1 |
commit: e58ce23fccaa302307ba142c460610e73dc5de1a |
2 |
Author: Mart Raudsepp <leio <AT> gentoo <DOT> org> |
3 |
AuthorDate: Thu Jun 22 07:08:08 2017 +0000 |
4 |
Commit: Mart Raudsepp <leio <AT> gentoo <DOT> org> |
5 |
CommitDate: Thu Jun 22 07:08:22 2017 +0000 |
6 |
URL: https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=e58ce23f |
7 |
|
8 |
net-libs/webkit-gtk: bump to 2.16.4 for bug fixes, including a security fix |
9 |
|
10 |
Fixes CVE-2017-2538 among other bug fixes |
11 |
|
12 |
Package-Manager: Portage-2.3.5, Repoman-2.3.2 |
13 |
|
14 |
net-libs/webkit-gtk/Manifest | 1 + |
15 |
net-libs/webkit-gtk/webkit-gtk-2.16.4.ebuild | 288 +++++++++++++++++++++++++++ |
16 |
2 files changed, 289 insertions(+) |
17 |
|
18 |
diff --git a/net-libs/webkit-gtk/Manifest b/net-libs/webkit-gtk/Manifest |
19 |
index b0ceed885d2..a7753d75c91 100644 |
20 |
--- a/net-libs/webkit-gtk/Manifest |
21 |
+++ b/net-libs/webkit-gtk/Manifest |
22 |
@@ -1,2 +1,3 @@ |
23 |
DIST webkitgtk-2.16.3.tar.xz 14652068 SHA256 204e9131da0101b9bc8765716e70a897121af04b964d9827cd9f20816a77b512 SHA512 551367551ed1bceaf9c70269f229e97972706820c6ae2d4444bc6d8b0992d6de34a156f9c245813c1f1701ce54f5476a44512590acfa6cfd6e67663d94caa91e WHIRLPOOL bac846be9d5f7b0a4c08b201d338bed6b84e65bdb105f2689350e02e0f0011944f5e23961e9411f712040c26a5313ef9bb4e30dda2cb19216c8e8d665ab0550f |
24 |
+DIST webkitgtk-2.16.4.tar.xz 14655288 SHA256 f9aba4338319bd539785345144e28c8027dc8cb526b2e443e0c8f2c0239f5128 SHA512 9643b40f5425cb6c13daf39cbe66db7103e588c8a6a1822709d1b2d24ddf73662c139337327a403c25678cec96df7e5ccf186c14aca162b6f32b5bc31310709c WHIRLPOOL ac6300646017eaa8d68b4628b3df6cb4b82c6fdf7472c07e6cdba0e0bd55cc1ad8d15e779d528c89477363292586be0e48d01c977dad9dd05269f37c415a4fa5 |
25 |
DIST webkitgtk-2.4.11.tar.xz 9869100 SHA256 588aea051bfbacced27fdfe0335a957dca839ebe36aa548df39c7bbafdb65bf7 SHA512 2e2cf01a52b8593765a0a3c2d7f0ad306121660019eb402226bd2826c7d4666dab4e91ca6ccbd29abe0ad3993549f256ed1ab88de22e9c8516d5f40a4edd6bfb WHIRLPOOL de86c4abfb22aacbf62163d0398158931c9cf6ab628547d3b30e613f0505d67c85c3200f7db96500e7c2b35f640cdaa7f501346fc13f492c9439dff4056849a3 |
26 |
|
27 |
diff --git a/net-libs/webkit-gtk/webkit-gtk-2.16.4.ebuild b/net-libs/webkit-gtk/webkit-gtk-2.16.4.ebuild |
28 |
new file mode 100644 |
29 |
index 00000000000..2c100975823 |
30 |
--- /dev/null |
31 |
+++ b/net-libs/webkit-gtk/webkit-gtk-2.16.4.ebuild |
32 |
@@ -0,0 +1,288 @@ |
33 |
+# Copyright 1999-2017 Gentoo Foundation |
34 |
+# Distributed under the terms of the GNU General Public License v2 |
35 |
+ |
36 |
+EAPI=6 |
37 |
+CMAKE_MAKEFILE_GENERATOR="ninja" |
38 |
+PYTHON_COMPAT=( python2_7 ) |
39 |
+USE_RUBY="ruby21 ruby22 ruby23 ruby24" |
40 |
+ |
41 |
+inherit check-reqs cmake-utils eutils flag-o-matic gnome2 pax-utils python-any-r1 ruby-single toolchain-funcs versionator virtualx |
42 |
+ |
43 |
+MY_P="webkitgtk-${PV}" |
44 |
+DESCRIPTION="Open source web browser engine" |
45 |
+HOMEPAGE="http://www.webkitgtk.org/" |
46 |
+SRC_URI="http://www.webkitgtk.org/releases/${MY_P}.tar.xz" |
47 |
+ |
48 |
+LICENSE="LGPL-2+ BSD" |
49 |
+SLOT="4/37" # soname version of libwebkit2gtk-4.0 |
50 |
+KEYWORDS="~alpha ~amd64 ~arm ~ia64 ~ppc ~ppc64 ~sparc ~x86 ~amd64-fbsd ~x86-fbsd ~amd64-linux ~x86-linux ~x86-macos" |
51 |
+ |
52 |
+IUSE="aqua coverage doc +egl +geolocation gles2 gnome-keyring +gstreamer +introspection +jit libnotify nsplugin +opengl spell wayland +webgl X" |
53 |
+ |
54 |
+# webgl needs gstreamer, bug #560612 |
55 |
+REQUIRED_USE=" |
56 |
+ geolocation? ( introspection ) |
57 |
+ gles2? ( egl ) |
58 |
+ introspection? ( gstreamer ) |
59 |
+ nsplugin? ( X ) |
60 |
+ webgl? ( ^^ ( gles2 opengl ) ) |
61 |
+ !webgl? ( ?? ( gles2 opengl ) ) |
62 |
+ webgl? ( gstreamer ) |
63 |
+ wayland? ( egl ) |
64 |
+ || ( aqua wayland X ) |
65 |
+" |
66 |
+ |
67 |
+# Tests fail to link for inexplicable reasons |
68 |
+# https://bugs.webkit.org/show_bug.cgi?id=148210 |
69 |
+RESTRICT="test" |
70 |
+ |
71 |
+# use sqlite, svg by default |
72 |
+# Aqua support in gtk3 is untested |
73 |
+# Dependencies found at Source/cmake/OptionsGTK.cmake |
74 |
+# Various compile-time optionals for gtk+-3.22.0 - ensure it |
75 |
+RDEPEND=" |
76 |
+ dev-db/sqlite:3= |
77 |
+ >=dev-libs/glib-2.36:2 |
78 |
+ dev-libs/hyphen |
79 |
+ >=dev-libs/icu-3.8.1-r1:= |
80 |
+ >=dev-libs/libxml2-2.8:2 |
81 |
+ >=dev-libs/libxslt-1.1.7 |
82 |
+ >=media-libs/fontconfig-2.8:1.0 |
83 |
+ >=media-libs/freetype-2.4.2:2 |
84 |
+ >=media-libs/harfbuzz-1.3.3:=[icu(+)] |
85 |
+ >=media-libs/libpng-1.4:0= |
86 |
+ media-libs/libwebp:= |
87 |
+ dev-libs/libgcrypt:0= |
88 |
+ >=net-libs/libsoup-2.42:2.4[introspection?] |
89 |
+ >=x11-libs/cairo-1.10.2:= |
90 |
+ >=x11-libs/gtk+-3.22:3[introspection?] |
91 |
+ >=x11-libs/pango-1.30.0 |
92 |
+ virtual/jpeg:0= |
93 |
+ |
94 |
+ aqua? ( >=x11-libs/gtk+-3.14:3[aqua] ) |
95 |
+ egl? ( media-libs/mesa[egl] ) |
96 |
+ geolocation? ( >=app-misc/geoclue-2.1.5:2.0 ) |
97 |
+ gles2? ( media-libs/mesa[gles2] ) |
98 |
+ gnome-keyring? ( app-crypt/libsecret ) |
99 |
+ gstreamer? ( |
100 |
+ >=media-libs/gstreamer-1.2.3:1.0 |
101 |
+ >=media-libs/gst-plugins-base-1.2.3:1.0 |
102 |
+ >=media-libs/gst-plugins-bad-1.8:1.0[opengl?] ) |
103 |
+ introspection? ( >=dev-libs/gobject-introspection-1.32.0:= ) |
104 |
+ libnotify? ( x11-libs/libnotify ) |
105 |
+ nsplugin? ( >=x11-libs/gtk+-2.24.10:2 ) |
106 |
+ opengl? ( virtual/opengl |
107 |
+ x11-libs/cairo[opengl] ) |
108 |
+ spell? ( >=app-text/enchant-0.22:= ) |
109 |
+ wayland? ( >=x11-libs/gtk+-3.14:3[wayland] ) |
110 |
+ webgl? ( |
111 |
+ x11-libs/cairo[opengl] |
112 |
+ x11-libs/libXcomposite |
113 |
+ x11-libs/libXdamage ) |
114 |
+ X? ( |
115 |
+ x11-libs/cairo[X] |
116 |
+ >=x11-libs/gtk+-3.14:3[X] |
117 |
+ x11-libs/libX11 |
118 |
+ x11-libs/libXcomposite |
119 |
+ x11-libs/libXrender |
120 |
+ x11-libs/libXt ) |
121 |
+" |
122 |
+ |
123 |
+# paxctl needed for bug #407085 |
124 |
+# Need real bison, not yacc |
125 |
+DEPEND="${RDEPEND} |
126 |
+ ${PYTHON_DEPS} |
127 |
+ ${RUBY_DEPS} |
128 |
+ >=dev-lang/perl-5.10 |
129 |
+ >=app-accessibility/at-spi2-core-2.5.3 |
130 |
+ >=dev-libs/atk-2.8.0 |
131 |
+ >=dev-util/gtk-doc-am-1.10 |
132 |
+ >=dev-util/gperf-3.0.1 |
133 |
+ >=sys-devel/bison-2.4.3 |
134 |
+ || ( >=sys-devel/gcc-4.9 >=sys-devel/clang-3.3 ) |
135 |
+ sys-devel/gettext |
136 |
+ virtual/pkgconfig |
137 |
+ |
138 |
+ dev-lang/perl |
139 |
+ virtual/perl-Data-Dumper |
140 |
+ virtual/perl-Carp |
141 |
+ |
142 |
+ doc? ( >=dev-util/gtk-doc-1.10 ) |
143 |
+ geolocation? ( dev-util/gdbus-codegen ) |
144 |
+ introspection? ( jit? ( sys-apps/paxctl ) ) |
145 |
+ test? ( |
146 |
+ dev-lang/python:2.7 |
147 |
+ dev-python/pygobject:3[python_targets_python2_7] |
148 |
+ x11-themes/hicolor-icon-theme |
149 |
+ jit? ( sys-apps/paxctl ) ) |
150 |
+" |
151 |
+ |
152 |
+S="${WORKDIR}/${MY_P}" |
153 |
+ |
154 |
+CHECKREQS_DISK_BUILD="18G" # and even this might not be enough, bug #417307 |
155 |
+ |
156 |
+PATCHES=( |
157 |
+ # https://bugs.gentoo.org/show_bug.cgi?id=555504 |
158 |
+ "${FILESDIR}"/${PN}-2.8.5-fix-ia64-build.patch |
159 |
+ |
160 |
+ # https://bugs.gentoo.org/show_bug.cgi?id=564352 |
161 |
+ # https://bugs.webkit.org/show_bug.cgi?id=167283 |
162 |
+ "${FILESDIR}"/${PN}-2.8.5-fix-alpha-build.patch |
163 |
+) |
164 |
+ |
165 |
+pkg_pretend() { |
166 |
+ if [[ ${MERGE_TYPE} != "binary" ]] ; then |
167 |
+ if is-flagq "-g*" && ! is-flagq "-g*0" ; then |
168 |
+ einfo "Checking for sufficient disk space to build ${PN} with debugging CFLAGS" |
169 |
+ check-reqs_pkg_pretend |
170 |
+ fi |
171 |
+ |
172 |
+ if ! test-flag-CXX -std=c++11 ; then |
173 |
+ die "You need at least GCC 4.9.x or Clang >= 3.3 for C++11-specific compiler flags" |
174 |
+ fi |
175 |
+ |
176 |
+ if tc-is-gcc && [[ $(gcc-version) < 4.9 ]] ; then |
177 |
+ die 'The active compiler needs to be gcc 4.9 (or newer)' |
178 |
+ fi |
179 |
+ fi |
180 |
+} |
181 |
+ |
182 |
+pkg_setup() { |
183 |
