386794d02e
Fixes the following security vulnerability: CVE-2019-15903: In libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing to document parsing too early; a consecutive call to XML_GetCurrentLineNumber (or XML_GetCurrentColumnNumber) then resulted in a heap-based buffer over-read. While we're at it, also change to use .tar.xz rather than the bigger .tar.bz2. Signed-off-by: Peter Korsgaard <peter@korsgaard.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
21 lines
618 B
Makefile
21 lines
618 B
Makefile
################################################################################
|
|
#
|
|
# expat
|
|
#
|
|
################################################################################
|
|
|
|
EXPAT_VERSION = 2.2.8
|
|
EXPAT_SITE = http://downloads.sourceforge.net/project/expat/expat/$(EXPAT_VERSION)
|
|
EXPAT_SOURCE = expat-$(EXPAT_VERSION).tar.xz
|
|
EXPAT_INSTALL_STAGING = YES
|
|
EXPAT_DEPENDENCIES = host-pkgconf
|
|
HOST_EXPAT_DEPENDENCIES = host-pkgconf
|
|
EXPAT_LICENSE = MIT
|
|
EXPAT_LICENSE_FILES = COPYING
|
|
|
|
EXPAT_CONF_OPTS = --without-docbook
|
|
HOST_EXPAT_CONF_OPTS = --without-docbook
|
|
|
|
$(eval $(autotools-package))
|
|
$(eval $(host-autotools-package))
|