mirror of
https://gitlab.com/buildroot.org/buildroot.git
synced 2026-09-27 04:20:38 -09:00
13dfeece13
This fixes a potential NULL pointer dereference
As a side note, this package has many opened CVEs, but upstream doesn't seem
to really consider them as security issues, see their disclaimer here:
https://github.com/yasm/yasm/blob/master/SECURITY.md
We could speculate that this disclaimer has been written as a consequence of
the many small CVEs opened in a short time, that don't have a substantial
security impact (besides the command line tool crashing). All of these small
CVEs have been opened for bug reports issued by a third party who used a
fuzzy tester to manipulate the assembler input
Signed-off-by: Titouan Christophe <titouan.christophe@mind.be>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 875f5670aa)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
27 lines
896 B
Makefile
27 lines
896 B
Makefile
################################################################################
|
|
#
|
|
# yasm
|
|
#
|
|
################################################################################
|
|
|
|
YASM_VERSION = 1.3.0
|
|
YASM_SITE = http://www.tortall.net/projects/yasm/releases
|
|
YASM_LICENSE = BSD-2-Clause, BSD-3-Clause, Artistic, GPL-2.0, LGPL-2.0
|
|
YASM_LICENSE_FILES = COPYING BSD.txt Artistic.txt GNU_GPL-2.0 GNU_LGPL-2.0
|
|
YASM_CPE_ID_VENDOR = tortall
|
|
|
|
# 0001-fix-null-pointer-dereference-in-yasm_expr_get_intnum.patch
|
|
YASM_IGNORE_CVES += CVE-2021-33454
|
|
|
|
# This sed prevents it compiling 2 programs (vsyasm and ytasm)
|
|
# that are only of use on Microsoft Windows.
|
|
define YASM_PRE_CONFIGURE_FIXUP
|
|
$(SED) 's#) ytasm.*#)#' $(@D)/Makefile.in
|
|
endef
|
|
|
|
YASM_PRE_CONFIGURE_HOOKS += YASM_PRE_CONFIGURE_FIXUP
|
|
HOST_YASM_PRE_CONFIGURE_HOOKS += YASM_PRE_CONFIGURE_FIXUP
|
|
|
|
$(eval $(autotools-package))
|
|
$(eval $(host-autotools-package))
|