New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
CMake: static linking with libpcap #187
Comments
Hello Romain, I tried to reproduce the issue you reported with the following steps. Best regards, |
Hello Norman, Thanks for looking at this issue. I really recommend you to use Buildroot for this investigation because this kind of issue may be difficult to reproduce on Linux distribution. The pcap library (even the static one) can be compiled with a different set of dependencies than the one used in Buildroot. For this case the libpcap.a from Buildroot have more dependencies than the one used in your Linux distribution. So here is the step to reproduce:
I hope this help. Thanks |
Hi Romain, I see! To be honest, I am not terribly eager to dive into the whole buildroot workflow. Maybe something like piping the output of pcap-config --libs --static into cmake or perhaps you have a more elegant solution already in mind. Best regards, |
When linking demo_mn_console statically with pcap, the CMake build system forget to link with other libraries linked with libpcap (-lnl-genl-3 -lnl-3 -ldbus-1 -pthread). [100%] Linking C executable demo_mn_console lib64/libpcap.a(pcap-linux.o): In function nl80211_init': pcap-linux.c:(.text+0x41e): undefined reference tonl_socket_alloc' To fix this, the build system could use pcap-config: pcap-config --libs --static -L/path/to/sysroot/usr/lib -lpcap -L/path/to/sysroot/usr/lib/.libs -lnl-genl-3 -lnl-3 -L/path/to/sysroot/usr/lib -ldbus-1 -pthread Fixes: http://autobuild.buildroot.net/results/f43/f437d09ac6c689c911e1885b95da33b692f2cb3c http://autobuild.buildroot.net/results/385/3859dc0f4de7e3284a96d5841f040f69f71842df OpenAutomationTechnologies#187 Signed-off-by: Romain Naour <romain.naour@gmail.com>
Hi Norman, I finally had some time to do it, see Best regards, |
…pcap When linking demo_mn_console statically with pcap, the CMake build system forget to link with other libraries linked with libpcap (-lnl-genl-3 -lnl-3 -ldbus-1 -pthread). [100%] Linking C executable demo_mn_console lib64/libpcap.a(pcap-linux.o): In function nl80211_init': pcap-linux.c:(.text+0x41e): undefined reference tonl_socket_alloc' To fix this, the build system could use pcap-config: pcap-config --libs --static -L/path/to/sysroot/usr/lib -lpcap -L/path/to/sysroot/usr/lib/.libs -lnl-genl-3 -lnl-3 -L/path/to/sysroot/usr/lib -ldbus-1 -pthread Also don't use getopt() from contrib directory to avoid a clash with libc definition. Fixes: http://autobuild.buildroot.net/results/f43/f437d09ac6c689c911e1885b95da33b692f2cb3c http://autobuild.buildroot.net/results/385/3859dc0f4de7e3284a96d5841f040f69f71842df OpenAutomationTechnologies/openPOWERLINK_V2#187 Signed-off-by: Romain Naour <romain.naour@gmail.com> Tested-by: Bernd Kuhls <bernd.kuhls@t-online.de> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
commit 8077582a54beacccf151bf277a11e1c9e9aa1fb5 Merge: 71994448b6 dd2020aadf Author: fschuett <fschuett@gymnasium-himmelsthuer.de> Date: Tue Jun 6 18:18:19 2017 +0200 Add 'buildroot/' from commit '9adfef203e5131a632af48508db14c0125142f6e' git-subtree-dir: buildroot git-subtree-mainline: 71994448b6d83c1a82df9ade65ac89b816c1fdd5 git-subtree-split: 9adfef203e5131a632af48508db14c0125142f6e commit 71994448b6d83c1a82df9ade65ac89b816c1fdd5 Author: fschuett <fschuett@gymnasium-himmelsthuer.de> Date: Tue Jun 6 18:17:15 2017 +0200 remove buildroot-2017.02.1 commit dd2020aadf0bf9b157a6f42ec189318edc560d3b Author: Peter Korsgaard <peter@korsgaard.com> Date: Wed May 31 23:55:40 2017 +0200 Update for 2017.05 Signed-off-by: Peter Korsgaard <peter@korsgaard.com> commit 43552504c8aacda2a163c933203a3b77146409c1 Author: Daniel Sabogal <dsabogalcc@gmail.com> Date: Tue May 23 13:19:31 2017 -0400 bash: disable bash malloc by default Bash's malloc relies on sbrk which is implemented as a fail-only stub in musl. Presently, it is disabled when configured for static libs. Instead, default to using libc malloc. Fixes: # bash bash: xmalloc: locale.c:81: cannot allocate 18 bytes (0 bytes allocated) Signed-off-by: Daniel Sabogal <dsabogalcc@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> commit 17aa47fa2cf1cd60809aa70500e8611b6f3abebf Author: Romain Naour <romain.naour@gmail.com> Date: Wed May 31 21:12:49 2017 +0200 package/hans: fix build failures with high 'make -j' values The top-level doesn't handle correctly the build dependencies between .o files. Since hans doesn't take too many time to build, just use MAKE1. Fixes: http://autobuild.buildroot.net/results/d14/d142f4a439d4d5fcc89865abde3e593c45ad5d96 http://autobuild.buildroot.net/results/28e/28ed230e40cc154db9274f9765085cd7f0eee85a http://autobuild.buildroot.net/results/900/9008c3be3bcf46f0fc21a34f48e3cf9da1397d9a Signed-off-by: Romain Naour <romain.naour@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> commit fddb760946a4f4ca366528a673989793be65a678 Author: Peter Korsgaard <peter@korsgaard.com> Date: Wed May 31 08:47:18 2017 +0200 sudo: add upstream security patch for CVE-2017-1000367 CVE-2017-1000367 - Potential overwrite of arbitrary files on Linux On Linux systems, sudo parses the /proc/[pid]/stat file to determine the device number of the process's tty (field 7). The fields in the file are space-delimited, but it is possible for the command name (field 2) to include spaces, which sudo does not account for. A user with sudo privileges can cause sudo to use a device number of the user's choosing by creating a symbolic link from the sudo binary to a name that contains a space, followed by a number. If SELinux is enabled on the system and sudo was built with SELinux support, a user with sudo privileges may be able to to overwrite an arbitrary file. This can be escalated to full root access by rewriting a trusted file such as /etc/shadow or even /etc/sudoers. For more details, see: https://www.sudo.ws/alerts/linux_tty.html Signed-off-by: Peter Korsgaard <peter@korsgaard.com> commit 8e0cb0c12dcbb0625b42481d7057b17d7bf4ad3d Author: Bernd Kuhls <bernd.kuhls@t-online.de> Date: Wed May 31 07:52:08 2017 +0200 linux-headers: bump 4.1.x series Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de> Signed-off-by: Peter Korsgaard <peter@korsgaard.com> commit e43efb9b654ae19e9e47ae5828d9e99b044f37c9 Author: Peter Korsgaard <peter@korsgaard.com> Date: Tue May 30 15:03:24 2017 +0200 strongswan: add upstream security patches Fixes: CVE-2017-9022 - RSA public keys passed to the gmp plugin aren't validated sufficiently before attempting signature verification, so that invalid input might lead to a floating point exception and crash of the process. A certificate with an appropriately prepared public key sent by a peer could be used for a denial-of-service attack. https://www.strongswan.org/blog/2017/05/30/strongswan-vulnerability-%28cve-2017-9022%29.html CVE-2017-9023 - ASN.1 CHOICE types are not correctly handled by the ASN.1 parser when parsing X.509 certificates with extensions that use such types. This could lead to infinite looping of the thread parsing a specifically crafted certificate. https://www.strongswan.org/blog/2017/05/30/strongswan-vulnerability-%28cve-2017-9023%29.html Signed-off-by: Peter Korsgaard <peter@korsgaard.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> commit e1c2c432a914e1da9022f370906c06d139e41aee Author: Alistair Francis <alistair.francis@xilinx.com> Date: Tue May 30 10:26:13 2017 -0700 package/xen: Backport a header include fix for makedev maekdev() is available from sys/types.h but only due to a bug in glibc. This is being fixed by printing an error when using makedev() from sys/types.h. To fix the issue we should include sys/sysmacros.h for makedev(). As this has already been fixed in upstream Xen we can backport the patch. Fixes: http://autobuild.buildroot.net/results/552/552e66d764885341b2fe208a0e4382b5fe05ea9d/ Signed-off-by: Alistair Francis <alistair.francis@xilinx.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> commit 2fcb07fbe3c2a861cd6c988d6d13d11be22a3683 Author: Romain Naour <romain.naour@gmail.com> Date: Tue May 30 16:53:17 2017 +0200 package/madplay: add custom libtool patch madplay use a libtool script in version 1.5.2 but the libtool patch "buildroot-libtool-v1.5.patch.patch" doesn't apply. From [1]: "It's libtool dropping -static. That's because madplay has a weird version of libtool, on which our libtool patch doesn't apply so we have MADPLAY_LIBTOOL_PATCH = NO. Therefore, the hack we have that makes libtool -static behave like -all-static isn't applied, causing this build failure." Fixes: http://autobuild.buildroot.net/results/60def1b15ea61d3cb5f50e9de3f354dd2e17d270 [1] http://lists.busybox.net/pipermail/buildroot/2017-May/192959.html Signed-off-by: Romain Naour <romain.naour@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> commit 6ff4293c94790e7f6bdb1a2c1263dc2a3998c3a6 Author: Luca Ceresoli <luca@lucaceresoli.net> Date: Tue May 30 19:01:28 2017 +0200 stm32flash: fix help text format Warning reported by check-package. Signed-off-by: Luca Ceresoli <luca@lucaceresoli.net> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> commit ae8704c7529e7c293f7f040412f199507939f61b Author: Luca Ceresoli <luca@lucaceresoli.net> Date: Tue May 30 19:01:27 2017 +0200 snmppp: fix help text format Warning reported by check-package. Signed-off-by: Luca Ceresoli <luca@lucaceresoli.net> Cc: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> commit 5bd7415e244ef9469d4b54b8d41d4a8b54e58e5f Author: Luca Ceresoli <luca@lucaceresoli.net> Date: Tue May 30 19:01:26 2017 +0200 rtl8188eu: fix help text format Warning reported by check-package. Signed-off-by: Luca Ceresoli <luca@lucaceresoli.net> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> commit cbd29d0ad454328bcdb450d6ada423e7f5cb3b10 Author: Luca Ceresoli <luca@lucaceresoli.net> Date: Tue May 30 19:01:25 2017 +0200 qpid-proton: fix help text format Warning reported by check-package. Signed-off-by: Luca Ceresoli <luca@lucaceresoli.net> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> commit 54fd9482e9125822b4ec2f355c8ceb787794c2ba Author: Luca Ceresoli <luca@lucaceresoli.net> Date: Tue May 30 19:01:24 2017 +0200 exim: fix help text format Warning reported by check-package. Signed-off-by: Luca Ceresoli <luca@lucaceresoli.net> Cc: Bernd Kuhls <bernd.kuhls@t-online.de> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> commit 2c112fecb1860bb8597a418f208568673b87f68b Author: Luca Ceresoli <luca@lucaceresoli.net> Date: Tue May 30 19:01:23 2017 +0200 agentpp: fix help text format Warning reported by check-package. Signed-off-by: Luca Ceresoli <luca@lucaceresoli.net> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> commit a6a4a8b2ef1fa747fdc79bc7bae0518417910f5d Author: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> Date: Tue May 30 11:34:17 2017 +0200 toolchain-external: adjust musl dynamic linker symlink for mips-sf The external toolchain code has some logic to calculate the correct name for the dynamic linker symbolic link that needs to be created when the musl C library is being used. There was already some handling for the mipsel+soft-float case, but not for the mips+soft-float case. Due to this, the symbolic link was incorrectly named, and programs were referencing an non-existing file. Reported-by: Florent Jacquet <florent.jacquet@free-electrons.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> commit 91a418c373ac8566c4c778dcb2aa7ecfc506ee56 Author: Peter Korsgaard <peter@korsgaard.com> Date: Tue May 30 10:28:45 2017 +0200 Update for 2017.05-rc3 Signed-off-by: Peter Korsgaard <peter@korsgaard.com> commit 93c757133496f54168ddcf21452bb92b54242d9c Author: Christian Stewart <christian@paral.in> Date: Mon May 29 20:50:04 2017 -0700 docker-engine: fix journald logging driver The Docker engine can optionally log to systemd-journald. For this driver to work correctly, Docker needs to build against systemd-journald's client library. This patch conditionally adds a build-time dependency on systemd and enables compiling the journald driver in docker-engine if systemd is used as the Buildroot init process. Signed-off-by: Christian Stewart <christian@paral.in> Signed-off-by: Peter Korsgaard <peter@korsgaard.com> commit 2fb7cbeb743e343fcc4aa37d6015b0a523c8b16f Author: Peter Korsgaard <peter@korsgaard.com> Date: Mon May 29 23:54:48 2017 +0200 libtasn1: security bump to version 4.12 Fixes CVE-2017-7650: Two errors in the "asn1_find_node()" function (lib/parser_aux.c) within GnuTLS libtasn1 version 4.10 can be exploited to cause a stacked-based buffer overflow by tricking a user into processing a specially crafted assignments file via the e.g. asn1Coding utility. For more details, see: https://secuniaresearch.flexerasoftware.com/secunia_research/2017-11/ Or the 1.4.11 release mail (no mail about 1.4.12, but identical to 1.4.11 + a soname fix): https://lists.gnu.org/archive/html/help-libtasn1/2017-05/msg00003.html Remove 0001-configure-don-t-add-Werror-to-build-flags.patch and autoreconf as that patch is now upstream. Signed-off-by: Peter Korsgaard <peter@korsgaard.com> commit eddaf1f00eb0b54b21f2e450fc66f0db8b7dbdca Author: Gonçalo Salazar <glbsalazar@gmail.com> Date: Mon May 29 22:53:41 2017 +0100 mosh: add notes to clarify runtime issues Added notes to the mosh package help to clarify some runtime issues related with it to ensure mosh will work properly after adding it. This includes adding a proper LOCALE and an extra flag when using mosh with dropbear. Signed-off-by: Gonçalo Salazar <glbsalazar@gmail.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com> commit 9e9dee25346f861f3276a4c2ab21c98b8caf88a7 Author: Peter Korsgaard <peter@korsgaard.com> Date: Mon May 29 23:19:59 2017 +0200 mosquitto: security bump to version 1.4.12 Fixes CVE-2017-7650: Pattern based ACLs can be bypassed by clients that set their username/client id to ‘#’ or ‘+’. This allows locally or remotely connected clients to access MQTT topics that they do have the rights to. The same issue may be present in third party authentication/access control plugins for Mosquitto. For more details, see: https://mosquitto.org/2017/05/security-advisory-cve-2017-7650/ Remove 0001-Remove-lanl-when-WITH_ADNS-is-unset.patch as that patch is now upstream. Signed-off-by: Peter Korsgaard <peter@korsgaard.com> commit 27e0626e99e79655b949e13a16ebdda28c0faca2 Author: Baruch Siach <baruch@tkos.co.il> Date: Mon May 29 23:53:23 2017 +0300 elfutils: security bump to version 0.169 Fixes a number of security issues: CVE-2017-7607, CVE-2017-7608, CVE-2017-7609, CVE-2017-7610, CVE-2017-7611, CVE-2017-7612, CVE-2017-7613. Rebase patches, and convert to git format. Remove --disable-werror; unrecognized configure option. Use upstream provided hash. Cc: Stefan Fröberg <stefan.froberg@petroprogram.com> Signed-off-by: Baruch Siach <baruch@tkos.co.il> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> commit 92c1b8132dd298dbbd35bfff8cc07f326924d92d Author: Alistair Francis <alistair.francis@xilinx.com> Date: Wed May 24 13:30:30 2017 -0700 package/xen: add dependency on host-acpica This commit adds a dependency on the host ACPICA package as Xen tools require iasl to build. Fixes: http://autobuild.buildroot.net/results/afa199864d6b546fe759bb582a9c10702ea7fa78/ Signed-off-by: Alistair Francis <alistair.francis@xilinx.com> Acked-by: Erico Nunes <nunes.erico@gmail.com> [Thomas: tweak commit log, add autobuilder reference.] Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> commit bd6ec23ed350abdf4a9fa208398bc79c510104c9 Author: Alistair Francis <alistair.francis@xilinx.com> Date: Wed May 24 13:30:29 2017 -0700 package/acpica: add host package Add support to build the ACPICA package for the host. This is useful for the iasl command which is required to build some packages, including Xen tools. This is a necessary requirement before changing the Xen package to address: http://autobuild.buildroot.net/results/afa199864d6b546fe759bb582a9c10702ea7fa78/ Signed-off-by: Alistair Francis <alistair.francis@xilinx.com> Acked-by: Erico Nunes <nunes.erico@gmail.com> [Thomas: use PREFIX= and not DESTDIR= for host installation, tweak commit log.] Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> commit 2d9f199061fa0629847b63e6b6317a7b12a9d99f Author: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> Date: Mon May 29 23:31:51 2017 +0200 ffmpeg: do not build on m68k coldfire m68k coldfire causes ffmpeg to think atomic intrinsics are available, so ffmpeg doesn't use its fallback on pthreads based atomic operations. However, m68k coldfire doesn't provide properly working sync 4 atomics, causing a build failure. Since fixing ffmpeg on m68k coldfire is not really important (who wants to use ffmpeg on such platform?), we simply disallow the selection of ffmpeg on this platform. Alternate approaches have been proposed in the past: - Bernd Kuhls proposed in http://patchwork.ozlabs.org/patch/766909/ to add a dependency on BR2_TOOLCHAIN_HAS_SYNC_4, but this is wrong because other architectures that lack sync 4 atomics, such as Sparc, can build ffmpeg perfectly fine thanks to the pthreads based fallback code. - Waldemar Brodkorb proposed in https://patchwork.ozlabs.org/patch/756664/ to add an explicit option in ffmpeg configure to force the use of pthreads based atomics. However, we believe that running ffmpeg on m68k coldfire is such an unlikely use case that it isn't worth carrying a patch for this. Fixes: http://autobuild.buildroot.net/results/b3e/b3eaaf6d73cd49f5919143aeaa5cbb4d15a7ccc3/ Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> commit 12687c5c76f8f82da0815b6ff1607494ee7180b8 Author: Bernd Kuhls <bernd.kuhls@t-online.de> Date: Wed May 24 23:06:11 2017 +0200 package/samba4: security bump to version 4.5.10 Fixes CVE-2017-7494: https://www.samba.org/samba/history/samba-4.5.10.html Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> commit 30ed9de2fd8a572ffce26f7a9c8187335c567668 Author: Bernd Kuhls <bernd.kuhls@t-online.de> Date: Thu May 25 18:34:43 2017 +0200 package/gnutls: disable for static build The gnutils code uses __attribute__((constructor)) and __attribute__((destructor)) to call constructor/desctructor when a shared library is loaded. Constructor/desctructor are not used when a static library is used (except when if -Wl,--whole-archive -lgnutls -Wno-whole-archive is used, not tested). Even if gnutls initialization (_gnutls_global_init()) may be called manually, the gnutls maintainer said it's not supported [1]. "Note that static linking applications with gnutls is not something supported. gnutls relies on library constructors and destructors which are not loaded when linking statically." Now the gnutls script warns about static linking [2]. So disable gnutls statically by adding "depends on !BR2_STATIC_LIBS" at Kconfig level and --disable-static in GNUTLS_CONF_OPTS. Fixes: [taskd] http://autobuild.buildroot.net/results/c2d/c2dd5c1c9dc87d2943c15e58ee56e67d7375368c [ffmpeg] http://autobuild.buildroot.net/results/892/8926d319d6d1cd1ee72239ad7d9ca869d2355628 [sngrep] http://autobuild.buildroot.net/results/f7f/f7fb42d3742f6f01000a0d181e0c785640284405 [1] https://gitlab.com/gnutls/gnutls/issues/203 [2] https://gitlab.com/gnutls/gnutls/commit/6b748886799f88ddee9721dba4fc4d52854832ae Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de> [Romain: merge our two patches together add some option comment disable static libgnutls.a add sngrep autobuilder reference] Signed-off-by: Romain Naour <romain.naour@gmail.com> Tested-by: Bernd Kuhls <bernd.kuhls@t-online.de> [Thomas: do not disable libgnutls.a] Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> commit 557f8d649d9a959e810a3c92774020a434d567a8 Author: Romain Naour <romain.naour@gmail.com> Date: Mon May 29 22:13:29 2017 +0200 package/google-breakpad: use PRE_CONFIGURE hooks to copy linux_syscall_support.h As reported by Bernd [1], using POST_EXTRACT to copy linux_syscall_support.h break the legal-info target when google-breakpad package is selected: /usr/bin/install: cannot stat '/home/bernd/buildroot/buildroot/output/ost/usr/i586-buildroot-linux-uclibc/sysroot/usr/include/linux_syscall_support.h': No such file or directory This is because linux_syscall_support.h is installed by a dependency of google-breakpad, and dependencies are only guaranteed to be available for the configure step of a package. To fix this, we use a PRE_CONFIGURE hook instead of POST_EXTRACT hook. [1] http://lists.busybox.net/pipermail/buildroot/2017-May/192844.html Reported-by: Bernd Kuhls <bernd.kuhls@t-online.de> Signed-off-by: Romain Naour <romain.naour@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> commit 80ebba2b5ad8017440b3ad84dd44261f7865dfc4 Author: Romain Naour <romain.naour@gmail.com> Date: Mon May 29 21:58:11 2017 +0200 package/firejail: remove broken package firejail has been marked as broken since 3ad100fdcbf6e2bf850b4b2f528c87c74f7c93ff Signed-off-by: Romain Naour <romain.naour@gmail.com> Cc: Chris Frederick <chrisf@cdf123.net> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> commit d35b447f09b5bd766a7627b596869b8f8b3f91ba Author: Bernd Kuhls <bernd.kuhls@t-online.de> Date: Sun May 28 16:31:35 2017 +0200 package/ftop: Fix broken download URL Also use bz2 tarball and provide md5 & sha256 hashes. Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> commit 96f3ae6c24e5517014666a0e22b050773188392e Author: Bernd Kuhls <bernd.kuhls@t-online.de> Date: Sun May 28 22:35:52 2017 +0200 package/armadillo: fix download URL Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> commit 3f0cdaad8b0b797f5727a35737a0badd97cb3ddc Author: Bernd Kuhls <bernd.kuhls@t-online.de> Date: Sun May 28 22:40:57 2017 +0200 package/libev: fix download URL Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> commit eca61c93d5e6061a0749c94f7a4b5da73e332777 Author: Bernd Kuhls <bernd.kuhls@t-online.de> Date: Sun May 28 23:37:38 2017 +0200 package/mxml: fix download URL The project moved to github, the current download URL is broken: $ wget -q http://www.msweet.org/files/project3/mxml-2.10.tar.gz $ file mxml-2.10.tar.gz mxml-2.10.tar.gz: HTML document, UTF-8 Unicode text, with very long lines Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> commit 01ad3a38d25af99ae29a7ffa65d8e838bfdbec03 Author: Frank Hunleth <fhunleth@troodon-software.com> Date: Mon May 29 11:39:01 2017 -0400 erlang: fix check-package help text warnings Signed-off-by: Frank Hunleth <fhunleth@troodon-software.