[Ipcop-svn] SF.net SVN: ipcop:[6194] ipcop/trunk

[gespinasse]

Revision: 6194
          http://ipcop.svn.sourceforge.net/ipcop/?rev=6194&view=rev
Author:   gespinasse
Date:     2011-12-27 08:04:26 +0000 (Tue, 27 Dec 2011)
Log Message:
-----------
Prefer gpg compiled as pie, even we need to disable asm part of the code (as 
there is not enought register free on i486)

Modified Paths:
--------------
    ipcop/trunk/lfs/gnupg
    ipcop/trunk/updates/2.0.3/ROOTFILES.i486-2.0.3
    ipcop/trunk/updates/2.0.3/information.xml

Modified: ipcop/trunk/lfs/gnupg
===================================================================
--- ipcop/trunk/lfs/gnupg       2011-12-27 07:24:44 UTC (rev 6193)
+++ ipcop/trunk/lfs/gnupg       2011-12-27 08:04:26 UTC (rev 6194)
@@ -43,7 +43,8 @@
 DIR_APP    = $(DIR_SRC)/$(THISAPP)
 TARGET     = $(DIR_INFO)/$(STAGE_ORDER)_$(STAGE)/$(THISAPP)
 
-CFLAGS    += -nopie
+# Only needed with --disable-asm
+CFLAGS    += -fno-strict-aliasing
 
 ###############################################################################
 # Top-level Rules
@@ -89,12 +90,14 @@
        cd $(DIR_APP) && patch -Np1 -i $(DIR_PATCHES)/$(THISAPP)_call-gcc.patch
 
        rm -rf /home/nobody/.gnupg /root/.gnupg
+       # To not disable -PIE compilation, it is needed to disable asm (not 
enought register free on i486)
+       # --enable-noexecstack only help when asm code is compiled
        cd $(DIR_APP) && autoreconf # because call-gcc patch is against 
Makefile.am and configure.ac
        cd $(DIR_APP) && ./configure    --prefix=/usr \
                                        --build=$(TARGET_2) \
                                        --disable-nls \
                                        --enable-minimal \
-                                       --enable-noexecstack
+                                       --disable-asm
        cd $(DIR_APP) && make -j $(PARALLELISM)
 
 ifeq "$(RUNNING_TEST)" "yes"

Modified: ipcop/trunk/updates/2.0.3/ROOTFILES.i486-2.0.3
===================================================================
--- ipcop/trunk/updates/2.0.3/ROOTFILES.i486-2.0.3      2011-12-27 07:24:44 UTC 
(rev 6193)
+++ ipcop/trunk/updates/2.0.3/ROOTFILES.i486-2.0.3      2011-12-27 08:04:26 UTC 
(rev 6194)
@@ -41,6 +41,9 @@
 /bin/egrep
 /bin/grep
 ##
+## gnupg-1.4.11 compiled as pie, with -fno-strict-aliasing and --disable-asm
+/usr/bin/gpg
+##
 ## iproute2-3.1.0
 /sbin/ip
 /sbin/rtmon

Modified: ipcop/trunk/updates/2.0.3/information.xml
===================================================================
--- ipcop/trunk/updates/2.0.3/information.xml   2011-12-27 07:24:44 UTC (rev 
6193)
+++ ipcop/trunk/updates/2.0.3/information.xml   2011-12-27 08:04:26 UTC (rev 
6194)
@@ -5,7 +5,9 @@
         <size>0</size>
         <description>Add again capi4k-utils plugins. Add wget.&lt;br /&gt;
             Disable traffic accounting with detail level High, always use 
Low.&lt;br /&gt;
+            Patch krb5-1.9.2 against MITKRB5-SA-2011-007.&lt;br /&gt;
             Fix _builtin___strncat_chk might overflow in 
usb-modemswitch-1.2.0.&lt;br /&gt;
+            More gnupg-1.4.11 hardening.&lt;br /&gt;
             Language updates.&lt;br /&gt;
             Upgrade acpid to 2.0.13, bash to 4.2.20, DBD-SQLite to 1.35, 
diffutils to 3.2,
             gmp to 5.0.2, grep to 2.10, iproute2 to 3.1.0,

This was sent by the SourceForge.net collaborative development platform, the 
world's largest Open Source development site.


------------------------------------------------------------------------------
Write once. Port to many.
Get the SDK and tools to simplify cross-platform app development. Create 
new or port existing apps to sell to consumers worldwide. Explore the 
Intel AppUpSM program developer opportunity. appdeveloper.intel.com/join
http://p.sf.net/sfu/intel-appdev
_______________________________________________
Ipcop-svn mailing list
Ipcop-svn@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/ipcop-svn