Fix CVE-2016-5296: Heap-buffer-overflow WRITE in rasterize_edges_1
Adapted for upstream pixman based on:

  https://hg.mozilla.org/releases/mozilla-esr45/rev/5e39c1c2fded

--- pixman-0.34.0/pixman/pixman-edge-imp.h.orig	2015-06-30 05:48:31.000000000 -0400
+++ pixman-0.34.0/pixman/pixman-edge-imp.h	2016-11-16 01:09:34.046335106 -0500
@@ -55,8 +55,9 @@
 	 *
 	 * (The AA case does a similar  adjustment in RENDER_SAMPLES_X)
 	 */
-	lx += X_FRAC_FIRST(1) - pixman_fixed_e;
-	rx += X_FRAC_FIRST(1) - pixman_fixed_e;
+	/* we cast to unsigned to get defined behaviour for overflow */
+	lx = (unsigned)lx + X_FRAC_FIRST(1) - pixman_fixed_e;
+	rx = (unsigned)rx + X_FRAC_FIRST(1) - pixman_fixed_e;
 #endif
 	/* clip X */
 	if (lx < 0)
ubmit();'>
<option value='koszko' selected='selected'>koszko</option>
<option value='koszko-scripts'>koszko-scripts</option>
</select> <input type='submit' value='switch'/></form></td></tr>
<tr><td class='sub'>Wojtek's customized Guix</td><td class='sub right'></td></tr></table>
<table class='tabs'><tr><td>
<a href='/guix/about/'>about</a><a href='/guix/'>summary</a><a href='/guix/refs/?id=61560d4bef05711db86320794437e1b261f4b5aa'>refs</a><a class='active' href='/guix/log/tests/guix-build-branch.sh'>log</a><a href='/guix/tree/tests/guix-build-branch.sh?id=61560d4bef05711db86320794437e1b261f4b5aa'>tree</a><a href='/guix/commit/tests/guix-build-branch.sh?id=61560d4bef05711db86320794437e1b261f4b5aa'>commit</a><a href='/guix/diff/tests/guix-build-branch.sh?id=61560d4bef05711db86320794437e1b261f4b5aa'>diff</a></td><td class='form'><form class='right' method='get' action='/guix/log/tests/guix-build-branch.sh'>
<input type='hidden' name='id' value='61560d4bef05711db86320794437e1b261f4b5aa'/><select name='qt'>
<option value='grep'>log msg</option>
<option value='author'>author</option>
<option value='committer'>committer</option>
<option value='range'>range</option>
</select>
<input class='txt' type='search' size='10' name='q' value=''/>
<input type='submit' value='search'/>
</form>
</td></tr></table>
<div class='path'>path: <a href='/guix/log/?id=61560d4bef05711db86320794437e1b261f4b5aa'>root</a>/<a href='/guix/log/tests?id=61560d4bef05711db86320794437e1b261f4b5aa'>tests</a>/<a href='/guix/log/tests/guix-build-branch.sh?id=61560d4bef05711db86320794437e1b261f4b5aa'>guix-build-branch.sh</a></div><div class='content'><table class='list nowrap'><tr class='nohover'><th class='left'>Age</th><th class='left'>Commit message (<a href='/guix/log/tests/guix-build-branch.sh?id=61560d4bef05711db86320794437e1b261f4b5aa&amp;showmsg=1'>Expand</a>)</th><th class='left'>Author</th></tr>
<tr><td><span title='2020-04-04 18:52:36 +0200'>2020-04-04</span></td><td><a href='/guix/commit/tests/guix-build-branch.sh?id=3cea55078857ecd8ca67fd7cf4eaebb13fb6d9d3'>tests: Adjust '--with-commit' test for tags.</a><span class='msg-avail'>...<span class='msg-tooltip'>This is a followup to efa578ecaece67366b4b0e2266de7c2faaa4ae54.

* tests/guix-build-branch.sh: Adjust '--with-commit=guile-gcrypt=v0.1.0'
test to expect the tag ID rather than the commit ID.
</span></span></td><td>Ludovic Courtès</td></tr>
<tr><td><span title='2019-09-04 13:02:27 +0200'>2019-09-04</span></td><td><a href='/guix/commit/tests/guix-build-branch.sh?id=3c82f1254116be2a9216b7c7e5e8c001ff486270'>tests: Adjust '--with-commit' test.</a><span class='msg-avail'>...<span class='msg-tooltip'>This is a followup to 4d04bc50d2df32be326e0f48f378dc581f873989.

