[OE-core] [PATCH 1/1] wget: fix a host intrusion issue introduced by adding --with-ssl=openssl.

[Eric Bénard]

Hi Dexuan,

Le 19/12/2011 06:14, Dexuan Cui a écrit :
> On my x86-64 Ubuntu 11.04, with MACHINE=qemux86, "bitbake wget" fails. The
> config.log shows:
>
> configure:30072: i586-poky-linux-gcc  -m32   -march=i586
>   --sysroot=/distro/dcui/1212/p1/build/tmp/sysroots/qemux86 -o conftest -O2
>   -pipe -g -feliminate-unused-debug-types  -Wl,-O1 -Wl,--hash-style=gnu
>   -Wl,--as-needed conftest.c -ldl -lz  /usr/lib/libssl.so /usr/lib/libcrypto.so
>   -lz>&5
> /usr/lib/libssl.so: could not read symbols: File in wrong format
>
> The patch fixes the issue by specifying libssl-prefix.
>
> Signed-off-by: Dexuan Cui<dexuan.cui at intel.com>
> ---
>   meta/recipes-extended/wget/wget.inc |    4 ++--
>   1 files changed, 2 insertions(+), 2 deletions(-)
>
> diff --git a/meta/recipes-extended/wget/wget.inc b/meta/recipes-extended/wget/wget.inc
> index 7083569..25f36c8 100644
> --- a/meta/recipes-extended/wget/wget.inc
> +++ b/meta/recipes-extended/wget/wget.inc
> @@ -4,11 +4,11 @@ LICENSE = "GPL"
>   LIC_FILES_CHKSUM = "file://COPYING;md5=d32239bcb673463ab874e80d47fae504"
>   DEPENDS = "openssl"
>
> -INC_PR = "r12"
> +INC_PR = "r13"
>
>   inherit autotools gettext update-alternatives
>
> -EXTRA_OECONF = "--with-libc --enable-ipv6 --with-ssl=openssl"
> +EXTRA_OECONF = "--with-libc --enable-ipv6 --with-libssl-prefix=${STAGING_DIR_HOST} --with-ssl=openssl"
>
>   do_install_append () {
>   	mv ${D}${bindir}/wget ${D}${bindir}/wget.${PN}

this also fix a problem I just met (angstrom, armv5 target) :
  | configure: error: --with-ssl=openssl was given, but SSL is not available.

Tested-by: Eric Bénard <eric at eukrea.com>

Thanks !
Eric