mirror of
git://slackware.nl/current.git
synced 2024-12-28 09:59:53 +01:00
e0375de323
a/hwdata-0.381-noarch-1.txz: Upgraded.
a/kernel-generic-6.6.25-x86_64-1.txz: Upgraded.
a/kernel-huge-6.6.25-x86_64-1.txz: Upgraded.
a/kernel-modules-6.6.25-x86_64-1.txz: Upgraded.
d/cmake-3.29.1-x86_64-1.txz: Upgraded.
d/kernel-headers-6.6.25-x86-1.txz: Upgraded.
d/llvm-18.1.3-x86_64-1.txz: Upgraded.
k/kernel-source-6.6.25-noarch-1.txz: Upgraded.
kde/kstars-3.7.0-x86_64-1.txz: Upgraded.
l/enchant-2.6.9-x86_64-1.txz: Upgraded.
l/libclc-18.1.3-x86_64-1.txz: Upgraded.
l/sof-firmware-2024.03-noarch-1.txz: Upgraded.
n/gnutls-3.8.5-x86_64-1.txz: Upgraded.
n/httpd-2.4.59-x86_64-1.txz: Upgraded.
This update fixes security issues:
HTTP/2 DoS by memory exhaustion on endless continuation frames.
HTTP Response Splitting in multiple modules.
HTTP response splitting.
For more information, see:
https://downloads.apache.org/httpd/CHANGES_2.4.59
https://www.cve.org/CVERecord?id=CVE-2024-27316
https://www.cve.org/CVERecord?id=CVE-2024-24795
https://www.cve.org/CVERecord?id=CVE-2023-38709
(* Security fix *)
n/nghttp2-1.61.0-x86_64-1.txz: Upgraded.
This update fixes security issues:
nghttp2 library keeps reading the unbounded number of HTTP/2 CONTINUATION
frames even after a stream is reset to keep HPACK context in sync. This
causes excessive CPU usage to decode HPACK stream. nghttp2 v1.61.0 mitigates
this vulnerability by limiting the number of CONTINUATION frames it can
accept after a HEADERS frame.
For more information, see:
https://github.com/nghttp2/nghttp2/security/advisories/GHSA-x6x3-gv8h-m57q
https://www.kb.cert.org/vuls/id/421644
https://www.cve.org/CVERecord?id=CVE-2024-28182
(* Security fix *)
x/xdg-desktop-portal-1.18.3-x86_64-1.txz: Upgraded.
isolinux/initrd.img: Rebuilt.
kernels/*: Upgraded.
usb-and-pxe-installers/usbboot.img: Rebuilt.
326 lines
12 KiB
Bash
Executable file
326 lines
12 KiB
Bash
Executable file
#!/bin/bash
|
|
|
|
# Slackware build script for llvm
|
|
|
|
# Copyright 2008-2016 Heinz Wiesinger, Amsterdam, The Netherlands
|
|
# Copyright 2012, 2013, 2014, 2015, 2016, 2018, 2019, 2020, 2021, 2022, 2023, 2024 Patrick J. Volkerding, Sebeka, MN, USA
|
|
# All rights reserved.
|
|
#
|
|
# Redistribution and use of this script, with or without modification, is
|
|
# permitted provided that the following conditions are met:
|
|
#
|
|
# 1. Redistributions of this script must retain the above copyright
|
|
# notice, this list of conditions and the following disclaimer.
|
|
#
|
|
# THIS SOFTWARE IS PROVIDED BY THE AUTHOR ''AS IS'' AND ANY EXPRESS OR IMPLIED
|
|
# WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
|
|
# MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO
|
|
# EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
|
|
# SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO,
|
|
# PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS;
|
|
# OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
|
|
# WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR
|
|
# OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF
|
|
# ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
|
|
|
cd $(dirname $0) ; CWD=$(pwd)
|
|
|
|
PKGNAM=llvm
|
|
VERSION=${VERSION:-$(echo llvm-*.tar.xz | rev | cut -f 4- -d . | cut -f 1 -d - | rev)}
|
|
BUILD=${BUILD:-1}
|
|
|
|
# For the two options below, either set both to OFF or *only one* to ON:
|
|
|
|
# Build using -DLLVM_BUILD_LLVM_DYLIB=ON -DLLVM_LINK_LLVM_DYLIB=ON -DCLANG_LINK_CLANG_DYLIB=ON:
|
|
# This is the upstream recommended way to build LLVM with shared libraries and
|
|
# seems to be the way to go these days.
|
|
LLVM_BUILD_LLVM_DYLIB=${LLVM_BUILD_LLVM_DYLIB:=ON}
|
|
|
|
# Build using -DBUILD_SHARED_LIBS=ON.
|
|
# We used this for years here to get a smaller LLVM package, but it no longer
|
|
# works. Feel free to try it, but expect breakage.
|
|
BUILD_SHARED_LIBS=${BUILD_SHARED_LIBS:=OFF}
|
|
|
|
NUMJOBS=${NUMJOBS:-" -j$(expr $(nproc) + 1) "}
|
|
|
|
if [ -z "$ARCH" ]; then
|
|
case "$( uname -m )" in
|
|
i?86) ARCH=i586 ;;
|
|
arm*) ARCH=arm ;;
|
|
*) ARCH=$( uname -m ) ;;
|
|
esac
|
|
fi
|
|
|
|
# If the variable PRINT_PACKAGE_NAME is set, then this script will report what
|
|
# the name of the created package would be, and then exit. This information
|
|
# could be useful to other scripts.
|
|
if [ ! -z "${PRINT_PACKAGE_NAME}" ]; then
|
|
echo "$PKGNAM-$VERSION-$ARCH-$BUILD.txz"
|
|
exit 0
|
|
fi
|
|
|
|
TMP=${TMP:-/tmp}
|
|
PKG=$TMP/package-$PKGNAM
|
|
BUILDDIR=${TMP}/llvm-build-${VERSION}
|
|
|
|
# Ignore that which should be ignored to avoid long build times and
|
|
# massive warning spew:
|
|
IGNORE_GNU_EXTENSIONS=${IGNORE_GNU_EXTENSIONS:--Wno-unknown-warning-option -Wno-gnu-line-marker -Wno-gnu-anonymous-struct -Wno-gnu-include-next}
|
|
|
|
if [ "$ARCH" = "i586" ]; then
|
|
SLKCFLAGS="-O2 -march=i586 -mtune=i686 $IGNORE_GNU_EXTENSIONS"
|
|
LIBDIRSUFFIX=""
|
|
elif [ "$ARCH" = "i686" ]; then
|
|
SLKCFLAGS="-O2 -march=i686 -mtune=i686 $IGNORE_GNU_EXTENSIONS"
|
|
LIBDIRSUFFIX=""
|
|
elif [ "$ARCH" = "x86_64" ]; then
|
|
SLKCFLAGS="-O2 -fPIC $IGNORE_GNU_EXTENSIONS"
|
|
LIBDIRSUFFIX="64"
|
|
else
|
|
SLKCFLAGS="-O2 $IGNORE_GNU_EXTENSIONS"
|
|
LIBDIRSUFFIX=""
|
|
fi
|
|
|
|
# Building clangd will be determined automatically unless BUILD_CLANG is
|
|
# preset to YES or NO:
|
|
if [ -z $BUILD_CLANGD ]; then
|
|
if [ "$ARCH" = "i586" -o "$ARCH" = "i686" ]; then
|
|
BUILD_CLANGD=NO
|
|
else
|
|
BUILD_CLANGD=YES
|
|
fi
|
|
fi
|
|
if [ "$BUILD_CLANGD" = "NO" ]; then
|
|
CLANGD="-DCLANG_ENABLE_CLANGD=OFF"
|
|
fi
|
|
|
|
# Python3 short version:
|
|
PY3=$(python3 -c 'from distutils.sysconfig import get_python_lib; print(get_python_lib())' | cut -f 2 -d n | cut -f 1 -d /)
