OE/Yocto SDK mitigation #2861
Open
OE/Yocto SDK mitigation #2861
+4
−3
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
When using OE/Yocto to create a SDK/toolchain, the generated LibwebsocketsTargets.cmake falsely contains the host path (build artifacts) in INTERFACE_LINK_LIBRARIES instead of the actually installed SDK path. This host path originates from OPENSSL_LIBRARIES that gives the full path to the openssl library at build time. To avoid propagating full build host specific path to generated LibwebsocketsTargets.cmake, this patch forces to link with ssl and crypto instead of a full path.
When using OE/Yocto to create a SDK/toolchain, the generated LibwebsocketsTargets.cmake falsely contains the host path (build artifacts) in INTERFACE_LINK_LIBRARIES instead of the actually installed SDK path. This host path originates from LIBUV_LIBRARIES that gives the full path to the openssl library at build time. To avoid propagating full build host specific path to generated LibwebsocketsTargets.cmake, this patch is using pkg_check_modules().
lws-team
force-pushed
the
main
branch
2 times, most recently
from
07b1c27 to
a99b954
Compare
lws-team
force-pushed
the
main
branch
2 times, most recently
from
026710d to
9ba1504
Compare
lws-team
force-pushed
the
main
branch
4 times, most recently
from
fd918f2 to
207d634
Compare
lws-team
force-pushed
the
main
branch
15 times, most recently
from
376dfb3 to
c641067
Compare
lws-team
force-pushed
the
main
branch
3 times, most recently
from
a0c73c1 to
7c9d4bc
Compare
lws-team
force-pushed
the
main
branch
12 times, most recently
from
a800d4a to
7f2f518
Compare
lws-team
force-pushed
the
main
branch
3 times, most recently
from
baf4897 to
0c7fa23
Compare
lws-team
force-pushed
the
main
branch
3 times, most recently
from
2b74af4 to
5f77374
Compare
lws-team
force-pushed
the
main
branch
5 times, most recently
from
a677221 to
0c67054
Compare
lws-team
force-pushed
the
main
branch
2 times, most recently
from
f5fa440 to
278c671
Compare
lws-team
force-pushed
the
main
branch
2 times, most recently
from
580b993 to
c837e3f
Compare
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
When using OE/Yocto to create a SDK/toolchain, the generated LibwebsocketsTargets.cmake falsely contains the host path (build artifacts) in INTERFACE_LINK_LIBRARIES instead of the actually installed SDK path.
This originates from LIBUV_LIBRARIES and OPENSSL_LIBRARIES because they contain the full host path to the libraries instead of just library names (without the '-l').
There might be more full host path for different LWS features.
For reference, a similar report issue is here.
Maybe this mitigation is better addressed at meta-openembedded?