6d6493c0d8
This release closes security hole CVE-2016-2193, where a query plan might get reused for more than one ROLE in the same session. This could cause the wrong set of Row Level Security (RLS) policies to be used for the query. The update also fixes CVE-2016-3065, a server crash bug triggered by using pageinspect with BRIN index pages. Since an attacker might be able to expose a few bytes of server memory, this crash is being treated as a security issue.
83 lines
2.7 KiB
Makefile
83 lines
2.7 KiB
Makefile
# $NetBSD: Makefile,v 1.9 2016/04/09 12:51:46 adam Exp $
|
|
|
|
PKGNAME= ${DISTNAME:C/-/92-client-/}
|
|
COMMENT= PostgreSQL database client programs
|
|
|
|
.include "../../databases/postgresql92/Makefile.common"
|
|
|
|
USE_TOOLS+= gzip tar
|
|
CONFIGURE_ARGS+= --with-openssl
|
|
CONFIGURE_ARGS+= --with-readline
|
|
CONFIGURE_ARGS+= --with-zlib
|
|
|
|
# 1. The thread-safety test in ${WRSRC}/src/tools/thread does not pass on
|
|
# NetBSD earler than 4.0 or DragonFly.
|
|
# 2. configure with --enable-thread-safety fails on OpenBSD.
|
|
.if (${OPSYS} == "NetBSD" && !empty(OS_VERSION:M[0-3].*)) || \
|
|
${OPSYS} == "DragonFly" || ${OPSYS} == "OpenBSD" || ${OPSYS} == "MirBSD"
|
|
PGSQL_THREAD_SAFETY?= no
|
|
.endif
|
|
PGSQL_THREAD_SAFETY?= yes
|
|
BUILD_DEFS+= PGSQL_THREAD_SAFETY
|
|
|
|
.if !empty(PGSQL_THREAD_SAFETY:M[yY][eE][sS])
|
|
. include "../../mk/pthread.buildlink3.mk"
|
|
. if (${PTHREAD_TYPE} == "native")
|
|
CONFIGURE_ARGS+= --enable-thread-safety
|
|
. endif
|
|
.endif
|
|
|
|
INSTALL_DIRS= src/include
|
|
INSTALL_DIRS+= src/interfaces
|
|
INSTALL_DIRS+= src/bin
|
|
INSTALL_DIRS+= src/port
|
|
BUILD_DIRS= ${INSTALL_DIRS}
|
|
# Without this, the Darwin build fails (related to -bundle_loader).
|
|
BUILD_DIRS+= src/backend
|
|
|
|
.for f in pg_service.conf psqlrc
|
|
CONF_FILES+= share/postgresql/${f}.sample ${PKG_SYSCONFDIR}/${f}
|
|
.endfor
|
|
|
|
# XXX work around core dumps with the native libedit
|
|
USE_GNU_READLINE= yes
|
|
|
|
.include "../../devel/readline/buildlink3.mk"
|
|
.include "../../devel/zlib/buildlink3.mk"
|
|
.include "../../security/openssl/buildlink3.mk"
|
|
|
|
SUBST_CLASSES+= pgxs
|
|
SUBST_STAGE.pgxs= post-build
|
|
SUBST_MESSAGE.pgxs= Fixing workdir tools references in pgxs Makefile
|
|
SUBST_FILES.pgxs= src/Makefile.global
|
|
SUBST_SED.pgxs= -e 's,${TOOLS_CMD.bison},${TOOLS_PATH.bison},'
|
|
SUBST_SED.pgxs+= -e 's,${TOOLS_CMD.lex},${TOOLS_PATH.lex},'
|
|
SUBST_SED.pgxs+= -e 's,${TOOLS_CMD.mkdir},${TOOLS_PATH.mkdir},'
|
|
SUBST_SED.pgxs+= -e 's,${WRKDIR}/.wrapper/bin/ld,${LD},'
|
|
SUBST_SED.pgxs+= -e 's,${WRKDIR}/.wrapper,${PREFIX},'
|
|
SUBST_SED.pgxs+= -e 's,${WRKSRC},/dev/null,'
|
|
|
|
INSTALLATION_DIRS+= lib/postgresql/pgxs
|
|
INSTALLATION_DIRS+= lib/postgresql/pgxs/config
|
|
INSTALLATION_DIRS+= lib/postgresql/pgxs/src
|
|
INSTALLATION_DIRS+= lib/postgresql/pgxs/src/makefiles
|
|
|
|
DEST_PGXS= ${DESTDIR}${PREFIX}/lib/postgresql/pgxs
|
|
PGXS_FILES= config/install-sh
|
|
PGXS_FILES+= src/makefiles/pgxs.mk src/Makefile.global
|
|
PGXS_FILES+= src/Makefile.port src/Makefile.shlib
|
|
PGXS_FILES+= src/nls-global.mk
|
|
|
|
# On Solaris, avoid conflicts between "${SSLBASE}/include/openssl/des.h"
|
|
# and "/usr/include/crypt.h" -- we want the definitions in the former.
|
|
.if ${OPSYS} == "SunOS"
|
|
post-wrapper:
|
|
touch ${BUILDLINK_DIR}/include/crypt.h
|
|
.endif
|
|
|
|
post-install:
|
|
.for file in ${PGXS_FILES}
|
|
${INSTALL_DATA} ${WRKSRC}/${file} ${DEST_PGXS}/${file}
|
|
.endfor
|
|
|
|
.include "../../mk/bsd.pkg.mk"
|