From patchwork Thu Dec 22 07:55:17 2011 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Subject: [CONSOLIDATED, PULL, 11/26] wget: fix a host intrusion issue introduced by adding --with-ssl=openssl. Date: Thu, 22 Dec 2011 07:55:17 -0000 From: Saul Wold X-Patchwork-Id: 17427 Message-Id: <5f9851f609f503aec098778ef59c27e5f5dd9579.1324540323.git.sgw@linux.intel.com> To: openembedded-core@lists.openembedded.org From: Dexuan Cui On my x86-64 Ubuntu 11.04, with MACHINE=qemux86, "bitbake wget" fails. The config.log shows: configure:30072: i586-poky-linux-gcc -m32 -march=i586 --sysroot=/distro/dcui/1212/p1/build/tmp/sysroots/qemux86 -o conftest -O2 -pipe -g -feliminate-unused-debug-types -Wl,-O1 -Wl,--hash-style=gnu -Wl,--as-needed conftest.c -ldl -lz /usr/lib/libssl.so /usr/lib/libcrypto.so -lz >&5 /usr/lib/libssl.so: could not read symbols: File in wrong format The patch fixes the issue by specifying libssl-prefix. Signed-off-by: Dexuan Cui --- meta/recipes-extended/wget/wget.inc | 4 ++-- 1 files changed, 2 insertions(+), 2 deletions(-) diff --git a/meta/recipes-extended/wget/wget.inc b/meta/recipes-extended/wget/wget.inc index 7083569..25f36c8 100644 --- a/meta/recipes-extended/wget/wget.inc +++ b/meta/recipes-extended/wget/wget.inc @@ -4,11 +4,11 @@ LICENSE = "GPL" LIC_FILES_CHKSUM = "file://COPYING;md5=d32239bcb673463ab874e80d47fae504" DEPENDS = "openssl" -INC_PR = "r12" +INC_PR = "r13" inherit autotools gettext update-alternatives -EXTRA_OECONF = "--with-libc --enable-ipv6 --with-ssl=openssl" +EXTRA_OECONF = "--with-libc --enable-ipv6 --with-libssl-prefix=${STAGING_DIR_HOST} --with-ssl=openssl" do_install_append () { mv ${D}${bindir}/wget ${D}${bindir}/wget.${PN}