NetCube-Systems-Austria/kumquat-buildroot
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
046cde5a27
kumquat-buildroot/package/haserl/haserl.mk

34 lines
827 B
Makefile
Raw Normal View History

Normalize separator size to 80 Signed-off-by: Alexandre Belloni <alexandre.belloni@free-electrons.com> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
2013-06-06 01:53:30 +02:00
################################################################################
0000755: New package: haserl: patch from jacmet This little patch adds a target for haserl to buildroot. Haserl - Html And Shell Embedded Report Language
2006-04-11 01:34:06 +02:00
#
# haserl
#
Normalize separator size to 80 Signed-off-by: Alexandre Belloni <alexandre.belloni@free-electrons.com> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
2013-06-06 01:53:30 +02:00
################################################################################
0000755: New package: haserl: patch from jacmet This little patch adds a target for haserl to buildroot. Haserl - Html And Shell Embedded Report Language
2006-04-11 01:34:06 +02:00
package/haserl: security bump to version 0.9.36 2021-03-07 0.9.36 * Fix sf.net issue #5 - its possible to issue a PUT request without a CONTENT-TYPE. Assume an octet-stream in that case. * Change the Prefix for variables to be the REQUEST_METHOD (PUT/DELETE/GET/POST) **** THIS IS A BREAKING CHANGE vs 0.9.33 **** * Mitigations vs running haserl to get access to files not available to the user. - Fix CVE-2021-29133: Lack of verification in haserl, a component of Alpine Linux Configuration Framework, before 0.9.36 allows local users to read the contents of any file on the filesystem. - Update indentation in hash file (two spaces) Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2021-03-29 22:10:26 +02:00
HASERL_VERSION = 0.9.36
haserl: fix download URLs The 0.8.0 version is at /projects/haserl/haserl/0.8.0, and 0.9.x versions at /projects/haserl/haserl-devel/. Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
2013-06-30 10:19:39 +02:00
HASERL_SITE = http://downloads.sourceforge.net/project/haserl/haserl-devel
boot, linux, package: use SPDX short identifier for GPLv2/GPLv2+ We want to use SPDX identifier for license strings as much as possible. SPDX short identifier for GPLv2/GPLv2+ is GPL-2.0/GPL-2.0+. This change is done by using following command. find . -name "*.mk" | xargs sed -ri '/LICENSE( )?[\+:]?=/s/\<GPLv2\>/GPL-2.0/g' Signed-off-by: Rahul Bedarkar <rahulbedarkar89@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2017-03-30 15:43:32 +02:00
HASERL_LICENSE = GPL-2.0
haserl: add license information Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
2013-01-21 12:29:47 +01:00
HASERL_LICENSE_FILES = COPYING
package/haserl: add HASERL_CPE_ID_VENDOR cpe:2.3:a:haserl_project:hserl is a valid CPE identifier for this package: https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=cpe%3A2.3%3Aa%3Ahaserl_project%3Ahaserl Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2021-03-29 22:10:25 +02:00
HASERL_CPE_ID_VENDOR = haserl_project
haserl: bump 0.9.x version Fixes a number of security issues and adds support for PUT/DELETE. From the release mail: <snip> Stephen Röttger reported a number of security bugs, the most serious of which is a potential heap overflow in sliding_buffer.c (file uploads). There is a potential for remote code execution. At the same time, I've made an *experimental* change to allow RESTful API's possible: * PUT and DELETE methods are handled by the POST and GET handlers. * For mostly historical reasons, data on the URI is still called GET.<var>, and data in the body is named POST.<var> * If the Content-Type is not "application/x-www-form-urlencoded", Haserl won't try to urldecode the POST contents - it will just put the body in POST.body verbatim. </snip> The lua handling now uses pkg-config, so adjust the code to match. Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2014-06-13 21:54:17 +02:00
HASERL_DEPENDENCIES = host-pkgconf
0000755: New package: haserl: patch from jacmet This little patch adds a target for haserl to buildroot. Haserl - Html And Shell Embedded Report Language
2006-04-11 01:34:06 +02:00
haserl: Add lua option Closes #719 Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
2010-04-29 23:04:20 +02:00
ifeq ($(BR2_PACKAGE_HASERL_WITH_LUA),y)
packages: indentation cleanup This commit doesn't touch infra packages. Signed-off-by: Jerzy Grzegorek <jerzy.grzegorek@trzebnica.net> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2015-03-31 09:21:57 +02:00
HASERL_CONF_OPTS += --with-lua
HASERL_DEPENDENCIES += lua
