Commit graph

73 commits

Author SHA1 Message Date
rillig
87f1ebdf77 graphics/jasper: fix typo in jasper.pc.in location 2020-04-26 10:05:46 +00:00
nia
b3c000b470 jasper: Update to 2.0.16
CVE-2018-19539: Fixed a denial of service in jas_image_readcmpt
2019-07-16 10:06:07 +00:00
snj
733aaedcdf graphics/jasper: update to 2.0.14.
Changes:
- In the JPC codec, the requirement that the number of tile parts be at
  least one has been removed (since the JPEG-2000 standard allows
  a special value of zero to mean the number of tile parts is unspecified).
- add option to disable programs
- Include jasper/jas_debug.h when using jas_eprintf
  Fixes building with -Werror=implicit-function-declaration.
- Applied patches to resolve some missing export problems.
  See: https://github.com/mdadams/jasper/issues/122
- Moved inttypes.h and stdbool.h includes to jas_types.h and fixed
  the build for Visual Studio 2012 and lower.
- Correct or add comments for jas_safe_* functions
  Mostly fixing bad copy-n-paste issues, or functions added without any
  comment.
- Added a check in the JP2 encoder to ensure that the image to be coded
  has at least one component.  Also, made some small changes to a
  private build script.
- Fixed bugs due to uninitialized data in the JP2 decoder.
  Also, added some comments marking I/O stream interfaces that probably
  need to be changed (in the long term) to fix integer overflow
  problems.
- Added some additional checking to prevent a potential integer overflow
  due to conversion in the JPC decoder.
- Added numerous more-detailed error messages for the JPC and JP2
  codecs.
- Added a partial verbose capability for the run_test_1 script.
- Moved a test case from the bad category to the good category, as the
  test case had been miscategorized.
- Add some regression test cases.
- Fixed some potential double-free problems in the JPC codec.
2017-11-23 19:16:28 +00:00
wiz
79101955a0 Updated jasper to 2.0.12.
Bumped the version number.

    Added some additional checking to prevent a potential integer overflow
    due to conversion in the JPC decoder.

    Added numerous more-detailed error messages for the JPC and JP2
    codecs.
    Added a partial verbose capability for the run_test_1 script.
    Moved a test case from the bad category to the good category, as the
    test case had been miscategorized.


    Added another regression test case.

    Fixed some potential double-free problems in the JPC codec.
2017-03-05 12:49:51 +00:00
ryoon
fd4ad6652d Disable PDF files regeneration from disabling doxygen detection.
And install pre-generated PDF files.
Bump PKGREVISION.
Thank you, adam@.
2017-02-22 11:53:49 +00:00
ryoon
ab2cc25d1a Disable documentation files generation. Bump PKGREVISION
When LaTeX is detected, some LaTeX style files are required.
2017-02-22 00:45:06 +00:00
adam
c838c81330 Changes 2.0.10:
Fixed a problem in the JP2 encoder that caused a null pointer dereference when no ICC profile data is available (e.g., in the case of an unknown color space).
2017-02-21 18:24:20 +00:00
dholland
2836d9f7c2 Insert rcsid header in patch file, which I dropped in almost verbatim
from upstream.
2016-12-17 23:10:25 +00:00
dholland
c06bd15b53 Add upstream patch for CVE-2016-8654. 2016-12-17 23:02:51 +00:00
he
29b588919e Add a cast so that this builds with the compiler in NetBSD 7.0 as well. 2016-12-16 13:05:58 +00:00
he
d19ab5bfab Upgrade jasper from 1.900.1 to 1.900.29.
This integrates most of the patches we had applied in pkgsrc.

The changes are in ChangeLog, and are not well summarized anywhere
I can find, sorry...

