Hello community,

here is the log from the commit of package pixman.1960 for openSUSE:12.2:Update 
checked in at 2013-09-09 14:08:17
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:12.2:Update/pixman.1960 (Old)
 and      /work/SRC/openSUSE:12.2:Update/.pixman.1960.new (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Package is "pixman.1960"

Changes:
--------
New Changes file:

--- /dev/null   2013-07-23 23:44:04.804033756 +0200
+++ /work/SRC/openSUSE:12.2:Update/.pixman.1960.new/pixman.changes      
2013-09-09 14:08:18.000000000 +0200
@@ -0,0 +1,350 @@
+-------------------------------------------------------------------
+Tue Aug 27 16:08:18 UTC 2013 - zai...@opensuse.org
+
+- Add pixman-cve-2013-1519.patch, fix stack-based buffer overflow
+  in libpixman has unspecified impact and attack vectors
+  (CVE-2013-1591) bnc#815064.
+
+-------------------------------------------------------------------
+Sat Jun  9 19:07:16 UTC 2012 - guilla...@opensuse.org
+
+- Fix ARM build:
+  + Disable iwmmxt since our ARM SoC does not support it.
+  + Add new armv7hl to armv7* 
+
+-------------------------------------------------------------------
+Thu Mar 22 14:24:37 UTC 2012 - jeng...@medozas.de
+
+- Parallel build with %_smp_mflags; remove redundant sections
+
+-------------------------------------------------------------------
+Thu Feb  9 08:51:13 UTC 2012 - vu...@opensuse.org
+
+- Update to version 0.24.4:
+  + Trapezoids that have gaps between the edges and the top/bottom
+    lines are no longer considered invalid.
+  + Basic support for using the NEON acceleration on iOS.
+
+-------------------------------------------------------------------
+Thu Jan 19 06:35:02 UTC 2012 - vu...@opensuse.org
+
+- Update to version 0.24.2:
+  + Runtime detection of ARM NEON on Android
+  + MMX build fix for Solaris
+  + Fix for broken gradients with repeat mode NONE
+  + Misc. other bug fixes.
+
+-------------------------------------------------------------------
+Mon Nov  7 19:33:55 UTC 2011 - johannesoberm...@gmx.de
+
+- Update to version 0.24.0:
+  + Faster bilinear scaling on SSE2 and ARM NEON
+  + Several new fast paths for ARM NEON
+  + Support for the iwMMXt vector instruction set
+  + Improved support for building with MSVC
+  + Large number of other optimizations, bug fixes, and internal
+    cleanups.
+
+------------------------------------------------------------------
+Tue May  3 09:56:06 CEST 2011 - vu...@opensuse.org
+
+- Update to version 0.22.0:
+  + New r8g8b8a8 and r8g8b8x8 image formats
+  + Much faster image scaling on ARM and x86
+  + Faster 90/270 degree image rotation
+  + More comprehensive support for compositing triangles and
+    trapezoids
+  + Large number of other performance improvements, bug and
+    portability fixes, and improvements to the test suite.
+
+-------------------------------------------------------------------
+Fri Feb 11 16:42:19 UTC 2011 - fcro...@novell.com
+
+- Update to version 0.20.2:
+  + Fix opacity check
+  + Improve handling of tangent circles
+  + Various bug fixes.
+  + Build fixes.
+
+-------------------------------------------------------------------
+Fri Oct 29 10:30:06 UTC 2010 - mrd...@opensuse.org
+
+- Update to 0.20.0
+  *http://lists.freedesktop.org/archives/pixman/2010-October/000694.html
+  * Gradient improvements
+   Radial gradients follow the PDF specification [Andrea Canciani]
+   Large linear gradients are rendered much more accurately [Andrea]
+   Conical gradients now work much better [Søren Sandmann Pedersen]
+
+  * Performance improvements
+   Faster image scaling [Siarhei Siamashka]
+   Faster affine transformations [Søren]
+   Improvements to the ARM NEON [Siarhei]
+   Improvements to the SSE2 backend [Siarhei, Søren]           
+   *Plus a large number of bug and portability fixes
+     and improvements to the test suite.
+
+-------------------------------------------------------------------
+Tue Aug 17 10:46:16 CEST 2010 - dims...@opensuse.org
+
+- Update to version 0.18.4:
+  + Fix memory leak in the pthreads thread local storage code
+  + When storing a g1 pixel, store the lowest bit, rather than
+    comparing with 0.
+  + If we bail out of do_composite, make sure to undo any
+    workarounds.
