buildroot/package/libsoup, branch 2019.02-op-build

libsoup: add patch to fix build on hosts without Python 3.x

2018-09-01T13:49:46+00:00

For no reason, the tld-parser.py script was changed from using "python" to using "python3" in upstream commit 4b924e573da307436169d5ef7e04c0ab85b36ef9. This patch reverts this change to fix the build of libsoup on systems that don't have Python 3.x installed. It avoids the need to add host-python3 as a dependency. Furthermore, the tld-parser.py script has anyway been removed upstream, and replaced by a dependency on a separate library providing TLD information. Therefore, there is no risk of this particular script becoming Python 3 only. Fixes: http://autobuild.buildroot.net/results/91c2d6a1ca011787130db06695d6cd9e882f7258 http://autobuild.buildroot.net/results/a318e595f02937534b3f8698ef4c04194a8b34af Thanks to Asaf Kahlon for some initial work/research on this build issue. Signed-off-by: Thomas Petazzoni

libsoup: security bump to version 2.62.3

2018-08-28T20:38:10+00:00

Fixes CVE-2018-12910: The get_cookies function in soup-cookie-jar.c in libsoup 2.63.2 allows attackers to have unspecified impact via an empty hostname. Cc: Fabrice Fontaine Signed-off-by: Baruch Siach Signed-off-by: Thomas Petazzoni

libsoup: update homepage link

2018-07-03T19:39:10+00:00

Cc: Fabrice Fontaine Signed-off-by: Baruch Siach Signed-off-by: Thomas Petazzoni

Revert "gnutls: drop wchar dependency"

2018-06-30T16:41:41+00:00

This reverts commit 694cdb9273433e8a1278e2e3bb2a7fe2004aa813. Just like commit 68c3f5257d94 (Revert "gnutls: make it non-wchar friendly") before. It turns out that gnulib expects some other library to provide a wctomb() implementation. So when the C library does not provide one it is left as undefined symbol in libgnutls.so. Add a comment to reduce the chance of repeating the same mistake again. Fixes: http://autobuild.buildroot.net/results/86f/86f08276fcb0cc557ab3cc5f57229b2c0c6ac2d7/ http://autobuild.buildroot.net/results/7c4/7c4bcb839f0ad5bc0496b4115ff391a3b312581a/ http://autobuild.buildroot.net/results/1c3/1c353f542c49bbe5520266c0ebb6a58589032453/ Reported-by: Matt Weber Cc: Matt Weber Signed-off-by: Baruch Siach Signed-off-by: Thomas Petazzoni

gnutls: drop wchar dependency

2018-06-22T09:43:33+00:00

Commit 19448f40a0 (gnutls: use included unistring unless libunistring is selected) made libunistring an optional dependency. So now gnutls no longer depend on wchar. Drop wchar dependency of libmicrohttpd and libsoup, which are gnutls reverse dependencies that do not depend themselves on wchar. Update the comments in libsoup and taskd; the wchar dependency is now not due to gnutls. Cc: Matt Weber Signed-off-by: Baruch Siach Signed-off-by: Peter Korsgaard

libsoup: security bump to version 2.56.1

2017-09-08T09:14:09+00:00

Fixes CVE-2017-2885: stack based buffer overflow with HTTP Chunked Encoding For more details, see https://bugzilla.gnome.org/show_bug.cgi?id=785774 While we're at it, add a hash for the license file. Signed-off-by: Peter Korsgaard

package/gnutls: disable for static build

2017-05-29T20:52:34+00:00

The gnutils code uses __attribute__((constructor)) and __attribute__((destructor)) to call constructor/desctructor when a shared library is loaded. Constructor/desctructor are not used when a static library is used (except when if -Wl,--whole-archive -lgnutls -Wno-whole-archive is used, not tested). Even if gnutls initialization (_gnutls_global_init()) may be called manually, the gnutls maintainer said it's not supported [1]. "Note that static linking applications with gnutls is not something supported. gnutls relies on library constructors and destructors which are not loaded when linking statically." Now the gnutls script warns about static linking [2]. So disable gnutls statically by adding "depends on !BR2_STATIC_LIBS" at Kconfig level and --disable-static in GNUTLS_CONF_OPTS. Fixes: [taskd] http://autobuild.buildroot.net/results/c2d/c2dd5c1c9dc87d2943c15e58ee56e67d7375368c [ffmpeg] http://autobuild.buildroot.net/results/892/8926d319d6d1cd1ee72239ad7d9ca869d2355628 [sngrep] http://autobuild.buildroot.net/results/f7f/f7fb42d3742f6f01000a0d181e0c785640284405 [1] https://gitlab.com/gnutls/gnutls/issues/203 [2] https://gitlab.com/gnutls/gnutls/commit/6b748886799f88ddee9721dba4fc4d52854832ae Signed-off-by: Bernd Kuhls [Romain: merge our two patches together add some option comment disable static libgnutls.a add sngrep autobuilder reference] Signed-off-by: Romain Naour Tested-by: Bernd Kuhls [Thomas: do not disable libgnutls.a] Signed-off-by: Thomas Petazzoni

package: use SPDX short identifier for LGPLv2/LGPLv2+

2017-04-01T13:19:13+00:00

We want to use SPDX identifier for license string as much as possible. SPDX short identifier for LGPLv2/LGPLv2+ is LGPL-2.0/LGPL-2.0+. This change is done using following command. find . -name "*.mk" | xargs sed -ri '/LICENSE( )?[\+:]?=/s/LGPLv2(\+)?/LGPL-2.0\1/g' Signed-off-by: Rahul Bedarkar Signed-off-by: Thomas Petazzoni

libsoup: bump to version 2.56.0

2016-09-20T18:07:55+00:00

Signed-off-by: Gustavo Zacarias Signed-off-by: Thomas Petazzoni

libsoup: bump to version 2.54.1

2016-04-26T19:55:37+00:00

Signed-off-by: Gustavo Zacarias Signed-off-by: Thomas Petazzoni