initial buildroot for linux 5.15

package/lz4/0001-Fix-potential-memory-corruption-with-negative-memmov.patch

@@ -0,0 +1,26 @@
+From 8301a21773ef61656225e264f4f06ae14462bca7 Mon Sep 17 00:00:00 2001
+From: Jasper Lievisse Adriaanse <j@jasper.la>
+Date: Fri, 26 Feb 2021 15:21:20 +0100
+Subject: [PATCH] Fix potential memory corruption with negative memmove() size
+
+Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
+---
+ lib/lz4.c | 2 +-
+ 1 file changed, 1 insertion(+), 1 deletion(-)
+
+diff --git a/lib/lz4.c b/lib/lz4.c
+index 5f524d0..c2f504e 100644
+--- a/lib/lz4.c
++++ b/lib/lz4.c
+@@ -1749,7 +1749,7 @@ LZ4_decompress_generic(
+                  const size_t dictSize         /* note : = 0 if noDict */
+                  )
+ {
+-    if (src == NULL) { return -1; }
++    if ((src == NULL) || (outputSize < 0)) { return -1; }
+ 
+     {   const BYTE* ip = (const BYTE*) src;
+         const BYTE* const iend = ip + srcSize;
+-- 
+2.20.1
+

package/lz4/Config.in

@@ -0,0 +1,19 @@
+config BR2_PACKAGE_LZ4
+	bool "lz4"
+	help
+	  LZ4 is a very fast lossless compression algorithm, providing
+	  compression speed at 400 MB/s per core, scalable with
+	  multi-cores CPU. It also features an extremely fast decoder,
+	  with speed in multiple GB/s per core, typically reaching RAM
+	  speed limits on multi-core systems.
+
+	  http://www.lz4.org/
+
+if BR2_PACKAGE_LZ4
+
+config BR2_PACKAGE_LZ4_PROGS
+	bool "install programs"
+	help
+	  lz4, lz4c, unlz4 and lz4cat binaries
+
+endif

package/lz4/lz4.hash

@@ -0,0 +1,4 @@
+# sha256 locally computed
+sha256  030644df4611007ff7dc962d981f390361e6c97a34e5cbc393ddfbe019ffe2c1  lz4-1.9.3.tar.gz
+sha256  d15d99c8dc6b0ec22174c0e563a95bc40f9363ca7f9d9d793bb5c5a8e8d0af71  lib/LICENSE
+sha256  8177f97513213526df2cf6184d8ff986c675afb514d4e68a404010521b880643  programs/COPYING

package/lz4/lz4.mk

@@ -0,0 +1,67 @@
+################################################################################
+#
+# lz4
+#
+################################################################################
+
+LZ4_VERSION = 1.9.3
+LZ4_SITE = $(call github,lz4,lz4,v$(LZ4_VERSION))
+LZ4_INSTALL_STAGING = YES
+LZ4_LICENSE = BSD-2-Clause (library), GPL-2.0+ (programs)
+LZ4_LICENSE_FILES = lib/LICENSE programs/COPYING
+LZ4_CPE_ID_VENDOR = yann_collet
+
+# CVE-2014-4715 is misclassified (by our CVE tracker) as affecting version
+# 1.9.2, while in fact this issue has been fixed since lz4-r130:
+# https://github.com/lz4/lz4/commit/140e6e72ddb6fc5f7cd28ce0c8ec3812ef4a9c08
+# See https://github.com/lz4/lz4/issues/818
+LZ4_IGNORE_CVES += CVE-2014-4715
+
+# 0001-Fix-potential-memory-corruption-with-negative-memmov.patch
+LZ4_IGNORE_CVES += CVE-2021-3520
+
+ifeq ($(BR2_STATIC_LIBS),y)
+LZ4_MAKE_OPTS += BUILD_SHARED=no
+else ifeq ($(BR2_SHARED_LIBS),y)
+LZ4_MAKE_OPTS += BUILD_STATIC=no
+endif
+
+define HOST_LZ4_BUILD_CMDS
+	$(HOST_MAKE_ENV) $(HOST_CONFIGURE_OPTS) $(MAKE) -C $(@D) lib
+	$(HOST_MAKE_ENV) $(HOST_CONFIGURE_OPTS) $(MAKE) -C $(@D) lz4
+endef
+
+define HOST_LZ4_INSTALL_CMDS
+	$(HOST_MAKE_ENV) $(HOST_CONFIGURE_OPTS) $(MAKE) PREFIX=$(HOST_DIR) \
+		install -C $(@D)
+endef
+
+LZ4_DIRS = lib
+
+ifeq ($(BR2_PACKAGE_LZ4_PROGS),y)
+LZ4_DIRS += programs
+endif
+
+define LZ4_BUILD_CMDS
+	$(foreach dir,$(LZ4_DIRS),\
+		$(TARGET_MAKE_ENV) $(TARGET_CONFIGURE_OPTS) $(MAKE) $(LZ4_MAKE_OPTS) \
+			-C $(@D)/$(dir)
+	)
+endef
+
+define LZ4_INSTALL_STAGING_CMDS
+	$(foreach dir,$(LZ4_DIRS),\
+		$(TARGET_MAKE_ENV) $(TARGET_CONFIGURE_OPTS) $(MAKE) DESTDIR=$(STAGING_DIR) \
+			PREFIX=/usr $(LZ4_MAKE_OPTS) -C $(@D)/$(dir) install
+	)
+endef
+
+define LZ4_INSTALL_TARGET_CMDS
+	$(foreach dir,$(LZ4_DIRS),\
+		$(TARGET_MAKE_ENV) $(TARGET_CONFIGURE_OPTS) $(MAKE) DESTDIR=$(TARGET_DIR) \
+			PREFIX=/usr $(LZ4_MAKE_OPTS) -C $(@D)/$(dir) install
+	)
+endef
+
+$(eval $(generic-package))
+$(eval $(host-generic-package))