commit usbmuxd for openSUSE:11.4

2012-02-23 Thread h_root

Hello community,

here is the log from the commit of package usbmuxd for openSUSE:11.4
checked in at Thu Feb 23 12:11:24 CET 2012.




--- old-versions/11.4/UPDATES/all/usbmuxd/usbmuxd.changes   2011-03-24 
17:51:17.0 +0100
+++ 11.4/usbmuxd/usbmuxd.changes2012-02-21 20:48:42.0 +0100
@@ -1,0 +2,7 @@
+Tue Feb 21 18:48:59 UTC 2012 - sts...@suse.com
+
+- CVE-2012-0065.patch fixes recieve_packet() 
+  Buffer overflow vulnerability CVE-2012-0065
+  (bnc#742546)
+
+---

calling whatdependson for 11.4-i586


New:

  CVE-2012-0065.patch



Other differences:
--
++ usbmuxd.spec ++
--- /var/tmp/diff_new_pack.5pEsBs/_old  2012-02-23 12:10:44.0 +0100
+++ /var/tmp/diff_new_pack.5pEsBs/_new  2012-02-23 12:10:44.0 +0100
@@ -1,7 +1,7 @@
 #
 # spec file for package usbmuxd
 #
-# Copyright (c) 2011 SUSE LINUX Products GmbH, Nuernberg, Germany.
+# Copyright (c) 2012 SUSE LINUX Products GmbH, Nuernberg, Germany.
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -20,12 +20,14 @@
 Name:   usbmuxd
 %define _libname   libusbmuxd
 Version:1.0.7
-Release:3.
-License:LGPL v2.1 or GPL v2
+Release:3.
 Summary:Socket daemon for the usbmux protocol of iPhone/iPod Touch 
devices
-Url:http://git.marcansoft.com/?p=usbmuxd.git
+License:LGPL-2.1 or GPL-2.0
 Group:  System/Libraries
+Url:http://git.marcansoft.com/?p=usbmuxd.git
 Source: %{name}-%{version}.tar.bz2
+# PATCH-FIX-UPSTREAM bnc742546 CVE-2012-0065.patch sts...@suse.com -- Taken 
from usbmuxd.git
+Patch0: CVE-2012-0065.patch
 BuildRequires:  cmake
 BuildRequires:  gcc-c++
 BuildRequires:  libplist-devel
@@ -45,7 +47,6 @@
 %package -n %{_libname}1
 
 
-License:LGPL v2.1 or GPL v2
 Summary:A library to abstract socket/protocol communication to the 
usbmuxd daemon
 Group:  System/Libraries
 Requires:   %{name}
@@ -69,7 +70,7 @@
 developing applications that use %{_libname}.
 
 %package -n iproxy
-License:LGPL v2.1 or GPL v2
+
 Summary:Proxy enabling TCP tunneling to iPhone/iPod Touch via USB cable
 Group:  System/Libraries
 Requires:   %{_libname} = %{version}
@@ -86,6 +87,7 @@
 
 %prep
 %setup -q
+%patch0 -p1
 
 %build
 mkdir build

++ CVE-2012-0065.patch ++
Index: usbmuxd-1.0.7/libusbmuxd/libusbmuxd.c
===
--- usbmuxd-1.0.7.orig/libusbmuxd/libusbmuxd.c
+++ usbmuxd-1.0.7/libusbmuxd/libusbmuxd.c
@@ -189,7 +189,7 @@ static int receive_packet(int sfd, struc
char *strval = NULL;
plist_get_string_val(n, &strval);
if (strval) {
-   strcpy(dev->serial_number, strval);
+   strncpy(dev->serial_number, strval, 
255);
free(strval);
}
n = plist_dict_get_item(props, "LocationID");
continue with "q"...



Remember to have fun...

-- 
To unsubscribe, e-mail: opensuse-commit+unsubscr...@opensuse.org
For additional commands, e-mail: opensuse-commit+h...@opensuse.org



commit usbmuxd for openSUSE:11.4

2011-04-08 Thread h_root

Hello community,

here is the log from the commit of package usbmuxd for openSUSE:11.4
checked in at Fri Apr 8 23:29:57 CEST 2011.




--- old-versions/11.4/all/usbmuxd/usbmuxd.changes   2010-12-09 
01:05:06.0 +0100
+++ 11.4/usbmuxd/usbmuxd.changes2011-03-24 17:51:17.0 +0100
@@ -1,0 +2,13 @@
+Thu Mar 24 17:45:01 CEST 2011 - opens...@sukimashita.com
+
+- Create and use "usbmux" user in %pre to fix bno#679159
+
+---
+Thu Mar 24 11:25:01 CEST 2011 - opens...@sukimashita.com
+
+- Update to version 1.0.7
+  * Detect iPad 2 and upcoming next generation iPhone devices
+  * Fix support for ancient devices running iOS 1.x
+  * Optionally use inotify instead of polling to safe energy
+
+---

Package does not exist at destination yet. Using Fallback 
old-versions/11.4/all/usbmuxd
Destination is old-versions/11.4/UPDATES/all/usbmuxd
calling whatdependson for 11.4-i586