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> commit e692e1f2b2285c18057e2c70cc1d9d0cfdb15d5e Author: Baruch Siach <baruch@tkos.co.il> Date: Mon May 29 21:02:35 2017 +0300 ola: remove package ola does not build with current protobuf. Upstream bug report is still open. https://github.com/OpenLightingProject/ola/issues/1192 Cc: Dave Skok <blanco.ether@gmail.com> Signed-off-by: Baruch Siach <baruch@tkos.co.il> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> commit 8225042e0e8add24d698cba7232484481016f0a0 Author: Bernd Kuhls <bernd.kuhls@t-online.de> Date: Mon May 29 18:59:45 2017 +0200 package/libmicrohttpd: security bump version to 0.9.55 For details refer to release notes: http://lists.gnu.org/archive/html/info-gnu/2017-05/msg00014.html Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> commit 621408e59559058aa448c740119e467d5c168b68 Author: Bernd Kuhls <bernd.kuhls@t-online.de> Date: Mon May 29 21:07:36 2017 +0200 package/stella: fix project URLs The project moved to github: http://stella.sourceforge.net/ Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> commit 27d7ef126bc7f4eb1a757128466befa11245bbfd Author: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> Date: Mon May 29 09:04:29 2017 +0200 DEVELOPERS: remove Andrew Ruder His e-mail address is bouncing: <andrew.ruder@elecsyscorp.com>: host mx1-us1.ppe-hosted.com[67.231.154.162] said: 550 5.7.1 <andrew.ruder@elecsyscorp.com>: Recipient address rejected: User email address is marked as invalid. (in reply to RCPT TO command) Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> commit 019ad605670670a51055fb5d27a2a1f374a33289 Author: Bernd Kuhls <bernd.kuhls@t-online.de> Date: Thu May 25 09:19:34 2017 +0200 package/redis: fix static linking with libatomic Fixes http://autobuild.buildroot.net/results/7f1/7f1ecccbfdb6bd95824d9c884f1577e71e0e1e09/ http://autobuild.buildroot.net/results/c0b/c0b1bdcc5fbddf8b996b923015184d753882d4b8/ Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de> [Thomas: - improve comment to explain the fix - remove useless LDFLAGS related code] Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> commit db55de2b42a54ca715a7aa3ed6e388ea6f557092 Author: Bernd Kuhls <bernd.kuhls@t-online.de> Date: Sun May 28 15:56:11 2017 +0200 package/flashrom: security bump to version 0.9.9 Fixes buffer overflow: https://mail.coreboot.org/pipermail/flashrom/2016-March/014523.html Removed patch 0002-sys-io.h.patch, not needed anymore, hwaccess.h now contains a similar fix: elif defined(__linux__) || defined(__GLIBC__) Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> commit 4f9190f14e821a90cae690b1741eee4efd9b661b Author: Bernd Kuhls <bernd.kuhls@t-online.de> Date: Thu May 25 23:26:20 2017 +0200 package/kodi: security bump to version 17.3 Release notes: https://kodi.tv/article/kodi-v173-minor-bug-fix-and-security-release "Fix possible security flaw which could abused .zip files which try to traverse to a parent directory" For details about the security bug refer to http://blog.checkpoint.com/2017/05/23/hacked-in-translation/ Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> commit 0e422730722fe92e79883b5fdb9f2e95a241afd7 Author: Romain Naour <romain.naour@gmail.com> Date: Sun May 28 00:51:19 2017 +0200 package/openpowerlink: use pcap-config to fix static linking with libpcap When linking demo_mn_console statically with pcap, the CMake build system forget to link with other libraries linked with libpcap (-lnl-genl-3 -lnl-3 -ldbus-1 -pthread). [100%] Linking C executable demo_mn_console lib64/libpcap.a(pcap-linux.o): In function nl80211_init': pcap-linux.c:(.text+0x41e): undefined reference tonl_socket_alloc' To fix this, the build system could use pcap-config: pcap-config --libs --static -L/path/to/sysroot/usr/lib -lpcap -L/path/to/sysroot/usr/lib/.libs -lnl-genl-3 -lnl-3 -L/path/to/sysroot/usr/lib -ldbus-1 -pthread Also don't use getopt() from contrib directory to avoid a clash with libc definition. Fixes: http://autobuild.buildroot.net/results/f43/f437d09ac6c689c911e1885b95da33b692f2cb3c http://autobuild.buildroot.net/results/385/3859dc0f4de7e3284a96d5841f040f69f71842df https://github.com/OpenAutomationTechnologies/openPOWERLINK_V2/issues/187 Signed-off-by: Romain Naour <romain.naour@gmail.com> Tested-by: Bernd Kuhls <bernd.kuhls@t-online.de> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> commit a7777eecd4eaebd65b28e26fb1075b8609ac8f7c Author: Bernd Kuhls <bernd.kuhls@t-online.de> Date: Sat May 27 18:04:46 2017 +0200 package/audiofile: Fix static linking with libsndfile Fixes mpd: http://autobuild.buildroot.net/results/799/7997ccd698f03885f98d00bd150dc3a578e4b161/ Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> commit a2ad9cf71da39efc4ab942578cdbceb5c30a4025 Author: Bernd Kuhls <bernd.kuhls@t-online.de> Date: Sat May 27 17:44:26 2017 +0200 package/audiofile: add security fix Fixes CVE-2015-7747 Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> commit ad79bb50858aebd5296fbac981abd8b50b682ddf Author: Luca Ceresoli <luca@lucaceresoli.net> Date: Sat May 27 23:58:46 2017 +0200 support/testing: rename variables for readability The 'lines' variable is overwritten with its own fields. Thus it contains a line first, and then a list of fields -- it never contains 'lines'. Use two different variables named 'line' and 'fields' to make the code more readable. Signed-off-by: Luca Ceresoli <luca@lucaceresoli.net> Acked-by: Ricardo Martincoski <ricardo.martincoski@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> commit cfecdfadc1c980e3bb6dc86101b3b932a0969017 Author: Luca Ceresoli <luca@lucaceresoli.net> Date: Sat May 27 23:58:47 2017 +0200 support/testing: fs/ext: add a negative test for the "extent" feature We only have a positive test for it, in ext4. Let's have a negative one as well. Signed-off-by: Luca Ceresoli <luca@lucaceresoli.net> Reviewed-by: Ricardo Martincoski <ricardo.martincoski@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> commit e0a787669124d0ae1da81739f3fb7eabba272fb4 Author: Adam Duskett <Aduskett@gmail.com> Date: Fri May 26 10:46:28 2017 -0400 DEVELOPERS: add selinux packages under Adam Duskett Signed-off-by: Adam Duskett <aduskett@codeblue.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> commit 6ddab6c28ec1cae2718928505f96705cf8e08e83 Author: Romain Naour <romain.naour@gmail.com> Date: Sat May 27 00:13:47 2017 +0200 package/dhcp: create tmpfiles.d directory dhcp.mk tries to create dhcp.conf in a non-existant directory. Fixes: http://autobuild.buildroot.net/results/40e/40e48f74b586ce380766cf31473932e43090671e Signed-off-by: Romain Naour <romain.naour@gmail.com> Tested-by: Bernd Kuhls <bernd.kuhls@t-online.de> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> commit da5816561b4a660e1562a7cea5b079d776e206a3 Author: Bernd Kuhls <bernd.kuhls@t-online.de> Date: Sat May 27 10:19:52 2017 +0200 package/popt: fix libiconv dependency Make sure that libiconv is built before popt when needed. Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> commit cbf2b6e3db65500f7bb29aa029a620570026373c Author: Bernd Kuhls <bernd.kuhls@t-online.de> Date: Sat May 27 13:52:37 2017 +0200 package/opencv: fix build with old glibc versions Prior to glibc 2.18, definitions like SIZE_MAX or INT_FAST32_MAX from <stdint.h> were only made available for C code, or in C++ if __STDC_LIMIT_MACROS was defined. The code from jasper uses such definitions, without defining __STDC_LIMIT_MACROS. Unfortunately, defining __STDC_LIMIT_MACROS in the jasper headers doesn't work, since <stdint.h> has already been included before, at a point where __STDC_LIMIT_MACROS was not defined. So to solve this problem, we simply pass -D__STDC_LIMIT_MACROS in CXXFLAGS when building opencv with jasper support. This patch uses the same solution used for libraw: https://git.buildroot.net/buildroot/commit/package/libraw?id=d246cf5fd01bb0d20a0e64194ffed514ea8dd0aa Fixes: http://autobuild.buildroot.net/results/095/095f7574afdb633c59a625cd063de03644b6d3a7/ Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> commit e1404d5b4eaed845223b409a6673230c64128115 Author: Bernd Kuhls <bernd.kuhls@t-online.de> Date: Sat May 27 14:57:08 2017 +0200 