+  + Check for read accessors before taking the bilinear fast path
+
+-------------------------------------------------------------------
+Mon Jun 21 12:49:20 CEST 2010 - dims...@opensuse.org
+
+- Update to version 0.18.2:
+  + Add missing HAVE_CONFIG_H guards for config.h inclusion.
+  + Fix uninitialized cache when pthreads are used.
+  + Fixes for pthread thread local storage.
+  + [mmx] Fix mask creation bugs.
+
+-------------------------------------------------------------------
+Thu Apr  1 15:10:46 CEST 2010 - vu...@opensuse.org
+
+- Update to version 0.18.0:
+  + No code change, just a version bump for a stable release.
+
+-------------------------------------------------------------------
+Wed Mar 24 05:51:35 CET 2010 - vu...@opensuse.org
+
+- Update to version 0.17.14:
+  + Fixes for older ARM CPUs.
+
+-------------------------------------------------------------------
+Thu Mar 18 09:43:16 CET 2010 - dims...@opensuse.org
+
+- Update to version 0.17.12:
+  + Optimizations for rescaling with a nearest filter
+  + Overhead reduction by caching fast paths
+  + Constant time operator strength reduction
+  + Misc. bug fixes
+
+-------------------------------------------------------------------
+Sat Mar  6 16:54:39 CET 2010 - dims...@opensuse.org
+
+- Update to version 0.17.10:
+  + ARM: added 'neon_composite_over_n_8888_8888_ca' fast path
+  + ARM: added 'neon_composite_src_x888_8888' fast path
+  + ARM: added 'neon_composite_over_reverse_n_8888' fast path
+  + Compute the image flags at validation time instead of composite
+    time
+  + Add new FAST_PATH_SIMPLE_REPEAT flag
+  + Move computation of extended format code to validate.
+  + Eliminate _pixman_image_is_solid()
+  + Eliminate _pixman_image_is_opaque() in favor of a new
+    FAST_PATH_IS_OPAQUE
+  + Turn need_workaround into another flag.
+  + Move workaround code to pixman-image.c
+  + Restructure the flags computation in compute_image_info().
+  + test: Remove obsolete comment
+  + Move __force_align_arg_pointer workaround before composite32()
+
+
+-------------------------------------------------------------------
+Thu Feb 25 22:01:04 CET 2010 - captain.mag...@opensuse.org
+
+- Update to version 0.17.8:
+  + Once unrolled version of fast_path_composite_nearest_scaled() 
+  + Generalize and optimize fast_composite_src_scaled_nearest()
+  + Merge branch 'bitmasks' 
+  + Makefile.am: Remove 'check' from release-check 
+  + Turn off asserts in development snapshots (fdo#26314)
+  + ARM: Remove any use of environment variables for cpu features
+    detection
+  + Add pixman_image_get_destroy_data()
+  + Add extern "C" guards for c++
+  + Move checks for src/mask repeat right before walking the
+    region
+  + Compute src, mask, dest flags and base fast path decisions on
+    them
+  + Add src_, mask_, and dest_flags fields to fast path arrays
+  + Move calls to source_is_fastpathable() into
+    get_source_format()
+  + Fold get_fast_path() into _pixman_run_fast_path()
+  + Consolidate the source and mask sanity checks in a function
+  + Move pixbuf checks after src_format and mask_format have been
+    computed
+  + Move the sanity checks for src, mask and destination into
+    get_fast_path()
+  + Turn some uint16_t variables to int32_t in the fast paths
+  + Implement get_scanline_64() correctly for solid fill images
+  + Make pixman_image_fill_rectangles() call
+    pixman_image_fill_boxes()
+  + Add pixman_image_fill_boxes() API
+  + Add pixman_image_composite32()
+  + Make region argument to pixman_region(32)_init_rects() const
+  + Fix typo
+  + Fix some warnings
+
+-------------------------------------------------------------------
+Sun Feb 14 13:35:21 CET 2010 - vu...@opensuse.org
+
+- Update to version 0.17.6:
+  + Asserts are always turned off, so X server crashes in the
+    region code should be gone (fdo#26314).
+  + 32 bit versions of some existing API:
+    - pixman_fill_boxes32()
+    - pixman_image_composite_32()
+  + Add accessor for the destroy data:
+    pixman_image_get_destroy_data()
+  + Optimizations for scaled images 
+  + Some reorganisation of the fast path tables
++++ 153 more lines (skipped)
++++ between /dev/null
++++ and /work/SRC/openSUSE:12.2:Update/.pixman.1960.new/pixman.changes