|
|
|
|
rm -rf $PKG $BUILDDIR
|
|
mkdir -p $TMP $PKG $BUILDDIR
|
|
cd $BUILDDIR
|
|
|
|
# Add a fake configure script so the cleanup script used here at Slackware
|
|
# knows to delete this stuff later. Other folks can just ignore this... it
|
|
# doesn't have any other purpose.
|
|
touch configure
|
|
chmod 755 configure
|
|
|
|
# Extract and rename some support files:
|
|
echo "Extracting $CWD/cmake-$VERSION.src.tar.xz..."
|
|
tar xf $CWD/cmake-$VERSION.src.tar.xz || exit 1
|
|
mv cmake-$VERSION.src cmake
|
|
echo "Extracting $CWD/third-party-$VERSION.src.tar.xz..."
|
|
tar xf $CWD/third-party-$VERSION.src.tar.xz || exit 1
|
|
mv third-party-$VERSION.src third-party
|
|
echo "Extracting $CWD/runtimes-$VERSION.src.tar.xz..."
|
|
tar xf $CWD/runtimes-$VERSION.src.tar.xz || exit 1
|
|
mv runtimes-${VERSION}.src/cmake/Modules/* cmake/Modules || exit 1
|
|
rm -r runtimes-${VERSION}.src
|
|
|
|
rm -rf $PKGNAM-${VERSION}.src $PKGNAM-${VERSION}
|
|
echo "Extracting $CWD/$PKGNAM-$VERSION.src.tar.xz..."
|
|
tar xf $CWD/$PKGNAM-$VERSION.src.tar.xz || exit 1
|
|
|
|
cd $PKGNAM-${VERSION}.src/tools || cd $PKGNAM-${VERSION}/tools || exit 1
|
|
echo "Extracting $CWD/clang-$VERSION.src.tar.xz..."
|
|
tar xf $CWD/clang-$VERSION.src.tar.xz || exit 1
|
|
mv clang-${VERSION} clang 2>/dev/null || mv clang-${VERSION}.src clang || exit 1
|
|
#echo "Extracting $CWD/flang-$VERSION.src.tar.xz..."
|
|
#tar xf $CWD/flang-$VERSION.src.tar.xz || exit 1
|
|
#mv flang-${VERSION} flang 2>/dev/null || mv flang-${VERSION}.src flang || exit 1
|
|
echo "Extracting $CWD/lldb-$VERSION.src.tar.xz..."
|
|
tar xf $CWD/lldb-$VERSION.src.tar.xz || exit 1
|
|
mv lldb-${VERSION} lldb 2>/dev/null || mv lldb-${VERSION}.src lldb || exit 1
|
|
echo "Extracting $CWD/lld-$VERSION.src.tar.xz..."
|
|
tar xf $CWD/lld-$VERSION.src.tar.xz || exit 1
|
|
mv lld-${VERSION} lld 2>/dev/null || mv lld-${VERSION}.src lld || exit 1
|
|
cd ../
|
|
|
|
cd tools/clang/tools || exit 1
|
|
echo "Extracting $CWD/clang-tools-extra-$VERSION.src.tar.xz..."
|
|
tar xf $CWD/clang-tools-extra-$VERSION.src.tar.xz || exit 1
|
|
mv clang-tools-extra-${VERSION} extra 2>/dev/null \
|
|
|| mv clang-tools-extra-${VERSION}.src extra || exit 1
|
|
cd ../../../
|
|
|
|
cd projects || exit 1
|
|
echo "Extracting $CWD/compiler-rt-$VERSION.src.tar.xz..."
|
|
tar xf $CWD/compiler-rt-$VERSION.src.tar.xz || exit 1
|
|
mv compiler-rt-${VERSION} compiler-rt 2>/dev/null || mv compiler-rt-${VERSION}.src compiler-rt || exit 1
|
|
echo "Extracting $CWD/openmp-$VERSION.src.tar.xz..."
|
|
tar xf $CWD/openmp-$VERSION.src.tar.xz || exit 1
|
|
mv openmp-${VERSION} openmp 2>/dev/null || mv openmp-${VERSION}.src openmp || exit 1
|
|
echo "Extracting $CWD/libcxx-${VERSION}.src.tar.xz..."
|
|
tar xf $CWD/libcxx-${VERSION}.src.tar.xz || exit 1
|
|
mv libcxx-${VERSION} libcxx 2>/dev/null || mv libcxx-${VERSION}.src libcxx || exit 1
|
|
echo "Extracting $CWD/libcxxabi-${VERSION}.src.tar.xz..."
|
|
tar xf $CWD/libcxxabi-${VERSION}.src.tar.xz || exit 1
|
|
mv libcxxabi-${VERSION} libcxxabi 2>/dev/null || mv libcxxabi-${VERSION}.src libcxxabi || exit 1
|
|
echo "Extracting $CWD/polly-$VERSION.src.tar.xz..."
|
|
tar xf $CWD/polly-$VERSION.src.tar.xz || exit 1
|
|
mv polly-${VERSION} polly 2>/dev/null || mv polly-${VERSION}.src polly || exit 1
|
|
# We just need a header file from this...
|
|
echo "Extracting $CWD/libunwind-${VERSION}.src.tar.xz..."
|
|
tar xf $CWD/libunwind-${VERSION}.src.tar.xz || exit 1
|
|
mv libunwind-${VERSION}.src libunwind || mv libunwind-${VERSION} libunwind || exit 1
|
|
cd ../
|
|
|
|
# Support GCC built for i586-slackware-linux:
|
|
zcat $CWD/clang.toolchains.i586.triple.diff.gz | patch -p1 --verbose || exit 1
|
|
|
|
# We require libatomic on 32-bit platforms:
|
|
if [ -f ./tools/lldb/source/Utility/CMakeLists.txt ]; then
|
|
if [ "$ARCH" = "i586" -o "$ARCH" = "i686" ]; then
|
|
zcat $CWD/lldb.32-bit.link.libatomic.diff.gz | patch -p1 --verbose || exit 1
|
|
fi
|
|
fi
|
|
|
|
# These hackish links seem to be required...
|
|
cd ..
|
|
ln -sf */runtimes .
|
|
cd -
|
|
cd projects
|
|
ln -sf ../../cmake .
|
|
cd -
|
|
|
|
chown -R root:root .
|
|
find . \
|
|
\( -perm 777 -o -perm 775 -o -perm 750 -o -perm 711 -o -perm 555 -o -perm 511 \) \
|
|
-exec chmod 755 {} \+ -o \
|
|
\( -perm 666 -o -perm 664 -o -perm 640 -o -perm 600 -o -perm 444 -o -perm 440 -o -perm 400 \) \
|
|
-exec chmod 644 {} \+
|
|
|
|
# Collect shared library options. If both of the configurable options are set
|
|
# to ON, the last one we check will be the one we use.
|
|
if [ "$BUILD_SHARED_LIBS" = "ON" ]; then
|
|
SHARED_LIBRARY_OPTIONS="-DBUILD_SHARED_LIBS=ON"
|
|
fi
|
|
if [ "$LLVM_BUILD_LLVM_DYLIB" = "ON" ]; then
|
|
SHARED_LIBRARY_OPTIONS="-DLLVM_BUILD_LLVM_DYLIB=ON -DLLVM_LINK_LLVM_DYLIB=ON -DCLANG_LINK_CLANG_DYLIB=ON"
|
|
fi
|
|
|
|
mkdir build
|
|
cd build
|
|
mkdir include
|
|
# Copy this LLVM libunwind header or it won't be found:
|
|
cp -a ../projects/libunwind/include/mach-o include
|
|
# Nuke LLVM libunwind as it conflicts with the one already on the system:
|
|
rm -r ../projects/libunwind
|
|
cmake -GNinja \
|
|
-DCMAKE_C_COMPILER="clang" \
|
|
-DCMAKE_CXX_COMPILER="clang++" \
|
|
-DCMAKE_C_FLAGS:STRING="$SLKCFLAGS" \
|
|
-DCMAKE_CXX_FLAGS:STRING="$SLKCFLAGS" \
|
|
-DCMAKE_INSTALL_PREFIX=/usr \
|
|
-DLLVM_LIBDIR_SUFFIX=${LIBDIRSUFFIX} \
|
|
-DLIBCXX_LIBDIR_SUFFIX=${LIBDIRSUFFIX} \
|
|
-DLIBCXXABI_LIBDIR_SUFFIX=${LIBDIRSUFFIX} \
|
|
-DCMAKE_BUILD_TYPE=Release \
|
|
$SHARED_LIBRARY_OPTIONS \
|
|
-DLLVM_USE_LINKER=lld \
|
|
-DLLVM_ENABLE_RTTI=ON \
|
|
-DLLVM_ENABLE_FFI=ON \
|
|
-DLLVM_ENABLE_ZLIB=ON \
|
|
-DLLVM_ENABLE_ASSERTIONS=OFF \
|
|
-DLLVM_ENABLE_PER_TARGET_RUNTIME_DIR=NO \
|
|
-DLLVM_INSTALL_UTILS=ON \
|
|
-DLLVM_BINUTILS_INCDIR=/usr/include \
|
|
-DCLANG_RESOURCE_DIR="../lib${LIBDIRSUFFIX}/clang/$(echo $VERSION | cut -f 1 -d .)" \
|
|
-DLLVM_TARGETS_TO_BUILD="host;AMDGPU;BPF" \
|
|
-DLLVM_INCLUDE_BENCHMARKS=OFF \
|
|
-DLIBCXX_INCLUDE_BENCHMARKS=OFF \
|
|
-DCOMPILER_RT_BUILD_LIBFUZZER=OFF \
|
|
-DCLANG_DEFAULT_PIE_ON_LINUX=ON \
|
|
-DLIBCXX_ENABLE_ABI_LINKER_SCRIPT=ON \
|
|
-DLIBCXXABI_USE_LLVM_UNWINDER=OFF \
|
|
$CLANGD \
|
|
.. || exit 1
|
|
|
|
"${NINJA:=ninja}" $NUMJOBS || exit 1
|
|
DESTDIR=$PKG "$NINJA" install || exit 1
|
|
cd ..
|
|
|
|
# Add symlinks for $ARCH-slackware-linux-{clang,clang++}:
|
|
( cd $PKG/usr/bin
|
|
ln -sf clang $ARCH-slackware-linux-clang
|
|
ln -sf clang++ $ARCH-slackware-linux-clang++
|
|
)
|
|
|
|
# Install clang-static-analyzer:
|
|
for i in ccc c++; do
|
|
ln -s /usr/libexec/$i-analyzer \
|
|
$PKG/usr/bin/$i-analyzer || exit 1
|
|
done
|
|
|
|
# Ensure lit-cpuid is installed:
|
|
if [ ! -r $PKG/usr/bin/lit-cpuid ]; then
|
|
cp -a build/bin/lit-cpuid $PKG/usr/bin/lit-cpuid
|
|
chown root:root $PKG/usr/bin/lit-cpuid
|
|
chmod 755 $PKG/usr/bin/lit-cpuid
|
|
fi
|
|
|
|
# Remove symlink to libgomp, which is already provided by gcc:
|
|
rm -f $PKG/usr/lib$LIBDIRSUFFIX/libgomp.so
