mirror of
https://github.com/godotengine/buildroot.git
synced 2026-01-05 14:09:53 +03:00
657eb07888
Fixes the following security issues:
CVE-2019-8842: The `ippReadIO` function may under-read an extension field
CVE-2020-3898: heap based buffer overflow in libcups's ppdFindOption() in
ppd-mark.c
Signed-off-by: Angelo Compagnucci <angelo@amarulasolutions.com>
Signed-off-by: Michael Trimarchi <michael@amarulasolutions.com>
Tested-by: Adam Duskett <aduskett@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 9b4a6cbc21)
[Mention security fixes]
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
38 lines
1.2 KiB
Diff
38 lines
1.2 KiB
Diff
From b341a1e1fce48012fc5bcf39337488fd33210616 Mon Sep 17 00:00:00 2001
|
|
From: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
|
|
Date: Sun, 3 Jul 2016 12:20:21 +0200
|
|
Subject: [PATCH] Remove PIE flags from the build
|
|
|
|
Generating a statically linked binary built with PIE requires the
|
|
Scrt1.o file, which isn't part of Buildroot uClibc toolchains. To
|
|
solve this, we simply disable the PIE flags.
|
|
|
|
[olivier tweak patch for 2.2.4]
|
|
|
|
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
|
|
Signed-off-by: Olivier Schonken <olivier.schonken@gmail.com>
|
|
[Fabrice: updated for 2.3.0]
|
|
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
|
|
[Michael: updated for 2.3.3]
|
|
Signed-off-by: Michael Trimarchi <michael@amarulasolutions.com>
|
|
---
|
|
Makedefs.in | 2 +-
|
|
1 file changed, 1 insertion(+), 1 deletion(-)
|
|
|
|
diff --git a/Makedefs.in b/Makedefs.in
|
|
index 5f1d32f..d669ea8 100644
|
|
--- a/Makedefs.in
|
|
+++ b/Makedefs.in
|
|
@@ -155,7 +155,7 @@ ALL_CXXFLAGS = -I.. -D_CUPS_SOURCE $(CXXFLAGS) \
|
|
$(ONDEMANDFLAGS) $(OPTIONS)
|
|
ALL_DSOFLAGS = -L../cups @ARCHFLAGS@ @RELROFLAGS@ $(DSOFLAGS) $(OPTIM)
|
|
ALL_LDFLAGS = -L../cups @LDARCHFLAGS@ @RELROFLAGS@ $(LDFLAGS) \
|
|
- @PIEFLAGS@ $(OPTIM)
|
|
+ $(OPTIM)
|
|
ARCHFLAGS = @ARCHFLAGS@
|
|
ARFLAGS = @ARFLAGS@
|
|
BACKLIBS = @BACKLIBS@
|
|
--
|
|
2.17.1
|
|
|