package compiler and linker metadata toolkit
 
 
 
 
 
Go to file
Tobias Stoeckmann f818a69b3d libpkgconf: pkg: fix out ouf boundary access
If a file with a matching "uninstalled" name exists but cannot be
parsed, an invalid memory area is accessed.

How to reproduce:
$ touch poc-uninstalled.pc
$ PKG_CONFIG_PATH=. pkgconf poc
2020-06-10 00:20:36 -06:00
.builds builds: add fedora meson build 2019-07-12 08:57:25 -05:00
cli main: extend copyright statement to 2020 in --about 2020-05-26 10:57:51 -06:00
doc doc: update fragment API docs 2019-01-14 13:49:41 -06:00
libpkgconf libpkgconf: pkg: fix out ouf boundary access 2020-06-10 00:20:36 -06:00
m4 Only add warnings and std flags if supported by compiler (autoconf) (#145) 2017-09-26 12:27:52 -05:00
man cli: add support for PKG_CONFIG_MSVC_SYNTAX env variable 2020-05-24 14:34:17 -06:00
tests Revert "tests: remove some no longer relevant bitrot in the test environment file" 2019-07-12 08:23:36 -05:00
.gitattributes Add .gitattributes file to force dos-lineendings.pc to match CRLF style always 2012-05-04 03:15:07 +00:00
.gitignore buildsys: add support for building a profiled executable 2013-03-01 12:17:16 -06:00
.mailmap add mailmap 2019-07-11 03:27:15 -05:00
AUTHORS update AUTHORS using `git shortlog -e` 2019-07-11 03:30:56 -05:00
CODE_OF_CONDUCT.md add mailmap 2019-07-11 03:27:15 -05:00
COPYING bump copyrights to 2018 2017-12-31 10:41:32 -06:00
Kyuafile.in Add Kyua tests 2016-09-18 23:29:30 +02:00
Makefile.am Makefile.am: Add remaining Meson files to be included in dist tarballs 2020-05-25 05:59:35 -06:00
Makefile.lite pkgconf 1.6.2. (closes #38, #40, #41) 2019-07-11 03:50:00 -05:00
NEWS update NEWS 2020-05-30 19:20:25 -06:00
README.md update README [ci skip] 2019-07-12 05:56:35 -05:00
autogen.sh initial libtoolization for libpkgconf 2015-09-06 09:35:08 -05:00
configure.ac pkgconf 1.7.3. 2020-05-30 19:20:25 -06:00
libpkgconf.pc.in build: install libpkgconf .pc file 2016-12-14 01:30:41 -06:00
meson.build meson: remove some autotools cruft 2020-06-02 18:58:00 -06:00
meson_options.txt meson: Add option to build without kyua for tests (#175) 2018-03-06 23:28:05 -06:00
pkg.m4 Update pkg.m4 to latest upstream version (0.29.1) (#116) 2017-03-07 11:11:01 -06:00

README.md

pkgconf builds.sr.ht status

pkgconf is a program which helps to configure compiler and linker flags for development libraries. It is similar to pkg-config from freedesktop.org.

libpkgconf is a library which provides access to most of pkgconf's functionality, to allow other tooling such as compilers and IDEs to discover and use libraries configured by pkgconf.

using pkgconf with autotools

Implementations of pkg-config, such as pkgconf, are typically used with the PKG_CHECK_MODULES autoconf macro. As far as we know, pkgconf is compatible with all known variations of this macro. pkgconf detects at runtime whether or not it was started as 'pkg-config', and if so, attempts to set program options such that its behaviour is similar.

In terms of the autoconf macro, it is possible to specify the PKG_CONFIG environment variable, so that you can test pkgconf without overwriting your pkg-config binary. Some other build systems may also respect the PKG_CONFIG environment variable.

To set the environment variable on the bourne shell and clones (i.e. bash), you can run:

$ export PKG_CONFIG=/usr/bin/pkgconf

comparison of pkgconf and pkg-config dependency resolvers

pkgconf builds an acyclic directed dependency graph. This allows for the user to more conservatively link their binaries -- which may be helpful in some environments, such as when prelink(1) is being used. As a result of building a directed dependency graph designed for the specific problem domain provided by the user, more accurate dependencies can be determined.

Current release versions of pkg-config, on the other hand, build a database of all known pkg-config files on the system before attempting to resolve dependencies, which is a considerably slower and less efficient design. Efforts have been made recently to improve this behaviour.

As of the 1.1 series, pkgconf also fully implements support for Provides rules, while pkg-config does not. pkg-config only provides the --print-provides functionality as a stub. There are other intentional implementation differences in pkgconf's dependency resolver verses pkg-config's dependency resolver in terms of completeness and correctness, such as, for example, how Conflicts rules are processed.

linker flags optimization

As previously mentioned, pkgconf makes optimizations to the linker flags in both the case of static and shared linking in order to avoid overlinking binaries and also simplifies the CFLAGS and LIBS output of the pkgconf tool for improved readability.

This functionality depends on the pkg-config module properly declaring it's dependency tree instead of using Libs and Cflags fields to directly link against other modules which have pkg-config metadata files installed.

Doing so is discouraged by the freedesktop tutorial anyway.

compatibility with pkg-config

We do not provide bug-level compatibility with pkg-config.

What that means is, if you feel that there is a legitimate regression versus pkg-config, do let us know, but also make sure that the .pc files are valid and follow the rules of the pkg-config tutorial, as most likely fixing them to follow the specified rules will solve the problem.

compiling pkgconf and libpkgconf on UNIX

pkgconf is basically compiled the same way any other autotools-based project is compiled:

$ ./configure
$ make
$ sudo make install

If you are installing pkgconf into a custom prefix, such as /opt/pkgconf, you will likely want to define the default system includedir and libdir for your toolchain. To do this, use the --with-system-includedir and --with-system-libdir configure flags like so:

$ ./configure \
     --prefix=/opt/pkgconf \
     --with-system-libdir=/lib:/usr/lib \
     --with-system-includedir=/usr/include
$ make
$ sudo make install

compiling pkgconf and libpkgconf with CMake (usually for Windows)

pkgconf is compiled using CMake on Windows. In theory, you could also use CMake to build on UNIX, but this is not recommended at this time as it pkgconf is typically built much earlier than CMake.

$ mkdir build
$ cd build
$ cmake ..
$ make
$ sudo make install

There are a few defines such as SYSTEM_LIBDIR, PKGCONFIGDIR and SYSTEM_INCLUDEDIR. However, on Windows, the default PKGCONFIGDIR value is usually overridden at runtime based on path relocation.

If you want pkgconf to be used when you invoke pkg-config, you should install a symlink for this. We do not do this for you, as we believe it is better for vendors to make this determination themselves.

$ ln -sf pkgconf /usr/bin/pkg-config

release tarballs

Release tarballs are available at https://distfiles.dereferenced.org/pkgconf/. Please only use the tarballs from distfiles.dereferenced.org.

contacts

You can report bugs at https://todo.sr.ht/~kaniini/pkgconf.

There is a mailing list at https://lists.sr.ht/~kaniini/pkgconf.

You can contact us via IRC at #pkgconf at irc.freenode.net.