Re: [oe] lttng-module error
Sorry for this.
I resolved the problem that's my mistake.
The cause is that we forcibly set the PACKAGES = "${PN}" in kernel-image.bb.
So kernel-3.4.0+ is not coming.
Thanks
-Original Message-
From: Changhyeok Bae [mailto:changhyeok@lge.com]
Sent: Saturday, May 10, 2014 2:17 PM
To: 'openembedded-devel@lists.openembedded.org'
Subject: lttng-module error
Hi
I'm building lttng-module with dylan.
However I got the error on creating rootfs.
Collected errors:
| * satisfy_dependencies_for: Cannot satisfy the following dependencies for
packagegroup-kernel-image:
| *kernel-3.4.0+ * kernel-3.4.0+ * kernel-3.4.0+ *
kernel-3.4.0+ * kernel-3.4.0+ * kernel-3.4.0+ *
kernel-3.4.0+ * kernel-3.4.0+ * kernel-3.4.0+ *
kernel-3.4.0+ * kernel-3.4.0+ * kernel-3.4.0+ *
kernel-3.4.0+ * kernel-3.4.0+ * kernel-3.4.0+ *
kernel-3.4.0+ * kernel-3.4.0+ * kernel-3.4.0+ *
kernel-3.4.0+ * kernel-3.4.0+ * kernel-3.4.0+ *
kernel-3.4.0+ * kernel-3.4.0+ * kernel-3.4.0+ *
kernel-3.4.0+ * kernel-3.4.0+ * kernel-3.4.0+ *
kernel-3.4.0+ * kernel-3.4.0+ * kernel-3.4.0+ *
kernel-3.4.0+ * kernel-3.4.0+ * kernel-3.4.0+ *
kernel-3.4.0+ * kernel-3.4.0+ * kernel-3.4.0+ *
kernel-3.4.0+ * kernel-3.4.0+ * kernel-3.4.0+ *
kernel-3.4.0+ *
| * opkg_install_cmd: Cannot install package packagegroup-kernel-image.
| ERROR: Function failed: do_rootfs (see /
-linux-gnueabi/-image/1.0-r4/temp/log.do_rootfs.24420 for further
information)
NOTE: recipe -image-1.0-r4: task do_rootfs: Failed
--
___
Openembedded-devel mailing list
Openembedded-devel@lists.openembedded.org
http://lists.openembedded.org/mailman/listinfo/openembedded-devel
[oe] lttng-module error
Hi I'm building lttng-module with dylan. However I got the error on creating rootfs. Collected errors: | * satisfy_dependencies_for: Cannot satisfy the following dependencies for packagegroup-kernel-image: | *kernel-3.4.0+ * kernel-3.4.0+ * kernel-3.4.0+ * kernel-3.4.0+ * kernel-3.4.0+ * kernel-3.4.0+ * kernel-3.4.0+ * kernel-3.4.0+ * kernel-3.4.0+ * kernel-3.4.0+ * kernel-3.4.0+ * kernel-3.4.0+ * kernel-3.4.0+ * kernel-3.4.0+ * kernel-3.4.0+ * kernel-3.4.0+ * kernel-3.4.0+ * kernel-3.4.0+ * kernel-3.4.0+ * kernel-3.4.0+ * kernel-3.4.0+ * kernel-3.4.0+ * kernel-3.4.0+ * kernel-3.4.0+ * kernel-3.4.0+ * kernel-3.4.0+ * kernel-3.4.0+ * kernel-3.4.0+ * kernel-3.4.0+ * kernel-3.4.0+ * kernel-3.4.0+ * kernel-3.4.0+ * kernel-3.4.0+ * kernel-3.4.0+ * kernel-3.4.0+ * kernel-3.4.0+ * kernel-3.4.0+ * kernel-3.4.0+ * kernel-3.4.0+ * kernel-3.4.0+ * | * opkg_install_cmd: Cannot install package packagegroup-kernel-image. | ERROR: Function failed: do_rootfs (see / -linux-gnueabi/-image/1.0-r4/temp/log.do_rootfs.24420 for further information) NOTE: recipe -image-1.0-r4: task do_rootfs: Failed -- ___ Openembedded-devel mailing list Openembedded-devel@lists.openembedded.org http://lists.openembedded.org/mailman/listinfo/openembedded-devel
Re: [oe] [meta-qt5][PATCH] qmake5_base.bbclass: Add install support for native builds
On Fri, May 09, 2014 at 04:36:22PM +, Poole Jr, Donald R. wrote:
> On 5/9/14, 7:50 AM, "Martin Jansa" wrote:
>
>
> >On Tue, May 06, 2014 at 01:34:24PM -0500, Donald R. Poole, Jr. wrote:
> >> From: "Donald R. Poole, Jr"
> >>
> >> Currently, if you are building native applications with Qt5, the
> >>current qmake5_base_do_install() method assumes an install into the
> >>image folder for the target. Since the native builds handle this a
> >>little differently, this patch should account for the native install
> >>scenario.
> >
> >Add SOB line.
>
> I¹m not familiar with the acronym SOB (I¹m still learning about this
> process). Is that State of Bitbake? If so, what does State of Bitbake mean?
