pkgsrc/security/go-crypto/buildlink3.mk
bsiegert 92eccf2d3b Update go-crypto to 0.0.20200122.
In addition to about two years of changes, this contains notably the
following security fix:

	When int is 32 bits wide (on 32-bit architectures like 386 and arm), an
	overflow could occur, causing a panic, due to malformed ASN.1 being
	passed to any of the ASN1 methods of String.

	Tested on linux/386 and darwin/amd64.

	This fixes CVE-2020-7919 and was found thanks to the Project Wycheproof
	test vectors.

pkgsrc changes:
Once again, the acme subdirectory was removed as it introduces a circular
dependency with go-net.

Prodded several times by ng0@
2020-02-03 13:14:20 +00:00

17 lines
476 B
Makefile

# $NetBSD: buildlink3.mk,v 1.6 2020/02/03 13:14:20 bsiegert Exp $
BUILDLINK_TREE+= go-crypto
.if !defined(GO_CRYPTO_BUILDLINK3_MK)
GO_CRYPTO_BUILDLINK3_MK:=
BUILDLINK_CONTENTS_FILTER.go-crypto= ${EGREP} gopkg/
BUILDLINK_DEPMETHOD.go-crypto?= build
BUILDLINK_API_DEPENDS.go-crypto+= go-crypto>=0.0.20200122
BUILDLINK_PKGSRCDIR.go-crypto?= ../../security/go-crypto
.include "../../devel/go-sys/buildlink3.mk"
.endif # GO_CRYPTO_BUILDLINK3_MK
BUILDLINK_TREE+= -go-crypto