buildroot/package/ntp, branch 2018.02.1

ntp: fix build without SSP support

2018-03-30T19:06:39+00:00

In version 4.2.8p11 ntp changed its configure script build hardening parameter to '--with-hardenfile'. Update the parameter name to avoid -fstack-protector-all when the toolchain does not support this option. Fixes: http://autobuild.buildroot.net/results/60e/60e8b9864932f2cabc7deb43234abe168bd113c5/ http://autobuild.buildroot.net/results/592/592db6836817bb078a2f1146d2ce6241bf7997a3/ http://autobuild.buildroot.net/results/b07/b070fbc66a928888df8d2561dad3632778d55e0d/ Signed-off-by: Baruch Siach Signed-off-by: Peter Korsgaard (cherry picked from commit 5766b6fb34a897092092f7d76d6b4f2bc8c48571) Signed-off-by: Peter Korsgaard

ntp: security bump to version 4.2.8p11

2018-03-30T19:05:55+00:00

Fixed or improved security issues: CVE-2016-1549 (fixed in 4.2.8p7; this release adds protection): A malicious authenticated peer can create arbitrarily-many ephemeral associations in order to win the clock selection algorithm CVE-2018-7182: Buffer read overrun leads to undefined behavior and information leak CVE-2018-7170: Multiple authenticated ephemeral associations CVE-2018-7184: Interleaved symmetric mode cannot recover from bad state CVE-2018-7185: Unauthenticated packet can reset authenticated interleaved association CVE-2018-7183: ntpq:decodearr() can write beyond its buffer limit Drop patch #3. libntpq_a_CFLAGS now includes NTP_HARD_CFLAGS via AM_CFLAGS. Add license file hash. Signed-off-by: Baruch Siach Signed-off-by: Peter Korsgaard (cherry picked from commit da05d748057a98254a9c4fbd6afbc8ebf7e08afd) Signed-off-by: Peter Korsgaard

ntp: explicitly enable openssl-random when crypto is enabled

2018-02-04T15:20:38+00:00

If OpenSSL is selected, --enable-openssl-random should be explicitly enabled for consistency with the disable case. [Peter: tweak commit text] Signed-off-by: Adam Duskett Signed-off-by: Peter Korsgaard

ntp: does not work with libressl

2018-01-08T08:16:51+00:00

Fixes #10556 The --with-crypto handling in ntp only works with libopenssl, not with libressl, where it ends up with compilation issues like: ntp_control.c:(.text+0x64): undefined reference to `EVP_MD_CTX_new' ntp_control.c:(.text+0x10c): undefined reference to `EVP_MD_CTX_free' libntpd.a(ntp_crypto.o): In function `bighash': ntp_crypto.c:(.text+0x2e8): undefined reference to `EVP_MD_CTX_new' ntp_crypto.c:(.text+0x328): undefined reference to `EVP_MD_CTX_free' libntpd.a(ntp_crypto.o): In function `crypto_verify': ntp_crypto.c:(.text+0x6cc): undefined reference to `EVP_MD_CTX_new' ntp_crypto.c:(.text+0x710): undefined reference to `EVP_MD_CTX_free' ntp_crypto.c:(.text+0x72c): undefined reference to `EVP_MD_CTX_free' So ensure we only pass --with-crypto when libopenssl is used. Signed-off-by: Peter Korsgaard Signed-off-by: Thomas Petazzoni

package/*/Config.in: fix help text check-package warnings

2017-12-18T08:22:54+00:00

This commit fixes the warnings reported by check-package on the help text of all package Config.in files, related to the formatting of the help text: should start with a tab, then 2 spaces, then at most 62 characters. The vast majority of warnings fixed were caused by too long lines. A few warnings were related to spaces being used instead of a tab to indent the help text. Signed-off-by: Thomas Petazzoni

packages: fix trailing spaces and slash

2017-12-01T21:56:55+00:00

... as reported by utils/check-package. Signed-off-by: "Yann E. MORIN" Cc: Adam Duskett Signed-off-by: Thomas Petazzoni

ntp: no longer require openssl

2017-11-08T12:33:20+00:00

4.2.8p10 no longer requires openssl to compile. Signed-off-by: Adam Duskett Signed-off-by: Peter Korsgaard

ntp: enable/disable sntp support depending on BR2_PACKAGE_NTP_SNTP

2017-06-19T20:11:10+00:00

We already have an option for selecting sntp support in ntp that can be chosen from the menuconfig, and ntp's configure script has a --with-sntp option (with its --without counterpart) which can be used for disabling sntp support in ntp. However, we are not using it. This patch will make use of it. Signed-off-by: Vicente Olivert Riera Signed-off-by: Thomas Petazzoni

ntp: add patch to fix -fPIC issue

2017-05-17T19:46:14+00:00

This commit adds a patch that fixes the build on AArch64 and MIPS of the ntp package, which was caused by some parts of ntp being built without -fPIC. Fixes: [aarch64] http://autobuild.buildroot.net/results/866b1d28595efd8b6becf83d0a64b596538d58b0 [mips] http://autobuild.buildroot.net/results/c2a945855172970736a8ffea9c564f029a023344 Thanks to Romain Naour for the initial analysis. Signed-off-by: Thomas Petazzoni

ntp: use SPDX short identifier for ntp license

2017-04-01T20:38:42+00:00

Signed-off-by: Rahul Bedarkar Signed-off-by: Thomas Petazzoni