abafaedd05
Fixes the following security issues: - CVE-2020-3862: Impact: A malicious website may be able to cause a denial of service. Description: A denial of service issue was addressed with improved memory handling. - CVE-2020-3864: Impact: A DOM object context may not have had a unique security origin. Description: A logic issue was addressed with improved validation. - CVE-2020-3865: Impact: A top-level DOM object context may have incorrectly been considered secure. Description: A logic issue was addressed with improved validation. - CVE-2020-3867: Impact: Processing maliciously crafted web content may lead to universal cross site scripting. Description: A logic issue was addressed with improved state management. - CVE-2020-3868: Impact: Processing maliciously crafted web content may lead to arbitrary code execution. Description: Multiple memory corruption issues were addressed with improved memory handling. For more details, see the advisory: https://wpewebkit.org/security/WSA-2020-0002.html While we are at it, adjust the white space in the .hash function to match the new agreements. Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
76 lines
2.2 KiB
Makefile
76 lines
2.2 KiB
Makefile
################################################################################
|
|
#
|
|
# wpewebkit
|
|
#
|
|
################################################################################
|
|
|
|
WPEWEBKIT_VERSION = 2.26.4
|
|
WPEWEBKIT_SITE = http://www.wpewebkit.org/releases
|
|
WPEWEBKIT_SOURCE = wpewebkit-$(WPEWEBKIT_VERSION).tar.xz
|
|
WPEWEBKIT_INSTALL_STAGING = YES
|
|
WPEWEBKIT_LICENSE = LGPL-2.1+, BSD-2-Clause
|
|
WPEWEBKIT_LICENSE_FILES = \
|
|
Source/WebCore/LICENSE-APPLE \
|
|
Source/WebCore/LICENSE-LGPL-2.1
|
|
WPEWEBKIT_DEPENDENCIES = host-gperf host-python host-ruby \
|
|
harfbuzz cairo icu jpeg libepoxy libgcrypt libgles libsoup libtasn1 \
|
|
libpng libxslt openjpeg wayland-protocols webp wpebackend-fdo
|
|
|
|
WPEWEBKIT_CONF_OPTS = \
|
|
-DPORT=WPE \
|
|
-DENABLE_ACCESSIBILITY=OFF \
|
|
-DENABLE_API_TESTS=OFF \
|
|
-DENABLE_MINIBROWSER=OFF \
|
|
-DSILENCE_CROSS_COMPILATION_NOTICES=ON
|
|
|
|
ifeq ($(BR2_PACKAGE_WPEWEBKIT_SANDBOX),y)
|
|
WPEWEBKIT_CONF_OPTS += \
|
|
-DENABLE_BUBBLEWRAP_SANDBOX=ON \
|
|
-DBWRAP_EXECUTABLE=/usr/bin/bwrap \
|
|
-DDBUS_PROXY_EXECUTABLE=/usr/bin/xdg-dbus-proxy
|
|
WPEWEBKIT_DEPENDENCIES += libseccomp
|
|
else
|
|
WPEWEBKIT_CONF_OPTS += -DENABLE_BUBBLEWRAP_SANDBOX=OFF
|
|
endif
|
|
|
|
ifeq ($(BR2_PACKAGE_WPEWEBKIT_MULTIMEDIA),y)
|
|
WPEWEBKIT_CONF_OPTS += \
|
|
-DENABLE_VIDEO=ON \
|
|
-DENABLE_WEB_AUDIO=ON
|
|
WPEWEBKIT_DEPENDENCIES += gstreamer1 gst1-libav gst1-plugins-base gst1-plugins-good
|
|
else
|
|
WPEWEBKIT_CONF_OPTS += \
|
|
-DENABLE_VIDEO=OFF \
|
|
-DENABLE_WEB_AUDIO=OFF
|
|
endif
|
|
|
|
ifeq ($(BR2_PACKAGE_WPEWEBKIT_USE_GSTREAMER_GL),y)
|
|
WPEWEBKIT_CONF_OPTS += -DUSE_GSTREAMER_GL=ON
|
|
else
|
|
WPEWEBKIT_CONF_OPTS += -DUSE_GSTREAMER_GL=OFF
|
|
endif
|
|
|
|
ifeq ($(BR2_PACKAGE_WPEWEBKIT_WEBDRIVER),y)
|
|
WPEWEBKIT_CONF_OPTS += -DENABLE_WEBDRIVER=ON
|
|
else
|
|
WPEWEBKIT_CONF_OPTS += -DENABLE_WEBDRIVER=OFF
|
|
endif
|
|
|
|
ifeq ($(BR2_PACKAGE_WOFF2),y)
|
|
WPEWEBKIT_CONF_OPTS += -DUSE_WOFF2=ON
|
|
WPEWEBKIT_DEPENDENCIES += woff2
|
|
else
|
|
WPEWEBKIT_CONF_OPTS += -DUSE_WOFF2=OFF
|
|
endif
|
|
|
|
# JIT is not supported for MIPS r6, but the WebKit build system does not
|
|
# have a check for these processors. Disable JIT forcibly here and use
|
|
# the CLoop interpreter instead.
|
|
#
|
|
# Upstream bug: https://bugs.webkit.org/show_bug.cgi?id=191258
|
|
ifeq ($(BR2_MIPS_CPU_MIPS32R6)$(BR2_MIPS_CPU_MIPS64R6),y)
|
|
WPEWEBKIT_CONF_OPTS += -DENABLE_JIT=OFF -DENABLE_C_LOOP=ON
|
|
endif
|
|
|
|
$(eval $(cmake-package))
|