Fix security bug 113683, CVE-2005-3863, a stack-based buffer overflow in kkstrtext.h in ktools library and stabilize amd64.

Package-Manager: portage-2.1.3.18
RepoMan-Options: --force

1 files changed, 55 insertions, 0 deletions

diff --git a/media-sound/orpheus/orpheus-1.6-r1.ebuild b/media-sound/orpheus/orpheus-1.6-r1.ebuild
new file mode 100644
index 000000000000..7cfa792de848
--- /dev/null
+++ b/media-sound/orpheus/orpheus-1.6-r1.ebuild
@@ -0,0 +1,55 @@
+# Copyright 1999-2007 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/media-sound/orpheus/orpheus-1.6-r1.ebuild,v 1.1 2007/11/06 21:13:59 drac Exp $
+
+WANT_AUTOCONF=2.5
+WANT_AUTOMAKE=1.8
+
+inherit eutils autotools
+
+DESCRIPTION="Command line MP3 player."
+HOMEPAGE="http://konst.org.ua/en/orpheus"
+SRC_URI="http://konst.org.ua/download/${P}.tar.gz"
+
+LICENSE="GPL-2"
+SLOT="0"
+KEYWORDS="~alpha amd64 ~ppc ~sparc ~x86"
+IUSE="cddb"
+
+DEPEND=">=sys-libs/ncurses-5.2
+	>=media-libs/libvorbis-1.0_beta1
+	virtual/mpg123
+	cddb? ( gnome-base/libghttp )
+	media-sound/vorbis-tools"
+
+src_unpack() {
+	unpack ${A}
+	cd "${S}"
+
+	epatch "${FILESDIR}/1.5-amd64.patch"
+
+	# Fix a stack-based buffer overflow in kkstrtext.h in ktools library.
+	# Bug 113683, CVE-2005-3863.
+	epatch "${FILESDIR}"/101_fix-buffer-overflow.diff
+
+	# configures generated by different autoconf versions
+	# cause problems when calling econf
+	cd "${S}/kkstrtext-0.1"
+	eautoreconf
+	cd "${S}/kkconsui-0.1"
+	eautoreconf
+
+	# force not using deprecated libghttp
+	cd "${S}"
+	use cddb || epatch "${FILESDIR}/${P}-nolibghttp.patch"
+}
+
+src_compile() {
+	econf || die "configure failed"
+	emake || die "emake failed"
+}
+
+src_install() {
+	emake DESTDIR="${D}" install || die "make install failed"
+	dodoc AUTHORS ChangeLog NEWS README TODO
+}