logo

overlay

My own overlay for experimentations, use with caution, no support is provided git clone https://anongit.hacktivis.me/git/overlay.git/
commit: 8d74e5e58fdf94c23a7dfdabbede7a51d94574cf
parent 994e42f1e3853921fd05bf802390b559d7e3ba7d
Author: Haelwenn (lanodan) Monnier <contact@hacktivis.me>
Date:   Sun, 31 Aug 2025 06:39:59 +0200

net-libs/webkit-gtk: add 2.48.4

Known security issues but 2.48.5 does not work, seems to have
some kind of thing looking like harderning where some branches
of WTF::StringImpl::adopt at StringImpl.cpp:1546 lead to an ud2
instruction right after retq.

Note: As far as I can tell, CET isn't enabled by Gentoo.

Diffstat:

Mnet-libs/webkit-gtk/Manifest1+
Anet-libs/webkit-gtk/webkit-gtk-2.48.4-r410.ebuild259+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Anet-libs/webkit-gtk/webkit-gtk-2.48.4-r600.ebuild260+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
3 files changed, 520 insertions(+), 0 deletions(-)

diff --git a/net-libs/webkit-gtk/Manifest b/net-libs/webkit-gtk/Manifest @@ -1 +1,2 @@ +DIST webkitgtk-2.48.4.tar.xz 42745624 BLAKE2B e9efacdc4f2fc1de6e1070d9abb3683467cd7c2f2eee14e91973a579e7e3f19ae535fe9169d195cd23d60bb0c3c754432a0765add089c55d9206412551142bec SHA512 ddbc6b6b00397d88ecbc10e57b6257d8602c9d149b61618b833181894bdd946d96de7f7887f857edd99ea76501953c7c40cf62e6de9ce0c80565f1445e281bd0 DIST webkitgtk-2.48.5.tar.xz 44131936 BLAKE2B aa8ea4b5296a95f8b18f2dec9597f70eba46e739e3cc21dccd97af4ba07c7fcfa50dffe963bcffcd178b99c111d38dc55fb194a87451fa8efa9944249f538aba SHA512 70ee8f58a354cf6d0b1345954ed07c1e49d886f353d4fab945a3d2fc03116726af05454d4b5460f0fe4f5c3d042bb921fc5b43a85474624545afd9acc1c0fc8d diff --git a/net-libs/webkit-gtk/webkit-gtk-2.48.4-r410.ebuild b/net-libs/webkit-gtk/webkit-gtk-2.48.4-r410.ebuild @@ -0,0 +1,259 @@ +# Copyright 1999-2023 Gentoo Authors +# Distributed under the terms of the GNU General Public License v2 + +EAPI=8 +CMAKE_MAKEFILE_GENERATOR="ninja" +PYTHON_REQ_USE="xml(+)" +PYTHON_COMPAT=( python3_{10..12} ) +USE_RUBY="ruby30 ruby31 ruby32 ruby33" + +inherit check-reqs flag-o-matic gnome2 optfeature python-any-r1 ruby-single toolchain-funcs cmake + +MY_P="webkitgtk-${PV}" +DESCRIPTION="Open source web browser engine" +HOMEPAGE="https://www.webkitgtk.org" +SRC_URI="https://www.webkitgtk.org/releases/${MY_P}.tar.xz" + +# Apache-2.0 for fast_float, ANGLE (also pdfjs but disabled) +# See https://bugs.webkit.org/show_bug.cgi?id=254717 +LICENSE="LGPL-2+ BSD Apache-2.0" +SLOT="4.1/0" # soname version of libwebkit2gtk-4.1 +KEYWORDS="~amd64 ~arm64" + +IUSE="aqua +avif dbus doc examples gamepad keyring +gstreamer +introspection pdf jpegxl +jumbo-build lcms +seccomp +skia +speech spell sysprof systemd wayland webrtc +X" + +REQUIRED_USE=" + doc? ( introspection ) + webrtc? ( gstreamer ) + || ( aqua wayland X ) +" + +# Tests are currently unsupported in