[packages/afflib] - new, raw from fedora

adamg adamg at pld-linux.org
Wed Nov 14 08:24:42 CET 2018


commit 82bb8d3a3a7910353e07c67d4fd0f564a3bd7d98
Author: Adam Gołębiowski <adamg at pld-linux.org>
Date:   Wed Nov 14 08:24:21 2018 +0100

    - new, raw from fedora

 0001-Use-DESTDIR-for-packaging.patch     |  24 +++
 Sanity-check-size-passed-to-malloc.patch |  33 +++
 afflib.spec                              | 341 +++++++++++++++++++++++++++++++
 3 files changed, 398 insertions(+)
---
diff --git a/afflib.spec b/afflib.spec
new file mode 100644
index 0000000..4077ba6
--- /dev/null
+++ b/afflib.spec
@@ -0,0 +1,341 @@
+Name:           afflib
+Version:        3.7.16
+Release:        7%{?dist}
+Summary:        Library to support the Advanced Forensic Format
+
+License:        BSD with advertising
+URL:            https://github.com/sshock/AFFLIBv3
+Source0:        %{url}/archive/v%{version}.tar.gz#/%{name}-%{version}.tar.gz
+# Upstream backport
+Patch0:         Sanity-check-size-passed-to-malloc.patch
+
+BuildRequires:  gcc-c++
+BuildRequires:  libtool
+
+BuildRequires:  curl-devel
+BuildRequires:  expat-devel
+# GPLv2 FOSS incompatible with BSD with advertising
+##BuildRequires:  fuse-devel
+# Afflib uses lzma-SDK 443
+BuildRequires:  lzma-devel
+BuildRequires:  ncurses-devel
+BuildRequires:  libtermcap-devel
+BuildRequires:  openssl-devel
+BuildRequires:  python2-devel
+# GPLv2 FOSS incompatible with BSD with advertising
+##BuildRequires:  readline-devel
+#BuildRequires:  libedit-devel - good replacement for readline - not supported for now
+BuildRequires:  zlib-devel
+
+
+%description
+AFF® is an open and extensible file format designed to store disk images and
+associated metadata.
+afflib is library for support of the Advanced Forensic Format (AFF).
+
+
+%package -n     afftools
+Summary:        Utilities for %{name}
+Requires:       %{name}%{?_isa} = %{version}-%{release}
+
+%description -n afftools
+The %{name}-utils package contains utilities for using %{name}.
+
+%package        devel
+Summary:        Development files for %{name}
+Requires:       %{name}%{?_isa} = %{version}-%{release}
+Requires:       openssl-devel
+Requires:       pkgconfig
+
+%description    devel
+The %{name}-devel package contains libraries and header files for
+developing applications that use %{name}.
+
+
+%prep
+%autosetup -p1 -n AFFLIBv3-%{version}
+# prevent internal lzma to be built - testing
+#rm -rf lzma443
+
+#fix spurious permissions with lzma443
+find lzma443 -type f -exec chmod 0644 {} ';'
+chmod 0644 lib/base64.{h,cpp}
+
+./bootstrap.sh
+
+%build
+%configure --enable-shared \
+  --disable-static \
+  --enable-python=yes \
+  --enable-s3=yes
+
+# Remove rpath from libtool
+sed -i 's|^hardcode_libdir_flag_spec=.*|hardcode_libdir_flag_spec=""|g' libtool
+sed -i 's|^runpath_var=LD_RUN_PATH|runpath_var=DIE_RPATH_DIE|g' libtool
+
+# clean unused-direct-shlib-dependencies
+sed -i -e 's! -shared ! -Wl,--as-needed\0!g' libtool
+
+%make_build
+
+
+%install
+%make_install
+find %{buildroot} -name '*.la' -exec rm -f {} ';'
+
+
+%ldconfig_scriptlets
+
+
+%files
+%doc AUTHORS BUGLIST.txt ChangeLog NEWS README
+%doc doc/announce_2.2.txt
+%license COPYING
+%{_libdir}/*.so.*
+
+%files -n afftools
+%{_bindir}/aff*
+%{python2_sitearch}/*
+%{_mandir}/man1/aff*.1.*
+
+%files devel
+%doc doc/crypto_design.txt doc/crypto_doc.txt
+%{_includedir}/afflib/
+%{_libdir}/*.so
+%{_libdir}/pkgconfig/afflib.pc
+
+
+%changelog
+* Tue Jul 17 2018 Miro Hrončok <mhroncok at redhat.com> - 3.7.16-7
+- Update Python macros to new packaging standards
+  (See https://fedoraproject.org/wiki/Changes/Move_usr_bin_python_into_separate_package)
