Add ported Mutt 1.5.11 IMAP buffer overflow patch (bug #138125)

Package-Manager: portage-2.1-r1

5 files changed, 223 insertions, 5 deletions

diff --git a/mail-client/muttng/ChangeLog b/mail-client/muttng/ChangeLog
index 6f6997a78df3..f53482ce600d 100644
--- a/mail-client/muttng/ChangeLog
+++ b/mail-client/muttng/ChangeLog
@@ -1,6 +1,12 @@
 # ChangeLog for mail-client/muttng
 # Copyright 1999-2006 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/mail-client/muttng/ChangeLog,v 1.20 2006/06/20 16:54:17 grobian Exp $
+# $Header: /var/cvsroot/gentoo-x86/mail-client/muttng/ChangeLog,v 1.21 2006/06/27 17:08:45 grobian Exp $
+
+*muttng-20060619-r1 (27 Jun 2006)
+
+  27 Jun 2006; Fabian Groffen <grobian@gentoo.org>
+  +files/muttng-20060619-imap-browse.patch, +muttng-20060619-r1.ebuild:
+  Add ported Mutt 1.5.11 IMAP buffer overflow patch (bug #138125)
 
 *muttng-20060619 (20 Jun 2006)
 
diff --git a/mail-client/muttng/Manifest b/mail-client/muttng/Manifest
index 0ac60ee2e5fd..e60eb2325b3c 100644
--- a/mail-client/muttng/Manifest
+++ b/mail-client/muttng/Manifest
@@ -10,6 +10,10 @@ AUX muttng-20060317-sigremovereply.patch 5676 RMD160 7aa2296fa0892b584a707361a3b
 MD5 65b707b3a6eeaafec18588ab59e0249e files/muttng-20060317-sigremovereply.patch 5676
 RMD160 7aa2296fa0892b584a707361a3b2ae9ddc169227 files/muttng-20060317-sigremovereply.patch 5676
 SHA256 0b9f29d8e038d150863009f0cbfc6daadd2857ceb674a1f7d10100f4bd666bdd files/muttng-20060317-sigremovereply.patch 5676
+AUX muttng-20060619-imap-browse.patch 1215 RMD160 265d1dc69342106ec73d39600a902415f6fc179e SHA1 dab4dbd44ef06e6e11d995c04c6e7d8d2a252dd1 SHA256 0ae3b65b74d6aa187ba8c61a8539e77de71dc3baae620edd04fb6d1265be962f
+MD5 fa22e29a66971b7ebc38c3aae7f7e017 files/muttng-20060619-imap-browse.patch 1215
+RMD160 265d1dc69342106ec73d39600a902415f6fc179e files/muttng-20060619-imap-browse.patch 1215
+SHA256 0ae3b65b74d6aa187ba8c61a8539e77de71dc3baae620edd04fb6d1265be962f files/muttng-20060619-imap-browse.patch 1215
 DIST muttng-20060329.tar.gz 2733880 RMD160 c790c3dd05da28aff13d8eeec56b3a544e9a9d2f SHA1 69a53481f5b93a019f681b1f6c359b692c38a5b9 SHA256 3ac5f98f0125bf61e802bf15f4b34ac6719f5f37b907dd0acf6c19de39d8e16f
 DIST muttng-20060415.tar.gz 2733999 RMD160 29208c0f629ee2c6242ed3939e2a0d998fd000cf SHA1 6c85536d98169a2f316615b7497eb0094af58030 SHA256 289d15e02a6cd68ed00dfdf505f1922cbfe8e9f1f58a27356bc0ee01c4dec78d
 DIST muttng-20060619.tar.gz 2734131 RMD160 d482eddb7ac5e1998faa570a496b14f85ff1eef1 SHA1 0060dec0d66f041b885090600b66514c0059ac2c SHA256 151a99dd4c2b91805885c13b78e35e0f2f24ff01ff459945ca5d783a11c293a2
@@ -21,14 +25,18 @@ EBUILD muttng-20060415.ebuild 4242 RMD160 1721b2753ed147604b1af16bccae2c4cd1dc81
 MD5 b9232628cb48637e46dab39b3b736716 muttng-20060415.ebuild 4242
 RMD160 1721b2753ed147604b1af16bccae2c4cd1dc81bd muttng-20060415.ebuild 4242
 SHA256 93f6dd64bc4226ea510c04253ad39d85043516bd486d92720e6326aa5f7ca833 muttng-20060415.ebuild 4242
+EBUILD muttng-20060619-r1.ebuild 4639 RMD160 0f3eb01ddd747ab44f5f85c4b33d0d029618ab8f SHA1 bb978ddcd49eb69d4e84cf8edd0e633726e86322 SHA256 6d8b2d2ef5b0d88e3283bdcb226d67ece1448fb7c22873d8981cb87f6b711596
+MD5 132fedb633c48a54366d671830bb93e3 muttng-20060619-r1.ebuild 4639
+RMD160 0f3eb01ddd747ab44f5f85c4b33d0d029618ab8f muttng-20060619-r1.ebuild 4639