+ if [[ ${MERGE_TYPE} != "binary" ]] && is-flagq "-g*" && ! is-flagq "-g*0" ; then |
184 |
+ check-reqs_pkg_setup |
185 |
+ fi |
186 |
+ |
187 |
+ python-any-r1_pkg_setup |
188 |
+} |
189 |
+ |
190 |
+src_configure() { |
191 |
+ # Respect CC, otherwise fails on prefix #395875 |
192 |
+ tc-export CC |
193 |
+ |
194 |
+ # Arches without JIT support also need this to really disable it in all places |
195 |
+ use jit || append-cppflags -DENABLE_JIT=0 -DENABLE_YARR_JIT=0 -DENABLE_ASSEMBLER=0 |
196 |
+ |
197 |
+ # It does not compile on alpha without this in LDFLAGS |
198 |
+ # https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=648761 |
199 |
+ use alpha && append-ldflags "-Wl,--no-relax" |
200 |
+ |
201 |
+ # ld segfaults on ia64 with LDFLAGS --as-needed, bug #555504 |
202 |
+ use ia64 && append-ldflags "-Wl,--no-as-needed" |
203 |
+ |
204 |
+ # Sigbuses on SPARC with mcpu and co., bug #??? |
205 |
+ use sparc && filter-flags "-mvis" |
206 |
+ |
207 |
+ # https://bugs.webkit.org/show_bug.cgi?id=42070 , #301634 |
208 |
+ use ppc64 && append-flags "-mminimal-toc" |
209 |
+ |
210 |
+ # Try to use less memory, bug #469942 (see Fedora .spec for reference) |
211 |
+ # --no-keep-memory doesn't work on ia64, bug #502492 |
212 |
+ if ! use ia64; then |
213 |
+ append-ldflags "-Wl,--no-keep-memory" |
214 |
+ fi |
215 |
+ |
216 |
+ # We try to use gold when possible for this package |
217 |
+# if ! tc-ld-is-gold ; then |
218 |
+# append-ldflags "-Wl,--reduce-memory-overheads" |
219 |
+# fi |
220 |
+ |
221 |
+ # older glibc needs this for INTPTR_MAX, bug #533976 |
222 |
+ if has_version "<sys-libs/glibc-2.18" ; then |
223 |
+ append-cppflags "-D__STDC_LIMIT_MACROS" |
224 |
+ fi |
225 |
+ |
226 |
+ # Multiple rendering bugs on youtube, github, etc without this, bug #547224 |
227 |
+ append-flags $(test-flags -fno-strict-aliasing) |
228 |
+ |
229 |
+ local ruby_interpreter="" |
230 |
+ |
231 |
+ if has_version "virtual/rubygems[ruby_targets_ruby24]"; then |
232 |
+ ruby_interpreter="-DRUBY_EXECUTABLE=$(type -P ruby24)" |
233 |
+ elif has_version "virtual/rubygems[ruby_targets_ruby23]"; then |
234 |
+ ruby_interpreter="-DRUBY_EXECUTABLE=$(type -P ruby23)" |
235 |
+ elif has_version "virtual/rubygems[ruby_targets_ruby22]"; then |
236 |
+ ruby_interpreter="-DRUBY_EXECUTABLE=$(type -P ruby22)" |
237 |
+ else |
238 |
+ ruby_interpreter="-DRUBY_EXECUTABLE=$(type -P ruby21)" |
239 |
+ fi |
240 |
+ |
241 |
+ # TODO: Check Web Audio support |
242 |
+ # should somehow let user select between them? |
243 |
+ # |
244 |
+ # FTL_JIT requires llvm |
245 |
+ # |
246 |
+ # opengl needs to be explicetly handled, bug #576634 |
247 |
+ |
248 |
+ local opengl_enabled |
249 |
