kumquat-buildroot/package/zlog/zlog.mk
Fabrice Fontaine 6eefe2f8f4 package/zlog: fix CVE-2021-43521
A Buffer Overflow vulnerability exists in zlog 1.2.15 via
zlog_conf_build_with_file in src/zlog/src/conf.c.

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
2022-04-23 18:25:35 +02:00

31 lines
852 B
Makefile

################################################################################
#
# zlog
#
################################################################################
ZLOG_VERSION = 1.2.15
ZLOG_SITE = $(call github,HardySimpson,zlog,$(ZLOG_VERSION))
ZLOG_LICENSE = LGPL-2.1
ZLOG_LICENSE_FILES = COPYING
ZLOG_CPE_ID_VENDOR = zlog_project
ZLOG_INSTALL_STAGING = YES
# 0001-Fix-stack-buffer-overflow-at-zlog_conf_build_with_file.patch
ZLOG_IGNORE_CVES += CVE-2021-43521
define ZLOG_BUILD_CMDS
$(TARGET_MAKE_ENV) $(MAKE1) CC="$(TARGET_CC) $(TARGET_CFLAGS) $(TARGET_LDFLAGS)" \
-C $(@D) all
endef
define ZLOG_INSTALL_STAGING_CMDS
$(TARGET_MAKE_ENV) $(MAKE) PREFIX=$(STAGING_DIR)/usr -C $(@D) install
endef
define ZLOG_INSTALL_TARGET_CMDS
$(TARGET_MAKE_ENV) $(MAKE) PREFIX=$(TARGET_DIR)/usr -C $(@D) install
endef
$(eval $(generic-package))