New:
----
  baselibs.conf
  pixman-0.24.4.tar.gz
  pixman-cve-2013-1519.patch
  pixman.changes
  pixman.spec

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Other differences:
------------------
++++++ pixman.spec ++++++
#
# spec file for package pixman
#
# Copyright (c) 2013 SUSE LINUX Products GmbH, Nuernberg, Germany.
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
# upon. The license for this file, and modifications and additions to the
# file, is the same license as for the pristine package itself (unless the
# license for the pristine package is not an Open Source License, in which
# case the license is the MIT License). An "Open Source License" is a
# license that conforms to the Open Source Definition (Version 1.9)
# published by the Open Source Initiative.

# Please submit bugfixes or comments via http://bugs.opensuse.org/
#


Name:           pixman
Version:        0.24.4
Release:        0
Summary:        Pixel manipulation library
License:        MIT
Group:          System/Libraries
Url:            http://xorg.freedesktop.org/
Source:         http://cairographics.org/releases/%{name}-%{version}.tar.gz
Source99:       baselibs.conf
# PATCH-FIX-UPSTREAM pixman-cve-2013-1519.patch bnc#815064 CVE-2013-1591 
zai...@opensuse.org -- Fix Stack-based buffer overflow in libpixman has 
unspecified impact and attack vectors.
Patch0:         pixman-cve-2013-1519.patch
BuildRequires:  pkgconfig
BuildRoot:      %{_tmppath}/%{name}-%{version}-build

%description
Pixman is a pixel manipulation library for X and cairo.

%package -n libpixman-1-0
Summary:        Pixel manipulation library
Group:          System/Libraries

%description -n libpixman-1-0
Pixman is a pixel manipulation library for X and cairo.

%package -n libpixman-1-0-devel
Summary:        Pixel manipulation library - development files
Group:          Development/Libraries/X11
Requires:       libpixman-1-0 = %{version}

%description -n libpixman-1-0-devel
Pixman is a pixel manipulation library for X and cairo.

%prep
%setup -q
%patch0 -p1

%build
#autoreconf -fi
#
#Note about the ifarchs for arm: armv5 has no neon (like mmx on x86), but on 
armv7 neon is available on most boards.
# Thus make it possible to switch it on for v7 on its own.
# For now: disable neon on both
%configure \
%ifarch armv5el armv5tel
       --disable-arm-iwmmxt \
       --disable-arm-neon \
%endif
%ifarch armv7el armv7l armv7hl
       --disable-arm-iwmmxt \
       --disable-arm-neon \
%endif
       --disable-static
make V=1 %{?_smp_mflags}

%install
%makeinstall
rm %{buildroot}%{_libdir}/libpixman-1.la

%post -n libpixman-1-0 -p /sbin/ldconfig

%postun -n libpixman-1-0 -p /sbin/ldconfig

%files -n libpixman-1-0
%defattr(-,root,root)
%doc COPYING
%{_libdir}/libpixman-1.so.*

%files -n libpixman-1-0-devel
%defattr(-,root,root)
%{_includedir}/pixman-1
%{_libdir}/libpixman-1.so
%{_libdir}/pkgconfig/pixman-1.pc

%changelog
++++++ baselibs.conf ++++++
libpixman-1-0
++++++ pixman-cve-2013-1519.patch ++++++
>From de60e2e0e3eb6084f8f14b63f25b3cbfb012943f Mon Sep 17 00:00:00 2001
From: Søren Sandmann Pedersen <s...@redhat.com>
Date: Sat, 15 Sep 2012 07:13:09 +0000
Subject: Fix for infinite-loop test

The infinite loop detected by "affine-test 212944861" is caused by an
overflow in this expression:

    max_x = pixman_fixed_to_int (vx + (width - 1) * unit_x) + 1;

where (width - 1) * unit_x doesn't fit in a signed int. This causes
max_x to be too small so that this:

    src_width = 0

    while (src_width < REPEAT_NORMAL_MIN_WIDTH && src_width <= max_x)
        src_width += src_image->bits.width;

results in src_width being 0. Later on when src_width is used for
repeat calculations, we get the infinite loop.

By casting unit_x to int64_t, the expression no longer overflows and
affine-test 212944861 and infinite-loop no longer loop forever.
---
diff --git a/pixman/pixman-inlines.h b/pixman/pixman-inlines.h
index 5517de5..3a3c658 100644
--- a/pixman/pixman-inlines.h
+++ b/pixman/pixman-inlines.h
@@ -859,7 +859,7 @@ fast_composite_scaled_bilinear ## scale_func_name 
(pixman_implementation_t *imp,
     {                                                                          
                \
        vx = v.vector[0];                                                       
                \
        repeat (PIXMAN_REPEAT_NORMAL, &vx, 
pixman_int_to_fixed(src_image->bits.width));         \
-       max_x = pixman_fixed_to_int (vx + (width - 1) * unit_x) + 1;            
                \
+       max_x = pixman_fixed_to_int (vx + (width - 1) * (int64_t)unit_x) + 1;   
                \
                                                                                
                \
        if (src_image->bits.width < REPEAT_NORMAL_MIN_WIDTH)                    
                \
        {                                                                       
                \
--
cgit v0.9.0.2-2-gbebe
-- 
To unsubscribe, e-mail: opensuse-commit+unsubscr...@opensuse.org
For additional commands, e-mail: opensuse-commit+h...@opensuse.org

Reply via email to