Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

media-video/mplayer: Rev bump to add patch for CVE-2016-4352 (bug #581952) #4951

Closed
wants to merge 1 commit into from

Conversation

Whissi
Copy link
Contributor

@Whissi Whissi commented Jun 17, 2017

Ebuild changes:

  • Migrated to EAPI=6
  • base eclass dropped

@gentoo-repo-qa-bot gentoo-repo-qa-bot added the assigned PR successfully assigned to the package maintainer(s). label Jun 17, 2017
@gentoo-repo-qa-bot
Copy link
Collaborator

Pull Request assignment

Areas affected: ebuilds
Packages affected: media-video/mplayer

media-video/mplayer: @gentoo/video

@aballier
Copy link
Contributor

please update -9999 too for the ebuild fixes

VIDEO_CARDS="s3virge mga tdfx"
for x in ${VIDEO_CARDS}; do
IUSE+=" video_cards_${x}"
done
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

unset x after done

KEYWORDS="~alpha ~amd64 ~arm ~hppa ~ia64 ~x86 ~amd64-fbsd ~x86-fbsd ~amd64-linux ~x86-linux ~ppc-macos ~x64-macos ~x86-macos ~sparc-solaris ~x86-solaris"
PATCHES=( "${FILESDIR}"/${PN}-1.3-CVE-2016-4352.patch )
else
KEYWORDS="~alpha ~arm ~hppa ~ia64"
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

every ebuild should contain only 1 KEYWORDS line, as ekeyword will then randomly add crap to the wrong conidtional block and unnecessary churn. And yes, it's fine to have KEYWORDS undefined (for -9999 ebuilds).

src_unpack() {
if [[ ${PV} = *9999* ]]; then
subversion_src_unpack
cd "${WORKDIR}"
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

missing || die

if [[ ${PV} = *9999* ]]; then
subversion_src_unpack
cd "${WORKDIR}"
rm -rf "${WORKDIR}/${P}/ffmpeg/"
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

missing || die

fi

if [[ ${PV} = *9999* ]] || [[ "${PV%_rc*}" = "${PV}" ]]; then
cd "${S}"
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

missing || die

fi

if use truetype; then
cat >> "${ED}/etc/mplayer/mplayer.conf" << _EOF_
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

same here


# bug 256203
if use rar; then
cat >> "${ED}/etc/mplayer/mplayer.conf" << _EOF_
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

again

}

pkg_preinst() {
[[ -d ${EROOT}/usr/share/mplayer/Skin/default ]] && \
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

${EROOT%/} to avoid double-slashing


pkg_preinst() {
[[ -d ${EROOT}/usr/share/mplayer/Skin/default ]] && \
rm -rf "${EROOT}/usr/share/mplayer/Skin/default"
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

turn this into a proper if conditional and add || die to rm -rf


[ -L "${EROOT}/usr/share/mplayer/subfont.ttf" -a \
! -e "${EROOT}/usr/share/mplayer/subfont.ttf" ] && \
rm -f "${EROOT}/usr/share/mplayer/subfont.ttf"
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

same here

@aballier
Copy link
Contributor

@SoapGentoo file a PR for those changes, that's not the point of this one, and it's already annoying it is mixing a sec fix and minor bikeshed

@SoapGentoo
Copy link
Member

@aballier since when is bumping to EAPI 6 necessary for a sec fix? But anyhow...

@aballier
Copy link
Contributor

yes, it is already annoying it is mixing the 2, no need to add more

…1952)

Package-Manager: Portage-2.3.5, Repoman-2.3.2
@Whissi
Copy link
Contributor Author

Whissi commented Jun 19, 2017

I updated the PR: I am now pushing just a small rev bump based on previous mplayer-1.3.0.ebuild with just the patch as addition.

@aballier
Copy link
Contributor

merged, thx

note that you didn't need to put the patch in the else branch, live & release ebuilds get out of sync for that kind of things and that's ok

@aballier aballier closed this Jun 19, 2017
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
assigned PR successfully assigned to the package maintainer(s).
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants