mirror of
https://gitlab.com/buildroot.org/buildroot.git
synced 2026-08-01 21:23:51 -09:00
7f0749ce73
- CVE-2026-32239:
Cap'n Proto is a data interchange format and capability-based RPC
system. Prior to 1.4.0, a negative Content-Length value was converted
to unsigned, treating it as an impossibly large length instead. In
theory, this bug could enable HTTP request/response smuggling. This
vulnerability is fixed in 1.4.0.
For more information, see:
- https://github.com/capnproto/capnproto/security/advisories/GHSA-qjx3-pp3m-9jpm
- https://www.cve.org/CVERecord?id=CVE-2026-32239
- CVE-2026-32240:
Cap'n Proto is a data interchange format and capability-based RPC
system. Prior to 1.4.0, when using Transfer-Encoding: chunked, if a
chunk's size parsed to a value of 2^64 or larger, it would be
truncated to a 64-bit integer. In theory, this bug could enable HTTP
request/response smuggling. This vulnerability is fixed in 1.4.0.
For more information, see:
- https://github.com/capnproto/capnproto/security/advisories/GHSA-vpcq-mx5v-32wm
- https://www.cve.org/CVERecord?id=CVE-2026-32240
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
43 lines
1.3 KiB
Makefile
43 lines
1.3 KiB
Makefile
################################################################################
|
|
#
|
|
# capnproto
|
|
#
|
|
################################################################################
|
|
|
|
CAPNPROTO_VERSION = 0.10.4
|
|
CAPNPROTO_SITE = $(call github,capnproto,capnproto,v$(CAPNPROTO_VERSION))
|
|
CAPNPROTO_LICENSE = MIT
|
|
CAPNPROTO_LICENSE_FILES = LICENSE
|
|
CAPNPROTO_CPE_ID_VENDOR = capnproto
|
|
CAPNPROTO_INSTALL_STAGING = YES
|
|
|
|
# 0001-fix-http-body-size-integer-overflow-bugs.patch
|
|
CAPNPROTO_IGNORE_CVES += CVE-2026-32239 CVE-2026-32240
|
|
|
|
# Fetched from Github with no configure script
|
|
CAPNPROTO_AUTORECONF = YES
|
|
CAPNPROTO_CONF_OPTS = --with-external-capnp
|
|
# Needs the capnproto compiler on the host to generate C++ code from message
|
|
# definitions
|
|
CAPNPROTO_DEPENDENCIES = host-autoconf host-capnproto
|
|
ifeq ($(BR2_TOOLCHAIN_HAS_LIBATOMIC),y)
|
|
CAPNPROTO_CONF_ENV += LIBS=-latomic
|
|
endif
|
|
# The actual source to be compiled is within a 'c++' subdirectory
|
|
CAPNPROTO_SUBDIR = c++
|
|
|
|
ifeq ($(BR2_PACKAGE_OPENSSL),y)
|
|
CAPNPROTO_CONF_OPTS += --with-openssl
|
|
CAPNPROTO_DEPENDENCIES += openssl
|
|
else
|
|
CAPNPROTO_CONF_OPTS += --without-openssl
|
|
endif
|
|
|
|
# musl doesn't support getcontext/setcontext
|
|
ifeq ($(BR2_TOOLCHAIN_USES_MUSL),y)
|
|
CAPNPROTO_CONF_ENV += CXXFLAGS="$(TARGET_CXXFLAGS) -DKJ_USE_FIBERS=0"
|
|
endif
|
|
|
|
$(eval $(autotools-package))
|
|
$(eval $(host-autotools-package))
|