kumquat-buildroot/package/squid/0001-acinclude-os-deps.m4-fix-cross-compilation.patch
Fabrice Fontaine 2d02c82dfd package/squid: security bump to version 4.8
- Add a patch to fix cross-compilation
- Fix the following CVEs:
  - SQUID-2019:6 (CVE-2019-13345), Jul 12, 2019
    Fixed from 4.8
    Multiple Cross-Site Scripting issues in cachemgr.cgi
  - SQUID-2019:5 (CVE-2019-12527), Jul 12, 2019
    Fixed from 4.8
    Heap Overflow issue in HTTP Basic Authentication processing
  - SQUID-2019:3 (CVE-2019-12525), Jul 12, 2019
    Fixed from 4.8
    Denial of Service in HTTP Digest Authentication processing
  - SQUID-2019:2 (CVE-2019-12529), Jul 12, 2019
    Fixed from 4.8
    Denial of Service in HTTP Basic Authentication processing
  - SQUID-2019:1 (CVE-2019-12824), Jul 12, 2019
    Fixed from 4.8
    Denial of Service issue in cachemgr.cgi

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 7792c4f1bc)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2019-09-02 17:46:37 +02:00

43 lines
1.6 KiB
Diff

From 5dbaf8eebc5b66230e0131b09651c7e40bf0e9de Mon Sep 17 00:00:00 2001
From: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Date: Tue, 20 Aug 2019 21:41:16 +0200
Subject: [PATCH] acinclude/os-deps.m4: fix cross-compilation
Do not check check file descriptor maximum value through AC_RUN_IFELSE
when cross-compiling as this will raise an error
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
[Upstream status: https://github.com/squid-cache/squid/pull/464]
---
acinclude/os-deps.m4 | 7 +++++--
1 file changed, 5 insertions(+), 2 deletions(-)
diff --git a/acinclude/os-deps.m4 b/acinclude/os-deps.m4
index b50717517..ec10a54c6 100644
--- a/acinclude/os-deps.m4
+++ b/acinclude/os-deps.m4
@@ -169,7 +169,9 @@ AC_MSG_CHECKING(Maximum number of filedescriptors we can open)
SQUID_STATE_SAVE(maxfd)
dnl FreeBSD pthreads break dup2().
AS_CASE([$host_os],[freebsd],[ LDFLAGS=`echo $LDFLAGS | sed -e "s/-pthread//"` ])
- AC_RUN_IFELSE([AC_LANG_SOURCE([[
+ dnl AC_RUN_IFELSE can't be run when cross-compiling
+ AS_CASE([$cross_compiling],[no],[
+ AC_RUN_IFELSE([AC_LANG_SOURCE([[
#include <stdio.h>
#include <unistd.h>
#include <stdlib.h>
@@ -231,7 +233,8 @@ int main(int argc, char **argv) {
fprintf (fp, "%d\n", i & ~0x3F);
return 0;
}
- ]])],[squid_filedescriptors_limit=`cat conftestval`],[],[])
+ ]])],[squid_filedescriptors_limit=`cat conftestval`],[],[])
+ ])
dnl Microsoft MSVCRT.DLL supports 2048 maximum FDs
AS_CASE(["$host_os"],[mingw|mingw32],[squid_filedescriptors_limit="2048"])
AC_MSG_RESULT($squid_filedescriptors_limit)
--
2.20.1