Bugzilla Bug 147285

config.status: creating pygobject-2.0.pc
config.status: creating docs/Makefile
config.status: creating docs/reference/entities.docbook
config.status: creating docs/xsl/fixxref.py
config.status: creating gobject/Makefile
config.status: creating examples/Makefile
config.status: creating tests/Makefile
config.status: creating PKG-INFO
config.status: creating config.h
config.status: executing depfiles commands
autom4te-2.60: cannot create `pwd`/pygobject-2.12.1/am4t1391.31117: No such
file or directory
 at /usr/bin/autom4te-2.60 line 942
automake-1.8: autoconf failed with exit status: 1
make: *** [Makefile.in] Fel 1

!!! ERROR: dev-python/pygobject-2.12.1 failed.
Call stack:
  ebuild.sh, line 1546:   Called dyn_compile
  ebuild.sh, line 937:   Called src_compile
  ebuild.sh, line 1255:   Called gnome2_src_compile
  gnome2.eclass, line 64:   Called die

!!! compile failure
!!! If you need support, post the topmost build error, and the call stack if
relevant.


###

Gentoo Base System version 1.12.4
Portage 2.1.1 (default-linux/x86/2006.1/desktop, gcc-4.1.1/vanilla,
glibc-2.4.90.20060805-r1, 2.6.17-gentoo-r7 i686)
=================================================================
System uname: 2.6.17-gentoo-r7 i686 Intel(R) Pentium(R) 4 CPU 2.80GHz
Last Sync: Tue, 12 Sep 2006 07:50:02 +0000
distcc 2.18.3 i686-pc-linux-gnu (protocols 1 and 2) (default port 3632)
[disabled]
ccache version 2.4 [enabled]
app-admin/eselect-compiler: 2.0.0_rc2-r1
dev-lang/python:     2.4.3-r3
dev-python/pycrypto: 2.0.1-r5
dev-util/ccache:     2.4-r2
dev-util/confcache:  [Not Present]
sys-apps/sandbox:    1.2.18.1
sys-devel/autoconf:  2.13, 2.60
sys-devel/automake:  1.4_p6, 1.5, 1.6.3, 1.7.9-r1, 1.8.5-r3, 1.9.6-r2
sys-devel/binutils:  2.17.50.0.3
sys-devel/gcc-config: 2.0.0_rc1
sys-devel/libtool:   1.5.22
virtual/os-headers:  2.6.17
ACCEPT_KEYWORDS="x86 ~x86"
AUTOCLEAN="yes"
CBUILD="i686-pc-linux-gnu"
CFLAGS="-march=pentium4 -pipe -O3 -fomit-frame-pointer"
CHOST="i686-pc-linux-gnu"
CONFIG_PROTECT="/etc /usr/share/X11/xkb"
CONFIG_PROTECT_MASK="/etc/env.d /etc/env.d/java/ /etc/eselect/compiler
/etc/gconf /etc/java-config/vms/ /etc/revdep-rebuild /etc/splash /etc/terminfo
/etc/texmf/web2c"
CXXFLAGS="-march=pentium4 -pipe -O3 -fomit-frame-pointer
-fvisibility-inlines-hidden"
DISTDIR="/usr/portage/distfiles"
EMERGE_DEFAULT_OPTS=""
FEATURES="autoconfig ccache distlocks parallel-fetch sandbox sfperms splitdebug
strict userfetch userpriv usersandbox"
GENTOO_MIRRORS="ftp://ftp.csbnet.se/pub/linux/distributions/gentoo/
http://trumpetti.atm.tut.fi/gentoo/ http://pandemonium.tiscali.de/pub/gentoo/
http://mirror.pudas.net/gentoo"
LANG="sv"
LC_ALL="sv_SE.UTF-8"
LDFLAGS="-Wl,-O1 -Wl,--as-needed -Wl,--hash-style=both"
LINGUAS="sv_SE"
MAKEOPTS="-j5"
PKGDIR="/usr/portage/packages"
PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --compress
--force --whole-file --delete --delete-after --stats --timeout=180
--exclude='/distfiles' --exclude='/local' --exclude='/packages'"
PORTAGE_TMPDIR="/var/tmp"
PORTDIR="/usr/portage"
PORTDIR_OVERLAY="/usr/local/overlays/portage
/usr/portage/local/layman/portage-xgl /usr/portage/local/layman/liferea_overlay
/usr/portage/local/layman/nxsty /usr/portage/local/layman/musicbrainz"
SYNC="rsync://rsync.europe.gentoo.org/gentoo-portage"
USE="x86 X a52 aac acpi alsa asf audioscrobbler avi bash bash-completion beagle
berkdb bitmap-fonts boost branding browserplugin bzip2 cairo canvas cdr cli
crypt cups curl dbus dlloader dmx dpms dri dvd dvdr eds elibc_glibc emboss
encode evolution fam fat firefox flac fortran freetype gd gdbm gif glibc-omitfp
glitz gmp gnome gnome-firefox gnutls gpm gstreamer gtk gtk2 gtkhtml gxl hal
howl-compat icu idn inotify input_devices_evdev input_devices_keyboard
input_devices_mouse ipv6 irmc isdnlog ithreads java jikes joystick jpeg
kernel_linux lcms ldap libclamav libg++ libnotify libsexy linguas_sv_SE
lm_sensors logrotate lx700 mad matroska mikmod mmx mng mono moznocompose
moznoirc moznomail mp3 mpeg musepack musicbrainz nautilus ncurses network nls
nptl nptlonly ntfs ntp numeric nvtv offensive ogg opengl pam pcre pdf pdflib
perl pic png ppds pppd print pulseaudio python quicktime readline real
reflection reiser4 reiserfs rtc samba sdl session smp sox spell spf spl sse
sse2 ssh ssl startup-notification svg symlink syslog tagwriting tcltk tcpd
tetex theora threads tiff truetype truetype-fonts type1-fonts udev unicode usb
userland_GNU userlocales utf8 video_cards_none video_cards_nvidia vorbis
win32codecs wma wmf wv wxwindows xcomposite xinerama xinetd xml xml2 xorg xosd
xprint xv xvid zlib"
Unset:  CTARGET, INSTALL_MASK, PORTAGE_RSYNC_EXTRA_OPTS

