pkgsrc/www/php4/Makefile
jlam 1cc929effe Update php4 and ap-php4 to 4.1.2. Changes from version 4.1.1 include:
- Fixed start up failure when mm save handler is used and there is multiple
  SAPIs are working at the same time. (Yasuo)
- Fixed a buffer overflow in the RFC-1867 file upload code (Stefan)

			<===> SECURITY NOTE <===>

Note that the buffer overflow fix is a major security fix.  Quoting from
the security advisory at:

	http://security.e-matters.de/advisories/012002.html

"PHP supports multipart/form-data POST requests (as described in RFC1867)
known as POST fileuploads. Unfourtunately there are several flaws in the
php_mime_split function that could be used by an attacker to execute
arbitrary code. During our research we found out that not only PHP4 but
also older versions from the PHP3 tree are vulnerable.

[...]

"If you are running PHP 4.0.3 or above one way to workaround these bugs is
to disable the fileupload support within your php.ini (file_uploads = Off).
If you are running php as module keep in mind to restart the webserver.
Anyway you should better install the fixed or a properly patched version to
be safe."
2002-02-28 06:14:45 +00:00

47 lines
1.6 KiB
Makefile

# $NetBSD: Makefile,v 1.23 2002/02/28 06:14:46 jlam Exp $
PKGNAME= php-${PHP_BASE_VERS}
PKGREVISION= # empty
CATEGORIES+= lang
COMMENT= HTML-embedded scripting language
CONFLICTS+= ap-php-4.0.3pl1
USE_BUILDLINK_ONLY= YES
.include "Makefile.php"
# Ensure we export symbols in the linked shared object.
LDFLAGS+= -Wl,--export-dynamic
CGIDIR= ${PREFIX}/libexec/cgi-bin
EGDIR= ${PREFIX}/share/examples/php
# On NetBSD ELF platforms, we need to link libgcc.a whole-archive so that
# certain symbols from the C++ implementation (__get_eh_context, etc.)
# referenced by DSOs written in C++ will resolve correctly. We need to
# prefix the linker flags "-whole-archive -lgcc -no-whole-archive" with
# "-Wl," to force all of the flags to be passed down to the linker through
# libtool without change.
#
.if (${OPSYS} == "NetBSD") && (${OBJECT_FMT} == "ELF")
LINK_LIBGCC_LDFLAGS= -Wl,--whole-archive -Wl,-lgcc -Wl,--no-whole-archive
MAKE_ENV+= LINK_LIBGCC_LDFLAGS="${LINK_LIBGCC_LDFLAGS}"
.endif
CONF_FILES= ${EGDIR}/php.ini-recommended ${PKG_SYSCONFDIR}/php.ini
OWN_DIRS= ${PREFIX}/${PHP_EXTENSION_DIR}
post-install:
${RMDIR} ${PREFIX}/include/php/ext/xml/expat/xmltok
${RMDIR} ${PREFIX}/include/php/ext/xml/expat/xmlparse
${RMDIR} ${PREFIX}/include/php/ext/xml/expat
${INSTALL_DATA_DIR} ${CGIDIR}
${LN} -sf ../../bin/php ${CGIDIR}/php
${INSTALL_DATA_DIR} ${EGDIR}
cd ${WRKSRC}; ${INSTALL_DATA} php.ini-dist php.ini-recommended ${EGDIR}
${INSTALL_DATA_DIR} ${PREFIX}/share/php
${INSTALL_DATA} ${WRKSRC}/php4.gif ${PREFIX}/share/php
.include "../../mk/bsd.pkg.install.mk"
.include "../../mk/bsd.pkg.mk"