fixed insecure temporary file creation, see bug #26715

5 files changed, 86 insertions, 4 deletions

diff --git a/app-emacs/liece/ChangeLog b/app-emacs/liece/ChangeLog
index 95a4036d7af0..6f3957a9e743 100644
--- a/app-emacs/liece/ChangeLog
+++ b/app-emacs/liece/ChangeLog
@@ -1,6 +1,12 @@
 # ChangeLog for app-emacs/liece
 # Copyright 2002-2003 Gentoo Technologies, Inc.; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/app-emacs/liece/ChangeLog,v 1.5 2003/08/17 19:12:01 usata Exp $
+# $Header: /var/cvsroot/gentoo-x86/app-emacs/liece/ChangeLog,v 1.6 2003/08/18 15:31:08 usata Exp $
+
+*liece-1.4.7-r1 (19 Aug 2003)
+
+  19 Aug 2003; Mamoru KOMACHI <usata@gentoo.org> liece-1.4.7-r1.ebuild,
+  files/liece-1.4.7-gentoo.patch:
+  Fixed insecure temporary file
 
 *liece-2.0.0_alpha20030526 (18 Aug 2003)
 
diff --git a/app-emacs/liece/Manifest b/app-emacs/liece/Manifest
index b7d7da56b53c..c91dd954fb07 100644
--- a/app-emacs/liece/Manifest
+++ b/app-emacs/liece/Manifest
@@ -1,11 +1,10 @@
-MD5 15192b5f8cb77034423f909f93857ccb ChangeLog 1158
+MD5 7f558a93cedde842ddcd5ce4ecd133ed ChangeLog 1328
 MD5 6e9add024a3c6a84a88eadf5c9f2136e liece-1.4.7.ebuild 1010
 MD5 fcd33d07e4ee719b01157946734f4fe8 metadata.xml 158
 MD5 ad9f6e23210687a9e95d5cde9985c15e liece-1.4.10.ebuild 895
 MD5 c5243eafdd37bb9abfce488902e3fe7d liece-1.4.10-r1.ebuild 977
-MD5 9572883978de77c52652698df3411606 liece-1.4.7-r1.ebuild 1104
+MD5 4bae1fc7f6608223e680dc4bb77f6332 liece-1.4.7-r1.ebuild 1089
 MD5 b898576abdc5b4491d27610a14594f6f liece-2.0.0_alpha20030526.ebuild 1081
-MD5 6e9add024a3c6a84a88eadf5c9f2136e liece-1.4.7-r1.ebuild.bak 1010
 MD5 5aa16bbc6b6ac50b62d981d7786d8573 files/60liece-gentoo.el 308
 MD5 863af99d124215dd5c56d21b1fae3a5c files/digest-liece-1.4.7 63
 MD5 5fd2f8383cbd4d9d178442b07ba2ef90 files/digest-liece-1.4.10 64
@@ -14,3 +13,4 @@ MD5 5fd2f8383cbd4d9d178442b07ba2ef90 files/digest-liece-1.4.10-r1 64
 MD5 6730c08f3766e0f9115881c823128da7 files/digest-liece-2.0.0_alpha20030526 77
 MD5 96453ef071882a4b0a3ad4558401402d files/delegate.el 3248
 MD5 863af99d124215dd5c56d21b1fae3a5c files/digest-liece-1.4.7-r1 63
+MD5 8e3ab38077dc5e50af6e72e4d6d0fb6f files/liece-1.4.7-gentoo.patch 1226
diff --git a/app-emacs/liece/files/digest-liece-1.4.7-r1 b/app-emacs/liece/files/digest-liece-1.4.7-r1
new file mode 100644
index 000000000000..75f400d93c38
--- /dev/null
+++ b/app-emacs/liece/files/digest-liece-1.4.7-r1
@@ -0,0 +1 @@
+MD5 ed4f6fa2171031883ff6202fda7fbbb4 liece-1.4.7.tar.gz 216362
diff --git a/app-emacs/liece/files/liece-1.4.7-gentoo.patch b/app-emacs/liece/files/liece-1.4.7-gentoo.patch
new file mode 100644
index 000000000000..6672f9cf5da2
