Simplifies the Makefile slightly. This also uses a proper release instead
of a random git commit.
Added LICENSE Information.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
It was causing regressions in systems without some particular
development tools (see #8129)
Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Removed upstreamed patches. Also fixes a redefinition error on some
platforms.
Cleaned up the DEPENDS to be simpler and more concise.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
Added $(TARGET_CPPFLAGS) to TARGET_CFLAGS to fix a buildbot failure to
find oniguruma include files.
Signed-off-by: Eneas U de Queiroz <cote2004-github@yahoo.com>
The first and last hunks of the patch were already taken care of, but
the middle two were still needed.
Signed-off-by: Eneas U de Queiroz <cote2004-github@yahoo.com>
Versions earlier than 1.2.15 had security vulnerabilities, especially
related to the bundled oniguruma. Now libevhtp uses a system-provided
library instead. The API changed as well, requiring patches to
seafile-server.
Adds @cotequeiroz Eneas U de Queiroz as maintainer.
Signed-off-by: Eneas U de Queiroz <cote2004-github@yahoo.com>
oniguruma is a regular expression library for different character
encodings.
It is a dependency of current version of libevhtp, and is currently only
producing a static library, not generating an installable package.
Signed-off-by: Eneas U de Queiroz <cote2004-github@yahoo.com>
Forum user portuquesa raised a topic (see [1]) about being unable to use
Asterisk on his armeb xscale device. We narrowed it down to sqlite3.
Asterisk was unable to insert a simple table into its db.
In short, sqlite3 assumes little endian for every ARM device. This
worked OK for 4 Byte bit (unaligned) access. But once upstream (back in
2015) added a function which accesses 2 Bytes (see [2]) this failed for
some (if not all) ARM big endian devices. ARM CPUs are bi-endian for 4
Byte reads but not for 2 Byte reads.
This patch fixes the problem by setting the endianness adequately for
ARM targets, for both 32 bit and 64 bit varieties. The patch was applied
upstream (see [3]).
[1] https://forum.openwrt.org/t/solved-asterisk13-or-15-sqlite3-database-problem/36856
[2] 329428e208
[3] https://www.sqlite.org/src/info/b7aad929619f7043
Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
Pull request #9033 showed that there are problems with builds where
thread-safe mode is disabled. The binaries still reference functions
from libpthread. This commit removes the thread-safe choice for now.
Once this is addressed upstream the choice can be added back.
Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
Libevhtp is building a static library, used by seafile-server.
Every time the libevhtp binary changes, seafile-server needs a release
bump.
Leave a note in the libevhtp Makefile, as a reminder.
Signed-off-by: Eneas U de Queiroz <cote2004-github@yahoo.com>
Patch was posted on the mailing list. Awaits inclusion looks like. Fixes
long range build failures on the platform.
Updated Mirror list. The first two seem to not work.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
Maintainer: me
Correct issues with TITLE and add URL pointing to the fstrm GitHub Page. Reformat the description so it renders correctly in menuconfig.
Fixes#9022
Signed-off-by: James Taylor <james@jtaylor.id.au>
Fixes CVE-2019-10129: Memory disclosure in partition routing
Does **NOT** fix CVE-2019-9193 which PostgreSQL doesn't consider a
security issue, see [1].
[1]: https://www.postgresql.org/about/news/1935/
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
fstrm is an optimized C implementation of Frame Streams that includes a fast, lockless circular queue implementation and exposes library interfaces for setting up a dedicated Frame Streams I/O thread and asynchronously submitting data frames for transport from worker threads. It was originally written to facilitate the addition of high speed binary logging to DNS servers written in C using the dnstap log format.
Maintainer: me
Compile Tested: armv7l, SNAPSHOT 655fff1571 SDK
Run Tested: armv7l, Linksys WRT1900ACS, OpenWrt SNAPSHOT, r9987-655fff1571
Signed-off-by: James Taylor <james@jtaylor.id.au>
Description from Amol Bhave:
This package fails to compile with boost 1.70 when the boost cmake
config gets used.
As far as I can tell, Boost 1.70 introduced
BoostConfigVersion.cmake. In that file, the value of PACKAGE_VERSION is
set to 1.70. This makes CMake auto set the variable Boost_VERSION to
1.70. Historically, Boost_VERSION has been using the format like 170000,
and not 1.70. Some package cmake files still depend on this behavior
and make assertions such as Boost_VERSION > 168000. This is incompatible
with the new scheme.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
Description from Amol Bhave:
This package fails to compile with boost 1.70 when the boost cmake
config gets used.
As far as I can tell, Boost 1.70 introduced
BoostConfigVersion.cmake. In that file, the value of PACKAGE_VERSION is
set to 1.70. This makes CMake auto set the variable Boost_VERSION to
1.70. Historically, Boost_VERSION has been using the format like 170000,
and not 1.70. Some package cmake files still depend on this behavior
and make assertions such as Boost_VERSION > 168000. This is incompatible
with the new scheme.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
DEPENDS:=@!arc is causing a recursive dependency because of the optional
selection of libseccomp by util/lxc. The workaround hides the package
in Package/libseccomp/config instead.
Signed-off-by: Eneas U de Queiroz <cote2004-github@yahoo.com>
For some reason from 1.1.7 to 1.2.0, oniguruma no longer gets installed by
default. Fix that to fix compilation with seafile.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
From the README:
Newt is a programming library for color text mode, widget based user
interfaces. Newt can be used to add stacked windows, entry widgets,
checkboxes, radio buttons, labels, plain text fields, scrollbars,
etc., to text mode user interfaces. Newt is based on the slang library.
Adapted from the old packages feed:
https://git.openwrt.org/?p=openwrt/svn-archive/packages.git;a=tree;f=libs/newt
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
From the S-Lang website:
S-Lang is a multi-platform programmer's library designed to allow a
developer to create robust multi-platform software. It provides
facilities required by interactive applications such as display/screen
management, keyboard input, keymaps, and so on. The most exciting
feature of the library is the slang interpreter that may be easily
embedded into a program to make it extensible. While the emphasis has
always been on the embedded nature of the interpreter, it may also be
used in a stand-alone fashion through the use of slsh, which is part of
the S-Lang distribution.
Adapted from the old packages feed:
https://git.openwrt.org/?p=openwrt/svn-archive/packages.git;a=tree;f=libs/slang2
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
[Depends on libwangle]
Facebook's branch of Apache Thrift, including a new C++ server.
Thrift is a serialization and RPC framework for service communication.
Thrift enables these features in all major languages, and there is
strong support for C++, Python, Hack, and Java.
Test Plan: compile fbthrift on openwrt master for nbg6817
Maintainer: me
Signed-off-by: Amol Bhave <ambhave@fb.com>
Description: folly automatically picks up lz4 and unwind if they are found
by its cmake build script. This is causing buildbot failure.
Include these libraries in DEPENDS as well.
Test Plan:
- build packages liblz4 and libunwind
- build folly, and check that it throws an error
- add this patch, and rebuild
- verify that it succeeds this time around
Compile Tested: nbg6817, openwrt master
Maintainer: me
Signed-off-by: Amol Bhave <ambhave@fb.com>
Summary: Currently, boost host build doesn't actually compile boost
libraries for the host arch. If there are host tools that would want
to link against boost, it can't right now.
This diff adds support for compiling host boost library as well.
Any packages that need to depend on a host boost library can depend on
CONFIG_boost-host-build-<lib>.
Test Plan: Compiled fbthrift and verified that it works.
used openwrt master using nbg6817
Maintainer: @ClaymorePT
Signed-off-by: Amol Bhave <ambhave@fb.com>
Wangle is a framework providing a set of common client/server
abstractions for building services in a consistent, modular, and
composable way.
tested with: master on nbg6817 and arc700.
Signed-off-by: Amol Bhave <ambhave@fb.com>
C++ implementation of RSocket
RSocket is a binary protocol for use on byte stream transports such as
TCP, WebSockets, and Aeron. (https://rsocket.io/)
This ships with two separte libraries, yarpl and rsocket
Patch 100 is already upstream
(862202c6e9).
Patch 101 in process of upstreaming as it needs to made compatible with
using both gold and ld.
[Dependency of https://github.com/facebook/openr]
Compile tested: openwrt master - nbg6817, arc700
Signed-off-by: Amol Bhave <ambhave@fb.com>
Fizz is a TLS 1.3 implementation.