+SHA256 6d8b2d2ef5b0d88e3283bdcb226d67ece1448fb7c22873d8981cb87f6b711596 muttng-20060619-r1.ebuild 4639
 EBUILD muttng-20060619.ebuild 4544 RMD160 00d10c506c5228135471d2cd3a2796b6080578d9 SHA1 ca9f324e2abd71ce92cd26c8b8dd915d6dc4a192 SHA256 4a888d54e1b9596617203df467fe57e8826e22e973973e148b87ebbd4e322730
 MD5 ff9d6eeb67ac8a4c6430a122dde2052d muttng-20060619.ebuild 4544
 RMD160 00d10c506c5228135471d2cd3a2796b6080578d9 muttng-20060619.ebuild 4544
 SHA256 4a888d54e1b9596617203df467fe57e8826e22e973973e148b87ebbd4e322730 muttng-20060619.ebuild 4544
-MISC ChangeLog 4253 RMD160 2014d4b7739c32d9215a5b4572bf7b297cbae3c3 SHA1 63f0b74d869a083bfb4dea4d0cd6400e7c61efd6 SHA256 a4ecf972b5a9bc78b30868a3d62d8bbe3db84fcf624c007f5b62a368b83ac085
-MD5 3b82ee31467a3618f68cb2bf853e5f40 ChangeLog 4253
-RMD160 2014d4b7739c32d9215a5b4572bf7b297cbae3c3 ChangeLog 4253
-SHA256 a4ecf972b5a9bc78b30868a3d62d8bbe3db84fcf624c007f5b62a368b83ac085 ChangeLog 4253
+MISC ChangeLog 4478 RMD160 87d7eeef75620eccf337d3b807f30c6a20853f51 SHA1 9650366e1d76bc5f63823aa5b5e8989c0464941f SHA256 497a86e2fed0b53ff6cd774bb7b1e485c38fd8104a0e0eae0f2d3d5961a9a481
+MD5 59bc2067789d5a006107ca3821bc21c8 ChangeLog 4478
+RMD160 87d7eeef75620eccf337d3b807f30c6a20853f51 ChangeLog 4478
+SHA256 497a86e2fed0b53ff6cd774bb7b1e485c38fd8104a0e0eae0f2d3d5961a9a481 ChangeLog 4478
 MISC metadata.xml 227 RMD160 616aff994f5c341874112505920241b3d4d9cbfa SHA1 92fca333b3271f892dafdd5f990b146a6e5d713e SHA256 1c5377e37b9c43ed35a6528e7240e31408fa418ee710e571afe23e37a132e09c
 MD5 856e89d80001e53a31845405dfef7f03 metadata.xml 227
 RMD160 616aff994f5c341874112505920241b3d4d9cbfa metadata.xml 227
@@ -42,3 +50,6 @@ SHA256 b4dfd18ed038360e9f93b2beabd26a042a6a5025729168a31e77597447de2a42 files/di
 MD5 24e6c07d7b38658bd3f6d3ece25be7d9 files/digest-muttng-20060619 250
 RMD160 3191fb7fbbcd3240526a05a9c398a426d72d132a files/digest-muttng-20060619 250
 SHA256 00800190007a2d06b9c1d255b3981425cd162bab41f27f6007907bda127afc24 files/digest-muttng-20060619 250
+MD5 24e6c07d7b38658bd3f6d3ece25be7d9 files/digest-muttng-20060619-r1 250
+RMD160 3191fb7fbbcd3240526a05a9c398a426d72d132a files/digest-muttng-20060619-r1 250
+SHA256 00800190007a2d06b9c1d255b3981425cd162bab41f27f6007907bda127afc24 files/digest-muttng-20060619-r1 250
diff --git a/mail-client/muttng/files/digest-muttng-20060619-r1 b/mail-client/muttng/files/digest-muttng-20060619-r1
new file mode 100644
index 000000000000..84316cfe55d5
--- /dev/null
+++ b/mail-client/muttng/files/digest-muttng-20060619-r1
@@ -0,0 +1,3 @@
+MD5 7bc0c3fc4f1bfb28ec20c256e92cc41c muttng-20060619.tar.gz 2734131
+RMD160 d482eddb7ac5e1998faa570a496b14f85ff1eef1 muttng-20060619.tar.gz 2734131
+SHA256 151a99dd4c2b91805885c13b78e35e0f2f24ff01ff459945ca5d783a11c293a2 muttng-20060619.tar.gz 2734131
diff --git a/mail-client/muttng/files/muttng-20060619-imap-browse.patch b/mail-client/muttng/files/muttng-20060619-imap-browse.patch
new file mode 100644
index 000000000000..001a218869b9
--- /dev/null
+++ b/mail-client/muttng/files/muttng-20060619-imap-browse.patch
@@ -0,0 +1,38 @@
+commit 850d4a6b78730344ad7bb1d2a04cfcd35def3fec
+Author: brendan <brendan>
+Date:   Mon Jun 19 18:14:03 2006 +0000
+
+    From: TAKAHASHI Tamotsu <tamo@momonga-linux.org>
+    
+    Fix browse_get_namespace() which could overflow ns[LONG_STRING].