--- /dev/null
+++ b/app-emacs/liece/files/liece-1.4.7-gentoo.patch
@@ -0,0 +1,25 @@
+diff -urN liece-1.4.7.ORIG/lisp/gettext.el liece-1.4.7/lisp/gettext.el
+--- liece-1.4.7.ORIG/lisp/gettext.el	2002-03-21 11:24:07.000000000 +0900
++++ liece-1.4.7/lisp/gettext.el	2003-08-18 22:41:45.000000000 +0900
+@@ -244,7 +244,7 @@
+ Here's how the path to message files is constructed under SunOS 5.0:
+   {pathname}/{LANG}/LC_MESSAGES/{domain}.mo
+ \[XEmacs I18N level 3 emulating function]"
+-    (let* ((lang (or (getenv "LC_ALL") (getenv "LC_MESSAGES") (getenv "LANG")))
++    (let* ((lang (or (getenv "LC_ALL") (getenv "LC_MESSAGES") (getenv "LANG") "C"))
+ 	   (language (progn
+ 		       (string-match "\\([^_.]+\\)\\(_[^.]+\\)?\\(\\.[^@]+\\)?"
+ 				     lang)
+diff -urN liece-1.4.7.ORIG/lisp/liece.el liece-1.4.7/lisp/liece.el
+--- liece-1.4.7.ORIG/lisp/liece.el	2001-10-02 14:01:38.000000000 +0900
++++ liece-1.4.7/lisp/liece.el	2003-08-18 22:42:49.000000000 +0900
+@@ -506,8 +506,7 @@
+        (file-exists-p liece-directory)
+        (yes-or-no-p "Upgrade the location of the data files? ")
+        (let ((file
+-	      (expand-file-name
+-	       (make-temp-name "liece") temporary-file-directory)))
++	       (make-temp-file "liece")))
+ 	 (unwind-protect
+ 	     (progn
+ 	       (rename-file liece-directory file 'ok-if-exists)
diff --git a/app-emacs/liece/liece-1.4.7-r1.ebuild b/app-emacs/liece/liece-1.4.7-r1.ebuild
new file mode 100644
index 000000000000..0fe9fd08d891
--- /dev/null
+++ b/app-emacs/liece/liece-1.4.7-r1.ebuild
@@ -0,0 +1,50 @@
+# Copyright 1999-2003 Gentoo Technologies, Inc.
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/app-emacs/liece/liece-1.4.7-r1.ebuild,v 1.1 2003/08/18 15:31:08 usata Exp $
+
+inherit elisp eutils
+
+IUSE=""
+
+DESCRIPTION="Liece is a client implementation of IRC (Internet Relay Chat, RFC 1459)."
+HOMEPAGE="http://www.unixuser.org/~ueno/liece/"
+SRC_URI="http://www.unixuser.org/~ueno/liece/dist/${P}.tar.gz"
+LICENSE="GPL-2"
+SLOT="0"
+KEYWORDS="x86"
+
+DEPEND="virtual/emacs
+	app-emacs/apel"
+
+S="${WORKDIR}/${P}"
+
+src_unpack() {
+
+	unpack ${A}
+	epatch ${FILESDIR}/${P}-gentoo.patch
+}
+
+src_compile() {
+	./configure	--host=${CHOST} \
+		--prefix=/usr \
+		--infodir=/usr/share/info \
+		--with-lispdir=${SITELISP} \
+		--mandir=/usr/share/man || die "./configure failed"
+
+	emake || die
+}
+
+src_install () {
+	make PREFIX=${D}/usr prefix=${D}/usr \
+		infodir=${D}/usr/share/info \
+		lispdir=${D}/${SITELISP} install || die
+	elisp-site-file-install ${FILESDIR}/60liece-gentoo.el
+}
+
+pkg_postinst() {
+	elisp-site-regen
+}
+
+pkg_postrm() {
+	elisp-site-regen
+}