1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
|
$Id: README,v 1.4 2002/01/22 18:08:23 david Exp $
Patches applied:
---------------------------
ispell-iso-more-html.dpatch
---------------------------
This is derived from a description by Carsten Maarbjerg.
This patch adds HTML mode to Ispell-3.1.20, supporting Javascript and
HTML-comments, and optionally support for ampersand encoded entities,
as defined in http://uts.cc.utexas.edu/~churchh/latin1.html
It was written in 1995 by Gerry Tierney, and extended with
ampersand-conversion by Casper Maarbjerg, 1997 and Peter M<F8>ller
Neergaard, 2000 , distributed at:
http://cs-people.bu.edu/turtle/ispell.html
Peter M<F8>ller Neergaard,
http://cs-people.bu.edu/turtle/contacts.html
----------------------
lookup-hurd-fix.dpatch
----------------------
[On the hurd] It compiles, but when it tries to build the database it
fails. This is due to an open ("foo", 0), where it should be open
("foo", O_RDONLY). Opening with 0 is equivalent to O_NONE on the
Hurd, which doesn't allow you to read from the file (just stat it).
Marcus.Brinkmann@ruhr-uni-bochum.de
--------------------------
mktemp-security-fix.dpatch
--------------------------
1) The temporary filename is chosen with mktemp, then fopen'd. The gap
between chosing the name and opening it could allow an attacker to
place a symlink there, pointing to a file which ispell would then
truncate. This mktemp(3) weakness is documented in the libc docs.
2) The file is created with world writable permissions, and chmod'ed
to the perms of the file being read only afterwards. Again, in the
intervening time an attacker could insert data to the file.
This [patch] cures both problems at once; mkstemp creates the file
with O_EXCL so it will never overwrite an existing file, and it sets
initial permissions 0600.
Colin Phipps <crp22@cam.ac.uk>
------------------
sq-unsq-fix.dpatch
------------------
[sq and unsq] ... is heavily broken since the gets(3) "bugfix" in
3.1.20-0.3.
These bugs are:
- unsq often segfaults, because wordp[256] is set to '\0' instead of
word[256].
- sq and unsq are changed from gets(3) to fgets(3), but this misses
the fact, that gets removes the trailing linefeed while fgets
doesn't. Changing puts(3) to fputs(3) seems to solve this problem.
Roland Rosenfeld <roland@debian.org>
--------------
termios.dpatch
--------------
...on Linux/Alpha termios is implemented in glibc style with separate
VMIN and VEOF constants, while termio is made compatible with Digital
UNIX where VMIN == VEOF. Since both termio and termios use the same
names for these constants, glibc defines them as for the termios
interface, leaving termio unsupported. Thus, when termio is used,
terminal parameters get set incorrectly.
On Linux/Alpha this leads to VMIN parameter being set to 4 (old VEOF
value, Ctrl-D) during terminal initialisation, and after that ispell
only accepts keystrokes in packets of four.
The patch below works around this problem by detecting glibc and
choosing termios instead of termio...
Nikita Schmidt <cetus@snowball.ucd.ie>
------------------------------
tex-backslash-kdstevens.dpatch
------------------------------
http://www.kdstevens.com/~stevens/ispell-faq.html#bslash
Version 3.1.20 contains an irritating bug when using latex that causes
all sorts of problems when the backslash is used. (The backslash is a
common character in latex that is used, among other things, to create
a forced space similar to the tilde character.) In the current
version, 3.1.20, the next TWO characters are skipped after a
backslash. This can results in misspellings and the file being
incorrectly parsed. (For example, if the text contains the sequence `\
$' math mode will not be entered until the matching $ which should end
it, resulting in the body of the text not being spell checked and the
math region being checked.)
--------------------------
usg-glibc_rbraakman.dpatch
--------------------------
The basic problem here is that we define USG to indicate that Debian
is not a BSD system, and ispell assumes that that means that the
bcopy, etc. functions are not available, but glibc does define them
by default.
Richard Braakman <dark@dark.wapit.fi>
-----------------------
z01_ispell-dctrl.dpatch
-----------------------
I recently undertook a project to spell-check Debian package
descriptions, and along the way I found it useful to teach ispell
about the Debian control file format. This makes it possible to check
the descriptions of Packages, available, status, debian/control and
similar files.
Matt Zimmerman <mdz@debian.org>
-----------------------------
z50_missing_prototypes.dpatch
-----------------------------
Some functions are missing prototypes and this can lead to
significant trouble... Here is a patch to fix that.
Doug Porter <dsp@debian.org>
|
