1 |
commit: a2357e6a521e5e597df8d74fae226b7f1da10b45 |
2 |
Author: Mart Raudsepp <leio <AT> gentoo <DOT> org> |
3 |
AuthorDate: Sun Jan 2 21:22:08 2022 +0000 |
4 |
Commit: Mart Raudsepp <leio <AT> gentoo <DOT> org> |
5 |
CommitDate: Sun Jan 2 22:44:12 2022 +0000 |
6 |
URL: https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=a2357e6a |
7 |
|
8 |
net-libs/webkit-gtk: security bump to 2.34.3 |
9 |
|
10 |
Package-Manager: Portage-3.0.20, Repoman-3.0.2 |
11 |
Signed-off-by: Mart Raudsepp <leio <AT> gentoo.org> |
12 |
|
13 |
net-libs/webkit-gtk/Manifest | 1 + |
14 |
net-libs/webkit-gtk/webkit-gtk-2.34.3.ebuild | 294 +++++++++++++++++++++++++++ |
15 |
2 files changed, 295 insertions(+) |
16 |
|
17 |
diff --git a/net-libs/webkit-gtk/Manifest b/net-libs/webkit-gtk/Manifest |
18 |
index 84d9671d42dc..40ab77d4b1bb 100644 |
19 |
--- a/net-libs/webkit-gtk/Manifest |
20 |
+++ b/net-libs/webkit-gtk/Manifest |
21 |
@@ -1,3 +1,4 @@ |
22 |
DIST webkitgtk-2.32.4.tar.xz 23327956 BLAKE2B 13762828c39ea55dcdc65be6561fd1ce33fa8c83c1750807fa56a05adfa3604992d0c532ca0466295e6b0e0174dbbda93ebd8082b1ad06b597b54ad8e3a69bd6 SHA512 c2d72850097da72a82faab0a1218b312668b88bc8b67fcd62f08368c71d46bc833e08b3e095eb286beeae59ee88ac74c8393caee8a4ec5a8e90e02425e43350b |
23 |
DIST webkitgtk-2.34.1.tar.xz 24996620 BLAKE2B 645326467f3155ab15e15fa6431e2652b4957dcbcc28f43ddcfcf088aab205a34b0442e610d3493cd938067af0f335e7abc95eb2df36b45bc0aeec649c83eaa6 SHA512 13f42ecd474c013640233421abe63f55eefa7a5e62d080897197c4f1cde68a2584472586b41ba4d7a1d84a2e08311521c68d259daafcb9386b7164a49a7386ed |
24 |
DIST webkitgtk-2.34.2.tar.xz 24996572 BLAKE2B eb89965065e39d6cc2b54a4a167a19fee50387a25a5285b5eb369b6f2a7af550bff5b476fc27d5e4348c40e2523b76c31116d9ce2f70578f38ce81b2379143af SHA512 37c40fb067ee9f5bb8786bf2ce92aac885e9c5c2da4bc5f4e81682ccfb5eeb0aa94d5094f6aa99a9af216f542d1823094cf27aea13c7be3e5e6e3f6a9729c7a5 |
25 |
+DIST webkitgtk-2.34.3.tar.xz 24996976 BLAKE2B 03e9d15e956eddb516e7d1c74b2b0adc99659e6121aaa7795fe8d5348b25b909ed08dc6f85ec26a8058331ffbfd2e9e3f7f6e8effe0353270c7bd419171492a0 SHA512 f3d0ad2e051fc177e1a478908ad806e0a094ac7ab1d9e40049a67e868974278dd5fa84d911bed2eb356022fbe020d985370c69af70efa0e223221e9be607efbc |
26 |
|
27 |
diff --git a/net-libs/webkit-gtk/webkit-gtk-2.34.3.ebuild b/net-libs/webkit-gtk/webkit-gtk-2.34.3.ebuild |
28 |
new file mode 100644 |
29 |
index 000000000000..f6b51ffd2814 |
30 |
--- /dev/null |
31 |
+++ b/net-libs/webkit-gtk/webkit-gtk-2.34.3.ebuild |
32 |
@@ -0,0 +1,294 @@ |
33 |
+# Copyright 1999-2022 Gentoo Authors |
34 |
+# Distributed under the terms of the GNU General Public License v2 |
35 |
+ |
36 |
+EAPI=7 |
37 |
+PYTHON_COMPAT=( python3_{8..10} ) |
38 |
+USE_RUBY="ruby26 ruby27 ruby30" |
39 |
+ |
40 |
+inherit check-reqs cmake flag-o-matic gnome2 pax-utils python-any-r1 ruby-single toolchain-funcs virtualx |
41 |
+ |
42 |
+MY_P="webkitgtk-${PV}" |
43 |
+DESCRIPTION="Open source web browser engine" |
44 |
+HOMEPAGE="https://www.webkitgtk.org" |
45 |
+SRC_URI="https://www.webkitgtk.org/releases/${MY_P}.tar.xz" |
46 |
+ |
47 |
+LICENSE="LGPL-2+ BSD" |
48 |
+SLOT="4/37" # soname version of libwebkit2gtk-4.0 |
49 |
+KEYWORDS="~amd64 ~arm ~arm64 ~ppc ~ppc64 ~riscv ~sparc ~x86" |
50 |
+ |
51 |
+IUSE="aqua avif +egl examples gamepad +geolocation gles2-only gnome-keyring +gstreamer gtk-doc +introspection +jpeg2k +jumbo-build lcms libnotify +opengl seccomp spell systemd wayland +X" |
52 |
+ |
53 |
+# gstreamer with opengl/gles2 needs egl |
54 |
+REQUIRED_USE=" |
55 |
+ gles2-only? ( egl !opengl ) |
56 |
+ gstreamer? ( opengl? ( egl ) ) |
57 |
+ wayland? ( egl ) |
58 |
+ || ( aqua wayland X ) |
59 |
+" |
60 |
+ |
61 |
+# Tests fail to link for inexplicable reasons |
62 |
+# https://bugs.webkit.org/show_bug.cgi?id=148210 |
63 |
+RESTRICT="test" |
64 |
+ |
65 |
+# Aqua support in gtk3 is untested |
66 |
+# Dependencies found at Source/cmake/OptionsGTK.cmake |
67 |
+# Various compile-time optionals for gtk+-3.22.0 - ensure it |
68 |
+# Missing WebRTC support, but ENABLE_MEDIA_STREAM/ENABLE_WEB_RTC is experimental upstream (PRIVATE OFF) and shouldn't be used yet in 2.30 |
69 |
+# >=gst-plugins-opus-1.14.4-r1 for opusparse (required by MSE) |
70 |
+wpe_depend=" |
71 |
+ >=gui-libs/libwpe-1.5.0:1.0 |
72 |
+ >=gui-libs/wpebackend-fdo-1.7.0:1.0 |
73 |
+" |
74 |
+# TODO: gst-plugins-base[X] is only needed when build configuration ends up with GLX set, but that's a bit automagic too to fix |
75 |
+RDEPEND=" |
76 |
+ >=x11-libs/cairo-1.16.0:=[X?] |
77 |
+ >=media-libs/fontconfig-2.13.0:1.0 |
78 |
+ >=media-libs/freetype-2.9.0:2 |
79 |
+ >=dev-libs/libgcrypt-1.7.0:0= |
80 |
+ >=x11-libs/gtk+-3.22.0:3[aqua?,introspection?,wayland?,X?] |
81 |
+ >=media-libs/harfbuzz-1.4.2:=[icu(+)] |
82 |
+ >=dev-libs/icu-61.2:= |
83 |
+ virtual/jpeg:0= |
84 |
+ >=net-libs/libsoup-2.54:2.4[introspection?] |
85 |
+ >=dev-libs/libxml2-2.8.0:2 |
86 |
+ >=media-libs/libpng-1.4:0= |
87 |
+ dev-db/sqlite:3= |
88 |
+ sys-libs/zlib:0 |
89 |
+ >=dev-libs/atk-2.16.0 |
90 |
+ media-libs/libwebp:= |
91 |
+ |
92 |
+ >=dev-libs/glib-2.67.1:2 |
93 |
+ >=dev-libs/libxslt-1.1.7 |
94 |
+ media-libs/woff2 |
95 |
+ gnome-keyring? ( app-crypt/libsecret ) |
96 |
+ introspection? ( >=dev-libs/gobject-introspection-1.59.1:= ) |
97 |
+ dev-libs/libtasn1:= |
98 |
+ spell? ( >=app-text/enchant-0.22:2 ) |
99 |
+ gstreamer? ( |
100 |
+ >=media-libs/gstreamer-1.14:1.0 |
101 |
+ >=media-libs/gst-plugins-base-1.14:1.0[egl?,opengl?,X?] |
102 |
+ gles2-only? ( media-libs/gst-plugins-base:1.0[gles2] ) |
103 |
+ >=media-plugins/gst-plugins-opus-1.14.4-r1:1.0 |
104 |
+ >=media-libs/gst-plugins-bad-1.14:1.0 ) |
105 |
+ |
106 |
+ X? ( |
107 |
+ x11-libs/libX11 |
108 |
+ x11-libs/libXcomposite |
109 |
+ x11-libs/libXdamage |
110 |
+ x11-libs/libXrender |
111 |
+ x11-libs/libXt ) |
112 |
+ |
113 |
+ libnotify? ( x11-libs/libnotify ) |
114 |
+ dev-libs/hyphen |
115 |
+ jpeg2k? ( >=media-libs/openjpeg-2.2.0:2= ) |
116 |
+ avif? ( >=media-libs/libavif-0.9.0:= ) |
117 |
+ lcms? ( media-libs/lcms:2 ) |
118 |
+ |
119 |
+ egl? ( media-libs/mesa[egl(+)] ) |
120 |
+ gles2-only? ( media-libs/mesa[gles2] ) |
121 |
+ opengl? ( virtual/opengl ) |
122 |
+ wayland? ( |
123 |
+ dev-libs/wayland |
124 |
+ >=dev-libs/wayland-protocols-1.12 |
125 |
+ opengl? ( ${wpe_depend} ) |
126 |
+ gles2-only? ( ${wpe_depend} ) |
127 |
+ ) |
128 |
+ |
129 |
+ seccomp? ( |
130 |
+ >=sys-apps/bubblewrap-0.3.1 |
131 |
+ sys-libs/libseccomp |
132 |
+ sys-apps/xdg-dbus-proxy |
133 |
+ ) |
134 |
+ |
135 |
+ systemd? ( sys-apps/systemd:= ) |
136 |
+ gamepad? ( >=dev-libs/libmanette-0.2.4 ) |
137 |
+" |
138 |
+unset wpe_depend |
139 |
+DEPEND="${RDEPEND}" |
140 |
+# paxctl needed for bug #407085 |
141 |
+# Need real bison, not yacc |
142 |
+BDEPEND=" |
143 |
+ ${PYTHON_DEPS} |
144 |
+ ${RUBY_DEPS} |
145 |
+ >=app-accessibility/at-spi2-core-2.5.3 |
146 |
+ dev-util/glib-utils |
147 |
+ >=dev-util/gperf-3.0.1 |
148 |
+ >=sys-devel/bison-2.4.3 |
149 |
+ || ( >=sys-devel/gcc-7.3 >=sys-devel/clang-5 ) |
150 |
+ sys-devel/gettext |
151 |
+ virtual/pkgconfig |
152 |
+ |
153 |
+ >=dev-lang/perl-5.10 |
154 |
+ virtual/perl-Data-Dumper |
155 |
+ virtual/perl-Carp |
156 |
+ virtual/perl-JSON-PP |
157 |
+ |
158 |
+ gtk-doc? ( >=dev-util/gtk-doc-1.32 ) |
159 |
+ geolocation? ( dev-util/gdbus-codegen ) |
160 |
+ >=dev-util/cmake-3.10 |
161 |
+" |
162 |
+# test? ( |
163 |
+# dev-python/pygobject:3[python_targets_python2_7] |
164 |
+# x11-themes/hicolor-icon-theme |
165 |
+# jit? ( sys-apps/paxctl ) ) |
166 |
+RDEPEND="${RDEPEND} |
167 |
+ geolocation? ( >=app-misc/geoclue-2.1.5:2.0 ) |
168 |
+" |
169 |
+ |
170 |
+S="${WORKDIR}/${MY_P}" |
171 |
+ |
172 |
+CHECKREQS_DISK_BUILD="18G" # and even this might not be enough, bug #417307 |
173 |
+ |
174 |
+pkg_pretend() { |
175 |
+ if [[ ${MERGE_TYPE} != "binary" ]] ; then |
176 |
+ if is-flagq "-g*" && ! is-flagq "-g*0" ; then |
177 |
+ einfo "Checking for sufficient disk space to build ${PN} with debugging CFLAGS" |
178 |
+ check-reqs_pkg_pretend |
179 |
+ fi |
180 |
+ |
181 |
+ if ! test-flag-CXX -std=c++17 ; then |
182 |
+ die "You need at least GCC 7.3.x or Clang >= 5 for C++17-specific compiler flags" |
183 |
+ fi |
184 |
+ fi |
185 |
+ |
186 |
+ if ! use opengl && ! use gles2-only; then |
187 |
+ ewarn |
188 |
+ ewarn "You are disabling OpenGL usage (USE=opengl or USE=gles2-only) completely." |
189 |
