blob: 94375743e45e3a76cf2d789331bc0de25c437ac0 [file] [log] [blame]
Lorenz Brun17c4c8b2022-02-01 12:59:47 +01001load("@bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")
2
3def linux_firmware_external(name, version):
4 sums = {
5 "20211216": "c0f735dd232c22d41ce4d23a050a8d6efe3b6b8cbf9d0a636af5f9df66a619a3",
Lorenz Brun48f92e12023-03-27 17:50:26 +02006 "20230310": "14c472af10f9b566c4f575aeb30d8a274d54b1660007e7426b7e4ea21dff81aa",
Lorenz Bruneb79bfa2023-08-09 21:09:08 +02007 # 2023-07-25 master for Zenbleed (CVE-2023-20593)
Lorenz Brun78a538d2023-07-25 21:39:04 +02008 "b6ea35ff6b9869470a0c68813f1668acb3d356a8": "67e58b74fb0eebb17fdf95c58a24c6244f93bb0ae8e880f1814ad80463f3a935",
Lorenz Bruneb79bfa2023-08-09 21:09:08 +02009 # 2023-08-09 master for Inception (CVE-2023-20569) and
10 # Phantom (CVE-2022-23825)
11 "f2eb058afc57348cde66852272d6bf11da1eef8f": "fcd570b8b259049dd84a0326f17a313271962f806ca32dbd9e40cdd9079857d0",
Lorenz Brun17c4c8b2022-02-01 12:59:47 +010012 }
Lorenz Brun80deba52022-02-24 17:07:13 +010013 all_content = """
14filegroup(name = "all_files", srcs = glob(["**"]), visibility = ["//visibility:public"])
Lorenz Brund3ce0ac2022-03-03 12:51:21 +010015filegroup(name = "metadata", srcs = ["WHENCE"], visibility = ["//visibility:public"])
Lorenz Brun80deba52022-02-24 17:07:13 +010016filegroup(name = "amd_ucode", srcs = glob(["amd-ucode/*.bin"]), visibility = ["//visibility:public"])
17 """
Lorenz Brun17c4c8b2022-02-01 12:59:47 +010018
19 http_archive(
20 name = name,
21 build_file_content = all_content,
22 sha256 = sums[version],
23 strip_prefix = "linux-firmware-" + version,
24 urls = ["https://git.kernel.org/pub/scm/linux/kernel/git/firmware/linux-firmware.git/snapshot/linux-firmware-%s.tar.gz" % version],
25 )