summaryrefslogtreecommitdiffstats
path: root/package/libvncserver
Commit message (Collapse)AuthorAgeFilesLines
* libvncserver: add upstream security fix for CVE-2018-7225Peter Korsgaard2018-06-101-0/+65
| | | | | | | | | | | Fixes CVE-2018-7225 - An issue was discovered in LibVNCServer through 0.9.11. rfbProcessClientNormalMessage() in rfbserver.c does not sanitize msg.cct.length, leading to access to uninitialized and potentially sensitive data or possibly unspecified other impact (e.g., an integer overflow) via specially crafted VNC packets. Signed-off-by: Peter Korsgaard <peter@korsgaard.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
* boot, linux, package: use SPDX short identifier for GPLv2/GPLv2+Rahul Bedarkar2017-04-011-1/+1
| | | | | | | | | | | We want to use SPDX identifier for license strings as much as possible. SPDX short identifier for GPLv2/GPLv2+ is GPL-2.0/GPL-2.0+. This change is done by using following command. find . -name "*.mk" | xargs sed -ri '/LICENSE( )?[\+:]?=/s/\<GPLv2\>/GPL-2.0/g' Signed-off-by: Rahul Bedarkar <rahulbedarkar89@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* libvncserver: security bump to version 0.9.11Peter Korsgaard2017-01-062-2/+2
| | | | | | | | | | | Security related fixes: - Heap-based buffer overflow in rfbproto.c in LibVNCClient in LibVNCServer before 0.9.11 (CVE-2016-9941) - Heap-based buffer overflow in ultra.c in LibVNCClient in LibVNCServer before 0.9.11 (CVE-2016-9942) Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* libvncserver: disable on nios2, due to binutils issuesThomas Petazzoni2015-12-301-0/+2
| | | | | | | | Fixes: http://autobuild.buildroot.org/results/469/469d5667f05ca6954805772fcaaa2b33dfdc6167/ Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* packages: remove non-IPv6 dependencies and tweaksGustavo Zacarias2015-04-221-4/+0
| | | | | | | | Now that IPv6 is mandatory remove package dependencies and conditionals for it. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* libvncserver: OpenSSL support needs NPTL thread supportThomas Petazzoni2014-12-311-2/+2
| | | | | | | | | | | The OpenSSL support of libvncserver already has a dependency on thread support, but it in fact requires NPTL threading. Fixes: http://autobuild.buildroot.org/results/be2/be20dec9ffe7de3adc46a834852b20353d39baff/ Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* package: add hashes for SourceForge-hosted packagesYann E. MORIN2014-12-281-0/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Since SourceForge sometimes serves us faulty tarballs, we can tons of autobuild failures: http://autobuild.buildroot.org/results/9fb/9fba5bf086a4e7a29e5f7156ec43847db7aacfc4/ http://autobuild.buildroot.org/results/6c8/6c837b244c45ac3b3a887734a371cd6d226cf216/ ... Fix that by adding hash files for all SourceForge-hosted packages (thos etht did not already have it). We normally prefer to use hashes published by upstream, but hunting them all one by one is a tedious task, so those hashes were all locally computed with a script that searched for SF-hosted packages, downloades the associated tarball, computed the hash, and stored it in the corresponding .hash file. Also, SF publishes sha1 hashes, while I used the stronger sha256, since sha1 is now considered to be relatively weak. Signed-off-by: "Yann E. MORIN" <yann.morin.1998@free.fr> Cc: Peter Korsgaard <jacmet@uclibc.org> Cc: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> Cc: Maxime Hadjinlian <maxime.hadjinlian@gmail.com> Cc: Richard Braun <rbraun@sceen.net> Cc: Nathaniel Roach <nroach44@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* libvncserver: add config option for tightpng encoding supportFloris Bos2014-12-272-0/+20
| | | | | | | | | | | TightPNG encoding speeds up HTML5 based VNC clients like noVNC. libvncserver enables this encoding if both libpng and jpeg libraries are available. [Thomas: rewrap Config.in help text.] Signed-off-by: Floris Bos <bos@je-eigen-domein.nl> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* libvncserver: disable libva supportFloris Bos2014-12-271-0/+4
| | | | | | | | | | | | | | | | | | | | | The libvncclient library (part of libvncserver) has optional support for HW accelerated H264 video playback using libva However there are currently two problems with it: 1) it only supports libva compiled with X11 support enabled, but it does not verify that is the case, resulting in compile errors. 2) it only supports the libva 1.0.x API, and not newer libva versions, like 1.4.x we include with buildroot. https://github.com/LibVNC/libvncserver/issues/11 Disabling libva support for now. Signed-off-by: Floris Bos <bos@je-eigen-domein.nl> Acked-by: "Yann E. MORIN" <yann.morin.1998@free.fr> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* libvncserver: bump version to 0.9.10Floris Bos2014-12-265-345/+7
