diff options
author | makc <makc@FreeBSD.org> | 2010-06-02 05:35:38 +0800 |
---|---|---|
committer | makc <makc@FreeBSD.org> | 2010-06-02 05:35:38 +0800 |
commit | c03b608b81f6a38a6424fb6139e2baed305d1545 (patch) | |
tree | 5908f41d11f3eafb36216c18e71a5429b4870087 /net | |
parent | 30d517c07f5f14ca47fa3d57eb934f80ac1f283c (diff) | |
download | freebsd-ports-gnome-c03b608b81f6a38a6424fb6139e2baed305d1545.tar.gz freebsd-ports-gnome-c03b608b81f6a38a6424fb6139e2baed305d1545.tar.zst freebsd-ports-gnome-c03b608b81f6a38a6424fb6139e2baed305d1545.zip |
Present KDE SC 4.4.4 for FreeBSD.
Diffstat (limited to 'net')
-rw-r--r-- | net/kdenetwork4/Makefile | 3 | ||||
-rw-r--r-- | net/kdenetwork4/distinfo | 6 | ||||
-rw-r--r-- | net/kdenetwork4/files/patch-CVE-2010-1511 | 212 |
3 files changed, 4 insertions, 217 deletions
diff --git a/net/kdenetwork4/Makefile b/net/kdenetwork4/Makefile index 2ecdb96c2642..530f70b96829 100644 --- a/net/kdenetwork4/Makefile +++ b/net/kdenetwork4/Makefile @@ -6,7 +6,6 @@ PORTNAME= kdenetwork PORTVERSION= ${KDE4_VERSION} -PORTREVISION= 2 CATEGORIES= net kde ipv6 MASTER_SITES= ${MASTER_SITE_KDE} MASTER_SITE_SUBDIR= ${KDE4_BRANCH}/${PORTVERSION}/src @@ -46,7 +45,7 @@ MAKE_JOBS_SAFE= yes # Explicitly disable alsa, see for details: # http://mail.kde.org/pipermail/kde-freebsd/2010-March/008015.html -#CMAKE_ARGS+= -DWITH_Alsa:BOOL=OFF +CMAKE_ARGS+= -DWITH_Alsa:BOOL=OFF # Embedded btcore support already disconnected from the build and outdated CMAKE_ARGS+= -DENABLE_EMBEDDED_TORRENT_SUPPORT=FALSE diff --git a/net/kdenetwork4/distinfo b/net/kdenetwork4/distinfo index 83ad99397f7d..1846d15a7827 100644 --- a/net/kdenetwork4/distinfo +++ b/net/kdenetwork4/distinfo @@ -1,3 +1,3 @@ -MD5 (KDE/kdenetwork-4.4.3.tar.bz2) = 9e8e285aff018807fd5967806cebf083 -SHA256 (KDE/kdenetwork-4.4.3.tar.bz2) = 8f79ec7084114434f30ae02d2b782e297859fe830c6bd048cf3b0494f7e94cdc -SIZE (KDE/kdenetwork-4.4.3.tar.bz2) = 8319875 +MD5 (KDE/kdenetwork-4.4.4.tar.bz2) = 42619dc65cf8b8a6e483dff23a4a5127 +SHA256 (KDE/kdenetwork-4.4.4.tar.bz2) = fafadfab55affcb837557f09aa504a17350eeb06ad7a17275371549e4a7e588d +SIZE (KDE/kdenetwork-4.4.4.tar.bz2) = 8321292 diff --git a/net/kdenetwork4/files/patch-CVE-2010-1511 b/net/kdenetwork4/files/patch-CVE-2010-1511 deleted file mode 100644 index 8895744312cf..000000000000 --- a/net/kdenetwork4/files/patch-CVE-2010-1511 +++ /dev/null @@ -1,212 +0,0 @@ -Index: kget/transfer-plugins/metalink/metalink.cpp -=================================================================== ---- ./kget/transfer-plugins/metalink/metalink.cpp (revision 1124973) -+++ ./kget/transfer-plugins/metalink/metalink.cpp (revision 1124974) -@@ -99,6 +99,7 @@ - void Metalink::metalinkInit(const KUrl &src, const QByteArray &data) - { - kDebug(5001); -+ - bool justDownloaded = !m_localMetalinkLocation.isValid(); - if (!src.isEmpty()) - { -@@ -121,7 +122,9 @@ - //error - if (!m_metalink.isValid()) - { -- kDebug(5001) << "Unknown error when trying to load the .metalink-file"; -+ kError(5001) << "Unknown error when trying to load the .metalink-file. Metalink is not valid."; -+ setStatus(Job::Aborted); -+ setTransferChange(Tc_Status, true); - return; - } - -@@ -202,7 +205,7 @@ - if (!m_dataSourceFactory.size()) - { - KMessageBox::error(0, i18n("Download failed, no working URLs were found."), i18n("Error")); -- setStatus(Job::Aborted, i18n("An error occurred...."), SmallIcon("document-preview")); -+ setStatus(Job::Aborted); - setTransferChange(Tc_Status, true); - return; - } -@@ -227,16 +230,29 @@ - ui.treeView->hideColumn(FileItem::SignatureVerified); - dialog->setMainWidget(widget); - dialog->setCaption(i18n("File Selection")); -- dialog->setButtons(KDialog::Ok); -- connect(dialog, SIGNAL(finished()), this, SLOT(filesSelected())); -+ dialog->setButtons(KDialog::Ok | KDialog::Cancel); -+ connect(dialog, SIGNAL(finished(int)), this, SLOT(fileDlgFinished(int))); - - dialog->show(); - } - } - --void Metalink::filesSelected() -+void Metalink::fileDlgFinished(int result) - { -+ //BEGIN HACK if the dialog was not accepted untick every file, so that the download does not start -+ //generally setStatus should do the job as well, but does not as it appears -+ if (result != QDialog::Accepted) { -+ for (int row = 0; row < fileModel()->rowCount(); ++row) { -+ QModelIndex index = fileModel()->index(row, FileItem::File); -+ if (index.isValid()) { -+ fileModel()->setData(index, Qt::Unchecked, Qt::CheckStateRole); -+ } -+ } -+ } -+ //END -+ - QModelIndexList files = fileModel()->fileIndexes(FileItem::File); -+ int numFilesSelected = 0; - foreach (const QModelIndex &index, files) - { - const KUrl dest = fileModel()->getUrl(index); -@@ -244,6 +260,9 @@ - if (m_dataSourceFactory.contains(dest)) - { - m_dataSourceFactory[dest]->setDoDownload(doDownload); -+ if (doDownload) { -+ ++numFilesSelected; -+ } - } - } - -@@ -252,9 +271,15 @@ - processedSizeChanged(); - speedChanged(); - -+ //no files selected to download or dialog rejected, stop the download -+ if (!numFilesSelected || (result != QDialog::Accepted)) { -+ setStatus(Job::Stopped);//FIXME -+ setTransferChange(Tc_Status, true); -+ return; -+ } -+ - //some files may be set to download, so start them as long as the transfer is not stopped -- if (status() != Job::Stopped) -- { -+ if (status() != Job::Stopped) { - startMetalink(); - } - } -Index: kget/transfer-plugins/metalink/metalink.h -=================================================================== ---- ./kget/transfer-plugins/metalink/metalink.h (revision 1124973) -+++ ./kget/transfer-plugins/metalink/metalink.h (revision 1124974) -@@ -81,7 +81,7 @@ - - private Q_SLOTS: - void metalinkInit(const KUrl &url = KUrl(), const QByteArray &data = QByteArray()); -- void filesSelected(); -+ void fileDlgFinished(int result); - void totalSizeChanged(KIO::filesize_t size); - void processedSizeChanged(); - void speedChanged(); -Index: kget/ui/metalinkcreator/metalinker.h -=================================================================== ---- ./kget/ui/metalinkcreator/metalinker.h (revision 1124973) -+++ ./kget/ui/metalinkcreator/metalinker.h (revision 1124974) -@@ -259,6 +259,14 @@ - KIO::filesize_t size; - CommonData data; - Resources resources; -+ -+ private: -+ /** -+ * Controlls if the name attribute is valid, i.e. it is not empty and -+ * does not contain any directory traversal directives or information, -+ * as described in the Metalink 4.0 specification 4.1.2.1. -+ */ -+ bool isValidNameAttribute() const; - }; - - class Files -Index: kget/ui/metalinkcreator/metalinker.cpp -=================================================================== ---- ./kget/ui/metalinkcreator/metalinker.cpp (revision 1124973) -+++ ./kget/ui/metalinkcreator/metalinker.cpp (revision 1124974) -@@ -528,14 +528,14 @@ - - bool KGetMetalink::File::isValid() const - { -- return !name.isEmpty() && resources.isValid(); -+ return isValidNameAttribute() && resources.isValid(); - } - - void KGetMetalink::File::load(const QDomElement &e) - { - data.load(e); - -- name = e.attribute("name"); -+ name = QUrl::fromPercentEncoding(e.attribute("name").toAscii()); - size = e.firstChildElement("size").text().toULongLong(); - - verification.load(e); -@@ -575,6 +575,22 @@ - resources.clear(); - } - -+ -+bool KGetMetalink::File::isValidNameAttribute() const -+{ -+ if (name.isEmpty()) { -+ kError(5001) << "Name attribute of Metalink::File is empty."; -+ return false; -+ } -+ -+ if (name.contains(QRegExp("$(\\.\\.?)?/")) || name.contains("/../") || name.endsWith("/..")) { -+ kError(5001) << "Name attribute of Metalink::File contains directory traversal directives:" << name; -+ return false; -+ } -+ -+ return true; -+} -+ - #ifdef HAVE_NEPOMUK - QHash<QUrl, Nepomuk::Variant> KGetMetalink::File::properties() const - { -@@ -584,13 +600,28 @@ - - bool KGetMetalink::Files::isValid() const - { -- bool isValid = !files.empty(); -- foreach (const File &file, files) -- { -- isValid &= file.isValid(); -+ if (files.isEmpty()) { -+ return false; - } - -- return isValid; -+ QStringList fileNames; -+ foreach (const File &file, files) { -+ fileNames << file.name; -+ if (!file.isValid()) { -+ return false; -+ } -+ } -+ -+ //The value of name must be unique for each file -+ while (!fileNames.isEmpty()) { -+ const QString fileName = fileNames.takeFirst(); -+ if (fileNames.contains(fileName)) { -+ kError(5001) << "Metalink::File name" << fileName << "exists multiple times."; -+ return false; -+ } -+ } -+ -+ return true; - } - - void KGetMetalink::Files::load(const QDomElement &e) -@@ -751,7 +782,7 @@ - - for (QDomElement elem = filesElem.firstChildElement("file"); !elem.isNull(); elem = elem.nextSiblingElement("file")) { - File file; -- file.name = elem.attribute("name"); -+ file.name = QUrl::fromPercentEncoding(elem.attribute("name").toAscii()); - file.size = elem.firstChildElement("size").text().toULongLong(); - - file.data = parseCommonData(elem); |