summaryrefslogtreecommitdiffstats
path: root/package/libxml2
Commit message (Collapse)AuthorAgeFilesLines
* libxml2: add upstream security fixesBaruch Siach2016-11-052-0/+431
| | | | | | | Fixes: CVE-2016-5131, CVE-2016-4658. Signed-off-by: Baruch Siach <baruch@tkos.co.il> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* libxml2: fix m68k uclinux compileWaldemar Brodkorb2016-08-111-0/+5
| | | | | | | | | | | | The GCC manual suggest when getting: relocation truncated to fit: R_68K_GOT16O foobar to use -mxgot. Fixes: http://autobuild.buildroot.net/results/8a4e26bb1c0c64759e3914eced0a36baa0967f0b/ Signed-off-by: Waldemar Brodkorb <wbx@openadk.org> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* libxml2: security bump to version 2.9.4Baruch Siach2016-05-232-2/+2
| | | | | | | | | | | | | | | | | | | | | Fixes a bunch of security issues including: CVE-2016-1762: Heap-based buffer overread in xmlNextChar CVE-2016-1834: heap-buffer-overflow in xmlStrncat CVE-2016-3705: Missing increments of recursion depth counter to XML parser A few more security fixes are listed in the release announcement at https://mail.gnome.org/archives/xml/2016-May/msg00023.html. Also fixes: http://autobuild.buildroot.net/results/6db/6db405a097b192876c0b1b8d59051d614563c617/ http://autobuild.buildroot.net/results/62a/62addf4abd2a0df8222a81a83c16b2b9a61c9481/ http://autobuild.buildroot.net/results/204/20402690ad05d10d456a219da5252a38badf1da0/ Signed-off-by: Baruch Siach <baruch@tkos.co.il> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* package/libxml2: Remove autoreconfBernd Kuhls2015-12-131-1/+0
| | | | | | | | | | | | | Autoreconf is not necessary since we do not patch this package anymore. LIBXML2_AUTORECONF was added back in 2012 https://git.busybox.net/buildroot/commit/package/libxml2?id=aa5d9ba3b86f21be934fdb436525a833bf120305 and apparently not removed along with the patches applied before https://git.busybox.net/buildroot/commit/package/libxml2?id=dc0e7cfc3e4050ce7c0404b11f747bf1500c50b7 Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* libxml2: security bump to version 2.9.3Danomi Manchego2015-11-2210-442/+2
| | | | | | | | | | | | | | | | | | | - Fixes: - CVE-2015-5312 - Another entity expansion issue - CVE-2015-7497 - Avoid an heap buffer overflow in xmlDictComputeFastQKey - CVE-2015-7500 - Fix memory access error due to incorrect entities boundaries - CVE-2015-8242 - Buffer overead with HTML parser in push mode - Incorporates upstreamed patches as well, which also fixed: - CVE-2015-1819 - The xmlreader in libxml allows remote attackers to cause a denial of service (memory consumption) via crafted XML data, related to an XML Entity Expansion (XEE) attack. - CVE-2015-7941 - out-of-bounds memory access. - CVE-2015-7942 - heap-buffer-overflow in xmlParseConditionalSections. - CVE-2015-8035 - DoS via crafted xz file. Signed-off-by: Danomi Manchego <danomimanchego123@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* libxml2: add several security patchesGustavo Zacarias2015-11-186-0/+360
| | | | | | | | | | | | | | | Fixes: CVE-2015-1819 - The xmlreader in libxml allows remote attackers to cause a denial of service (memory consumption) via crafted XML data, related to an XML Entity Expansion (XEE) attack. CVE-2015-7941 - out-of-bounds memory access. CVE-2015-7942 - heap-buffer-overflow in xmlParseConditionalSections. CVE-2015-8035 - DoS via crafted xz file. All patches upstream. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* package/libxml2: Fix musl compileBernd Kuhls2015-04-111-0/+52
| | | | | Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* packages: remove (non-)lfs dependencies and tweaksGustavo Zacarias2015-04-011-4/+0
| | | | | | | | Now that largefile is mandatory removes package dependencies and conditionals. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* package/libxml2: add optional LZMA supportYann E. MORIN2015-03-251-1/+8
| | | | | | | | | | | LZMA support is provided by xz, since liblzma is long dead. Contrary to zlib, liblzma uses pkg-config, so we do not need to add the full path to libzma. Reported-by: vdm on IRC Signed-off-by: "Yann E. MORIN" <yann.morin.1998@free.fr> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* package/libxml2: fix libxml2-config.cmakeSamuel Martin2014-12-301-0/+28
| | | | | | | | | | This patch aligns the libxml2-config.cmake module to what the libxml-2.0.pc set. This patch has already been sent upstream: https://mail.gnome.org/archives/xml/2014-December/msg00015.html Signed-off-by: Samuel Martin <s.martin49@gmail.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* libxml2: explicitly state zlib dirGustavo Zacarias2014-10-181-1/+1
| | | | | | | | | | Pass the zlib directory prefix to --with-zlib otherwise it expands into absolute (distribution) directories leading to bad test results in configure. Fixes: http://autobuild.buildroot.net/results/303/303d6d165c5423944122bf430575c018479733f8/build-end.log Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* libxml2: security bump to version 2.9.2Gustavo Zacarias2014-10-172-1/+4
| | | | | | | | | | | Fixes: CVE-2014-3660 - billion laugh variant CVE-2014-0191 - Do not fetch external parameter entities Also add hash file. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* packages: rename FOO_CONF_OPT into FOO_CONF_OPTSThomas De Schampheleire2014-10-041-6/+6
| | | | | | | | | | | | To be consistent with the recent change of FOO_MAKE_OPT into FOO_MAKE_OPTS, make the same change for FOO_CONF_OPT. Sed command used: find * -type f | xargs sed -i 's#_CONF_OPT\>#&S#g' Signed-off-by: Thomas De Schampheleire <thomas.de.schampheleire@gmail.com> Reviewed-by: "Yann E. MORIN" <yann.morin.1998@free.fr> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* package/mesa3d: Remove dependency for the libxml2 module of host-pythonBernd Kuhls2014-07-173-45/+1
| | | | | | | | | | | Remove the ugly BR2_PACKAGE_HOST_LIBXML2_PYTHON hack as well as mesa3d was the only package needing it, this is not the case anymore since: http://cgit.freedesktop.org/mesa/mesa/commit/configure.ac?id=2de70fe23f320ce4f559e37057fe07b7af99cf5a Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* host-libxml2: Prefer python2 when python3 is also installedBernd Kuhls2014-04-161-0/+27
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fixes mesa3d build errors: http://autobuild.buildroot.net/results/d10/d105a0b3ca11fad34f9a2dae0dae9bd041d918a6/ http://autobuild.buildroot.net/results/d71/d7121443715024d15a66ff1abf1261803c10cd35/ http://autobuild.buildroot.net/results/ce6/ce64164d76972f82acab277afc9c95a876c6433e/ checking for python2... python2 checking python2 module: libxml2... no configure: error: failed to find required module libxml2 make: *** [/home/test/test/1/output/build/mesa3d-10.0.4/.stamp_configured] Error 1 mesa3d needs python2 bindings installed by libxml2. To enforce their build option BR2_PACKAGE_HOST_LIBXML2_PYTHON is used exclusively by mesa3d so this patch does not affect other packages. Without this patch host-libxml2 installs the python bindings in $(HOST_DIR)/usr/lib/$(PYTHON3_VERSION_MAJOR) using this defconfig: BR2_PACKAGE_MESA3D=y BR2_PACKAGE_PYTHON3=y because $(HOST_DIR)/usr/bin/python points to $(HOST_DIR)/usr/bin/python3: Quote from host-libxml2 configure log: Found python in /home/fli4l/br2/buildroot/output/host/usr/bin/python Found Python version 3.4 HOST_$(PACKAGE)_NEEDS_HOST_PYTHON does not work here because libxml2 does not use the python-package infrastructure. libxml2-python2.patch extends the python detection code in host-libxml2 to first look for python2, to keep the patch small I did not update the indentions: Found python2 in /home/fli4l/br2/buildroot/output/host/usr/bin/python2 Found Python version 2.7 Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de> Tested-by: Samuel Martin <s.martin49@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* libxml2: do not detect zlib/lzma when not availableThomas Petazzoni2014-02-261-3/+5
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The host-libxml2 package does not depend on zlib or lzma, but may detect versions available on the host. This can cause problems in the following situation: 1 host-libxml2 is built, finds an available lzma library in the system, enables lzma support by using it. 2 host-xz is built, which installs a different version of the lzma library into $(HOST_DIR) 3 host-libxslt is built, tries to link against libxml2, which fails because now the visible lzma library is the one from $(HOST_DIR)/usr/lib and no longer the one libxml2 was built agains. To fix this, this patch passes --without-zlib and --without-lzma to the host package. In addition, since the target variant of libxml2 does not have provisions to depend on the target lzma, we also pass --without-lzma for the target variant. The case of zlib for the target was already properly taken into account. Fixes: http://autobuild.buildroot.org/results/6dc/6dcef647eb0f0db7de3f34194eb15ceebc645b39/ Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* Config.in files: fix incorrect indentationThomas De Schampheleire2013-12-251-1/+1
| | | | | | | Tab instead of spaces Signed-off-by: Thomas De Schampheleire <thomas.de.schampheleire@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* package/libxml2: bumping version to 2.9.1Carsten Schoenert2013-06-281-1/+1
| | | | | Signed-off-by: Carsten Schoenert <c.schoenert@gmail.com> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
* Normalize separator size to 80Alexandre Belloni2013-06-061-2/+2
