Commit fa4a4fec authored by Jeff Huang's avatar Jeff Huang 🤔

[skip-ci] lib32-libtiff: update to 4.0.10 to fix security issues

parent 1ba1a250
Pipeline #1864 skipped
_pkgbasename=libtiff
pkgname=lib32-$_pkgbasename
pkgver=4.0.9
pkgver=4.0.10
pkgrel=1
pkgdesc="Library for manipulation of TIFF images (32-bit)"
arch=('x86_64')
url="http://www.remotesensing.org/libtiff/"
url="http://www.simplesystems.org/libtiff/"
license=('custom')
depends=('lib32-libjpeg-turbo' 'lib32-zlib' $_pkgbasename=$pkgver)
makedepends=('lib32-libgl' 'lib32-libxmu' 'lib32-libxi' gcc-multilib)
options=('!libtool')
source=(ftp://ftp.remotesensing.org/pub/libtiff/tiff-${pkgver}.tar.gz)
md5sums=('54bad211279cc93eb4fca31ba9bfdc79')
depends=('lib32-libjpeg-turbo' 'lib32-zlib' 'lib32-xz' $_pkgbasename=$pkgver)
makedepends=('lib32-libgl' 'lib32-libxmu' 'lib32-libxi' 'lib32-gcc-libs')
source=(https://download.osgeo.org/libtiff/tiff-${pkgver}.tar.gz)
sha1sums=('c783b80f05cdacf282aa022dc5f5b0ede5e021ae')
build() {
export CC="gcc -m32"
......@@ -18,7 +17,12 @@ build() {
export PKG_CONFIG_PATH="/usr/lib32/pkgconfig"
cd "${srcdir}/tiff-${pkgver}"
./configure --prefix=/usr --sysconfdir=/etc --mandir=/usr/share/man --libdir=/usr/lib32 --includedir=/usr/include/libtiff32
./configure --prefix=/usr \
--sysconfdir=/etc \
--mandir=/usr/share/man \
--with-docdir=/usr/share/doc/${pkgname} \
--libdir=/usr/lib32 \
--includedir=/usr/include/libtiff32
make
}
......
--- tiff-4.0.6/tools/gif2tiff.c 2016-04-06 15:43:01.586048341 +0200
+++ tiff-4.0.6/tools/gif2tiff.c 2016-04-06 15:48:05.523207710 +0200
@@ -349,7 +349,7 @@
int status = 1;
(void) getc(infile);
- while ((count = getc(infile)) && count <= 255)
+ while ((count = getc(infile)) && count >= 0 && count <= 255)
if (fread(buf, 1, count, infile) != (size_t) count) {
fprintf(stderr, "short read from file %s (%s)\n",
filename, strerror(errno));
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment