mirror of
https://git.yoctoproject.org/poky
synced 2026-03-09 16:59:40 +01:00
822c6db93e
Patch [1] linked in NVD report fixes issue in cache code introduced only in v6.0.0 (as can be seen in tags containind that commit). [1]1265ff8d99[2]7a004a7ac2(From OE-Core rev: 1d7c87fa2e499927cb6a26e4b2ad99e6127b6e33) Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Yoann Congal <yoann.congal@smile.fr> Signed-off-by: Paul Barker <paul@pbarker.dev>
56 lines
2.2 KiB
BlitzBasic
56 lines
2.2 KiB
BlitzBasic
SUMMARY = "Text shaping library"
|
|
DESCRIPTION = "HarfBuzz is an OpenType text shaping engine."
|
|
HOMEPAGE = "http://www.freedesktop.org/wiki/Software/HarfBuzz"
|
|
BUGTRACKER = "https://bugs.freedesktop.org/enter_bug.cgi?product=HarfBuzz"
|
|
SECTION = "libs"
|
|
LICENSE = "MIT"
|
|
LIC_FILES_CHKSUM = "file://COPYING;md5=6ee0f16281694fb6aa689cca1e0fb3da \
|
|
file://src/hb-ucd.cc;beginline=1;endline=15;md5=29d4dcb6410429195df67efe3382d8bc \
|
|
"
|
|
|
|
UPSTREAM_CHECK_URI = "https://github.com/${BPN}/${BPN}/releases"
|
|
UPSTREAM_CHECK_REGEX = "harfbuzz-(?P<pver>\d+(\.\d+)+).tar"
|
|
|
|
SRC_URI = "https://github.com/${BPN}/${BPN}/releases/download/${PV}/${BPN}-${PV}.tar.xz \
|
|
file://CVE-2022-33068.patch \
|
|
file://0001-Fix-conditional.patch \
|
|
file://CVE-2023-25193-pre1.patch \
|
|
file://CVE-2023-25193.patch"
|
|
SRC_URI[sha256sum] = "98f68777272db6cd7a3d5152bac75083cd52a26176d87bc04c8b3929d33bce49"
|
|
|
|
inherit meson pkgconfig lib_package gtk-doc gobject-introspection
|
|
|
|
GIR_MESON_ENABLE_FLAG = 'enabled'
|
|
GIR_MESON_DISABLE_FLAG = 'disabled'
|
|
GTKDOC_MESON_ENABLE_FLAG = 'enabled'
|
|
GTKDOC_MESON_DISABLE_FLAG = 'disabled'
|
|
|
|
PACKAGECONFIG ??= "cairo freetype glib icu"
|
|
PACKAGECONFIG[cairo] = "-Dcairo=enabled,-Dcairo=disabled,cairo"
|
|
PACKAGECONFIG[freetype] = "-Dfreetype=enabled,-Dfreetype=disabled,freetype"
|
|
PACKAGECONFIG[glib] = "-Dglib=enabled,-Dglib=disabled,glib-2.0"
|
|
PACKAGECONFIG[graphite] = "-Dgraphite=enabled,-Dgraphite=disabled,graphite2"
|
|
PACKAGECONFIG[icu] = "-Dicu=enabled,-Dicu=disabled,icu"
|
|
|
|
PACKAGES =+ "${PN}-icu ${PN}-icu-dev ${PN}-subset"
|
|
|
|
LEAD_SONAME = "libharfbuzz.so"
|
|
|
|
do_install:append() {
|
|
# If no tools are installed due to PACKAGECONFIG then this directory might
|
|
# still be installed, so remove it to stop packaging warnings.
|
|
[ ! -d ${D}${bindir} ] || rmdir --ignore-fail-on-non-empty ${D}${bindir}
|
|
}
|
|
|
|
FILES:${PN}-icu = "${libdir}/libharfbuzz-icu.so.*"
|
|
FILES:${PN}-icu-dev = "${libdir}/libharfbuzz-icu.la \
|
|
${libdir}/libharfbuzz-icu.so \
|
|
${libdir}/pkgconfig/harfbuzz-icu.pc \
|
|
"
|
|
FILES:${PN}-subset = "${libdir}/libharfbuzz-subset.so.*"
|
|
|
|
BBCLASSEXTEND = "native nativesdk"
|
|
|
|
# fixed-version: vulnerability was introduced in v6.0.0
|
|
CVE_CHECK_IGNORE += "CVE-2026-22693"
|