Fix security bug #230075.

(Portage version: 2.2_rc1/cvs/Linux 2.6.25-gentoo-r3 x86_64)

3 files changed, 78 insertions, 1 deletions

diff --git a/net-p2p/linuxdcpp/ChangeLog b/net-p2p/linuxdcpp/ChangeLog
index f780b4f47b8d..d9c59b09af51 100644
--- a/net-p2p/linuxdcpp/ChangeLog
+++ b/net-p2p/linuxdcpp/ChangeLog
@@ -1,6 +1,13 @@
 # ChangeLog for net-p2p/linuxdcpp
 # Copyright 1999-2008 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/net-p2p/linuxdcpp/ChangeLog,v 1.25 2008/05/02 16:07:19 armin76 Exp $
+# $Header: /var/cvsroot/gentoo-x86/net-p2p/linuxdcpp/ChangeLog,v 1.26 2008/06/29 18:46:01 coldwind Exp $
+
+*linuxdcpp-1.0.1-r1 (29 Jun 2008)
+
+  29 Jun 2008; Santiago M. Mola <coldwind@gentoo.org>
+  +files/linuxdcpp-1.0.1-fix-remote-vulnerability.patch,
+  +linuxdcpp-1.0.1-r1.ebuild:
+  Fix security bug #230075.
 
   02 May 2008; Raúl Porcel <armin76@gentoo.org> linuxdcpp-1.0.1.ebuild:
   Fix SRC_URI, bug #218657
diff --git a/net-p2p/linuxdcpp/files/linuxdcpp-1.0.1-fix-remote-vulnerability.patch b/net-p2p/linuxdcpp/files/linuxdcpp-1.0.1-fix-remote-vulnerability.patch
new file mode 100644
index 000000000000..91f164a37d18
--- /dev/null
+++ b/net-p2p/linuxdcpp/files/linuxdcpp-1.0.1-fix-remote-vulnerability.patch
@@ -0,0 +1,15 @@
+http://bugs.gentoo.org/show_bug.cgi?id=230075
+Security bug, fixed upstream.
+--- client/ShareManager.cpp	13 Oct 2007 21:56:55 -0000	1.14
++++ client/ShareManager.cpp	29 Jun 2008 15:34:36 -0000	1.15
+@@ -926,6 +926,10 @@
+ 			}
+ 			j = i + 1;
+ 		}
++
++		if(it == directories.end())
++			return NULL;
++
+ 		for(ShareManager::Directory::MapIter it2 = it->second->directories.begin(); it2 != it->second->directories.end(); ++it2) {
+ 			it2->second->toXml(sos, indent, tmp, recurse);
+ 		}
diff --git a/net-p2p/linuxdcpp/linuxdcpp-1.0.1-r1.ebuild b/net-p2p/linuxdcpp/linuxdcpp-1.0.1-r1.ebuild
new file mode 100644
index 000000000000..704601f69773
--- /dev/null
+++ b/net-p2p/linuxdcpp/linuxdcpp-1.0.1-r1.ebuild
@@ -0,0 +1,55 @@
+# Copyright 1999-2008 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/net-p2p/linuxdcpp/linuxdcpp-1.0.1-r1.ebuild,v 1.1 2008/06/29 18:46:01 coldwind Exp $
+
+inherit eutils
+
+DESCRIPTION="Direct connect client, looks and works like famous DC++"
+HOMEPAGE="http://linuxdcpp.berlios.de"
+SRC_URI="mirror://berlios/${PN}/${P}.tar.bz2"
+LICENSE="GPL-2"
+SLOT="0"
+KEYWORDS="~amd64 ~x86 ~x86-fbsd"
+IUSE="debug"
+
+RDEPEND=">=gnome-base/libglade-2.4
+	>=x11-libs/gtk+-2.6
+	app-arch/bzip2
+	dev-libs/openssl"
+DEPEND="${RDEPEND}
+	media-libs/fontconfig
+	>=dev-util/scons-0.96
+	dev-util/pkgconfig"
+
+src_unpack() {
+	unpack ${A}
+	cd "${S}"
+	epatch "${FILESDIR}"/${P}-fix-remote-vulnerability.patch
+}
+
+src_compile() {
+	local myconf=""
+	use debug && myconf="${myconf} debug=1"
+
+	scons ${myconf} ${MAKEOPTS} CXXFLAGS="${CXXFLAGS}" PREFIX=/usr || die "scons failed"
+}
+
+src_install() {
+	insinto /usr/share/${PN}
+	doins -r ${PN} pixmaps glade
+
+	dodoc Readme.txt Changelog.txt Credits.txt
+
+	dosym /usr/share/${PN}/${PN} /usr/bin/${PN}
+	fperms +x /usr/share/${PN}/${PN}
+
+	doicon pixmaps/${PN}.png
+
+	make_desktop_entry ${PN} "${PN}" ${PN}
+}
+
+pkg_postinst() {
+	elog
+	elog "After adding first directory to shares you might need to restart linuxdcpp."
+	elog
+}