Date: Thu, 5 Jul 2007 10:17:53 +0200 (CEST) From: Bartek Rutkowski <r@robakdesign.com> To: FreeBSD-gnats-submit@FreeBSD.org Subject: ports/114327: Update of jggtrans port (fixed buffer overflow) Message-ID: <200707050817.l658Hr1r093219@smolarek.lerkins.com> Resent-Message-ID: <200707050900.l6590Bq7062215@freefall.freebsd.org>
next in thread | raw e-mail | index | archive | help
>Number: 114327 >Category: ports >Synopsis: Update of jggtrans port (fixed buffer overflow) >Confidential: no >Severity: non-critical >Priority: low >Responsible: freebsd-ports-bugs >State: open >Quarter: >Keywords: >Date-Required: >Class: change-request >Submitter-Id: current-users >Arrival-Date: Thu Jul 05 09:00:11 GMT 2007 >Closed-Date: >Last-Modified: >Originator: Bartek Rutkowski >Release: FreeBSD 6.2-RELEASE i386 >Organization: none >Environment: System: FreeBSD smolarek.lerkins.com 6.2-RELEASE FreeBSD 6.2-RELEASE #0: Fri Jan 12 10:40:27 UTC 2007 root@dessler.cse.buffalo.edu:/usr/obj/usr/src/sys/GENERIC i386 # This is a shell archive. Save it in a file, remove anything before # this line, and then unpack it by entering "sh file". Note, it may # create directories; files and directories will be owned by you and # have default permissions. # # This archive contains: # # /usr/ports/net-im/jggtrans # /usr/ports/net-im/jggtrans/Makefile # /usr/ports/net-im/jggtrans/distinfo # /usr/ports/net-im/jggtrans/pkg-descr # /usr/ports/net-im/jggtrans/pkg-message # /usr/ports/net-im/jggtrans/pkg-plist # /usr/ports/net-im/jggtrans/files # /usr/ports/net-im/jggtrans/files/jggtrans.sh.in # /usr/ports/net-im/jggtrans/files/buff-overflow-jggtrans-2.2.2-.patch # echo c - /usr/ports/net-im/jggtrans mkdir -p /usr/ports/net-im/jggtrans > /dev/null 2>&1 echo x - /usr/ports/net-im/jggtrans/Makefile sed 's/^X//' >/usr/ports/net-im/jggtrans/Makefile << 'END-of-/usr/ports/net-im/jggtrans/Makefile' X# Ports collection makefile for: jggtrans X# Date created: 13 September 2006 X# Whom: Bartek Rutkowski <r@robakdesign.com> X# X# $FreeBSD: ports/net-im/jggtrans/Makefile,v 1.2 2007/05/19 20:19:31 flz Exp $ X XPORTNAME= jggtrans XPORTVERSION= 2.2.2 XPORTREVISION= 2 XCATEGORIES= polish net-im XMASTER_SITES= http://jggtrans.jajcus.net/downloads/ \ X http://freebsd.e.pl/distfiles/ X XMAINTAINER= r@robakdesign.com XCOMMENT= Jabberd XMPP to GG instant messaging service gateway X XLIB_DEPENDS= idn.16:${PORTSDIR}/dns/libidn \ X expat.6:${PORTSDIR}/textproc/expat2 X XUSE_GMAKE= yes XGNU_CONFIGURE= yes XUSE_GETTEXT= yes XUSE_GNOME= glib20 pkgconfig XCONFIGURE_ENV= CPPFLAGS="-I${LOCALBASE}/include" LDFLAGS="-L${LOCALBASE}/lib" XMAKE_ENV= CPPFLAGS="${CPPFLAGS} -I${LOCALBASE}/include" \ X CFLAGS="${CFLAGS} -I${LOCALBASE}/include" \ X LDFLAGS="${LDFLAGS} -L${LOCALBASE}/lib" X XUSE_RC_SUBR= jggtrans.sh X XUSE_LDCONFIG= yes X XOPTIONS= NODEBUG "Turn off debugging code" off \ X EJABBERD "Use transport with ejabberd" off X X.include <bsd.port.pre.mk> X X.if defined(WITH_NODEBUG) XCONFIGURE_ARGS+= --disable-debug X.endif X X.if defined(WITH_EJABBERD) XJABBER_USER?= ejabberd XSUB_LIST+= JABBER_REQUIRE=ejabberd X.else XJABBER_USER?