Patched per security bug #64628.

5 files changed, 61 insertions, 1 deletions

diff --git a/media-video/lxdvdrip/ChangeLog b/media-video/lxdvdrip/ChangeLog
index 1aa7873ac40f..29e4f2882194 100644
--- a/media-video/lxdvdrip/ChangeLog
+++ b/media-video/lxdvdrip/ChangeLog
@@ -1,6 +1,12 @@
 # ChangeLog for media-video/lxdvdrip
 # Copyright 1999-2004 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/media-video/lxdvdrip/ChangeLog,v 1.5 2004/09/05 16:37:47 malc Exp $
+# $Header: /var/cvsroot/gentoo-x86/media-video/lxdvdrip/ChangeLog,v 1.6 2004/09/19 15:36:00 chriswhite Exp $
+
+*lxdvdrip-1.20_pre1-r1 (19 Sep 2004)
+
+  19 Sep 2004; Chris White <chriswhite@gentoo.org>
+  +files/lxdvdrip-1.20_pre1-overflow.patch, +lxdvdrip-1.20_pre1-r1.ebuild:
+  Fixed this thing per security bug #64628.
 
   05 Sep 2004; David Holm <dholm@gentoo.org> lxdvdrip-1.20_pre1.ebuild:
   Added to ~ppc.
diff --git a/media-video/lxdvdrip/Manifest b/media-video/lxdvdrip/Manifest
index 21eb90722134..b258615e089e 100644
--- a/media-video/lxdvdrip/Manifest
+++ b/media-video/lxdvdrip/Manifest
@@ -3,6 +3,9 @@ MD5 3fc0cad1de9b0234fc797cefe3dd486f lxdvdrip-1.10_pre2.ebuild 810
 MD5 221b05dfe72b22608cf78d7918babef7 lxdvdrip-1.10_pre5.ebuild 810
 MD5 7300a7b361fa9f48e37722c6952bd432 metadata.xml 158
 MD5 972e933593d0117bcb321c61eb543c0d lxdvdrip-1.20_pre1.ebuild 819
+MD5 164ce3130d6bbd55881075931a2f3103 lxdvdrip-1.20_pre1-r1.ebuild 889
 MD5 877c7bda100ae6f083ce5137aae3e5b1 files/digest-lxdvdrip-1.10_pre2 67
 MD5 cd76c64399dac2e89416dd89ccf32dda files/digest-lxdvdrip-1.10_pre5 67
 MD5 57482d8cce4aacca938b4e43c345e578 files/digest-lxdvdrip-1.20_pre1 67
+MD5 8cf6db9734f88660054bd48826eed685 files/lxdvdrip-1.20_pre1-r1-overflow.patch 356
+MD5 57482d8cce4aacca938b4e43c345e578 files/digest-lxdvdrip-1.20_pre1-r1 67
diff --git a/media-video/lxdvdrip/files/digest-lxdvdrip-1.20_pre1-r1 b/media-video/lxdvdrip/files/digest-lxdvdrip-1.20_pre1-r1
new file mode 100644
index 000000000000..37b848cef465
--- /dev/null
+++ b/media-video/lxdvdrip/files/digest-lxdvdrip-1.20_pre1-r1
@@ -0,0 +1 @@
+MD5 3c2ddc10debb06298d5a013c4b5c4e28 lxdvdrip-1.20-pre1.tgz 121530
diff --git a/media-video/lxdvdrip/files/lxdvdrip-1.20_pre1-overflow.patch b/media-video/lxdvdrip/files/lxdvdrip-1.20_pre1-overflow.patch
new file mode 100644
index 000000000000..7eb21b1c83bb
--- /dev/null
+++ b/media-video/lxdvdrip/files/lxdvdrip-1.20_pre1-overflow.patch
@@ -0,0 +1,11 @@
+--- lxdvdrip.c_old	2004-09-19 14:49:07.013638160 +0900
++++ lxdvdrip.c	2004-09-19 14:50:06.330620608 +0900
+@@ -333,7 +333,7 @@
+     char szPfad[4096];
+     int i;
+     char szVerzeichnis[1024];
+-    strcpy (szPfad, getenv ("PATH"));
++    strncpy (szPfad, getenv ("PATH"), 4096);
+     strcpy (szVerzeichnis, "");
+     for (i=0; i<strlen(szPfad); i++)
+     {
diff --git a/media-video/lxdvdrip/lxdvdrip-1.20_pre1-r1.ebuild b/media-video/lxdvdrip/lxdvdrip-1.20_pre1-r1.ebuild
new file mode 100644
index 000000000000..8758110674a5
--- /dev/null
+++ b/media-video/lxdvdrip/lxdvdrip-1.20_pre1-r1.ebuild
@@ -0,0 +1,39 @@
+# Copyright 1999-2004 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/media-video/lxdvdrip/lxdvdrip-1.20_pre1-r1.ebuild,v 1.1 2004/09/19 15:36:00 chriswhite Exp $
+
+inherit eutils
+
+MY_P="${PN}-${PV/_/-}"
+
+DESCRIPTION="command line tool to automate the process of ripping and burning DVD"
+SRC_URI="http://download.berlios.de/lxdvdrip/${MY_P}.tgz"
+HOMEPAGE="http://developer.berlios.de/projects/lxdvdrip/"
+LICENSE="GPL-2"
+SLOT="0"
+KEYWORDS="~x86 ~ppc ~amd64"
+IUSE=""
+DEPEND=">=dvdauthor-0.6.9"
+
+S="${WORKDIR}/${PN}"
+
+src_unpack() {
+	unpack ${A}
+	cd ${S} || die
+
+	# security bug #64628 fix
+	epatch ${FILESDIR}/${P}-overflow.patch
+
+	sed -ie "s/gcc -g/\$(CC) \$(CFLAGS)/g" Makefile
+}
+
+src_compile() {
+	emake || die
+}
+
+src_install () {
+	dobin lxdvdrip
+	dodoc doc-pak/*
+	insinto /etc
+	newins doc-pak/lxdvdrip.conf.EN lxdvdrip.conf
+}