release tarballs +# https://bugs.webkit.org/show_bug.cgi?id=215986 +# Tools/Scripts/run-gtk-tests: Command not found +RESTRICT="test" + +# Dependencies found at Source/cmake/OptionsGTK.cmake +RDEPEND=" + >=x11-libs/cairo-1.16.0:=[X?] + >=media-libs/fontconfig-2.13.0:1.0 + >=media-libs/freetype-2.9.0:2 + >=dev-libs/libgcrypt-1.7.0:0= + >=x11-libs/gtk+-3.22.0:3[aqua?,introspection?,wayland?,X?] + >=media-libs/harfbuzz-1.4.2:=[icu(+)] + >=dev-libs/icu-61.2:= + media-libs/libjpeg-turbo:0= + >=media-libs/libepoxy-1.4.0 + >=net-libs/libsoup-2.99.9:3.0[introspection?] + >=dev-libs/libxml2-2.8.0:2 + >=media-libs/libpng-1.4:0= + dev-db/sqlite:3= + sys-libs/zlib:0 + >=dev-libs/atk-2.16.0[introspection?] + media-libs/libwebp:= + + >=dev-libs/glib-2.70.0:2 + >=dev-libs/libxslt-1.1.7 + media-libs/woff2 + keyring? ( app-crypt/libsecret ) + introspection? ( >=dev-libs/gobject-introspection-1.59.1:= ) + dev-libs/libtasn1:= + speech? ( app-accessibility/flite ) + spell? ( >=app-text/enchant-0.22:2 ) + gstreamer? ( + >=media-libs/gstreamer-1.20:1.0 + >=media-libs/gst-plugins-base-1.20:1.0[egl,X?] + media-libs/gst-plugins-base:1.0[opengl] + >=media-plugins/gst-plugins-opus-1.20:1.0 + >=media-libs/gst-plugins-bad-1.20:1.0[X?] + ) + webrtc? ( + media-plugins/gst-plugins-webrtc:1.0 + >=dev-libs/openssl-3:= + ) + + X? ( + x11-libs/libX11 + x11-libs/libXcomposite + x11-libs/libXdamage + x11-libs/libXrender + x11-libs/libXt + ) + + dev-libs/hyphen + jpegxl? ( media-libs/libjxl ) + avif? ( >=media-libs/libavif-0.9.0:= ) + lcms? ( media-libs/lcms:2 ) + + media-libs/mesa + media-libs/libglvnd + wayland? ( + >=dev-libs/wayland-1.15 + >=dev-libs/wayland-protocols-1.15 + ) + seccomp? ( + >=sys-apps/bubblewrap-0.3.1 + sys-libs/libseccomp + sys-apps/xdg-dbus-proxy + ) + sysprof? ( dev-util/sysprof-capture:4 ) + systemd? ( sys-apps/systemd:= ) + gamepad? ( >=dev-libs/libmanette-0.2.4 ) +" + +DEPEND="${RDEPEND}" + +# Need real bison, not yacc +BDEPEND=" + ${PYTHON_DEPS} + ${RUBY_DEPS} + dev-util/glib-utils + >=dev-util/gperf-3.0.1 + dev-util/unifdef + >=sys-devel/bison-2.4.3 + || ( >=sys-devel/gcc-7.3 >=llvm-core/clang-5 ) + sys-devel/gettext + virtual/pkgconfig + + >=dev-lang/perl-5.10 + virtual/perl-Data-Dumper + virtual/perl-Carp + virtual/perl-JSON-PP + + dbus? ( dev-util/gdbus-codegen ) + doc? ( dev-util/gi-docgen ) +" + +S="${WORKDIR}/${MY_P}" + +CHECKREQS_DISK_BUILD="18G" # and even this might not be enough, bug #417307 + +pkg_pretend() { + if [[ ${MERGE_TYPE} != "binary" ]] ; then + if is-flagq "-g*" && ! is-flagq "-g*0" ; then + einfo "Checking for sufficient disk space to build ${PN} with debugging CFLAGS" + check-reqs_pkg_pretend + fi + + if ! test-flag-CXX -std=c++17 ; then + die "You need at least GCC 7.3.x or Clang >= 5 for C++17-specific compiler flags" + fi + fi +} + +pkg_setup() { + if [[ ${MERGE_TYPE} != "binary" ]] && is-flagq "-g*" && ! is-flagq "-g*0" ; then + check-reqs_pkg_setup + fi + + python-any-r1_pkg_setup +} + +src_prepare() { + cmake_src_prepare + gnome2_src_prepare +} + +src_configure() { + # Respect CC, otherwise fails on prefix #395875 + tc-export CC + + # WebkitGTK doesn't likes -D_FORTIFY_SOURCE=2 + #strip-flags + #filter-flags "-D_FORTIFY_SOURCE=*" + + # https://bugs.webkit.org/show_bug.cgi?id=278883 + filter-flags '-ftrapv' + + # It does not compile on alpha without this in LDFLAGS + # https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=648761 + use alpha && append-ldflags "-Wl,--no-relax" + + # Sigbuses on SPARC with mcpu and co., bug #??? + use sparc && filter-flags "-mvis" + + # https://bugs.webkit.org/show_bug.cgi?id=42070 , #301634 + use ppc64 && append-flags "-mminimal-toc" + + # Try to use less memory, bug #469942 (see Fedora .spec for reference) + append-ldflags $(test-flags-CCLD "-Wl,--no-keep-memory") + + # Ruby situation is a bit complicated. See bug 513888 + local rubyimpl + local ruby_interpreter="" + local RUBY + for rubyimpl in ${USE_RUBY}; do + if has_version -b "virtual/rubygems[ruby_targets_${rubyimpl}(-)]"; then + RUBY="$(type -P ${rubyimpl})" + ruby_interpreter="-DRUBY_EXECUTABLE=${RUBY}" + fi + done + # This will rarely occur. Only a couple of corner cases could lead us to + # that failure. See bug 513888 + [[ -z ${ruby_interpreter} ]] && die "No suitable ruby interpreter found" + # JavaScriptCore/Scripts/postprocess-asm invokes another Ruby script directly + # so it doesn't respect RUBY_EXECUTABLE, bug #771744. + sed -i -e "s:#!/usr/bin/env ruby:#!${RUBY}:" $(grep -rl "/usr/bin/env ruby" Source/JavaScriptCore || die) || die + + # TODO: Check Web Audio support + # should somehow let user select between them? + + local mycmakeargs=( + ${ruby_interpreter} + # If bubblewrap[suid] then portage makes it go-r and cmake find_program fails with that + -DBWRAP_EXECUTABLE:FILEPATH="${EPREFIX}"/usr/bin/bwrap + -DDBUS_PROXY_EXECUTABLE:FILEPATH="${EPREFIX}"/usr/bin/xdg-dbus-proxy + -DPORT=GTK + -DUSE_SKIA=$(usex skia) + + # Source/cmake/WebKitFeatures.cmake + -DENABLE_API_TESTS=OFF + -DENABLE_BUBBLEWRAP_SANDBOX=$(usex seccomp) + -DENABLE_GAMEPAD=$(usex gamepad) + -DENABLE_GEOLOCATION=$(usex dbus) # Runtime optional (talks over dbus service) + -DENABLE_MINIBROWSER=$(usex examples) + -DENABLE_PDFJS=$(usex pdf) + -DSHOULD_INSTALL_JS_SHELL=$(usex examples) + -DENABLE_SPELLCHECK=$(usex spell) + -DENABLE_UNIFIED_BUILDS=$(usex jumbo-build) + -DENABLE_VIDEO=$(usex gstreamer) + -DENABLE_WEBGL=ON + -DENABLE_WEB_AUDIO=$(usex gstreamer) + -DENABLE_WEBDRIVER=OFF + + # Source/cmake/OptionsGTK.cmake + -DUSE_LIBBACKTRACE=OFF + -DENABLE_DOCUMENTATION=$(usex doc) + -DENABLE_INTROSPECTION=$(usex introspection) + -DENABLE_JOURNALD_LOG=$(usex systemd) + -DENABLE_QUARTZ_TARGET=$(usex aqua) + -DENABLE_WAYLAND_TARGET=$(usex