| | | | | | | | | | | [Thomas: - add comment about AUTORECONF = YES, noticed by Baruch Siach, and suggested by Yann E. Morin. - add dependency on host-pkgconf, since the configure script uses PKG_CHECK_MODULES.] Signed-off-by: Floris Bos <bos@je-eigen-domein.nl> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* packages: rename FOO_CONF_OPT into FOO_CONF_OPTSThomas De Schampheleire2014-10-041-8/+8
| | | | | | | | | | | | To be consistent with the recent change of FOO_MAKE_OPT into FOO_MAKE_OPTS, make the same change for FOO_CONF_OPT. Sed command used: find * -type f | xargs sed -i 's#_CONF_OPT\>#&S#g' Signed-off-by: Thomas De Schampheleire <thomas.de.schampheleire@gmail.com> Reviewed-by: "Yann E. MORIN" <yann.morin.1998@free.fr> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* libvncserver: add security patchesGustavo Zacarias2014-10-014-0/+343
| | | | | | | | | | | | | | | Fixes: CVE-2014-6051 and CVE-2014-6052 denial of service and possible code execution via integer overflow and lack of malloc error handling in MallocFrameBuffer() CVE-2014-6053 denial of service via large ClientCutText message. CVE-2014-6054 denial of service via zero scaling factor. CVE-2014-6055 denial of service and possible code execution via stack overflows in File Transfer feature. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* libvncserver: needs mmuPeter Korsgaard2014-02-191-0/+1
| | | | | | | | | Fixes http://autobuild.buildroot.net/results/30e/30e6a879ab6d84df4688c3d29761522f68dad9fc/ fork() is only used in VNCommand.c, so it seems doable to patch the sources (and send upstream) to make it work on !mmu if people are interested. Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* libvncserver: openssl support needs pthreadsPeter Korsgaard2013-11-221-2/+3
| | | | | | | | | Fixes http://autobuild.buildroot.net/results/c30/c3082693fe0da0c54d4bbf950dd6d74e1395c1d9/ Also pass --without-ssl if that isn't the case, as the configure script otherwise ends up detecting openssl if built before libvncserver. Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* libvncserver: fix build without pthreadPeter Korsgaard2013-11-131-0/+4
| | | | | | Fixes http://autobuild.buildroot.net/results/761/7618028d0781269d2f6f0a14d814da456f207475/ Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* Normalize separator size to 80Alexandre Belloni2013-06-061-2/+2
| | | | | Signed-off-by: Alexandre Belloni <alexandre.belloni@free-electrons.com> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
* libvncserver: handle libvncserver-config scriptThomas Petazzoni2013-05-111-0/+1
| | | | | Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
* libvncserver: gnutls support needs gcrypt as wellPeter Korsgaard2013-02-051-1/+1
| | | | | | Fixes http://autobuild.buildroot.org/results/3b479b8cf751cc0c075ab942b56aad36f79ada71 Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
* libvncserver: bump versionPeter Korsgaard2013-01-281-2/+3
| | | | Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
* packages: switch to host-pkgconfGustavo Zacarias2012-10-291-1/+1
| | | | | | Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Acked-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
* remove rest of the BR2_SOURCEFORGE_MIRROR referencesStefan Fröberg2012-08-281-1/+1
| | | | | Signed-off-by: Stefan Fröberg <stefan.froberg@petroprogram.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* all packages: rename XXXTARGETS to xxx-packageArnout Vandecappelle (Essensium/Mind)2012-07-171-1/+1
| | | | | | | | | | | | | Also remove the redundant $(call ...). This is a purely mechanical change, performed with find package linux toolchain boot -name \*.mk | \ xargs sed -i -e 's/$(eval $(call GENTARGETS))/$(eval $(generic-package))/' \ -e 's/$(eval $(call AUTOTARGETS))/$(eval $(autotools-package))/' \ -e 's/$(eval $(call CMAKETARGETS))/$(eval $(cmake-package))/' Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* libvncserver: ensure target libgcrypt-config is usedPeter Korsgaard2012-02-131-0/+1
| | | | Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
* package: add libvncserverPeter Korsgaard2012-02-102-0/+56
Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
OpenPOWER on IntegriCloud