mirror of
https://git.yoctoproject.org/poky
synced 2026-09-20 12:49:33 +02:00
NASM v2.16 was discovered to contain a heap buffer overflow in the
component quote_for_pmake() asm/nasm.c:856
References:
https://nvd.nist.gov/vuln/detail/CVE-2022-44370
Upstream patches:
2d4e695241
( cherry picked from commit 1568df72136f46f0767bba56c10c48bf2a1ec259 )
(From OE-Core rev: 91e716b75861f2a4acee58a0c3f95e511058f1dc)
Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
Signed-off-by: Lee Chee Yang <chee.yang.lee@intel.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
25 lines
785 B
BlitzBasic
25 lines
785 B
BlitzBasic
SUMMARY = "General-purpose x86 assembler"
|
|
SECTION = "devel"
|
|
HOMEPAGE = "http://www.nasm.us/"
|
|
DESCRIPTION = "The Netwide Assembler (NASM) is an assembler and disassembler for the Intel x86 architecture."
|
|
LICENSE = "BSD-2-Clause"
|
|
LIC_FILES_CHKSUM = "file://LICENSE;md5=90904486f8fbf1861cf42752e1a39efe"
|
|
|
|
SRC_URI = "http://www.nasm.us/pub/nasm/releasebuilds/${PV}/nasm-${PV}.tar.bz2 \
|
|
file://0001-stdlib-Add-strlcat.patch \
|
|
file://0002-Add-debug-prefix-map-option.patch \
|
|
file://CVE-2022-44370.patch \
|
|
"
|
|
|
|
SRC_URI[sha256sum] = "04e7343d9bf112bffa9fda86f6c7c8b120c2ccd700b882e2db9f57484b1bd778"
|
|
|
|
EXTRA_AUTORECONF_append = " -I autoconf/m4"
|
|
|
|
inherit autotools
|
|
|
|
BBCLASSEXTEND = "native"
|
|
|
|
DEPENDS = "groff-native"
|
|
|
|
CVE_PRODUCT = "netwide_assembler"
|