wayland) + -DENABLE_WEB_RTC=$(usex webrtc) + -DENABLE_MEDIA_STREAM=$(usex webrtc) + -DENABLE_X11_TARGET=$(usex X) + -DUSE_GBM=ON + #-DUSE_ANGLE_WEBGL=OFF + -DUSE_AVIF=$(usex avif) + -DUSE_GTK4=OFF + -DUSE_JPEGXL=$(usex jpegxl) + -DUSE_LCMS=$(usex lcms) + -DUSE_LIBHYPHEN=ON + -DUSE_LIBSECRET=$(usex keyring) + -DUSE_SOUP2=OFF + -DUSE_WOFF2=ON + -DUSE_SYSTEM_SYSPROF_CAPTURE=$(usex sysprof) + -DENABLE_SPEECH_SYNTHESIS=$(usex speech) + ) + + # https://bugs.gentoo.org/761238 + append-cppflags -DNDEBUG + + WK_USE_CCACHE=NO cmake_src_configure +} + +pkg_postinst() { + use dbus && optfeature "geolocation service (used at runtime if available)" "app-misc/geoclue" + optfeature "Common Multimedia codecs" "media-plugins/gst-plugins-meta" + optfeature "(MPEG-)DASH support" "media-plugins/gst-plugins-dash" + optfeature "HTTP-Live-Streaming support" "media-plugins/gst-plugins-hls" +} diff --git a/net-libs/webkit-gtk/webkit-gtk-2.48.4-r600.ebuild b/net-libs/webkit-gtk/webkit-gtk-2.48.4-r600.ebuild @@ -0,0 +1,260 @@ +# Copyright 1999-2024 Gentoo Authors +# Distributed under the terms of the GNU General Public License v2 + +EAPI=8 +CMAKE_MAKEFILE_GENERATOR="ninja" +PYTHON_REQ_USE="xml(+)" +PYTHON_COMPAT=( python3_{10..12} ) +USE_RUBY="ruby30 ruby31 ruby32 ruby33" + +inherit check-reqs flag-o-matic gnome2 optfeature python-any-r1 ruby-single toolchain-funcs cmake + +MY_P="webkitgtk-${PV}" +DESCRIPTION="Open source web browser engine" +HOMEPAGE="https://www.webkitgtk.org" +SRC_URI="https://www.webkitgtk.org/releases/${MY_P}.tar.xz" + +# Apache-2.0 for fast_float, ANGLE (also pdfjs but disabled) +# See https://bugs.webkit.org/show_bug.cgi?id=254717 +LICENSE="LGPL-2+ BSD Apache-2.0" +SLOT="6/0" # soname version of libwebkit2gtk-6.0 +KEYWORDS="~amd64 ~arm64" + +IUSE="aqua +avif dbus doc examples gamepad keyring +gstreamer +introspection pdf jpegxl +jumbo-build lcms +seccomp +skia +speech spell sysprof systemd wayland webrtc +X" + +REQUIRED_USE=" + doc? ( introspection ) + webrtc? ( gstreamer ) + || ( aqua wayland X ) +" + +# Dependencies found at Source/cmake/OptionsGTK.cmake +RDEPEND=" + >=x11-libs/cairo-1.16.0:=[X?] + >=media-libs/fontconfig-2.13.0:1.0 + >=media-libs/freetype-2.9.0:2 + >=dev-libs/libgcrypt-1.7.0:0= + >=gui-libs/gtk-4.4.0:4[introspection?] + >=media-libs/harfbuzz-1.4.2:=[icu(+)] + >=dev-libs/icu-61.2:= + media-libs/libjpeg-turbo:0= + >=media-libs/libepoxy-1.4.0 + >=net-libs/libsoup-2.99.9:3.0[introspection?] + >=dev-libs/libxml2-2.8.0:2 + >=media-libs/libpng-1.4:0= + dev-db/sqlite:3= + sys-libs/zlib:0 + >=dev-libs/atk-2.16.0[introspection?] + media-libs/libwebp:= + + >=dev-libs/glib-2.70.0:2 + >=dev-libs/libxslt-1.1.7 + media-libs/woff2 + keyring? ( app-crypt/libsecret ) + introspection? ( >=dev-libs/gobject-introspection-1.59.1:= ) + dev-libs/libtasn1:= + speech? ( app-accessibility/flite ) + spell? ( >=app-text/enchant-0.22:2 ) + gstreamer? ( + >=media-libs/gstreamer-1.20:1.0 + >=media-libs/gst-plugins-base-1.20:1.0[egl,X?] + media-libs/gst-plugins-base:1.0[opengl] + >=media-plugins/gst-plugins-opus-1.20:1.0 + >=media-libs/gst-plugins-bad-1.20:1.0[X?] + ) + webrtc? ( + media-plugins/gst-plugins-webrtc:1.0 + >=dev-libs/openssl-3:= + ) + + X? ( + x11-libs/libX11 + x11-libs/libXcomposite + x11-libs/libXdamage + x11-libs/libXrender + x11-libs/libXt + ) + + dev-libs/hyphen + jpegxl? ( media-libs/libjxl ) + avif? ( >=media-libs/libavif-0.9.0:= ) + lcms? ( media-libs/lcms:2 ) + + media-libs/mesa + media-libs/libglvnd + wayland? ( + >=dev-libs/wayland-1.15 + >=dev-libs/wayland-protocols-1.15 + ) + seccomp? ( + >=sys-apps/bubblewrap-0.3.1 + sys-libs/libseccomp + sys-apps/xdg-dbus-proxy + ) + speech? ( app-accessibility/flite ) + sysprof? ( dev-util/sysprof-capture:4 ) + systemd? ( sys-apps/systemd:= ) + gamepad? ( >=dev-libs/libmanette-0.2.4 ) +" + +DEPEND="${RDEPEND}" + +# Need real bison, not yacc +BDEPEND=" + ${PYTHON_DEPS} + ${RUBY_DEPS} + dev-util/glib-utils + >=dev-util/gperf-3.0.1 + dev-util/unifdef + >=sys-devel/bison-2.4.3 + || ( >=sys-devel/gcc-7.3 >=llvm-core/clang-5 ) + sys-devel/gettext + virtual/pkgconfig + + >=dev-lang/perl-5.10 + virtual/perl-Data-Dumper + virtual/perl-Carp + virtual/perl-JSON-PP + + dbus? ( dev-util/gdbus-codegen ) + doc? ( dev-util/gi-docgen ) +" + +S="${WORKDIR}/${MY_P}" + +CHECKREQS_DISK_BUILD="18G" # and even this might not be enough, bug #417307 + +pkg_pretend() { + if [[ ${MERGE_TYPE} != "binary" ]] ; then + if is-flagq "-g*" && ! is-flagq "-g*0" ; then + einfo "Checking for sufficient disk space to build ${PN} with debugging CFLAGS" + check-reqs_pkg_pretend + fi + + if ! test-flag-CXX -std=c++17 ; then + die "You need at least GCC 7.3.x or Clang >= 5 for C++17-specific compiler flags" + fi + fi +} + +pkg_setup() { + if [[ ${MERGE_TYPE} != "binary" ]] && is-flagq "-g*" && ! is-flagq "-g*0" ; then + check-reqs_pkg_setup + fi + + python-any-r1_pkg_setup +} + +src_prepare() { + cmake_src_prepare + gnome2_src_prepare +} + +src_configure() { + # Respect CC, otherwise fails on prefix #395875 + tc-export CC + + # WebkitGTK doesn't likes -D_FORTIFY_SOURCE=2 + #strip-flags + #filter-flags "-D_FORTIFY_SOURCE=*" + + # https://bugs.webkit.org/show_bug.cgi?id=278883 + filter-flags '-ftrapv' + + # It does not compile on alpha without this in LDFLAGS + # https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=648761 + use alpha && append-ldflags "-Wl,--no-relax" + + # Sigbuses on SPARC with mcpu and co., bug #??? + use sparc && filter-flags "-mvis" + + # https://bugs.webkit.org/show_bug.cgi?id=42070 , #301634 + use ppc64 && append-flags "-mminimal-toc" + + # Try to use less memory, bug #469942 (see Fedora .spec for reference) + append-ldflags $(test-flags-CCLD "-Wl,--no-keep-memory") + + # Ruby situation is a bit complicated. See