package/libv4l: fix udev configure options AC_ARG_WITH([libudev] was removed in version 1.12.0: https://git.linuxtv.org/v4l-utils.git/commit/configure.ac?id=3aba7817cd1994e6da00651114368db8171eabcc Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> commit d01b0bbad04b97a5e8e1dd3ac3c1026555f793fb Author: Ilias Apalodimas <apalos@gmail.com> Date: Sat May 27 15:47:47 2017 +0300 keepalived: needs headers >= 3.4 keepalived fails to build on toolchains with headers older than 3.4, because of a namespace clash between the xt_set.h header from the kernel and the linux_ip_set.h header installed by ipset. Even though keepalived does check for pre-3.4 headers, the check somehow fails to work correctly. We fix that by making keepalived depend on headers 3.4 or later. Fixes: http://autobuild.buildroot.org/results/770/770d8fd2f3bacbdbe233da1b4d6e64e20a84d5a5/ http://autobuild.buildroot.org/results/1ad/1adb710b915427f681eae37452a0942833ce533e/ http://autobuild.buildroot.org/results/70b/70b31547e51ec7213372d2ef07bec34c5df77560/ [...] Signed-off-by: Ilias Apalodimas <apalos@gmail.com> Reviewed-by: "Yann E. MORIN" <yann.morin.1998@free.fr> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> commit 9b853b784452d7a701cc3c823b92a825d962647a Author: Bernd Kuhls <bernd.kuhls@t-online.de> Date: Thu May 25 19:44:12 2017 +0200 linux: bump default version to 4.11.3 Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> commit f19a4433d4560b087b4890b17e2baaa21b3e6871 Author: Bernd Kuhls <bernd.kuhls@t-online.de> Date: Thu May 25 19:44:11 2017 +0200 linux-headers: bump 4.{4, 9, 11}.x series Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> commit 2c1d080c2dc75fb021ace02472c8db0f2538e481 Author: Alexey Brodkin <Alexey.Brodkin@synopsys.com> Date: Tue May 16 10:32:13 2017 +0300 Revert "libcdio: disable on ARC, triggers a toolchain bug" This reverts commit 459f7302df8cdc45aa0f7f2581ebb6f05fb6432a. libcdio building is fixed for ARC in 2b360bd547f1 "gcc: arc-2017.03-rc2: Fix "unrecognized supposed constant" error" Signed-off-by: Alexey Brodkin <abrodkin@synopsys.com> Tested-by: Bernd Kuhls <bernd.kuhls@t-online.de> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> commit a71fb422bae5141d8605650e5ce12b2b244ed8fb Author: Alexey Brodkin <Alexey.Brodkin@synopsys.com> Date: Wed May 24 18:39:19 2017 +0300 gcc: arc: add patch to fix tst_movb pattern Fixes building of quagga [1]: ------------------------------>8--------------------------- 839:1: error: unrecognizable insn: } ^ (insn 183 24 26 4 (set (reg:CC_ZN 61 cc) (and:SI (reg:SI 0 r0 [orig:192 _12->id.s_addr ] [192]) (const_int -256 [0xffffffffffffff00]))) ospf_ri.c:790 -1 (nil)) ospf_ri.c:839:1: internal compiler error: in extract_insn, at recog.c:2287 ------------------------------>8--------------------------- [1] http://autobuild.buildroot.net/results/3c1/3c12c4609d4a77ab8ccd3ea94840884d70520efai Signed-off-by: Alexey Brodkin <abrodkin@synopsys.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> commit 0ade154f235560e9cc14bbfe7508fc5601735a11 Author: Alexey Brodkin <Alexey.Brodkin@synopsys.com> Date: Tue May 23 21:41:37 2017 +0300 toolchain: Bump ARC tools to arc-2017.03 release This commit finally bumps ARC toolchain to arc-2017.03 release. More info on this release could be found here: https://github.com/foss-for-synopsys-dwc-arc-processors/toolchain/releases/tag/arc-2017.03 Note mentioned above web-page is not yet populated but should be very soon. As a safe fall-back interested could refer to RC2 page here: https://github.com/foss-for-synopsys-dwc-arc-processors/toolchain/releases/tag/arc-2017.03-rc2 Signed-off-by: Alexey Brodkin <abrodkin@synopsys.com> Cc: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> commit 6bc8de6f9d5856213cb45f4a86556b55321e3575 Author: Matt Weber <matt@thewebers.ws> Date: Tue May 23 21:01:41 2017 -0500 DEVELOPERS: Remove Niranjan Reddy from cgroupfs-mount He can re-add with a new email if he wants, but his current Rockwell email will bounce. Signed-off-by: Matt Weber <matt@thewebers.ws> Acked-by: Bernd Kuhls <bernd.kuhls@t-online.de> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> commit 675101b0fe3e751b447818d8ce8d0d009bd39b25 Author: Dustin Johnson <dustin.r.johnson@gmail.com> Date: Tue Mar 14 22:24:58 2017 -0400 mono: remove copy of host etc files on install When the mono package is installed, the autotools installer installs the /etc/mono files to the target. A post_install hook then copies over the mono libraries to the target as well as the host /etc/mono files which overrides the target files. The target specific mono configuration file (/etc/mono/config) is overridden with the host settings. This causes mono on the target to be unable to locate target specific .so files as it overrides the changes enacted by the patches for the package. Signed-off-by: Dustin Johnson <dustin.r.johnson@gmail.com> Tested-by: Angelo Compagnucci <angelo.compagnucci@gmail.com> Reviewed-by: Angelo Compagnucci <angelo.compagnucci@gmail.com> Acked-by: Angelo Compagnucci <angelo.compagnucci@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> commit 556434fb833f054da7bbabc531083951b1f28075 Author: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> Date: Fri May 19 21:22:40 2017 +0200 libepoxy: make EGL support optional This commit adds a patch to the libepoxy package to make the EGL support optional, which allows libepoxy to build with a pure OpenGL Mesa3D configuration (i.e without EGL/OpenGLES). Fixes: http://autobuild.buildroot.net/results/88774af2845e17cab021a72c8f3171fe30b3a1ff/ Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> commit fa397537bb64536bb58663df886b1a2c8886961c Author: Baruch Siach <baruch@tkos.co.il> Date: Tue May 23 01:07:09 2017 +0300 toolchain: disable PIE for static build with musl As mentioned in commit 3c93901bcd2 (toolchain: add hidden symbol for PIE support), support for static PIE using musl requires a gcc patch[1]. Buildroot doesn't carry this patch. Don't enable BR2_TOOLCHAIN_SUPPORTS_PIE in static build with musl. Fixes: http://autobuild.buildroot.net/results/d19/d19bcfcfb33cc5f5b082b97bbd5852d479823b97/ http://autobuild.buildroot.net/results/91f/91f7c6954c337b03f5ac141050d9b1bee1623376/ http://autobuild.buildroot.net/results/996/996116da9241686110b9525eed08cc5acfd379a6/ [1] https://github.com/richfelker/musl-cross-make/blob/b854a42fc1ea19b8c4ec7104848f9d1a6d7995f0/patches/gcc-6.3.0/0010-static-pie-support.diff Acked-by: Waldemar Brodkorb <wbx@openadk.org> Signed-off-by: Baruch Siach <baruch@tkos.co.il> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> commit a396b3ab1ecc0dff00be9e04f36494d0d68569f7 Author: Bernd Kuhls <bernd.kuhls@t-online.de> Date: Sun May 21 23:41:17 2017 +0200 package/c-icap: fix bzip2 configure option The configure option controlling bzip2 support got its current name in 2012 with its initial commit: https://sourceforge.net/p/c-icap/code/890/#diff-2 This patch fixes the configure warning: configure: WARNING: unrecognized options: [...] --without-bzip2 Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> commit 3d1234dab8ae714ebb52fd78d075f084a410b338 Author: Bernd Kuhls <bernd.kuhls@t-online.de> Date: Sun May 21 23:41:16 2017 +0200 package/c-icap: fix berkeleydb configure option The configure option controlling berkeleydb support got its current name in 2009: https://sourceforge.net/p/c-icap/code/322/ This patch fixes a configure warning: configure: WARNING: unrecognized options: [...] --without-berkeleydb, [...] Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> commit 3c54b7086fc0eaddb7f04560f30bb8cc99860b25 Author: Bernd Kuhls <bernd.kuhls@t-online.de> Date: Sun May 21 13:46:25 2017 +0200 package/python-enum34: change setup type to setuptools With version 1.1.3 the project switched to setuptools: https://bitbucket.org/stoneleaf/enum34/commits/589b4f9d2e733a32c6e67a1e7aa50f476920d121 Fixes http://autobuild.buildroot.net/results/cb6/cb678ca9e57382a876f3f6034a47a4e2c59bc8d0/ Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de> Signed-off-by: Peter Korsgaard <peter@korsgaard.com> commit a0c4cf0f9698ed109b97cb1e33f4070f505e3988 Author: Peter Korsgaard <peter@korsgaard.com> Date: Fri May 19 15:48:02 2017 +0200 libminiupnpc: add upstream security fix for CVE-2017-8798 CVE-2017-8798: Integer signedness error in MiniUPnP MiniUPnPc v1.4.20101221 through v2.0 allows remote attackers to cause a denial of service or possibly have unspecified other impact. For more details including a PoC, see: https://github.com/tintinweb/pub/tree/master/pocs/cve-2017-8798 Signed-off-by: Peter Korsgaard <peter@korsgaard.com> commit e6213e8ee68cbb637997ff02abe7945ec1cc168c Author: Ryan Coe <bluemrp9@gmail.com> Date: Mon May 8 08:37:16 2017 -0700 mariadb: security bump to version 10.1.23 Fixes: CVE-2017-3302 - Crash in libmysqlclient.so in Oracle MySQL before 5.6.21 and 5.7.x before 5.7.5 and MariaDB through 5.5.54, 10.0.x through 10.0.29, 10.1.x through 10.1.21, and 10.2.x through 10.2.3. CVE-2017-3313 - Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: MyISAM). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Server accessible data. CVE-2017-3308 - Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily "exploitable" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. While the vulnerability is in MySQL Server, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVE-2017-3309 - Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily "exploitable" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. While the vulnerability is in MySQL Server, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVE-2017-3453 - Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily "exploitable" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVE-2017-3456 - Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily "exploitable" vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVE-2017-3464 - Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily "exploitable" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data. And a number of important, but non-security related fixes: MDEV-12602: Fixed some race conditions in InnoDB encryption MariaDB Backup alpha introduced Galera wsrep library updated to 25.3.20 For details, see the release notes: https://mariadb.com/kb/en/mariadb/mariadb-10123-release-notes/ [Peter: drop COPYING.LESSER and add a reference to the bugtracker issue explaining why] Signed-off-by: Ryan Coe <bluemrp9@gmail.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com> commit 8644a83bd806d1e6efdfd972908798e8e00f7006 Author: Peter Korsgaard <peter@korsgaard.com> Date: Sat May 20 17:15:48 2017 +0200 dropbear: security bump to version 2017.75 Fixes: - CVE-2017-9078: A double-free in the server could be triggered by an authenticated user if dropbear is running with -a (Allow connections to forwarded ports from any host) This could potentially allow arbitrary code execution as root by an authenticated user. Affects versions 2013.56 to 2016.74. Thanks to Mark Shepard for reporting the crash. - CVE-2017-9079: Dropbear parsed authorized_keys as root, even if it were a symlink. The fix is to switch to user permissions when opening authorized_keys. A user could symlink their ~/.ssh/authorized_keys to a root-owned file they couldn't normally read. If they managed to get that file to contain valid authorized_keys with command= options it might be possible to read other contents of that file. This information disclosure is to an already authenticated user. Thanks to Jann Horn of Google Project Zero for reporting this. Signed-off-by: Peter Korsgaard <peter@korsgaard.com> commit 8213190bfa88d0d222b24c81515bd201f25efb7c Author: Peter Korsgaard <peter@korsgaard.com> Date: Sat May 20 17:10:07 2017 +0200 linux: bump default version to 4.11.2 Signed-off-by: Peter Korsgaard <peter@korsgaard.com> commit daf1c350251ac1872ee3849a6b79476d1d026c2f Author: Peter Korsgaard <peter@korsgaard.com> Date: Sat May 20 17:10:06 2017 +0200 linux-headers: bump 4.{4, 9, 10, 11}.x series Signed-off-by: Peter Korsgaard <peter@korsgaard.com> commit 509eb191918ede1214a0adee36887172048b88d9 Author: Bernd Kuhls <bernd.kuhls@t-online.de> Date: Sun May 21 17:01:06 2017 +0200 DEVELOPERS: add myself to alsa-{lib, utils} Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> commit 4d1c2c82e8945a5847d636458f3825c55529835b Author: Baruch Siach <baruch@tkos.co.il> Date: Fri May 19 07:20:37 2017 +0300 toolchain: limit musl workaround to kernel headers 3.12+ The libc-compat.h first appeared in kernel version 3.12. Trying to build a musl toolchain using earlier headers leads to the following failure: /bin/sed: can't read .../output/host/usr/arm-buildroot-linux-musleabi/sysroot/usr/include/linux/libc-compat.h: No such file or directory package/pkg-generic.mk:266: recipe for target '.../output/build/toolchain/.stamp_staging_installed' failed Don't apply the sed patch to older headers. Reported-by: Florent Jacquet <florent.jacquet@free-electrons.com> Signed-off-by: Baruch Siach <baruch@tkos.co.il> Signed-off-by: Peter Korsgaard <peter@korsgaard.com> commit 15423bd46e925b1aed12aac8eddeaf249b4bd999 Author: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> Date: Wed May 17 23:53:21 2017 +0200 cppcms: fix build on machines with libgpg-error installed In configuration where target architecture == host architecture, and libgpg-error is installed system-wide with development files, the build of cppcms fails with: /home/test/buildroot/output/host/usr/bin/x86_64-amd-linux-gnu-g++ --sysroot=/home/test/buildroot/output/host/usr/x86_64-buildroot-linux-gnu/sysroot -D_LARGEFILE_SOURCE -D_LARGEFILE64_SOURCE -D_FILE_OFFSET_BITS=64 -Os -Wall -Wextra -DNDEBUG CMakeFiles/base64_test.dir/tests/base64_test.cpp.o -o base64_test -L/home/test/buildroot/output/host/usr/x86_64-buildroot-linux-gnu/sysroot/usr/lib -Wl,-rpath,/home/test/buildroot/output/build/cppcms-1.0.5:/home/test/buildroot/output/build/cppcms-1.0.5/booster:/usr/lib -rdynamic libcppcms.so.1.0.5 booster/libbooster.so.0.0.3 -lpthread /home/test/buildroot/output/host/usr/x86_64-buildroot-linux-gnu/sysroot/usr/lib/libpcre.so /home/test/buildroot/output/host/usr/x86_64-buildroot-linux-gnu/sysroot/usr/lib/libgcrypt.so /home/test/buildroot/output/host/usr/x86_64-buildroot-linux-gnu/sysroot/usr/lib/libdl.so /home/test/buildroot/output/host/usr/x86_64-buildroot-linux-gnu/sysroot/usr/lib/libz.so /home/test/buildroot/output/host/usr/x86_64-buildroot-linux-gnu/sysroot/usr/lib/libgcrypt.so: undefined reference to `gpg_err_set_errno@GPG_ERROR_1.0' /home/test/buildroot/output/host/usr/x86_64-buildroot-linux-gnu/sysroot/usr/lib/libgcrypt.so: undefined reference to `gpgrt_lock_init@GPG_ERROR_1.0' /home/test/buildroot/output/host/usr/x86_64-buildroot-linux-gnu/sysroot/usr/lib/libgcrypt.so: undefined reference to `gpgrt_lock_destroy@GPG_ERROR_1.0' /home/test/buildroot/output/host/usr/x86_64-buildroot-linux-gnu/sysroot/usr/lib/libgcrypt.so: undefined reference to `gpg_err_code_from_syserror@GPG_ERROR_1.0' /home/test/buildroot/output/host/usr/x86_64-buildroot-linux-gnu/sysroot/usr/lib/libgcrypt.so: undefined reference to `gpg_err_code_from_errno@GPG_ERROR_1.0' /home/test/buildroot/output/host/usr/x86_64-buildroot-linux-gnu/sysroot/usr/lib/libgcrypt.so: undefined reference to `gpgrt_lock_unlock@GPG_ERROR_1.0' /home/test/buildroot/output/host/usr/x86_64-buildroot-linux-gnu/sysroot/usr/lib/libgcrypt.so: undefined reference to `gpg_strerror@GPG_ERROR_1.0' /home/test/buildroot/output/host/usr/x86_64-buildroot-linux-gnu/sysroot/usr/lib/libgcrypt.so: undefined reference to `gpg_strsource@GPG_ERROR_1.0' /home/test/buildroot/output/host/usr/x86_64-buildroot-linux-gnu/sysroot/usr/lib/libgcrypt.so: undefined reference to `gpgrt_lock_lock@GPG_ERROR_1.0' The problem comes from the "-Wl,-rpath,/home/test/buildroot/output/build/cppcms-1.0.5:/home/test/buildroot/output/build/cppcms-1.0.5/booster:/usr/lib" option, which tells the linker to search for libraries in /usr/lib. This commit fixes that by asking CMake to not add any rpath when building cppcms. Fixes: http://autobuild.buildroot.net/results/a7eb1ede552ae14f409cfd7bd877bcf25ca69a74/ Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> Reviewed-by: Romain Naour <romain.naour@gmail.