= jabber XSUB_LIST+= JABBER_REQUIRE=jabberd X.endif X XSUB_LIST+= JABBER_USER=${JABBER_USER} X Xpost-install: X @if [ ! -f ${PREFIX}/etc/jggtrans.xml ]; then ${CP} -p ${WRKSRC}/jggtrans.xml ${PREFIX}/etc/jggtrans.xml.sample ; fi X @${CAT} ${PKGMESSAGE} X X.include <bsd.port.post.mk> END-of-/usr/ports/net-im/jggtrans/Makefile echo x - /usr/ports/net-im/jggtrans/distinfo sed 's/^X//' >/usr/ports/net-im/jggtrans/distinfo << 'END-of-/usr/ports/net-im/jggtrans/distinfo' XMD5 (jggtrans-2.2.2.tar.gz) = 70bbec4e9c438cda6b7379ccfc63492f XSHA256 (jggtrans-2.2.2.tar.gz) = 00a4956ec2aaf22eacb28b8af2ab0742caa3deffbd895ce86bcd76b6f604a007 XSIZE (jggtrans-2.2.2.tar.gz) = 1176462 END-of-/usr/ports/net-im/jggtrans/distinfo echo x - /usr/ports/net-im/jggtrans/pkg-descr sed 's/^X//' >/usr/ports/net-im/jggtrans/pkg-descr << 'END-of-/usr/ports/net-im/jggtrans/pkg-descr' XjGGtrans (GG Transport), is external component for XMPP/Jabber Xserver providing gateway to GaduGadu instant messaging services. XjGGtrans is known to work well together with ejabberd, jabberd X1.4 and jabberd 2, but most other Jabber server implementations Xshould work too. X XWWW: http://jggtrans.jajcus.net/ END-of-/usr/ports/net-im/jggtrans/pkg-descr echo x - /usr/ports/net-im/jggtrans/pkg-message sed 's/^X//' >/usr/ports/net-im/jggtrans/pkg-message << 'END-of-/usr/ports/net-im/jggtrans/pkg-message' X****************************************************************************** X XRemember to edit jggtrans.xml to suit your needs. XAlso, keep in mind, that jggtrans should be always started with Xthe same uid and gid as your Jabberd daemon, and never should Xbe launched before it. X X****************************************************************************** END-of-/usr/ports/net-im/jggtrans/pkg-message echo x - /usr/ports/net-im/jggtrans/pkg-plist sed 's/^X//' >/usr/ports/net-im/jggtrans/pkg-plist << 'END-of-/usr/ports/net-im/jggtrans/pkg-plist' Xsbin/jggtrans Xshare/locale/nl/LC_MESSAGES/jggtrans.mo Xshare/locale/pl/LC_MESSAGES/jggtrans.mo X@unexec if cmp -s %D/etc/jggtrans.xml.sample %D/etc/jggtrans.xml; then rm -f %D/etc/jggtrans.xml; fi Xetc/jggtrans.xml.sample X@exec if [ ! -f %D/etc/jggtrans.xml ] ; then cp -p %D/%F %B/jggtrans.xml; fi END-of-/usr/ports/net-im/jggtrans/pkg-plist echo c - /usr/ports/net-im/jggtrans/files mkdir -p /usr/ports/net-im/jggtrans/files > /dev/null 2>&1 echo x - /usr/ports/net-im/jggtrans/files/jggtrans.sh.in sed 's/^X//' >/usr/ports/net-im/jggtrans/files/jggtrans.sh.in << 'END-of-/usr/ports/net-im/jggtrans/files/jggtrans.sh.in' X#!/bin/sh X X# $FreeBSD: ports/net-im/jggtrans/files/jggtrans.sh.in,v 1.2 2007/02/26 23:02:03 dougb Exp $ X# X# PROVIDE: jggtrans X# REQUIRE: DAEMON %%JABBER_USER%% X# BEFORE: LOGIN X# KEYWORD: shutdown X X# DO NOT CHANGE THESE DEFAULT VALUES HERE X# SET THEM IN THE /etc/rc.conf X X. %%RC_SUBR%% X Xname="jggtrans" Xrcvar=`set_rcvar` X Xload_rc_config $name X X: ${jggtrans_enable="NO"} X: ${jggtrans_program="%%PREFIX%%/sbin/jggtrans"} X: ${jggtrans_flags="-u %%JABBER_USER%% -g %%JABBER_USER%%"} X: ${jggtrans_pidfile="/var/jabberd/pid/jggtrans.pid"} X Xstart_cmd="echo \"Starting ${name}.\"; /usr/bin/nice -5 ${jggtrans_program} ${jggtrans_flags}" X Xrun_rc_command "$1" END-of-/usr/ports/net-im/jggtrans/files/jggtrans.sh.in echo x - /usr/ports/net-im/jggtrans/files/buff-overflow-jggtrans-2.2.2-.patch sed 's/^X//' >/usr/ports/net-im/jggtrans/files/buff-overflow-jggtrans-2.2.2-.patch << 'END-of-/usr/ports/net-im/jggtrans/files/buff-overflow-jggtrans-2.2.2-.patch' XIndex: /trunk/src/encoding.c X=================================================================== X--- /trunk/src/encoding.c (revision 680) X+++ /trunk/src/encoding.c (revision 694) X@@ -98,5 +98,5 @@ X X if (str==NULL) return NULL; X- if (buf_len<(strlen(str)+1)){ X+ if (buf_len<(strlen(str)*2+1)){ X buf_len=strlen(str)*2+1; /* this should always be enough */ X buf=(char *)g_realloc(buf,buf_len); END-of-/usr/ports/net-im/jggtrans/files/buff-overflow-jggtrans-2.2.2-.patch exit >Description: >How-To-Repeat: >Fix: >Release-Note: >Audit-Trail: >Unformatted:
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200707050817.l658Hr1r093219>