Cherry pick security fixes

Author: will-v-pi

packages/linux/openocd/build-openocd.sh

@@ -6,6 +6,11 @@ export CFLAGS=-static
 export LDFLAGS=-static
 
 cd openocd
+
+curl -L https://github.com/tom-van/openocd-rp2350-riscv/commit/55281d9ef4bd1b45bd4b645b0536bc1972eef3a5.patch | git apply -v
+curl -L https://github.com/tom-van/openocd-rp2350-riscv/commit/e3d44750d6384115b32e44471574c5024eb95900.patch | git apply -v
+curl -L https://github.com/tom-van/openocd-rp2350-riscv/commit/dad9e7f4039ef962cfc336e2e4285f71e0cbeb37.patch | git apply -v
+
 ./bootstrap
 ./configure --disable-werror
 make clean

packages/macos/openocd/build-openocd.sh

@@ -4,6 +4,10 @@ set -euo pipefail
 
 cd openocd
 
+curl -L https://github.com/tom-van/openocd-rp2350-riscv/commit/55281d9ef4bd1b45bd4b645b0536bc1972eef3a5.patch | git apply -v
+curl -L https://github.com/tom-van/openocd-rp2350-riscv/commit/e3d44750d6384115b32e44471574c5024eb95900.patch | git apply -v
+curl -L https://github.com/tom-van/openocd-rp2350-riscv/commit/dad9e7f4039ef962cfc336e2e4285f71e0cbeb37.patch | git apply -v
+
 ./bootstrap
 # See https://github.com/raspberrypi/openocd/issues/30
 # ./configure --disable-werror CAPSTONE_CFLAGS="$(pkg-config capstone --cflags | sed s/.capstone\$//)"

packages/windows/openocd/build-openocd.sh

@@ -7,6 +7,10 @@ INSTALLDIR="openocd-install"
 
 cd openocd
 
+curl -L https://github.com/tom-van/openocd-rp2350-riscv/commit/55281d9ef4bd1b45bd4b645b0536bc1972eef3a5.patch | git apply -v
+curl -L https://github.com/tom-van/openocd-rp2350-riscv/commit/e3d44750d6384115b32e44471574c5024eb95900.patch | git apply -v
+curl -L https://github.com/tom-van/openocd-rp2350-riscv/commit/dad9e7f4039ef962cfc336e2e4285f71e0cbeb37.patch | git apply -v
+
 ./bootstrap
 ./configure --disable-werror --enable-internal-jimtcl
 make clean