Signed-off-by
>
> >
> >> ---
> >> classes/qmake5.bbclass |8 ++--
> >> classes/qmake5_base.bbclass | 46
> >>+--
> >> 2 files changed, 29 insertions(+), 25 deletions(-)
> >>
> >> diff --git a/classes/qmake5.bbclass b/classes/qmake5.bbclass
> >> index e1dda0d..01454f3 100644
> >> --- a/classes/qmake5.bbclass
> >> +++ b/classes/qmake5.bbclass
> >> @@ -19,6 +19,10 @@ do_configure() {
> >> qmake5_base_do_configure
> >> }
> >>
> >> -do_install() {
> >> -qmake5_base_do_install
> >> +do_install_class-target() {
> >> +qmake5_base_do_install_target
> >> +}
> >> +
> >> +do_install_class-native() {
> >> +qmake5_base_do_install_native
> >> }
> >> diff --git a/classes/qmake5_base.bbclass b/classes/qmake5_base.bbclass
> >> index df8a59a..5a380d0 100644
> >> --- a/classes/qmake5_base.bbclass
> >> +++ b/classes/qmake5_base.bbclass
> >> @@ -161,32 +161,32 @@ qmake5_base_do_configure () {
> >> ${OE_QMAKE_QMAKE} -makefile -o Makefile ${OE_QMAKE_DEBUG_OUTPUT}
> >>-r $QMAKE_VARSUBST_PRE $AFTER $PROFILES $QMAKE_VARSUBST_POST || die
> >>"Error calling $CMD"
> >> }
> >>
> >> -qmake5_base_do_install() {
> >> +qmake5_base_do_install_target() {
> >> # Fix install paths for all
> >> -if [ "${BUILD_SYS}" = "${HOST_SYS}" ] ; then
> >> -find -name "Makefile*" | xargs sed -i
> >>"s,(INSTALL_ROOT),(INSTALL_ROOT)${STAGING_DIR_NATIVE},g"
> >> -else
> >> -find -name "Makefile*" | xargs sed -i
> >>"s,(INSTALL_ROOT)${STAGING_DIR_TARGET},(INSTALL_ROOT),g"
> >> -fi
> >> +find -name "Makefile*" | xargs sed -i
> >>"s,(INSTALL_ROOT)${STAGING_DIR_TARGET},(INSTALL_ROOT),g"
> >
> >This looks like incremental patch from your v1, please rebase and send
> >v3.
>
> Will do.
>
> >
> >>
> >> oe_runmake install INSTALL_ROOT=${D}
> >>
> >> -# Only do this for target builds. Native install work a little
> >>differently
> >> -if [ "${BUILD_SYS}" != "${HOST_SYS}" ] ; then
> >> -# everything except HostData and HostBinaries is prefixed with
> >>sysroot value,
> >> -# but we cannot remove sysroot override, because that's useful
> >>for pkg-config etc
> >> -# In some cases like QtQmlDevTools in qtdeclarative, the sed
> >>above does not work,
> >> -# fix them manually
> >> -if [ -d ${D}${STAGING_DIR_TARGET} ] && [ -n
> >>"${STAGING_DIR_TARGET}" ] ; then
> >> -echo "Some files are installed in wrong directory
> >>${D}${STAGING_DIR_TARGET}"
> >> -cp -ra ${D}${STAGING_DIR_TARGET}/* ${D}
> >> -rm -rf ${D}${STAGING_DIR_TARGET}
> >> -# remove empty dirs
> >> -TMP=`dirname ${D}/${STAGING_DIR_TARGET}`
> >> -while test ${TMP} != ${D}; do
> >> -rmdir ${TMP}
> >> -TMP=`dirname ${TMP}`;
> >> -done
> >> -fi
> >> +# everything except HostData and HostBinaries is prefixed with
> >>sysroot value,
> >> +# but we cannot remove sysroot override, because that's useful for
> >>pkg-config etc
> >> +# In some cases like QtQmlDevTools in qtdeclarative, the sed above
> >>does not work,
> >> +# fix them manually
> >> +if [ -d ${D}${STAGING_DIR_TARGET} ] ; then
> >> +echo "Some files are installed in wrong directory
> >>${D}${STAGING_DIR_TARGET}"
> >> +cp -ra ${D}${STAGING_DIR_TARGET}/* ${D}
> >> +rm -rf ${D}${STAGING_DIR_TARGET}
> >> +# remove empty dirs
> >> +TMP=`dirname ${D}/${STAGING_DIR_TARGET}`
> >> +while test ${TMP} != ${D}; do
> >> +rmdir ${TMP}
> >> +TMP=`dirname ${TMP}`;
> >> +done
> >> fi
> >> }
> >> +
> >> +qmake5_base_do_install_native() {
> >
> >Why don't you use
> >
> >qmake5_base_do_install_class-native() {
> >
> >here and leave qmake5.bbclass and qmake5_base_do_install as it is?
>
> The reason I didn¹t use qmake5_base_do_install_class-native() is because
> the system couldn¹t find the native/target overrides in the
> qmake5_base.bbclass. So, I put them in the qmake5.bbclass.
