diff options
author | Andreas K. Hüttel <dilfridge@gentoo.org> | 2012-09-09 15:40:24 +0000 |
---|---|---|
committer | Andreas K. Hüttel <dilfridge@gentoo.org> | 2012-09-09 15:40:24 +0000 |
commit | b4d5fa14223dc33fcbb4cfe58f61c9f0a63cd3ad (patch) | |
tree | 5ec1f6ce0fe5b3a9162c56e24c9d47070b5c6deb /net-print | |
parent | Stable ppc, bug #433237 (diff) | |
download | gentoo-2-b4d5fa14223dc33fcbb4cfe58f61c9f0a63cd3ad.tar.gz gentoo-2-b4d5fa14223dc33fcbb4cfe58f61c9f0a63cd3ad.tar.bz2 gentoo-2-b4d5fa14223dc33fcbb4cfe58f61c9f0a63cd3ad.zip |
Remove old
(Portage version: 2.2.0_alpha124/cvs/Linux x86_64)
Diffstat (limited to 'net-print')
-rw-r--r-- | net-print/cups/ChangeLog | 9 | ||||
-rw-r--r-- | net-print/cups/cups-1.4.8-r1.ebuild | 270 | ||||
-rw-r--r-- | net-print/cups/files/cups-1.4.0-backend-https.patch | 11 | ||||
-rw-r--r-- | net-print/cups/files/cups-1.4.2-str3200.patch | 43 | ||||
-rw-r--r-- | net-print/cups/files/cups-1.4.6-force-gnutls.patch | 93 | ||||
-rw-r--r-- | net-print/cups/files/cups-1.4.6-serialize-gnutls.patch | 113 | ||||
-rw-r--r-- | net-print/cups/files/cups-1.4.8-CVE-2011-3170.patch | 37 | ||||
-rw-r--r-- | net-print/cups/files/cups-1.4.8-largeimage.patch | 18 |
8 files changed, 8 insertions, 586 deletions
diff --git a/net-print/cups/ChangeLog b/net-print/cups/ChangeLog index 5f53ff73d1b0..6dbcf4b4c335 100644 --- a/net-print/cups/ChangeLog +++ b/net-print/cups/ChangeLog @@ -1,6 +1,13 @@ # ChangeLog for net-print/cups # Copyright 1999-2012 Gentoo Foundation; Distributed under the GPL v2 -# $Header: /var/cvsroot/gentoo-x86/net-print/cups/ChangeLog,v 1.509 2012/09/09 14:07:46 armin76 Exp $ +# $Header: /var/cvsroot/gentoo-x86/net-print/cups/ChangeLog,v 1.510 2012/09/09 15:40:24 dilfridge Exp $ + + 09 Sep 2012; Andreas K. Huettel <dilfridge@gentoo.org> + -files/cups-1.4.0-backend-https.patch, -files/cups-1.4.2-str3200.patch, + -files/cups-1.4.6-force-gnutls.patch, + -files/cups-1.4.6-serialize-gnutls.patch, -cups-1.4.8-r1.ebuild, + -files/cups-1.4.8-CVE-2011-3170.patch, -files/cups-1.4.8-largeimage.patch: + Remove old 09 Sep 2012; Raúl Porcel <armin76@gentoo.org> cups-1.5.2-r4.ebuild: alpha/ia64/m68k/s390/sh/sparc stable wrt #411887 diff --git a/net-print/cups/cups-1.4.8-r1.ebuild b/net-print/cups/cups-1.4.8-r1.ebuild deleted file mode 100644 index 544f533ece69..000000000000 --- a/net-print/cups/cups-1.4.8-r1.ebuild +++ /dev/null @@ -1,270 +0,0 @@ -# Copyright 1999-2012 Gentoo Foundation -# Distributed under the terms of the GNU General Public License v2 -# $Header: /var/cvsroot/gentoo-x86/net-print/cups/cups-1.4.8-r1.ebuild,v 1.17 2012/08/08 17:28:41 dilfridge Exp $ - -EAPI=3 - -PYTHON_DEPEND="python? 