Problems found locating distfiles:
Package modular-xorg-server: missing distfile xorg-server-1.17.4.tar.bz2
Package py-qt4: missing distfile PyQt-mac-gpl-4.11.1.tar.gz
Package xservers: missing distfile xservers-3.3.6.5.tar.bz2
Package xview-clients: missing distfile xview3.2p1-X11R6.tar.gz
Package xview-lib: missing distfile xview3.2p1-X11R6.tar.gz
Otherwise, existing SHA1 digests verified and found to be the same on
the machine holding the existing distfiles (morden). All existing
SHA1 digests retained for now as an audit trail.
This release contains cleanup & refactoring intended to make the code
more robust and easier to maintain. It does increase to libX11 1.6.0
the required version of libX11 needed to build and run libXv.
Alan Coopersmith (10):
Adopt X.Org standard code style, with consistent indentation
Remove unnecessary casts from Xmalloc calls
Fix sign conversion & comparison warnings from clang
Use pad_to_int32 macro instead of repeated (x + 3) & ~3 pattern
Require ANSI C89 pre-processor, drop pre-C89 token pasting support
Replace custom copy of GetReq macro with call to Xlib 1.5's _XGetRequest
Add missing calls to _XEatDataWords when we are skipping _XRead
Refactor error handling
Remove fallback for _XEatDataWords, require libX11 1.6 for it
libXv 1.0.10
This quick fix release corrects an issue with the security fix from 1.0.8,
in which, if the size checks did determine the response from the X server
was too large to fit in the buffer it had allocated, XvQueryPortAttributes
could return a pointer to the caller that pointed to uninitialized memory
where the caller expected a nil-terminated string.
Alan Coopersmith (2):
XvQueryPortAttributes: add a comment explaining memory strategy
libXv 1.0.9
Daphne Pfister (1):
Bug 65252: Ensure final name is nil-terminated & none point to uninitialized memory.
This release delivers the fixes for the recently announced security issues
CVE-2013-1989 & CVE-2013-2066, plus a couple build configuration changes
and man page fixes.
Adam Jackson (1):
configure: Remove AM_MAINTAINER_MODE
Alan Coopersmith (6):
Use _XEatDataWords to avoid overflow of rep.length shifting
integer overflow in XvQueryPortAttributes() [CVE-2013-1989 1/3]
buffer overflow in XvQueryPortAttributes() [CVE-2013-2066]
integer overflow in XvListImageFormats() [CVE-2013-1989 2/3]
integer overflow in XvCreateImage() [CVE-2013-1989 3/3]
libXv 1.0.8
Colin Walters (1):
autogen.sh: Implement GNOME Build API
Thomas Klausner (1):
Uppercase SH arguments.
libXext/buildlink3.mk, now that it is included there.
Leave the places where its API version is set or variables from it
are used directly (about 3 packages).
1.0.7:
This minor maintenance release provides the usual recent collection of
build configuration improvements and janitorial cleanups.
1.0.6:
This minor maintenance release provides the usual recent collection of
build configuration improvements and janitorial cleanups.
Add README with pointers to mailing list, bugzilla & git repos
Adjust flags definitions to fix lint library build
Move xv-library-v2.2.txt document from xorg-docs
Man page cleanups and formatting fixes
Convert documentation from xv-library-v2.2.txt into man pages
Migrate to xorg macros 1.3 & XORG_DEFAULT_OPTIONS
libXv 1.0.5
Janitor: make distcheck, compiler warnings, .gitignore.
This changes the buildlink3.mk files to use an include guard for the
recursive include. The use of BUILDLINK_DEPTH, BUILDLINK_DEPENDS,
BUILDLINK_PACKAGES and BUILDLINK_ORDER is handled by a single new
variable BUILDLINK_TREE. Each buildlink3.mk file adds a pair of
enter/exit marker, which can be used to reconstruct the tree and
to determine first level includes. Avoiding := for large variables
(BUILDLINK_ORDER) speeds up parse time as += has linear complexity.
The include guard reduces system time by avoiding reading files over and
over again. For complex packages this reduces both %user and %sys time to
half of the former time.
Ademar de Souza Reis Jr:
convert manpages prototypes to C ANSI format
get rid of ancient XFree86 CVS Id tags
Alan Coopersmith:
Version bump: 1.0.4
Matthieu Herrb:
nuke RCS Ids