Skip to content

Comments

Fix default installation paths on mingw [1.1.0]#9460

Closed
levitte wants to merge 1 commit intoopenssl:OpenSSL_1_1_0-stablefrom
levitte:fix-insecure-default-paths-110
Closed

Fix default installation paths on mingw [1.1.0]#9460
levitte wants to merge 1 commit intoopenssl:OpenSSL_1_1_0-stablefrom
levitte:fix-insecure-default-paths-110

Conversation

@levitte
Copy link
Member

@levitte levitte commented Jul 25, 2019

[This is a port of #9400 to 1.1.0]

Mingw config targets assumed that resulting programs and libraries are
installed in a Unix-like environment and the default installation
prefix was therefore set to '/usr/local'.

However, mingw programs are installed in a Windows environment, and
the installation directories should therefore have Windows defaults,
i.e. the same kind of defaults as the VC config targets.

A difficulty is, however, that a "cross compiled" build can't figure
out the system defaults from environment the same way it's done when
building "natively", so we have to fall back to hard coded defaults in
that case.

Tests can still be performed when cross compiled on a non-Windows
platform, since all tests only depend on the source and build
directory, and otherwise relies on normal local paths.

CVE-2019-1552

Mingw config targets assumed that resulting programs and libraries are
installed in a Unix-like environment and the default installation
prefix was therefore set to '/usr/local'.

However, mingw programs are installed in a Windows environment, and
the installation directories should therefore have Windows defaults,
i.e. the same kind of defaults as the VC config targets.

A difficulty is, however, that a "cross compiled" build can't figure
out the system defaults from environment the same way it's done when
building "natively", so we have to fall back to hard coded defaults in
that case.

Tests can still be performed when cross compiled on a non-Windows
platform, since all tests only depend on the source and build
directory, and otherwise relies on normal local paths.

CVE-2019-1552
@mattcaswell mattcaswell added the approval: done This pull request has the required number of approvals label Jul 25, 2019
levitte added a commit that referenced this pull request Jul 25, 2019
Mingw config targets assumed that resulting programs and libraries are
installed in a Unix-like environment and the default installation
prefix was therefore set to '/usr/local'.

However, mingw programs are installed in a Windows environment, and
the installation directories should therefore have Windows defaults,
i.e. the same kind of defaults as the VC config targets.

A difficulty is, however, that a "cross compiled" build can't figure
out the system defaults from environment the same way it's done when
building "natively", so we have to fall back to hard coded defaults in
that case.

Tests can still be performed when cross compiled on a non-Windows
platform, since all tests only depend on the source and build
directory, and otherwise relies on normal local paths.

CVE-2019-1552

Reviewed-by: Matt Caswell <[email protected]>
(Merged from #9460)
@levitte
Copy link
Member Author

levitte commented Jul 25, 2019

Merged.

e32bc85 Fix default installation paths on mingw

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

approval: done This pull request has the required number of approvals

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants