# Contributor: Sergei Lukin <sergej.lukin@gmail.com>
# Contributor: Leonardo Arena <rnalrd@alpinelinux.org>
# Maintainer: Michael Mason <ms13sp@gmail.com>
pkgname=tiff
pkgver=4.0.8
pkgrel=0
pkgdesc="Provides support for the Tag Image File Format or TIFF"
url="http://www.libtiff.org/"
arch="all"
license="GPL"
depends=
depends_dev="zlib-dev libjpeg-turbo-dev"
makedepends="libtool autoconf automake $depends_dev"
subpackages="$pkgname-doc $pkgname-dev $pkgname-tools"
source="http://download.osgeo.org/libtiff/$pkgname-$pkgver.tar.gz
	CVE-2017-9936.patch
	CVE-2017-10688.patch
	"

# secfixes:
#   4.0.8-r0:
#     - CVE-2017-9936
#     - CVE-2017-10688
#   4.0.7-r2:
#     - CVE-2017-7592
#     - CVE-2017-7593
#     - CVE-2017-7594
#     - CVE-2017-7595
#     - CVE-2017-7596
#     - CVE-2017-7598
#     - CVE-2017-7601
#     - CVE-2017-7602
#   4.0.7-r1:
#     - CVE-2017-5225
#   4.0.7-r0:
#     - CVE-2016-9273
#     - CVE-2016-9297
#     - CVE-2016-9448
#     - CVE-2016-9453
#     - CVE-2016-3186
#     - CVE-2016-3621
#     - CVE-2016-3622
#     - CVE-2016-3623
#     - CVE-2016-3624
#     - CVE-2016-3625
#     - CVE-2016-3658
#     - CVE-2014-8127
#     - CVE-2016-5314
#     - CVE-2016-5315
#     - CVE-2016-5316
#     - CVE-2016-5317
#     - CVE-2016-5320
#     - CVE-2016-5875
#     - CVE-2016-5321
#     - CVE-2016-5323
#     - CVE-2016-5652

builddir="$srcdir"/$pkgname-$pkgver

prepare() {
	local _failed=
	cd "$builddir"
	update_config_sub || return 1
	for i in $source; do
		case $i in
		*.patch) msg $i; patch -p1 -i "$srcdir"/$i || _failed="$_failed $i";;
		esac
	done
}

build() {
	cd "$builddir"

	./configure \
		--build=$CBUILD \
		--host=$CHOST \
		--prefix=/usr \
		--sysconfdir=/etc \
		--mandir=/usr/share/man \
		--infodir=/usr/share/info \
		--disable-cxx \
		|| return 1
	make || return 1
}

package() {
	cd "$builddir"
	make DESTDIR="$pkgdir" install
}

tools() {
	pkgdesc="Command-line utility programs for manipulating TIFF files"
	mkdir -p "$subpkgdir"/usr/
	mv "$pkgdir"/usr/bin "$subpkgdir"/usr/
}

md5sums="2a7d1c1318416ddf36d5f6fa4600069b  tiff-4.0.8.tar.gz
01159a84385e422933502e7afc74297e  CVE-2017-9936.patch
abbb8147e9201610cb33f3652be61ea1  CVE-2017-10688.patch"
sha256sums="59d7a5a8ccd92059913f246877db95a2918e6c04fb9d43fd74e5c3390dac2910  tiff-4.0.8.tar.gz
5c933324116c5ef1751097afe3635a83ef73982bc22bd7eca24de1594ac33cb4  CVE-2017-9936.patch
2460178424a56ba203df08c06148493789441ab5e246acf71bcce50cc23a9662  CVE-2017-10688.patch"
sha512sums="5d010ec4ce37aca733f7ab7db9f432987b0cd21664bd9d99452a146833c40f0d1e7309d1870b0395e947964134d5cfeb1366181e761fe353ad585803ff3d6be6  tiff-4.0.8.tar.gz
fdb9d442527f256047279a685369bb8f2d9c9bf97089ba7e66be5a478fdb1abd47482ff941aef7917001595245dd9ef787101bd59c96773ee7e8f6cc5431bfd5  CVE-2017-9936.patch
79880a6278a1e3e66f4014bbe1cf3323ce1e9554e3658536d6076fff09978e47e1e47ca6a273a87220f6d4c3121ed544ebb9ad0a64b5f6387c0e83915fdba517  CVE-2017-10688.patch"