7d82596450
Changelog: The following security-relevant bugs have been resolved in NSS 3.20.1. Users are encouraged to upgrade immediately. * Bug 1192028 (CVE-2015-7181) and Bug 1202868 (CVE-2015-7182): Several issues existed within the ASN.1 decoder used by NSS for handling streaming BER data. While the majority of NSS uses a separate, unaffected DER decoder, several public routines also accept BER data, and thus are affected. An attacker that successfully exploited these issues can overflow the heap and may be able to obtain remote code execution.
94 lines
3 KiB
Makefile
94 lines
3 KiB
Makefile
# $NetBSD: Makefile,v 1.103 2015/11/03 16:55:07 ryoon Exp $
|
|
|
|
DISTNAME= nss-${NSS_RELEASE:S/.0$//}
|
|
NSS_RELEASE= 3.20.1
|
|
CATEGORIES= security
|
|
MASTER_SITES= ${MASTER_SITE_MOZILLA_ALL:=security/nss/releases/NSS_${NSS_RELEASE:S/.0$//:S/./_/g}_RTM/src/}
|
|
|
|
MAINTAINER= pkgsrc-users@NetBSD.org
|
|
HOMEPAGE= http://www.mozilla.org/projects/security/pki/nss/
|
|
COMMENT= Libraries to support development of security-enabled applications
|
|
LICENSE= mpl-2.0
|
|
|
|
CHECK_PORTABILITY_SKIP+=${MOZILLA_DIR}nss/tests/libpkix/libpkix.sh
|
|
CHECK_PORTABILITY_SKIP+=${MOZILLA_DIR}nss/tests/multinit/multinit.sh
|
|
CHECK_PORTABILITY_SKIP+=${MOZILLA_DIR}js/src/configure
|
|
CHECK_PORTABILITY_SKIP+=${MOZILLA_DIR}configure
|
|
|
|
USE_GCC_RUNTIME= yes
|
|
USE_TOOLS+= gmake perl pax pkg-config
|
|
|
|
.include "../../mk/bsd.prefs.mk"
|
|
|
|
.if ${OPSYS} == "Darwin"
|
|
SUBST_CLASSES+= exec_path
|
|
SUBST_STAGE.exec_path= pre-configure
|
|
SUBST_MESSAGE.exec_path= Fixing @executable_path
|
|
SUBST_FILES.exec_path= nss/coreconf/Darwin.mk
|
|
SUBST_SED.exec_path= -e 's,@executable_path,${PREFIX}/lib/nss,g'
|
|
.endif
|
|
|
|
.if ${OPSYS} == "Linux"
|
|
MAKE_ENV+= FREEBL_NO_DEPEND=0
|
|
.endif
|
|
|
|
.if ${OBJECT_FMT} == "ELF"
|
|
SO_SUFFIX= so
|
|
.elif ${OBJECT_FMT} == "Mach-O"
|
|
SO_SUFFIX= dylib
|
|
.else
|
|
SO_SUFFIX= so.1.0
|
|
.endif
|
|
PLIST_SUBST+= SO_SUFFIX=${SO_SUFFIX:Q}
|
|
|
|
.if ${OPSYS} == "SunOS" && (${PKGSRC_COMPILER} == "clang" || ${PKGSRC_COMPILER} == "gcc")
|
|
MAKE_ENV+= NS_USE_GCC=YES
|
|
.endif
|
|
|
|
.for platform in ${LP64PLATFORMS}
|
|
. if ${MACHINE_PLATFORM:M${platform}}
|
|
MAKE_ENV+= USE_64=1
|
|
. endif
|
|
.endfor
|
|
|
|
MAKE_ENV+= BUILD_OPT=1
|
|
#MAKE_ENV+= OPTIMIZER=${CFLAGS:Q}
|
|
MAKE_ENV+= INCLUDES=-I${BUILDLINK_PREFIX.nspr}/include/nspr
|
|
MAKE_ENV+= NSS_USE_SYSTEM_SQLITE=1
|
|
MAKE_ENV+= EXTRA_SHARED_LIBS="-Wl,-R${BUILDLINK_PREFIX.nspr}/lib/nspr -Wl,-R,${PREFIX}/lib/nss -L${BUILDLINK_PREFIX.nspr}/lib/nspr -lplc4 -lplds4 -lnspr4"
|
|
|
|
post-extract:
|
|
find ${WRKSRC} -type f | xargs ${CHMOD} 644
|
|
find ${WRKSRC} -type d | xargs ${CHMOD} 755
|
|
|
|
do-build:
|
|
cd ${WRKSRC}/nss && ${SETENV} ${MAKE_ENV} ${MAKE_PROGRAM} all
|
|
|
|
INSTALLATION_DIRS= include/nss lib/nss lib/pkgconfig
|
|
DIST= ${WRKSRC}/dist
|
|
|
|
do-install:
|
|
(cd ${DIST}/public && pax -Lrw . ${DESTDIR}${PREFIX}/include/nss/ )
|
|
(cd ${DIST}/*_OPT.OBJ/lib && \
|
|
pax -Lrw *.${SO_SUFFIX} ${DESTDIR}${PREFIX}/lib/nss/ )
|
|
${INSTALL_LIB} ${DIST}/*_OPT.OBJ/lib/libcrmf.a \
|
|
${DESTDIR}${PREFIX}/lib/nss/
|
|
set -e; \
|
|
{ ${ECHO} "Name: NSS"; \
|
|
${ECHO} "Description: Mozilla Network Security Services"; \
|
|
${ECHO} "Version: ${NSS_RELEASE}"; \
|
|
${ECHO} "Requires: nspr >= 4.10.3"; \
|
|
${ECHO} "Cflags: -I${PREFIX}/include/nss/nss -I${PREFIX}/include/nss"; \
|
|
${ECHO} "Libs: -L${PREFIX}/lib/nss" \
|
|
"${COMPILER_RPATH_FLAG}${PREFIX}/lib/nss" \
|
|
"-lnss3 -lsmime3 -lssl3 -lsoftokn3 -lnssutil3" \
|
|
${BUILDLINK_LIBS.pthread:Q}; \
|
|
} >${DESTDIR}${PREFIX}/lib/pkgconfig/nss.pc
|
|
|
|
# For consistency of libxul.so link in www/firefox.
|
|
BUILDLINK_API_DEPENDS.sqlite3+= sqlite3>=3.8.4.2
|
|
.include "../../databases/sqlite3/buildlink3.mk"
|
|
.include "../../devel/nspr/buildlink3.mk"
|
|
.include "../../devel/zlib/buildlink3.mk"
|
|
.include "../../mk/pthread.buildlink3.mk"
|
|
.include "../../mk/bsd.pkg.mk"
|