lfs/glibc

   1 ###############################################################################
   2 #                                                                             #
   3 # IPFire.org - A linux based firewall                                         #
   4 # Copyright (C) 2007-2021  IPFire Team  <info@ipfire.org>                     #
   5 #                                                                             #
   6 # This program is free software: you can redistribute it and/or modify        #
   7 # it under the terms of the GNU General Public License as published by        #
   8 # the Free Software Foundation, either version 3 of the License, or           #
   9 # (at your option) any later version.                                         #
  10 #                                                                             #
  11 # This program is distributed in the hope that it will be useful,             #
  12 # but WITHOUT ANY WARRANTY; without even the implied warranty of              #
  13 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the               #
  14 # GNU General Public License for more details.                                #
  15 #                                                                             #
  16 # You should have received a copy of the GNU General Public License           #
  17 # along with this program.  If not, see <http://www.gnu.org/licenses/>.       #
  18 #                                                                             #
  19 ###############################################################################
  20
  21 ###############################################################################
  22 # Definitions
  23 ###############################################################################
  24
  25 include Config
  26
  27 VER        = 2.38
  28
  29 THISAPP    = glibc-$(VER)
  30 DL_FILE    = $(THISAPP).tar.xz
  31 DL_FROM    = $(URL_IPFIRE)
  32 DIR_APP    = $(DIR_SRC)/$(THISAPP)
  33
  34 # Normal build or $(TOOLS_DIR) build.
  35 #
  36 ifeq "$(ROOT)" ""
  37   TARGET = $(DIR_INFO)/$(THISAPP)
  38   EXTRA_CONFIG = \
  39         --build=$(BUILDTARGET) \
  40         --prefix=/usr \
  41         --libexecdir=/usr/lib/glibc \
  42         --enable-stack-protector=strong
  43 else
  44   TARGET = $(DIR_INFO)/$(THISAPP)-tools
  45   EXTRA_CONFIG = \
  46         --host=$(CROSSTARGET) \
  47         --build=$(BUILDTARGET) \
  48         --prefix=$(TOOLS_DIR) \
  49         --with-headers=$(TOOLS_DIR)/include
  50 endif
  51
  52 ifeq "$(BUILD_ARCH)" "aarch64"
  53         CFLAGS += -Wno-error=maybe-uninitialized
  54 endif
  55
  56 # Add some general configuration flags
  57 EXTRA_CONFIG += \
  58         --disable-profile \
  59         --enable-kernel=5.4.0 \
  60         --enable-add-ons \
  61         --without-selinux \
  62         --enable-experimental-malloc \
  63         --enable-bind-now \
  64         --enable-fortify-source \
  65         --disable-crypt \
  66         --disable-build-nscd \
  67         --disable-nscd
  68
  69 ifeq "$(BUILD_ARCH)" "x86_64"
  70         EXTRA_CONFIG += --enable-cet
  71 endif
  72
  73 ifeq "$(BUILD_ARCH)" "aarch64"
  74         EXTRA_CONFIG += --enable-memory-tagging
  75 endif
  76
  77 ###############################################################################
  78 # Top-level Rules
  79 ###############################################################################
  80
  81 objects = $(DL_FILE)
  82
  83 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
  84
  85 $(DL_FILE)_BLAKE2 = f9b039f0ef98a7dd8e1cba228ed10286b9e4fbe4dd89af4d26fa5c4e4cf266f19c2746b44d797ce54739d86499e74cf334aaf311bcf6e30120fd7748453e653f
  86
  87 install : $(TARGET)
  88
  89 check : $(patsubst %,$(DIR_CHK)/%,$(objects))
  90
  91 download :$(patsubst %,$(DIR_DL)/%,$(objects))
  92
  93 b2 : $(subst %,%_BLAKE2,$(objects))
  94
  95 ###############################################################################
  96 # Downloading, checking, b2sum
  97 ###############################################################################
  98
  99 $(patsubst %,$(DIR_CHK)/%,$(objects)) :
 100         @$(CHECK)
 101
 102 $(patsubst %,$(DIR_DL)/%,$(objects)) :
 103         @$(LOAD)
 104
 105 $(subst %,%_BLAKE2,$(objects)) :
 106         @$(B2SUM)
 107
 108 ###############################################################################
 109 # Installation Details
 110 ###############################################################################
 111
 112 $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects))
 113         @$(PREBUILD)
 114         @rm -rf $(DIR_APP) $(DIR_SRC)/glibc-build && cd $(DIR_SRC) && tar axf $(DIR_DL)/$(DL_FILE)
 115         @mkdir $(DIR_SRC)/glibc-build
 116
 117         # Patches from upstream
 118         cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/glibc-2.38/0001-stdlib-Improve-tst-realpath-compatibility-with-sourc.patch
 119         cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/glibc-2.38/0002-x86-Fix-for-cache-computation-on-AMD-legacy-cpus.patch