2:2.5" - -inherit autotools eutils flag-o-matic linux-info multilib pam perl-module python versionator user java-pkg-opt-2 - -MY_P=${P/_} - -DESCRIPTION="The Common Unix Printing System" -HOMEPAGE="http://www.cups.org/" -SRC_URI="mirror://easysw/${PN}/${PV}/${MY_P}-source.tar.bz2" - -LICENSE="GPL-2" -SLOT="0" -KEYWORDS="alpha amd64 arm hppa ia64 m68k ~mips ppc ppc64 s390 sh sparc x86 ~sparc-fbsd ~x86-fbsd" -IUSE="acl dbus debug +filters gnutls java +jpeg kerberos ldap pam perl php +png python selinux slp +ssl static-libs +threads +tiff X xinetd" - -LANGS="da de es eu fi fr id it ja ko nl no pl pt pt_BR ru sv zh zh_TW" -for X in ${LANGS} ; do - IUSE="${IUSE} linguas_${X}" -done - -RDEPEND=" - app-text/libpaper - acl? ( - kernel_linux? ( - sys-apps/acl - sys-apps/attr - ) - ) - dbus? ( sys-apps/dbus ) - java? ( >=virtual/jre-1.6 ) - jpeg? ( virtual/jpeg:0 ) - kerberos? ( virtual/krb5 ) - ldap? ( net-nds/openldap[ssl?,gnutls?] ) - pam? ( virtual/pam ) - perl? ( dev-lang/perl ) - php? ( dev-lang/php ) - png? ( >=media-libs/libpng-1.4.3:0 ) - selinux? ( sec-policy/selinux-cups ) - slp? ( >=net-libs/openslp-1.0.4 ) - ssl? ( - gnutls? ( - dev-libs/libgcrypt - net-libs/gnutls - ) - !gnutls? ( >=dev-libs/openssl-0.9.8g ) - ) - tiff? ( >=media-libs/tiff-3.5.5:0 ) - X? ( x11-misc/xdg-utils ) - xinetd? ( sys-apps/xinetd ) - !net-print/cupsddk - !net-print/cups-filters -" - -DEPEND="${RDEPEND} - virtual/pkgconfig -" - -PDEPEND=" - app-text/ghostscript-gpl[cups] - >=app-text/poppler-0.12.3-r3[utils] - filters? ( net-print/foomatic-filters ) -" - -# upstream includes an interactive test which is a nono for gentoo. -RESTRICT="test" - -S="${WORKDIR}/${MY_P}" - -pkg_setup() { - enewgroup lp - enewuser lp -1 -1 -1 lp - enewgroup lpadmin 106 - - # python 3 is no-go - if use python; then - python_set_active_version 2 - python_pkg_setup - fi - - linux-info_pkg_setup - if ! linux_config_exists; then - ewarn "Can't check the linux kernel configuration." - ewarn "You might have some incompatible options enabled." - else - #here we should warn user that he should enable it so he can print - if ! linux_chkconfig_present USB_PRINTER; then - ewarn "If you plan to use USB printers you should enable the USB_PRINTER" - ewarn "support in your kernel." - ewarn "Please enable it:" - ewarn " CONFIG_USB_PRINTER=y" - ewarn "in /usr/src/linux/.config or" - ewarn " Device Drivers --->" - ewarn " USB support --->" - ewarn " [*] USB Printer support" - fi - fi -} - -src_prepare() { - # create a missing symlink to allow https printing via IPP, bug #217293 - epatch "${FILESDIR}/${PN}-1.4.0-backend-https.patch" - # various build time fixes - epatch "${FILESDIR}/${PN}-1.4.4-dont-compress-manpages.patch" - epatch "${FILESDIR}/${PN}-1.4.4-fix-install-perms.patch" - epatch "${FILESDIR}/${PN}-1.4.4-nostrip.patch" - epatch "${FILESDIR}/${PN}-1.4.4-php-destdir.patch" - epatch "${FILESDIR}/${PN}-1.4.4-perl-includes.patch" - epatch "${FILESDIR}/${PN}-1.4.6-force-gnutls.patch" - epatch "${FILESDIR}/${PN}-1.4.6-serialize-gnutls.patch" - # security fixes - epatch "${FILESDIR}/${PN}-1.4.8-CVE-2011-3170.patch" - - AT_M4DIR=config-scripts eaclocal - eautoconf -} - -src_configure() { - export DSOFLAGS="${LDFLAGS}" - - # locale support - strip-linguas ${LANGS} - if [ -z "${LINGUAS}" ] ; then - export LINGUAS=none - fi - - local myconf - if use ssl || use gnutls ; then - myconf+=" - $(use_enable gnutls) - $(use_enable !gnutls openssl) - " - else - myconf+=" - --disable-gnutls - --disable-openssl - " - fi - - # bug 352252, recheck