diff --git a/multimedia/graphics/gegl/actions.py b/multimedia/graphics/gegl/actions.py new file mode 100644 index 0000000000..4a645c3146 --- /dev/null +++ b/multimedia/graphics/gegl/actions.py @@ -0,0 +1,59 @@ +#!/usr/bin/python +# -*- coding: utf-8 -*- +# +# Licensed under the GNU General Public License, version 3. +# See the file http://www.gnu.org/licenses/gpl.txt + +from pisi.actionsapi import shelltools +from pisi.actionsapi import autotools +from pisi.actionsapi import pisitools +from pisi.actionsapi import get + +def setup(): + autotools.autoreconf("-fi") + autotools.configure("--enable-mmx \ + --enable-sse \ + --includedir=/usr/include \ + --datadir=/usr/share \ + --with-pic \ + --with-gio \ + --with-gtk \ + --with-cairo \ + --with-pango \ + --with-pangocairo \ + --with-gdk-pixbuf \ + --with-lensfun \ + --with-libjpeg \ + --with-libpng \ + --with-librsvg \ + --with-openexr \ + --with-sdl \ + --with-libopenraw \ + --with-jasper \ + --with-graphviz \ + --with-lua \ + --without-libavformat \ + --with-libv4l \ + --with-libspiro \ + --with-exiv2 \ + --with-umfpack \ + --disable-static \ + --disable-gtk-doc \ + --enable-gtk-doc-html=no \ + --disable-docs \ + --disable-workshop") + + pisitools.dosed("libtool", " -shared ", " -Wl,-O1,--as-needed -shared ") + +def build(): + autotools.make() + +# disabled due sandbox violations +#def check(): +# autotools.make("check") + +def install(): + autotools.rawInstall("DESTDIR=%s" % get.installDIR()) + + pisitools.dodoc("AUTHORS", "ChangeLog", "COPYING", "COPYING.LESSER", "NEWS", "README") + diff --git a/multimedia/graphics/gegl/files/gegl-0.2.0-cve-2012-4433-1e92e523.patch b/multimedia/graphics/gegl/files/gegl-0.2.0-cve-2012-4433-1e92e523.patch new file mode 100644 index 0000000000..0babb0f41c --- /dev/null +++ b/multimedia/graphics/gegl/files/gegl-0.2.0-cve-2012-4433-1e92e523.patch @@ -0,0 +1,68 @@ +From 1e92e5235ded0415d555aa86066b8e4041ee5a53 Mon Sep 17 00:00:00 2001 +From: Nils Philippsen +Date: Tue, 16 Oct 2012 14:58:27 +0000 +Subject: ppm-load: CVE-2012-4433: don't overflow memory allocation + +Carefully selected width/height values could cause the size of a later +allocation to overflow, resulting in a buffer much too small to store +the data which would then written beyond its end. +--- +diff --git a/operations/external/ppm-load.c b/operations/external/ppm-load.c +index efe6d56..3d6bce7 100644 +--- a/operations/external/ppm-load.c ++++ b/operations/external/ppm-load.c +@@ -84,7 +84,6 @@ ppm_load_read_header(FILE *fp, + /* Get Width and Height */ + img->width = strtol (header,&ptr,0); + img->height = atoi (ptr); +- img->numsamples = img->width * img->height * CHANNEL_COUNT; + + fgets (header,MAX_CHARS_IN_ROW,fp); + maxval = strtol (header,&ptr,0); +@@ -109,6 +108,16 @@ ppm_load_read_header(FILE *fp, + g_warning ("%s: Programmer stupidity error", G_STRLOC); + } + ++ /* Later on, img->numsamples is multiplied with img->bpc to allocate ++ * memory. Ensure it doesn't overflow. */ ++ if (!img->width || !img->height || ++ G_MAXSIZE / img->width / img->height / CHANNEL_COUNT < img->bpc) ++ { ++ g_warning ("Illegal width/height: %ld/%ld", img->width, img->height); ++ return FALSE; ++ } ++ img->numsamples = img->width * img->height * CHANNEL_COUNT; ++ + return TRUE; + } + +@@ -229,12 +238,24 @@ process (GeglOperation *operation, + if (!ppm_load_read_header (fp, &img)) + goto out; + +- rect.height = img.height; +- rect.width = img.width; +- + /* Allocating Array Size */ ++ ++ /* Should use g_try_malloc(), but this causes crashes elsewhere because the ++ * error signalled by returning FALSE isn't properly acted upon. Therefore ++ * g_malloc() is used here which aborts if the requested memory size can't be ++ * allocated causing a controlled crash. */ + img.data = (guchar*) g_malloc (img.numsamples * img.bpc); + ++ /* No-op without g_try_malloc(), see above. */ ++ if (! img.data) ++ { ++ g_warning ("Couldn't allocate %" G_GSIZE_FORMAT " bytes, giving up.", ((gsize)img.numsamples * img.bpc)); ++ goto out; ++ } ++ ++ rect.height = img.height; ++ rect.width = img.width; ++ + switch (img.bpc) + { + case 1: +-- +cgit v0.9.0.2 diff --git a/multimedia/graphics/gegl/files/gegl-0.2.0-cve-2012-4433-4757cdf7.patch b/multimedia/graphics/gegl/files/gegl-0.2.0-cve-2012-4433-4757cdf7.patch new file mode 100644 index 0000000000..f78557f577 --- /dev/null +++ b/multimedia/graphics/gegl/files/gegl-0.2.0-cve-2012-4433-4757cdf7.patch @@ -0,0 +1,70 @@ +From 4757cdf73d3675478d645a3ec8250ba02168a230 Mon Sep 17 00:00:00 2001 +From: Nils Philippsen +Date: Tue, 16 Oct 2012 14:56:40 +0000 +Subject: ppm-load: CVE-2012-4433: add plausibility checks for header fields + +Refuse values that are non-decimal, negative or overflow the target +type. +--- +diff --git a/operations/external/ppm-load.c b/operations/external/ppm-load.c +index 3d6bce7..465096d 100644 +--- a/operations/external/ppm-load.c ++++ b/operations/external/ppm-load.c +@@ -36,6 +36,7 @@ gegl_chant_file_path (path, _("File"), "", _("Path of file to load.")) + #include "gegl-chant.h" + #include + #include ++#include + + typedef enum { + PIXMAP_ASCII = 51, +@@ -44,8 +45,8 @@ typedef enum { + + typedef struct { + map_type type; +- gint width; +- gint height; ++ glong width; ++ glong height; + gsize numsamples; /* width * height * channels */ + gsize bpc; /* bytes per channel */ + guchar *data; +@@ -82,11 +83,33 @@ ppm_load_read_header(FILE *fp, + } + + /* Get Width and Height */ +- img->width = strtol (header,&ptr,0); +- img->height = atoi (ptr); ++ errno = 0; ++ img->width = strtol (header,&ptr,10); ++ if (errno) ++ { ++ g_warning ("Error reading width: %s", strerror(errno)); ++ return FALSE; ++ } ++ else if (img->width < 0) ++ { ++ g_warning ("Error: width is negative"); ++ return FALSE; ++ } ++ ++ img->height = strtol (ptr,&ptr,10); ++ if (errno) ++ { ++ g_warning ("Error reading height: %s", strerror(errno)); ++ return FALSE; ++ } ++ else if (img->width < 0) ++ { ++ g_warning ("Error: height is negative"); ++ return FALSE; ++ } + + fgets (header,MAX_CHARS_IN_ROW,fp); +- maxval = strtol (header,&ptr,0); ++ maxval = strtol (header,&ptr,10); + + if ((maxval != 255) && (maxval != 65535)) + { +-- +cgit v0.9.0.2 diff --git a/multimedia/graphics/gegl/files/gegl-0.2.0-ffmpeg-0.11.patch