mirror of
https://git.yoctoproject.org/poky
synced 2026-02-09 18:23:02 +01:00
Add CVE-2015-1283 patch for fixing integer overflow bug in expat. Details are at below link: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1283 Patch comes from: https://hg.mozilla.org/releases/mozilla-esr31/rev/2f3e78643f5c https://codereview.chromium.org/1224303003 (From OE-Core rev: c89c5383e304a52b604a3672ac93fd88b5eb8b41) Signed-off-by: Zhixiong Chi <Zhixiong.Chi@windriver.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
23 lines
763 B
PHP
23 lines
763 B
PHP
SUMMARY = "A stream-oriented XML parser library"
|
|
DESCRIPTION = "Expat is an XML parser library written in C. It is a stream-oriented parser in which an application registers handlers for things the parser might find in the XML document (like start tags)"
|
|
HOMEPAGE = "http://expat.sourceforge.net/"
|
|
SECTION = "libs"
|
|
LICENSE = "MIT"
|
|
|
|
SRC_URI = "${SOURCEFORGE_MIRROR}/expat/expat-${PV}.tar.gz \
|
|
file://autotools.patch \
|
|
file://expat-CVE-2015-1283.patch \
|
|
"
|
|
|
|
inherit autotools lib_package gzipnative
|
|
|
|
# This package uses an archive format known to have issue with some
|
|
# versions of gzip
|
|
do_unpack[depends] += "gzip-native:do_populate_sysroot"
|
|
|
|
do_configure_prepend () {
|
|
rm -f ${S}/conftools/libtool.m4
|
|
}
|
|
|
|
BBCLASSEXTEND = "native nativesdk"
|