OK from adam@
2016-12-16 09:44:44 +00:00
he
06d2094ae5 Add fixes for CVE-2008-3520 and CVE-2008-3522, patches from
https://bugs.gentoo.org/show_bug.cgi?id=222819

Bump PKGREVISION.
2016-05-16 14:03:40 +00:00
tnn
2f507c2c79 patch denial of service issues CVE-2016-1577 CVE-2016-2116 CVE-2016-2089
via debian
2016-03-13 04:11:18 +00:00
jperkin
ec1cd47ca0 Remove manual OPSYSVARS additions which are now part of the default set. 2016-02-25 08:27:02 +00:00
agc
7f810a359f Add SHA512 digests for distfiles for graphics category
Problems found with existing digests:
	Package fotoxx distfile fotoxx-14.03.1.tar.gz
	ac2033f87de2c23941261f7c50160cddf872c110 [recorded]
	118e98a8cc0414676b3c4d37b8df407c28a1407c [calculated]
	Package ploticus-examples distfile ploticus-2.00/plnode200.tar.gz
	34274a03d0c41fae5690633663e3d4114b9d7a6d [recorded]
	da39a3ee5e6b4b0d3255bfef95601890afd80709 [calculated]

Problems found locating distfiles:
	Package AfterShotPro: missing distfile AfterShotPro-1.1.0.30/AfterShotPro_i386.deb
	Package pgraf: missing distfile pgraf-20010131.tar.gz
	Package qvplay: missing distfile qvplay-0.95.tar.gz

Otherwise, existing SHA1 digests verified and found to be the same on
the machine holding the existing distfiles (morden).  All existing
SHA1 digests retained for now as an audit trail.
2015-11-03 21:33:50 +00:00
snj
2408c34540 Fix CVE-2014-8157 and CVE-2014-8158. Bump PKGREVISION to 10. 2015-02-08 23:04:22 +00:00
he
3d860f3f2d Rename patches to conform to the "new" style.
Add comments to the patches.
Add fix for oCERT-2014-012, pulled from RedHat.
Add fix from Debian bug 469786.
Add LICENSE setting, I think modified-bsd is fitting.
Bump PKGREVISION.
2015-01-01 14:15:27 +00:00
tez
424256685d Add patch for CVE-2014-9029 from
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-9029
2014-12-11 20:18:09 +00:00
wiz
cda18437be Remove pkgviews: don't set PKG_INSTALLATION_TYPES in Makefiles. 2014-10-09 14:05:50 +00:00
adam
f4c3b89da7 Revbump after graphics/jpeg and textproc/icu 2013-01-26 21:36:13 +00:00
asau
08f35c7155 Drop superfluous PKG_DESTDIR_SUPPORT, "user-destdir" is default these days. 2012-10-06 14:10:39 +00:00
drochner
ee7a1eb849 add patches from Redhat to add some input validation and fix a
memory allocation error; both could lead to heap buffer overflows
(CVE-2011-4516, CVE-2011-4517)
bump PKGREV
2011-12-22 16:17:57 +00:00
tez
c2af97fcfa The solaris stdbool.h requires c99 which is fine for jasper, but
not so good for things that depend upon jasper.  See PR#43901
This stops jasper from using stdbool.h (on solaris only.)
2011-06-21 16:20:51 +00:00
dsainty
1f40f3a084 Mechanically replace references to graphics/jpeg with the suitable
alternative from mk/jpeg.buildlink3.mk

This allows selection of an alternative jpeg library (namely the x86 MMX,
SSE, SSE2 accelerated libjpeg-turbo) via JPEG_DEFAULT=libjpeg-turbo, and
follows the current standard model for alternatives (fam, motif, fuse etc).

