Files
buildroot/package/fluidsynth/fluidsynth.mk
Thomas Perale 7554481734 package/fluidsynth: add patch for CVE-2025-56225
Fixes the following vulnerability:

- CVE-2025-56225:
    fluidsynth-2.4.6 and earlier versions is vulnerable to Null pointer
    dereference in fluid_synth_monopoly.c, that can be triggered when
    loading an invalid midi file.

For more information, see:
  - https://www.cve.org/CVERecord?id=CVE-2025-56225
  - 45f2a79f42

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-02-26 10:20:16 +01:00

88 lines
2.2 KiB
Makefile

################################################################################
#
# fluidsynth
#
################################################################################
FLUIDSYNTH_VERSION = 2.4.3
FLUIDSYNTH_SITE = $(call github,FluidSynth,fluidsynth,v$(FLUIDSYNTH_VERSION))
FLUIDSYNTH_LICENSE = LGPL-2.1+
FLUIDSYNTH_LICENSE_FILES = LICENSE
FLUIDSYNTH_CPE_ID_VENDOR = fluidsynth
FLUIDSYNTH_INSTALL_STAGING = YES
FLUIDSYNTH_DEPENDENCIES = libglib2
# 0001-Fix-a-nullpointer-dereference-during-legato-mode.patch
FLUIDSYNTH_IGNORE_CVES += CVE-2025-56225
ifeq ($(BR2_PACKAGE_FLUIDSYNTH_ALSA_LIB),y)
FLUIDSYNTH_CONF_OPTS += -Denable-alsa=1
FLUIDSYNTH_DEPENDENCIES += alsa-lib
else
FLUIDSYNTH_CONF_OPTS += -Denable-alsa=0
endif
ifeq ($(BR2_PACKAGE_FLUIDSYNTH_DBUS),y)
FLUIDSYNTH_CONF_OPTS += -Denable-dbus=1
FLUIDSYNTH_DEPENDENCIES += dbus
else
FLUIDSYNTH_CONF_OPTS += -Denable-dbus=0
endif
ifeq ($(BR2_PACKAGE_FLUIDSYNTH_FLOATS),y)
FLUIDSYNTH_CONF_OPTS += -Denable-floats=1
else
FLUIDSYNTH_CONF_OPTS += -Denable-floats=0
endif
ifeq ($(BR2_PACKAGE_FLUIDSYNTH_JACK2),y)
FLUIDSYNTH_CONF_OPTS += -Denable-jack=1
FLUIDSYNTH_DEPENDENCIES += jack2
else
FLUIDSYNTH_CONF_OPTS += -Denable-jack=0
endif
ifeq ($(BR2_PACKAGE_FLUIDSYNTH_LIBSNDFILE),y)
FLUIDSYNTH_CONF_OPTS += -Denable-libsndfile=1
FLUIDSYNTH_DEPENDENCIES += libsndfile
else
FLUIDSYNTH_CONF_OPTS += -Denable-libsndfile=0
endif
ifeq ($(BR2_PACKAGE_FLUIDSYNTH_PORTAUDIO),y)
FLUIDSYNTH_CONF_OPTS += -Denable-portaudio=1
FLUIDSYNTH_DEPENDENCIES += portaudio
else
FLUIDSYNTH_CONF_OPTS += -Denable-portaudio=0
endif
ifeq ($(BR2_PACKAGE_FLUIDSYNTH_PULSEAUDIO),y)
FLUIDSYNTH_CONF_OPTS += -Denable-pulseaudio=1
FLUIDSYNTH_DEPENDENCIES += pulseaudio
else
FLUIDSYNTH_CONF_OPTS += -Denable-pulseaudio=0
endif
ifeq ($(BR2_PACKAGE_FLUIDSYNTH_READLINE),y)
FLUIDSYNTH_CONF_OPTS += -Denable-readline=1
FLUIDSYNTH_DEPENDENCIES += readline
else
FLUIDSYNTH_CONF_OPTS += -Denable-readline=0
endif
ifeq ($(BR2_PACKAGE_FLUIDSYNTH_SDL2),y)
FLUIDSYNTH_CONF_OPTS += -Denable-sdl2=1
FLUIDSYNTH_DEPENDENCIES += sdl2
else
FLUIDSYNTH_CONF_OPTS += -Denable-sdl2=0
endif
ifeq ($(BR2_PACKAGE_SYSTEMD),y)
FLUIDSYNTH_CONF_OPTS += -Denable-systemd=1
FLUIDSYNTH_DEPENDENCIES += systemd
else
FLUIDSYNTH_CONF_OPTS += -Denable-systemd=0
endif
$(eval $(cmake-package))