As I didn't add this version and the package should belong to gnome anyway,
reassigning. =)

Upstream released it 4 hours ago, guess I'll bump in the tree.

X.Org Security Advisory, September 12, 2006
Integer overflows in handling CID encoded Type1 fonts
CVE-ID: 2006-3739, 2006-3740

Overview

It may be possible for a user with the ability to set the X server
font path, by making it point to a malicious font, to cause
arbitrary code execution or denial of service on the X server.

Vulnerability details

The lack of validation of input data while parsing CID encoded Type1
fonts in the "type1" module may cause some integer overflows while
computing the size of allocated data buffers when parsing a
font. Arbitrary code embedded in the malicious font can then be
executed by the X server.

To exploit these vulnerabilities, the ability to connect to the X server
in order to execute 'xset fp+' or the equivalent is required.

CVE-ID 2006-3740 describes a vulnerability in the scan_cidfont()
function in Type1/scanfont.c, while CVE ID 2006-3739 describes similar
problems in the CIDADM() function in Type1/afm.c.

Affected versions

All X servers using the "type1" font module with CID font support are
vulnerable to this issue. This includes all X.Org versions from 6.7.0
to 7.1 inclusive. Older versions are not supported by X.Org.

Workaround

If no CID-encoded Type 1 fonts are used, the "type1" module can be
disabled and replaced by the "freetype" module in /etc/X11/xorg.conf.
The freetype module is able to use Type1 fonts with standard (non CID)
encoding as well as True Type fonts.

Also, systems with memory address space randomization are less likely
to be successfully compromised, as the most effective way to exploit
these vulnerabilities rely on fixed address space.

Fix

These issues have been fixed in libXfont 1.2.1

Woops my bad, totally wrong bug.

Created an attachment (id=96832) [edit]
pygobject.2.12.1.ebuild

I've got the same problem. I'll fix this problem temporary with the attached
ebuild.

Diff to previous ebuild (to easy se the differences)?

