<feed xmlns='http://www.w3.org/2005/Atom'>
<title>buildroot/package/openswan, branch 2016.08</title>
<subtitle>OpenPOWER buildroot sources</subtitle>
<id>https://git.raptorcs.com/git/buildroot/atom?h=2016.08</id>
<link rel='self' href='https://git.raptorcs.com/git/buildroot/atom?h=2016.08'/>
<link rel='alternate' type='text/html' href='https://git.raptorcs.com/git/buildroot/'/>
<updated>2016-08-29T15:55:00+00:00</updated>
<entry>
<title>package/openswan: not available on musl</title>
<updated>2016-08-29T15:55:00+00:00</updated>
<author>
<name>Bernd Kuhls</name>
<email>bernd.kuhls@t-online.de</email>
</author>
<published>2016-07-31T09:51:22+00:00</published>
<link rel='alternate' type='text/html' href='https://git.raptorcs.com/git/buildroot/commit/?id=b63c8d36f46e601fd83fc0b9bdd4cc440fa059ab'/>
<id>urn:sha1:b63c8d36f46e601fd83fc0b9bdd4cc440fa059ab</id>
<content type='text'>
After fixing the usual sys/cdefs.h and _P stuff the build still fails
because Openswan makes use of GLOB_ functions

/home/bernd/buildroot/br4/output/build/openswan-2.6.48/lib/libipsecconf/parser.l:200:29: error: ‘GLOB_BRACE’ undeclared (first use in this function)
      globresult = glob(try, GLOB_BRACE, NULL, &amp;globbuf);
                             ^
/home/bernd/buildroot/br4/output/build/openswan-2.6.48/lib/libipsecconf/parser.l:200:29: note: each undeclared identifier is reported only once for each function it appears in
/home/bernd/buildroot/br4/output/build/openswan-2.6.48/lib/libipsecconf/parser.l:207:41: error: ‘GLOB_NOMAGIC’ undeclared (first use in this function)
       globresult = glob(try, GLOB_BRACE|GLOB_NOMAGIC, NULL, &amp;globbuf);

https://github.com/xelerance/Openswan/blob/master/lib/libipsecconf/parser.l#L200
https://github.com/xelerance/Openswan/blob/master/lib/libipsecconf/parser.l#L207
[...]
                                         ^
which musl does not support:
http://www.openwall.com/lists/musl/2013/09/16/1

Fixes
http://autobuild.buildroot.net/results/70d/70da34c1528b51e92e9e60788f83733d70b33353/

Signed-off-by: Bernd Kuhls &lt;bernd.kuhls@t-online.de&gt;
Acked-by: "Yann E. MORIN" &lt;yann.morin.1998@free.fr&gt;
Signed-off-by: Peter Korsgaard &lt;peter@korsgaard.com&gt;
</content>
</entry>
<entry>
<title>toolchain: add hidden symbol for PIE support</title>
<updated>2016-07-24T19:44:22+00:00</updated>
<author>
<name>Waldemar Brodkorb</name>
<email>wbx@openadk.org</email>
</author>
<published>2016-07-11T14:35:14+00:00</published>
<link rel='alternate' type='text/html' href='https://git.raptorcs.com/git/buildroot/commit/?id=3c93901bcd2f77232581ca82a3a5f741aa9e6345'/>
<id>urn:sha1:3c93901bcd2f77232581ca82a3a5f741aa9e6345</id>
<content type='text'>
uClibc-ng does not support PIE for some architectures as
arc and m68k. It isn't implemented in the static linking case, too.
With musl toolchains you might have static PIE support with little
patching of gcc. Static linking for GNU libc isn't enabled in
buildroot. Fixup any package using special treatment of PIE.
(grep -ir pie package/*/*.mk)

Signed-off-by: Waldemar Brodkorb &lt;wbx@openadk.org&gt;
[Thomas: use positive logic.]
Signed-off-by: Thomas Petazzoni &lt;thomas.petazzoni@free-electrons.com&gt;
</content>
</entry>
<entry>
<title>package/openswan: bump version to 2.6.46</title>
<updated>2016-01-31T20:08:44+00:00</updated>
<author>
<name>Bernd Kuhls</name>
<email>bernd.kuhls@t-online.de</email>
</author>
<published>2016-01-23T16:04:10+00:00</published>
<link rel='alternate' type='text/html' href='https://git.raptorcs.com/git/buildroot/commit/?id=cefcb852cfaac99cdba3d202ff1ad0618a3a5cad'/>
<id>urn:sha1:cefcb852cfaac99cdba3d202ff1ad0618a3a5cad</id>
<content type='text'>
Signed-off-by: Bernd Kuhls &lt;bernd.kuhls@t-online.de&gt;
Signed-off-by: Peter Korsgaard &lt;peter@korsgaard.com&gt;
</content>
</entry>
<entry>
<title>openswan: security bump to version 2.6.45</title>
<updated>2015-09-04T09:56:49+00:00</updated>
<author>
<name>Gustavo Zacarias</name>
<email>gustavo@zacarias.com.ar</email>
</author>
<published>2015-09-02T19:15:47+00:00</published>
<link rel='alternate' type='text/html' href='https://git.raptorcs.com/git/buildroot/commit/?id=37187c38db30485afe80309dc9b57609cfdcf17f'/>
<id>urn:sha1:37187c38db30485afe80309dc9b57609cfdcf17f</id>
<content type='text'>
Fixes:
CVE-2015-3240 - IKE DoS when using NSS.

Signed-off-by: Gustavo Zacarias &lt;gustavo@zacarias.com.ar&gt;
Reviewed-by: Vicente Olivert Riera &lt;Vincent.Riera@imgtec.com&gt;
Tested-by: Vicente Olivert Riera &lt;Vincent.Riera@imgtec.com&gt;
Signed-off-by: Peter Korsgaard &lt;peter@korsgaard.com&gt;
</content>
</entry>
<entry>
<title>iproute2: needs headers &gt;= 3.0</title>
<updated>2015-07-28T20:56:09+00:00</updated>
<author>
<name>Gustavo Zacarias</name>
<email>gustavo@zacarias.com.ar</email>
</author>
<published>2015-07-28T14:14:22+00:00</published>
<link rel='alternate' type='text/html' href='https://git.raptorcs.com/git/buildroot/commit/?id=869af2ad3de46c79677699f007a5ee942aa0bb3d'/>
<id>urn:sha1:869af2ad3de46c79677699f007a5ee942aa0bb3d</id>
<content type='text'>
The newest iproute2 version requires a toolchain with headers &gt;= 3.0 for
proper namespace &amp; bpf support, so adjust the dependencies and
dependants accordingly. Fixes:

http://autobuild.buildroot.net/results/fa8/fa810f310c7540e02c0ed84c4a3ce74ab602daa5/

Signed-off-by: Gustavo Zacarias &lt;gustavo@zacarias.com.ar&gt;
Signed-off-by: Thomas Petazzoni &lt;thomas.petazzoni@free-electrons.com&gt;
</content>
</entry>
<entry>
<title>package/openswan: fix parallel build</title>
<updated>2015-07-14T11:04:12+00:00</updated>
<author>
<name>Yann E. MORIN</name>
<email>yann.morin.1998@free.fr</email>
</author>
<published>2015-07-14T10:53:42+00:00</published>
<link rel='alternate' type='text/html' href='https://git.raptorcs.com/git/buildroot/commit/?id=931ee9c1ae2f4e3507d16e394c34c719803c294f'/>
<id>urn:sha1:931ee9c1ae2f4e3507d16e394c34c719803c294f</id>
<content type='text'>
Fixes:
    http://autobuild.buildroot.org/results/2ec/2ecb098b01bd44d75182b15f98c1fd2a8c927438/
    http://autobuild.buildroot.org/results/18f/18f0166f3fa831f321818e286d9c2e9037f8c8d0/
    ...