* tests/guix-build-branch.sh: Expect "v0.1.0" to lead to
"guile-gcrypt-0.1.0".
</span></span></td><td>Ludovic Courtès</td></tr>
<tr><td><span title='2019-07-26 11:21:36 +0200'>2019-07-26</span></td><td><a href='/guix/commit/tests/guix-build-branch.sh?id=10a8c2bbc6754bddb0e5d668b3ecc9050efd820b'>git: 'switch-to-ref' resolves tag targets.</a><span class='msg-avail'>...<span class='msg-tooltip'>* guix/git.scm (switch-to-ref): In the 'tag' case, resolve the target of
the tag.
* tests/guix-build-branch.sh: Adjust test accordingly.
</span></span></td><td>Ludovic Courtès</td></tr>
<tr><td><span title='2019-07-26 11:21:36 +0200'>2019-07-26</span></td><td><a href='/guix/commit/tests/guix-build-branch.sh?id=177fecb57c0c9e15249bf6a49244c9dc6eb8439c'>git: &lt;git-checkout&gt; allows tags in its 'commit' field.</a><span class='msg-avail'>...<span class='msg-tooltip'>Fixes &lt;https://bugs.gnu.org/36371&gt;.
Reported by Tobias Geerinckx-Rice &lt;me@tobias.gr&gt;.

* guix/git.scm (git-checkout-compiler): Pass 'tag-or-commit' to
'latest-repository-commit*'.
* doc/guix.texi (Package Transformation Options): Update '--with-commit'
documentation accordingly.
* tests/guix-build-branch.sh: Add test.
</span></span></td><td>Ludovic Courtès</td></tr>
<tr><td><span title='2018-11-30 17:03:04 +0100'>2018-11-30</span></td><td><a href='/guix/commit/tests/guix-build-branch.sh?id=a3d77c51bc8f641c12989e18dc5e03add776f87e'>git: Nicely report '--with-commit' errors.</a><span class='msg-avail'>...<span class='msg-tooltip'>* guix/git.scm (latest-repository-commit*): Rewrite to catch
'git-error'.
* po/guix/POTFILES.in: Add guix/git.scm.
* tests/guix-build-branch.sh: Test --with-commit errors.
</span></span></td><td>Ludovic Courtès</td></tr>
<tr><td><span title='2018-11-30 17:03:04 +0100'>2018-11-30</span></td><td><a href='/guix/commit/tests/guix-build-branch.sh?id=b18f7234aac9eb42097c1b4cda7efe0be5aab132'>guix build: Add '--with-commit'.</a><span class='msg-avail'>...<span class='msg-tooltip'>* guix/git.scm (&lt;git-checkout&gt;)[commit]: New field.
(git-checkout-compiler): Honor it.
* guix/scripts/build.scm (evaluate-git-replacement-specs): Add 'proc'
parameter and honor it.
(transform-package-source-branch)[replace]: New procedure.
Adjust 'evaluate-git-replacement-specs' accordingly.
(transform-package-source-commit): New procedure.
(%transformations, %transformation-options)
(show-transformation-options-help): Add 'with-commit'.
* tests/guix-build-branch.sh: Add test.
* doc/guix.texi (Package Transformation Options): Document it.
</span></span></td><td>Ludovic Courtès</td></tr>
<tr><td><span title='2018-11-30 17:03:04 +0100'>2018-11-30</span></td><td><a href='/guix/commit/tests/guix-build-branch.sh?id=96915a448cfe8383a1c47f4b9a1cc810e5161fd0'>guix build: Add '--with-branch' transformation option.</a><span class='msg-avail'>...<span class='msg-tooltip'>* guix/scripts/build.scm (evaluate-git-replacement-specs)
(transform-package-source-branch): New procedures.
(%transformations, %transformation-options): Add 'with-branch'.
(show-transformation-options-help): Likewise.
* tests/guix-build-branch.sh: New file.
* Makefile.am (SH_TESTS): Add it.
* doc/guix.texi (Package Transformation Options): Document it.
</span></span></td><td>Ludovic Courtès</td></tr>