>
> >
> >> +# Fix install paths for all
> >> +find -name "Makefile*" | xargs sed -i
> >>"s,(INSTALL_ROOT),(INSTALL_ROOT)${STAGING_DIR_NATIVE},g"
> >> +
> >> +oe_runmake install INSTALL_ROOT
Re: [oe] [yocto] GStreamer 0.10's future
On 9 May 2014 16:19, Neuer User wrote: > Yes, it does, as long as you need QtMultimedia. Same applies to Qt5. > There was a discussion on the Qt mailing list about moving to > gstreamer1.0, but this seems to be rather some time in the future was my > impression. So Qt 5.3 won't have GStreamer 1.0 support. The port is being done in a branch so it's possible that it will land in Qt 5.4, which is due to be released in the September/October timeframe. One option would be to move GStreamer 0.10 into another layer, give Qt4/Qt5 disabled-by-default GStreamer 0.10 options and hope that by the time Yocto 1.7 is released, Qt5.4 with GStreamer 1.0 is also released. Even as someone who's rather keen on removing cruft from oe-core that's a bit too eager for my liking. Revised plan unless anyone has a better idea: in 1.7 we'll move everything possible away from GStreamer 0.10 but keep 0.10 around until the 1.8 cycle, and then revisit the Qt situation. Ross -- ___ Openembedded-devel mailing list Openembedded-devel@lists.openembedded.org http://lists.openembedded.org/mailman/listinfo/openembedded-devel
Re: [oe] [yocto] GStreamer 0.10's future
On 9 May 2014 16:19, Neuer User wrote: >> So the catch here is that Qt4 currently depends on GStreamer 0.10. >> > Yes, it does, as long as you need QtMultimedia. Same applies to Qt5. > There was a discussion on the Qt mailing list about moving to > gstreamer1.0, but this seems to be rather some time in the future was my > impression. Oh, even Qt5 needs 0.10? That's disappointing. Ross -- ___ Openembedded-devel mailing list Openembedded-devel@lists.openembedded.org http://lists.openembedded.org/mailman/listinfo/openembedded-devel
Re: [oe] [meta-qt5][PATCH] qmake5_base.bbclass: Add install support for native builds
On 5/9/14, 7:50 AM, "Martin Jansa" wrote:
>On Tue, May 06, 2014 at 01:34:24PM -0500, Donald R. Poole, Jr. wrote:
>> From: "Donald R. Poole, Jr"
>>
>> Currently, if you are building native applications with Qt5, the
>>current qmake5_base_do_install() method assumes an install into the
>>image folder for the target. Since the native builds handle this a
>>little differently, this patch should account for the native install
>>scenario.
>
>Add SOB line.
I¹m not familiar with the acronym SOB (I¹m still learning about this
process). Is that State of Bitbake? If so, what does State of Bitbake mean?
>
>> ---
>> classes/qmake5.bbclass |8 ++--
>> classes/qmake5_base.bbclass | 46
>>+--
>> 2 files changed, 29 insertions(+), 25 deletions(-)
>>
>> diff --git a/classes/qmake5.bbclass b/classes/qmake5.bbclass
>> index e1dda0d..01454f3 100644
>> --- a/classes/qmake5.bbclass
>> +++ b/classes/qmake5.bbclass
>> @@ -19,6 +19,10 @@ do_configure() {
>> qmake5_base_do_configure
>> }
>>
>> -do_install() {
>> -qmake5_base_do_install
>> +do_install_class-target() {
>> +qmake5_base_do_install_target
>> +}
>> +
>> +do_install_class-native() {
>> +qmake5_base_do_install_native
>> }
>> diff --git a/classes/qmake5_base.bbclass b/classes/qmake5_base.bbclass
>> index df8a59a..5a380d0 100644
>> --- a/classes/qmake5_base.bbclass
>> +++ b/classes/qmake5_base.bbclass
>> @@ -161,32 +161,32 @@ qmake5_base_do_configure () {
>> ${OE_QMAKE_QMAKE} -makefile -o Makefile ${OE_QMAKE_DEBUG_OUTPUT}
>>-r $QMAKE_VARSUBST_PRE $AFTER $PROFILES $QMAKE_VARSUBST_POST || die
>>"Error calling $CMD"
>> }
>>
>> -qmake5_base_do_install() {
>> +qmake5_base_do_install_target() {
>> # Fix install paths for all
>> -if [ "${BUILD_SYS}" = "${HOST_SYS}" ] ; then
>> -find -name "Makefile*" | xargs sed -i
>>"s,(INSTALL_ROOT),(INSTALL_ROOT)${STAGING_DIR_NATIVE},g"
>> -else
>> -find -name "Makefile*" | xargs sed -i
>>"s,(INSTALL_ROOT)${STAGING_DIR_TARGET},(INSTALL_ROOT),g"
>> -fi
>> +find -name "Makefile*" | xargs sed -i
>>"s,(INSTALL_ROOT)${STAGING_DIR_TARGET},(INSTALL_ROOT),g"
>
>This looks like incremental patch from your v1, please rebase and send
>v3.
Will do.
