From mboxrd@z Thu Jan 1 00:00:00 1970 From: Samuel Martin Date: Tue, 14 Jul 2015 17:38:38 +0200 Subject: [Buildroot] [PATCH v8 15/16] cpio: new package In-Reply-To: <1436570882-56442-16-git-send-email-clayton.shotwell@rockwellcollins.com> References: <1436570882-56442-1-git-send-email-clayton.shotwell@rockwellcollins.com> <1436570882-56442-16-git-send-email-clayton.shotwell@rockwellcollins.com> Message-ID: List-Id: MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit To: buildroot@busybox.net Clayton, all, On Sat, Jul 11, 2015 at 1:28 AM, Clayton Shotwell wrote: > Adding the cpio archive utility for the target and host. Patches have > been pulled from ArchLinux and Debian to fix CVE issues and compile > issues. According to the url, patches are pulled from ArchLinux and Gentoo. > > Signed-off-by: Clayton Shotwell > > --- > Changes v7 -> v8: > - Corrected the license to be GPLv3+ (Suggested by Thomas P.) > - Changed all of the patches to pull from the various source locations > since they were not being modified at all (Suggested by Thomas P.) > > Changes v6 -> v7: > - Added dependency on argp-standalone package for uclibc toolchains > to fix build error (Clayton S.) > - Added hash file (Clayton S.) > > Changes v5 -> v6: > - No changes > --- > package/Config.in | 1 + > package/Config.in.host | 1 + > package/cpio/Config.in | 8 ++++++++ > package/cpio/Config.in.host | 6 ++++++ > package/cpio/cpio.hash | 9 +++++++++ > package/cpio/cpio.mk | 27 +++++++++++++++++++++++++++ > 6 files changed, 52 insertions(+) > create mode 100644 package/cpio/Config.in > create mode 100644 package/cpio/Config.in.host > create mode 100644 package/cpio/cpio.hash > create mode 100644 package/cpio/cpio.mk > > diff --git a/package/Config.in b/package/Config.in > index 2cc81fa..c6e5efe 100644 > --- a/package/Config.in > +++ b/package/Config.in > @@ -149,6 +149,7 @@ endmenu > menu "Filesystem and flash utilities" > source "package/btrfs-progs/Config.in" > source "package/cifs-utils/Config.in" > + source "package/cpio/Config.in" > source "package/cramfs/Config.in" > source "package/curlftpfs/Config.in" > source "package/dosfstools/Config.in" > diff --git a/package/Config.in.host b/package/Config.in.host > index 1e047aa..9a4f176 100644 > --- a/package/Config.in.host > +++ b/package/Config.in.host > @@ -1,6 +1,7 @@ > menu "Host utilities" > > source "package/checkpolicy/Config.in.host" > + source "package/cpio/Config.in.host" > source "package/cramfs/Config.in.host" > source "package/dfu-util/Config.in.host" > source "package/dos2unix/Config.in.host" > diff --git a/package/cpio/Config.in b/package/cpio/Config.in > new file mode 100644 > index 0000000..1787f39 > --- /dev/null > +++ b/package/cpio/Config.in > @@ -0,0 +1,8 @@ > +config BR2_PACKAGE_CPIO > + bool "cpio" > + # Need argp.h support > + select BR2_PACKAGE_ARGP_STANDALONE if BR2_TOOLCHAIN_USES_UCLIBC > + help > + cpio archive utility for creation and extraction. > + > + https://www.gnu.org/software/cpio/ > diff --git a/package/cpio/Config.in.host b/package/cpio/Config.in.host > new file mode 100644 > index 0000000..e927952 > --- /dev/null > +++ b/package/cpio/Config.in.host > @@ -0,0 +1,6 @@ > +config BR2_PACKAGE_HOST_CPIO > + bool "host cpio" > + help > + cpio archive utility for creation and extraction. > + > + https://www.gnu.org/software/cpio/ > diff --git a/package/cpio/cpio.hash b/package/cpio/cpio.hash > new file mode 100644 > index 0000000..c52e86a > --- /dev/null > +++ b/package/cpio/cpio.hash > @@ -0,0 +1,9 @@ > +# Locally calculated after checking pgp signature > +sha256 601b1d774cd6e4cd39416203c91ec59dbd65dd27d79d75e1a9b89497ea643978 cpio-2.11.tar.gz > + > +# Locally calculated > +sha256 903fb87e00813daf257be5d1680ad93770d320c707ab2ec345486958b2e8a21f cpio-2.11-stdio.in.patch > +sha256 6b6505a97dda75d24627d9ba461b45ab9ea4764e1a2788d6986eb2978434f25d cpio-2.11-CVE-2014-9112.patch > +sha256 0cf7c9749f1c1610aaf46e17eacd6614c5ef8c2114236bcdd08d53e929020ae5 cpio-2.11-testsuite-CVE-2014-9112.patch > +sha256 f1f587f70a38363691cbd4dfe89f962c8c57266277f0fbc781910c6a7065be7e cpio-2.11-check_for_symlinks-CVE-2015-1197.patch > +sha256 b3d317e3c5705d7f9e503f56540baf3cb6dd1d0e9be0261151a5b08378c2d98c cpio-2.11-stat.patch > diff --git a/package/cpio/cpio.mk b/package/cpio/cpio.mk > new file mode 100644 > index 0000000..67871e2 > --- /dev/null > +++ b/package/cpio/cpio.mk > @@ -0,0 +1,27 @@ > +################################################################################ > +# > +# cpio > +# > +################################################################################ > + > +CPIO_VERSION = 2.11 > +CPIO_SITE = http://ftp.gnu.org/gnu/cpio > +CPIO_LICENSE = GPLv3+ > +CPIO_LICENSE_FILES = COPYING > +CPIO_PATCH = \ > + https://projects.archlinux.org/svntogit/packages.git/plain/cpio/trunk/cpio-2.11-stdio.in.patch \ > + https://projects.archlinux.org/svntogit/packages.git/plain/cpio/trunk/cpio-2.11-CVE-2014-9112.patch \ > + https://projects.archlinux.org/svntogit/packages.git/plain/cpio/trunk/cpio-2.11-testsuite-CVE-2014-9112.patch \ > + https://projects.archlinux.org/svntogit/packages.git/plain/cpio/trunk/cpio-2.11-check_for_symlinks-CVE-2015-1197.patch \ > + https://sources.gentoo.org/cgi-bin/viewvc.cgi/gentoo-x86/app-arch/cpio/files/cpio-2.11-stat.patch > + > +# cpio uses argp.h which is not provided by uclibc by default. > +# Use the argp-standalone package to provide this but make sure > +# the host package does not try to use the host version. > +ifeq ($(BR2_TOOLCHAIN_USES_UCLIBC),y) > +CPIO_DEPENDENCIES += argp-standalone > +HOST_CPIO_DEPENDENCIES = > +endif > + > +$(eval $(autotools-package)) > +$(eval $(host-autotools-package)) > -- > 1.9.1 > > _______________________________________________ > buildroot mailing list > buildroot at busybox.net > http://lists.busybox.net/mailman/listinfo/buildroot Regards, -- Samuel