f4a4df2084
Fixes CVE-2018-1000156: arbitrary command execution in ed-style patches. Depend on MMU for now, because the patch adds a fork() call. Upstream later switched to gnulib provided execute(), so this dependency can be dropped on the next version bump. Signed-off-by: Baruch Siach <baruch@tkos.co.il> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
16 lines
444 B
Plaintext
16 lines
444 B
Plaintext
config BR2_PACKAGE_PATCH
|
|
bool "patch"
|
|
depends on BR2_USE_MMU # fork()
|
|
depends on BR2_USE_WCHAR
|
|
depends on BR2_PACKAGE_BUSYBOX_SHOW_OTHERS
|
|
help
|
|
Take patch files (containing difference listings) and apply
|
|
them to original files, producing patched versions.
|
|
|
|
http://www.gnu.org/software/patch/
|
|
|
|
comment "patch needs a toolchain w/ wchar"
|
|
depends on !BR2_USE_WCHAR
|
|
depends on BR2_USE_MMU
|
|
depends on BR2_PACKAGE_BUSYBOX_SHOW_OTHERS
|