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com> commit 19e78e509e5e729437d2188b28aee7655340c67d Author: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> Date: Wed May 17 22:24:14 2017 +0200 oracle-mysql: add patch to fix gcc 6.x build issue Fixes: http://autobuild.buildroot.net/results/61074b69b81cd5c17a7f74dc1f7b31f3fc35fd8a/ Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> commit d332f2c52192144d6205b68a1a2888eb63e9efb1 Author: Luca Ceresoli <luca@lucaceresoli.net> Date: Wed May 10 23:33:46 2017 +0200 support/testing: simplify logging by keeping the log file open We currently call infra.smart_open() to open log files each time we need to write to them. Opening the file once in the constructor of Builder and Emulator and writing to it whenever needed is simpler and slightly more efficient. Remove smart_open and instead create a new open_log_file() function which just opens the logfile. Also let it compute the filename, in order to simplify even further the Builder and Emulator code. Signed-off-by: Luca Ceresoli <luca@lucaceresoli.net> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> commit fa3c5cad44b245833612705a88101f3737d02b38 Author: Luca Ceresoli <luca@lucaceresoli.net> Date: Tue May 16 22:45:31 2017 +0200 support/testing/run-tests: help: put the one-letter form before the long form This is what the manpages usually do, and what Python does with the automatically-added -h/--help parameter: Before the change: $ ./support/testing/run-tests [...] optional arguments: -h, --help show this help message and exit --list, -l list of available test cases --all, -a execute all test cases After the change: $ ./support/testing/run-tests [...] optional arguments: -h, --help show this help message and exit -l, --list list of available test cases -a, --all execute all test cases Signed-off-by: Luca Ceresoli <luca@lucaceresoli.net> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> commit ee72dbe576e0c8e11a0bd61028950b2f8de29642 Author: Luca Ceresoli <luca@lucaceresoli.net> Date: Tue May 16 22:45:30 2017 +0200 support/testing: document get_elf_prog_interpreter Signed-off-by: Luca Ceresoli <luca@lucaceresoli.net> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> commit 52258901eccb72eeafab61f855f4b8ce34bf4159 Author: Luca Ceresoli <luca@lucaceresoli.net> Date: Tue May 16 22:45:29 2017 +0200 support/testing: rename check_broken_links to has_broken_links has_broken_links makes it self-explanatory that this is a predicate function, and that the return value tells whether there _are_ broken links, not the opposite. Signed-off-by: Luca Ceresoli <luca@lucaceresoli.net> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> commit f8e1fdbe972b5b82b35b118e2fd7fce5e31d0de9 Author: Peter Korsgaard <peter@korsgaard.com> Date: Wed May 17 15:03:11 2017 +0200 gnutls: bump version to 3.5.12 For details, see the release notes: https://lists.gnupg.org/pipermail/gnutls-devel/2017-May/008427.html https://lists.gnupg.org/pipermail/gnutls-devel/2017-April/008393.html Signed-off-by: Peter Korsgaard <peter@korsgaard.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> commit be8d1efd1e5b8c4ceed34e8144d2cac075ab364e Author: Peter Korsgaard <peter@korsgaard.com> Date: Wed May 17 16:52:51 2017 +0200 fbgrab: explicitly build fbgrab target to workaround gzip issue Fixes #9871 gzip reads default command line options from the environment variable GZIP. The fbgrab Makefile internally also uses a GZIP make variable to know what command to use to compress the manpage. Unfortunaly make will export the value of this make variable to the environment if GZIP is already present in the enviroment, confusing gzip (as 'gzip' isn't a valid command line argument). This can either be triggered by users having GZIP set in their environment (E.G. for custom options), or by enabling BR2_REPRODUCIBLE, where we use this feature to force the -n option (to not store name/timestamp) to gzip. We don't really need to compress the manpage as it isn't installed anyway, so work around the issue by only building the fbgrab application. Signed-off-by: Peter Korsgaard <peter@korsgaard.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> commit 7fde83cdf0da338937dae13144eea2923e5c2730 Author: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> Date: Wed May 17 21:45:04 2017 +0200 ntp: add patch to fix -fPIC issue This commit adds a patch that fixes the build on AArch64 and MIPS of the ntp package, which was caused by some parts of ntp being built without -fPIC. Fixes: [aarch64] http://autobuild.buildroot.net/results/866b1d28595efd8b6becf83d0a64b596538d58b0 [mips] http://autobuild.buildroot.net/results/c2a945855172970736a8ffea9c564f029a023344 Thanks to Romain Naour for the initial analysis. Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> commit 2677210f545c3f3e8c52c973e08c3a460c521e5b Author: Matt Weber <matthew.weber@rockwellcollins.com> Date: Sun May 14 21:26:00 2017 -0500 libqmi: move canonicalize_file_name() Previously was defined in qmi-util.h to fix musl compatibility. It was missed that this is a shared header which causes other dependent package builds to fail, so the static definition was moved into the implementation where it was used. Upstream bug report has been updated and this resolves the following autobuilder related failures. http://autobuild.buildroot.net/results/fe9b6b1b1399a4e8aafc6a326c81ec97c2480025 http://autobuild.buildroot.net/results/40eef797b4d8d53fc6e10f2048316d63549caf6d test-pkg testing was performed against 10 random toolchains ++ Config snippet ++ BR2_ROOTFS_DEVICE_CREATION_DYNAMIC_EUDEV=y BR2_PACKAGE_MODEM_MANAGER_LIBQMI=y BR2_PACKAGE_MODEM_MANAGER=y BR2_PACKAGE_LIBQMI=y ++ Tested Toolchains ++ (Verified I hit all libc variants) br-arm-cortex-a9-musl br-arm-full-static br-m68k-68040-full (uclibc) br-mips32r6-el-hf-glibc br-mips64-n64-full br-mips64r6-el-hf-glibc br-mipsel-o32-full br-sparc64-glibc linaro-arm sourcery-arm Signed-off-by: Matthew Weber <matthew.weber@rockwellcollins.com> Tested-by: Vicente Olivert Riera <Vincent.Riera@imgtec.