Files
poky/meta/recipes-core/expat/expat.inc
Zhixiong Chi 30c06a412e expat: CVE-2015-1283
Add CVE-2015-1283 patch for fixing integer overflow bug in expat.

Details are at below link:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1283

Patch comes from:
https://hg.mozilla.org/releases/mozilla-esr31/rev/2f3e78643f5c
https://codereview.chromium.org/1224303003

(From OE-Core rev: c89c5383e304a52b604a3672ac93fd88b5eb8b41)

Signed-off-by: Zhixiong Chi <Zhixiong.Chi@windriver.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-01-07 13:40:16 +00:00

23 lines
763 B
PHP

SUMMARY = "A stream-oriented XML parser library"
DESCRIPTION = "Expat is an XML parser library written in C. It is a stream-oriented parser in which an application registers handlers for things the parser might find in the XML document (like start tags)"
HOMEPAGE = "http://expat.sourceforge.net/"
SECTION = "libs"
LICENSE = "MIT"
SRC_URI = "${SOURCEFORGE_MIRROR}/expat/expat-${PV}.tar.gz \
file://autotools.patch \
file://expat-CVE-2015-1283.patch \
"
inherit autotools lib_package gzipnative
# This package uses an archive format known to have issue with some
# versions of gzip
do_unpack[depends] += "gzip-native:do_populate_sysroot"
do_configure_prepend () {
rm -f ${S}/conftools/libtool.m4
}
BBCLASSEXTEND = "native nativesdk"