pkg/27089: firefox-1.0 fails to build on Solaris 2.8 with current pkgsrc

[rquinn%sec.sprint.net@localhost]

>Number:         27089
>Category:       pkg
>Synopsis:       firefox-1.0 fails to build on Solaris 2.8 with current pkgsrc
>Confidential:   no
>Severity:       serious
>Priority:       high
>Responsible:    pkg-manager
>State:          open
>Class:          support
>Submitter-Id:   net
>Arrival-Date:   Thu Sep 30 14:20:01 UTC 2004
>Closed-Date:
>Last-Modified:
>Originator:     Rob Quinn
>Release:        Solaris2.8 with pkgsrc from 30 Sep 2004
>Organization:
>Environment:
SunOS crn-sen 5.8 Generic_108528-19 sun4u sparc SUNW,Netra-T4

>Description:
I need to upgrade firefox due to the recent vulnerability.

  #audit-packages
  Package firefox-0.9.3 has a remote-code-execution vulnerability, see 
http://secunia.com/advisories/12526/

The new version fails to compile in several places, apparently because several 
Makefile variables are not set correctly.  A google search shows others 
complaining about a similar problem on older versions of firefox.

    http://lists.debian.org/debian-italian/2004/03/msg00811.html
    http://lists.debian.org/debian-italian/2004/03/msg00841.html


>How-To-Repeat:
crn-sen:/usr/pkgsrc/www/firefox #bmake
===> Checking for vulnerabilities in firefox-0.10

===> Building for firefox-0.10
/usr/pkg/bin/gmake export
gmake[1]: Entering directory `/usr/obj/pkg/www/firefox/work/mozilla'
rm -f -rf /sdk
/usr/pkg/bin/gmake -C config export
gmake[2]: Entering directory `/usr/obj/pkg/www/firefox/work/mozilla/config'
gmake[3]: Entering directory 
`/usr/obj/pkg/www/firefox/work/mozilla/config/mkdepend'
cppsetup.c
o host_cppsetup.o -c -DINCLUDEDIR=\"/usr/include\" -DOBJSUFFIX=\".\"   
-I/include/mkdepend -I/include   cppsetup.c
gmake[3]: o: Command not found
gmake[3]: [host_cppsetup.o] Error 127 (ignored)
ifparser.c
o host_ifparser.o -c -DINCLUDEDIR=\"/usr/include\" -DOBJSUFFIX=\".\"   
-I/include/mkdepend -I/include   ifparser.c
gmake[3]: o: Command not found
gmake[3]: [host_ifparser.o] Error 127 (ignored)
include.c
o host_include.o -c -DINCLUDEDIR=\"/usr/include\" -DOBJSUFFIX=\".\"   
-I/include/mkdepend -I/include   include.c
gmake[3]: o: Command not found
gmake[3]: [host_include.o] Error 127 (ignored)
main.c
o host_main.o -c -DINCLUDEDIR=\"/usr/include\" -DOBJSUFFIX=\".\"   
-I/include/mkdepend -I/include   main.c
gmake[3]: o: Command not found
gmake[3]: [host_main.o] Error 127 (ignored)
parse.c
o host_parse.o -c -DINCLUDEDIR=\"/usr/include\" -DOBJSUFFIX=\".\"   
-I/include/mkdepend -I/include   parse.c
gmake[3]: o: Command not found
gmake[3]: [host_parse.o] Error 127 (ignored)
pr.c
o host_pr.o -c -DINCLUDEDIR=\"/usr/include\" -DOBJSUFFIX=\".\"   
-I/include/mkdepend -I/include   pr.c
gmake[3]: o: Command not found
gmake[3]: [host_pr.o] Error 127 (ignored)
o mkdepend -DINCLUDEDIR=\"/usr/include\" -DOBJSUFFIX=\".\"  host_cppsetup.o 
host_ifparser.o host_include.o host_main.o host_parse.o host_pr.o  
gmake[3]: o: Command not found
gmake[3]: [mkdepend] Error 127 (ignored)
gmake[3]: Leaving directory 
`/usr/obj/pkg/www/firefox/work/mozilla/config/mkdepend'
I. ./bdate.pl build_number 
gmake[2]: I.: Command not found
gmake[2]: [build_number] Error 127 (ignored)
rm -f nsBuildID.h
I. ./aboutime.pl -m ./milestone.txt nsBuildID.h build_number ./nsBuildID.h.in
gmake[2]: I.: Command not found
gmake[2]: [nsBuildID.h] Error 127 (ignored)
/nsinstall -m 644 nsBuildID.h ../mozilla-config.h /include
gmake[2]: /nsinstall: Command not found
gmake[2]: *** [export] Error 127
gmake[2]: Leaving directory `/usr/obj/pkg/www/firefox/work/mozilla/config'
gmake[1]: *** [export] Error 2
gmake[1]: Leaving directory `/usr/obj/pkg/www/firefox/work/mozilla'
gmake: *** [default] Error 2
*** Error code 2

