NetCube-Systems-Austria/kumquat-buildroot
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
1175f46044
kumquat-buildroot/package/upx/upx.mk

32 lines
981 B
Makefile
Raw Normal View History

package/upx: new package UPX is a free, portable, extendable, high-performance executable packer for several executable formats. This is needed for syslinux 6.x. Note: upx is a host-only package. Although it supports quite a few target architectures, the only use so far will be for use by syslinux, which already has an x86-on-x86 requirement anyway. So we currently do not care to have target-dependencies on host-upx. Signed-off-by: Frank Hunleth <fhunleth@troodon-software.com> [yann.morin.1998@free.fr: builds fine in parallel; fix build to locate libucl; fix installation; don't add a menuconfig entry] Signed-off-by: "Yann E. MORIN" <yann.morin.1998@free.fr> Tested-by: Romain Naour <romain.naour@openwide.fr> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2014-05-02 19:10:33 +02:00
################################################################################
#
# upx
#
################################################################################
package/upx: security bump to version 3.96 - Switch site to github to get latest release - Fix CVE-2019-20805: p_lx_elf.cpp in UPX before 3.96 has an integer overflow during unpacking via crafted values in a PT_DYNAMIC segment. - Fix CERT-FI Case 829767 UPX command line tools segfaults. Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-06-06 21:20:33 +02:00
UPX_VERSION = 3.96
UPX_SITE = https://github.com/upx/upx/releases/download/v$(UPX_VERSION)
UPX_SOURCE = upx-$(UPX_VERSION)-src.tar.xz
boot, linux, package: use SPDX short identifier for GPLv2/GPLv2+ We want to use SPDX identifier for license strings as much as possible. SPDX short identifier for GPLv2/GPLv2+ is GPL-2.0/GPL-2.0+. This change is done by using following command. find . -name "*.mk" | xargs sed -ri '/LICENSE( )?[\+:]?=/s/\<GPLv2\>/GPL-2.0/g' Signed-off-by: Rahul Bedarkar <rahulbedarkar89@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2017-03-30 15:43:32 +02:00
UPX_LICENSE = GPL-2.0+
package/upx: new package UPX is a free, portable, extendable, high-performance executable packer for several executable formats. This is needed for syslinux 6.x. Note: upx is a host-only package. Although it supports quite a few target architectures, the only use so far will be for use by syslinux, which already has an x86-on-x86 requirement anyway. So we currently do not care to have target-dependencies on host-upx. Signed-off-by: Frank Hunleth <fhunleth@troodon-software.com> [yann.morin.1998@free.fr: builds fine in parallel; fix build to locate libucl; fix installation; don't add a menuconfig entry] Signed-off-by: "Yann E. MORIN" <yann.morin.1998@free.fr> Tested-by: Romain Naour <romain.naour@openwide.fr> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2014-05-02 19:10:33 +02:00
UPX_LICENSE_FILES = COPYING
package: drop _CPE_ID_VALID, use _CPE_ID_VENDOR FOO_CPE_ID_VALID really ought to be an internal implementaion detail. Packages that really want to trigger their CPE defintitions really should set one of the actual variables to a meaningful value. There are two CPE-related variables that we could chose to set to replace FOO_CPE_ID_VALID: FOO_CPE_ID_VENDOR and FOO_CPE_ID_PRODUCT. Between those two, _VENDOR more often diverges from the default than _PRODUCT does, so that's what we use. ---8<------8<------8<------8<------8<--- #!/bin/bash # Replace FOO_CPE_ID_VALID = YES with FOO_CPE_ID_VENDOR = foo_project for i in $(git grep -l -E '[^)]_CPE_ID_VALID = YES' package support); do pkg="$(basename "${i%/*}")" sed -r -i -e "s/_CPE_ID_VALID = YES/_CPE_ID_VENDOR = ${pkg}_project/" "${i}" done ---8<------8<------8<------8<------8<--- Reported-by: Peter Korsgaard <peter@korsgaard.com> Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr> Cc: Thomas Petazzoni <thomas.petazzoni@bootlin.com> Cc: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be> Cc: Matthew Weber <matthew.weber@rockwellcollins.com> Cc: Fabrice Fontaine <fontaine.fabrice@gmail.com> [Peter: update cpe-test comment to reflect pkg3 change] Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2021-03-05 23:27:44 +01:00
UPX_CPE_ID_VENDOR = upx_project
