[pkgsrc/pkgsrc-2007Q3]: pkgsrc/x11/ruby-gnome2-gtk Pullup ticket 2250 - reque...

[ghen <ghen%pkgsrc.org@localhost>]

details:   https://anonhg.NetBSD.org/pkgsrc/rev/b31124ea9622
branches:  pkgsrc-2007Q3
changeset: 534072:b31124ea9622
user:      ghen <ghen%pkgsrc.org@localhost>
date:      Tue Dec 18 09:27:09 2007 +0000

description:
Pullup ticket 2250 - requested by obache
security fix for ruby-gnome2-gtk

- pkgsrc/x11/ruby-gnome2-gtk/Makefile                   1.10
- pkgsrc/x11/ruby-gnome2-gtk/distinfo                   1.2
- pkgsrc/x11/ruby-gnome2-gtk/patches/patch-ab           1.1

   Module Name: pkgsrc
   Committed By:        obache
   Date:                Mon Dec 17 02:59:59 UTC 2007

   Modified Files:
           pkgsrc/x11/ruby-gnome2-gtk: Makefile distinfo
   Added Files:
           pkgsrc/x11/ruby-gnome2-gtk/patches: patch-ab

   Log Message:
   Added a patch for fixing format string vulnerability (CVE-2007-6183).
   http://ruby-gnome2.svn.sourceforge.net/viewvc/ruby-gnome2?view=rev&revision=2720

   Bump PKGREVISION.

diffstat:

 x11/ruby-gnome2-gtk/Makefile         |   4 ++--
 x11/ruby-gnome2-gtk/distinfo         |   3 ++-
 x11/ruby-gnome2-gtk/patches/patch-ab |  14 ++++++++++++++
 3 files changed, 18 insertions(+), 3 deletions(-)

diffs (44 lines):

diff -r a1305089cdd4 -r b31124ea9622 x11/ruby-gnome2-gtk/Makefile
--- a/x11/ruby-gnome2-gtk/Makefile      Mon Dec 17 21:51:32 2007 +0000
+++ b/x11/ruby-gnome2-gtk/Makefile      Tue Dec 18 09:27:09 2007 +0000
@@ -1,8 +1,8 @@
-# $NetBSD: Makefile,v 1.9 2007/08/19 14:42:35 obache Exp $
+# $NetBSD: Makefile,v 1.9.2.1 2007/12/18 09:27:09 ghen Exp $
 #
 
 PKGNAME=               ${RUBY_PKGPREFIX}-gnome2-gtk-${VERSION}
-PKGREVISION=           1
+PKGREVISION=           2
 COMMENT=               Ruby binding of GTK+-2.x
 CATEGORIES=            x11
 
diff -r a1305089cdd4 -r b31124ea9622 x11/ruby-gnome2-gtk/distinfo
--- a/x11/ruby-gnome2-gtk/distinfo      Mon Dec 17 21:51:32 2007 +0000
+++ b/x11/ruby-gnome2-gtk/distinfo      Tue Dec 18 09:27:09 2007 +0000
@@ -1,6 +1,7 @@
-$NetBSD: distinfo,v 1.1 2007/08/19 03:01:23 taca Exp $
+$NetBSD: distinfo,v 1.1.2.1 2007/12/18 09:27:09 ghen Exp $
 
 SHA1 (ruby-gnome2-all-0.16.0.tar.gz) = 488f6c1f139060e005f336c9c854c4dc5b3e6b7c
 RMD160 (ruby-gnome2-all-0.16.0.tar.gz) = c83c7cdcf633ad5cc213180f641a6c8f18002a9c
 Size (ruby-gnome2-all-0.16.0.tar.gz) = 1208856 bytes
 SHA1 (patch-aa) = a7f4b1c3237cabfbed84545307ff61c9614ca7f7
+SHA1 (patch-ab) = bc698907beea36c9838ef187398875fe86b13919
diff -r a1305089cdd4 -r b31124ea9622 x11/ruby-gnome2-gtk/patches/patch-ab
--- /dev/null   Thu Jan 01 00:00:00 1970 +0000
+++ b/x11/ruby-gnome2-gtk/patches/patch-ab      Tue Dec 18 09:27:09 2007 +0000
@@ -0,0 +1,14 @@
+$NetBSD: patch-ab,v 1.1.2.2 2007/12/18 09:27:09 ghen Exp $
+
+--- gtk/src/rbgtkmessagedialog.c.orig  2006-12-29 13:17:28.000000000 +0000
++++ gtk/src/rbgtkmessagedialog.c
+@@ -28,7 +28,8 @@ mdiag_initialize(argc, argv, self)
+                                RVAL2GFLAGS(flags, GTK_TYPE_DIALOG_FLAGS), 
+                                RVAL2GENUM(type, GTK_TYPE_MESSAGE_TYPE), 
+                                RVAL2GENUM(buttons, GTK_TYPE_BUTTONS_TYPE),
+-                               (const gchar*)(NIL_P(message) ? "": RVAL2CSTR(message)));
++                               "%s",
++                               NIL_P(message) ? "": RVAL2CSTR(message));
+     RBGTK_INITIALIZE(self, w);
+     return Qnil;
+ }