for later versions if still necessary.... - if use gnutls && ! use threads ; then - ewarn "The useflag gnutls requires also threads enabled. Switching on threads." - fi - if use gnutls || use threads ; then - myconf+=" --enable-threads " - else - myconf+=" --disable-threads " - fi - - econf \ - --libdir=/usr/$(get_libdir) \ - --localstatedir=/var \ - --with-cups-user=lp \ - --with-cups-group=lp \ - --with-docdir=/usr/share/cups/html \ - --with-languages="${LINGUAS}" \ - --with-pdftops=/usr/bin/pdftops \ - --with-system-groups=lpadmin \ - $(use_enable acl) \ - $(use_enable dbus) \ - $(use_enable debug) \ - $(use_enable debug debug-guards) \ - $(use_enable jpeg) \ - $(use_enable kerberos gssapi) \ - $(use_enable ldap) \ - $(use_enable pam) \ - $(use_enable png) \ - $(use_enable slp) \ - $(use_enable static-libs static) \ - $(use_enable tiff) \ - $(use_with java) \ - $(use_with perl) \ - $(use_with php) \ - $(use_with python) \ - $(use_with xinetd xinetd /etc/xinetd.d) \ - --enable-libpaper \ - --disable-libusb \ - --disable-dnssd \ - ${myconf} - - # install in /usr/libexec always, instead of using /usr/lib/cups, as that - # makes more sense when facing multilib support. - sed -i -e 's:SERVERBIN.*:SERVERBIN = "$(BUILDROOT)"/usr/libexec/cups:' Makedefs || die - sed -i -e 's:#define CUPS_SERVERBIN.*:#define CUPS_SERVERBIN "/usr/libexec/cups":' config.h || die - sed -i -e 's:cups_serverbin=.*:cups_serverbin=/usr/libexec/cups:' cups-config || die -} - -src_compile() { - emake || die "emake failed" - - if use perl ; then - cd "${S}"/scripting/perl - perl-module_src_prep - perl-module_src_compile - fi - - if use php ; then - cd "${S}"/scripting/php - emake || die "emake php failed" - fi -} - -src_install() { - emake BUILDROOT="${D}" install || die "emake install failed" - dodoc {CHANGES,CREDITS,README}.txt || die "dodoc install failed" - - if use perl ; then - cd "${S}"/scripting/perl - perl-module_src_install - fixlocalpod - fi - - if use php ; then - cd "${S}"/scripting/php - emake DESTDIR="${D}" install || die "emake install for php bindings failed" - fi - - # clean out cups init scripts - rm -rf "${D}"/etc/{init.d/cups,rc*,pam.d/cups} - - # install our init script - local neededservices - use dbus && neededservices+=" dbus" - [[ -n ${neededservices} ]] && neededservices="need${neededservices}" - cp "${FILESDIR}"/cupsd.init.d "${T}"/cupsd || die - sed -i \ - -e "s/@neededservices@/$neededservices/" \ - "${T}"/cupsd || die - doinitd "${T}"/cupsd || die "doinitd failed" - - # install our pam script - pamd_mimic_system cups auth account - - if use xinetd ; then - # correct path - sed -i \ - -e "s:server = .