Cc: Gustavo Zacarias &lt;gustavo@zacarias.com.ar&gt;
Signed-off-by: "Yann E. MORIN" &lt;yann.morin.1998@free.fr&gt;
Signed-off-by: Thomas Petazzoni &lt;thomas.petazzoni@free-electrons.com&gt;
</content>
</entry>
<entry>
<title>openswan: bump to version 2.6.43</title>
<updated>2015-06-26T07:44:12+00:00</updated>
<author>
<name>Gustavo Zacarias</name>
<email>gustavo@zacarias.com.ar</email>
</author>
<published>2015-06-25T18:52:37+00:00</published>
<link rel='alternate' type='text/html' href='https://git.raptorcs.com/git/buildroot/commit/?id=626f5aa4f01334cc612ddbde0ff680f9dcb0e854'/>
<id>urn:sha1:626f5aa4f01334cc612ddbde0ff680f9dcb0e854</id>
<content type='text'>
Signed-off-by: Gustavo Zacarias &lt;gustavo@zacarias.com.ar&gt;
Reviewed-by: "Yann E. MORIN" &lt;yann.morin.1998@free.fr&gt;
Tested-by: "Yann E. MORIN" &lt;yann.morin.1998@free.fr&gt;
Signed-off-by: Peter Korsgaard &lt;peter@korsgaard.com&gt;
</content>
</entry>
<entry>
<title>packages: indentation cleanup</title>
<updated>2015-03-31T11:57:41+00:00</updated>
<author>
<name>Jerzy Grzegorek</name>
<email>jerzy.grzegorek@trzebnica.net</email>
</author>
<published>2015-03-31T07:21:57+00:00</published>
<link rel='alternate' type='text/html' href='https://git.raptorcs.com/git/buildroot/commit/?id=bd8c733fb4a0ca6ca1aa72f8b549d53dcd37f4ee'/>
<id>urn:sha1:bd8c733fb4a0ca6ca1aa72f8b549d53dcd37f4ee</id>
<content type='text'>
This commit doesn't touch infra packages.

Signed-off-by: Jerzy Grzegorek &lt;jerzy.grzegorek@trzebnica.net&gt;
Signed-off-by: Thomas Petazzoni &lt;thomas.petazzoni@free-electrons.com&gt;
</content>
</entry>
<entry>
<title>openswan: do not use -fPIE for static builds</title>
<updated>2015-03-05T22:32:17+00:00</updated>
<author>
<name>Vicente Olivert Riera</name>
<email>Vincent.Riera@imgtec.com</email>
</author>
<published>2015-03-05T09:22:17+00:00</published>
<link rel='alternate' type='text/html' href='https://git.raptorcs.com/git/buildroot/commit/?id=ecdcd55eb5a39815ea3b4737bae37c41d89cef36'/>
<id>urn:sha1:ecdcd55eb5a39815ea3b4737bae37c41d89cef36</id>
<content type='text'>
-fPIE produces shared objects, and shared objects need "/lib/ld.so"
which won't be present on a statically built target. So, building
openswan with -static -fPIE is invalid and will fail with an error like
this one:

/br/output/host/opt/ext-toolchain/bin/../lib/gcc/mipsel-ctng-linux-uclibc/4.8.2/../../../../mipsel-ctng-linux-uclibc/bin/ld:
/br/output/host/usr/mipsel-buildroot-linux-uclibc/sysroot/usr/lib/libgmp.a(lt2-add.o):
relocation R_MIPS_HI16 against `__gnu_local_gp' can not be used when
making a shared object; recompile with -fPIC

Fixes:

  http://autobuild.buildroot.net/results/68b/68b2211cc7acfbdfed8d4b161cbdaf1429315017/

Signed-off-by: Vicente Olivert Riera &lt;Vincent.Riera@imgtec.com&gt;
Signed-off-by: Thomas Petazzoni &lt;thomas.petazzoni@free-electrons.com&gt;
</content>
</entry>
<entry>
<title>openswan: re-add -fPIE flag</title>
<updated>2015-03-04T22:04:29+00:00</updated>
<author>
<name>Thomas Petazzoni</name>
<email>thomas.petazzoni@free-electrons.com</email>
</author>
<published>2015-03-04T22:03:48+00:00</published>
<link rel='alternate' type='text/html' href='https://git.raptorcs.com/git/buildroot/commit/?id=9d0c45094118d1c238b389c5d6dc9a1a901bc575'/>
<id>urn:sha1:9d0c45094118d1c238b389c5d6dc9a1a901bc575</id>
<content type='text'>
This flag was mistakenly removed in unrelated commit
5287358ff33ec4920a677a58152ad040151b843f.

Reported-by: Waldemar Brodkorb &lt;wbx@openadk.org&gt;
Signed-off-by: Thomas Petazzoni &lt;thomas.petazzoni@free-electrons.com&gt;
</content>
</entry>
</feed>
