ソースを参照

Refresh patch queue, remove patch for CVE-2014-3710, now upstream

Christoph Biedl 9 年 前
コミット
e0e256dbd9

+ 12 - 22
debian/patches/0001-file-localmagic.patch

@@ -5,10 +5,8 @@ Description:
  No longer includes Localstuff in /usr/share/misc/magic, local definitions
  No longer includes Localstuff in /usr/share/misc/magic, local definitions
  should go to /etc/magic.
  should go to /etc/magic.
 
 
-Index: file-5.14/magic/Header
-===================================================================
---- file-5.14.orig/magic/Header	2010-12-15 03:06:49.000000000 +0000
-+++ file-5.14/magic/Header	2013-05-06 17:41:20.000000000 +0000
+--- a/magic/Header
++++ b/magic/Header
 @@ -1,5 +1,6 @@
 @@ -1,5 +1,6 @@
  # Magic data for file(1) command.
  # Magic data for file(1) command.
 -# Format is described in magic(files), where:
 -# Format is described in magic(files), where:
@@ -19,19 +17,15 @@ Index: file-5.14/magic/Header
 +# to the upstream maintainers, at file@mx.gw.com
 +# to the upstream maintainers, at file@mx.gw.com
 +# or send your suggested inclusions
 +# or send your suggested inclusions
 +# as a wishlist bug against file (using the reportbug utility).
 +# as a wishlist bug against file (using the reportbug utility).
-Index: file-5.14/magic/magic.local
-===================================================================
---- /dev/null	1970-01-01 00:00:00.000000000 +0000
-+++ file-5.14/magic/magic.local	2013-05-06 17:41:20.000000000 +0000
+--- /dev/null
++++ b/magic/magic.local
 @@ -0,0 +1,3 @@
 @@ -0,0 +1,3 @@
 +# Magic local data for file(1) command.
 +# Magic local data for file(1) command.
 +# Insert here your local magic data. Format is described in magic(5).
 +# Insert here your local magic data. Format is described in magic(5).
 +
 +
-Index: file-5.14/src/apprentice.c
-===================================================================
---- file-5.14.orig/src/apprentice.c	2013-03-21 17:45:14.000000000 +0000
-+++ file-5.14/src/apprentice.c	2013-05-06 17:41:20.000000000 +0000
-@@ -419,7 +419,7 @@
+--- a/src/apprentice.c
++++ b/src/apprentice.c
+@@ -448,7 +448,7 @@
  #ifndef COMPILE_ONLY
  #ifndef COMPILE_ONLY
  	map = apprentice_map(ms, fn);
  	map = apprentice_map(ms, fn);
  	if (map == NULL) {
  	if (map == NULL) {
@@ -40,10 +34,8 @@ Index: file-5.14/src/apprentice.c
  			file_magwarn(ms, "using regular magic file `%s'", fn);
  			file_magwarn(ms, "using regular magic file `%s'", fn);
  		map = apprentice_load(ms, fn, action);
  		map = apprentice_load(ms, fn, action);
  		if (map == NULL)
  		if (map == NULL)
-Index: file-5.14/src/Makefile.am
-===================================================================
---- file-5.14.orig/src/Makefile.am	2013-03-21 17:45:14.000000000 +0000
-+++ file-5.14/src/Makefile.am	2013-05-06 17:41:20.000000000 +0000
+--- a/src/Makefile.am
++++ b/src/Makefile.am
 @@ -4,7 +4,7 @@
 @@ -4,7 +4,7 @@
  
  
  bin_PROGRAMS = file
  bin_PROGRAMS = file
@@ -53,11 +45,9 @@ Index: file-5.14/src/Makefile.am
  AM_CFLAGS = $(CFLAG_VISIBILITY) @WARNINGS@
  AM_CFLAGS = $(CFLAG_VISIBILITY) @WARNINGS@
  
