From: Tobias Geerinckx-Rice Date: Thu, 28 Feb 2019 20:29:00 +0100 Subject: [PATCH] netpbm: Fix CVE-2017-2587. Copied verbatim from Debian[0]. [0]: https://sources.debian.org/data/main/n/netpbm-free/2:10.78.05-0.1/debian/patches/netpbm-CVE-2017-2587.patch --- diff -urNp old/converter/other/svgtopam.c new/converter/other/svgtopam.c --- old/converter/other/svgtopam.c 2017-02-08 12:11:02.593690917 +0100 +++ new/converter/other/svgtopam.c 2017-02-08 13:49:38.319029371 +0100 @@ -771,12 +771,17 @@ createCanvas(unsigned int const width, MALLOCVAR_NOFAIL(canvasP); - canvasP->width = width; - canvasP->height = height; - canvasP->pixels = ppm_allocarray(width, height); - canvasP->maxval = maxval; + if(canvasP != NULL){ + canvasP->width = width; + canvasP->height = height; + canvasP->pixels = ppm_allocarray(width, height); + canvasP->maxval = maxval; + + *canvasPP = canvasP; + } else { + pm_error("can't allocate memory for canvas"); + } - *canvasPP = canvasP; } '/guix/'>summaryrefslogtreecommitdiff
path: root/.guix-authorizations
ace of 'if ...; then false; else true; fi'
AgeCommit message (Expand)Author
2022-08-11.guix-authorizations: Authorize Andrew Tropin's subkey instead....Addresses <https://issues.guix.gnu.org/57091> for now. * .guix-authorizations (abcdw): Use signing subkey instead of primary. Tobias Geerinckx-Rice
2022-08-05.git-authorizations: Authorize Andrew Tropin....* .git-authorizations (abcdw): Add OpenPGP key fingerprint. Efraim Flashner
Eric Bavier
2020-05-23guix package: Support multiple profiles with '--list-installed'....* guix/scripts/package.scm (process-query): List installed multiple profiles. * tests/guix-package-net.sh: Test it. Signed-off-by: Ludovic Courtès <ludo@gnu.org> zimoun
2019-06-14tests: Make builds less expensive....The switch to the reduced bootstrap broke build time assumptions made by tests, notably the assumption that GNU-MAKE-BOOT0 was cheap to build. This commit adjusts this to make these tests cheaper. * gnu/packages/bootstrap.scm (%bootstrap-inputs-for-tests): New variable. * guix/tests.scm (gnu-make-for-tests): New variable. * tests/guix-environment.sh: Use GNU-MAKE-FOR-TESTS instead of GNU-MAKE-BOOT0. Remove test with FINDUTILS-BOOT0. * tests/guix-package-net.sh (boot_make): Use GNU-MAKE-FOR-TESTS. * tests/packages.scm ("GNU Make, bootstrap"): Likewise. * tests/profiles.scm ("profile-derivation relative symlinks, two entries"): Likewise. * tests/union.scm (%bootstrap-inputs): Remove. ("union-build"): Use %BOOTSTRAP-INPUTS-FOR-TESTS instead of %BOOTSTRAP-INPUTS. Ludovic Courtès
2019-01-15guix package: '--upgrade' preserves package order....Fixes <https://bugs.gnu.org/31142>. Reported by Chris Marusich <cmmarusich@gmail.com>. * guix/scripts/package.scm (options->installable)[upgraded]: Use 'fold' instead of 'fold-right'. This reverts eca16a3d1d9e6b2c064e0105c1015258bf2755f2. * tests/guix-package-net.sh: Add 'guix package u' test. Ludovic Courtès
2017-06-02tests: Remove 't-profile-alt-*-link' files....Reported by myglc2 <myglc2@gmail.com> at <https://debbugs.gnu.org/cgi/bugreport.cgi?bug=27137#11>. * tests/guix-package-net.sh: In the trap, remove $profile_alt-[0-9]*. Ludovic Courtès
2017-01-23guix package: Honor the order of profiles when -p appears multiple times....* guix/scripts/package.scm (process-query): Reverse the order of PROFILES. * tests/guix-package-net.sh: Test it with '--search-paths'. Ludovic Courtès
2015-11-11guix package: '--search-paths' can report combined search paths....Partly fixes <http://bugs.gnu.org/20255>. * guix/scripts/package.scm (search-path-environment-variables): Change 'profile' to 'profiles'; expect it to be a list. (display-search-paths): Likewise. (%default-options): Remove 'profile' entry. (%options) <--profile>: Keep previous values associated with 'profile' in RESULT. (guix-package)[process-actions, process-query]: Handle the possible lack of 'profile' pair in OPTS. Ludovic Courtès