| | | | | Signed-off-by: Alexandre Belloni <alexandre.belloni@free-electrons.com> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
* libxml2: depend on zlib and libiconv if appropriateSimon Dawson2013-05-171-0/+15
| | | | | Signed-off-by: Simon Dawson <spdawson@gmail.com> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
* package: use <pkg>_CONFIG_SCRIPTS wherever possibleThomas Petazzoni2013-02-081-16/+1
| | | | | | | | | | | Use the <pkg>_CONFIG_SCRIPTS mechanism in all packages for which it does all what the package was doing. A few packages, like libxslt, are for now left out, since they need some additional fixup (for example a fixup of includedir). Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> Acked-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
* packages: remove all := signsThomas Petazzoni2013-01-201-1/+1
| | | | | | | | | | | Finally get rid of all := used for variable definitions in packages, as we suggest in our manual and during the review of new packages. While I was at it, I also sometimes added a few missing new lines between the header and the first variable definition. Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
* libxml2: bump to version 2.9.0Gustavo Zacarias2012-12-161-1/+1
| | | | | Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
* host-libxml2: enable debug for mesa3dArnout Vandecappelle2012-12-161-0/+5
| | | | | | | | | | | | | The API generation script in mesa3d requires libxml2 to be built with debug, because it uses the lsCountNode function which is only available in debug mode. Note that this is the second "temporary" hack to make mesa3d work. See http://lists.busybox.net/pipermail/buildroot/2012-November/061936.html for possible more fundamental solutions. Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
* libxml2: add support for building host library with python supportVellemans Noel2012-11-172-1/+12
| | | | | | | | | Patch based on the initial work of Will Wagner (Thanks Will). libxml2 host library with python support is required to build mesa3d (7.10.1) Signed-off-by: Vellemans Noel <noel.vellemans@visionbms.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
* packages: switch to host-pkgconfGustavo Zacarias2012-10-291-1/+1
| | | | | | Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Acked-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
* libxml2: add license infoGustavo Zacarias2012-10-041-0/+2
| | | | | Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
* all packages: rename XXXTARGETS to xxx-packageArnout Vandecappelle (Essensium/Mind)2012-07-171-1/+1
| | | | | | | | | | | | | Also remove the redundant $(call ...). This is a purely mechanical change, performed with find package linux toolchain boot -name \*.mk | \ xargs sed -i -e 's/$(eval $(call GENTARGETS))/$(eval $(generic-package))/' \ -e 's/$(eval $(call AUTOTARGETS))/$(eval $(autotools-package))/' \ -e 's/$(eval $(call CMAKETARGETS))/$(eval $(cmake-package))/' Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* all packages: use new host-xxx-package macrosArnout Vandecappelle (Essensium/Mind)2012-07-171-1/+1
| | | | | | | | | | | This is a purely mechanical change, performed with find package linux toolchain boot -name \*.mk | \ xargs sed -i -e 's/$(eval $(call GENTARGETS,host))/$(eval $(host-generic-package))/' \ -e 's/$(eval $(call AUTOTARGETS,host))/$(eval $(host-autotools-package))/' \ -e 's/$(eval $(call CMAKETARGETS,host))/$(eval $(host-cmake-package))/' Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* libxml2: bump to version 2.8.0Gustavo Zacarias2012-06-129-795/+1
| | | | | Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
* libxml2: ensure patches are applied in the correct orderPeter Korsgaard2012-03-148-0/+0
| | | | | | | Some of the patches depends on eachother, so rename them to ensure they get applied in the correct order. Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
* libxml2: add multiple security patchesGustavo Zacarias2012-03-119-0/+795
| | | | | | | | Fixes for CVE-2011-1944, CVE-2011-2821, CVE-2011-2834, CVE-2011-3919, CVE-2012-0841 and others from upstream. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
* package: remove useless arguments from AUTOTARGETSThomas Petazzoni2011-09-291-2/+2
| | | | | | | | | | Thanks to the pkgparentdir and pkgname functions, we can rewrite the AUTOTARGETS macro in a way that avoids the need for each package to repeat its name and the directory in which it is present. [Peter: pkgdir->pkgparentdir] Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
* libxml2: fixup configure optionsGustavo Zacarias2011-05-021-7/+2
| | | | | | | | | Some configure options changed so adjust. Forcibly disabling threads isn't good and also it's detected by configure when there are no threads. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
