Re: [Buildroot] [PATCH] package/expat: fix no high quality entropy warning on Linux <3.17 or glibc <2.25

[Julien Olivain via buildroot <buildroot@buildroot.org>]

On 25/08/2026 11:34, Thomas Devoogdt wrote:
> xmlparse.c:150:4: error: #error You do not have support for any sources 
> of high quality entropy enabled.
> For end user security, that is probably not what you want. Your options 
> include:
>   * Linux >=3.17 + glibc >=2.25 (getrandom): HAVE_GETRANDOM,
>   * Linux >=3.17 + glibc (including <2.25) (syscall SYS_getrandom): 
> HAVE_SYSCALL_GETRANDOM,
>   * BSD / macOS >=10.7 / glibc >=2.36 (arc4random_buf): 
> HAVE_ARC4RANDOM_BUF,
>   * BSD / macOS (including <10.7) / glibc >=2.36 (arc4random): 
> HAVE_ARC4RANDOM,
>   * BSD / macOS >=10.12 / glibc >=2.25 (getentropy): HAVE_GETENTROPY,
>   * Linux (including <3.17) / BSD / macOS (including <10.7) / Solaris 
> >=8 (/dev/urandom): XML_DEV_URANDOM,
>   * Windows >=Vista (rand_s): _WIN32.
> If you insist on not using any of these, bypass this error by defining 
> XML_POOR_ENTROPY and be vulnerable to hash flooding;
> you have been warned. If you have reasons to patch this detection code 
> away or need changes to the build system, please open a bug. Thank you!
> 
> This is caused by the upstream commit "Autotools: Stop using 
> /dev/urandom by default"
> https://github.com/libexpat/libexpat/commit/d30eca113a44562137d59835cf2255ea32d11ba6
> 
> But since all Linux systems have /dev/urandom, we can just enable it by 
> default.
> 
> Moved config options to multiline layout to fit within the 80 
> characters.
> 
> Signed-off-by: Thomas Devoogdt <thomas.devoogdt@barco.com>

Applied to master, thanks. I also added extra info in the commit log. 
See:
https://gitlab.com/buildroot.org/buildroot/-/commit/c22fc74f2b4e5b6082203ecd839d530058e0106d

Best regards,

Julien.
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot