CVS commit: pkgsrc/print/luatex

["Mark Davies" <markd%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   markd
Date:           Thu Nov  1 10:59:15 UTC 2018

Modified Files:
        pkgsrc/print/luatex: Makefile distinfo
Added Files:
        pkgsrc/print/luatex/patches: patch-texk_web2c_luatexdir_font_writet1.w

Log Message:
luatex: writet1 protection against buffer overflow


To generate a diff of this commit:
cvs rdiff -u -r1.76 -r1.77 pkgsrc/print/luatex/Makefile
cvs rdiff -u -r1.30 -r1.31 pkgsrc/print/luatex/distinfo
cvs rdiff -u -r0 -r1.1 \
    pkgsrc/print/luatex/patches/patch-texk_web2c_luatexdir_font_writet1.w

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/print/luatex/Makefile
diff -u pkgsrc/print/luatex/Makefile:1.76 pkgsrc/print/luatex/Makefile:1.77
--- pkgsrc/print/luatex/Makefile:1.76   Sun Sep  2 21:32:44 2018
+++ pkgsrc/print/luatex/Makefile        Thu Nov  1 10:59:15 2018
@@ -1,8 +1,8 @@
-# $NetBSD: Makefile,v 1.76 2018/09/02 21:32:44 wiz Exp $
+# $NetBSD: Makefile,v 1.77 2018/11/01 10:59:15 markd Exp $
 
 DISTNAME=      texlive-20180414-source
 PKGNAME=       luatex-1.07.0
-PKGREVISION=   5
+PKGREVISION=   6
 CATEGORIES=    print
 MASTER_SITES=  ftp://tug.org/historic/systems/texlive/2018/
 EXTRACT_SUFX=  .tar.xz

Index: pkgsrc/print/luatex/distinfo
diff -u pkgsrc/print/luatex/distinfo:1.30 pkgsrc/print/luatex/distinfo:1.31
--- pkgsrc/print/luatex/distinfo:1.30   Sun May 13 12:46:27 2018
+++ pkgsrc/print/luatex/distinfo        Thu Nov  1 10:59:15 2018
@@ -1,4 +1,4 @@
-$NetBSD: distinfo,v 1.30 2018/05/13 12:46:27 markd Exp $
+$NetBSD: distinfo,v 1.31 2018/11/01 10:59:15 markd Exp $
 
 SHA1 (texlive-20180414-source.tar.xz) = 81bdd9999b6ab860d1d3c388cf27062aba960255
 RMD160 (texlive-20180414-source.tar.xz) = 0ff63bbd7f8a0fb6417089f5d1ae1e4124a1dd95
@@ -7,5 +7,6 @@ Size (texlive-20180414-source.tar.xz) = 
 SHA1 (patch-ac) = 1ee83833a03eace2eada892130ddb2198e829f3d
 SHA1 (patch-libs_luajit_LuaJIT-src_src_host_buildvm__asm.c) = 34fa742ed696f97df637c5086bf1faf3d718cb69
 SHA1 (patch-libs_luajit_LuaJIT-src_src_vm__x86.dasc) = 491d33adbbaab8b2b81a65a8d7ba30aee775b75f
+SHA1 (patch-texk_web2c_luatexdir_font_writet1.w) = c5d9b0bf411ff67028cbeee629bebc95f05c94e3
 SHA1 (patch-texk_web2c_luatexdir_image_pdftoepdf.w) = 9b6d637abe2fbb246a2435caf8aec5070abd1c5f
 SHA1 (patch-texk_web2c_luatexdir_lua_lepdflib.cc) = 24052cbff1a087badbeefe8b58bf7ce97e4ab4fb

Added files:

Index: pkgsrc/print/luatex/patches/patch-texk_web2c_luatexdir_font_writet1.w
diff -u /dev/null pkgsrc/print/luatex/patches/patch-texk_web2c_luatexdir_font_writet1.w:1.1
--- /dev/null   Thu Nov  1 10:59:15 2018
+++ pkgsrc/print/luatex/patches/patch-texk_web2c_luatexdir_font_writet1.w       Thu Nov  1 10:59:15 2018
@@ -0,0 +1,18 @@
+$NetBSD: patch-texk_web2c_luatexdir_font_writet1.w,v 1.1 2018/11/01 10:59:15 markd Exp $
+
+writet1 protection against buffer overflow
+
+git-svn-id: svn://tug.org/texlive/trunk/Build/source@48697 c570f23f-e606-0410-a88d-b1316a301751
+
+--- texk/web2c/luatexdir/font/writet1.w.orig   2016-11-25 18:24:34.000000000 +0000
++++ texk/web2c/luatexdir/font/writet1.w
+@@ -1625,7 +1625,9 @@ static void t1_check_unusual_charstring(
+     if (sscanf(p, "%i", &i) != 1) {
+         strcpy(t1_buf_array, t1_line_array);
+         t1_getline();
++      alloc_array(t1_buf, strlen(t1_line_array) + strlen(t1_buf_array) + 1, T1_BUF_SIZE);
+         strcat(t1_buf_array, t1_line_array);
++      alloc_array(t1_line, strlen(t1_buf_array) + 1, T1_BUF_SIZE);
+         strcpy(t1_line_array, t1_buf_array);
+         t1_line_ptr = eol(t1_line_array);
+     }