bug 513888 + local rubyimpl + local ruby_interpreter="" + local RUBY + for rubyimpl in ${USE_RUBY}; do + if has_version -b "virtual/rubygems[ruby_targets_${rubyimpl}(-)]"; then + RUBY="$(type -P ${rubyimpl})" + ruby_interpreter="-DRUBY_EXECUTABLE=${RUBY}" + fi + done + # This will rarely occur. Only a couple of corner cases could lead us to + # that failure. See bug 513888 + [[ -z ${ruby_interpreter} ]] && die "No suitable ruby interpreter found" + # JavaScriptCore/Scripts/postprocess-asm invokes another Ruby script directly + # so it doesn't respect RUBY_EXECUTABLE, bug #771744. + sed -i -e "s:#!/usr/bin/env ruby:#!${RUBY}:" $(grep -rl "/usr/bin/env ruby" Source/JavaScriptCore || die) || die + + # TODO: Check Web Audio support + # should somehow let user select between them? + + local mycmakeargs=( + ${ruby_interpreter} + # If bubblewrap[suid] then portage makes it go-r and cmake find_program fails with that + -DBWRAP_EXECUTABLE:FILEPATH="${EPREFIX}"/usr/bin/bwrap + -DDBUS_PROXY_EXECUTABLE:FILEPATH="${EPREFIX}"/usr/bin/xdg-dbus-proxy + -DPORT=GTK + -DUSE_SKIA=$(usex skia) + + # Source/cmake/WebKitFeatures.cmake + -DENABLE_API_TESTS=OFF + -DENABLE_BUBBLEWRAP_SANDBOX=$(usex seccomp) + -DENABLE_GAMEPAD=$(usex gamepad) + -DENABLE_GEOLOCATION=$(usex dbus) # Runtime optional (talks over dbus service) + -DENABLE_MINIBROWSER=$(usex examples) + -DENABLE_PDFJS=$(usex pdf) + -DSHOULD_INSTALL_JS_SHELL=$(usex examples) + -DENABLE_SPELLCHECK=$(usex spell) + -DENABLE_SPEECH_SYNTHESIS=$(usex speech) + -DENABLE_UNIFIED_BUILDS=$(usex jumbo-build) + -DENABLE_VIDEO=$(usex gstreamer) + -DENABLE_WEBGL=ON + -DENABLE_WEB_AUDIO=$(usex gstreamer) + -DENABLE_WEBDRIVER=OFF + + # Source/cmake/OptionsGTK.cmake + -DUSE_LIBBACKTRACE=OFF + -DENABLE_DOCUMENTATION=$(usex doc) + -DENABLE_INTROSPECTION=$(usex introspection) + -DENABLE_JOURNALD_LOG=$(usex systemd) + -DENABLE_QUARTZ_TARGET=$(usex aqua) + -DENABLE_WAYLAND_TARGET=$(usex wayland) + -DENABLE_WEB_RTC=$(usex webrtc) + -DENABLE_MEDIA_STREAM=$(usex webrtc) + -DENABLE_X11_TARGET=$(usex X) + -DUSE_GBM=ON + #-DUSE_ANGLE_WEBGL=OFF + -DUSE_AVIF=$(usex avif) + -DUSE_GTK4=ON + -DUSE_JPEGXL=$(usex jpegxl) + -DUSE_LCMS=$(usex lcms) + -DUSE_LIBHYPHEN=ON + -DUSE_LIBSECRET=$(usex keyring) + -DUSE_SOUP2=OFF + -DUSE_WOFF2=ON + -DUSE_SYSTEM_SYSPROF_CAPTURE=$(usex sysprof) + -DENABLE_SPEECH_SYNTHESIS=$(usex speech) + ) + + # https://bugs.gentoo.org/761238 + append-cppflags -DNDEBUG + + WK_USE_CCACHE=NO cmake_src_configure +} + +src_test() { + eninja -C "${BUILD_DIR?}" check +} + +pkg_postinst() { + use dbus && optfeature "geolocation service (used at runtime if available)" "app-misc/geoclue" + optfeature "Common Multimedia codecs" "media-plugins/gst-plugins-meta" + optfeature "(MPEG-)DASH support" "media-plugins/gst-plugins-dash" + optfeature "HTTP-Live-Streaming support" "media-plugins/gst-plugins-hls" +}