Fizz currently supports TLS 1.3 drafts 28, 26 (both wire-compatible with
the final specification), and 23. All major handshake modes are
supported, including PSK resumption, early data, client authentication,
and HelloRetryRequest.
Compile tested: nbg6817 and arc700, openwrt master
Signed-off-by: Amol Bhave <ambhave@fb.com>
folly is an open-source C++ library developed and used at Facebook.
Adding this package will enable adding further packages that depend on
this.
Depends on PR #7098, PR #7101, PR #7126, PR #7877
Maintainer: me
Compile tested: openwrt-18.06 for ipq40xx, ipq806x, x86 and ar71xx
Run tested: Tested on devices running on the above architectures.
Verified that dependent packages can successfully build and run using
the libfolly.so shared library.
Signed-off-by: Amol Bhave <ambhave@fb.com>
mstch is an implementation of the the mustache templates using C++.
This package will build mstch static library that can be used by
other packages.
Signed-off-by: Amol Bhave <ambhave@fb.com>
Copy the cmake directory in the InstallDev step.
I am currently trying out actual host build for boost i.e. compiling
boost libaries for host tools. When I do that, that step installs the
boost cmake files in staging_dir/host.
This breaks other packages that use cmake to compile and use boost as a
dependency. This is because, their compilation step now begins using
staging_dir/host version of Boost, rather than the target version of
boost. Cmake gives priority to cmake version of Boost config, over
finding boost headers manually.
This change resolves that problem by installing the BoostConfig.cmake
file in staging_dir/<target> as well.
Compile tested: nbg6817
Signed-off-by: Amol Bhave <ambhave@fb.com>
In the tree, libevhtp is used only for Seafile. This is the most recent
version that Haiwen lists as working.
Updated threads patch for OpenSSL 1.1.
Removed Maintainer as he is inactive.
Simplified Makefile a little bit and reorganized for consistency between
packages.
Fixed compilation with uClibc-ng.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
Boost 1.70.0 broke the apply_visitor functions for lvalue reference
variants.
This imports the patch that fixes this issue from upstream.
Tested this by compiling a library
(https://github.com/facebookincubator/fizz) that works with 1.69 but
breaks with 1.70. And then, importing this patch and trying the
compilation again.
Compile tested: nbg6817
Maintainer: @ClaymorePT
Signed-off-by: Amol Bhave <ambhave@fb.com>
sigar is a System Information Gatherer And Reporter library for C++
Adding the package so other C++ packages that depends on this library
can build.
This creates a libsigar.so shared library.
Signed-off-by: Amol Bhave <ambhave@fb.com>
Users have reported errors with Apache. Enable DSO to try to fix.
Most of these vars default to no since we're cross-compiling. Change them
to on since all the libc's that OpenWrt supports supports these. epoll for
example should have better stability.
Changed PKG_LICENSE to SPDX.
Slight cleanups.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
* Update (lib)x264 to 20190324
* Stop using GNU Autotools and use libx264's own
configuration facility
* Drop hardcoded CFLAGS, x264 will handle those fine on its own
This will override toolchain optimizaion and set -O3
irregardless of setting.
* Rework LTO and ASM optmization selection to make it more
compact and readable. This drops optimization for x86 32-bit
which is being deprecated in favour of x86_64 in general and
the very few systems still in use that doesn't support 64-bit
are too slow to be usable anyway.
* Import patches to fix compilation on ARM and x86 (32-bit)
from OpenEmbedded
* Minor style fixes to Makefile
Source: http://cgit.openembedded.org/openembedded-core/tree/meta/recipes-multimedia/x264/x264
Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>
OpenWrt uses uClibc-ng now, and it seems that these are no longer needed
as it seems faad2 automatically renames these functions.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
Previous GCC7 fix was incorrect and GCC8 correctly complains about it.
Fix it properly.
Also cleaned up the Makefile for consistency between packages.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
Upstream has really infrequent releases while having an active git
repository with important bugfixes. This is also needed because
libimobiledevice requires a new API from libusbmuxd.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
Upstream makes seriously infrequent updates whereas they have an active
git repository with important bugfixes.
Also fixed compilation without deprecated OpenSSL APIs.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
Since no Python packages are produced by this package, including
python-package.mk is unnecessary.
