mirror of
https://gitlab.com/buildroot.org/buildroot.git
synced 2026-09-25 19:40:35 -09:00
875f5670aa
This fixes a potential NULL pointer dereference As a side note, this package has many opened CVEs, but upstream doesn't seem to really consider them as security issues, see their disclaimer here: https://github.com/yasm/yasm/blob/master/SECURITY.md We could speculate that this disclaimer has been written as a consequence of the many small CVEs opened in a short time, that don't have a substantial security impact (besides the command line tool crashing). All of these small CVEs have been opened for bug reports issued by a third party who used a fuzzy tester to manipulate the assembler input Signed-off-by: Titouan Christophe <titouan.christophe@mind.be> Signed-off-by: Julien Olivain <ju.o@free.fr>
27 lines
896 B
Makefile
27 lines
896 B
Makefile
################################################################################
|
|
#
|
|
# yasm
|
|
#
|
|
################################################################################
|
|
|
|
YASM_VERSION = 1.3.0
|
|
YASM_SITE = http://www.tortall.net/projects/yasm/releases
|
|
YASM_LICENSE = BSD-2-Clause, BSD-3-Clause, Artistic, GPL-2.0, LGPL-2.0
|
|
YASM_LICENSE_FILES = COPYING BSD.txt Artistic.txt GNU_GPL-2.0 GNU_LGPL-2.0
|
|
YASM_CPE_ID_VENDOR = tortall
|
|
|
|
# 0001-fix-null-pointer-dereference-in-yasm_expr_get_intnum.patch
|
|
YASM_IGNORE_CVES += CVE-2021-33454
|
|
|
|
# This sed prevents it compiling 2 programs (vsyasm and ytasm)
|
|
# that are only of use on Microsoft Windows.
|
|
define YASM_PRE_CONFIGURE_FIXUP
|
|
$(SED) 's#) ytasm.*#)#' $(@D)/Makefile.in
|
|
endef
|
|
|
|
YASM_PRE_CONFIGURE_HOOKS += YASM_PRE_CONFIGURE_FIXUP
|
|
HOST_YASM_PRE_CONFIGURE_HOOKS += YASM_PRE_CONFIGURE_FIXUP
|
|
|
|
$(eval $(autotools-package))
|
|
$(eval $(host-autotools-package))
|