+    (Possible remote vulnerability)
+
+Fabian Groffen <grobian@gentoo.org>:
+* ported Mutt 1.5.11 patch to muttng-r804 (20060619)
+
+--- imap/browse.c
++++ imap/browse.c
+@@ -481,7 +481,7 @@
+ 
+             if (*s == '\"') {
+               s++;
+-              while (*s && *s != '\"') {
++              while (*s && *s != '\"' && n < (sizeof(ns) - 1)) {
+                 if (*s == '\\')
+                   s++;
+                 ns[n++] = *s;
+@@ -491,11 +491,13 @@
+                 s++;
+             }
+             else
+-              while (*s && !ISSPACE (*s)) {
++              while (*s && !ISSPACE (*s) && n < (sizeof(ns) - 1)) {
+                 ns[n++] = *s;
+                 s++;
+               }
+             ns[n] = '\0';
++            if (n == (sizeof(ns) - 1))
++              debug_print (1, ("browse_get_namespace: too long: [%s]\n", ns));
+             /* delim? */
+             s = imap_next_word (s);
+             /* delimiter is meaningless if namespace is "". Why does
diff --git a/mail-client/muttng/muttng-20060619-r1.ebuild b/mail-client/muttng/muttng-20060619-r1.ebuild
new file mode 100644
index 000000000000..da97c100cf39
--- /dev/null
+++ b/mail-client/muttng/muttng-20060619-r1.ebuild
@@ -0,0 +1,160 @@
+# Copyright 1999-2006 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/mail-client/muttng/muttng-20060619-r1.ebuild,v 1.1 2006/06/27 17:08:45 grobian Exp $
+
+inherit eutils flag-o-matic
+
+DESCRIPTION="mutt-ng -- fork of mutt with added features"
+HOMEPAGE="http://www.muttng.org/"
+SRC_URI="http://nion.modprobe.de/mutt-ng/snapshots/${P}.tar.gz"
+IUSE="berkdb buffysize cjk crypt debug gdbm gnutls gpgme idn imap mbox nls nntp pop qdbm sasl slang smime smtp ssl doc"
+SLOT="0"
+LICENSE="GPL-2"
+KEYWORDS="~alpha ~amd64 ~ia64 ~ppc ~ppc-macos ~sparc ~x86"
+RDEPEND="nls? ( sys-devel/gettext )
+	>=sys-libs/ncurses-5.2
+	idn?     ( net-dns/libidn )
+	qdbm?	 ( dev-db/qdbm )
+	!qdbm?	 (
+		gdbm?  ( sys-libs/gdbm )
+		!gdbm? ( berkdb? ( >=sys-libs/db-4 ) )
+	)
+	slang?   ( >=sys-libs/slang-1.4.2 )
+	smtp?    ( net-libs/libesmtp )
+	imap?    (
+		gnutls?  ( >=net-libs/gnutls-1.0.17 )
+		!gnutls? ( ssl? ( >=dev-libs/openssl-0.9.6 ) )
+		sasl?    ( >=dev-libs/cyrus-sasl-2 )
+	)
+	pop?     (
+		gnutls?  ( >=net-libs/gnutls-1.0.17 )
+		!gnutls? ( ssl? ( >=dev-libs/openssl-0.9.6 ) )
+		sasl?    ( >=dev-libs/cyrus-sasl-2 )
+	)
+	gpgme?   ( >=app-crypt/gpgme-0.9.0 )
+	doc?     (
+		www-client/lynx
+		dev-libs/libxslt
+		app-text/htmltidy
+		app-text/openjade
+		virtual/tetex
+	)"
+DEPEND="${RDEPEND}
+	net-mail/mailbase"
+#	sys-devel/automake
+#	>=sys-devel/autoconf-2.5
+
+src_unpack() {
+	unpack ${A}                     || die "unpack failed"
+	cd "${S}"
+	epatch "${FILESDIR}/${PN}"-20060309-smarttime.patch
+	epatch "${FILESDIR}/${PN}"-20060317-sigremovereply.patch
+
+	# Fix possible vulnerability see bug #138125
+	epatch "${FILESDIR}/${P}"-imap-browse.patch
+
+	use doc || epatch "${FILESDIR}/${PN}"-20060309-nodoc.patch
+