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> commit f884abe4de72b942406ca16c4f54e02a0c57cce4 Author: Bartosz Golaszewski <brgl@bgdev.pl> Date: Wed May 17 12:10:00 2017 +0200 package/pulseview: fix a build issue Backport an upstream patch fixing the build issue related to boost math definitions. Fixes: http://autobuild.buildroot.net/results/e9f/e9f3f175e203529c44ecf92a34b82a0b3a473e34/ Signed-off-by: Bartosz Golaszewski <brgl@bgdev.pl> Signed-off-by: Peter Korsgaard <peter@korsgaard.com> commit beb6524225f12549a216183abc07745f8d36e764 Author: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> Date: Sun May 14 23:22:42 2017 +0200 rabbitmq-c: openssl/popt sub-options don't work in static linking rabbitmq-c currently fails to build in a number of static linking situations, due to two issues: - CMake FindOpenSSL module is buggy. Even though it uses pkg-config, it doesn't use the information returned by pkg-config, and therefore doesn't know about second order libraries that need be part of the link for static linking to succeed. Due to this, -lz is not passed, and therefore rabbitmq-c fails when linking against libssl/libcrypto. This issue has been reported to upstream CMake at https://gitlab.kitware.com/cmake/cmake/issues/16885. - popt might use libintl, but CMake doesn't know about that. For autotools based packages, we typically work around this by passing LIBS=, but CMake apparently has no equivalent to LIBS=. To workaround this, we only use the OpenSSL and Popt optional dependencies in dynamic linking situations. Fixes: http://autobuild.buildroot.net/results/798dbe5e5fd0463bb2066cb115656795144c327f/ Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com> commit 8ab8f10afaa7579c04d6705eb30c325409e599f9 Author: Peter Korsgaard <peter@korsgaard.com> Date: Wed May 17 10:27:16 2017 +0200 Update for 2017.05-rc2 Signed-off-by: Peter Korsgaard <peter@korsgaard.com> commit 4b4fc27e1a719d1fa0688e81760531979fb4cb73 Author: Peter Seiderer <ps.report@gmx.net> Date: Tue May 16 20:52:01 2017 +0200 qt5declarative: fix examples compile without OpenGL support Fixes [1]: main.cpp:(.text._ZN11QQmlPrivate10createIntoI6FbItemEEvPv[_ZN11QQmlPrivate10createIntoI6FbItemEEvPv]+0x18): undefined reference to `QQuickFramebufferObject::QQuickFramebufferObject(QQuickItem*)' .obj/main.o: In function `QQmlPrivate::QQmlElement<FbItem>::~QQmlElement()': main.cpp:(.text._ZN11QQmlPrivate11QQmlElementI6FbItemED2Ev[_ZN11QQmlPrivate11QQmlElementI6FbItemED5Ev]+0x5c): undefined reference to `vtable for QQuickFramebufferObject' .obj/main.o: In function `QQmlPrivate::QQmlElement<FbItem>::~QQmlElement()': main.cpp:(.text._ZN11QQmlPrivate11QQmlElementI6FbItemED0Ev[_ZN11QQmlPrivate11QQmlElementI6FbItemED0Ev]+0x64): undefined reference to `vtable for QQuickFramebufferObject' .obj/main.o:(.data.rel.ro._ZTVN11QQmlPrivate11QQmlElementI6FbItemEE[_ZTVN11QQmlPrivate11QQmlElementI6FbItemEE]+0x48): undefined reference to `QQuickFramebufferObject::isTextureProvider() const' .obj/main.o:(.data.rel.ro._ZTVN11QQmlPrivate11QQmlElementI6FbItemEE[_ZTVN11QQmlPrivate11QQmlElementI6FbItemEE]+0x4c): undefined reference to `QQuickFramebufferObject::textureProvider() const' .obj/main.o:(.data.rel.ro._ZTVN11QQmlPrivate11QQmlElementI6FbItemEE[_ZTVN11QQmlPrivate11QQmlElementI6FbItemEE]+0xb4): undefined reference to `QQuickFramebufferObject::geometryChanged(QRectF const&, QRectF const&)' .obj/main.o:(.data.rel.ro._ZTVN11QQmlPrivate11QQmlElementI6FbItemEE[_ZTVN11QQmlPrivate11QQmlElementI6FbItemEE]+0xb8): undefined reference to `QQuickFramebufferObject::updatePaintNode(QSGNode*, QQuickItem::UpdatePaintNodeData*)' .obj/main.o:(.data.rel.ro._ZTVN11QQmlPrivate11QQmlElementI6FbItemEE[_ZTVN11QQmlPrivate11QQmlElementI6FbItemEE]+0xbc): undefined reference to `QQuickFramebufferObject::releaseResources()' .obj/moc_fbitem.o: In function `FbItem::qt_metacast(char const*)': moc_fbitem.cpp:(.text+0x70): undefined reference to `QQuickFramebufferObject::qt_metacast(char const*)' .obj/moc_fbitem.o: In function `FbItem::qt_metacall(QMetaObject::Call, int, void**)': moc_fbitem.cpp:(.text+0x80): undefined reference to `QQuickFramebufferObject::qt_metacall(QMetaObject::Call, int, void**)' .obj/moc_fbitem.o: In function `FbItem::~FbItem()': moc_fbitem.cpp:(.text._ZN6FbItemD2Ev[_ZN6FbItemD5Ev]+0x38): undefined reference to `vtable for QQuickFramebufferObject' .obj/moc_fbitem.o: In function `FbItem::~FbItem()': moc_fbitem.cpp:(.text._ZN6FbItemD0Ev[_ZN6FbItemD0Ev]+0x40): undefined reference to `vtable for QQuickFramebufferObject' .obj/moc_fbitem.o:(.data.rel.ro+0x8): undefined reference to `typeinfo for QQuickFramebufferObject' .obj/moc_fbitem.o:(.data.rel.ro+0x58): undefined reference to `QQuickFramebufferObject::isTextureProvider() const' .obj/moc_fbitem.o:(.data.rel.ro+0x5c): undefined reference to `QQuickFramebufferObject::textureProvider() const' .obj/moc_fbitem.o:(.data.rel.ro+0xc4): undefined reference to `QQuickFramebufferObject::geometryChanged(QRectF const&, QRectF const&)' .obj/moc_fbitem.o:(.data.rel.ro+0xc8): undefined reference to `QQuickFramebufferObject::updatePaintNode(QSGNode*, QQuickItem::UpdatePaintNodeData*)' .obj/moc_fbitem.o:(.data.rel.ro+0xcc): undefined reference to `QQuickFramebufferObject::releaseResources()' .obj/moc_fbitem.o:(.data.rel.ro+0xf0): undefined reference to `QQuickFramebufferObject::staticMetaObject' [1] http://autobuild.buildroot.net/results/64a/64a198397736db12b73c1f693dbe1c47d73b53da Signed-off-by: Peter Seiderer <ps.report@gmx.net> Signed-off-by: Peter Korsgaard <peter@korsgaard.com> commit ef9ffa3426edc895dc180d45b48bf305522b3450 Author: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> Date: Mon May 15 22:38:32 2017 +0200 protobuf: link with libatomic when needed The protobuf library uses atomic intrinsics, so we need to link against libatomic. Fixes the build of protobuf on Sparc: http://autobuild.buildroot.net/results/f3d76eaebd529a61bce849e355182c60f233ed06/ Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com> commit 4e00f9daa04e9a84f5191f479d7236dea72fbf35 Author: Peter Korsgaard <peter@korsgaard.com> Date: Tue May 16 21:24:02 2017 +0200 gcc: drop unused legacy arc-2016.09 patch This was forgotten when the arc toolchain version was bumped. Signed-off-by: Peter Korsgaard <peter@korsgaard.com> commit 5270553b9037c775acec493c8d05275fdf53ed05 Author: Romain Naour <romain.naour@gmail.com> Date: Sun May 14 23:45:56 2017 +0200 package/boost: disable boost-locale for static only build with icu Boost fails to build with the following error: error: Tried to build the target twice, with property sets having error: these incompatible properties: error: error: - <runtime-…
When linking the demo applications statically with pcap, the CMake build system does not link with other libraries that are already linked with libpcap (-lnl-genl-3 -lnl-3 -ldbus-1 -pthread). To fix this, the build system uses pcap-config: pcap-config --libs --static Resolves: #187 Change-Id: I90d1c8997ca089d5c12dd6bfd276fe04cba572f7 Signed-off-by: Romain Naour <romain.naour@gmail.com>
When linking the demo applications statically with pcap, the CMake build system does not link with other libraries that are already linked with libpcap (-lnl-genl-3 -lnl-3 -ldbus-1 -pthread). To fix this, the build system uses pcap-config: pcap-config --libs --static Resolves: #187 Change-Id: I90d1c8997ca089d5c12dd6bfd276fe04cba572f7 Signed-off-by: Romain Naour <romain.naour@gmail.com>
Hello,
When linking demo_mn_console statically with pcap, the CMake build system forget to link with other libraries linked with libpcap (-lnl-genl-3 -lnl-3 -ldbus-1 -pthread).
[100%] Linking C executable demo_mn_console
/home/buildroot/build/instance-0/output/host/usr/x86_64-buildroot-linux-musl/sysroot/usr/lib/../lib64/libpcap.a(pcap-linux.o): In function
nl80211_init': pcap-linux.c:(.text+0x41e): undefined reference to
nl_socket_alloc'To fix this, the build system could use pcap-config:
pcap-config --libs --static
-L/path/to/sysroot/usr/lib -lpcap -L/path/to/sysroot/usr/lib/.libs -lnl-genl-3 -lnl-3 -L/path/to/sysroot/usr/lib -ldbus-1 -pthread
Full build log:
http://autobuild.buildroot.net/results/385/3859dc0f4de7e3284a96d5841f040f69f71842df/build-end.log
Best regards,
Romain
The text was updated successfully, but these errors were encountered: