mirror of
https://gitlab.com/buildroot.org/buildroot.git
synced 2026-09-10 00:04:06 -09:00
b75ccc686e
Backport the upstream fix for a heap buffer overflow in
convert_fname() when growing the iconv output buffer.
Backport to: 2025.02.x
Signed-off-by: Stefan Müller <stemu86@gmx.ch>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit e991fa0716)
Signed-off-by: Titouan Christophe <titouan.christophe@mind.be>
88 lines
2.3 KiB
Makefile
88 lines
2.3 KiB
Makefile
################################################################################
|
|
#
|
|
# wget
|
|
#
|
|
################################################################################
|
|
|
|
WGET_VERSION = 1.25.0
|
|
WGET_SOURCE = wget-$(WGET_VERSION).tar.lz
|
|
WGET_SITE = $(BR2_GNU_MIRROR)/wget
|
|
WGET_DEPENDENCIES = host-pkgconf
|
|
WGET_LICENSE = GPL-3.0+
|
|
WGET_LICENSE_FILES = COPYING
|
|
WGET_CPE_ID_VENDOR = gnu
|
|
|
|
# 0002-src-metalink.c-clean_metalink_string-Fix-buffer-underflow.patch
|
|
# 0003-src-metalink.c-clean_metalink_string-Fix-inverted-trailing-space-check.patch
|
|
# 0004-src-metalink.c-Include-ctype.h.patch
|
|
WGET_IGNORE_CVES += CVE-2026-58469
|
|
|
|
# 0005-src-http.c-parse_content_range-Fix-integer-overflow.patch
|
|
# 0006-src-http.c-parse_content_range-Use-strtoll-instead-of-strtol.patch
|
|
WGET_IGNORE_CVES += CVE-2026-58470
|
|
|
|
# 0007-src-url.c-convert_fname-Fix-buffer-overflow.patch
|
|
WGET_IGNORE_CVES += CVE-2026-58471
|
|
|
|
ifeq ($(BR2_PACKAGE_LIBPSL),y)
|
|
WGET_CONF_OPTS += --with-libpsl
|
|
WGET_DEPENDENCIES += libpsl
|
|
else
|
|
WGET_CONF_OPTS += --without-libpsl
|
|
endif
|
|
|
|
ifeq ($(BR2_PACKAGE_GNUTLS),y)
|
|
WGET_CONF_OPTS += --with-ssl=gnutls
|
|
WGET_DEPENDENCIES += gnutls
|
|
else ifeq ($(BR2_PACKAGE_OPENSSL),y)
|
|
WGET_CONF_OPTS += --with-ssl=openssl
|
|
WGET_DEPENDENCIES += openssl
|
|
else
|
|
WGET_CONF_OPTS += --without-ssl
|
|
endif
|
|
|
|
ifeq ($(BR2_PACKAGE_LIBICONV),y)
|
|
WGET_DEPENDENCIES += libiconv
|
|
endif
|
|
|
|
# BR2_ENABLE_LOCALE and BR2_PACKAGE_LIBICONV are mutually exclusive
|
|
ifeq ($(BR2_ENABLE_LOCALE)$(BR2_PACKAGE_LIBICONV)$(BR2_PACKAGE_LIBIDN2),yy)
|
|
WGET_CONF_OPTS += --enable-iri
|
|
WGET_DEPENDENCIES += libidn2
|
|
else
|
|
WGET_CONF_OPTS += --disable-iri
|
|
endif
|
|
|
|
ifeq ($(BR2_PACKAGE_UTIL_LINUX_LIBUUID),y)
|
|
WGET_CONF_OPTS += --with-libuuid
|
|
WGET_DEPENDENCIES += util-linux
|
|
else
|
|
WGET_CONF_OPTS += --without-libuuid
|
|
endif
|
|
|
|
ifeq ($(BR2_PACKAGE_ZLIB),y)
|
|
WGET_CONF_OPTS += --with-zlib
|
|
WGET_DEPENDENCIES += zlib
|
|
else
|
|
WGET_CONF_OPTS += --without-zlib
|
|
endif
|
|
|
|
ifeq ($(BR2_PACKAGE_C_ARES),y)
|
|
WGET_CONF_OPTS += --with-cares
|
|
WGET_DEPENDENCIES += c-ares
|
|
else
|
|
WGET_CONF_OPTS += --without-cares
|
|
endif
|
|
|
|
ifeq ($(BR2_PACKAGE_PCRE2),y)
|
|
WGET_CONF_OPTS += --disable-pcre --enable-pcre2
|
|
WGET_DEPENDENCIES += pcre2
|
|
else ifeq ($(BR2_PACKAGE_PCRE),y)
|
|
WGET_CONF_OPTS += --enable-pcre --disable-pcre2
|
|
WGET_DEPENDENCIES += pcre
|
|
else
|
|
WGET_CONF_OPTS += --disable-pcre --disable-pcre2
|
|
endif
|
|
|
|
$(eval $(autotools-package))
|