8c2144727c
- Fix a potential denial of service caused by accepting arbitrary
length primes as potential elliptic curve parameters in ASN.1
encodings. With very large inputs the primality verification
can become computationally expensive. Now any prime field larger
than 1024 bits is rejected immediately.
https://botan.randombit.net/news.html#version-3-3-0-2024-02-20
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
(cherry picked from commit 2fcc74594c)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
120 lines
2.6 KiB
Makefile
120 lines
2.6 KiB
Makefile
################################################################################
|
|
#
|
|
# botan
|
|
#
|
|
################################################################################
|
|
|
|
BOTAN_VERSION = 3.3.0
|
|
BOTAN_SOURCE = Botan-$(BOTAN_VERSION).tar.xz
|
|
BOTAN_SITE = http://botan.randombit.net/releases
|
|
BOTAN_LICENSE = BSD-2-Clause
|
|
BOTAN_LICENSE_FILES = license.txt
|
|
BOTAN_CPE_ID_VALID = YES
|
|
|
|
BOTAN_INSTALL_STAGING = YES
|
|
|
|
BOTAN_DEPENDENCIES = host-python3
|
|
BOTAN_CONF_OPTS = \
|
|
--cpu=$(BR2_ARCH) \
|
|
--disable-cc-tests \
|
|
--os=linux \
|
|
--cc=gcc \
|
|
--cc-bin="$(TARGET_CXX)" \
|
|
--prefix=/usr \
|
|
--without-documentation
|
|
|
|
ifeq ($(BR2_TOOLCHAIN_HAS_LIBATOMIC),y)
|
|
BOTAN_CONF_OPTS += --extra-libs=atomic
|
|
endif
|
|
|
|
ifeq ($(BR2_SHARED_LIBS),y)
|
|
BOTAN_CONF_OPTS += \
|
|
--disable-static-library \
|
|
--enable-shared-library
|
|
else ifeq ($(BR2_STATIC_LIBS),y)
|
|
BOTAN_CONF_OPTS += \
|
|
--disable-shared-library \
|
|
--enable-static-library \
|
|
--no-autoload
|
|
else ifeq ($(BR2_SHARED_STATIC_LIBS),y)
|
|
BOTAN_CONF_OPTS += \
|
|
--enable-shared-library \
|
|
--enable-static-library
|
|
endif
|
|
|
|
ifeq ($(BR2_TOOLCHAIN_HAS_SSP),y)
|
|
BOTAN_CONF_OPTS += --with-stack-protector
|
|
else
|
|
BOTAN_CONF_OPTS += --without-stack-protector
|
|
endif
|
|
|
|
ifeq ($(BR2_TOOLCHAIN_HAS_THREADS_NPTL),y)
|
|
BOTAN_CONF_OPTS += --with-os-feature=threads
|
|
else
|
|
BOTAN_CONF_OPTS += --without-os-feature=threads
|
|
endif
|
|
|
|
ifeq ($(BR2_TOOLCHAIN_USES_UCLIBC),y)
|
|
BOTAN_CONF_OPTS += --without-os-feature=explicit_bzero,getauxval,getentropy
|
|
endif
|
|
|
|
ifeq ($(BR2_PACKAGE_BOOST_FILESYSTEM)$(BR2_PACKAGE_BOOST_SYSTEM),yy)
|
|
BOTAN_DEPENDENCIES += boost
|
|
BOTAN_CONF_OPTS += --with-boost
|
|
endif
|
|
|
|
ifeq ($(BR2_PACKAGE_BZIP2),y)
|
|
BOTAN_DEPENDENCIES += bzip2
|
|
BOTAN_CONF_OPTS += --with-bzip2
|
|
endif
|
|
|
|
ifeq ($(BR2_PACKAGE_SQLITE),y)
|
|
BOTAN_DEPENDENCIES += sqlite
|
|
BOTAN_CONF_OPTS += --with-sqlite
|
|
endif
|
|
|
|
ifeq ($(BR2_PACKAGE_TROUSERS),y)
|
|
BOTAN_DEPENDENCIES += trousers
|
|
BOTAN_CONF_OPTS += --with-tpm
|
|
endif
|
|
|
|
ifeq ($(BR2_PACKAGE_XZ),y)
|
|
BOTAN_DEPENDENCIES += xz
|
|
BOTAN_CONF_OPTS += --with-lzma
|
|
endif
|
|
|
|
ifeq ($(BR2_PACKAGE_ZLIB),y)
|
|
BOTAN_DEPENDENCIES += zlib
|
|
BOTAN_CONF_OPTS += --with-zlib
|
|
endif
|
|
|
|
ifeq ($(BR2_POWERPC_CPU_HAS_ALTIVEC),)
|
|
BOTAN_CONF_OPTS += --disable-altivec
|
|
endif
|
|
|
|
ifeq ($(BR2_ARM_CPU_HAS_NEON),)
|
|
BOTAN_CONF_OPTS += --disable-neon
|
|
endif
|
|
|
|
ifeq ($(BR2_SOFT_FLOAT),y)
|
|
BOTAN_CONF_OPTS += --disable-neon
|
|
endif
|
|
|
|
define BOTAN_CONFIGURE_CMDS
|
|
(cd $(@D); $(TARGET_MAKE_ENV) ./configure.py $(BOTAN_CONF_OPTS))
|
|
endef
|
|
|
|
define BOTAN_BUILD_CMDS
|
|
$(TARGET_MAKE_ENV) $(MAKE) -C $(@D) AR="$(TARGET_AR)"
|
|
endef
|
|
|
|
define BOTAN_INSTALL_STAGING_CMDS
|
|
$(TARGET_MAKE_ENV) $(MAKE) -C $(@D) DESTDIR="$(STAGING_DIR)" install
|
|
endef
|
|
|
|
define BOTAN_INSTALL_TARGET_CMDS
|
|
$(TARGET_MAKE_ENV) $(MAKE) -C $(@D) DESTDIR="$(TARGET_DIR)" install
|
|
endef
|
|
|
|
$(eval $(generic-package))
|