b/multimedia/graphics/gegl/files/gegl-0.2.0-ffmpeg-0.11.patch new file mode 100644 index 0000000000..d68444d5ff --- /dev/null +++ b/multimedia/graphics/gegl/files/gegl-0.2.0-ffmpeg-0.11.patch @@ -0,0 +1,11 @@ +--- operations/external/ff-load.c.orig 2012-04-01 13:17:57.000000000 +0200 ++++ operations/external/ff-load.c 2012-07-11 12:42:05.174756560 +0200 +@@ -271,7 +271,7 @@ + gint err; + + ff_cleanup (o); +- err = av_open_input_file (&p->ic, o->path, NULL, 0, NULL); ++err = avformat_open_input (&p->ic, o->path, NULL, NULL); + if (err < 0) + { + print_error (o->path, err); diff --git a/multimedia/graphics/gegl/pspec.xml b/multimedia/graphics/gegl/pspec.xml new file mode 100644 index 0000000000..7271a1c16b --- /dev/null +++ b/multimedia/graphics/gegl/pspec.xml @@ -0,0 +1,144 @@ + + + + + gegl + http://gegl.org + + PisiLinux Community + admins@pisilinux.org + + GPLv3+ + LGPLv3+ + library + app:console + A graph based image processing framework + gegl (Generic Graphics Library) provides infrastructure to do demand based cached non destructive image editing on larger than RAM buffers. Through babl it provides support for a wide range of color models and pixel storage formats for input and output. + http://ftp.gimp.org/pub/gegl/0.2/gegl-0.2.0.tar.bz2 + + SuiteSparse-devel + libopenraw-devel + libspiro-devel + librsvg-devel + openexr-devel + ffmpeg-devel + libsdl-devel + libv4l-devel + jasper-devel + cairo-devel + pango-devel + exiv2-devel + babl-devel + libjpeg-turbo-devel + gtk2-devel + lua-devel + asciidoc + graphviz + enscript + ruby + ilmbase-devel + + + gegl-0.2.0-cve-2012-4433-1e92e523.patch + gegl-0.2.0-cve-2012-4433-4757cdf7.patch + gegl-0.2.0-ffmpeg-0.11.patch + + + + + gegl + + openexr-libs + SuiteSparse + gdk-pixbuf + libopenraw + libspiro + graphviz + librsvg + ffmpeg + jasper + libsdl + libv4l + cairo + pango + ruby + babl + libjpeg-turbo + gtk2 + lua + ilmbase + + + /usr/bin + /usr/lib + /usr/share/doc + /usr/share/locale/ + + + + + gegl-devel + Development files for gegl + + gegl + babl-devel + + + /usr/include + /usr/lib/pkgconfig + /usr/share/gtk-doc/html + + + + + + 2014-12-20 + 0.2.0 + Rebuild for lua + Osman Erkan + osman.erkan@pisilinux.org + + + 2014-06-19 + 0.2.0 + Rebuild for gcc + Osman Erkan + osman.erkan@pisilinux.org + + + 2014-01-31 + 0.2.0 + Rebuild Unused + Varol Maksutoğlu + waroi@pisilinux.org + + + 2013-11-29 + 0.2.0 + rebuild for ffmpeg + Kamil Atlı + suvarice@gmail.com + + + 2013-08-23 + 0.2.0 + Release bump + Osman Erkan + osman.erkan@pisilinux.org + + + 2013-05-20 + 0.2.0 + Configure parameter fixed + Ertan Güven + ertan@pisilinux.org + + + 2012-12-08 + 0.2.0 + First release + marcin bojara + marcin@pisilinux.org + + + diff --git a/multimedia/graphics/gegl/translations.xml b/multimedia/graphics/gegl/translations.xml new file mode 100644 index 0000000000..29e023a772 --- /dev/null +++ b/multimedia/graphics/gegl/translations.xml @@ -0,0 +1,13 @@ + + + + gegl + Graf tabanlı resim işleme altyapısı + gegl, orijinal kopyaya zarar vermeden (non-destructive) isteğe bağlı (demand based) resim işleme altyapısı sunan bir kütüphanedir. + + + + gegl-devel + gegl için geliştirme dosyaları + +