Index: head/graphics/sdl_image/Makefile =================================================================== --- head/graphics/sdl_image/Makefile (revision 452942) +++ head/graphics/sdl_image/Makefile (revision 452943) @@ -1,38 +1,38 @@ # Created by: Maxim Sobolev # $FreeBSD$ PORTNAME= sdl_image PORTVERSION= 1.2.12 -PORTREVISION= 10 +PORTREVISION= 11 CATEGORIES= graphics MASTER_SITES= http://www.libsdl.org/projects/SDL_image/release/ DISTNAME= SDL_image-${PORTVERSION} MAINTAINER= ports@FreeBSD.org COMMENT= Simple library to load images of various formats as SDL surfaces LICENSE= LGPL21 USES= gmake libtool pkgconfig pathfix USE_SDL= sdl GNU_CONFIGURE= yes CPPFLAGS+= -I${LOCALBASE}/include LIBS+= -L${LOCALBASE}/lib -lm USE_LDCONFIG= yes OPTIONS_DEFINE= JPEG PNG TIFF WEBP OPTIONS_DEFAULT=JPEG PNG TIFF WEBP JPEG_USES= jpeg JPEG_CONFIGURE_ENABLE= jpg PNG_LIB_DEPENDS= libpng.so:graphics/png PNG_CONFIGURE_ENABLE= png TIFF_LIB_DEPENDS= libtiff.so:graphics/tiff TIFF_CONFIGURE_ENABLE= tif WEBP_LIB_DEPENDS= libwebp.so:graphics/webp WEBP_CONFIGURE_ENABLE= webp post-install: ${INSTALL_PROGRAM} ${WRKSRC}/.libs/showimage ${STAGEDIR}${PREFIX}/bin .include Index: head/graphics/sdl_image/files/patch-IMG__xcf.c =================================================================== --- head/graphics/sdl_image/files/patch-IMG__xcf.c (nonexistent) +++ head/graphics/sdl_image/files/patch-IMG__xcf.c (revision 452943) @@ -0,0 +1,27 @@ +Fixed security vulnerability in XCF image loader (thanks Yves!) +https://hg.libsdl.org/SDL_image/rev/318484db0705 + +--- IMG_xcf.c.orig 2012-01-21 01:51:33 UTC ++++ IMG_xcf.c +@@ -251,6 +251,7 @@ static Uint32 Swap32 (Uint32 v) { + } + + static void xcf_read_property (SDL_RWops * src, xcf_prop * prop) { ++ Uint32 len; + prop->id = SDL_ReadBE32 (src); + prop->length = SDL_ReadBE32 (src); + +@@ -274,7 +275,12 @@ static void xcf_read_property (SDL_RWops * src, xcf_pr + break; + case PROP_COMPRESSION: + case PROP_COLOR: +- SDL_RWread (src, &prop->data, prop->length, 1); ++ if (prop->length > sizeof(prop->data)) { ++ len = sizeof(prop->data); ++ } else { ++ len = prop->length; ++ } ++ SDL_RWread(src, &prop->data, len, 1); + break; + case PROP_VISIBLE: + prop->data.visible = SDL_ReadBE32 (src); Property changes on: head/graphics/sdl_image/files/patch-IMG__xcf.c ___________________________________________________________________ Added: fbsd:nokeywords ## -0,0 +1 ## +yes \ No newline at end of property Added: svn:eol-style ## -0,0 +1 ## +native \ No newline at end of property Added: svn:mime-type ## -0,0 +1 ## +text/plain \ No newline at end of property