Lorenz Brun | 17c4c8b | 2022-02-01 12:59:47 +0100 | [diff] [blame] | 1 | load("@bazel_tools//tools/build_defs/repo:http.bzl", "http_archive") |
| 2 | |
| 3 | def linux_firmware_external(name, version): |
| 4 | sums = { |
| 5 | "20211216": "c0f735dd232c22d41ce4d23a050a8d6efe3b6b8cbf9d0a636af5f9df66a619a3", |
Lorenz Brun | 48f92e1 | 2023-03-27 17:50:26 +0200 | [diff] [blame] | 6 | "20230310": "14c472af10f9b566c4f575aeb30d8a274d54b1660007e7426b7e4ea21dff81aa", |
Lorenz Brun | eb79bfa | 2023-08-09 21:09:08 +0200 | [diff] [blame] | 7 | # 2023-07-25 master for Zenbleed (CVE-2023-20593) |
Lorenz Brun | 78a538d | 2023-07-25 21:39:04 +0200 | [diff] [blame] | 8 | "b6ea35ff6b9869470a0c68813f1668acb3d356a8": "67e58b74fb0eebb17fdf95c58a24c6244f93bb0ae8e880f1814ad80463f3a935", |
Lorenz Brun | eb79bfa | 2023-08-09 21:09:08 +0200 | [diff] [blame] | 9 | # 2023-08-09 master for Inception (CVE-2023-20569) and |
| 10 | # Phantom (CVE-2022-23825) |
| 11 | "f2eb058afc57348cde66852272d6bf11da1eef8f": "fcd570b8b259049dd84a0326f17a313271962f806ca32dbd9e40cdd9079857d0", |
Lorenz Brun | 0f43359 | 2023-10-09 22:11:58 +0200 | [diff] [blame] | 12 | "20230919": "1dac602218f83f2c81dd72e599ae6c926901b3d36babccce46cd84293a37e473", |
Lorenz Brun | 17c4c8b | 2022-02-01 12:59:47 +0100 | [diff] [blame] | 13 | } |
Lorenz Brun | 80deba5 | 2022-02-24 17:07:13 +0100 | [diff] [blame] | 14 | all_content = """ |
| 15 | filegroup(name = "all_files", srcs = glob(["**"]), visibility = ["//visibility:public"]) |
Lorenz Brun | d3ce0ac | 2022-03-03 12:51:21 +0100 | [diff] [blame] | 16 | filegroup(name = "metadata", srcs = ["WHENCE"], visibility = ["//visibility:public"]) |
Lorenz Brun | 80deba5 | 2022-02-24 17:07:13 +0100 | [diff] [blame] | 17 | filegroup(name = "amd_ucode", srcs = glob(["amd-ucode/*.bin"]), visibility = ["//visibility:public"]) |
| 18 | """ |
Lorenz Brun | 17c4c8b | 2022-02-01 12:59:47 +0100 | [diff] [blame] | 19 | |
| 20 | http_archive( |
| 21 | name = name, |
| 22 | build_file_content = all_content, |
| 23 | sha256 = sums[version], |
| 24 | strip_prefix = "linux-firmware-" + version, |
| 25 | urls = ["https://git.kernel.org/pub/scm/linux/kernel/git/firmware/linux-firmware.git/snapshot/linux-firmware-%s.tar.gz" % version], |
| 26 | ) |