Peter Korsgaard
e28f3ba80d
Fixes the following security issue:
CVE-2024-48423: An issue in assimp v.5.4.3 allows a local attacker to
execute arbitrary code via the CallbackToLogRedirector function within the
Assimp library
https://github.com/assimp/assimp/issues/5788
https://www.cve.org/CVERecord?id=CVE-2024-48423
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit ad82b28427)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
50 lines
1.6 KiB
Makefile
50 lines
1.6 KiB
Makefile
################################################################################
|
|
#
|
|
# assimp
|
|
#
|
|
################################################################################
|
|
|
|
ASSIMP_VERSION = 5.4.3
|
|
ASSIMP_SITE = $(call github,assimp,assimp,v$(ASSIMP_VERSION))
|
|
ASSIMP_LICENSE = BSD-3-Clause
|
|
ASSIMP_LICENSE_FILES = LICENSE
|
|
ASSIMP_CPE_ID_VENDOR = assimp
|
|
ASSIMP_DEPENDENCIES = zlib
|
|
ASSIMP_INSTALL_STAGING = YES
|
|
|
|
# 0001-Fix-leak-5762.patch
|
|
# 0002-Fix-use-after-free-in-the-CallbackToLogRedirector-59.patch
|
|
ASSIMP_IGNORE_CVES += CVE-2024-48423
|
|
|
|
# relocation truncated to fit: R_68K_GOT16O. We also need to disable
|
|
# optimizations to not run into "Error: value -43420 out of range"
|
|
# assembler issues.
|
|
ifeq ($(BR2_m68k),y)
|
|
ASSIMP_CXXFLAGS += -mxgot -O0
|
|
endif
|
|
|
|
# just like m68k coldfire, mips64 also has some limitations on the GOT
|
|
# size for large libraries, which can be overcome by passing
|
|
# -mxgot. Solves "relocation truncated to fit: R_MIPS_CALL16" issues.
|
|
ifeq ($(BR2_mips64)$(BR2_mips64el),y)
|
|
ASSIMP_CXXFLAGS += -mxgot
|
|
endif
|
|
|
|
# workaround SuperH compiler failure when static linking (i.e -fPIC is
|
|
# not passed) in gcc versions 5.x or older. The -Os optimization level
|
|
# causes a "unable to find a register to spill in class
|
|
# 'GENERAL_REGS'" error. -O2 works fine.
|
|
ifeq ($(BR2_sh):$(BR2_STATIC_LIBS):$(BR2_TOOLCHAIN_GCC_AT_LEAST_6),y:y:)
|
|
ASSIMP_CXXFLAGS += -O2
|
|
endif
|
|
|
|
ifeq ($(BR2_TOOLCHAIN_HAS_GCC_BUG_85180),y)
|
|
ASSIMP_CXXFLAGS += -O0
|
|
endif
|
|
|
|
ASSIMP_CONF_OPTS += -DASSIMP_BUILD_TESTS=OFF \
|
|
-DASSIMP_WARNINGS_AS_ERRORS=OFF \
|
|
-DCMAKE_CXX_FLAGS="$(TARGET_CXXFLAGS) $(ASSIMP_CXXFLAGS)"
|
|
|
|
$(eval $(cmake-package))
|