* libxml2: remove xml2-config script from TARGET_DIRThomas Petazzoni2011-03-071-0/+8
| | | | Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* libxml2: bump to version 2.7.8Gustavo Zacarias2010-12-221-5/+2
| | | | | | | | Bump libxml2 to version 2.7.8. Re-enable libtool patch now that we handle libtool2 in package infra. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
* Remove support for shared configuration cacheThomas Petazzoni2010-11-051-2/+0
| | | | | | | | | | | | | | | | | The configuration cache shared between packages, while being in principle a nice idea to speed-up the configuration of packages by avoiding repetitive identical checks, turned out to be unreliable due to the subtle differences between similar but not identical checks in different packages. After spending some time trying to fix those, we concluded that supporting the shared configuration cache is definitely too hard and too unreliable, and that we'd better get rid of it altogether. This patch therefore removes the shared configuration cache infrastructure and usage. Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
* libxml2: convert old-style hook to new-style hookThomas Petazzoni2010-09-121-5/+7
| | | | Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* Globally remove aclocal directories from targetMalte Starostik2010-07-301-2/+1
| | | | | | | | | | * Remove $(TARGET_DIR)/usr/share/aclocal from target-finalize when not installing devfiles and * Remove some (now) redundant cleanup from individual packages Signed-off-by: Malte Starostik <m-starostik@versanet.de> Acked-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
* Remove gtk-doc documentations from targetPaulius Zaleckas2010-05-051-3/+1
| | | | | | | | | | | | | On my target rootfs it is installed documentation for: atk, cairo, gdk, gdk-pixbuf, gio, glib, gobject, gtk, pango It ocupies 34M of space. Configure option --disable-gtk-doc doesn't prevent installation of it. So we should remove them manually if documentation is disabled. [Peter: also remove manual rm's from hal/libxml2/libglade] Signed-off-by: Paulius Zaleckas <paulius.zaleckas@gmail.com> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
* packages: remove useless HOST_*_LIBTOOL_PATCHThomas Petazzoni2010-05-021-2/+0
| | | | | Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
* libxml2: bump versionPeter Korsgaard2010-03-291-1/+1
| | | | Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
* package: remove redundant DISABLE_{IPV6,NLS,LARGEFILE} configure argsPeter Korsgaard2010-03-221-2/+2
| | | | | | | Makefile.autotools.in automatically adds these to the configure invocation, so there's no need to explicitly list them. Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
* libxml2: do not apply libtool patch when compiling for hostThomas Petazzoni2010-02-201-0/+2
| | | | | | | | The libtool patch is not applied when building for the target because it does not apply, so do not attempt to apply it when building for the host. This fixes libxml2 build for the host. Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* libxml2: bump to version 2.7.6Sagaert Johan2010-01-281-1/+3
| | | | | Signed-off-by: Sagaert Johan <sagaert.johan@skynet.be> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
* libxml2: convert to autotools infrastructure for host packageThomas Petazzoni2009-12-151-44/+8
| | | | Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* libxml2: fix build with BR2_CONFIG_CACHEPeter Korsgaard2009-11-231-0/+2
| | | | Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
* buildroot: silence ./configure step when building with 'make -s'Peter Korsgaard2009-10-011-1/+1
| | | | | | | | | | We have been passing -q to ./configure when using 'make -s' for packages using Makefile.autotools.in for some time. Do the same for packages using autotools, but not using the Makefile.autotools.in infrastructure, taking care to not do it for packages with hand written configure scripts. Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
* package: Remove unnecessary dependencies on uclibc.Will Newton2009-09-031-2/+0
| | | | | | | | A C library will have been built by the toolchain makefiles, so there is no need for packages to explicitly depend on uclibc. Signed-off-by: Will Newton <will.newton@gmail.com> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
* libxml2: Bump version to 2.7.3.Will Newton2009-07-301-6/+1
| | | | | | | | | | Closes #491 - Deletion of reject files no longer required as they have gone from the upstream release. Signed-off-by: Will Newton <will.newton@gmail.com> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
OpenPOWER on IntegriCloud