initial import

lasem/CVE-2013-7447.patch

@@ -0,0 +1,28 @@
+From 6f2feed780d9139a45c06e1ad399d06a4f351fbf Mon Sep 17 00:00:00 2001
+From: RyuzakiKK <aasonykk@gmail.com>
+Date: Sat, 5 Aug 2017 21:40:55 +0200
+Subject: cairo: Avoid integer overflow CVE-2013-7447
+
+lasem is affected by a possible integer overflow, that was also
+found and patched upstream in gtk+
+https://git.gnome.org/browse/gtk+/commit/?id=894b1ae76a32720f4bb3d39cf460402e3ce331d6
+---
+ src/lsmcairo.c | 2 +-
+ 1 file changed, 1 insertion(+), 1 deletion(-)
+
+diff --git a/src/lsmcairo.c b/src/lsmcairo.c
+index c568fd5..73fb93e 100644
+--- a/src/lsmcairo.c
++++ b/src/lsmcairo.c
+@@ -528,7 +528,7 @@ lsm_cairo_set_source_pixbuf (cairo_t *cairo,
+ 		format = CAIRO_FORMAT_ARGB32;
+ 
+ 	cairo_stride = cairo_format_stride_for_width (format, width);
+-	cairo_pixels = g_malloc (height * cairo_stride);
++	cairo_pixels = g_malloc_n (height, cairo_stride);
+ 	surface = cairo_image_surface_create_for_data ((unsigned char *)cairo_pixels,
+ 						       format,
+ 						       width, height, cairo_stride);
+-- 
+cgit v0.12
+

lasem/PKGBUILD

@@ -0,0 +1,40 @@
+# Maintainer: Jesus E. <heckyel@riseup.net>
+
+pkgname=lasem
+pkgver=0.4.4
+pkgrel=1
+pkgdesc='SVG and Mathml rendering library'
+arch=('i686' 'x86_64')
+url='https://wiki.gnome.org/Projects/Lasem'
+license=('GPL-2')
+depends=('gtk')
+makedepends=('intltool' 'python' 'gettext-tiny')
+options=('!libtool')
+source=(https://download.gnome.org/sources/$pkgname/${pkgver:0:3}/$pkgname-$pkgver.tar.xz
+        CVE-2013-7447.patch)
+sha512sums=('3f78f6892715b0aabc1c6b16b4ab45c00227fcbd155ebed6a1e84af907d1ce3934c0a9db3f0c25c5e52a092ab58442b9b18a027dbcaae15e5e6dbe8d0d085480'
+            '25f771fe5455c032198125eebd8acf3847db5fe7ddbc6261bfab3b3b586210cb507c6085ef562239787730e3b56411f31020fba8d189d3b0bdf3820a296caa42')
+
+prepare() {
+  cd $pkgname-$pkgver
+  patch -Np1 -i ../CVE-2013-7447.patch
+}
+
+build() {
+  cd $pkgname-$pkgver
+  ./configure --prefix=/usr --sysconfdir=/etc --localstatedir=/var \
+      --disable-static
+  make
+}
+
+package() {
+  cd $pkgname-$pkgver
+  make DESTDIR="$pkgdir" install
+  mv "$pkgdir/usr/doc" "$pkgdir/usr/share/doc"
+
+  # removing references towards gtk-doc
+  rm -rf "${pkgdir}"/usr/share/gtk-doc
+
+  # license
+  install -Dm644 COPYING -t "${pkgdir}/usr/share/licenses/$pkgname"
+}