From: Thomas Petazzoni Date: Sat, 28 Apr 2018 15:31:43 +0000 (+0200) Subject: dropbear: fix build with non-SSP capable toolchain X-Git-Url: https://git.libre-soc.org/?a=commitdiff_plain;h=b0aafef6198ee292c4f426295e92cc9b601c2338;p=buildroot.git dropbear: fix build with non-SSP capable toolchain By default, Dropbear's configure script enables hardening flags. Unfortunately, the check for SSP only uses AC_COMPILE_IFELSE(), and therefore doesn't properly test for the availability of libssp, visible only at link time. In addition, Buildroot passes its own hardening flags, depending on various global options. So, we simply disable hardening flags in Dropbear. This fixes a build failure with non-SSP capable toolchains happening since the bump to 2018.76. Signed-off-by: Thomas Petazzoni --- diff --git a/package/dropbear/dropbear.mk b/package/dropbear/dropbear.mk index 236f9b4762..10cb99b5e4 100644 --- a/package/dropbear/dropbear.mk +++ b/package/dropbear/dropbear.mk @@ -12,6 +12,11 @@ DROPBEAR_LICENSE_FILES = LICENSE DROPBEAR_TARGET_BINS = dropbearkey dropbearconvert scp DROPBEAR_PROGRAMS = dropbear $(DROPBEAR_TARGET_BINS) +# Disable hardening flags added by dropbear configure.ac, and let +# Buildroot add them when the relevant options are enabled. This +# prevents dropbear from using SSP support when not available. +DROPBEAR_CONF_OPTS = --disable-harden + ifeq ($(BR2_PACKAGE_DROPBEAR_CLIENT),y) # Build dbclient, and create a convenience symlink named ssh DROPBEAR_PROGRAMS += dbclient