23c5f9c654
The bundled tinysvcmdns library is affected by CVE-2017-12087 [1]:
> An exploitable heap overflow vulnerability exists in the tinysvcmdns library
> version 2016-07-18. A specially crafted packet can make the library overwrite
> an arbitrary amount of data on the heap with attacker controlled values. An
> attacker needs send a dns packet to trigger this vulnerability.
shairport-sync has incorparated upstreams fixes in [2].
[1] https://bugs.launchpad.net/bugs/cve/2017-12087
[2] 1dbdf94811
Signed-off-by: Jörg Krause <joerg.krause@embedded.rocks>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
67 lines
2.1 KiB
Makefile
67 lines
2.1 KiB
Makefile
################################################################################
|
|
#
|
|
# shairport-sync
|
|
#
|
|
################################################################################
|
|
|
|
SHAIRPORT_SYNC_VERSION = 3.1.4
|
|
SHAIRPORT_SYNC_SITE = $(call github,mikebrady,shairport-sync,$(SHAIRPORT_SYNC_VERSION))
|
|
|
|
SHAIRPORT_SYNC_LICENSE = MIT, BSD-3-Clause
|
|
SHAIRPORT_SYNC_LICENSE_FILES = LICENSES
|
|
SHAIRPORT_SYNC_DEPENDENCIES = alsa-lib libconfig libdaemon popt host-pkgconf
|
|
|
|
# git clone, no configure
|
|
SHAIRPORT_SYNC_AUTORECONF = YES
|
|
|
|
SHAIRPORT_SYNC_CONF_OPTS = --with-alsa \
|
|
--with-metadata \
|
|
--with-pipe \
|
|
--with-stdout
|
|
|
|
SHAIRPORT_SYNC_CONF_ENV += LIBS="$(SHAIRPORT_SYNC_CONF_LIBS)"
|
|
|
|
# Avahi or tinysvcmdns (shaiport-sync bundles its own version of tinysvcmdns).
|
|
# Avahi support needs libavahi-client, which is built by avahi if avahi-daemon
|
|
# and dbus is selected. Since there is no BR2_PACKAGE_LIBAVAHI_CLIENT config
|
|
# option yet, use the avahi-daemon and dbus congig symbols to check for
|
|
# libavahi-client.
|
|
ifeq ($(BR2_PACKAGE_AVAHI_DAEMON)$(BR2_PACKAGE_DBUS),yy)
|
|
SHAIRPORT_SYNC_DEPENDENCIES += avahi
|
|
SHAIRPORT_SYNC_CONF_OPTS += --with-avahi
|
|
else
|
|
SHAIRPORT_SYNC_CONF_OPTS += --with-tinysvcmdns
|
|
endif
|
|
|
|
# OpenSSL or mbedTLS
|
|
ifeq ($(BR2_PACKAGE_OPENSSL),y)
|
|
SHAIRPORT_SYNC_DEPENDENCIES += openssl
|
|
SHAIRPORT_SYNC_CONF_OPTS += --with-ssl=openssl
|
|
else
|
|
SHAIRPORT_SYNC_DEPENDENCIES += mbedtls
|
|
SHAIRPORT_SYNC_CONF_OPTS += --with-ssl=mbedtls
|
|
SHAIRPORT_SYNC_CONF_LIBS += -lmbedx509 -lmbedcrypto
|
|
ifeq ($(BR2_PACKAGE_MBEDTLS_COMPRESSION),y)
|
|
SHAIRPORT_SYNC_CONF_LIBS += -lz
|
|
endif
|
|
endif
|
|
|
|
ifeq ($(BR2_PACKAGE_SHAIRPORT_SYNC_LIBSOXR),y)
|
|
SHAIRPORT_SYNC_DEPENDENCIES += libsoxr
|
|
SHAIRPORT_SYNC_CONF_OPTS += --with-soxr
|
|
endif
|
|
|
|
define SHAIRPORT_SYNC_INSTALL_TARGET_CMDS
|
|
$(INSTALL) -D -m 0755 $(@D)/shairport-sync \
|
|
$(TARGET_DIR)/usr/bin/shairport-sync
|
|
$(INSTALL) -D -m 0644 $(@D)/scripts/shairport-sync.conf \
|
|
$(TARGET_DIR)/etc/shairport-sync.conf
|
|
endef
|
|
|
|
define SHAIRPORT_SYNC_INSTALL_INIT_SYSV
|
|
$(INSTALL) -D -m 0755 package/shairport-sync/S99shairport-sync \
|
|
$(TARGET_DIR)/etc/init.d/S99shairport-sync
|
|
endef
|
|
|
|
$(eval $(autotools-package))
|