haserl: bump 0.9.x version Fixes a number of security issues and adds support for PUT/DELETE. From the release mail: <snip> Stephen Röttger reported a number of security bugs, the most serious of which is a potential heap overflow in sliding_buffer.c (file uploads). There is a potential for remote code execution. At the same time, I've made an *experimental* change to allow RESTful API's possible: * PUT and DELETE methods are handled by the POST and GET handlers. * For mostly historical reasons, data on the URI is still called GET.<var>, and data in the body is named POST.<var> * If the Content-Type is not "application/x-www-form-urlencoded", Haserl won't try to urldecode the POST contents - it will just put the body in POST.body verbatim. </snip> The lua handling now uses pkg-config, so adjust the code to match. Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2014-06-13 21:54:17 +02:00
# liblua uses dlopen when dynamically linked
Rename BR2_PREFER_STATIC_LIB to BR2_STATIC_LIBS Since a while, the semantic of BR2_PREFER_STATIC_LIB has been changed from "prefer static libraries when possible" to "use only static libraries". The former semantic didn't make much sense, since the user had absolutely no control/idea of which package would use static libraries, and which packages would not. Therefore, for quite some time, we have been starting to enforce that BR2_PREFER_STATIC_LIB should really build everything with static libraries. As a consequence, this patch renames BR2_PREFER_STATIC_LIB to BR2_STATIC_LIBS, and adjust the Config.in option accordingly. This also helps preparing the addition of other options to select shared, shared+static or just static. Note that we have verified that this commit can be reproduced by simply doing a global rename of BR2_PREFER_STATIC_LIB to BR2_STATIC_LIBS plus adding BR2_PREFER_STATIC_LIB to Config.in.legacy. Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> Reviewed-by: "Yann E. MORIN" <yann.morin.1998@free.fr>
2014-12-03 22:41:29 +01:00
ifneq ($(BR2_STATIC_LIBS),y)
packages: indentation cleanup This commit doesn't touch infra packages. Signed-off-by: Jerzy Grzegorek <jerzy.grzegorek@trzebnica.net> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2015-03-31 09:21:57 +02:00
HASERL_CONF_ENV += LIBS="-ldl"
haserl: bump 0.9.x version Fixes a number of security issues and adds support for PUT/DELETE. From the release mail: <snip> Stephen Röttger reported a number of security bugs, the most serious of which is a potential heap overflow in sliding_buffer.c (file uploads). There is a potential for remote code execution. At the same time, I've made an *experimental* change to allow RESTful API's possible: * PUT and DELETE methods are handled by the POST and GET handlers. * For mostly historical reasons, data on the URI is still called GET.<var>, and data in the body is named POST.<var> * If the Content-Type is not "application/x-www-form-urlencoded", Haserl won't try to urldecode the POST contents - it will just put the body in POST.body verbatim. </snip> The lua handling now uses pkg-config, so adjust the code to match. Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2014-06-13 21:54:17 +02:00
endif
else
packages: indentation cleanup This commit doesn't touch infra packages. Signed-off-by: Jerzy Grzegorek <jerzy.grzegorek@trzebnica.net> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2015-03-31 09:21:57 +02:00
HASERL_CONF_OPTS += --without-lua
haserl: Add lua option Closes #719 Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
2010-04-29 23:04:20 +02:00
endif
0000755: New package: haserl: patch from jacmet This little patch adds a target for haserl to buildroot. Haserl - Html And Shell Embedded Report Language
2006-04-11 01:34:06 +02:00
haserl: convert to new style hook Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2010-09-02 00:04:13 +02:00
define HASERL_REMOVE_EXAMPLES
haserl: don't install unneeded examples for 0.8.0 to target
2008-08-19 11:40:20 +02:00
rm -rf $(TARGET_DIR)/usr/share/haserl
haserl: convert to new style hook Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2010-09-02 00:04:13 +02:00
endef
HASERL_POST_INSTALL_TARGET_HOOKS += HASERL_REMOVE_EXAMPLES
all packages: rename XXXTARGETS to xxx-package Also remove the redundant $(call ...). This is a purely mechanical change, performed with find package linux toolchain boot -name \*.mk | \ xargs sed -i -e 's/$(eval $(call GENTARGETS))/$(eval $(generic-package))/' \ -e 's/$(eval $(call AUTOTARGETS))/$(eval $(autotools-package))/' \ -e 's/$(eval $(call CMAKETARGETS))/$(eval $(cmake-package))/' Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2012-07-03 00:07:32 +02:00
$(eval $(autotools-package))
Reference in New Issue Copy Permalink