Old:

  _service:download_url:usbmuxd-1.0.6.tar.bz2

New:

  _service:download_url:usbmuxd-1.0.7.tar.bz2



Other differences:
--
++ usbmuxd.spec ++
--- /var/tmp/diff_new_pack.JEuC73/_old  2011-04-08 23:29:13.0 +0200
+++ /var/tmp/diff_new_pack.JEuC73/_new  2011-04-08 23:29:13.0 +0200
@@ -1,7 +1,7 @@
 #
-# spec file for package usbmuxd (Version 1.0.6)
+# spec file for package usbmuxd
 #
-# Copyright (c) 2010 SUSE LINUX Products GmbH, Nuernberg, Germany.
+# Copyright (c) 2011 SUSE LINUX Products GmbH, Nuernberg, Germany.
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -19,8 +19,8 @@
 
 Name:   usbmuxd
 %define _libname   libusbmuxd
-Version:1.0.6
-Release:2
+Version:1.0.7
+Release:3.
 License:LGPL v2.1 or GPL v2
 Summary:Socket daemon for the usbmux protocol of iPhone/iPod Touch 
devices
 Url:http://git.marcansoft.com/?p=usbmuxd.git
@@ -32,6 +32,7 @@
 BuildRequires:  libusb-1_0-devel >= 1.0.3
 BuildRequires:  pkg-config
 BuildRequires:  udev
+Requires(pre):  pwdutils
 BuildRoot:  %{_tmppath}/%{name}-%{version}-build
 
 %description
@@ -79,6 +80,10 @@
 It allows you to map a port of a service running on the device (like sshd) and
 redirect it to your local machine where you can interact with it.
 
+%pre
+getent passwd usbmux >/dev/null || useradd -r -g nogroup -d /var/lib/%{name} 
-s /sbin/nologin -c "%{name} daemon" usbmux
+exit 0
+
 %prep
 %setup -q
 
@@ -105,6 +110,8 @@
 %install
 cd build
 %{__make} install DESTDIR=%{buildroot}
+# make sure the device gets owned by the usbmux user
+sed -i 's@RUN+="/usr/sbin/usbmuxd -u -U usbmux"@OWNER="usbmux", 
RUN+="/usr/sbin/usbmuxd -u -U usbmux"@' 
%{buildroot}/lib/udev/rules.d/85-usbmuxd.rules
 
 %clean
 rm -rf %{buildroot}

++ _service ++
--- /var/tmp/diff_new_pack.JEuC73/_old  2011-04-08 23:29:13.0 +0200
+++ /var/tmp/diff_new_pack.JEuC73/_new  2011-04-08 23:29:13.0 +0200
@@ -1,7 +1,7 @@
 
   
-marcansoft.com
-http
-/uploads/usbmuxd/usbmuxd-1.0.6.tar.bz2
-  
+
+
+
+  marcansoft.com/uploads/usbmuxd/usbmuxd-1.0.7.tar.bz2http
 
\ No newline at end of file

++ _service:download_url:usbmuxd-1.0.6.tar.bz2 -> 
_service:download_url:usbmuxd-1.0.7.tar.bz2 ++
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' old/usbmuxd-1.0.6/Modules/FindInotify.cmake 
new/usbmuxd-1.0.7/Modules/FindInotify.cmake
--- old/usbmuxd-1.0.6/Modules/FindInotify.cmake 1970-01-01 01:00:00.0 
+0100
+++ new/usbmuxd-1.0.7/Modules/FindInotify.cmake 2011-03-15 12:35:15.0 
+0100
@@ -0,0 +1,11 @@
+set(INOTIFY_H "NOTFOUND")
+find_file(INOTIFY_H
+  "sys/inotify.h"
+  PATHS ENV INCLUDE
+)
+
+if (INOTIFY_H)
+  set(INOTIFY_FOUND TRUE)
+else()
+  set(INOTIFY_FOUND FALSE)
+endif()
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' old/usbmuxd-1.0.6/daemon/usb-linux.c 
new/usbmuxd-1.0.7/daemon/usb-linux.c
--- old/usbmuxd-1.0.6/daemon/usb-linux.c2010-09-28 03:32:44.0 
+0200
+++ new/usbmuxd-1.0.7/daemon/usb-linux.c2011-03-15 12:35:15.0 
+0100
@@ -334,16 +334,23 @@
usbmuxd_log(LL_WARNING, "Endpoint count 
mismatch for interface %d of device %d-%d", intf->bInterfaceNumber, bus, 
address);
continue;
}
-   if((intf->endpoint[0].bEndpointAddress & 0x80) != 
LIBUSB_ENDPOINT_OUT ||
-  (intf->endpoint[1].bEndpointAddress & 0x80) != 
LIBUSB_ENDPOINT_IN) {
+   if((intf->endpoint[0].bEndpointAddress & 0x80) == 
LIBUSB_ENDPOINT_OUT &&
+  (intf->endpoint[1].bEndpointAdd