PKGBUILDs/core/glibc/PKGBUILD

# $Id: PKGBUILD 163008 2012-07-05 13:48:19Z allan $
# Maintainer: Allan McRae <allan@archlinux.org>

# toolchain build order: linux-api-headers->glibc->binutils->gcc->binutils->glibc
# NOTE: valgrind requires rebuilt with each major glibc version

# ALARM: Kevin Mihelich <kevin@archlinuxarm.org>
# - Patch for ld-linux-armhf.so.3 transition and symlink ld-linux.so.3
# - Patch for hard-float ld.so.cache transition
# - Changed configure to enable ports add-on, specify our build host type
# - Disabled distcc

noautobuild=1

pkgname=glibc
pkgver=2.18
pkgrel=5
pkgdesc="GNU C Library"
arch=('i686' 'x86_64')
url="http://www.gnu.org/software/libc"
license=('GPL' 'LGPL')
groups=('base')
depends=('linux-api-headers>=3.7' 'tzdata' 'filesystem>=2013.01')
makedepends=('gcc>=4.7')
backup=(etc/gai.conf
        etc/locale.gen
        etc/nscd.conf)
options=('!strip' '!distcc')
install=glibc.install
source=(http://ftp.gnu.org/gnu/libc/${pkgname}-${pkgver}.tar.xz{,.sig}
        glibc-2.18-readdir_r-CVE-2013-4237.patch
	glibc-2.18-malloc-corrupt-CVE-2013-4332.patch
	glibc-2.18-strcoll-CVE-2012-4412+4424.patch
        glibc-2.18-strstr-hackfix.patch
	glibc-2.18-ptr-mangle-CVE-2013-4788.patch
        local-soname-hack.diff
        fix-hf-ld.so.cache.patch
        nscd.service
        nscd.tmpfiles
        locale.gen.txt
        locale-gen)
md5sums=('88fbbceafee809e82efd52efa1e3c58f'
         'SKIP'
         '154da6bf5a5248f42a7bf5bf08e01a47'
         'b79561ab9dce900e9bbeaf0d49927c2b'
         'c7264b99d0f7e51922a4d3126182c40a'
         '9749ba386b08a8fe53e7ecede9bf2dfb'
         '4441f6dfe7d75ced1fa75e54dd21d36e'
         '589d79041aa767a5179eaa4e2737dd3f'
         'ad8a9af15ab7eeaa23dc7ee85024af9f'
         'd5fab2cd3abea65aa5ae696ea4a47d6b'
         'da662ca76e7c8d7efbc7986ab7acea2d'
         '07ac979b6ab5eeb778d55f041529d623'
         '476e9113489f93b348b21e144b6a8fcf')

prepare() {
  cd ${srcdir}/${pkgname}-${pkgver}

  # upstream commit 91ce4085
  patch -p1 -i $srcdir/glibc-2.18-readdir_r-CVE-2013-4237.patch

  # upstream commits 1159a193, 55e17aad and b73ed247
  patch -p1 -i $srcdir/glibc-2.18-malloc-corrupt-CVE-2013-4332.patch

  # upstream commits 1326ba1a, 141f3a77 and 303e567a
  # https://sourceware.org/ml/libc-alpha/2013-08/msg00394.html
  # https://sourceware.org/ml/libc-alpha/2013-08/msg00462.html
  patch -p1 -i $srcdir/glibc-2.18-strcoll-CVE-2012-4412+4424.patch

  # upstream commits c61b4d41 and 0b1f8e35
  patch -p1 -i $srcdir/glibc-2.18-ptr-mangle-CVE-2013-4788.patch
  
  # hack fix for strstr issues on x86
  patch -p1 -i $srcdir/glibc-2.18-strstr-hackfix.patch

  # ALARM: patch for hard-float ld-linux soname
  if [[ $CARCH == "armv6h" || $CARCH == "armv7h" ]]; then
    patch -p1 -i ${srcdir}/local-soname-hack.diff
    patch -p1 -i ${srcdir}/fix-hf-ld.so.cache.patch
  fi

  mkdir ${srcdir}/glibc-build
}

build() {
  cd ${srcdir}/glibc-build

  # ALARM: Specify build host types
  [[ $CARCH == "arm" ]] && CONFIGFLAG="--host=armv5tel-unknown-linux-gnueabi --build=armv5tel-unknown-linux-gnueabi"
  [[ $CARCH == "armv6h" ]] && CONFIGFLAG="--host=armv6l-unknown-linux-gnueabihf --build=armv6l-unknown-linux-gnueabihf"
  [[ $CARCH == "armv7h" ]] && CONFIGFLAG="--host=armv7l-unknown-linux-gnueabihf --build=armv7l-unknown-linux-gnueabihf"

  echo "slibdir=/usr/lib" >> configparms
  echo "sbindir=/usr/bin" >> configparms
  echo "rootsbindir=/usr/bin" >> configparms

  # remove hardening options for building libraries
  CFLAGS=${CFLAGS/-fstack-protector/}
  CPPFLAGS=${CPPFLAGS/-D_FORTIFY_SOURCE=2/}

  ${srcdir}/${pkgname}-${pkgver}/configure --prefix=/usr \
      --libdir=/usr/lib --libexecdir=/usr/lib \
      --with-headers=/usr/include \
      --with-bugurl=https://github.com/archlinuxarm/PKGBUILDs/issues \
      --enable-add-ons=nptl,libidn,ports \
      --enable-obsolete-rpc \
      --enable-kernel=2.6.27 \
      --enable-bind-now --disable-profile \
      --enable-stackguard-randomization \
      --enable-lock-elision \
      --disable-multi-arch $CONFIGFLAG

  # build libraries with hardening disabled
  echo "build-programs=no" >> configparms
  make
  
  # re-enable hardening for programs
  sed -i "/build-programs=/s#no#yes#" configparms
  echo "CC += -fstack-protector -D_FORTIFY_SOURCE=2" >> configparms
  echo "CXX += -fstack-protector -D_FORTIFY_SOURCE=2" >> configparms
  make

  # remove harding in preparation to run test-suite
  sed -i '4,6d' configparms
}

check() {
  # bug to file - the linker commands need to be reordered
  LDFLAGS=${LDFLAGS/--as-needed,/}

  cd ${srcdir}/glibc-build
  #make -k check
}

package() {
  cd ${srcdir}/glibc-build

  install -dm755 ${pkgdir}/etc
  touch ${pkgdir}/etc/ld.so.conf

  make install_root=${pkgdir} install

  rm -f ${pkgdir}/etc/ld.so.{cache,conf}

  install -dm755 ${pkgdir}/usr/lib/{locale,systemd/system,tmpfiles.d}

  install -m644 ${srcdir}/${pkgname}-${pkgver}/nscd/nscd.conf ${pkgdir}/etc/nscd.conf
  install -m644 ${srcdir}/nscd.service ${pkgdir}/usr/lib/systemd/system
  install -m644 ${srcdir}/nscd.tmpfiles ${pkgdir}/usr/lib/tmpfiles.d/nscd.conf

  install -m644 ${srcdir}/${pkgname}-${pkgver}/posix/gai.conf ${pkgdir}/etc/gai.conf

  install -m755 ${srcdir}/locale-gen ${pkgdir}/usr/bin

  # create /etc/locale.gen
  install -m644 ${srcdir}/locale.gen.txt ${pkgdir}/etc/locale.gen
  sed -e '1,3d' -e 's|/| |g' -e 's|\\| |g' -e 's|^|#|g' \
    ${srcdir}/glibc-${pkgver}/localedata/SUPPORTED >> ${pkgdir}/etc/locale.gen

  # ALARM: symlink ld-linux.so.3 for hard-float
  [[ $CARCH == "armv6h" || $CARCH == "armv7h" ]] && ln -s /lib/ld-${pkgver}.so ${pkgdir}/usr/lib/ld-linux.so.3

  # Do not strip the following files for improved debugging support
  # ("improved" as in not breaking gdb and valgrind...):
  #   ld-${pkgver}.so
  #   libc-${pkgver}.so
  #   libpthread-${pkgver}.so
  #   libthread_db-1.0.so

  cd $pkgdir
  strip $STRIP_BINARIES usr/bin/{gencat,getconf,getent,iconv,iconvconfig} \
                        usr/bin/{ldconfig,locale,localedef,nscd,makedb} \
                        usr/bin/{pcprofiledump,pldd,rpcgen,sln,sprof} \
                        usr/lib/getconf/*
  [[ $CARCH = "i686" ]] && strip $STRIP_BINARIES usr/bin/lddlibc4

  strip $STRIP_STATIC usr/lib/*.a

  strip $STRIP_SHARED usr/lib/{libanl,libBrokenLocale,libcidn,libcrypt}-*.so \
                      usr/lib/libnss_{compat,db,dns,files,hesiod,nis,nisplus}-*.so \
                      usr/lib/{libdl,libm,libnsl,libresolv,librt,libutil}-*.so \
                      usr/lib/{libmemusage,libpcprofile,libSegFault}.so \
                      usr/lib/{audit,gconv}/*.so
}