+ if use opengl || use gles2; then |
250 |
+ opengl_enabled=ON |
251 |
+ else |
252 |
+ opengl_enabled=OFF |
253 |
+ fi |
254 |
+ |
255 |
+ # support for webgl (aka 2d-canvas accelerating) |
256 |
+ local canvas_enabled |
257 |
+ if use webgl && ! use gles2 ; then |
258 |
+ canvas_enabled=ON |
259 |
+ else |
260 |
+ canvas_enabled=OFF |
261 |
+ fi |
262 |
+ |
263 |
+ local mycmakeargs=( |
264 |
+ -DENABLE_QUARTZ_TARGET=$(usex aqua) |
265 |
+ -DENABLE_API_TESTS=$(usex test) |
266 |
+ -DENABLE_GTKDOC=$(usex doc) |
267 |
+ -DENABLE_GEOLOCATION=$(usex geolocation) |
268 |
+ $(cmake-utils_use_find_package gles2 OpenGLES2) |
269 |
+ -DENABLE_GLES2=$(usex gles2) |
270 |
+ -DENABLE_VIDEO=$(usex gstreamer) |
271 |
+ -DENABLE_WEB_AUDIO=$(usex gstreamer) |
272 |
+ -DENABLE_INTROSPECTION=$(usex introspection) |
273 |
+ -DENABLE_JIT=$(usex jit) |
274 |
+ -DUSE_LIBNOTIFY=$(usex libnotify) |
275 |
+ -DUSE_LIBSECRET=$(usex gnome-keyring) |
276 |
+ -DENABLE_PLUGIN_PROCESS_GTK2=$(usex nsplugin) |
277 |
+ -DENABLE_SPELLCHECK=$(usex spell) |
278 |
+ -DENABLE_WAYLAND_TARGET=$(usex wayland) |
279 |
+ -DENABLE_WEBGL=$(usex webgl) |
280 |
+ $(cmake-utils_use_find_package egl EGL) |
281 |
+ $(cmake-utils_use_find_package opengl OpenGL) |
282 |
+ -DENABLE_X11_TARGET=$(usex X) |
283 |
+ -DENABLE_OPENGL=${opengl_enabled} |
284 |
+ -DENABLE_ACCELERATED_2D_CANVAS=${canvas_enabled} |
285 |
+ -DCMAKE_BUILD_TYPE=Release |
286 |
+ -DPORT=GTK |
287 |
+ ${ruby_interpreter} |
288 |
+ ) |
289 |
+ |
290 |
+ # Allow it to use GOLD when possible as it has all the magic to |
291 |
+ # detect when to use it and using gold for this concrete package has |
292 |
+ # multiple advantages and is also the upstream default, bug #585788 |
293 |
+# if tc-ld-is-gold ; then |
294 |
+# mycmakeargs+=( -DUSE_LD_GOLD=ON ) |
295 |
+# else |
296 |
+# mycmakeargs+=( -DUSE_LD_GOLD=OFF ) |
297 |
+# fi |
298 |
+ |
299 |
+ cmake-utils_src_configure |
300 |
+} |
301 |
+ |
302 |
+src_compile() { |
303 |
+ cmake-utils_src_compile |
304 |
+} |
305 |
+ |
306 |
+src_test() { |
307 |
+ # Prevents test failures on PaX systems |
308 |
+ use jit && pax-mark m $(list-paxables Programs/*[Tt]ests/*) # Programs/unittests/.libs/test* |
309 |
+ |
310 |
+ cmake-utils_src_test |
311 |
+} |
312 |
+ |
313 |
+src_install() { |
314 |
+ cmake-utils_src_install |
315 |
+ |
316 |
+ # Prevents crashes on PaX systems, bug #522808 |
317 |
+ use jit && pax-mark m "${ED}usr/bin/jsc" "${ED}usr/libexec/webkit2gtk-4.0/WebKitWebProcess" |
318 |
+ pax-mark m "${ED}usr/libexec/webkit2gtk-4.0/WebKitPluginProcess" |
319 |
+ use nsplugin && pax-mark m "${ED}usr/libexec/webkit2gtk-4.0/WebKitPluginProcess"2 |
320 |
+} |