[Sound-open-firmware] crosstool-ng branch sof-gcc8.1

Daniel Baluta daniel.baluta at nxp.com
Fri Apr 2 12:13:53 CEST 2021


Hi Liam,

sof-gcc8.1 branch of crosstool-ng fails to build a cross compiler (i think for all platforms)
because expat version 2.2.5 ( CT_EXPAT_VERSION="2.2.5"  ) is vulnerable.

https://sourceforge.net/projects/expat/files/expat/2.2.5/expat-2.2.5-RENAMED-VULNERABLE-PLEASE-USE-2.3.0-INSTEAD.tar.bz2/download

What's your take on this? Should we change the config files to upgrade expat to 2.3.0
or should we directly use newer versions of gcc.

What gcc toolchain versions is Intel using? We at NXP want to align with that.

thanks,
Daniel.


More information about the Sound-open-firmware mailing list