summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorPeter Volkov <pva@gentoo.org>2009-04-09 12:19:30 +0000
committerPeter Volkov <pva@gentoo.org>2009-04-09 12:19:30 +0000
commit7f7eb93c2243b2a224e77a77b388cb46f531b433 (patch)
tree47ce1f3e7b570252e830b5d843194fa7c42eac07
parentSparc stable, Bug #265522. (diff)
downloadgentoo-2-7f7eb93c2243b2a224e77a77b388cb46f531b433.tar.gz
gentoo-2-7f7eb93c2243b2a224e77a77b388cb46f531b433.tar.bz2
gentoo-2-7f7eb93c2243b2a224e77a77b388cb46f531b433.zip
Version bump, fixes security bug #264571, thank Robert Buchholz for report.
(Portage version: 2.1.6.11/cvs/Linux x86_64)
-rw-r--r--net-analyzer/wireshark/ChangeLog8
-rw-r--r--net-analyzer/wireshark/wireshark-1.0.7.ebuild (renamed from net-analyzer/wireshark/wireshark-1.0.6.ebuild)5
-rw-r--r--net-analyzer/wireshark/wireshark-1.1.2.ebuild162
3 files changed, 10 insertions, 165 deletions
diff --git a/net-analyzer/wireshark/ChangeLog b/net-analyzer/wireshark/ChangeLog
index d94122d03295..fb57f551091f 100644
--- a/net-analyzer/wireshark/ChangeLog
+++ b/net-analyzer/wireshark/ChangeLog
@@ -1,6 +1,12 @@
# ChangeLog for net-analyzer/wireshark
# Copyright 1999-2009 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/net-analyzer/wireshark/ChangeLog,v 1.160 2009/04/02 17:19:33 armin76 Exp $
+# $Header: /var/cvsroot/gentoo-x86/net-analyzer/wireshark/ChangeLog,v 1.161 2009/04/09 12:19:30 pva Exp $
+
+*wireshark-1.0.7 (09 Apr 2009)
+
+ 09 Apr 2009; Peter Volkov <pva@gentoo.org> -wireshark-1.0.6.ebuild,
+ +wireshark-1.0.7.ebuild, -wireshark-1.1.2.ebuild:
+ Version bump, fixes security bug #264571, thank Robert Buchholz for report.
02 Apr 2009; Raúl Porcel <armin76@gentoo.org> wireshark-1.0.6-r1.ebuild:
alpha/ia64 stable wrt #263443
diff --git a/net-analyzer/wireshark/wireshark-1.0.6.ebuild b/net-analyzer/wireshark/wireshark-1.0.7.ebuild
index 652de7819b03..2ea2d53f2767 100644
--- a/net-analyzer/wireshark/wireshark-1.0.6.ebuild
+++ b/net-analyzer/wireshark/wireshark-1.0.7.ebuild
@@ -1,6 +1,6 @@
# Copyright 1999-2009 Gentoo Foundation
# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/net-analyzer/wireshark/wireshark-1.0.6.ebuild,v 1.7 2009/02/11 17:14:37 dertobi123 Exp $
+# $Header: /var/cvsroot/gentoo-x86/net-analyzer/wireshark/wireshark-1.0.7.ebuild,v 1.1 2009/04/09 12:19:30 pva Exp $
EAPI=1
WANT_AUTOMAKE="1.9"
@@ -17,7 +17,7 @@ SRC_URI="http://www.wireshark.org/download/src/all-versions/${P}.tar.bz2"
LICENSE="GPL-2"
SLOT="0"
-KEYWORDS="alpha amd64 hppa ia64 ppc ppc64 sparc x86 ~x86-fbsd"
+KEYWORDS="~alpha ~amd64 ~hppa ~ia64 ~ppc ~ppc64 ~sparc ~x86 ~x86-fbsd"
IUSE="adns gtk ipv6 lua portaudio gnutls gcrypt zlib kerberos threads profile smi +pcap pcre +caps selinux"
RDEPEND="zlib? ( sys-libs/zlib )
@@ -61,6 +61,7 @@ src_unpack() {
epatch "${FILESDIR}/${PN}-0.99.7-asneeded.patch"
epatch "${FILESDIR}/${PN}-0.99.8-as-needed.patch"
epatch "${FILESDIR}/${PN}-1.0.5-text2pcap-protos.patch"
+ epatch "${FILESDIR}/wireshark-1.0-sigpipe.patch" #260457
cd "${S}/epan"
epatch "${FILESDIR}/wireshark-except-double-free.diff"
diff --git a/net-analyzer/wireshark/wireshark-1.1.2.ebuild b/net-analyzer/wireshark/wireshark-1.1.2.ebuild
deleted file mode 100644
index 12a7a0632a82..000000000000
--- a/net-analyzer/wireshark/wireshark-1.1.2.ebuild
+++ /dev/null
@@ -1,162 +0,0 @@
-# Copyright 1999-2009 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/net-analyzer/wireshark/wireshark-1.1.2.ebuild,v 1.2 2009/03/08 11:54:00 pva Exp $
-
-EAPI=1
-inherit autotools libtool flag-o-matic eutils toolchain-funcs
-
-DESCRIPTION="A network protocol analyzer formerly known as ethereal"
-HOMEPAGE="http://www.wireshark.org/"
-
-# _rc versions has different download location.
-[[ -n ${PV#*_rc} && ${PV#*_rc} != ${PV} ]] && {
-SRC_URI="http://www.wireshark.org/download/prerelease/${PN}-${PV/_rc/pre}.tar.gz";
-S=${WORKDIR}/${PN}-${PV/_rc/pre} ; } || \
-SRC_URI="http://www.wireshark.org/download/src/${P}.tar.gz"
-
-LICENSE="GPL-2"
-SLOT="0"
-KEYWORDS="~alpha ~amd64 ~hppa ~ia64 ~ppc ~ppc64 ~sparc ~x86 ~x86-fbsd"
-IUSE="adns ares +gtk ipv6 lua portaudio gnutls gcrypt geoip zlib kerberos threads profile smi +pcap pcre +caps selinux"
-
-RDEPEND=">=dev-libs/glib-2.4.0:2
- zlib? ( sys-libs/zlib )
- smi? ( net-libs/libsmi )
- gtk? ( >=x11-libs/gtk+-2.4.0:2
- x11-libs/pango
- dev-libs/atk )
- gnutls? ( net-libs/gnutls )
- gcrypt? ( dev-libs/libgcrypt )
- pcap? ( net-libs/libpcap )
- pcre? ( dev-libs/libpcre )
- caps? ( sys-libs/libcap )
- kerberos? ( virtual/krb5 )
- portaudio? ( media-libs/portaudio )
- ares? ( >=net-dns/c-ares-1.5 )
- !ares? ( adns? ( net-libs/adns ) )
- geoip? ( dev-libs/geoip )
- lua? ( >=dev-lang/lua-5.1 )
- selinux? ( sec-policy/selinux-wireshark )"
-
-DEPEND="${RDEPEND}
- >=dev-util/pkgconfig-0.15.0
- dev-lang/perl
- sys-devel/bison
- sys-devel/flex"
-
-pkg_setup() {
- if ! use gtk; then
- ewarn "USE=-gtk will means no gui called wireshark will be created and"
- ewarn "only command line utils are available"
- fi
-
- if use ares && use adns; then
- einfo "You asked for both, ares and adns, but we can use only one of them."
- einfo "c-ares supersedes adns resolver thus using c-ares (ares USE flag)."
- myconf="$(use_with ares c-ares) --without-adns"
- else
- myconf="$(use_with adns) $(use_with ares c-ares)"
- fi
-
- # Add group for users allowed to sniff.
- enewgroup wireshark
-}
-
-src_unpack() {
- unpack ${A}
-
- # our hardened toolchain bug...
- cd "${S}"/epan
- epatch "${FILESDIR}/wireshark-except-double-free.diff"
-
- cd "${S}"
- epatch "${FILESDIR}/${PN}-1.1.2--as-needed.patch"
- epatch "${FILESDIR}/${P}-misc-warnings.patch"
- eautoreconf
-}
-
-src_compile() {
- # optimization bug, see bug #165340, bug #40660
- if [[ $(gcc-version) == 3.4 ]] ; then
- elog "Found gcc 3.4, forcing -O3 into CFLAGS"
- replace-flags -O? -O3
- elif [[ $(gcc-version) == 3.3 || $(gcc-version) == 3.2 ]] ; then
- elog "Found <=gcc-3.3, forcing -O into CFLAGS"
- replace-flags -O? -O
- fi
-
- # see bug #133092; bugs.wireshark.org/bugzilla/show_bug.cgi?id=1001
- # our hardened toolchain bug
- filter-flags -fstack-protector
-
- # profile and -fomit-frame-pointer are incompatible, bug #215806
- use profile && filter-flags -fomit-frame-pointer
-
- # Workaround bug #213705. If krb5-config --libs has -lcrypto then pass
- # --with-ssl to ./configure. (Mimics code from acinclude.m4).
- if use kerberos; then
- case `krb5-config --libs` in
- *-lcrypto*) myconf="${myconf} --with-ssl" ;;
- esac
- fi
-
- # dumpcap requires libcap, setuid-install requires dumpcap
- econf $(use_enable gtk wireshark) \
- $(use_enable profile profile-build) \
- $(use_with gnutls) \
- $(use_with gcrypt) \
- $(use_enable ipv6) \
- $(use_enable threads) \
- $(use_with lua) \
- $(use_with kerberos krb5) \
- $(use_with smi libsmi) \
- $(use_with pcap) \
- $(use_with zlib) \
- $(use_with pcre) \
- $(use_with geoip) \
- $(use_with portaudio) \
- $(use_with caps libcap) \
- $(use_enable pcap setuid-install) \
- --sysconfdir=/etc/wireshark \
- ${myconf}
-
- emake || die "emake failed"
-}
-
-src_install() {
- emake DESTDIR="${D}" install || die "emake install failed"
-
- fowners 0:wireshark /usr/bin/tshark
- fperms 6550 /usr/bin/tshark
- use pcap && fowners 0:wireshark /usr/bin/dumpcap
- use pcap && fperms 6550 /usr/bin/dumpcap
-
- insinto /usr/include/wiretap
- doins wiretap/wtap.h
-
- # FAQ is not required as is installed from help/faq.txt
- dodoc AUTHORS ChangeLog NEWS README{,.bsd,.linux,.macos,.vmware} doc/randpkt.txt
-
- if use gtk; then
- for c in hi lo; do
- for d in 16 32 48; do
- insinto /usr/share/icons/${c}color/${d}x${d}/apps
- newins image/${c}${d}-app-wireshark.png wireshark.png
- done
- done
- insinto /usr/share/applications
- doins wireshark.desktop
- fi
-}
-
-pkg_postinst() {
- echo
- ewarn "With version 0.99.7, all function calls that require elevated privileges"
- ewarn "have been moved out of the GUI to dumpcap. WIRESHARK CONTAINS OVER ONE"
- ewarn "POINT FIVE MILLION LINES OF SOURCE CODE. DO NOT RUN THEM AS ROOT."
- ewarn
- ewarn "NOTE: To run wireshark as normal user you have to add yourself into"
- ewarn "wireshark group. This security measure ensures that only trusted"
- ewarn "users allowed to sniff your traffic."
- echo
-}