[Astlinux-commits] SF.net SVN: astlinux:[7087] branches/1.0/package/e2fsprogs

[<abe...@us...>]

Revision: 7087
          http://sourceforge.net/p/astlinux/code/7087
Author:   abelbeck
Date:     2015-05-30 17:12:15 +0000 (Sat, 30 May 2015)
Log Message:
-----------
e2fsprogs, version bump to 1.42.13, many bug fixes. Be sure to remove your 'initrd.img' so it gets rebuilt

Modified Paths:
--------------
    branches/1.0/package/e2fsprogs/e2fsprogs-sem-init-libs.patch
    branches/1.0/package/e2fsprogs/e2fsprogs.mk

Removed Paths:
-------------
    branches/1.0/package/e2fsprogs/e2fsprogs-CVE-2015-1572.patch

Deleted: branches/1.0/package/e2fsprogs/e2fsprogs-CVE-2015-1572.patch
===================================================================
--- branches/1.0/package/e2fsprogs/e2fsprogs-CVE-2015-1572.patch	2015-05-29 15:41:40 UTC (rev 7086)
+++ branches/1.0/package/e2fsprogs/e2fsprogs-CVE-2015-1572.patch	2015-05-30 17:12:15 UTC (rev 7087)
@@ -1,58 +0,0 @@
-From 49d0fe2a14f2a23da2fe299643379b8c1d37df73 Mon Sep 17 00:00:00 2001
-From: Theodore Ts'o <ty...@mi...>
-Date: Fri, 6 Feb 2015 12:46:39 -0500
-Subject: [PATCH] libext2fs: fix potential buffer overflow in closefs()
-
-Upstream commit 49d0fe2a14f2.
-
-The bug fix in f66e6ce4446: "libext2fs: avoid buffer overflow if
-s_first_meta_bg is too big" had a typo in the fix for
-ext2fs_closefs().  In practice most of the security exposure was from
-the openfs path, since this meant if there was a carefully crafted
-file system, buffer overrun would be triggered when the file system was
-opened.
-
-However, if corrupted file system didn't trip over some corruption
-check, and then the file system was modified via tune2fs or debugfs,
-such that the superblock was marked dirty and then written out via the
-closefs() path, it's possible that the buffer overrun could be
-triggered when the file system is closed.
-
-Also clear up a signed vs unsigned warning while we're at it.
-
-Thanks to Nick Kralevich <nn...@go...> for asking me to look at
-compiler warning in the code in question, which led me to notice the
-bug in f66e6ce4446.
-
-Addresses: CVE-2015-1572
-
-Signed-off-by: Theodore Ts'o <ty...@mi...>
-Signed-off-by: Baruch Siach <ba...@tk...>
----
- lib/ext2fs/closefs.c | 4 ++--
- 1 file changed, 2 insertions(+), 2 deletions(-)
-
-diff --git a/lib/ext2fs/closefs.c b/lib/ext2fs/closefs.c
-index 1f9911311a1a..ab5b2fb2365e 100644
---- a/lib/ext2fs/closefs.c
-+++ b/lib/ext2fs/closefs.c
-@@ -287,7 +287,7 @@ errcode_t ext2fs_flush2(ext2_filsys fs, int flags)
- 	dgrp_t		j;
- #endif
- 	char	*group_ptr;
--	int	old_desc_blocks;
-+	blk64_t	old_desc_blocks;
- 	struct ext2fs_numeric_progress_struct progress;
- 
- 	EXT2_CHECK_MAGIC(fs, EXT2_ET_MAGIC_EXT2FS_FILSYS);
-@@ -346,7 +346,7 @@ errcode_t ext2fs_flush2(ext2_filsys fs, int flags)
- 	group_ptr = (char *) group_shadow;
- 	if (fs->super->s_feature_incompat & EXT2_FEATURE_INCOMPAT_META_BG) {
- 		old_desc_blocks = fs->super->s_first_meta_bg;
--		if (old_desc_blocks > fs->super->s_first_meta_bg)
-+		if (old_desc_blocks > fs->desc_blocks)
- 			old_desc_blocks = fs->desc_blocks;
- 	} else
- 		old_desc_blocks = fs->desc_blocks;
--- 
-2.1.4

Modified: branches/1.0/package/e2fsprogs/e2fsprogs-sem-init-libs.patch
===================================================================
--- branches/1.0/package/e2fsprogs/e2fsprogs-sem-init-libs.patch	2015-05-29 15:41:40 UTC (rev 7086)
+++ branches/1.0/package/e2fsprogs/e2fsprogs-sem-init-libs.patch	2015-05-30 17:12:15 UTC (rev 7087)
@@ -1,6 +1,6 @@
 --- e2fsprogs-1.41.9/MCONFIG.in.orig	2009-10-07 20:25:07.000000000 +0800
 +++ e2fsprogs-1.41.9/MCONFIG.in	2009-10-07 20:21:41.000000000 +0800
-@@ -85,7 +85,7 @@
+@@ -104,7 +104,7 @@
  #
  LIB = $(top_builddir)/lib
  LIBSS = $(LIB)/libss@LIB_EXT@ @PRIVATE_LIBS_CMT@ @DLOPEN_LIB@

Modified: branches/1.0/package/e2fsprogs/e2fsprogs.mk
===================================================================
--- branches/1.0/package/e2fsprogs/e2fsprogs.mk	2015-05-29 15:41:40 UTC (rev 7086)
+++ branches/1.0/package/e2fsprogs/e2fsprogs.mk	2015-05-30 17:12:15 UTC (rev 7087)
@@ -4,7 +4,7 @@
 #
 #############################################################
 
-E2FSPROGS_VERSION = 1.42.12
+E2FSPROGS_VERSION = 1.42.13
 E2FSPROGS_SITE = http://downloads.sourceforge.net/project/e2fsprogs/e2fsprogs/v$(E2FSPROGS_VERSION)
 E2FSPROGS_INSTALL_STAGING = YES
 E2FSPROGS_INSTALL_STAGING_OPT = DESTDIR=$(STAGING_DIR) install-libs

This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site.