3fe2eb9ed0
Fixes a potential heap corruption on Windows when mbedtls_x509_crt_parse_path() is passed a path longer than 2GB. This cannot be triggered remotely. Found by Guido Vranken, Intelworks. Fixes a potential buffer overflow in some asn1_write_xxx() functions. This cannot be triggered remotely unless you create X.509 certificates based on untrusted input or write keys of untrusted origin. Found by Guido Vranken, Intelworks. The X509 max_pathlen constraint was not enforced on intermediate certificates. Found by Nicholas Wilson, and fix and tests provided by Janos Follath. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
30 lines
970 B
Makefile
30 lines
970 B
Makefile
################################################################################
|
|
#
|
|
# polarssl
|
|
#
|
|
################################################################################
|
|
|
|
POLARSSL_SITE = https://tls.mbed.org/code/releases
|
|
POLARSSL_VERSION = 1.2.18
|
|
POLARSSL_SOURCE = polarssl-$(POLARSSL_VERSION)-gpl.tgz
|
|
POLARSSL_CONF_OPTS = \
|
|
-DENABLE_PROGRAMS=$(if $(BR2_PACKAGE_POLARSSL_PROGRAMS),ON,OFF)
|
|
|
|
POLARSSL_INSTALL_STAGING = YES
|
|
POLARSSL_LICENSE = GPLv2
|
|
POLARSSL_LICENSE_FILES = LICENSE
|
|
|
|
define POLARSSL_DISABLE_ASM
|
|
$(SED) '/^#define POLARSSL_HAVE_ASM/d' $(@D)/include/polarssl/config.h
|
|
endef
|
|
|
|
# ARM in thumb mode breaks debugging with asm optimizations
|
|
# Microblaze asm optimizations are broken in general
|
|
ifeq ($(BR2_ENABLE_DEBUG)$(BR2_ARM_INSTRUCTIONS_THUMB)$(BR2_ARM_INSTRUCTIONS_THUMB2),yy)
|
|
POLARSSL_POST_CONFIGURE_HOOKS += POLARSSL_DISABLE_ASM
|
|
else ifeq ($(BR2_microblaze),y)
|
|
POLARSSL_POST_CONFIGURE_HOOKS += POLARSSL_DISABLE_ASM
|
|
endif
|
|
|
|
$(eval $(cmake-package))
|