>
>>
>> oe_runmake install INSTALL_ROOT=${D}
>>
>> -# Only do this for target builds. Native install work a little
>>differently
>> -if [ "${BUILD_SYS}" != "${HOST_SYS}" ] ; then
>> -# everything except HostData and HostBinaries is prefixed with
>>sysroot value,
>> -# but we cannot remove sysroot override, because that's useful
>>for pkg-config etc
>> -# In some cases like QtQmlDevTools in qtdeclarative, the sed
>>above does not work,
>> -# fix them manually
>> -if [ -d ${D}${STAGING_DIR_TARGET} ] && [ -n
>>"${STAGING_DIR_TARGET}" ] ; then
>> -echo "Some files are installed in wrong directory
>>${D}${STAGING_DIR_TARGET}"
>> -cp -ra ${D}${STAGING_DIR_TARGET}/* ${D}
>> -rm -rf ${D}${STAGING_DIR_TARGET}
>> -# remove empty dirs
>> -TMP=`dirname ${D}/${STAGING_DIR_TARGET}`
>> -while test ${TMP} != ${D}; do
>> -rmdir ${TMP}
>> -TMP=`dirname ${TMP}`;
>> -done
>> -fi
>> +# everything except HostData and HostBinaries is prefixed with
>>sysroot value,
>> +# but we cannot remove sysroot override, because that's useful for
>>pkg-config etc
>> +# In some cases like QtQmlDevTools in qtdeclarative, the sed above
>>does not work,
>> +# fix them manually
>> +if [ -d ${D}${STAGING_DIR_TARGET} ] ; then
>> +echo "Some files are installed in wrong directory
>>${D}${STAGING_DIR_TARGET}"
>> +cp -ra ${D}${STAGING_DIR_TARGET}/* ${D}
>> +rm -rf ${D}${STAGING_DIR_TARGET}
>> +# remove empty dirs
>> +TMP=`dirname ${D}/${STAGING_DIR_TARGET}`
>> +while test ${TMP} != ${D}; do
>> +rmdir ${TMP}
>> +TMP=`dirname ${TMP}`;
>> +done
>> fi
>> }
>> +
>> +qmake5_base_do_install_native() {
>
>Why don't you use
>
>qmake5_base_do_install_class-native() {
>
>here and leave qmake5.bbclass and qmake5_base_do_install as it is?
The reason I didn¹t use qmake5_base_do_install_class-native() is because
the system couldn¹t find the native/target overrides in the
qmake5_base.bbclass. So, I put them in the qmake5.bbclass.
>
>> +# Fix install paths for all
>> +find -name "Makefile*" | xargs sed -i
>>"s,(INSTALL_ROOT),(INSTALL_ROOT)${STAGING_DIR_NATIVE},g"
>> +
>> +oe_runmake install INSTALL_ROOT=${D}
>> +}
>> --
>> 1.7.9.5
>>
>> --
>> ___
>> Openembedded-devel mailing list
>> Openembedded-devel@lists.openembedded.org
>> http://lists.openembedded.org/mailman/listinfo/openembedded-devel
>
>--
>Martin 'JaMa' Jansa jabber: martin.ja...@gmail.com
Donald R. Poole, Jr.
Research Engineer
Voice: 210.
Re: [oe] GStreamer 0.10's future
Am 08.05.2014 17:54, schrieb Burton, Ross: > On 8 May 2014 15:48, Burton, Ross wrote: >> For the 1.7 release I want to move GStreamer 0.10 from oe-core into >> meta-multimedia, and ensure everything in oe-core has ported to >> GStreamer 1.x. GStreamer 0.10 is considered dead upstream and is >> unmaintained so we don't need to be shipping both versions anymore. > > So the catch here is that Qt4 currently depends on GStreamer 0.10. > Yes, it does, as long as you need QtMultimedia. Same applies to Qt5. There was a discussion on the Qt mailing list about moving to gstreamer1.0, but this seems to be rather some time in the future was my impression. > Can someone who doesn't come out in a rash when looking at C++ code > spend two minutes to tell if me Qt4 supports GStreamer 1.0 (unlikely) > and whether we can make GStreamer 0.10 support a build-time > configuration and simply disable it in oe-core. > > Ross > -- ___ Openembedded-devel mailing list Openembedded-devel@lists.openembedded.org http://lists.openembedded.org/mailman/listinfo/openembedded-devel
Re: [oe] [meta-networking][PATCH] strongswan: Security Advisory - strongswan - CVE-2014-2338
Merged, thanks Roy.
-J.
[[oe] [meta-networking][PATCH] strongswan: Security Advisory - strongswan -
CVE-2014-2338] On 14.05.09 (Fri 17:05) rongqing...@windriver.com wrote:
> From: Yue Tao
>
> IKEv2 in strongSwan 4.0.7 before 5.1.3 allows remote attackers to bypass
> authentication by rekeying an IKE_SA during (1) initiation or (2)
> re-authentication, which triggers the IKE_SA state to be set to
> established.
>
> http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-2338
>
> Signed-off-by: Yue Tao
> Signed-off-by: Roy Li
> ---
> .../strongswan-5.0.0-5.1.2_reject_child_sa.patch | 36
>
> .../recipes-support/strongswan/strongswan_5.1.1.bb |1 +
> 2 files changed, 37 insertions(+)
> create mode 100644
> meta-networking/recipes-support/strongswan/files/strongswan-5.0.0-5.1.2_reject_child_sa.patch
>
> diff --git
> a/meta-networking/recipes-support/strongswan/files/strongswan-5.0.0-5.1.2_reject_child_sa.patch
>
> b/meta-networking/recipes-support/strongswan/files/strongswan-5.0.0-5.1.2_reject_child_sa.patch
> new file mode 100644
> index 000..ab95992
> --- /dev/null
> +++
> b/meta-networking/recipes-support/strongswan/files/strongswan-5.0.0-5.1.2_reject_child_sa.patch
> @@ -0,0 +1,36 @@
> +From b980ba7757dcfedd756aa055b3271ea58cf85aa6 Mon Sep 17 00:00:00 2001
> +From: Martin Willi
> +Date: Thu, 20 Feb 2014 16:08:43 +0100
> +Subject: [PATCH] ikev2: Reject CREATE_CHILD_SA exchange on unestablished
> + IKE_SAs
> +
> +Prevents a responder peer to trick us into established state by starting
> +IKE_SA rekeying before the IKE_SA has been authenticated during IKE_AUTH.