+
+* Tue Jul 17 2018 Nicolas Chauvet <kwizart at gmail.com> - 3.7.16-6
+- Add missng cc
+
+* Thu Jul 12 2018 Fedora Release Engineering <releng at fedoraproject.org> - 3.7.16-5
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
+
+* Mon Mar 12 2018 Nicolas Chauvet <kwizart at gmail.com> - 3.7.16-4
+- Security issue - rhbz#1554423
+- Spec file update
+
+* Wed Feb 07 2018 Fedora Release Engineering <releng at fedoraproject.org> - 3.7.16-3
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
+
+* Tue Feb 06 2018 Iryna Shcherbina <ishcherb at redhat.com> - 3.7.16-2
+- Update Python 2 dependency declarations to new packaging standards
+  (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)
+
+* Mon Jan 08 2018 Nicolas Chauvet <kwizart at gmail.com> - 3.7.16-1
+- Update to 3.7.16
+
+* Wed Aug 02 2017 Fedora Release Engineering <releng at fedoraproject.org> - 3.7.15-4
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild
+
+* Wed Jul 26 2017 Fedora Release Engineering <releng at fedoraproject.org> - 3.7.15-3
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
+
+* Mon May 15 2017 Fedora Release Engineering <rel-eng at lists.fedoraproject.org> - 3.7.15-2
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_27_Mass_Rebuild
+
+* Fri Mar 03 2017 Nicolas Chauvet <kwizart at gmail.com> - 3.7.15-1
+- Update to 3.7.15
+
+* Fri Feb 10 2017 Fedora Release Engineering <releng at fedoraproject.org> - 3.7.4-6
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
+
+* Tue Jul 19 2016 Fedora Release Engineering <rel-eng at lists.fedoraproject.org> - 3.7.4-5
+- https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages
+
+* Wed Feb 03 2016 Fedora Release Engineering <releng at fedoraproject.org> - 3.7.4-4
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild
+
+* Tue Jun 16 2015 Fedora Release Engineering <rel-eng at lists.fedoraproject.org> - 3.7.4-3
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
+
+* Sat May 02 2015 Kalev Lember <kalevlember at gmail.com> - 3.7.4-2
+- Rebuilt for GCC 5 C++11 ABI change
+
+* Sun Jan 04 2015 Nicolas Chauvet <kwizart at gmail.com> - 3.7.4-1
+- Update to 3.7.4
+- cleanup spec file
+
+* Fri Aug 15 2014 Fedora Release Engineering <rel-eng at lists.fedoraproject.org> - 3.7.3-3
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
+
+* Sat Jun 07 2014 Fedora Release Engineering <rel-eng at lists.fedoraproject.org> - 3.7.3-2
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
+
+* Wed Feb 12 2014 Nicolas Chauvet <kwizart at gmail.com> - 3.7.3-1
+- Update to 3.7.3
+
+* Sat Aug 03 2013 Fedora Release Engineering <rel-eng at lists.fedoraproject.org> - 3.7.1-3
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
+
+* Wed Feb 13 2013 Fedora Release Engineering <rel-eng at lists.fedoraproject.org> - 3.7.1-2
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
+
+* Sat Sep 08 2012 Nicolas Chauvet <kwizart at gmail.com> - 3.7.1-1
+- Update to 3.7.1
+
+* Wed Jul 18 2012 Fedora Release Engineering <rel-eng at lists.fedoraproject.org> - 3.6.15-3
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
+
+* Thu Jan 12 2012 Fedora Release Engineering <rel-eng at lists.fedoraproject.org> - 3.6.15-2
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild
+
+* Thu Jan 12 2012 Nicolas Chauvet <kwizart at gmail.com> - 3.6.15-1
+- Update to 3.6.15
+
+* Thu Sep 08 2011 Nicolas Chauvet <kwizart at gmail.com> - 3.6.12-2
+- Enable S3
+
+* Fri May 27 2011 Nicolas Chauvet <kwizart at gmail.com> - 3.6.12-1
+- Update to 3.6.12
+
+* Sat Mar 26 2011 Nicolas Chauvet <kwizart at gmail.com> - 3.6.8-1
+- Update to 3.6.8
+