Soren: do you have to have the src_compile() part to make it work fully? For me
it compiles and seems to work just by this modification of the ebuild:

@@ -27,13 +27,24 @@
 }

 src_unpack() {
-       gnome2_src_unpack
+       #gnome2_src_unpack
+       unpack ${A}
+       cd ${S}

Created an attachment (id=97042) [edit]
pygobject-2.12.1.ebuild patch

I added "eautomake" on src_unpack and it builded fine.

I'm not sure how this kind of an error could happen, nor how eautomake would
fix it, but please test (everyone who was affected) that 2.12.1 still fails for
you with your current building tools versions, and then check if 2.12.2 update
remedies that.
Be sure to not use an ebuild from the many overlays listed in your
PORTDIR_OVERLAY.
Thanks!

(In reply to comment #9)
> I'm not sure how this kind of an error could happen, nor how eautomake would
> fix it, but please test (everyone who was affected) that 2.12.1 still fails for
> you with your current building tools versions, and then check if 2.12.2 update
> remedies that.
> Be sure to not use an ebuild from the many overlays listed in your
> PORTDIR_OVERLAY.
> Thanks!
> 

For me I have this problem (both 2.12.1 and 2.12.2), only if I use for
/var/tmp/portage a "tmpfs" filesystem, anyway this is the output of 2.12.2 with
tmpfs, using another filesystem on /var/tmp/portage all works fine.

---------------- emerge output
checking for python module thread... yes
checking whether to enable threading in pygobject... yes
checking for pkg-config... /usr/bin/pkg-config
checking for GLIB - version >= 2.8.0... yes (version 2.12.4)
checking whether i686-pc-linux-gnu-gcc understands -Wall... yes
checking whether i686-pc-linux-gnu-gcc understands -std=c9x... yes
checking whether i686-pc-linux-gnu-gcc understands -fno-strict-aliasing... yes
configure: creating ./config.status
config.status: creating Makefile
config.status: creating pygobject-2.0.pc
config.status: creating docs/Makefile
config.status: creating docs/reference/entities.docbook
config.status: creating docs/xsl/fixxref.py
config.status: creating gobject/Makefile
config.status: creating examples/Makefile
config.status: creating tests/Makefile
config.status: creating PKG-INFO
config.status: creating config.h
config.status: executing depfiles commands
 cd . && /bin/sh
/var/tmp/portage/pygobject-2.12.2/work/pygobject-2.12.2/missing --run
automake-1.8 --gnu  Makefile
autom4te-2.59: cannot create `pwd`/pygobject-2.12.2/am4t1286.9087: No such file
or directory
 at /usr/bin/autom4te-2.59 line 942
automake-1.8: autoconf failed with exit status: 1
make: *** [Makefile.in] Error 1
-------------

These are my version of autotools:

----------------
sys-devel/autoconf-2.13
sys-devel/autoconf-2.59-r7
sys-devel/autoconf-wrapper-3.2
sys-devel/automake-1.4_p6
sys-devel/automake-1.5
sys-devel/automake-1.6.3
sys-devel/automake-1.7.9-r1
sys-devel/automake-1.8.5-r3
sys-devel/automake-1.9.6-r2
sys-devel/automake-wrapper-1-r1
--------------

I too have this bug when using a tmpfs filesystem for the portage tmp folder.

(In reply to comment #11)
> I too have this bug when using a tmpfs filesystem for the portage tmp folder.
> 

me too

So am I.

tmpfs here too.
Using the proposed patch worked for me.
I'm using 2.12.2

(In reply to comment #14)
> tmpfs here too.
> Using the proposed patch worked for me.
> I'm using 2.12.2

Same here. Only the first patch was required for my machine, x86.

Thanks.

2.12.2, tmpfs, no patch: Doesn't work.
2.12.2, tmpfs, patch: Works.

Tmpfs here as well, same issue.
Adding the "eautomake" line/patch does NOT work.
The patch to switch from gnome2_src_unpack to "unpack..; cd..." DOES work!

(In reply to comment #17)
>Adding the "eautomake" line/patch does NOT work.

Did you remember to also inherit autotools as well?

On AMD64, version 2.12.2, using tmpfs for /var/tmp/portage :

no patch: doesn't work.
patch: works fine

fixed in cvs now, using eautomake.
please reopen if this occurs for anybody after you have updated your tree.