The mechanical edits were applied via the following script:

#!/bin/sh
for d in */*; do
  [ -d "$d" ] || continue
  for i in "$d/"Makefile* "$d/"*.mk; do
    case "$i" in *.orig|*"*"*) continue;; esac
    out="$d/x"
    sed -e 's;graphics/jpeg/buildlink3\.mk;mk/jpeg.buildlink3.mk;g' \
        -e 's;BUILDLINK_PREFIX\.jpeg;JPEGBASE;g' \
        < "$i" > "$out"
    if cmp -s "$i" "$out"; then
      rm -f "$out"
    else
      echo "Edited $i"
      mv -f "$i" "$i.orig" && mv "$out" "$i"
    fi
  done
done
2010-12-23 11:44:24 +00:00
wiz
91871f449e Second try at jpeg-8 recursive PKGREVISION bump. 2010-01-18 09:58:37 +00:00
drochner
b0d0bad074 add a patch from Debian to tolerate j2k pictures with alpha channel
(seems really just tolerated -- looks ugly but at least doesn't crash)
bump PKGREVISION
2009-11-23 11:53:20 +00:00
sno
6f7368d4db bump revision because of graphics/jpeg update 2009-08-26 19:56:37 +00:00
joerg
3a3c07bc30 Remove @dirrm entries from PLISTs 2009-06-14 17:59:04 +00:00
joerg
2d1ba244e9 Simply and speed up buildlink3.mk files and processing.
This changes the buildlink3.mk files to use an include guard for the
recursive include. The use of BUILDLINK_DEPTH, BUILDLINK_DEPENDS,
BUILDLINK_PACKAGES and BUILDLINK_ORDER is handled by a single new
variable BUILDLINK_TREE. Each buildlink3.mk file adds a pair of
enter/exit marker, which can be used to reconstruct the tree and
to determine first level includes. Avoiding := for large variables
(BUILDLINK_ORDER) speeds up parse time as += has linear complexity.
The include guard reduces system time by avoiding reading files over and
over again. For complex packages this reduces both %user and %sys time to
half of the former time.
2009-03-20 19:23:50 +00:00
drochner
10ca94814c add a patch from Debian (bug #413041) to fix some heap corruption
on malformed image input (CVE-2007-2721),
also fix some initialisation which could cause random misbehaviour
on cleanup,
bump PKGREVISION
2008-03-20 19:58:16 +00:00
joerg
ff014e02d3 Add DESTDIR support. 2007-08-17 22:18:15 +00:00
salo
3275116881 Use correct Autoconf macro for stdbool.h detection and functionality test.
Fixes build of some depending package such as netpbm (with its horrible,
horrible hardcoded _XOPEN_SOURCES definitions all over the place) on Solaris.

Will be submitted upstream.
2007-08-12 21:53:42 +00:00
wiz
f6956b285f Update to 1.900.1:
This release fixes some build problems as well as
a multiply-defined symbol problem in jpc_qmfb.h.
2007-01-21 21:44:35 +00:00
wiz
e5b04d25c0 Very belatedly bump PKGREVISION for all jasper dependencies because
of the shlib name change (!) during the update to 1.900.0.

Noted by Robert Elz in PR 35431.
2007-01-17 23:47:18 +00:00
adam
42a225cb35 Fix pkglint warnings 2007-01-07 19:02:12 +00:00
adam
269cdf6600 Fix building on Darwin/Mac OS X 2007-01-07 19:00:59 +00:00
wiz
458461099e Update to 1.900.0:
1) The wavelet transform code has been rewritten in order to be more
cache efficient (via loop tiling).  As a few individuals have noted,
the old code could often result in an excessive number of cache misses.

2) Some man pages have been added to the distribution as provided
by Roland Stigge.

3) Some simple timer routines have been added to facilitate performance
measurements.

4) Numerous bugs have been fixed (e.g., memory leaks, JP2 box processing
problem, etc.).

5) Some name space pollution issues have been resolved.

6) A few compiler warnings have been fixed.
2007-01-06 23:28:07 +00:00
jschauma
721b60b433 Instead of setting compiler flags in each package if it uses C99,
allow USE_LANGUAGES+=c99 and let gcc and mipspro do the right thing.
May need to be reviewed/added for other compilers.
ok rillig@
2006-12-02 22:32:59 +00:00
jlam
c16221a4db Change the format of BUILDLINK_ORDER to contain depth information as well,
and add a new helper target and script, "show-buildlink3", that outputs
a listing of the buildlink3.mk files included as well as the depth at
which they are included.

