This just came to my attention. The processing of pkg-descr since we moved to using a jail-based solution is wrong. The function which reads and processes the contents of pkg-descr is not using the jail to read the file. I’ll fix the bug soon, and refresh all commits which touched pkg-descr.
Noted by koobs with respect to security/py-pycrypto.
I think this is the fix:
$ cvs di -u port.pm
Index: port.pm
===================================================================
RCS file: /home/repositories/freshports-1/scripts/port.pm,v
retrieving revision 1.72
diff -u -r1.72 port.pm
--- port.pm     23 Mar 2013 20:48:17 -0000      1.72
+++ port.pm     23 Apr 2013 15:26:52 -0000
@@ -665,7 +665,7 @@
                my $longdescription = '';
                my $homepage        = '';
                if (defined($RealDescrPath) && -f $RealDescrPath) {
-                       print "invoking _GetDescrAndHomePage()\n";
+                       print "invoking _GetDescrAndHomePage() with '$RealDescrPath'\n";
                        ($longdescription, $homepage) = _GetDescrAndHomePage($RealDescrPath);
                }
@@ -989,7 +989,8 @@
        my $url;
        my $DESCR;
-       open (F,$file) || FreshPorts::Utilities::ReportError('warning', "couldn't open $file: $!", 1);
+       # this needs to open relative to the jail root.
+       open (F, $FreshPorts::Config::JailBaseDir . $file) || FreshPorts::Utilities::ReportError('warning', "couldn't open $file: $!", 1);
        $DESCR = "";
        while(<F>){
Update 2013-14-23 2150
The dev website has been updated.
Update 2013-14-24 0615
The beta website has been updated.
Update 2013-14-24 0625
The prod website has been updated.











