Bug#278298: tetex-bin might be affected by CAN-2004-0889

[Frank Küster <frank@debian.org>]

Martin Schulze <joey@infodrom.org> wrote:

>> The xpdf code is used by pdftex. I have not verified that the actual
>> pieces of code are used, but I think so.
>
> Could you check?

>From the toplevel Makefile:

all:     $(LIBXPDFDIR)/xpdf/libxpdf.a $(LIBXPDFDIR)/goo/libGoo.a  
[...]

and from tetex-bin-2.0.2/texk/web2c/pdftexdir/pdftex.mk

# pdftosrc
pdftosrc: pdftexdir/pdftosrc.o
	$(kpathsea_cxx_link) pdftexdir/pdftosrc.o $(LDLIBXPDF) -lm

The command and variablbe are defined in
tetex-bin-2.0.2/texk/web2c/Makefile:

kpathsea_cxx_link = $(LIBTOOL) link $(cxx_link_command)
[...]
LDLIBXPDF = $(LIBXPDFDIR)/xpdf/libxpdf.a $(LIBXPDFDIR)/goo/libGoo.a

So this means that the code _is_ used. Actually three times:

bzgrep "libtool.*libxpdf.a" ../pbuilder-result/log/tetex-bin_2.0.2-22.build.bz2 
./../klibtool link c++ -o pdftex  pdftexini.o pdftex0.o pdftex1.o pdftex2.o pdftex3.o pdftexextra.o  pdftexdir/libpdf.a -lpng -lz ../../libs/xpdf/xpdf/libxpdf.a ../../libs/xpdf/goo/libGoo.a  lib/lib.a ../kpathsea/libkpathsea.la -lm   
./../klibtool link c++ -o pdfetex  pdfetexini.o pdfetex0.o pdfetex1.o pdfetex2.o pdfetex3.o pdfetexextra.o  pdftexdir/libpdf.a -lpng -lz ../../libs/xpdf/xpdf/libxpdf.a ../../libs/xpdf/goo/libGoo.a  lib/lib.a ../kpathsea/libkpathsea.la -lm   
./../klibtool link c++ -o pdftosrc  pdftexdir/pdftosrc.o ../../libs/xpdf/xpdf/libxpdf.a ../../libs/xpdf/goo/libGoo.a -lm

That is, for pdftex, pdfetex and pdftosrc.

We should make an update.

Regards, Frank
-- 
Frank Küster
Inst. f. Biochemie der Univ. Zürich
Debian Developer