For example, "make show-buildlink3" in fonts/Xft2 displays:

	zlib
	fontconfig
	    iconv
	    zlib
	    freetype2
	    expat
	freetype2
	Xrender
	    renderproto
2006-07-08 23:10:35 +00:00
jlam
9430e49307 Track information in a new variable BUILDLINK_ORDER that informs us
of the order in which buildlink3.mk files are (recursively) included
by a package Makefile.
2006-07-08 22:38:58 +00:00
rillig
96fc47c14f Aligned the last line of the buildlink3.mk files with the first line, so
that they look nicer.
2006-04-12 10:26:59 +00:00
reed
5abef9be14 Over 1200 files touched but no revisions bumped :)
RECOMMENDED is removed. It becomes ABI_DEPENDS.

BUILDLINK_RECOMMENDED.foo becomes BUILDLINK_ABI_DEPENDS.foo.

BUILDLINK_DEPENDS.foo becomes BUILDLINK_API_DEPENDS.foo.

BUILDLINK_DEPENDS does not change.

IGNORE_RECOMMENDED (which defaulted to "no") becomes USE_ABI_DEPENDS
which defaults to "yes".

Added to obsolete.mk checking for IGNORE_RECOMMENDED.

I did not manually go through and fix any aesthetic tab/spacing issues.

I have tested the above patch on DragonFly building and packaging
subversion and pkglint and their many dependencies.

I have also tested USE_ABI_DEPENDS=no on my NetBSD workstation (where I
have used IGNORE_RECOMMENDED for a long time). I have been an active user
of IGNORE_RECOMMENDED since it was available.

As suggested, I removed the documentation sentences suggesting bumping for
"security" issues.

As discussed on tech-pkg.

I will commit to revbump, pkglint, pkg_install, createbuildlink separately.

Note that if you use wip, it will fail!  I will commit to pkgsrc-wip
later (within day).
2006-04-06 06:21:32 +00:00
joerg
5911def816 Recursive revision bump / recommended bump for gettext ABI change. 2006-02-05 23:08:03 +00:00
jschauma
edb536c795 Add '-c99' to CFLAGS for the MIPSPro compiler chain. 2005-10-08 21:11:55 +00:00
tv
f816d81489 Remove USE_BUILDLINK3 and NO_BUILDLINK; these are no longer used. 2005-04-11 21:44:48 +00:00
agc
6a7b384635 Add RMD160 digests 2005-02-24 08:45:01 +00:00
tv
c487cb967a Libtool fix for PR pkg/26633, and other issues. Update libtool to 1.5.10
in the process.  (More information on tech-pkg.)

Bump PKGREVISION and BUILDLINK_DEPENDS of all packages using libtool and
installing .la files.

Bump PKGREVISION (only) of all packages depending directly on the above
via a buildlink3 include.
2004-10-03 00:12:51 +00:00
jlam
1a280185e1 Mechanical changes to package PLISTs to make use of LIBTOOLIZE_PLIST.
All library names listed by *.la files no longer need to be listed
in the PLIST, e.g., instead of:

	lib/libfoo.a
	lib/libfoo.la
	lib/libfoo.so
	lib/libfoo.so.0
	lib/libfoo.so.0.1

one simply needs:

	lib/libfoo.la

and bsd.pkg.mk will automatically ensure that the additional library
names are listed in the installed package +CONTENTS file.

Also make LIBTOOLIZE_PLIST default to "yes".
2004-09-22 08:09:14 +00:00
wiz
adc1bb3c9d Unused. 2004-05-22 10:04:21 +00:00
minskim
fbfa5eef25 Enable pkgviews installation. 2004-04-25 04:56:56 +00:00