package/upx: new package UPX is a free, portable, extendable, high-performance executable packer for several executable formats. This is needed for syslinux 6.x. Note: upx is a host-only package. Although it supports quite a few target architectures, the only use so far will be for use by syslinux, which already has an x86-on-x86 requirement anyway. So we currently do not care to have target-dependencies on host-upx. Signed-off-by: Frank Hunleth <fhunleth@troodon-software.com> [yann.morin.1998@free.fr: builds fine in parallel; fix build to locate libucl; fix installation; don't add a menuconfig entry] Signed-off-by: "Yann E. MORIN" <yann.morin.1998@free.fr> Tested-by: Romain Naour <romain.naour@openwide.fr> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2014-05-02 19:10:33 +02:00
package/upx: fix CVE-2021-20285 A flaw was found in upx canPack in p_lx_elf.cpp in UPX 3.96. This flaw allows attackers to cause a denial of service (SEGV or buffer overflow and application crash) or possibly have unspecified other impacts via a crafted ELF. The highest threat from this vulnerability is to system availability. Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2021-03-31 23:32:47 +02:00
# 0001-Check-DT_REL-DT_RELA-DT_RELSZ-DT_RELASZ.patch
UPX_IGNORE_CVES += CVE-2021-20285
package/upx: needs zlib Fixes build issues like, observed on a stripped-down build system: compress.cpp:32:18: fatal error: zlib.h: No such file or directory #include <zlib.h> ^ compilation terminated. Signed-off-by: "Yann E. MORIN" <yann.morin.1998@free.fr> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2015-01-03 17:25:07 +01:00
HOST_UPX_DEPENDENCIES = host-ucl host-zlib
package/upx: new package UPX is a free, portable, extendable, high-performance executable packer for several executable formats. This is needed for syslinux 6.x. Note: upx is a host-only package. Although it supports quite a few target architectures, the only use so far will be for use by syslinux, which already has an x86-on-x86 requirement anyway. So we currently do not care to have target-dependencies on host-upx. Signed-off-by: Frank Hunleth <fhunleth@troodon-software.com> [yann.morin.1998@free.fr: builds fine in parallel; fix build to locate libucl; fix installation; don't add a menuconfig entry] Signed-off-by: "Yann E. MORIN" <yann.morin.1998@free.fr> Tested-by: Romain Naour <romain.naour@openwide.fr> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2014-05-02 19:10:33 +02:00
# We need to specify all, otherwise the default target only prints a message
# stating to "please choose a target for 'make'"... :-(
define HOST_UPX_BUILD_CMDS
package/upx: use HOST_CONFIGURE_OPTS Use HOST_CONFIGURE_OPTS to pass CPPFLAGS and LDFLAGS Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-06-06 21:20:32 +02:00
$(HOST_MAKE_ENV) $(HOST_CONFIGURE_OPTS) $(MAKE) \
UPX_UCLDIR=$(HOST_DIR) CXXFLAGS_WERROR= -C $(@D) all
package/upx: new package UPX is a free, portable, extendable, high-performance executable packer for several executable formats. This is needed for syslinux 6.x. Note: upx is a host-only package. Although it supports quite a few target architectures, the only use so far will be for use by syslinux, which already has an x86-on-x86 requirement anyway. So we currently do not care to have target-dependencies on host-upx. Signed-off-by: Frank Hunleth <fhunleth@troodon-software.com> [yann.morin.1998@free.fr: builds fine in parallel; fix build to locate libucl; fix installation; don't add a menuconfig entry] Signed-off-by: "Yann E. MORIN" <yann.morin.1998@free.fr> Tested-by: Romain Naour <romain.naour@openwide.fr> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2014-05-02 19:10:33 +02:00
endef
# UPX has no install procedure, so install it manually.
define HOST_UPX_INSTALL_CMDS
Globally replace $(HOST_DIR)/usr/bin with $(HOST_DIR)/bin Since things are no longer installed in $(HOST_DIR)/usr, the callers should also not refer to it. This is a mechanical change with git grep -l '$(HOST_DIR)/usr/bin' | xargs sed -i 's%$(HOST_DIR)/usr/bin%$(HOST_DIR)/bin%g' Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2017-07-05 13:14:19 +02:00
$(INSTALL) -D -m 0755 $(@D)/src/upx.out $(HOST_DIR)/bin/upx
package/upx: new package UPX is a free, portable, extendable, high-performance executable packer for several executable formats. This is needed for syslinux 6.x. Note: upx is a host-only package. Although it supports quite a few target architectures, the only use so far will be for use by syslinux, which already has an x86-on-x86 requirement anyway. So we currently do not care to have target-dependencies on host-upx. Signed-off-by: Frank Hunleth <fhunleth@troodon-software.com> [yann.morin.1998@free.fr: builds fine in parallel; fix build to locate libucl; fix installation; don't add a menuconfig entry] Signed-off-by: "Yann E. MORIN" <yann.morin.1998@free.fr> Tested-by: Romain Naour <romain.naour@openwide.fr> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2014-05-02 19:10:33 +02:00
endef
$(eval $(host-generic-package))
Reference in New Issue Copy Permalink