+#	aclocal -I m4					|| die "aclocal failed"
+#	autoheader						|| die "autoheader failed"
+#	emake -C m4 -f Makefile.am.in	|| die "emake in m4 failed"
+#	automake --foreign				|| die "automake failed"
+#	WANT_AUTOCONF=2.5 autoconf		|| die "autoconf failed"
+}
+
+src_compile() {
+	declare myconf="
+		$(use_enable nls) \
+		$(use_enable gpgme) \
+		$(use_enable imap) \
+		$(use_enable pop) \
+		$(use_enable crypt pgp) \
+		$(use_enable smime) \
+		$(use_enable cjk default-japanese) \
+		$(use_enable debug) \
+		$(use_enable nntp) \
+		$(use_with idn) \
+		$(use_with smtp libesmtp) \
+		--enable-compressed \
+		--sysconfdir=/etc/${PN} \
+		--with-docdir=/usr/share/doc/${PN}-${PVR} \
+		--with-regex \
+		--disable-fcntl --enable-flock --enable-nfs-fix \
+		--with-mixmaster \
+		--without-sasl \
+		--enable-external-dotlock"
+
+	# muttng prioritizes qdbm over gdbm, so we will too.
+	# hcache feature requires at least one database is in USE.
+	if use qdbm; then
+		myconf="${myconf} --enable-hcache \
+			--with-qdbm --without-gdbm --without-bdb"
+	elif use gdbm; then
+		myconf="${myconf} --enable-hcache \
+			--with-gdbm --without-qdbm --without-bdb"
+	elif use berkdb; then
+		myconf="${myconf} --enable-hcache \
+			--with-bdb --without-gdbm --without-qdbm"
+	else
+		myconf="${myconf} --disable-hcache \
+			--without-gdbm --without-qdbm --without-bdb"
+	fi
+
+	# there's no need for gnutls or ssl without either pop or imap.
+	# in fact mutt's configure will bail if you do:
+	#   --without-pop --without-imap --with-ssl
+	if use pop || use imap; then
+		if use gnutls; then
+			myconf="${myconf} --with-gnutls"
+		elif use ssl; then
+			myconf="${myconf} --with-ssl"
+		fi
+		# not sure if this should be mutually exclusive with the other two
+		myconf="${myconf} $(use_with sasl sasl2)"
+	else
+		myconf="${myconf} --without-gnutls --without-ssl --without-sasl2"
+	fi
+
+	# See Bug #11170
+	case ${ARCH} in
+		alpha|ppc) replace-flags "-O[3-9]" "-O2" ;;
+	esac
+
+	if use buffysize; then
+		ewarn "USE=buffy-size is just a workaround. Disable it if you don't need it."
+		myconf="${myconf} --enable-buffy-size"
+	fi
+
+	if use slang; then
+		myconf="${myconf} --with-slang"
+		ewarn "If you want a transparent background, merge ${PN} with USE=-slang."
+	else
+		# --without-slang doesn't work;
+		# specify --with-curses if you don't want slang
+		# (26 Sep 2001 agriffis)
+		myconf="${myconf} --with-curses"
+	fi
+
+	if use mbox; then
+		myconf="${myconf} --with-mailpath=/var/spool/mail"
+	else
+		myconf="${myconf} --with-homespool=Maildir"
+	fi
+
+	econf ${myconf}
+	emake || die "emake failed"
+}
+
+src_install() {
+	emake DESTDIR="${D}" install || die "install failed"
+	find "${D}"/usr/share/doc -type f | grep -v "html\|manual" | xargs gzip
+
+	dodoc COPYRIGHT ChangeLog NEWS OPS* PATCHES README* TODO
+}
+
+pkg_postinst() {
+	echo
+	einfo "NOTE: muttng is still under heavy development"
+	einfo "If you find a bug please report at http://bugs.gentoo.org"
+	echo
+}