Re: [Buildroot] [PATCH] package/expat: fix no high quality entropy warning on Linux <3.17 or glibc <2.25

[Thomas Perale via buildroot <buildroot@buildroot.org>]

In reply of:
> xmlparse.c:150:4: error: #error You do not have support for any sources of high quality entropy enabled.
> For end user security, that is probably not what you want. Your options include:
>   * Linux >=3.17 + glibc >=2.25 (getrandom): HAVE_GETRANDOM,
>   * Linux >=3.17 + glibc (including <2.25) (syscall SYS_getrandom): HAVE_SYSCALL_GETRANDOM,
>   * BSD / macOS >=10.7 / glibc >=2.36 (arc4random_buf): HAVE_ARC4RANDOM_BUF,
>   * BSD / macOS (including <10.7) / glibc >=2.36 (arc4random): HAVE_ARC4RANDOM,
>   * BSD / macOS >=10.12 / glibc >=2.25 (getentropy): HAVE_GETENTROPY,
>   * Linux (including <3.17) / BSD / macOS (including <10.7) / Solaris >=8 (/dev/urandom): XML_DEV_URANDOM,
>   * Windows >=Vista (rand_s): _WIN32.
> If you insist on not using any of these, bypass this error by defining XML_POOR_ENTROPY and be vulnerable to hash flooding;
> you have been warned. If you have reasons to patch this detection code away or need changes to the build system, please open a bug. Thank you!
> 
> This is caused by the upstream commit "Autotools: Stop using /dev/urandom by default"
> https://github.com/libexpat/libexpat/commit/d30eca113a44562137d59835cf2255ea32d11ba6
> 
> But since all Linux systems have /dev/urandom, we can just enable it by default.
> 
> Moved config options to multiline layout to fit within the 80 characters.
> 
> Signed-off-by: Thomas Devoogdt <thomas.devoogdt@barco.com>

Applied to 2025.02.x & 2026.05.x. Thanks

> ---
>  package/expat/expat.mk | 12 ++++++++++--
>  1 file changed, 10 insertions(+), 2 deletions(-)
> 
> diff --git a/package/expat/expat.mk b/package/expat/expat.mk
> index 7645edfd52..a82be75a4d 100644
> --- a/package/expat/expat.mk
> +++ b/package/expat/expat.mk
> @@ -14,8 +14,16 @@ EXPAT_CPE_ID_VENDOR = libexpat_project
>  EXPAT_CPE_ID_PRODUCT = libexpat
>  
>  EXPAT_CONF_OPTS = \
> -	--without-docbook --without-examples --without-tests --without-xmlwf
> -HOST_EXPAT_CONF_OPTS = --without-docbook --without-examples --without-tests
> +	--with-dev-urandom \
> +	--without-docbook \
> +	--without-examples \
> +	--without-tests \
> +	--without-xmlwf
> +
> +HOST_EXPAT_CONF_OPTS = \
> +	--without-docbook \
> +	--without-examples \
> +	--without-tests
>  
>  $(eval $(autotools-package))
>  $(eval $(host-autotools-package))
> -- 
> 2.43.0
> 
> _______________________________________________
> buildroot mailing list
> buildroot@buildroot.org
> https://lists.buildroot.org/mailman/listinfo/buildroot
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot