mirror of
https://gitlab.com/buildroot.org/buildroot.git
synced 2026-09-25 11:30:37 -09:00
1d812dfa97
haproxy has a runtime test to verify that it is built with -fwrapv:
haproxy
FATAL ERROR: invalid code detected -- cannot go further, please recompile!
The source code was miscompiled by the compiler, which usually indicates that
some of the CFLAGS needed to work around overzealous compiler optimizations
were overwritten at build time. Please do not force CFLAGS, and read Makefile
and INSTALL files to decide on the best way to pass your local build options.
Build options :
TARGET = custom
CPU = generic
CC = /home/peko/source/buildroot/output-haproxy/host/bin/arm-linux-gcc
CFLAGS = -D_LARGEFILE_SOURCE -D_LARGEFILE64_SOURCE -D_FILE_OFFSET_BITS=64 -O2 -g0 -D_FORTIFY_SOURCE=1 -D_LARGEFILE_SOURCE -D_LARGEFILE64_SOURCE -D_FILE_OFFSET_BITS=64 -O2 -g0 -D_FORTIFY_SOURCE=1
OPTIONS = USE_THREAD=1 USE_DL=1
DEBUG = -DDEBUG_STRICT -DDEBUG_MEMORY_POOLS
Which comes from:
https://github.com/haproxy/haproxy/blob/v2.6.0/src/haproxy.c#L3008-L3037
So build it with -fwrapv to fix that.
Notice that this message also embeds the build path (through CC), breaking
reproducible builds.
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 94aa7f40b5)
Signed-off-by: Raphaël Mélotte <raphael.melotte@mind.be>
95 lines
2.5 KiB
Makefile
95 lines
2.5 KiB
Makefile
################################################################################
|
|
#
|
|
# haproxy
|
|
#
|
|
################################################################################
|
|
|
|
HAPROXY_VERSION_MAJOR = 2.6
|
|
HAPROXY_VERSION = $(HAPROXY_VERSION_MAJOR).32
|
|
HAPROXY_SITE = http://www.haproxy.org/download/$(HAPROXY_VERSION_MAJOR)/src
|
|
HAPROXY_LICENSE = GPL-2.0+ and LGPL-2.1+ with exceptions
|
|
HAPROXY_LICENSE_FILES = LICENSE doc/lgpl.txt doc/gpl.txt
|
|
HAPROXY_CPE_ID_VENDOR = haproxy
|
|
|
|
# Incomplete NVD annotations, fixed since v2.6.15
|
|
# https://git.haproxy.org/?p=haproxy-2.6.git;a=commit;h=832b672eee54866c7a42a1d46078cc9ae0d544d9
|
|
HAPROXY_IGNORE_CVES += CVE-2023-45539
|
|
|
|
# haproxy relies on signed overflow, so MUST be built with -fwrapv
|
|
HAPROXY_MAKE_OPTS = \
|
|
LD=$(TARGET_CC) \
|
|
CFLAGS="$(TARGET_CFLAGS) -fwrapv" \
|
|
PREFIX=/usr \
|
|
TARGET=custom
|
|
|
|
ifeq ($(BR2_STATIC_LIBS),)
|
|
HAPROXY_MAKE_OPTS += USE_DL=1
|
|
endif
|
|
|
|
ifeq ($(BR2_TOOLCHAIN_HAS_LIBATOMIC),y)
|
|
HAPROXY_LIBS += -latomic
|
|
endif
|
|
|
|
ifeq ($(BR2_TOOLCHAIN_HAS_THREADS_NPTL),y)
|
|
# threads uses atomics on gcc >= 4.7 and sync otherwise (see
|
|
# include/common/hathreads.h)
|
|
ifeq ($(BR2_TOOLCHAIN_GCC_AT_LEAST_4_7):$(BR2_TOOLCHAIN_HAS_ATOMIC),y:y)
|
|
HAPROXY_MAKE_OPTS += USE_THREAD=1
|
|
else ifeq ($(BR2_TOOLCHAIN_GCC_AT_LEAST_4_7):$(BR2_TOOLCHAIN_HAS_SYNC_4),:y)
|
|
HAPROXY_MAKE_OPTS += USE_THREAD=1
|
|
endif
|
|
endif
|
|
|
|
ifeq ($(BR2_PACKAGE_LUA_5_3),y)
|
|
HAPROXY_DEPENDENCIES += lua
|
|
HAPROXY_MAKE_OPTS += \
|
|
LUA_LIB_NAME=lua \
|
|
USE_LUA=1
|
|
endif
|
|
|
|
ifeq ($(BR2_PACKAGE_OPENSSL),y)
|
|
HAPROXY_DEPENDENCIES += openssl
|
|
HAPROXY_MAKE_OPTS += USE_OPENSSL=1
|
|
ifeq ($(BR2_STATIC_LIBS),y)
|
|
HAPROXY_LIBS += -lz
|
|
endif
|
|
endif
|
|
|
|
# pcre and pcre2 can't be enabled at the same time so prefer pcre2
|
|
ifeq ($(BR2_PACKAGE_PCRE2),y)
|
|
HAPROXY_DEPENDENCIES += pcre2
|
|
HAPROXY_MAKE_OPTS += \
|
|
PCRE2_CONFIG=$(STAGING_DIR)/usr/bin/pcre2-config \
|
|
USE_PCRE2=1
|
|
endif
|
|
|
|
ifeq ($(BR2_PACKAGE_SYSTEMD),y)
|
|
HAPROXY_DEPENDENCIES += systemd
|
|
HAPROXY_MAKE_OPTS += USE_SYSTEMD=1
|
|
endif
|
|
|
|
ifeq ($(BR2_PACKAGE_ZLIB),y)
|
|
HAPROXY_DEPENDENCIES += zlib
|
|
HAPROXY_MAKE_OPTS += USE_ZLIB=1
|
|
endif
|
|
|
|
HAPROXY_MAKE_OPTS += ADDLIB="$(HAPROXY_LIBS)"
|
|
|
|
HAPROXY_CFLAGS = $(TARGET_CFLAGS)
|
|
|
|
ifeq ($(BR2_TOOLCHAIN_HAS_GCC_BUG_90620),y)
|
|
HAPROXY_CFLAGS += -O0
|
|
endif
|
|
|
|
define HAPROXY_BUILD_CMDS
|
|
$(TARGET_MAKE_ENV) $(MAKE) $(TARGET_CONFIGURE_OPTS) \
|
|
$(HAPROXY_MAKE_OPTS) DEFINE="$(HAPROXY_CFLAGS)" -C $(@D)
|
|
endef
|
|
|
|
define HAPROXY_INSTALL_TARGET_CMDS
|
|
$(TARGET_MAKE_ENV) $(MAKE) $(TARGET_CONFIGURE_OPTS) \
|
|
$(HAPROXY_MAKE_OPTS) -C $(@D) DESTDIR=$(TARGET_DIR) install
|
|
endef
|
|
|
|
$(eval $(generic-package))
|