6a2d5ab0ae
- Fix CVE-2020-36177: RsaPad_PSS in wolfcrypt/src/rsa.c in wolfSSL before 4.6.0 has an out-of-bounds write for certain relationships between key size and digest size. - Drop patch (already in version) https://github.com/wolfSSL/wolfssl/releases/tag/v4.6.0-stable Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
48 lines
1.2 KiB
Makefile
48 lines
1.2 KiB
Makefile
################################################################################
|
|
#
|
|
# wolfssl
|
|
#
|
|
################################################################################
|
|
|
|
WOLFSSL_VERSION = 4.6.0-stable
|
|
WOLFSSL_SITE = $(call github,wolfSSL,wolfssl,v$(WOLFSSL_VERSION))
|
|
WOLFSSL_INSTALL_STAGING = YES
|
|
|
|
WOLFSSL_LICENSE = GPL-2.0+
|
|
WOLFSSL_LICENSE_FILES = COPYING LICENSING
|
|
|
|
WOLFSSL_DEPENDENCIES = host-pkgconf
|
|
|
|
# wolfssl's source code is released without a configure
|
|
# script, so we need autoreconf
|
|
WOLFSSL_AUTORECONF = YES
|
|
|
|
WOLFSSL_CONF_OPTS = --disable-examples --disable-crypttests
|
|
|
|
ifeq ($(BR2_PACKAGE_WOLFSSL_ALL),y)
|
|
WOLFSSL_CONF_OPTS += --enable-all
|
|
else
|
|
WOLFSSL_CONF_OPTS += --disable-all
|
|
endif
|
|
|
|
ifeq ($(BR2_PACKAGE_WOLFSSL_SSLV3),y)
|
|
WOLFSSL_CONF_OPTS += --enable-sslv3
|
|
else
|
|
WOLFSSL_CONF_OPTS += --disable-sslv3
|
|
endif
|
|
|
|
# enable ARMv8 hardware acceleration
|
|
ifeq ($(BR2_ARM_CPU_ARMV8A),y)
|
|
WOLFSSL_CONF_OPTS += --enable-armasm
|
|
# the flag -mstrict-align is needed to prevent build errors caused by
|
|
# some inline assembly in parts of the AES structure using the "m"
|
|
# constraint
|
|
ifeq ($(BR2_aarch64),y)
|
|
WOLFSSL_CONF_ENV += CPPFLAGS="$(TARGET_CPPFLAGS) -mstrict-align"
|
|
endif
|
|
else
|
|
WOLFSSL_CONF_OPTS += --disable-armasm
|
|
endif
|
|
|
|
$(eval $(autotools-package))
|