sleuthkit/sleuthkit.spec
cherry530 0534e4cbef fix OOB read in hfs_dir_open_meta_cb
Signed-off-by: cherry530 <xuping33@huawei.com>
(cherry picked from commit 56613e9603253a85c9bb19ca099ff6973043122c)
2022-07-30 10:03:21 +08:00

130 lines
4.4 KiB
RPMSpec

Name: sleuthkit
Version: 4.6.7
Release: 11
Summary: Tools for file system and volume forensic analysis
License: CPL and IBM and GPLv2+
URL: http://www.sleuthkit.org
Source0: https://github.com/sleuthkit/sleuthkit/releases/download/sleuthkit-%{version}/sleuthkit-%{version}.tar.gz
Patch0001: 0001-MEMORYLEAK-DOS-LOAD-EXT-TABLE.patch
Patch0002: 0002-Ensure-that-we-don-t-attempt-to-index-into-an-invali.patch
Patch0003: 0003-Fix-bug-introduced-with-imap-offset-check.patch
Patch0004: 0004-Cast-attrseq-address-to-uintptr_t-so-that-the-correc.patch
Patch0005: 0005-Fix-Fuzz-buffer-overflow.patch
Patch0006: 0006-Add-attributes-file-nodesize-check.patch
Patch0007: 0007-Fixed-OOB-reads-in-hfs_cat_traverse.patch
Patch0008: 0008-left-shift.patch
Patch0009: 0009-fix-memleak-in-ntfs.patch
Patch0010: 0010-Fixed-HFS-BTree-key-OOB-read.patch
Patch0011: 0011-Fixed-OOB-reads-in-hfs_cat_traverse.patch
#https://github.com/sleuthkit/sleuthkit/pull/2453/commits/bd5af353d9a6d8f936d59c2fda57cf7eb14c48f5
Patch0012: 0012-fix_oob_read8.patch
#https://github.com/sleuthkit/sleuthkit/pull/2453/commits/6bac602fc47bd668fb0b8c14ce64c073ecc2de63
Patch0013: 0013-fix_oob_read13.patch
#https://github.com/sleuthkit/sleuthkit/pull/2453/commits/beb68f543261a28ee25b945bb79d39213decd2cd
Patch0014: 0014-Fixed-OOB-reads-in-hfs_dir_open_meta_cb.patch
BuildRequires: gcc-c++ afflib-devel >= 3.3.4 libewf-devel perl-generators sqlite-devel
%{?_with_java:
BuildRequires: java-devel >= 1:1.6.0 jpackage-utils
Requires: java >= 1:1.6.0 jpackage-utils
}
Requires: file
Provides: %{name}-libs = %{version}-%{release}
Obsoletes: %{name}-libs < %{version}-%{release}
%description
The Sleuth Kit (previously known as TASK) is a collection of UNIX-based command
line file system forensic tools that allow an investigator to examine NTFS,
FAT, FFS, EXT2FS, EXT3FS and ExFAT file systems of a suspect computer in a
non-intrusive fashion. The tools have a layer-based design and can extract
data from internal file system structures. Because the tools do not rely on the
operating system to process the file systems, deleted and hidden content is
shown.
%package devel
Summary: Provides development files for %{name}
Requires: %{name} = %{version}-%{release}
Requires: sqlite-devel
%description devel
This package provides the development files for %{name}.
%package help
Summary:Help Document for %{name}
%description help
The help package contains manual pages and other related files for %{name}.
%prep
%autosetup -n %{name}-%{version} -p1
%build
%configure --disable-static %{!?_with_java:--disable-java}
sed -i.rpath 's|^hardcode_libdir_flag_spec=.*|hardcode_libdir_flag_spec=""|g' libtool
sed -i.rpath 's|^runpath_var=LD_RUN_PATH|runpath_var=DIE_RPATH_DIE|g' libtool
%make_build
%install
%make_install
%delete_la
%post -p /sbin/ldconfig
%postun -p /sbin/ldconfig
%files
%doc ChangeLog.txt NEWS.txt licenses/*
%{_bindir}/{blkcalc,blkcat,blkls,blkstat}
%exclude %{_bindir}/fcat
%{_bindir}/{ffind,fiwalk,fls,fsstat,hfind,icat}
%{_bindir}/{ifind,ils,img_cat,img_stat,istat,jcat,sorter}
%{_bindir}/{jpeg_extract,jls,mactime,mmcat,mmls,mmstat,sigfind}
%{_bindir}/{srch_strings,tsk_comparedir,tsk_gettimes,tsk_loaddb,tsk_recover,usnjls}
%exclude %{_mandir}/man1/fcat.1*
%dir %{_datadir}/tsk
%{_datadir}/tsk/sorter/
%{_libdir}/*.so.*
%files devel
%{_includedir}/tsk/
%{_libdir}/*.so
%files help
%{_mandir}/man1/*
%changelog
* Thu Mar 10 2022 xuping <xuping33@huawei.com> - 4.6.7-11
- Fixed OOB read in hfs_dir_open_meta_cb
* Thu Aug 26 2021 lingsheng <lingsheng@huawei.com> - 4.6.7-10
- Fixed OOB reads in hfs_cat_traverse
* Thu Aug 26 2021 sunguoshuai <sunguoshuai@huawei.com> - 4.6.7-9
- Fix memleak in ntfs
* Thu Jun 3 2021 caodongxia <caodongxia@huawei.com> - 4.6.7-8
- Fixed left shift
* Wed May 19 2021 lingsheng <lingsheng@huawei.com> - 4.6.7-7
- Fixed OOB reads in hfs_cat_traverse
* Thu Jan 28 2021 maminjie <maminjie1@huawei.com> - 4.6.7-6
- remove the requires mac-robber that is deprecated
* Fri Dec 18 2020 lingsheng <lingsheng@huawei.com> - 4.6.7-5
- Add attributes file nodesize check to fix heap overflow
* Tue Dec 15 2020 Jiachen Fan <fanjiachen3@huawei.com> - 4.6.7-4
- fix oss-fuzz heap over flow
* Wed Dec 9 2020 Jiachen Fan <fanjiachen3@huawei.com> - 4.6.7-3
- fix oss-fuzz memory leak
* Fri Feb 21 2020 wangzhishun <wangzhishun1@huawei.com> - 4.6.7-2
- Package init