*:server = /usr/libexec/cups/daemon/cups-lpd:" \ - "${D}"/etc/xinetd.d/cups-lpd || die - # it is safer to disable this by default, bug #137130 - grep -w 'disable' "${D}"/etc/xinetd.d/cups-lpd || \ - { sed -i -e "s:}:\tdisable = yes\n}:" "${D}"/etc/xinetd.d/cups-lpd || die ; } - # write permission for file owner (root), bug #296221 - fperms u+w /etc/xinetd.d/cups-lpd || die "fperms failed" - else - rm -rf "${D}"/etc/xinetd.d - fi - - keepdir /usr/libexec/cups/driver /usr/share/cups/{model,profiles} \ - /var/cache/cups /var/cache/cups/rss /var/log/cups /var/run/cups/certs \ - /var/spool/cups/tmp - - keepdir /etc/cups/{interfaces,ppd,ssl} - - use X || rm -r "${D}"/usr/share/applications - - # create /etc/cups/client.conf, bug #196967 and #266678 - echo "ServerName /var/run/cups/cups.sock" >> "${D}"/etc/cups/client.conf -} - -pkg_postinst() { - echo - elog "For information about installing a printer and general cups setup" - elog "take a look at: http://www.gentoo.org/doc/en/printing-howto.xml" - echo -} diff --git a/net-print/cups/files/cups-1.4.0-backend-https.patch b/net-print/cups/files/cups-1.4.0-backend-https.patch deleted file mode 100644 index 8a70a20e6c5d..000000000000 --- a/net-print/cups/files/cups-1.4.0-backend-https.patch +++ /dev/null @@ -1,11 +0,0 @@ -diff -Naur cups-1.4.0/backend/Makefile cups-1.4.0.new/backend/Makefile ---- cups-1.4.0/backend/Makefile 2009-03-03 20:39:21.000000000 +0100 -+++ cups-1.4.0.new/backend/Makefile 2009-09-01 14:00:05.592615359 +0200 -@@ -91,6 +91,7 @@ - done - $(RM) $(SERVERBIN)/backend/http - $(LN) ipp $(SERVERBIN)/backend/http -+ $(LN) ipp $(SERVERBIN)/backend/https - if test "x$(DNSSD_BACKEND)" != x; then \ - $(RM) $(SERVERBIN)/backend/mdns; \ - $(LN) $(DNSSD_BACKEND) $(SERVERBIN)/backend/mdns; \ diff --git a/net-print/cups/files/cups-1.4.2-str3200.patch b/net-print/cups/files/cups-1.4.2-str3200.patch deleted file mode 100644 index 47d9114ed131..000000000000 --- a/net-print/cups/files/cups-1.4.2-str3200.patch +++ /dev/null @@ -1,43 +0,0 @@ -Index: scheduler/select.c -=================================================================== ---- scheduler/select.c (revision 8887) -+++ scheduler/select.c (working copy) -@@ -454,7 +454,7 @@ - if (fdptr->read_cb && event->filter == EVFILT_READ) - (*(fdptr->read_cb))(fdptr->data); - -- if (fdptr->write_cb && event->filter == EVFILT_WRITE) -+ if (fdptr->use > 1 && fdptr->write_cb && event->filter == EVFILT_WRITE) - (*(fdptr->write_cb))(fdptr->data); - - release_fd(fdptr); -@@ -499,7 +499,8 @@ - if (fdptr->read_cb && (event->events & (EPOLLIN | EPOLLERR | EPOLLHUP))) - (*(fdptr->read_cb))(fdptr->data); - -- if (fdptr->write_cb && (event->events & (EPOLLOUT | EPOLLERR | EPOLLHUP))) -+ if (fdptr->use > 1 && fdptr->write_cb && -+ (event->events & (EPOLLOUT | EPOLLERR | EPOLLHUP))) - (*(fdptr->write_cb))(fdptr->data); - - release_fd(fdptr); -@@ -590,7 +591,8 @@ - if (fdptr->read_cb && (pfd->revents & (POLLIN | POLLERR | POLLHUP))) - (*(fdptr->read_cb))(fdptr->data); - -- if (fdptr->write_cb && (pfd->revents & (POLLOUT | POLLERR | POLLHUP))) -+ if (fdptr->use > 1 && fdptr->write_cb && -+ (pfd->revents & (POLLOUT | POLLERR | POLLHUP))) - (*(fdptr->write_cb))(fdptr->data); - - release_fd(fdptr); -@@ -645,7 +647,8 @@ - if (fdptr->read_cb && FD_ISSET(fdptr->fd, &cupsd_current_input)) - (*(fdptr->read_cb))(fdptr->data); - -- if (fdptr->write_cb && FD_ISSET(fdptr->fd, &cupsd_current_output)) -+ if (fdptr->use > 1 && fdptr->write_cb && -+ FD_ISSET(fdptr->fd, &cupsd_current_output)) - (*(fdptr->write_cb))(fdptr->data); - - release_fd(fdptr); diff --git a/net-print/cups/files/cups-1.4.6-force-gnutls.patch b/net-print/cups/files/cups-1.4.6-force-gnutls.patch deleted file mode 100644 index 06daeb321499..000000000000 --- a/net-print/cups/files/cups-1.4.6-force-gnutls.patch +++ /dev/null @@ -1,93 +0,0 @@ -Source: http://pkgs.fedoraproject.org/gitweb/?p=cups.git;a=blob;f=cups-force-gnutls.patch;h=85adaa8bdcc013e5401fffe74306a5fe644cf088;hb=HEAD -Reason: Force the use of gnutls despite thread-safety concerns (Gentoo bug #350406) -Upstream: http://cups.org/str.php?L3605 - -diff -up cups-1.4.4/config-scripts/cups-ssl.m4.force-gnutls cups-1.4.4/config-scripts/cups-ssl.m4 ---- cups-1.4.4/config-scripts/cups-ssl.m4.force-gnutls 2010-09-15 16:49:22.343502552 +0100 -+++ cups-1.4.4/config-scripts/cups-ssl.m4 2010-09-15 16:49:42.347502595 +0100 -@@ -65,23 +65,21 @@ if test x$enable_ssl != xno; then - if $PKGCONFIG --exists gnutls; then - if test "x$have_pthread" = xyes; then - AC_MSG_WARN([The current version of GNU TLS cannot be made thread-safe.]) -- else -- have_ssl=1 -- SSLLIBS=`$PKGCONFIG --libs gnutls` -- SSLFLAGS=`$PKGCONFIG --cflags gnutls` -- AC_DEFINE(HAVE_SSL) -- AC_DEFINE(HAVE_GNUTLS) - fi -+ have_ssl=1 -+ SSLLIBS=`$PKGCONFIG --libs gnutls` -+ SSLFLAGS=`$PKGCONFIG --cflags gnutls` -+ AC_DEFINE(HAVE_SSL) -+ AC_DEFINE(HAVE_GNUTLS) - elif test "x$LIBGNUTLSCONFIG" != x; then - if test "x$have_pthread" = xyes; then - AC_MSG_WARN([The current version of GNU TLS cannot be made thread-safe.]) -- else -- have_ssl=1 -- SSLLIBS=`$LIBGNUTLSCONFIG --libs` -- SSLFLAGS=`$LIBGNUTLSCONFIG --cflags` -- AC_DEFINE(HAVE_SSL) -- AC_DEFINE(HAVE_GNUTLS) - fi -+ have_ssl=1 -+ SSLLIBS=`$LIBGNUTLSCONFIG --libs` -+ SSLFLAGS=`$LIBGNUTLSCONFIG --cflags` -+ AC_DEFINE(HAVE_SSL) -+ AC_DEFINE(HAVE_GNUTLS) - fi - - if test $have_ssl = 1; then -diff -up cups-1.4.4/configure.force-gnutls cups-1.4.4/configure ---- cups-1.4.4/configure.force-gnutls 2010-06-17 19:25:47.000000000 +0100 -+++ cups-1.4.4/configure 2010-09-15 16:50:01.689503165 +0100 -@@ -17542,36 +17542,34 @@ fi - if test "x$have_pthread" = xyes; then - { echo "$as_me:$LINENO: WARNING: The current version of GNU TLS cannot be made thread-safe." >&5 - echo "$as_me: WARNING: The current version of GNU TLS cannot be made thread-safe." >&2;} -- else -- have_ssl=1 -- SSLLIBS=`$PKGCONFIG --libs gnutls` -- SSLFLAGS=`$PKGCONFIG --cflags gnutls` -- cat >>confdefs.h <<\_ACEOF -+ fi -+ have_ssl=1 -+ SSLLIBS=`$PKGCONFIG --libs gnutls` -+ SSLFLAGS=`$PKGCONFIG --cflags gnutls` -+ cat >>confdefs.h <<\_ACEOF - #define HAVE_SSL 1 - _ACEOF - -- cat >>confdefs.h <<\_ACEOF -+ cat >>confdefs.h <<\_ACEOF - #define HAVE_GNUTLS 1 - _ACEOF - -- fi - elif test "x$LIBGNUTLSCONFIG" != x; then - if test "x$have_pthread" = xyes; then - { echo "$as_me:$LINENO: WARNING: The current version of GNU TLS cannot be made thread-safe." >&5 - echo "$as_me: WARNING: The current version of GNU TLS cannot be made thread-safe." >&2;} -- else -- have_ssl=1 -- SSLLIBS=`$LIBGNUTLSCONFIG --libs` -- SSLFLAGS=`$LIBGNUTLSCONFIG --cflags` -- cat >>confdefs.h <<\_ACEOF -+ fi -+ have_ssl=1 -+ SSLLIBS=`$LIBGNUTLSCONFIG --libs` -+ SSLFLAGS=`$LIBGNUTLSCONFIG --cflags` -+ cat >>confdefs.h <<\_ACEOF - #define HAVE_SSL 1 - _ACEOF - -- cat >>confdefs.h <<\_ACEOF -+ cat >>confdefs.h <<\_ACEOF - #define HAVE_GNUTLS 1 - _ACEOF - -- fi - fi - - if test $have_ssl = 1; then diff --git a/net-print/cups/files/cups-1.4.6-serialize-gnutls.patch b/net-print/cups/files/cups-1.4.6-serialize-gnutls.patch deleted file mode 100644 index bfe9f5e18a33..000000000000 --- a/net-print/cups/files/cups-1.4.6-serialize-gnutls.patch +++ /dev/null @@ -1,113 +0,0 @@ -Source: http://pkgs.fedoraproject.org/gitweb/?p=cups.git;a=blob;f=cups-serialize-gnutls.patch;h=cdd82cb95574801bf714364a585e31eb05191750;hb=HEAD -Reason: Perform locking for gnutls and avoid libgcrypt's broken locking (Gentoo bug #350406) -Upstream: http://cups.org/str.php?L3605 - -diff -up cups-1.4.4/cups/http.c.serialize-gnutls cups-1.4.4/cups/http.c ---- cups-1.4.4/cups/http.c.serialize-gnutls 2010-09-17 13:37:01.858871762 +0100 -+++ cups-1.4.4/cups/http.c 2010-09-17 13:55:22.579871934 +0100 -@@ -149,7 +149,7 @@ static int http_write_ssl(http_t *http, - - # ifdef HAVE_GNUTLS - # ifdef HAVE_PTHREAD_H --GCRY_THREAD_OPTION_PTHREAD_IMPL; -+static pthread_mutex_t gnutls_lock; - # endif /* HAVE_PTHREAD_H */ - - # elif defined(HAVE_LIBSSL) && defined(HAVE_PTHREAD_H) -@@ -1231,7 +1231,7 @@ httpInitialize(void) - */ - - # ifdef HAVE_PTHREAD_H -- gcry_control(GCRYCTL_SET_THREAD_CBS, &gcry_threads_pthread); -+ pthread_mutex_init(&gnutls_lock, NULL); - # endif /* HAVE_PTHREAD_H */ - - /* -@@ -2228,6 +2228,7 @@ _httpWait(http_t *http, /* I - Connect - if (SSL_pending((SSL *)(http->tls))) - return (1); - # elif defined(HAVE_GNUTLS) -+ /* lock already held here... */ - if (gnutls_record_check_pending(((http_tls_t *)(http->tls))->session)) - return (1); - # elif defined(HAVE_CDSASSL) -@@ -2294,6 +2295,8 @@ int /* O - 1 if data is available, 0 - httpWait(http_t *http, /* I - Connection to server */ - int msec) /* I - Milliseconds to wait */ - { -+ int ret; -+ - /* - * First see if there is data in the buffer... - */ -@@ -2318,7 +2321,17 @@ httpWait(http_t *http, /* I - Connecti - * If not, check the SSL/TLS buffers and do a select() on the connection... - */ - -- return (_httpWait(http, msec, 1)); -+#if defined(HAVE_SSL) && defined(HAVE_GNUTLS) && defined(HAVE_PTHREAD_H) -+ pthread_mutex_lock(&gnutls_lock); -+#endif -+ -+ ret = _httpWait(http, msec, 1); -+ -+#if defined(HAVE_SSL) && defined(HAVE_GNUTLS) && defined(HAVE_PTHREAD_H) -+ pthread_mutex_unlock(&gnutls_lock); -+#endif -+ -+ return (ret); - } - - -@@ -2769,7 +2782,9 @@ http_read_ssl(http_t *http, /* I - Conn - ssize_t result; /* Return value */ - - -+ pthread_mutex_lock(&gnutls_lock); - result = gnutls_record_recv(((http_tls_t *)(http->tls))->session, buf, len); -+ pthread_mutex_unlock(&gnutls_lock); - - if (result < 0 && !errno) - { -@@ -3085,6 +3100,7 @@ http_setup_ssl(http_t *http) /* I - Con - return (-1); - } - -+ pthread_mutex_lock(&gnutls_lock); - gnutls_certificate_allocate_credentials(credentials); - - gnutls_init(&(conn->session), GNUTLS_CLIENT); -@@ -3104,9 +3120,11 @@ http_setup_ssl(http_t *http) /* I - Con - free(credentials); - free(conn); - -+ pthread_mutex_unlock(&gnutls_lock); - return (-1); - } - -+ pthread_mutex_unlock(&gnutls_lock); - conn->credentials = credentials; - - # elif defined(HAVE_CDSASSL) -@@ -3196,9 +3214,11 @@ http_shutdown_ssl(http_t *http) /* I - - conn = (http_tls_t *)(http->tls); - credentials = (gnutls_certificate_client_credentials *)(conn->credentials); - -+ pthread_mutex_lock(&gnutls_lock); - gnutls_bye(conn->session, GNUTLS_SHUT_RDWR); - gnutls_deinit(conn->session); - gnutls_certificate_free_credentials(*credentials); -+ pthread_mutex_unlock(&gnutls_lock); - free(credentials); - free(conn); - -@@ -3445,7 +3465,9 @@ http_write_ssl(http_t *http, /* I - - # elif defined(HAVE_GNUTLS) - ssize_t result; /* Return value */ - -+ pthread_mutex_lock(&gnutls_lock); - result = gnutls_record_send(((http_tls_t *)(http->tls))->session, buf, len); -+ pthread_mutex_unlock(&gnutls_lock); - - if (result < 0 && !errno) - { diff --git a/net-print/cups/files/cups-1.4.8-CVE-2011-3170.patch b/net-print/cups/files/cups-1.4.8-CVE-2011-3170.patch deleted file mode 100644 index 843456f2eebd..000000000000 --- a/net-print/cups/files/cups-1.4.8-CVE-2011-3170.patch +++ /dev/null @@ -1,37 +0,0 @@ -Source: Upstream http://cups.org/str.php?L3914 -Reason: Avoid GIF reader loop (CVE-2011-2896) -Upstream: Fixed in trunk - -diff -up cups-1.4.8/filter/image-gif.c.CVE-2011-2896 cups-1.4.8/filter/image-gif.c ---- cups-1.4.8/filter/image-gif.c.CVE-2011-2896 2011-06-20 21:37:51.000000000 +0100 -+++ cups-1.4.8/filter/image-gif.c 2011-08-19 11:33:37.547911212 +0100 -@@ -648,11 +648,13 @@ gif_read_lzw(FILE *fp, /* I - File to - - if (code == max_code) - { -- *sp++ = firstcode; -- code = oldcode; -+ if (sp < (stack + 8192)) -+ *sp++ = firstcode; -+ -+ code = oldcode; - } - -- while (code >= clear_code) -+ while (code >= clear_code && sp < (stack + 8192)) - { - *sp++ = table[1][code]; - if (code == table[0][code]) -@@ -661,8 +663,10 @@ gif_read_lzw(FILE *fp, /* I - File to - code = table[0][code]; - } - -- *sp++ = firstcode = table[1][code]; -- code = max_code; -+ if (sp < (stack + 8192)) -+ *sp++ = firstcode = table[1][code]; -+ -+ code = max_code; - - if (code < 4096) - { diff --git a/net-print/cups/files/cups-1.4.8-largeimage.patch b/net-print/cups/files/cups-1.4.8-largeimage.patch deleted file mode 100644 index abf0b44d46d2..000000000000 --- a/net-print/cups/files/cups-1.4.8-largeimage.patch +++ /dev/null @@ -1,18 +0,0 @@ -Index: filter/image.c -=================================================================== ---- filter/image.c (Revision 9872) -+++ filter/image.c (Revision 9873) -@@ -349,9 +349,10 @@ - * Load the image as appropriate... - */ - -- img->max_ics = CUPS_TILE_MINIMUM; -- img->xppi = 128; -- img->yppi = 128; -+ img->cachefile = -1; -+ img->max_ics = CUPS_TILE_MINIMUM; -+ img->xppi = 128; -+ img->yppi = 128; - - if (!memcmp(header, "GIF87a", 6) || !memcmp(header, "GIF89a", 6)) - status = _cupsImageReadGIF(img, fp, primary, secondary, saturation, hue, |