d383b46ac1
Exiv2 0.27.2 allows attackers to trigger a crash in Exiv2::getULong in types.cpp when called from Exiv2::Internal::CiffDirectory::readDirectory in crwimage_int.cpp, because there is no validation of the relationship of the total size to the offset and size. Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
51 lines
1.4 KiB
Makefile
51 lines
1.4 KiB
Makefile
################################################################################
|
|
#
|
|
# exiv2
|
|
#
|
|
################################################################################
|
|
|
|
EXIV2_VERSION = 0.27.2
|
|
EXIV2_SITE = $(call github,Exiv2,exiv2,v$(EXIV2_VERSION))
|
|
EXIV2_INSTALL_STAGING = YES
|
|
EXIV2_LICENSE = GPL-2.0+, BSD-3-Clause
|
|
EXIV2_LICENSE_FILES = COPYING COPYING-CMAKE-SCRIPTS
|
|
|
|
# 0001-crwimage-Check-offset-and-size-against-total-size.patch
|
|
EXIV2_IGNORE_CVES += CVE-2019-17402
|
|
|
|
EXIV2_CONF_OPTS += -DEXIV2_ENABLE_BUILD_SAMPLES=OFF
|
|
|
|
# The following CMake variable disables a TRY_RUN call in the -pthread
|
|
# test which is not allowed when cross-compiling.
|
|
EXIV2_CONF_OPTS += -DTHREADS_PTHREAD_ARG=OFF
|
|
|
|
ifeq ($(BR2_PACKAGE_EXIV2_LENSDATA),y)
|
|
EXIV2_CONF_OPTS += -DEXIV2_ENABLE_LENSDATA=ON
|
|
else
|
|
EXIV2_CONF_OPTS += -DEXIV2_ENABLE_LENSDATA=OFF
|
|
endif
|
|
|
|
ifeq ($(BR2_PACKAGE_EXIV2_PNG),y)
|
|
EXIV2_CONF_OPTS += -DEXIV2_ENABLE_PNG=ON
|
|
EXIV2_DEPENDENCIES += zlib
|
|
else
|
|
EXIV2_CONF_OPTS += -DEXIV2_ENABLE_PNG=OFF
|
|
endif
|
|
|
|
ifeq ($(BR2_PACKAGE_EXIV2_XMP),y)
|
|
EXIV2_CONF_OPTS += -DEXIV2_ENABLE_XMP=ON -DEXIV2_ENABLE_LIBXMP=ON
|
|
EXIV2_DEPENDENCIES += expat
|
|
else
|
|
EXIV2_CONF_OPTS += -DEXIV2_ENABLE_XMP=OFF -DEXIV2_ENABLE_LIBXMP=OFF
|
|
endif
|
|
|
|
EXIV2_DEPENDENCIES += $(TARGET_NLS_DEPENDENCIES)
|
|
|
|
ifeq ($(BR2_SYSTEM_ENABLE_NLS),y)
|
|
EXIV2_CONF_OPTS += -DEXIV2_ENABLE_NLS=ON
|
|
else
|
|
EXIV2_CONF_OPTS += -DEXIV2_ENABLE_NLS=OFF
|
|
endif
|
|
|
|
$(eval $(cmake-package))
|