 120         cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/glibc-2.38/0003-nscd-Do-not-rebuild-getaddrinfo-bug-30709.patch
 121         cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/glibc-2.38/0004-x86-Fix-incorrect-scope-of-setting-shared_per_thread.patch
 122         cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/glibc-2.38/0005-x86_64-Fix-build-with-disable-multiarch-BZ-30721.patch
 123         cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/glibc-2.38/0006-i686-Fix-build-with-disable-multiarch.patch
 124         cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/glibc-2.38/0007-malloc-Enable-merging-of-remainders-in-memalign-bug-.patch
 125         cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/glibc-2.38/0008-malloc-Remove-bin-scanning-from-memalign-bug-30723.patch
 126         cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/glibc-2.38/0009-sysdeps-tst-bz21269-fix-test-parameter.patch
 127         cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/glibc-2.38/0010-sysdeps-tst-bz21269-handle-ENOSYS-skip-appropriately.patch
 128         cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/glibc-2.38/0011-sysdeps-tst-bz21269-fix-Wreturn-type.patch
 129         cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/glibc-2.38/0012-io-Fix-record-locking-contants-for-powerpc64-with-__.patch
 130         cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/glibc-2.38/0013-libio-Fix-oversized-__io_vtables.patch
 131         cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/glibc-2.38/0014-elf-Do-not-run-constructors-for-proxy-objects.patch
 132         cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/glibc-2.38/0015-elf-Always-call-destructors-in-reverse-constructor-o.patch
 133         cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/glibc-2.38/0016-elf-Remove-unused-l_text_end-field-from-struct-link_.patch
 134         cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/glibc-2.38/0017-elf-Move-l_init_called_next-to-old-place-of-l_text_e.patch
 135         cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/glibc-2.38/0018-NEWS-Add-the-2.38.1-bug-list.patch
 136         cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/glibc-2.38/0019-CVE-2023-4527-Stack-read-overflow-with-large-TCP-res.patch
 137         cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/glibc-2.38/0020-getaddrinfo-Fix-use-after-free-in-getcanonname-CVE-2.patch
 138         cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/glibc-2.38/0021-iconv-restore-verbosity-with-unrecognized-encoding-n.patch
 139         cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/glibc-2.38/0022-string-Fix-tester-build-with-fortify-enable-with-gcc.patch
 140         cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/glibc-2.38/0023-manual-jobs.texi-Add-missing-item-EPERM-for-getpgid.patch
 141         cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/glibc-2.38/0024-Fix-leak-in-getaddrinfo-introduced-by-the-fix-for-CV.patch
 142         cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/glibc-2.38/0025-Document-CVE-2023-4806-and-CVE-2023-5156-in-NEWS.patch
 143         cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/glibc-2.38/0026-Propagate-GLIBC_TUNABLES-in-setxid-binaries.patch
 144         cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/glibc-2.38/0027-tunables-Terminate-if-end-of-input-is-reached-CVE-20.patch
 145
 146         cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/glibc-localedef-no-archive.patch
 147
 148 ifneq "$(TOOLCHAIN)" "1"
 149  ifeq "$(BUILD_ARCH)" "x86_64"
 150         cd $(DIR_APP) && sed -i 's|libs -o|libs -L/usr/lib64 -Wl,-dynamic-linker=/lib64/ld-linux-x86-64.so.2 -o|' \
 151                 scripts/test-installation.pl
 152  endif
 153 endif
 154
 155         cd $(DIR_SRC)/glibc-build && \
 156                 CFLAGS="$(CFLAGS) -fno-asynchronous-unwind-tables" \
 157                 $(DIR_APP)/configure $(EXTRA_CONFIG)
 158
 159         cd $(DIR_SRC)/glibc-build && make PARALLELMFLAGS=$(MAKETUNING) \
 160                 CFLAGS="$(CFLAGS)" CXXFLAGS="$(CXXFLAGS)"
 161
 162         cd $(DIR_APP) && sed '/test-installation/s@\$$(PERL)@echo not running@' -i Makefile
 163
 164         cd $(DIR_SRC)/glibc-build && make install
 165
 166 ifneq "$(TOOLCHAIN)" "1"
 167         # Creating the locales
 168         mkdir -p /usr/lib/locale
 169         cd $(DIR_SRC)/glibc-build && make localedata/install-locales $(MAKETUNING)
 170
 171         # Timezone data will be shipped by tzdata.
 172         rm -rfv /usr/share/zoneinfo
 173 endif
 174
 175 ifeq "$(TOOLCHAIN)" "1"
 176         # Test the linker in toolchain
 177         cd $(DIR_APP) && echo "int main() { return 0; }" > dummy.c
 178         cd $(DIR_APP) && $(CROSSTARGET)-gcc dummy.c -o dummy
 179
 180         # Must be using a runtime linker from $(TOOLS_DIR)
 181         cd $(DIR_APP) && readelf -l dummy | grep "Requesting program interpreter: $(TOOLS_DIR)"
 182         cd $(DIR_APP) && rm -vf dummy dummy.c
 183 endif
 184
 185         @rm -rf $(DIR_APP) $(DIR_SRC)/glibc-build
 186         @$(POSTBUILD)