mirror of
https://github.com/godotengine/buildroot.git
synced 2026-01-05 14:09:53 +03:00
eafbcf48e4
Fixes the following security vulnerabilities: - CVE-2019-15961: A Denial-of-Service (DoS) vulnerability may occur when scanning a specially crafted email file as a result of excessively long scan times. The issue is resolved by implementing several maximums in parsing MIME messages and by optimizing use of memory allocation. Similar to the 0.102.0 bump, building with the internal libmspack copy is broken, so instead link against the system one. Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
103 lines
2.6 KiB
Makefile
103 lines
2.6 KiB
Makefile
################################################################################
|
|
#
|
|
# clamav
|
|
#
|
|
################################################################################
|
|
|
|
CLAMAV_VERSION = 0.101.5
|
|
CLAMAV_SITE = https://www.clamav.net/downloads/production
|
|
CLAMAV_LICENSE = GPL-2.0
|
|
CLAMAV_LICENSE_FILES = COPYING COPYING.bzip2 COPYING.file COPYING.getopt \
|
|
COPYING.LGPL COPYING.llvm COPYING.lzma COPYING.pcre COPYING.regex \
|
|
COPYING.unrar COPYING.zlib
|
|
CLAMAV_DEPENDENCIES = \
|
|
host-pkgconf \
|
|
libmspack \
|
|
libtool \
|
|
openssl \
|
|
zlib \
|
|
$(TARGET_NLS_DEPENDENCIES)
|
|
|
|
# mmap cannot be detected when cross-compiling, needed for mempool support
|
|
CLAMAV_CONF_ENV = \
|
|
ac_cv_c_mmap_private=yes \
|
|
have_cv_ipv6=yes
|
|
|
|
ifeq ($(BR2_TOOLCHAIN_HAS_LIBATOMIC),y)
|
|
CLAMAV_CONF_ENV += LIBS=-latomic
|
|
endif
|
|
|
|
# UCLIBC_HAS_FTS is disabled, therefore disable fanotify (missing fts.h)
|
|
CLAMAV_CONF_OPTS = \
|
|
--with-dbdir=/var/lib/clamav \
|
|
--with-ltdl-include=$(STAGING_DIR)/usr/include \
|
|
--with-ltdl-lib=$(STAGING_DIR)/usr/lib \
|
|
--with-openssl=$(STAGING_DIR)/usr \
|
|
--with-system-libmspack=$(STAGING_DIR)/usr \
|
|
--with-zlib=$(STAGING_DIR)/usr \
|
|
--disable-zlib-vcheck \
|
|
--disable-rpath \
|
|
--disable-clamav \
|
|
--disable-fanotify \
|
|
--disable-milter \
|
|
--disable-llvm \
|
|
--disable-clamdtop \
|
|
--enable-mempool
|
|
|
|
ifeq ($(BR2_PACKAGE_BZIP2),y)
|
|
CLAMAV_DEPENDENCIES += bzip2
|
|
# autodetection gets confused if host has bzip2, so force it
|
|
CLAMAV_CONF_ENV += \
|
|
ac_cv_libbz2_libs=-lbz2 \
|
|
ac_cv_libbz2_ltlibs=-lbz2
|
|
else
|
|
CLAMAV_CONF_OPTS += --disable-bzip2
|
|
endif
|
|
|
|
ifeq ($(BR2_PACKAGE_JSON_C),y)
|
|
CLAMAV_CONF_OPTS += --with-libjson=$(STAGING_DIR)/usr
|
|
CLAMAV_DEPENDENCIES += json-c
|
|
else
|
|
CLAMAV_CONF_OPTS += --without-libjson
|
|
endif
|
|
|
|
ifeq ($(BR2_PACKAGE_LIBXML2),y)
|
|
CLAMAV_CONF_OPTS += --with-xml=$(STAGING_DIR)/usr
|
|
CLAMAV_DEPENDENCIES += libxml2
|
|
else
|
|
CLAMAV_CONF_OPTS += --disable-xml
|
|
endif
|
|
|
|
ifeq ($(BR2_PACKAGE_LIBCURL),y)
|
|
CLAMAV_CONF_OPTS += --with-libcurl=$(STAGING_DIR)/usr
|
|
CLAMAV_DEPENDENCIES += libcurl
|
|
else
|
|
CLAMAV_CONF_OPTS += --without-libcurl
|
|
endif
|
|
|
|
ifeq ($(BR2_PACKAGE_LIBICONV),y)
|
|
CLAMAV_CONF_OPTS += --with-iconv
|
|
CLAMAV_DEPENDENCIES += libiconv
|
|
else
|
|
CLAMAV_CONF_OPTS += --without-iconv
|
|
endif
|
|
|
|
ifeq ($(BR2_PACKAGE_PCRE2),y)
|
|
CLAMAV_CONF_OPTS += --with-pcre=$(STAGING_DIR)/usr
|
|
CLAMAV_DEPENDENCIES += pcre2
|
|
else ifeq ($(BR2_PACKAGE_PCRE),y)
|
|
CLAMAV_CONF_OPTS += --with-pcre=$(STAGING_DIR)/usr
|
|
CLAMAV_DEPENDENCIES += pcre
|
|
else
|
|
CLAMAV_CONF_OPTS += --without-pcre
|
|
endif
|
|
|
|
ifeq ($(BR2_INIT_SYSTEMD),y)
|
|
CLAMAV_CONF_OPTS += --with-systemdsystemunitdir=/usr/lib/systemd/system
|
|
CLAMAV_DEPENDENCIES += systemd
|
|
else
|
|
CLAMAV_CONF_OPTS += --with-systemdsystemunitdir=no
|
|
endif
|
|
|
|
$(eval $(autotools-package))
|