|
|
|
|
# Install Python bindings:
|
|
for pyver in ${PY3}; do
|
|
mkdir -p "$PKG/usr/lib$LIBDIRSUFFIX/python$pyver/site-packages"
|
|
cp -a tools/clang/bindings/python/clang "$PKG/usr/lib$LIBDIRSUFFIX/python$pyver/site-packages/"
|
|
done
|
|
|
|
# Remove bundled python-six:
|
|
rm -f "$PKG/usr/lib$LIBDIRSUFFIX/python2*/site-packages/six.py"
|
|
|
|
# Compile Python scripts:
|
|
python3 -m compileall "$PKG/usr/lib$LIBDIRSUFFIX/python${PY3}/site-packages/clang"
|
|
python3 -O -m compileall "$PKG/usr/lib$LIBDIRSUFFIX/python${PY3}/site-packages/clang"
|
|
python3 -m compileall "$PKG/usr/share/scan-view"
|
|
python3 -O -m compileall "$PKG/usr/share/scan-view"
|
|
python3 -m compileall "$PKG/usr/share/clang"
|
|
python3 -O -m compileall "$PKG/usr/share/clang"
|
|
python3 -m compileall "$PKG/usr/share/opt-viewer"
|
|
python3 -O -m compileall "$PKG/usr/share/opt-viewer"
|
|
|
|
# Nevermind, we're not shipping this python2 crap:
|
|
rm -rf $PKG/usr/lib$LIBDIRSUFFIX/python2*
|
|
|
|
# Move man page directory:
|
|
mv $PKG/usr/share/man $PKG/usr/
|
|
|
|
# Strip binaries:
|
|
( cd $PKG
|
|
find . | xargs file | grep "executable" | grep ELF | cut -f 1 -d : | xargs strip --strip-unneeded 2> /dev/null
|
|
find . | xargs file | grep "shared object" | grep ELF | cut -f 1 -d : | xargs strip --strip-unneeded 2> /dev/null
|
|
)
|
|
|
|
# Compress manual pages:
|
|
find $PKG/usr/man -type f -exec gzip -9 {} \+
|
|
for i in $( find $PKG/usr/man -type l ) ; do
|
|
ln -s $( readlink $i ).gz $i.gz
|
|
rm $i
|
|
done
|
|
|
|
mkdir -p $PKG/usr/doc/$PKGNAM-$VERSION/{clang,lldb,clang-tools-extra,compiler-rt,openmp,polly}
|
|
cp -a CREDITS* LICENSE* README* $PKG/usr/doc/$PKGNAM-$VERSION
|
|
cp -a tools/clang/{INSTALL,LICENSE,NOTES,README}* \
|
|
$PKG/usr/doc/$PKGNAM-$VERSION/clang
|
|
cp -a tools/lldb/{CODE_OWNERS,INSTALL,LICENSE}* \
|
|
$PKG/usr/doc/$PKGNAM-$VERSION/lldb
|
|
cp -a tools/clang/tools/extra/{CODE_OWNERS,LICENSE,README}* \
|
|
$PKG/usr/doc/$PKGNAM-$VERSION/clang-tools-extra
|
|
cp -a projects/compiler-rt/{CODE_OWNERS,CREDITS,LICENSE,README}* \
|
|
$PKG/usr/doc/$PKGNAM-$VERSION/compiler-rt
|
|
cp -a projects/openmp/{CREDITS,LICENSE}* \
|
|
$PKG/usr/doc/$PKGNAM-$VERSION/openmp
|
|
cp -a projects/polly/{CREDITS,LICENSE,README}* \
|
|
$PKG/usr/doc/$PKGNAM-$VERSION/polly
|
|
mv $PKG/usr/docs/llvm/* $PKG/usr/doc/$PKGNAM-$VERSION
|
|
rm -rf $PKG/usr/docs
|
|
|
|
mkdir -p $PKG/install
|
|
cat $CWD/slack-desc > $PKG/install/slack-desc
|
|
|
|
cd $PKG
|
|
/sbin/makepkg -l y -c n $TMP/$PKGNAM-$VERSION-$ARCH-$BUILD.txz
|