+ ewarn "This is an unsupported configuration meant for very specific embedded" |
190 |
+ ewarn "use cases, where there truly is no GL possible (and even that use case" |
191 |
+ ewarn "is very unlikely to come by). If you have GL (even software-only), you" |
192 |
+ ewarn "really really should be enabling OpenGL!" |
193 |
+ ewarn |
194 |
+ fi |
195 |
+} |
196 |
+ |
197 |
+pkg_setup() { |
198 |
+ if [[ ${MERGE_TYPE} != "binary" ]] && is-flagq "-g*" && ! is-flagq "-g*0" ; then |
199 |
+ check-reqs_pkg_setup |
200 |
+ fi |
201 |
+ |
202 |
+ python-any-r1_pkg_setup |
203 |
+} |
204 |
+ |
205 |
+src_prepare() { |
206 |
+ eapply "${FILESDIR}"/2.34.1-opengl-without-X-fixes.patch |
207 |
+ cmake_src_prepare |
208 |
+ gnome2_src_prepare |
209 |
+} |
210 |
+ |
211 |
+src_configure() { |
212 |
+ # Respect CC, otherwise fails on prefix #395875 |
213 |
+ tc-export CC |
214 |
+ |
215 |
+ # It does not compile on alpha without this in LDFLAGS |
216 |
+ # https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=648761 |
217 |
+ use alpha && append-ldflags "-Wl,--no-relax" |
218 |
+ |
219 |
+ # ld segfaults on ia64 with LDFLAGS --as-needed, bug #555504 |
220 |
+ use ia64 && append-ldflags "-Wl,--no-as-needed" |
221 |
+ |
222 |
+ # Sigbuses on SPARC with mcpu and co., bug #??? |
223 |
+ use sparc && filter-flags "-mvis" |
224 |
+ |
225 |
+ # https://bugs.webkit.org/show_bug.cgi?id=42070 , #301634 |
226 |
+ use ppc64 && append-flags "-mminimal-toc" |
227 |
+ |
228 |
+ # Try to use less memory, bug #469942 (see Fedora .spec for reference) |
229 |
+ # --no-keep-memory doesn't work on ia64, bug #502492 |
230 |
+ if ! use ia64; then |
231 |
+ append-ldflags "-Wl,--no-keep-memory" |
232 |
+ fi |
233 |
+ |
234 |
+ # Ruby situation is a bit complicated. See bug 513888 |
235 |
+ local rubyimpl |
236 |
+ local ruby_interpreter="" |
237 |
+ for rubyimpl in ${USE_RUBY}; do |
238 |
+ if has_version -b "virtual/rubygems[ruby_targets_${rubyimpl}]"; then |
239 |
+ ruby_interpreter="-DRUBY_EXECUTABLE=$(type -P ${rubyimpl})" |
240 |
+ fi |
241 |
+ done |
242 |
+ # This will rarely occur. Only a couple of corner cases could lead us to |
243 |
+ # that failure. See bug 513888 |
244 |
+ [[ -z $ruby_interpreter ]] && die "No suitable ruby interpreter found" |
245 |
+ |
246 |
+ # TODO: Check Web Audio support |
247 |
+ # should somehow let user select between them? |
248 |
+ |
249 |
+ # opengl needs to be explicetly handled, bug #576634 |
250 |
+ local use_wpe_renderer=OFF |
251 |
+ local opengl_enabled |
252 |
+ if use opengl || use gles2-only; then |
253 |
+ opengl_enabled=ON |
254 |
+ use wayland && use_wpe_renderer=ON |
255 |
+ else |
256 |
+ opengl_enabled=OFF |
257 |
+ fi |
258 |
+ |
259 |
+ local mycmakeargs=( |
260 |
+ ${ruby_interpreter} |
261 |
+ $(cmake_use_find_package gles2-only OpenGLES2) |
262 |
+ $(cmake_use_find_package egl EGL) |
263 |
+ $(cmake_use_find_package opengl OpenGL) |
264 |
+ -DBWRAP_EXECUTABLE:FILEPATH="${EPREFIX}"/usr/bin/bwrap # If bubblewrap[suid] then portage makes it go-r and cmake find_program fails with that |
265 |
+ -DDBUS_PROXY_EXECUTABLE:FILEPATH="${EPREFIX}"/usr/bin/xdg-dbus-proxy |
266 |
+ -DPORT=GTK |
267 |
+ # Source/cmake/WebKitFeatures.cmake |
268 |
+ -DENABLE_API_TESTS=$(usex test) |
269 |
+ -DENABLE_BUBBLEWRAP_SANDBOX=$(usex seccomp) |
270 |
+ -DENABLE_GAMEPAD=$(usex gamepad) |
271 |
+ -DENABLE_GEOLOCATION=$(usex geolocation) # Runtime optional (talks over dbus service) |
272 |
+ -DENABLE_MINIBROWSER=$(usex examples) |
273 |
+ -DENABLE_SPELLCHECK=$(usex spell) |
274 |
+ -DENABLE_UNIFIED_BUILDS=$(usex jumbo-build) |
275 |
+ -DENABLE_VIDEO=$(usex gstreamer) |
276 |
+ -DENABLE_WEBGL=${opengl_enabled} |
277 |
+ # Supported only under ANGLE and default off PRIVATE option still@2.34.1, see |
278 |
+ # https://bugs.webkit.org/show_bug.cgi?id=225563 |
279 |
+ # https://bugs.webkit.org/show_bug.cgi?id=224888 |
280 |
+ -DENABLE_WEBGL2=OFF |
281 |
+ -DENABLE_WEB_AUDIO=$(usex gstreamer) |
282 |
+ # Source/cmake/OptionsGTK.cmake |
283 |
+ -DENABLE_GLES2=$(usex gles2-only) |
284 |
+ -DENABLE_GTKDOC=$(usex gtk-doc) |
285 |
+ -DENABLE_INTROSPECTION=$(usex introspection) |
286 |
+ -DENABLE_QUARTZ_TARGET=$(usex aqua) |
287 |
+ -DENABLE_WAYLAND_TARGET=$(usex wayland) |
288 |
+ -DENABLE_X11_TARGET=$(usex X) |
289 |
+ -DUSE_AVIF=$(usex avif) |
290 |
+ -DUSE_GTK4=OFF |
291 |
+ -DUSE_LCMS=$(usex lcms) |
292 |
+ -DUSE_LIBHYPHEN=ON |
293 |
+ -DUSE_LIBNOTIFY=$(usex libnotify) |
294 |
+ -DUSE_LIBSECRET=$(usex gnome-keyring) |
295 |
+ -DUSE_OPENGL_OR_ES=${opengl_enabled} |
296 |
+ -DUSE_OPENJPEG=$(usex jpeg2k) |
297 |
+ -DUSE_SOUP2=ON |
298 |
+ -DUSE_SYSTEMD=$(usex systemd) # Whether to enable journald logging |
299 |
+ -DUSE_WOFF2=ON |
300 |
+ -DUSE_WPE_RENDERER=${use_wpe_renderer} # WPE renderer is used to implement accelerated compositing under wayland |
301 |
+ ) |
302 |
+ |
303 |
+ # https://bugs.gentoo.org/761238 |
304 |
+ append-cppflags -DNDEBUG |
305 |
+ |
306 |
+ WK_USE_CCACHE=NO cmake_src_configure |
307 |
+} |
308 |
+ |
309 |
+src_compile() { |
310 |
+ cmake_src_compile |
311 |
+} |
312 |
+ |
313 |
+src_test() { |
314 |
+ # Prevents test failures on PaX systems |
315 |
+ pax-mark m $(list-paxables Programs/*[Tt]ests/*) # Programs/unittests/.libs/test* |
316 |
+ |
317 |
+ cmake_src_test |
318 |
+} |
319 |
+ |
320 |
+src_install() { |
321 |
+ cmake_src_install |
322 |
+ |
323 |
+ # Prevents crashes on PaX systems, bug #522808 |
324 |
+ pax-mark m "${ED}/usr/libexec/webkit2gtk-4.0/jsc" "${ED}/usr/libexec/webkit2gtk-4.0/WebKitWebProcess" |
325 |
+ pax-mark m "${ED}/usr/libexec/webkit2gtk-4.0/WebKitPluginProcess" |
326 |
+} |