  
  libmagic_la_SOURCES = magic.c apprentice.c softmagic.c ascmagic.c \
  libmagic_la_SOURCES = magic.c apprentice.c softmagic.c ascmagic.c \
-Index: file-5.14/src/Makefile.in
-===================================================================
---- file-5.14.orig/src/Makefile.in	2013-03-21 17:51:39.000000000 +0000
-+++ file-5.14/src/Makefile.in	2013-05-06 17:41:20.000000000 +0000
-@@ -282,7 +282,7 @@
+--- a/src/Makefile.in
++++ b/src/Makefile.in
+@@ -329,7 +329,7 @@
  MAGIC = $(pkgdatadir)/magic
  MAGIC = $(pkgdatadir)/magic
  lib_LTLIBRARIES = libmagic.la
  lib_LTLIBRARIES = libmagic.la
  include_HEADERS = magic.h
  include_HEADERS = magic.h

+ 5 - 6
debian/patches/0004-doc-manpages.patch

@@ -1,10 +1,9 @@
 Author: Michael Piefel <piefel@debian.org>
 Author: Michael Piefel <piefel@debian.org>
 Description: FIXME, and #417511.
 Description: FIXME, and #417511.
 
 
-diff -Naurp file.orig/doc/file.man file/doc/file.man
---- file.orig/doc/file.man
-+++ file/doc/file.man
-@@ -55,7 +55,7 @@ meaning anything else (data is usually
+--- a/doc/file.man
++++ b/doc/file.man
+@@ -56,7 +56,7 @@
  or non-printable).
  or non-printable).
  Exceptions are well-known file formats (core files, tar archives)
  Exceptions are well-known file formats (core files, tar archives)
  that are known to contain binary data.
  that are known to contain binary data.
@@ -13,7 +12,7 @@ diff -Naurp file.orig/doc/file.man file/doc/file.man
  .Em "preserve these keywords" .
  .Em "preserve these keywords" .
  Users depend on knowing that all the readable files in a directory
  Users depend on knowing that all the readable files in a directory
  have the word
  have the word
-@@ -99,7 +99,8 @@ The concept of a
+@@ -100,7 +100,8 @@
  has been applied by extension to data files.
  has been applied by extension to data files.
  Any file with some invariant identifier at a small fixed
  Any file with some invariant identifier at a small fixed
  offset into the file can usually be described in this way.
  offset into the file can usually be described in this way.
@@ -23,7 +22,7 @@ diff -Naurp file.orig/doc/file.man file/doc/file.man
  magic file
  magic file
  .Pa __MAGIC__.mgc ,
  .Pa __MAGIC__.mgc ,
  or the files in the directory
  or the files in the directory
-@@ -434,12 +435,6 @@ will be distributed periodically.
+@@ -453,12 +454,6 @@
  The order of entries in the magic file is significant.
  The order of entries in the magic file is significant.
  Depending on what system you are using, the order that
  Depending on what system you are using, the order that
  they are put together may be incorrect.
  they are put together may be incorrect.

+ 3 - 4
debian/patches/0009-ms-html-help.patch

@@ -1,10 +1,9 @@
 Author: Paul Wise <pabs@debian.org>
 Author: Paul Wise <pabs@debian.org>
 Description: Updating MS Windows HtmlHelp Data magics (Closes: #653911).
 Description: Updating MS Windows HtmlHelp Data magics (Closes: #653911).
 
 
-diff -Naurp file.orig/magic/Magdir/msdos file/magic/Magdir/msdos
---- file.orig/magic/Magdir/msdos
-+++ file/magic/Magdir/msdos
-@@ -712,7 +712,7 @@
+--- a/magic/Magdir/msdos
++++ b/magic/Magdir/msdos
+@@ -772,7 +772,7 @@
  0	ulequad	0x3a000000024e4c	MS Advisor help file
  0	ulequad	0x3a000000024e4c	MS Advisor help file
  
  
  # HtmlHelp files (.chm)
  # HtmlHelp files (.chm)

+ 6 - 3
debian/patches/0010-mdadm.patch

@@ -3,11 +3,10 @@ Description: Adding new magics for Linux Software RAID (Closes: #663454).
 
 
 --- a/magic/Magdir/linux
 --- a/magic/Magdir/linux
 +++ b/magic/Magdir/linux
 +++ b/magic/Magdir/linux
-@@ -416,3 +416,25 @@
- # glibc locale archive as defined in glibc locale/locarchive.h
+@@ -417,6 +417,28 @@
  0		lelong		0xde020109	locale archive
  0		lelong		0xde020109	locale archive
  >24		lelong		x		%d strings
  >24		lelong		x		%d strings
-+
+ 
 +# Linux Software RAID (mdadm)
 +# Linux Software RAID (mdadm)
 +# Russell Coker <russell@coker.com.au>
 +# Russell Coker <russell@coker.com.au>
 +4096	lelong	0xa92b4efc	Linux Software RAID
 +4096	lelong	0xa92b4efc	Linux Software RAID
@@ -29,3 +28,7 @@ Description: Adding new magics for Linux Software RAID (Closes: #663454).
 +>32	string	x		name=%s
 +>32	string	x		name=%s
 +>72	lelong	x		level=%d
 +>72	lelong	x		level=%d
 +>92	lelong	x		disks=%d
 +>92	lelong	x		disks=%d
++
+ # Summary:     Database file for mlocate
+ # Description: A database file as used by mlocate, a fast implementation
+ #              of locate/updatedb. It uses merging to reuse the existing

+ 3 - 4
debian/patches/0011-btrfs.patch

@@ -1,10 +1,9 @@
 Author: Russell Coker <russell@coker.com.au>
 Author: Russell Coker <russell@coker.com.au>
 Description: Adding updated magics for BTRFS (Closes: #663454).
 Description: Adding updated magics for BTRFS (Closes: #663454).
 
 
-diff -Naurp file.orig/magic/Magdir/filesystems file/magic/Magdir/filesystems
---- file.orig/magic/Magdir/filesystems	2013-03-13 16:54:43.588452886 +0100
-+++ file/magic/Magdir/filesystems	2013-03-13 17:15:59.659044842 +0100
-@@ -1894,12 +1894,21 @@
+--- a/magic/Magdir/filesystems
++++ b/magic/Magdir/filesystems
+@@ -2202,12 +2202,21 @@
  >>0x10060        string          >\0             lockproto %s)
  >>0x10060        string          >\0             lockproto %s)
  
  
  # BTRFS
  # BTRFS

+ 0 - 24
debian/patches/CVE-2014-3710.patch

@@ -1,24 +0,0 @@
-Subject: Fix note bounds reading, Francisco Alonso / Red Hat
-ID: CVE-2014-3710
-Author: Christos Zoulas <christos@zoulas.com>
-Date: Fri Oct 17 15:49:00 2014 +0000
-Origin:
-    commit 39c7ac1106be844a5296d3eb5971946cc09ffda0
-Last-Update: 2014-11-09
-
---- a/src/readelf.c
-+++ b/src/readelf.c
-@@ -477,6 +477,13 @@
- 	uint32_t namesz, descsz;
- 	unsigned char *nbuf = CAST(unsigned char *, vbuf);
- 
-+	if (xnh_sizeof + offset > size) {
-+		/*
-+		 * We're out of note headers.
-+		 */
-+		return xnh_sizeof + offset;
-+	}
-+
- 	(void)memcpy(xnh_addr, &nbuf[offset], xnh_sizeof);
- 	offset += xnh_sizeof;
- 

+ 0 - 1
debian/patches/series

@@ -9,4 +9,3 @@
 0010-mdadm.patch
 0010-mdadm.patch
 0011-btrfs.patch
 0011-btrfs.patch
 0012-lxt.patch
 0012-lxt.patch
-CVE-2014-3710.patch