This removes the reference to python-package.mk. (PKG_RELEASE is
unchanged as this should have no effect on the build.)
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
The nDPI autogen.sh is broken and can lead to compile issues. Fixed.
Also removed PKG_INSTALL since it produces invalid symlinks to *.so*.
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
uClibc-ng does not define these math functions in math.h , only in
tgmath.h. Therefore the cmath header will not work.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
The latter is actually what is used by the build system. Increased
PKG_RELEASE for all packages as this changes the ipk.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
This change changes the maintainer to
`Alexandru Ardelean <ardeleanalex@gmail.com`
for all Python packages owned by
`Gergely Kiss <mail.gery@gmail.com>`
No functional changes.
Bumping PKG_RELEASE on each package that is updated.
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
Depends on PR #7098
With gflags available, glog's compilation behaves differently and
includes gflags specific code. This code allows customizing logging in
programs that use glog, using command command line parameters.
Compile tested: openwrt-18.06 for ipq40xx, ipq806x, x86 and ar71xx
Run tested: Tested on devices running on the above architectures.
Signed-off-by: Amol Bhave <ambhave@fb.com>
Instead of redefining LD (and duplicating it), it is better to
unset the existing value first.
Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
Both dependent packages (sumo and libelektra) use (and must use) libstdcpp
Two libc++ cannot be linked against each other at the same time. I believe
this causes xerces-c to not be used even though it is listed as a
dependency.
Took the time to clean up the Makefile. Also replaced -fPIC with -fpic to
eliminate potential issues. Added linker flags for smaller size.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
Maintainer: Alexander Couzens lynxis@fe80.eu
Compile Tested: Snapshot SDK
Run Tested: target - ath79, hardware - gl-ar300m16, package - nodogsplash v3.2.1 and nodogsplash v3.3.1, Openwrt Snapshot.
Description: If a package depends on libmicrohttpd but does not specify which variant,
a recursive dependency error occurs caused by the superfluous CONFLICTS line.
With this change, a package will get the named variant, or default to the
no-ssl variant if only libmicrohttpd is specified.
Signed-off-by: Rob White <rob@blue-wave.net>
Compilation for the zmq lib is broken for c++ stdlib in openwrt since the
patches add uclibc++ specific code.
This diffs changes the patch to only include the code conditioned
on if we are actually using uclibc++.
Signed-off-by: Amol Bhave <amol@amolbhave.com>
This commit updates the boost package to version 1.70.0 [1] and updates the
Makefile to activate c++17 compile option.
This new Boost version brings two new header-only libraries:
Outcome: [2]
A set of tools for reporting and handling function failures in contexts where
directly using C++ exception handling is unsuitable, from Niall Douglas.
Histogram: [3]
Fast and extensible multi-dimensional histograms with convenient interface
for C++14, from Hans Dembinski.
More information about this release at the usual place [1].
[1]: https://www.boost.org/users/history/version_1_70_0.html
[2]: https://www.boost.org/libs/outcome/
[3]: https://www.boost.org/libs/histogram/
Signed-off-by: Carlos Ferreira <carlosmf.pt@gmail.com>
This version bump contains mainly fixes for the build system
e8df10e Pre-release version bump to 0.38.4
23f036d Makefile.am: Ship Meson assembly test files in the tarball
e7058fe Makefile.am: Update download links
8888e75 Post-release version bump to 0.38.3
a7ffb3e Pre-release version bump to 0.38.2
4c4753c meson: Correct copy-and-paste mistake
7295983 void function should not return a value
ef4fb03 Windows: Support building with SHELL=cmd.exe
55d8f95 Windows: Show compiler invocation
0ea37df meson: store ARM SIMD and NEON tests as text files
2065a07 meson: simplify and fix mmx library compilation
6e206cf meson: Add proper include paths for the loongson check
9ed0576 meson: fix copy-n-paste error for arm simd assembly
d13f6a8 meson: fix typo which breaks loongson checks
e7ac62c meson: work around meson issue #5115
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
For some reason, the build system enables NEON on platforms
that is should not. Fixes compilation on several ARM targets.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
The scripts will use the $(STAGING_DIR)/bin/perl which is a simlink to native
perl, using $(STAGING_DIR_HOSTPKG) first will use the "perl/host" that has
multiple modules availabe to be built as host like perl-xml-parser
Using the $(STAGING_DIR)/bin/perl pakages that depend on "perl-xml-parser/host"
will fail with:
You must have XML::Parser installed to run
[...]/staging_dir/hostpkg/bin/intltool-merge
Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
Import two patches from upstream in order to fix Modbus-RTU over RS485:
1c5d969 Only set SER_RS485_ENABLED bit of existing RS485 settings
91a1d74 Oops fix OR on RS485 settings (1c5d969)
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
This helps packages depending on libs/libstrophe in finding the library via pkg-config or CMake's PKG_SEARCH_MODULE
Signed-off-by: Enrico Mioso <mrkiko.rs@gmail.com>
Unlike the current version, this one has support for aarch64. aarch64 is
necessary for several 64-bit targets.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
Network Security Services (NSS) is a set of libraries designed
to support cross-platform development of security-enabled client
and server applications. Applications built with NSS can support
SSL v3, TLS, PKCS #5, PKCS #7, PKCS #11, PKCS #12, S/MIME,
X.509 v3 certificates, and other security standards.
Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
Netscape Portable Runtime (NSPR) provides a platform-neutral API for
system level and libc-like functions. The API is used in the Mozilla
clients, many of Red Hat's and Oracle's server applications, and
other software offerings.
this is needed for nss libraries
Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
Must depend on cpp for the unconditional --enable-cpp, or the build can
fail when CONFIG_PACKAGE_libpcrecpp is unset and nothing else has built
the c++ toolchain:
configure: error: Invalid C++ compiler or C++ compiler flags
Makefile:97: recipe for target '/usr/local/src/lede/build_dir/target-mipsel_24kc_musl/pcre-8.42/.configured_68b329da9893e34099c7d8ad5cb9c940' failed
make[3]: *** [/usr/local/src/lede/build_dir/target-mipsel_24kc_musl/pcre-8.42/.configured_68b329da9893e34099c7d8ad5cb9c940] Error 1
make[3]: Leaving directory '/usr/local/src/lede/feeds/packages/libs/pcre'
time: package/feeds/packages/pcre/compile#4.48#0.30#6.88
package/Makefile:107: recipe for target 'package/feeds/packages/pcre/compile' failed
Fixes: 17090fecf1 ("pcre: Fix compile of libpcrecpp")
Signed-off-by: Bjørn Mork <bjorn@mork.no>
Having CONFLICTS for each variant in the other variant causes recursive dependency error, even though the two variants do conflict with each other. This commit removes one of the CONFLICT lines.
Build now completes without error on SDK.
Signed-off-by: Rob White <rob@blue-wave.net>
Google's gflags library is a C++ library that implements command line
flags processing. Adding the library so that it can used when compiling
other C++ programs.
Signed-off-by: Amol Bhave <ambhave@fb.com>
Jose is acommand line utility for performing various tasks on JSON
Object Signing and Encryption (JOSE) objects. José provides a full
crypto stack including key generation, signing and encryption.
Added: 198f720742
Signed-off-by: Tibor Dudlák <tibor.dudlak@gmail.com>
bump glog version from 0.3.5 to 0.4.0
Tested by building another package which depends on glog and verify that
it builds successfully.
Signed-off-by: Amol Bhave <ambhave@fb.com>
ICU 64 updates to Unicode 12 and to CLDR 35 locale data with many additions and corrections
And Workaround for ICU-20531 : https://unicode-org.atlassian.net/browse/ICU-20531
Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
This change adds the ability to produce host static build for the
libdouble-conversion library. Other host build tools can now depend on
this library if they need it.
Tested on a x86_64 host build machine.
make package/libdouble-conversion/host/compile produces
staging_dir/hostpkg/lib/libdouble-conversion.a file
Signed-off-by: Amol Bhave <ambhave@fb.com>
RE2 is a fast, safe, thread-friendly alternative to backtracking regular
expression engines like those used in PCRE, Perl, and Python. It is a
C++ library.
Signed-off-by: Amol Bhave <ambhave@fb.com>
Botan (Japanese for peony) is a cryptography library written in C++11
and released under the permissive Simplified BSD license.
Botan's goal is to be the best option for cryptography in new C++ code
by offering the tools necessary to implement a range of practical
systems, such as TLS/DTLS, PKIX certificate handling, PKCS#11 and TPM
hardware support, password hashing, and post quantum crypto schemes. In
addition to the C++, botan has a C89 API specifically designed to be
easy to call from other languages. A Python binding using ctypes calling
the C89 API is included.
github: https://github.com/randombit/botan
Signed-off-by: BangLang Huang <banglang.huang@foxmail.com>
Maintainer: Alexander Couzens lynxis@fe80.eu
Compile Tested: Snapshot SDK
Run Tested: target - ath79, hardware - gl-ar300m16, package - nodogsplash v3.2.1 and nodogsplash v3.3.1-beta, Openwrt Snapshot.
Description: Fix for issue #8180 and resubmitted PR #8563 - Any package with a dependency on the non-ssl version of libmicrohttpd ends up with the ssl version along with libgcrypt, libgnutls, .. This fix reverts the no-ssl version name from libmicrohttpd back to libmicrohttpd-no-ssl as it was in previous versions.
The two package names will now be libmicrohttpd-no-ssl and libmicrohttpd-ssl.
Signed-off-by: Rob White <rob@blue-wave.net>
log4cplus is a simple to use C++11 logging API providing thread--safe,
flexible, and arbitrarily granular control over log management and
configuration. It is modeled after the Java log4j API.
wiki: https://sourceforge.net/p/log4cplus/wiki/Home/
github: https://github.com/log4cplus/log4cplus
Signed-off-by: BangLang Huang <banglang.huang@foxmail.com>
Cleaned up configure arguments (alphabetized and sorted) and added some
new ones to help speed up compilation.
Disabled SSL support by default. SSLv2 and 3 have long been deprecated as
they are both insecure variants that currently hold less than 10% of total
encrypted traffic on the web.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
Removed most patches as they are no longer necessary for compilation.
Added some compiler and linker flags to reduce size.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
- CVE-2019-3855
Possible integer overflow in transport read allows out-of-bounds write
- CVE-2019-3856
Possible integer overflow in keyboard interactive handling allows
out-of-bounds write
- CVE-2019-3857
Possible integer overflow leading to zero-byte allocation and out-of-bounds
write
- CVE-2019-3858
Possible zero-byte allocation leading to an out-of-bounds read
- CVE-2019-3859
Out-of-bounds reads with specially crafted payloads due to unchecked use of
`_libssh2_packet_require` and `_libssh2_packet_requirev`
- CVE-2019-3860
Out-of-bounds reads with specially crafted SFTP packets
- CVE-2019-3861
Out-of-bounds reads with specially crafted SSH packets
- CVE-2019-3862
Out-of-bounds memory comparison
- CVE-2019-3863
Integer overflow in user authenicate keyboard interactive allows
out-of-bounds writes
Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
Revert the addition of build dependency in commit 2d1694ff7
to a non-existent host build of zlib.
The host build of zlib was removed already in April 2018 by
8dcd941d8b (diff-1ed408c61d79f9c6c5d197333e94ce8d)
which made zlib a build tool defined in /tools
The newly introduced build dependency causes always a warning like:
WARNING: Makefile 'package/feeds/packages/postgresql/Makefile'
has a build dependency on 'zlib/host', which does not exist
Not sure what was the error that 2d1694ff7 tried to fix,
but reference to a non-existent host build is not the solution.
Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
With crypt(3) password storage scheme enabled, OpenLDAP can receive and
store SHA-256 and SHA-512 password hashes from Samba AD-DC. Without
crypt(3), synchronization of passwords between Samba AD-DC (v4.5 and
above) and OpenLDAP requires use of cleartext passwords.
To use password hashes from Samba, OpenLDAP must be compiled with
--enable-crypt switch. This patch introduces a new configuration
parameter to enable the use of crypt(3) function by OpenLDAP.
Enabling crypt(3) increases the size of slapd binary by 12 bytes on
the x86_64 target and by only 4 bytes on the ipq806x target.
Signed-off-by: Val Kulkov <val.kulkov@gmail.com>
If the cpp lib is added after pcre is first compiled, pcre will
not be reconfigured and the build will fail.
Fix this by always building the cpp parts.
Signed-off-by: Jan Kardell <jan.kardell@telliq.com>
spotted on buildbot trying postgresql/host build:
configure: error: zlib library not found
Fix this by adding zlib/host to HOST_BUILD_DEPENDS.
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
Release 0.37.0 was not actually released. From the git log, there are
two functional changes about optimization by using float points directly
Bump version to 0.38.0
pixman: Use maximum precision for pixman-bits-image, v2.
Implement floating point gradient computation, v2.
build: Add meson files to EXTRA_DIST
editorconfig: use tabs for Makefiles
Merge remote-tracking branch 'origin/master'
Post release version bump to 37.1
gitlab-ci: Add meson build to pipeline test
meson: Add a meson build system
Add .editorconfig file
Bump version to 0.36.0
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
This fixes compilation with glibc and uClibc for the included
sample programs as reported by builtbots for e.g. arc target:
-snip-
In file included from ../../upnp/inc/upnp.h:402:0,
from common/sample_util.h:49,
from common/sample_util.c:42:
../../upnp/inc/FileInfo.h:22:2: error: #error libupnp uses large file support, so users must do that, too
#error libupnp uses large file support, so users must do that, too
^~~~~
Makefile:577: recipe for target 'common/tv_ctrlpt-sample_util.o' failed
-snap-
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
libcgroup also contains cgroup-utils, which make it very handy to work
with user defined cgroups settings.
It let's you define cgroups in a json like config file and execute them on the cmdline.
Example:
/etc/cgroup.conf:
----------------
group lowbob {
cpu { cpu.shares="1"; }
cpuacct { cpuset.cpu = "0" }
memory { memory.limit_in_bytes = 10m; }
blkio { ... }
...
}
----------------
cgconfigparser -l /etc/cgroup.conf
cgexec -g cpu,memory,blkio:/lowbob cpuintense-task
Signed-off-by: Daniel Danzberger <daniel@dd-wrt.com>
This commit fixes the bug described in issue #8146 [1], where the
package fails to build if the boost package is selected without
selecting any of the internal non-header-only libraries.
[1]: https://github.com/openwrt/packages/issues/8146
Signed-off-by: Carlos Miguel Ferreira <carlosmf.pt@gmail.com>
Disabled doc and valgrind tests to speed up compilation.
Added --disable-ld-version-script to reduce compiled size.
Added -Wl,--gc-sections to reduce compiled size.
From 28339 to 27700 bytes.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
Disable debug to save some space: 163689 vs. 155034 bytes.
Add -Wl,--gc-sections. Down to 138627 bytes.
Miscellaneous cleanups.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
Remove patches 001-fix-unused.patch and 002-replace-nitems.patch,
similar fixes to make libudev-fbsd compile were applied upstream.
Refresh remaining patches.
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
The inline if statement does not work correctly. Moved it to a more proper place.
Also changed the install to install the symlinks as well.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
Instead of libextractor-1.8.tar.gz, the SHA-256 sum of
libextractor-1.8.tar.gz.sig was entered by accident.
Fix that.
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
Reduces package size
175705 to 162704 bytes on mt7621
Also removed NTLM auth support. Brings size down to 161433
Signed-off-by: Rosen Penev <rosenp@gmail.com>
Update to 0.9.62
Various cosmetic changes to Makefile
Fix variants and default to no ssl variant
Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>
Remove FPIC as it is already default. Both fPIC and DPIC are passed.
Some extra configure arguments to speed up build times.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
Add keyctl binary, which can be used to add fscrypt support to ext4 and
other filesystems that support it.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
Some of these were introduced after the Makefile was written. Adding them
guarentees fewer issues down the road.
Also did some small reorganization for consistency between packages.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
classpath builds with -Wextra and, unless configured with
--disable-werror, -Werror. Since GCC 7 added -Wimplicit-fallthrough=3
to -Wextra we need to make it not an error for code that doesn't use
__attribute__((fallthrough)) yet.
Signed-off-by: Daniel Santos <daniel.santos@pobox.com>
Depends on PR #7126
With this change:
eb03aa43b9
boost iostreams supports zstd compression. If the zstd package is built
before boost, then the packaging step complains that libzstd.so is not
packaged.
Build Tested: PR #7876 used to fail CI without this, now it passes.
Signed-off-by: Amol Bhave <ambhave@fb.com>
Also drop the CVE patches which are already covered by this new release.
Compile tested for and run tested on mxs platform.
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
libp11 uses OpenSSL's ENGINE quite extensively with seemingly no simple
way to disable it. Add it as a dependency.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
ENGINE support is needed for GOST, which is already disabled. However, it
is going to be disabled by default in a future update. This fixes the
compilation failure.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
Upstream switched to GitHub for releases. Follow suit.
Rearranged Makefile quite a bit to be more similar to other projects.
Added PKG_BUILD_PARALLEL for faster compilation.
Added PKG_CPE_ID for proper CVE tracking.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
The dependent packages fail to build when using uclibc++ due to some
missing feature. It's probably easy to add a fix but for right now, switch
back to fix compilation.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
This commit:
- adds support for parallel builds (the possibilities of building parts
of sqlite3 in parellel are limited, but there is no downside)
- adds a CVE/CPE ID
- Removes useless "=1" from -D[EFINES]
- Adds --disable-debug (default anyway, just makes it explicit), put
--disable-static-shell up top to sort the list alphabetically
- Saves one INSTALL_DIR line in the end
Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
sqlite3 can use libedit, readline or disable command-line editing
support altogether. This commit adds a choice to menuselect.
The default is changed from readline to libedit, as the latter is
upstream's first choice and is also a bit smaller than readline.
Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
Adds (most) configure switches to menuselect. The defaults are _not_
changed, meaning the default configuration itself remains the same.
This enables changing the configuration through menuselect and adds
flags that other packages may use.
Config.in is renamed to Config-lib.in in anticipation of a future commit
where the cli tool package also gets a file to source.
The variables also get a prefix change from SQLITE to SQLITE3 in case
there will be a new major release in the future that may coexist with
sqlite3.
Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
Even if /etc/asound.conf isn't installed we should try to
preserve user configurations during sysupgrades
Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>
Set platform specfic flags to avoid sqlite using built-in variants
Remove CONFIGURE_VARS, already properly set by toolchain
Change order of TARGET_CFLAGS to match upstream documentation
Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>
This patch updates OpenLDAP to 2.4.47, introduces new build
parameters and places openldap-server, openldap-utils and
libopenldap under a separate menu item in Network.
OpenLDAP is difficult to find in menuconfig at present. Making
a separate menu item for OpenLDAP for selection of packages and
enabling or disabling build parameters makes better sense.
To have access to the loglevel directive, OpenLDAP must be built
with debugging information. Having access to the loglevel directive
is essential during the initial configuration of OpenLDAP server.
International users may want to enable ICU support to have access
to international characters.
Signed-off-by: Val Kulkov <val.kulkov@gmail.com>
This package update provides one new library:
-> Safe Numerics: A library for guaranteed correct integer arithmetic for
C++14 and later, from Robert Ramey [1].
Discontinued Libraries
-> Signals (v1) is now removed. Its removal was announced in 1.68 and its
deprecation was announced in 1.54. Boost 1.68 is the last release that
provides this library. Users are encouraged to use Signals2 instead.
The Boost community thanks Douglas Gregor for his work on Signals which
served its users well and which also inspired Signals2 [2].
More info can be found at the usual place [3].
[1] : https://www.boost.org/doc/libs/1_69_0/libs/safe_numerics/doc/html/index.html
[2] : https://www.boost.org/doc/libs/1_69_0/doc/html/signals2.html
[3] : https://www.boost.org/users/history/version_1_69_0.html
Signed-off-by: Carlos Miguel Ferreira <carlosmf.pt@gmail.com>
Defaulting to -fPIC is a bad idea, especially for executables (here:
sqlite3-cli). In short, there are certain security implications as well
as overhead/performance penalties. Details see:
https://wiki.gentoo.org/wiki/Project:Hardened/Position_Independent_Code_internals
The configure script is able to detect the need for PIC and adds the
flag when needed anyway (when compiling the library).
Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
A remote code execution vuln has been found in sqlite. Infos available
here:
https://blade.tencent.com/magellan/index_en.html
sqlite 3.26.0 contains the fix.
This commit also changes source URL to https.
Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
Move to new GitHub fork and switch to codeload tarballs.
Backported upstream patch to fix compilation.
Also update URL to fix uscan.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
