get_generic_name( MenuCacheApp* app ); - const char* menu_cache_app_get_exec( MenuCacheApp* app ); - const char* menu_cache_app_get_working_dir( MenuCacheApp* app ); - const char* const *menu_cache_app_get_categories(MenuCacheApp* app); -diff --git a/menu-cache-daemon/menu-cached.c b/menu-cache-daemon/menu-cached.c -index a6895ee..c100484 100644 ---- a/menu-cache-daemon/menu-cached.c -+++ b/menu-cache-daemon/menu-cached.c -@@ -473,6 +473,9 @@ static void get_socket_name( char* buf, int len ) - if(*p) - *p = '\0'; - } -+ /* NOTE: this socket name is incompatible with versions > 1.0.2, -+ although this function is never used since 0.7.0 but -+ libmenu-cache always requests exact socket name instead */ - g_snprintf( buf, len, "%s/.menu-cached-%s-%s", g_get_tmp_dir(), - dpy ? dpy : ":0", g_get_user_name() ); - g_free(dpy); -diff --git a/menu-cache-gen/menu-merge.c b/menu-cache-gen/menu-merge.c -index 816cf96..31f05b0 100644 ---- a/menu-cache-gen/menu-merge.c -+++ b/menu-cache-gen/menu-merge.c -@@ -1,7 +1,7 @@ - /* - * menu-file.c : parses .menu file and merges all XML tags. - * -- * Copyright 2013-2016 Andriy Grytsenko (LStranger) -+ * Copyright 2013-2017 Andriy Grytsenko (LStranger) - * - * This file is a part of libmenu-cache package and created program - * should be not used without the library. -@@ -138,11 +138,13 @@ static gboolean _menu_xml_handler_Name(FmXmlFileItem *item, GList *children, - guint n_attributes, gint line, gint pos, - GError **error, gpointer user_data) - { -+ FmXmlFileItem *name_item; - const char *name; - - RETURN_IF_IN_LAYOUT(item, error); -- item = fm_xml_file_item_find_child(item, FM_XML_FILE_TEXT); -- if (item == NULL || (name = fm_xml_file_item_get_data(item, NULL)) == NULL || -+ name_item = fm_xml_file_item_find_child(item, FM_XML_FILE_TEXT); -+ if (name_item == NULL || -+ (name = fm_xml_file_item_get_data(name_item, NULL)) == NULL || - strchr(name, '/') != NULL) /* empty or invalid tag */ - { - RETURN_TRUE_AND_DESTROY_IF_QUIET(item); diff --git a/lxde-base/menu-cache/menu-cache-1.0.2-r1.ebuild b/lxde-base/menu-cache/menu-cache-1.0.2-r1.ebuild deleted file mode 100644 index e1d24182e94..00000000000 --- a/lxde-base/menu-cache/menu-cache-1.0.2-r1.ebuild +++ /dev/null @@ -1,22 +0,0 @@ -# Copyright 1999-2018 Gentoo Foundation -# Distributed under the terms of the GNU General Public License v2 - -EAPI=6 - -DESCRIPTION="Library to create and utilize caches to speed up freedesktop application menus" -HOMEPAGE="https://lxde.org/" -SRC_URI="mirror://sourceforge/lxde/${P}.tar.xz" - -LICENSE="LGPL-2.1+" -# ABI is v2. See Makefile.am -SLOT="0/2" -KEYWORDS="~alpha ~amd64 ~arm ~arm64 ~mips ~ppc ~x86 ~amd64-linux ~x86-linux" -IUSE="" - -PATCHES=( "${FILESDIR}"/${PN}-1.0.2-CVE-2017-8933.patch ) - -RDEPEND="dev-libs/glib:2 - x11-libs/libfm-extra" -DEPEND="${RDEPEND} - sys-devel/gettext - virtual/pkgconfig"