NetCube-Systems-Austria/kumquat-buildroot
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
9e2b91b7ac
kumquat-buildroot/package/opensc/opensc.mk

22 lines
741 B
Makefile
Raw Normal View History

package/opensc: new package Signed-off-by: José Pekkarinen <jose.pekkarinen@unikie.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2022-01-14 08:08:52 +01:00
################################################################################
#
# opensc
#
################################################################################
package/opensc: bump version to 0.23.0 Release notes: https://github.com/OpenSC/OpenSC/blob/master/NEWS Also carry two patches from upstream to fix build against newer LibreSSL. Those patches can't be backported to pre-0.23.0 versions, though. Fixes: http://autobuild.buildroot.net/results/913/91318abb98146dd967115ed6233949daa60d8bba/ Signed-off-by: Bernd Kuhls <bernd@kuhls.net> [yann.morin.1998@free.fr: squash LibreSSL fixes together with bump] Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2023-06-24 10:50:49 +02:00
OPENSC_VERSION = 0.23.0
package/opensc: new package Signed-off-by: José Pekkarinen <jose.pekkarinen@unikie.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2022-01-14 08:08:52 +01:00
OPENSC_SITE = https://github.com/OpenSC/OpenSC/releases/download/$(OPENSC_VERSION)
OPENSC_LICENSE = LGPL-2.1+
OPENSC_LICENSE_FILES = COPYING
package/opensc: add OPENSC_CPE_ID_VENDOR cpe:2.3:a:opensc_project:opensc is a valid CPE identifier for this package: https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=cpe%3A2.3%3Aa%3Aopensc_project%3Aopensc Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
2022-07-25 14:43:03 +02:00
OPENSC_CPE_ID_VENDOR = opensc_project
package/opensc: disable tests Fixes: http://autobuild.buildroot.net/results/50b/50b6962ccd884a91391d13ee75852dd0e9ea1a84/ This error only occurs when building with BR2_SHARED_STATIC_LIBS=y, it fails for src/tests/fuzzing/fuzz_pkcs15init which is only available when static linking is enabled: https://github.com/OpenSC/OpenSC/blob/master/src/tests/fuzzing/Makefile.am#L14 The upstream build system has no support to extract the correct ldflags for libatomic.so provided by libcrypto.pc. Because we do not need the tests anyway we just disable them to "fix" the build error for us. Signed-off-by: Bernd Kuhls <bernd@kuhls.net> Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2023-07-24 22:44:39 +02:00
# 0003-configure-add-option-to-disable-tests.patch
OPENSC_AUTORECONF = YES
package/opensc: new package Signed-off-by: José Pekkarinen <jose.pekkarinen@unikie.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2022-01-14 08:08:52 +01:00
OPENSC_DEPENDENCIES = openssl pcsc-lite
OPENSC_INSTALL_STAGING = YES
package/opensc: disable tests Fixes: http://autobuild.buildroot.net/results/50b/50b6962ccd884a91391d13ee75852dd0e9ea1a84/ This error only occurs when building with BR2_SHARED_STATIC_LIBS=y, it fails for src/tests/fuzzing/fuzz_pkcs15init which is only available when static linking is enabled: https://github.com/OpenSC/OpenSC/blob/master/src/tests/fuzzing/Makefile.am#L14 The upstream build system has no support to extract the correct ldflags for libatomic.so provided by libcrypto.pc. Because we do not need the tests anyway we just disable them to "fix" the build error for us. Signed-off-by: Bernd Kuhls <bernd@kuhls.net> Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2023-07-24 22:44:39 +02:00
OPENSC_CONF_OPTS = --disable-cmocka --disable-strict --disable-tests
package/opensc: new package Signed-off-by: José Pekkarinen <jose.pekkarinen@unikie.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2022-01-14 08:08:52 +01:00
package/opensc: fix CVE-2023-2977 A vulnerability was found in OpenSC. This security flaw cause a buffer overrun vulnerability in pkcs15 cardos_have_verifyrc_package. The attacker can supply a smart card package with malformed ASN1 context. The cardos_have_verifyrc_package function scans the ASN1 buffer for 2 tags, where remaining length is wrongly caculated due to moved starting pointer. This leads to possible heap-based buffer oob read. In cases where ASAN is enabled while compiling this causes a crash. Further info leak or more damage is possible. Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2023-09-19 22:49:10 +02:00
# 0004-pkcs15init-correct-left-length-calculation-to-fix-buffer-overrun-bug.patch
OPENSC_IGNORE_CVES += CVE-2023-2977
package/opensc: new package Signed-off-by: José Pekkarinen <jose.pekkarinen@unikie.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2022-01-14 08:08:52 +01:00
$(eval $(autotools-package))
Reference in New Issue Copy Permalink