summary |
shortlog | log |
commit |
commitdiff |
tree
first ⋅ prev ⋅ next
Jiyong Min [Tue, 20 Sep 2016 08:37:27 +0000 (17:37 +0900)]
[CVE patch] CVE-2016-3977 in giflib version 5.1.2
- Fix SF bug #87 Heap buffer overflow in 5.1.2 (gif2rgb).
Heap-based buffer overflow in util/gif2rgb.c in gif2rgb in giflib 5.1.2 allows remote attackers to cause a denial of service (application crash) via the background color index in a GIF file.
Change-Id: I8fcf54bb71c5fb55e79a4c4150d348098984977b
Signed-off-by: Jiyong Min <jiyong.min@samsung.com>
Junghyun Kim [Tue, 30 Aug 2016 07:21:19 +0000 (16:21 +0900)]
Store build_date in .tizen.build-id section to avoid unnecessary rebuilds
- PROBLEM
We use OBS to build packages in Tizen.
There is a mechanism not to rebuild if the result binary is the same.
For example, there is a dependency graph: A->B->C.
If A is modified, B would be built.
If the result RPM of B is not changed, OBS does not trigger a build of C.
To effectively use this mechanism, each packages make sure that
the result binary should be the same if the input source is the same.
This package uses __DATE__ and __TIME__ which make the result binary
is different everytime it is built.
To efficiently utilize OBS build mechanism and to modify the package
as little as possible, I propose to store this macro in .tizen.build-id
section. OBS build-compare tool does not check *.build-id section
in the binary.
Change-Id: Ic3af17799ab4fe5f06cb85e5a261033d87391bac
Signed-off-by: Junghyun Kim <jh0822.kim@samsung.com>
Jiyong Min [Tue, 24 May 2016 04:12:46 +0000 (13:12 +0900)]
Add partial patch
(Return error when gif file read to decode, private is not initialized)
Change-Id: I4a64905b0b81cd5a8be748cf3761e991781e4df0
Signed-off-by: Jiyong Min <jiyong.min@samsung.com>
Jiyong Min [Wed, 30 Mar 2016 07:13:54 +0000 (16:13 +0900)]
More avoidance of malloc randomness. (included 5.1.3 patch)
Change-Id: I6713209fb9b3a23b8b1e1025f8c2fcca75d1e686
Signed-off-by: Jiyong Min <jiyong.min@samsung.com>
Vineeth TM [Tue, 16 Feb 2016 06:21:32 +0000 (15:21 +0900)]
packaging: bump to 5.1.2
Change-Id: I8528005b5aa54709b084a23c64585f791ef6c671
Signed-off-by: Vineeth TM <vineeth.tm@samsung.com>
Vineeth TM [Tue, 16 Feb 2016 06:13:04 +0000 (15:13 +0900)]
Merge upstream version 5.1.2 from branch 'upstream' into tizen
Change-Id: I35b8e8d1edde05386944baabc40717ce88a01e32
Vineeth TM [Fri, 12 Feb 2016 01:26:31 +0000 (10:26 +0900)]
Imported Upstream version 5.1.2
Change-Id: I9c64603d706a6f7420e37092af764e5543b0a63c
Signed-off-by: Vineeth TM <vineeth.tm@samsung.com>
wangfei [Fri, 13 Dec 2013 08:43:10 +0000 (16:43 +0800)]
change {without x} to {with x}
The display server based on X or Wayland, is now a choice of different profile in Tizen 3.0.
Basically and consistently, two macros were used "with wayland" and "with x".
Below summarize the combination of the macros:
| wayland | x | meaning
|---------------------------
| 0 | 1 | pure X11 platform(no wayland)
| 1 | 0 | pure wayland platform (no X11)
| 1 | 1 | wayland but X compatibility
| 0 | 0 | no X and no wayland
This method unifies the meaning and usage. Deploy this method to giflib package.
Signed-off-by: wangfei <feix.w.wang@intel.com>
Change-Id: Ie3ac823d5d70f5d2025149b89f501100b9a8e7e4
wangfei [Tue, 26 Nov 2013 09:44:54 +0000 (17:44 +0800)]
add a patch for commit id:
aa5fbde1f98ed3fce681b7c2160d1e9750c7a076.
change 'sm','ice' packages out of the 'with wayland' marco in
spec file.
Change-Id: I4ad899289fdf24273701394d295941f04d337113
Signed-off-by: wangfei <feix.w.wang@intel.com>
wangfei [Mon, 25 Nov 2013 07:32:47 +0000 (15:32 +0800)]
add wayland profile for giflib
in wayland profile, giflib did not requires Xorg, remove this dependency.
Change-Id: I96a49223e1c139b25eccbc14860c13d681e248dc
Signed-off-by: wangfei <feix.w.wang@intel.com>
Alexandru Cornea [Fri, 28 Jun 2013 19:52:20 +0000 (22:52 +0300)]
resetting manifest requested domain to floor
Anas Nashif [Sat, 11 May 2013 05:40:44 +0000 (01:40 -0400)]
Set license using %license
Anas Nashif [Thu, 8 Nov 2012 00:07:41 +0000 (16:07 -0800)]
add packaging
Anas Nashif [Thu, 8 Nov 2012 00:07:03 +0000 (16:07 -0800)]
add packaging
Anas Nashif [Thu, 8 Nov 2012 00:05:58 +0000 (16:05 -0800)]
add packaging
Anas Nashif [Thu, 8 Nov 2012 00:05:57 +0000 (16:05 -0800)]
Imported Upstream version 4.1.6