+* Sun Feb 13 2011 Nicolas Chauvet <kwizart at gmail.com> - 3.6.6-1
+- Update to 3.6.6
+
+* Mon Feb 07 2011 Fedora Release Engineering <rel-eng at lists.fedoraproject.org> - 3.6.4-2
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
+
+* Thu Dec 16 2010 Nicolas Chauvet <kwizart at gmail.com> - 3.6.4-1
+- Update to 3.6.4
+- Disable libewf support - http://afflib.org/archives/75
+
+* Wed Jul 21 2010 David Malcolm <dmalcolm at redhat.com> - 3.5.12-2
+- Rebuilt for https://fedoraproject.org/wiki/Features/Python_2.7/MassRebuild
+
+* Wed Jul 14 2010 Nicolas Chauvet <kwizart at gmail.com> - 3.5.12-1
+- Update to 3.4.12
+
+* Sun Apr 18 2010 Nicolas Chauvet <kwizart at fedoraproject.org> - 3.5.10-1
+- Update to 3.5.10
+- Remove upstreamed patch
+
+* Tue Jan 19 2010 Nicolas Chauvet <kwizart at fedoraproject.org> - 3.5.7-1
+- Update to 3.5.7
+
+* Fri Nov 27 2009 Nicolas Chauvet <kwizart at fedoraproject.org> - 3.5.3-1
+- Update to 3.5.3
+
+* Tue Oct 27 2009 kwizart < kwizart at gmail.com > - 3.5.2-1
+- Update to 3.5.2
+- Remove upstreamed patch
+
+* Thu Sep 24 2009 kwizart < kwizart at gmail.com > - 3.4.1-1
+- Update to 3.4.1
+- Update gcc43 (new case)
+- Enable python binding.
+- Avoid version-info on the python module.
+
+* Wed Sep  2 2009 kwizart < kwizart at gmail.com > - 3.3.7-2
+- Update to 3.3.7
+- Update gcc44 patch
+
+* Fri Aug 21 2009 Tomas Mraz <tmraz at redhat.com> - 3.3.6-4
+- rebuilt with new openssl
+
+* Fri Jul 24 2009 Fedora Release Engineering <rel-eng at lists.fedoraproject.org> - 3.3.6-3
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild
+
+* Thu May 21 2009 kwizart < kwizart at gmail.com > - 3.3.6-2
+- Update to 3.3.6
+- Add BR python-devel
+- Re-introduce gcc44 patch
+
+* Tue May 12 2009 kwizart < kwizart at gmail.com > - 3.3.5-1
+- Update to 3.3.5
+- Remove afflib-3.3.4-WCtype.patch
+
+* Mon Mar  2 2009 kwizart < kwizart at gmail.com > - 3.3.4-7
+- Fix for gcc44
+
+* Mon Feb 23 2009 Fedora Release Engineering <rel-eng at lists.fedoraproject.org> - 3.3.4-6
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild
+
+* Thu Jan 15 2009 Tomas Mraz <tmraz at redhat.com> - 3.3.4-5
+- rebuild with new openssl
+- call libtoolize to refresh libtool
+
+* Fri Oct  3 2008 kwizart < kwizart at gmail.com > - 3.3.4-4
+- Fix release mismatch
+
+* Fri Oct  3 2008 kwizart < kwizart at gmail.com > - 3.3.4-3
+- Update to 3.3.4
+
+* Mon Sep 15 2008 kwizart < kwizart at gmail.com > - 3.3.3-3
+- Update to 3.3.3
+
+* Thu Sep  4 2008 kwizart < kwizart at gmail.com > - 3.3.2-2
+- Update gcc43 patch
+
+* Thu Sep  4 2008 kwizart < kwizart at gmail.com > - 3.3.2-1
+- Update to 3.3.2
+- Remove Requires for ewftools from afftools
+- Qemu image support is disabled
+
+* Mon Sep  1 2008 kwizart < kwizart at gmail.com > - 3.3.1-1
+- Update to 3.3.1
+
+* Tue Jul 29 2008 kwizart < kwizart at gmail.com > - 3.2.5-3
+- Patch with fuzz 2
+
+* Thu Jul 24 2008 kwizart < kwizart at gmail.com > - 3.2.5-2
+- Remove nos3 patch
+
+* Thu Jul 24 2008 kwizart < kwizart at gmail.com > - 3.2.5-1
+- Update to 3.2.5
+
+* Fri Jul  4 2008 kwizart < kwizart at gmail.com > - 3.2.3-1
+- Update to 3.2.3
+
+* Thu Jun 26 2008 kwizart < kwizart at gmail.com > - 3.2.1-4
+- Explicitely disable s3
+
+* Thu Jun 26 2008 kwizart < kwizart at gmail.com > - 3.2.1-3
+- Disable s3
+
+* Wed Jun 25 2008 kwizart < kwizart at gmail.com > - 3.2.1-2
+- Fix redefinition of typedef AFFILE
+
+* Sat Jun  7 2008 kwizart < kwizart at gmail.com > - 3.2.1-1
+- Update to 3.2.1
+
+* Wed May 21 2008 kwizart < kwizart at gmail.com > - 3.2.0-1
+- Update to 3.2.0
+
+* Tue Apr 15 2008 kwizart < kwizart at gmail.com > - 3.1.6-1
+- Update to 3.1.6
+
+* Fri Mar 21 2008 kwizart < kwizart at gmail.com > - 3.1.3-4
+- Fix typo
+
+* Wed Mar 19 2008 kwizart < kwizart at gmail.com > - 3.1.3-3
+- Add missing requires with pkgconfig
+
+* Mon Mar 17 2008 kwizart < kwizart at gmail.com > - 3.1.3-2
+- Rebuild with newer libewf and enable-libewf=yes
+- Add pkg-config support in afflib-devel.
+- Add a patch to remove ldconfig call when building the package.
+- Add libtermcap-devel
+
+* Wed Mar 12 2008 kwizart < kwizart at gmail.com > - 3.1.3-1
+- Update to 3.1.3
+- Disable libewf support in afflib for now.
+- Disable rpath
+- Fix for gcc43 and s3
+
+* Fri Nov 30 2007 kwizart < kwizart at gmail.com > - 3.0.4-1
+- Update to 3.0.4
+
+* Sun Nov 18 2007 kwizart < kwizart at gmail.com > - 3.0.1-1
+- Update to 3.0.1
+
+* Fri Nov  2 2007 kwizart < kwizart at gmail.com > - 2.4.0-1
+- Initial package for Fedora
+
diff --git a/0001-Use-DESTDIR-for-packaging.patch b/0001-Use-DESTDIR-for-packaging.patch
new file mode 100644
index 0000000..3435f60
--- /dev/null
+++ b/0001-Use-DESTDIR-for-packaging.patch
@@ -0,0 +1,24 @@
+From 22a8229ad18248d85d11f85414ba6d1b740e62e8 Mon Sep 17 00:00:00 2001
+From: Nicolas Chauvet <kwizart at gmail.com>
+Date: Fri, 3 Mar 2017 11:39:11 +0100
+Subject: [PATCH] Use DESTDIR for packaging
+
+---
+ pyaff/Makefile.am | 2 +-
+ 1 file changed, 1 insertion(+), 1 deletion(-)
+
+diff --git a/pyaff/Makefile.am b/pyaff/Makefile.am
+index 468b0f7..4fa390b 100644
+--- a/pyaff/Makefile.am
++++ b/pyaff/Makefile.am
+@@ -11,6 +11,6 @@ install-exec-local:
+ 	cd $(srcdir) && $(PYTHON) setup.py \
+ 		build --build-base $(abs_builddir)/build \
+ 		egg_info --egg-base $(abs_builddir) \
+-		install --prefix $(prefix) --single-version-externally-managed --record=$(abs_builddir)/installed.txt \
++		install --prefix $(DESTDIR)$(prefix) --single-version-externally-managed --record=$(abs_builddir)/installed.txt \
+ 		bdist_egg --dist-dir $(abs_builddir)/dist
+ endif
+-- 
+2.7.4
+
diff --git a/Sanity-check-size-passed-to-malloc.patch b/Sanity-check-size-passed-to-malloc.patch
new file mode 100644
index 0000000..dddbfde
--- /dev/null
+++ b/Sanity-check-size-passed-to-malloc.patch
@@ -0,0 +1,33 @@
+From 435a2ca802358a3debb6d164d2c33049131df81c Mon Sep 17 00:00:00 2001
+From: Phillip Hellewell <sshock at gmail.com>
+Date: Sat, 10 Mar 2018 18:05:39 -0700
+Subject: [PATCH 3/4] Sanity check size passed to malloc...
+
+Add sanity check before calling malloc in af_get_page() function to
+avoid undefined behavior (e.g., seg fault) when dealing with a corrupt
+AFF image with an invalid pagesize.
+
+Issue found by Luis Rocha (luiscrocha at gmail.com).
+---
+ lib/afflib_pages.cpp | 5 +++++
+ 1 file changed, 5 insertions(+)
+
+diff --git a/lib/afflib_pages.cpp b/lib/afflib_pages.cpp
+index 2569c2a..f8cf775 100644
+--- a/lib/afflib_pages.cpp
++++ b/lib/afflib_pages.cpp
+@@ -219,6 +219,11 @@ int af_get_page(AFFILE *af,int64_t pagenum,unsigned char *data,size_t *bytes)
+ 	    return -3;			// read error
+ 	}
+ 
++	/* Sanity check to avoid undefined behaviour when calling malloc below with pagesize from a corrupt AFF image. */
++	if(af->image_pagesize <= 0 || af->image_pagesize > 16*1024*1024)
++	    return -1;
++
++
+ 	/* Now uncompress directly into the buffer provided by the caller, unless the caller didn't
+ 	 * provide a buffer. If that happens, allocate our own...
+ 	 */
+-- 
+2.13.6
+
================================================================

---- gitweb:

http://git.pld-linux.org/gitweb.cgi/packages/afflib.git/commitdiff/82bb8d3a3a7910353e07c67d4fd0f564a3bd7d98



More information about the pld-cvs-commit mailing list