From 3517852e3b8a68d1e997770fc0650c5053bafc6c Mon Sep 17 00:00:00 2001 From: V3n3RiX Date: Tue, 4 Jan 2022 01:27:12 +0000 Subject: gentoo resync : 04.01.2022 --- games-board/gnuchess/Manifest | 3 - .../files/gnuchess-6.2.8-cve-2021-30184.patch | 72 ---------------------- games-board/gnuchess/gnuchess-6.2.8-r1.ebuild | 21 ------- 3 files changed, 96 deletions(-) delete mode 100644 games-board/gnuchess/files/gnuchess-6.2.8-cve-2021-30184.patch delete mode 100644 games-board/gnuchess/gnuchess-6.2.8-r1.ebuild (limited to 'games-board/gnuchess') diff --git a/games-board/gnuchess/Manifest b/games-board/gnuchess/Manifest index 47848c430ee0..345c992f025e 100644 --- a/games-board/gnuchess/Manifest +++ b/games-board/gnuchess/Manifest @@ -1,6 +1,3 @@ -AUX gnuchess-6.2.8-cve-2021-30184.patch 1949 BLAKE2B e40c05ab4e2d459685ffdd6ad0d22382489bc26154c234da058e78f9fd3cbe9babfebab22e8b1525abf5dc50283db0b1868c82587cb9f04da0f4d14b113561ce SHA512 e44f53f8e25e86f20399e57d79d1d6835eabd69c34d89ba165e78d357471e2b82da5a48b184c8820c8340ddc55e3bd4097fdee737d62cbb73ffbc3870f94dc40 -DIST gnuchess-6.2.8.tar.gz 804080 BLAKE2B 7079c07ae7cd2f225c428a7bf14d53eec394382508544994918b87db35d5cbdeb9cf42a11f5bc2f9c0c7b778384d6cdb9aad4490bc9cfd40a513fc2e36cbdd67 SHA512 9146ee727c1eb8002eb3b1e762d71876b512eff0799eafec7019d5312766fe2bd6655c622e66f86e92f80d2f3666e48158a1245b42c30bd3221a8b379689ecdd DIST gnuchess-6.2.9.tar.gz 802697 BLAKE2B e450e1d77f3158f2a063a7fc80985ad6d59f26a17a86aa9d18d86f32ee1c01fba100e59b02ea65276a1ee480ed050fbafd68635d40bae75205763fd34bfd608a SHA512 7e2ec9e14ab331ffaab2dd60da81b64b5c5a07cf14f9139d67c77886038512d15511939b8e683675ea6611e24ff2c38212a7f288540448c9225c263435f71963 -EBUILD gnuchess-6.2.8-r1.ebuild 449 BLAKE2B c63faba0c5f0cc3d413c3081f106e34bfff10149098b2dfe6b4354e06c4ef6cb7c4d7c6b8ea7ca9b3a8504974f0e6b4bf47c7b79ef4aaf9c9c8ff95e5c7d93c6 SHA512 1151666bea8557c12304a39dcd44b617a3c0d73aa3cec0fc29bc8ad61ad37d7fc0b974e45991fe099c20dfc73e4894b07e2746e067a24a63343b28e5278d66aa EBUILD gnuchess-6.2.9.ebuild 388 BLAKE2B 0e5b4c7c884d1faa5ea727512d80d24bd24ae44cc1ad63f647368f44c96c8501a389e4b7ac0f7d7c4361994da9a14ccbc73d83a331c236b95bf9ecb51a62e131 SHA512 81f77d627ded9d2b87aee14ec2bb588ad758a5db9c267b52eae184cf23d264dcf33f5f3108a18ae6005d0de13d42f9d0f0de150ef5913a9d4ba70b061f1cc4a0 MISC metadata.xml 250 BLAKE2B 8d44bd4c6e7d6491273e2015e36ddac74af7b94a124fd240ff030e16430f5c85e53ab812f0e3e94bb2e6d138f39b512bbe01ff98b0081cacc21a02d648ec7643 SHA512 80ac07a3cac10ad2e72e9989a130b7d2073934fe92914a9db2af4d0e769d4bf537770f8faba0654bbd64a7e85ee38cf1f9d03b4b9cd322864b1b2bb35087d610 diff --git a/games-board/gnuchess/files/gnuchess-6.2.8-cve-2021-30184.patch b/games-board/gnuchess/files/gnuchess-6.2.8-cve-2021-30184.patch deleted file