Stop.
bmake: stopped in /usr/pkgsrc/www/firefox
*** Error code 1

Stop.
bmake: stopped in /usr/pkgsrc/www/firefox

>Fix:
HOST_CC is empty in mozilla/config/rules.mk. If I run "bmake HOST_CC=gcc" I get 
a little further along before something else fails:

crn-sen:/usr/pkgsrc/www/firefox #bmake HOST_CC=gcc
===> Checking for vulnerabilities in firefox-0.10
=> Checksum OK for firefox-1.0PR-source.tar.bz2.
work -> /usr/obj/pkg/www/firefox/work
===> Extracting for firefox-0.10
===> Required installed package freetype2>=2.1.8: freetype2-2.1.9 found
===> Required installed package gdk-pixbuf>=0.22.0nb2: gdk-pixbuf-0.22.0nb2 
found
===> Required installed package png>=1.2.4: png-1.2.6 found
===> Required installed package tiff>=3.6.1: tiff-3.6.1nb2 found
===> Required installed package zlib>=1.2.1: zlib-1.2.1nb2 found
===> Required installed package jpeg>=6b: jpeg-6bnb1 found
===> Required installed package ORBit>=0.5.15nb5: ORBit-0.5.15nb6 found
===> Required installed package tcp_wrappers>=7.6.1nb1: tcp_wrappers-7.6.1nb2 
found
===> Required installed package gtk+>=1.2.10: gtk+-1.2.10nb7 found
===> Required installed package gettext-lib>=0.11.5nb1: gettext-lib-0.11.5nb3 
found
===> Required installed package glib>=1.2.10nb5: glib-1.2.10nb6 found
===> Required installed package gcc3-c>=3.3.4: gcc3-c-3.3.4 found
===> Required installed package gcc3-c++>=3.3.4: gcc3-c++-3.3.4 found
===> Required installed package libiconv>=1.9.1: libiconv-1.9.1nb2 found
===> Required installed package png>=1.2.6rc2: png-1.2.6 found
===> Required installed package zlib>=1.2.1nb2: zlib-1.2.1nb2 found
===> Required installed package gtk+>=1.2.10nb6: gtk+-1.2.10nb7 found
===> Required installed package zip>=2.3: zip-2.3nb2 found
===> Required installed package autoconf213>=2.13: autoconf213-2.13 found
===> Required installed package {perl>=5.0,perl-thread>=5.0}: perl-5.8.4nb1 
found
===> Required installed package gmake>=3.78: gmake-3.80nb3 found
===> Required installed package patch>=2.2: patch-2.5.4nb2 found
===> Required installed package x11-links>=0.23: x11-links-0.23 found
[....clipped rjq....]
creating ldap/libraries/libldif/Makefile
creating ldap/libraries/liblber/Makefile
creating ldap/libraries/libiutil/Makefile
creating ldap/libraries/libssldap/Makefile
===> Building for firefox-0.10
/usr/pkg/bin/gmake export
gmake[1]: Entering directory `/usr/obj/pkg/www/firefox/work/mozilla'
rm -f -rf /sdk
/usr/pkg/bin/gmake -C config export
gmake[2]: Entering directory `/usr/obj/pkg/www/firefox/work/mozilla/config'
gmake[3]: Entering directory 
`/usr/obj/pkg/www/firefox/work/mozilla/config/mkdepend'
cppsetup.c
gcc -o host_cppsetup.o -c -DINCLUDEDIR=\"/usr/include\" -DOBJSUFFIX=\".\"   
-I/include/mkdepend -I/include   cppsetup.c
ifparser.c
gcc -o host_ifparser.o -c -DINCLUDEDIR=\"/usr/include\" -DOBJSUFFIX=\".\"   
-I/include/mkdepend -I/include   ifparser.c
include.c
gcc -o host_include.o -c -DINCLUDEDIR=\"/usr/include\" -DOBJSUFFIX=\".\"   
-I/include/mkdepend -I/include   include.c
main.c
gcc -o host_main.o -c -DINCLUDEDIR=\"/usr/include\" -DOBJSUFFIX=\".\"   
-I/include/mkdepend -I/include   main.c
parse.c
gcc -o host_parse.o -c -DINCLUDEDIR=\"/usr/include\" -DOBJSUFFIX=\".\"   
-I/include/mkdepend -I/include   parse.c
pr.c
gcc -o host_pr.o -c -DINCLUDEDIR=\"/usr/include\" -DOBJSUFFIX=\".\"   
-I/include/mkdepend -I/include   pr.c
gcc -o mkdepend -DINCLUDEDIR=\"/usr/include\" -DOBJSUFFIX=\".\"  
host_cppsetup.o host_ifparser.o host_include.o host_main.o host_parse.o 
host_pr.o  
gmake[3]: Leaving directory 
`/usr/obj/pkg/www/firefox/work/mozilla/config/mkdepend'
rm -f nfspwd
cp nfspwd.pl nfspwd
chmod +x nfspwd
rm -f revdepth
cp revdepth.pl revdepth
chmod +x revdepth
I. ./bdate.pl build_number 
gmake[2]: I.: Command not found
gmake[2]: [build_number] Error 127 (ignored)
rm -f nsBuildID.h
I. ./aboutime.pl -m ./milestone.txt nsBuildID.h build_number ./nsBuildID.h.in
gmake[2]: I.: Command not found
gmake[2]: [nsBuildID.h] Error 127 (ignored)
/nsinstall -m 644 nsBuildID.h ../mozilla-config.h /include
gmake[2]: /nsinstall: Command not found
gmake[2]: *** [export] Error 127
gmake[2]: Leaving directory `/usr/obj/pkg/www/firefox/work/mozilla/config'
gmake[1]: *** [export] Error 2
gmake[1]: Leaving directory `/usr/obj/pkg/www/firefox/work/mozilla'
gmake: *** [default] Error 2
*** Error code 2

Stop.
bmake: stopped in /usr/pkgsrc/www/firefox
*** Error code 1

Stop.
bmake: stopped in /usr/pkgsrc/www/firefox

>Release-Note:
>Audit-Trail:
>Unformatted: