mirror of
https://git.yoctoproject.org/poky
synced 2026-05-02 18:32:15 +02:00
bfe251d727
NASM v2.16 was discovered to contain a heap buffer overflow in the
component quote_for_pmake() asm/nasm.c:856
References:
https://nvd.nist.gov/vuln/detail/CVE-2022-44370
Upstream patches:
2d4e695241
(From OE-Core rev: 1568df72136f46f0767bba56c10c48bf2a1ec259)
Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
25 lines
795 B
BlitzBasic
25 lines
795 B
BlitzBasic
SUMMARY = "General-purpose x86 assembler"
|
|
SECTION = "devel"
|
|
HOMEPAGE = "http://www.nasm.us/"
|
|
DESCRIPTION = "The Netwide Assembler (NASM) is an assembler and disassembler for the Intel x86 architecture."
|
|
LICENSE = "BSD-2-Clause"
|
|
LIC_FILES_CHKSUM = "file://LICENSE;md5=90904486f8fbf1861cf42752e1a39efe"
|
|
|
|
SRC_URI = "http://www.nasm.us/pub/nasm/releasebuilds/${PV}/nasm-${PV}.tar.bz2 \
|
|
file://0001-stdlib-Add-strlcat.patch \
|
|
file://0002-Add-debug-prefix-map-option.patch \
|
|
file://CVE-2022-44370.patch \
|
|
"
|
|
|
|
SRC_URI[sha256sum] = "3c4b8339e5ab54b1bcb2316101f8985a5da50a3f9e504d43fa6f35668bee2fd0"
|
|
|
|
EXTRA_AUTORECONF:append = " -I autoconf/m4"
|
|
|
|
inherit autotools-brokensep
|
|
|
|
BBCLASSEXTEND = "native"
|
|
|
|
DEPENDS = "groff-native"
|
|
|
|
CVE_PRODUCT = "netwide_assembler"
|