mode 100644 index dfa89a0e17c3..000000000000 --- a/games-board/gnuchess/files/gnuchess-6.2.8-cve-2021-30184.patch +++ /dev/null @@ -1,72 +0,0 @@ -From 7059e40c7a487b17886e1d345b52fc0cfca8df72 Mon Sep 17 00:00:00 2001 -From: Sebastian Pipping -Date: Wed, 2 Jun 2021 13:15:29 +0200 -Subject: [PATCH] frontend/cmd.cc: Fix buffer overflow CVE-2021-30184 - -Based on prior work by Michael Vaughan, -with "break;" replaced by "return;" and -magic number 9 resolved by strlen("setboard "). - -Mimics close-to-identical existing code from -elsewhere in the the same file. ---- - src/frontend/cmd.cc | 30 ++++++++++++++++++++++-------- - 1 file changed, 22 insertions(+), 8 deletions(-) - -diff --git a/src/frontend/cmd.cc b/src/frontend/cmd.cc -index a321fc2..394d03f 100644 ---- a/src/frontend/cmd.cc -+++ b/src/frontend/cmd.cc -@@ -477,13 +477,20 @@ void cmd_pgnload(void) - return; - } - -- strcpy( data, "setboard " ); -+ const char setboardCmd[] = "setboard "; -+ unsigned int setboardLen = strlen(setboardCmd); -+ strcpy( data, setboardCmd ); - int i=0; - while ( epdline[i] != '\n' ) { -- data[i+9] = epdline[i]; -- ++i; -+ if (i + setboardLen < MAXSTR - 1) { -+ data[i+setboardLen] = epdline[i]; -+ ++i; -+ } else { -+ printf( _("Error reading contents of file '%s'.\n"), token[1] ); -+ return; -+ } - } -- data[i+9] = '\0'; -+ data[i+setboardLen] = '\0'; - SetDataToEngine( data ); - SetAutoGo( true ); - pgnloaded = 0; -@@ -501,13 +508,20 @@ void cmd_pgnreplay(void) - return; - } - -- strcpy( data, "setboard " ); -+ const char setboardCmd[] = "setboard "; -+ unsigned int setboardLen = strlen(setboardCmd); -+ strcpy( data, setboardCmd ); - int i=0; - while ( epdline[i] != '\n' ) { -- data[i+9] = epdline[i]; -- ++i; -+ if (i + setboardLen < MAXSTR - 1) { -+ data[i+setboardLen] = epdline[i]; -+ ++i; -+ } else { -+ printf( _("Error reading contents of file '%s'.\n"), token[1] ); -+ return; -+ } - } -- data[i+9] = '\0'; -+ data[i+setboardLen] = '\0'; - - SetDataToEngine( data ); - SetAutoGo( true ); --- -2.31.1 - diff --git a/games-board/gnuchess/gnuchess-6.2.8-r1.ebuild b/games-board/gnuchess/gnuchess-6.2.8-r1.ebuild deleted file mode 100644 index 8e08730283af..000000000000 --- a/games-board/gnuchess/gnuchess-6.2.8-r1.ebuild +++ /dev/null @@ -1,21 +0,0 @@ -# Copyright 1999-2021 Gentoo Authors -# Distributed under the terms of the GNU General Public License v2 - -EAPI=7 - -DESCRIPTION="Console based chess interface" -HOMEPAGE="https://www.gnu.org/software/chess/chess.html" -SRC_URI="mirror://gnu/chess/${P}.tar.gz" - -LICENSE="GPL-3" -SLOT="0" -KEYWORDS="amd64 ~arm arm64 ppc64 x86" - -PATCHES=( - "${FILESDIR}"/${P}-cve-2021-30184.patch # bug 780855 -) - -src_configure() { - # bug #491088 - econf --without-readline -} -- cgit v1.2.3