emergency bump by security team #184071 - ** do not assign me bugs **

(Portage version: 2.1.2.9)

4 files changed, 99 insertions, 1 deletions

diff --git a/media-video/nvclock/ChangeLog b/media-video/nvclock/ChangeLog
index 238f5cbbfed7..ba0dece05ab2 100644
--- a/media-video/nvclock/ChangeLog
+++ b/media-video/nvclock/ChangeLog
@@ -1,6 +1,12 @@
 # ChangeLog for media-video/nvclock
 # Copyright 2002-2007 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/media-video/nvclock/ChangeLog,v 1.20 2007/05/15 13:56:23 bangert Exp $
+# $Header: /var/cvsroot/gentoo-x86/media-video/nvclock/ChangeLog,v 1.21 2007/07/05 11:10:44 taviso Exp $
+
+*nvclock-0.7-r2 (05 Jul 2007)
+
+  05 Jul 2007; Tavis Ormandy <taviso@gentoo.org>
+  +files/nvclock-insecure-tmp.diff, +nvclock-0.7-r2.ebuild:
+  emergency bump by security team #184071 - ** do not assign me bugs **
 
   15 May 2007; Thilo Bangert <bangert@gentoo.org> metadata.xml:
   add <herd>no-herd</herd>
diff --git a/media-video/nvclock/files/digest-nvclock-0.7-r2 b/media-video/nvclock/files/digest-nvclock-0.7-r2
new file mode 100644
index 000000000000..43a189ed06ba
--- /dev/null
+++ b/media-video/nvclock/files/digest-nvclock-0.7-r2
@@ -0,0 +1,3 @@
+MD5 a3bb5ff1c2638317f1a69c7c2442b9e4 nvclock0.7.tar.gz 68966
+RMD160 aacdc3718a65ec63d1b16039294cd2976736402b nvclock0.7.tar.gz 68966
+SHA256 469678f436b974b62af51aa4bf71fdf695c402ed0cd890c25fc0b757577657e8 nvclock0.7.tar.gz 68966
diff --git a/media-video/nvclock/files/nvclock-insecure-tmp.diff b/media-video/nvclock/files/nvclock-insecure-tmp.diff
new file mode 100644
index 000000000000..834818e14943
--- /dev/null
+++ b/media-video/nvclock/files/nvclock-insecure-tmp.diff
@@ -0,0 +1,32 @@
+--- nvclock0.7.orig/src/backend/backend.c	2003-07-29 16:20:01.000000000 +0100
++++ nvclock0.7/src/backend/backend.c	2007-07-03 11:01:06.000000000 +0100
+@@ -282,12 +282,18 @@ void set_card(int number)
+ void set_default_speeds(int num)
+ {
+     int i, eof;
+-    char buffer[100];
++    char buffer[100], fname[1024], *home;
+     volatile unsigned int *PEXTDEV;
+     volatile unsigned int *PRAMDAC;
+     FILE *fp;
+ 
+-    if((fp = fopen("/tmp/nvclock", "r")) != NULL)
++    if ((home = getenv("HOME")) == NULL)
++        return;
++
++    if (snprintf(fname, sizeof(fname), "%s/.nvclock", home) == -1)
++        return;
++
++    if((fp = fopen(fname, "r")) != NULL)
+     {
+ 	/* Read the file .. */
+         for(eof = fscanf(fp, "%s",&buffer); eof != EOF; eof = fscanf(fp, "%s", &buffer))
+@@ -312,7 +318,7 @@ void set_default_speeds(int num)
+     else
+     {
+ 	/* Write the config file */
+-    	fp = fopen("/tmp/nvclock", "w+");
++    	fp = fopen(fname, "w+");
+ 	fprintf(fp, "#This file is used by nvclock to be able to restore the card's speeds\n#Do not edit this file!\n");
+     
+ 	for(i = 0; i <= num; i++)
diff --git a/media-video/nvclock/nvclock-0.7-r2.ebuild b/media-video/nvclock/nvclock-0.7-r2.ebuild
new file mode 100644
index 000000000000..1a56600a9493
--- /dev/null
+++ b/media-video/nvclock/nvclock-0.7-r2.ebuild
@@ -0,0 +1,57 @@
+# Copyright 1999-2007 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/media-video/nvclock/nvclock-0.7-r2.ebuild,v 1.1 2007/07/05 11:10:44 taviso Exp $
+
+inherit eutils
+
+MY_P="${PN}${PV}"
+S=${WORKDIR}/${MY_P}
+DESCRIPTION="NVIDIA Overclocking Utility"
+HOMEPAGE="http://www.linuxhardware.org/nvclock/"
+SRC_URI="http://www.linuxhardware.org/nvclock/${MY_P}.tar.gz"
+
+LICENSE="GPL-2"
+SLOT="0"
+KEYWORDS="~x86"
+IUSE="gtk qt3"
+
+RDEPEND="virtual/libc
+	gtk? ( =x11-libs/gtk+-2* )
+	qt3? ( =x11-libs/qt-3* )"
+DEPEND="${RDEPEND}
+	sys-devel/autoconf"
+
+src_unpack() {
+	unpack ${A}
+	cd ${S}
+	epatch ${FILESDIR}/configure.in.diff
+	epatch ${FILESDIR}/callbacks.patch
+	epatch ${FILESDIR}/nvclock-insecure-tmp.diff
+}
+
+src_compile() {
+	mv configure.in configure.ac
+	./autogen.sh || die
+
+	# Needed to ensure it compiles against Qt3 rather than Qt4
+	export QTDIR=/usr/qt/3
+	export MOC=${QTDIR}/bin/moc
+
+	./configure $(use_enable qt3 qt) $(use_enable gtk) || die
+
+	make || die
+}
+
+src_install() {
+	dodir /usr/bin
+	einstall || die
+	dodoc AUTHORS README
+
+	newinitd ${FILESDIR}/nvclock_initd nvclock
+	newconfd ${FILESDIR}/nvclock_confd nvclock
+}
+
+pkg_postinst() {
+	elog "To enable card overclocking at startup, edit your /etc/conf.d/nvclock"
+	elog "accordingly and then run: rc-update add nvclock default"
+}