buildroot/package/bash, branch 2017.02

bash: add upstream security fixes to patch level 12

2017-02-08T08:46:13+00:00

Fixes CVE-2017-5932 - Shell code execution on tab completion of specially crafted files. For details, see the report: https://github.com/jheyens/bash_completion_vuln/raw/master/2017-01-17.bash_completion_report.pdf We unfortunately cannot easily download these because of the file names (not ending in patch) and patch format (p0), so convert to p1 format and include in package/bash with the following script: for i in 06 07 08 09 10 11 12; do cat > bash44-0$i.patch << EOF >From https://ftp.gnu.org/gnu/bash/bash-4.4-patches/bash44-0$i Signed-off-by: Peter Korsgaard EOF curl https://ftp.gnu.org/gnu/bash/bash-4.4-patches/bash44-0$i | \ sed -e 's|^\*\*\* \.\./|*** |' -e 's|^--- |--- b/|' >> bash44-0$i.patch done Signed-off-by: Peter Korsgaard

bash: add upstream fixes to patch level 5

2017-01-08T19:05:07+00:00

We unfortunately cannot easily download these because of the file names (not ending in patch) and patch format (p0), so convert to p1 format and include in package/bash. Signed-off-by: Peter Korsgaard

bash: bump version to 4.4

2016-11-30T11:02:19+00:00

Signed-off-by: Vicente Olivert Riera Signed-off-by: Peter Korsgaard

package: move busybox show others dependency to per-package

2016-07-04T14:12:38+00:00

Having the BR2_PACKAGE_BUSYBOX_SHOW_OTHERS dependencies in package/Config.in is not very practical: it makes this file not very readable, and puts the dependency away from the package itself, which can sometimes be confusing. Therefore, this commit moves the dependency in each package Config.in file. Signed-off-by: Thomas Petazzoni Signed-off-by: Peter Korsgaard

package/bash: bump to patchlevel 46

2016-06-29T20:07:48+00:00

Signed-off-by: Bernd Kuhls Signed-off-by: Peter Korsgaard

bash re-enable parallel builds

2016-03-12T22:55:06+00:00

They don't seem to be causing any issues after bumping to the 4.3.x series and several tests. Signed-off-by: Gustavo Zacarias Tested-by: "Yann E. MORIN" Reviewed-by: "Yann E. MORIN" Signed-off-by: Thomas Petazzoni

bash: bump to patchlevel 42

2016-01-08T17:48:12+00:00

Signed-off-by: Gustavo Zacarias Signed-off-by: Peter Korsgaard

package/bash: indicate getcwd is malloc-supported

2015-09-04T14:45:42+00:00

When Bash attempts to find the current working directory, it uses a C library call `getcwd` to resolve it. When cross-compiling, the configuration process cannot determine if the target system's C library can support an "unfixed" path length. Therefore, Bash will fallback to a size of `PATH_MAX` for determining the current working directory. When using OverlayFS (and possible other file systems), this becomes an issue since file paths can commonly exceed standard `PATH_MAX` length. This typically results in the following error appearing: error retrieving current directory: [...] Common C library `getcwd` calls can default to a higher limit (usually the system's page size). The current configurable C libraries (as of at least 2015.08) support a zero (0) size buffer length. Most use the system's page size; musl, being an exception, which defaults to `PATH_MAX` (as Bash was doing). Since these C libraries support allocating buffer space with a zero (0) provided size, the following configuration change allows Bash to support getting a larger-length'ed working directory on target's that support it. Signed-off-by: James Knight Acked-by: Arnout Vandecappelle (Essensium/Mind) Signed-off-by: Peter Korsgaard

bash: bump to patchlevel 33

2015-03-18T13:39:28+00:00

Misc fixes. Signed-off-by: Gustavo Zacarias Signed-off-by: Thomas Petazzoni

Rename BR2_PREFER_STATIC_LIB to BR2_STATIC_LIBS

2014-12-11T21:48:13+00:00

Since a while, the semantic of BR2_PREFER_STATIC_LIB has been changed from "prefer static libraries when possible" to "use only static libraries". The former semantic didn't make much sense, since the user had absolutely no control/idea of which package would use static libraries, and which packages would not. Therefore, for quite some time, we have been starting to enforce that BR2_PREFER_STATIC_LIB should really build everything with static libraries. As a consequence, this patch renames BR2_PREFER_STATIC_LIB to BR2_STATIC_LIBS, and adjust the Config.in option accordingly. This also helps preparing the addition of other options to select shared, shared+static or just static. Note that we have verified that this commit can be reproduced by simply doing a global rename of BR2_PREFER_STATIC_LIB to BR2_STATIC_LIBS plus adding BR2_PREFER_STATIC_LIB to Config.in.legacy. Signed-off-by: Thomas Petazzoni Reviewed-by: "Yann E. MORIN"