build-remove-calling-untrusted-hooks.patch 4.2 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135
  1. From: Jan Engelhardt <jengelh@inai.de>
  2. Date: Thu, 20 Apr 2017 16:25:49 +0200
  3. Subject: build: remove calling untrusted hooks
  4. Avoid downloading untrusted executables and wasting time with a
  5. sysroot.
  6. ---
  7. DEPS | 84 +++---------------------------------------------------------
  8. 1 file changed, 3 insertions(+), 81 deletions(-)
  9. diff --git a/DEPS b/DEPS
  10. --- a/DEPS
  11. +++ b/DEPS
  12. @@ -94,7 +94,7 @@ vars = {
  13. # Check out and download nacl by default. This can be disabled e.g. with
  14. # custom_vars.
  15. - 'checkout_nacl': True,
  16. + 'checkout_nacl': False,
  17. # By default, do not check out src-internal. This can be overridden e.g. with
  18. # custom_vars.
  19. @@ -125,8 +125,8 @@ vars = {
  20. # support for other platforms may be added in the future.
  21. 'checkout_openxr' : 'checkout_win',
  22. - 'checkout_traffic_annotation_tools': 'checkout_configuration != "small"',
  23. - 'checkout_instrumented_libraries': 'checkout_linux and checkout_configuration != "small"',
  24. + 'checkout_traffic_annotation_tools': False,
  25. + 'checkout_instrumented_libraries': False,
  26. # By default bot checkouts the WPR archive files only when this
  27. # flag is set True.
  28. @@ -3584,49 +3584,6 @@ hooks = [
  29. 'sync', '--extract',
  30. ],
  31. },
  32. - {
  33. - 'name': 'sysroot_arm',
  34. - 'pattern': '.',
  35. - 'condition': 'checkout_linux and checkout_arm',
  36. - 'action': ['python', 'src/build/linux/sysroot_scripts/install-sysroot.py',
  37. - '--arch=arm'],
  38. - },
  39. - {
  40. - 'name': 'sysroot_arm64',
  41. - 'pattern': '.',
  42. - 'condition': 'checkout_linux and checkout_arm64',
  43. - 'action': ['python', 'src/build/linux/sysroot_scripts/install-sysroot.py',
  44. - '--arch=arm64'],
  45. - },
  46. - {
  47. - 'name': 'sysroot_x86',
  48. - 'pattern': '.',
  49. - 'condition': 'checkout_linux and (checkout_x86 or checkout_x64)',
  50. - 'action': ['python', 'src/build/linux/sysroot_scripts/install-sysroot.py',
  51. - '--arch=x86'],
  52. - },
  53. - {
  54. - 'name': 'sysroot_mips',
  55. - 'pattern': '.',
  56. - 'condition': 'checkout_linux and checkout_mips',
  57. - 'action': ['python', 'src/build/linux/sysroot_scripts/install-sysroot.py',
  58. - '--arch=mips'],
  59. - },
  60. - {
  61. - 'name': 'sysroot_mips64',
  62. - 'pattern': '.',
  63. - 'condition': 'checkout_linux and checkout_mips64',
  64. - 'action': ['python', 'src/build/linux/sysroot_scripts/install-sysroot.py',
  65. - '--arch=mips64el'],
  66. - },
  67. -
  68. - {
  69. - 'name': 'sysroot_x64',
  70. - 'pattern': '.',
  71. - 'condition': 'checkout_linux and checkout_x64',
  72. - 'action': ['python', 'src/build/linux/sysroot_scripts/install-sysroot.py',
  73. - '--arch=x64'],
  74. - },
  75. {
  76. # Case-insensitivity for the Win SDK. Must run before win_toolchain below.
  77. 'name': 'ciopfs_linux',
  78. @@ -3757,18 +3714,6 @@ hooks = [
  79. '-s', 'src/buildtools/mac/clang-format.sha1',
  80. ],
  81. },
  82. - {
  83. - 'name': 'clang_format_linux',
  84. - 'pattern': '.',
  85. - 'condition': 'host_os == "linux"',
  86. - 'action': [ 'python',
  87. - 'src/third_party/depot_tools/download_from_google_storage.py',
  88. - '--no_resume',
  89. - '--no_auth',
  90. - '--bucket', 'chromium-clang-format',
  91. - '-s', 'src/buildtools/linux64/clang-format.sha1',
  92. - ],
  93. - },
  94. # Pull rc binaries using checked-in hashes.
  95. {
  96. 'name': 'rc_win',
  97. @@ -3794,29 +3739,6 @@ hooks = [
  98. '-s', 'src/build/toolchain/win/rc/mac/rc.sha1',
  99. ],
  100. },
  101. - {
  102. - 'name': 'rc_linux',
  103. - 'pattern': '.',
  104. - 'condition': 'checkout_win and host_os == "linux"',
  105. - 'action': [ 'python',
  106. - 'src/third_party/depot_tools/download_from_google_storage.py',
  107. - '--no_resume',
  108. - '--no_auth',
  109. - '--bucket', 'chromium-browser-clang/rc',
  110. - '-s', 'src/build/toolchain/win/rc/linux64/rc.sha1',
  111. - ]
  112. - },
  113. - {
  114. - 'name': 'test_fonts',
  115. - 'pattern': '.',
  116. - 'action': [ 'download_from_google_storage',
  117. - '--no_resume',
  118. - '--extract',
  119. - '--no_auth',
  120. - '--bucket', 'chromium-fonts',
  121. - '-s', 'src/third_party/test_fonts/test_fonts.tar.gz.sha1',
  122. - ],
  123. - },
  124. # Download test resources for opus, i.e. audio files.
  125. {
  126. 'name': 'opus_test_files',
  127. --
  128. 2.17.1