> +
> +Fixes CVE-2014-2338 for 5.x versions of strongSwan.
> +---
> + src/libcharon/sa/ikev2/task_manager_v2.c | 9 +
> + 1 file changed, 9 insertions(+)
> +
> +diff --git a/src/libcharon/sa/ikev2/task_manager_v2.c
> b/src/libcharon/sa/ikev2/task_manager_v2.c
> +index ac3be90..a5252ab 100644
> +--- a/src/libcharon/sa/ikev2/task_manager_v2.c
> b/src/libcharon/sa/ikev2/task_manager_v2.c
> +@@ -780,6 +780,15 @@ static status_t process_request(private_
> + case CREATE_CHILD_SA:
> + { /* FIXME: we should prevent this on mediation
> connections */
> + bool notify_found = FALSE, ts_found = FALSE;
> ++
> ++if (this->ike_sa->get_state(this->ike_sa) ==
> IKE_CREATED ||
> ++this->ike_sa->get_state(this->ike_sa)
> == IKE_CONNECTING)
> ++{
> ++DBG1(DBG_IKE, "received CREATE_CHILD_SA
> request for "
> ++ "unestablished IKE_SA,
> rejected");
> ++return FAILED;
> ++}
> ++
> + enumerator =
> message->create_payload_enumerator(message);
> + while (enumerator->enumerate(enumerator,
> &payload))
> + {
> +--
> +1.8.1.2
> diff --git a/meta-networking/recipes-support/strongswan/strongswan_5.1.1.bb
> b/meta-networking/recipes-support/strongswan/strongswan_5.1.1.bb
> index a2a2333..f8116e3 100644
> --- a/meta-networking/recipes-support/strongswan/strongswan_5.1.1.bb
> +++ b/meta-networking/recipes-support/strongswan/strongswan_5.1.1.bb
> @@ -9,6 +9,7 @@ DEPENDS = "gmp openssl flex-native flex bison-native"
>
> SRC_URI = "http://download.strongswan.org/strongswan-${PV}.tar.bz2 \
> file://fix-funtion-parameter.patch \
> +file://strongswan-5.0.0-5.1.2_reject_child_sa.patch \
> "
>
> SRC_URI[md5sum] = "e3af3d493d22286be3cd794533a8966a"
> --
> 1.7.10.4
>
--
-Joe MacDonald.
:wq
signature.asc
Description: Digital signature
--
___
Openembedded-devel mailing list
Openembedded-devel@lists.openembedded.org
http://lists.openembedded.org/mailman/listinfo/openembedded-devel
Re: [oe] [meta-networking][PATCH 1/3] net-snmp: Using the target perl
Merged the three of these. Thanks.
-J.
[[oe] [meta-networking][PATCH 1/3] net-snmp: Using the target perl] On 14.05.09
(Fri 16:40) rongqing...@windriver.com wrote:
> From: Yue Tao
>
> Set the PERLPROG to target perl to avoid host contamination.
>
> Signed-off-by: Yue Tao
> Signed-off-by: Roy Li
> ---
> meta-networking/recipes-protocols/net-snmp/net-snmp_5.7.2.bb |4
> 1 file changed, 4 insertions(+)
>
> diff --git a/meta-networking/recipes-protocols/net-snmp/net-snmp_5.7.2.bb
> b/meta-networking/recipes-protocols/net-snmp/net-snmp_5.7.2.bb
> index d21995a..f6656ad 100644
> --- a/meta-networking/recipes-protocols/net-snmp/net-snmp_5.7.2.bb
> +++ b/meta-networking/recipes-protocols/net-snmp/net-snmp_5.7.2.bb
> @@ -37,6 +37,10 @@ EXTRA_OECONF = "--disable-embedded-perl \
> --with-defaults \
> ${@base_conditional('SITEINFO_ENDIANNESS', 'le',
> '--with-endianness=little', '--with-endianness=big', d)}"
>
> +do_configure_prepend() {
> +export PERLPROG="${bindir}/env perl"
> +}
> +
> do_install_append() {
> install -d ${D}${sysconfdir}/snmp
> install -d ${D}${sysconfdir}/init.d
> --
> 1.7.10.4
>
--
-Joe MacDonald.
:wq
signature.asc
Description: Digital signature
--
___
Openembedded-devel mailing list
Openembedded-devel@lists.openembedded.org
http://lists.openembedded.org/mailman/listinfo/openembedded-devel
[oe] [meta-gnome][WIP][PATCH] wv: add libpng dependency
From: Tim Orling
Signed-off-by: Tim Orling
---
meta-gnome/recipes-gnome/wv/wv_1.2.0.bb | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/meta-gnome/recipes-gnome/wv/wv_1.2.0.bb
b/meta-gnome/recipes-gnome/wv/wv_1.2.0.bb
index ff0ab54..1e385d3 100644
--- a/meta-gnome/recipes-gnome/wv/wv_1.2.0.bb
+++ b/meta-gnome/recipes-gnome/wv/wv_1.2.0.bb
@@ -3,7 +3,7 @@ HOMEPAGE = "http://wvware.sourceforge.net/";
LICENSE = "GPLv2"
LIC_FILES_CHKSUM = "file://COPYING;md5=6cbca01f1c9178aca280e8ff64d85b2f"
-DEPENDS = "libgsf glib-2.0"
+DEPENDS = "libgsf glib-2.0 libpng"
PR = "r5"
SRC_URI = "${SOURCEFORGE_MIRROR}/wvware/wv-${PV}.tar.gz \
--
1.8.3.2
--
___
Openembedded-devel mailing list
Openembedded-devel@lists.openembedded.org
http://lists.openembedded.org/mailman/listinfo/openembedded-devel
Re: [oe] State of bitbake world, test-dependencies 2014-05-06
On Fri, May 09, 2014 at 01:37:46PM +0200, Martin Jansa wrote: > On Tue, May 06, 2014 at 09:51:44PM +0200, Martin Jansa wrote: > > On Fri, Apr 25, 2014 at 03:00:09AM +0200, Martin Jansa wrote: > > > On Fri, Apr 18, 2014 at 08:36:32PM +0200, Martin Jansa wrote: > > > > On Thu, Apr 03, 2014 at 03:06:09PM +0200, Martin Jansa wrote: > > > > > I've just started this long test-dependencies build so jenkins will > > > > > be busy > > > > > for next 14 days or so, but I'll send complete qa.log in advance as > > > > > soon as > > > > > it finishes building world from scratch. > > > > > > This one is only "incremental" (so testing only recipes which failed in > > > previous run) and it took only 3,5 days to finish :). > > > > > > Mostly because of firefox (libnotify) and efl/lua fix we're down to 72 > > > recipes with > > > issues (instead of 187 found in previous run or 100 w/o firefox*) > > > > I've sent couple of WIP patches to oe-devel ML and now we're down to 50 > > recipes with issues, there are still 2 days to send patches for daisy, > > so hurry up. > > > > Complete logs: > > http://logs.nslu2-linux.org/buildlogs/oe/oe-shr-core-branches/log.dependencies.20140506_041120.log/ > > Big thanks to Tim Orling and Andreas Müller for sending fixes for vlc > and xfce recipes we're down to -ENOCOFFEE: down to 44 :) recipes fixed in last iteration: < console-tools < gimp < qtbase < vlc < xfce4-settings < xfce4-weather-plugin > http://logs.nslu2-linux.org/buildlogs/oe/oe-shr-core-branches/log.dependencies.20140508_095057.log/ > > Just to make it clear, this build is using oe-core/daisy+known_fixes > (contrib/jansa/daisy-backports) > + meta-oe/master. I'll continue to run these incremental test-dependencies > builds even after branching > daisy until we resolve all of them, so be prepared for more reports. > > I'll fix gst*, navit, python-e*, please help with the rest (some of these > errors are there > for very long time and we should really provide reliable and reproducible > builds: > http://logs.nslu2-linux.org/buildlogs/oe/oe-shr-core-branches/2013/log.dependencies.20130811_00.log/ > ) > > Found differences: > ccid/ccid/latest lost dependency on flex > consolekit/consolekit/latest lost dependency on polkit > directfb/directfb/latest lost dependency on libdrm libdrm-kms liblzma tiff > engrave/engrave/latest lost dependency on flex > epiphany/epiphany/latest lost dependency on libavahi-client libavahi-common > libavahi-gobject libnotify > expedite/expedite/latest lost dependency on libsdl > flashrom/flashrom/latest lost dependency on libftdi > gammu/gammu/latest lost dependency on glib-2.0 libgudev-1.0 > gammu/libgammu/latest lost dependency on glib-2.0 > glade3/glade3/latest lost dependency on dbus-glib dbus-lib gconf gnome-vfs > libart-lgpl libavahi-client libavahi-common libavahi-glib libbonobo > libbonoboui libcanberra libcap libgcrypt libgnome libgnome-keyring > libgnomecanvas libgnomeui libgpg-error libice libltdl libogg libsm libvorbis > libxcomposite libxcursor libxdamage libxfixes libxrandr orbit2 popt > util-linux-libuuid > gmtk/gmtk/latest lost dependency on cairo-gobject dbus-lib gtk+3 json-c > libcap libice libpulse libpulse-mainloop-glib libpulsecommon libsm > libsndfile1 libx11-xcb libxi libxtst util-linux-libuuid > gnokii/libgnokii/latest lost dependency on bluez4 libical libusb-compat > libusb1 pcsc-lite-lib > gnome-panel/gnome-panel/latest lost dependency on dbus-lib > gst-plugins-bad/gst-plugins-bad-meta/latest lost dependency on > gst-plugins-bad-dc1394 gst-plugins-bad-faac gst-plugins-bad-schro > gst-plugins-good/gst-plugins-good-ximagesrc/latest lost dependency on > libxdamage > gstreamer1.0-plugins-good/gstreamer1.0-plugins-good-ximagesrc/latest lost > dependency on libxdamage > guile/guile/latest lost dependency on libgc ncurses-libncurses readline > libmicrohttpd/libmicrohttpd-bin/latest lost dependency on file > libungif/libungif/latest lost dependency on libice libsm libx11 libxau > libxcb libxdmcp util-linux-libuuid > libungif/libungif-utils/latest lost dependency on libx11 > maliit-framework/maliit-framework-gtk/latest lost dependency on eglibc > glib-2.0 gtk+ gtk+3 libgcc libqtcore4 maliit-framework pango > midori/midori/latest lost dependency on libxscrnsaver > mongodb/mongodb/latest lost dependency on libpcap > mpd/mpd/latest lost dependency on fluidsynth libao libcdio libcdio-cdda > libcdio-paranoia libjack libmms libmodplug libopus mpg123 openal-soft wavpack > yajl > mpeg2dec/mpeg2dec/latest lost dependency on libx11 libxext libxv > mpg123/mpg123/latest lost dependency on audiofile esound libjack libsdl > openal-soft portaudio-v19 tslib > navit/navit/latest lost dependency on fribidi > navit/navit-graphics-gtk/latest lost dependency on imlib2 > navit/navit-graphics-sdl/latest lost dependency on eglibc freetype > libjpeg-turbo liblzma libpng libsdl libsdl-image tiff tslib zlib > opencv/libopencv-highgui/latest lost d
Re: [oe] [meta-qt5][PATCH] qmake5_base.bbclass: Add install support for native builds
On Tue, May 06, 2014 at 01:34:24PM -0500, Donald R. Poole, Jr. wrote:
> From: "Donald R. Poole, Jr"
>
> Currently, if you are building native applications with Qt5, the current
> qmake5_base_do_install() method assumes an install into the image folder for
> the target. Since the native builds handle this a little differently, this
> patch should account for the native install scenario.
Add SOB line.
> ---
> classes/qmake5.bbclass |8 ++--
> classes/qmake5_base.bbclass | 46
> +--
> 2 files changed, 29 insertions(+), 25 deletions(-)
>
> diff --git a/classes/qmake5.bbclass b/classes/qmake5.bbclass
> index e1dda0d..01454f3 100644
> --- a/classes/qmake5.bbclass
> +++ b/classes/qmake5.bbclass
> @@ -19,6 +19,10 @@ do_configure() {
> qmake5_base_do_configure
> }
>
> -do_install() {
> -qmake5_base_do_install
> +do_install_class-target() {
> +qmake5_base_do_install_target
> +}
> +
> +do_install_class-native() {
> +qmake5_base_do_install_native
> }
> diff --git a/classes/qmake5_base.bbclass b/classes/qmake5_base.bbclass
> index df8a59a..5a380d0 100644
> --- a/classes/qmake5_base.bbclass
> +++ b/classes/qmake5_base.bbclass
> @@ -161,32 +161,32 @@ qmake5_base_do_configure () {
> ${OE_QMAKE_QMAKE} -makefile -o Makefile ${OE_QMAKE_DEBUG_OUTPUT} -r
> $QMAKE_VARSUBST_PRE $AFTER $PROFILES $QMAKE_VARSUBST_POST || die "Error
> calling $CMD"
> }
>
> -qmake5_base_do_install() {
> +qmake5_base_do_install_target() {
> # Fix install paths for all
> -if [ "${BUILD_SYS}" = "${HOST_SYS}" ] ; then
> -find -name "Makefile*" | xargs sed -i
> "s,(INSTALL_ROOT),(INSTALL_ROOT)${STAGING_DIR_NATIVE},g"
> -else
> -find -name "Makefile*" | xargs sed -i
> "s,(INSTALL_ROOT)${STAGING_DIR_TARGET},(INSTALL_ROOT),g"
> -fi
> +find -name "Makefile*" | xargs sed -i
> "s,(INSTALL_ROOT)${STAGING_DIR_TARGET},(INSTALL_ROOT),g"
This looks like incremental patch from your v1, please rebase and send
v3.
>
> oe_runmake install INSTALL_ROOT=${D}
>
> -# Only do this for target builds. Native install work a little
> differently
> -if [ "${BUILD_SYS}" != "${HOST_SYS}" ] ; then
> -# everything except HostData and HostBinaries is prefixed with
> sysroot value,
> -# but we cannot remove sysroot override, because that's useful for
> pkg-config etc
> -# In some cases like QtQmlDevTools in qtdeclarative, the sed above
> does not work,
> -# fix them manually
> -if [ -d ${D}${STAGING_DIR_TARGET} ] && [ -n "${STAGING_DIR_TARGET}"
> ] ; then
> -echo "Some files are installed in wrong directory
> ${D}${STAGING_DIR_TARGET}"
> -cp -ra ${D}${STAGING_DIR_TARGET}/* ${D}
> -rm -rf ${D}${STAGING_DIR_TARGET}
> -# remove empty dirs
> -TMP=`dirname ${D}/${STAGING_DIR_TARGET}`
> -while test ${TMP} != ${D}; do
> -rmdir ${TMP}
> -TMP=`dirname ${TMP}`;
> -done
> -fi
> +# everything except HostData and HostBinaries is prefixed with sysroot
> value,
> +# but we cannot remove sysroot override, because that's useful for
> pkg-config etc
> +# In some cases like QtQmlDevTools in qtdeclarative, the sed above does
> not work,
> +# fix them manually
> +if [ -d ${D}${STAGING_DIR_TARGET} ] ; then
> +echo "Some files are installed in wrong directory
> ${D}${STAGING_DIR_TARGET}"
> +cp -ra ${D}${STAGING_DIR_TARGET}/* ${D}
> +rm -rf ${D}${STAGING_DIR_TARGET}
> +# remove empty dirs
> +TMP=`dirname ${D}/${STAGING_DIR_TARGET}`
> +while test ${TMP} != ${D}; do
> +rmdir ${TMP}
> +TMP=`dirname ${TMP}`;
> +done
> fi
> }
> +
> +qmake5_base_do_install_native() {
Why don't you use
qmake5_base_do_install_class-native() {
here and leave qmake5.bbclass and qmake5_base_do_install as it is?
> +# Fix install paths for all
> +find -name "Makefile*" | xargs sed -i
> "s,(INSTALL_ROOT),(INSTALL_ROOT)${STAGING_DIR_NATIVE},g"
> +
> +oe_runmake install INSTALL_ROOT=${D}
> +}
> --
> 1.7.9.5
>
> --
> ___
> Openembedded-devel mailing list
> Openembedded-devel@lists.openembedded.org
> http://lists.openembedded.org/mailman/listinfo/openembedded-devel
--
Martin 'JaMa' Jansa jabber: martin.ja...@gmail.com
signature.asc
Description: Digital signature
--
___
Openembedded-devel mailing list
Openembedded-devel@lists.openembedded.org
http://lists.openembedded.org/mailman/listinfo/openembedded-devel
Re: [oe] State of bitbake world, test-dependencies 2014-05-06
On Tue, May 06, 2014 at 09:51:44PM +0200, Martin Jansa wrote: > On Fri, Apr 25, 2014 at 03:00:09AM +0200, Martin Jansa wrote: > > On Fri, Apr 18, 2014 at 08:36:32PM +0200, Martin Jansa wrote: > > > On Thu, Apr 03, 2014 at 03:06:09PM +0200, Martin Jansa wrote: > > > > I've just started this long test-dependencies build so jenkins will be > > > > busy > > > > for next 14 days or so, but I'll send complete qa.log in advance as > > > > soon as > > > > it finishes building world from scratch. > > > > This one is only "incremental" (so testing only recipes which failed in > > previous run) and it took only 3,5 days to finish :). > > > > Mostly because of firefox (libnotify) and efl/lua fix we're down to 72 > > recipes with > > issues (instead of 187 found in previous run or 100 w/o firefox*) > > I've sent couple of WIP patches to oe-devel ML and now we're down to 50 > recipes with issues, there are still 2 days to send patches for daisy, > so hurry up. > > Complete logs: > http://logs.nslu2-linux.org/buildlogs/oe/oe-shr-core-branches/log.dependencies.20140506_041120.log/ Big thanks to Tim Orling and Andreas Müller for sending fixes for vlc and xfce recipes we're down to http://logs.nslu2-linux.org/buildlogs/oe/oe-shr-core-branches/log.dependencies.20140508_095057.log/ Just to make it clear, this build is using oe-core/daisy+known_fixes (contrib/jansa/daisy-backports) + meta-oe/master. I'll continue to run these incremental test-dependencies builds even after branching daisy until we resolve all of them, so be prepared for more reports. I'll fix gst*, navit, python-e*, please help with the rest (some of these errors are there for very long time and we should really provide reliable and reproducible builds: http://logs.nslu2-linux.org/buildlogs/oe/oe-shr-core-branches/2013/log.dependencies.20130811_00.log/ ) Found differences: ccid/ccid/latest lost dependency on flex consolekit/consolekit/latest lost dependency on polkit directfb/directfb/latest lost dependency on libdrm libdrm-kms liblzma tiff engrave/engrave/latest lost dependency on flex epiphany/epiphany/latest lost dependency on libavahi-client libavahi-common libavahi-gobject libnotify expedite/expedite/latest lost dependency on libsdl flashrom/flashrom/latest lost dependency on libftdi gammu/gammu/latest lost dependency on glib-2.0 libgudev-1.0 gammu/libgammu/latest lost dependency on glib-2.0 glade3/glade3/latest lost dependency on dbus-glib dbus-lib gconf gnome-vfs libart-lgpl libavahi-client libavahi-common libavahi-glib libbonobo libbonoboui libcanberra libcap libgcrypt libgnome libgnome-keyring libgnomecanvas libgnomeui libgpg-error libice libltdl libogg libsm libvorbis libxcomposite libxcursor libxdamage libxfixes libxrandr orbit2 popt util-linux-libuuid gmtk/gmtk/latest lost dependency on cairo-gobject dbus-lib gtk+3 json-c libcap libice libpulse libpulse-mainloop-glib libpulsecommon libsm libsndfile1 libx11-xcb libxi libxtst util-linux-libuuid gnokii/libgnokii/latest lost dependency on bluez4 libical libusb-compat libusb1 pcsc-lite-lib gnome-panel/gnome-panel/latest lost dependency on dbus-lib gst-plugins-bad/gst-plugins-bad-meta/latest lost dependency on gst-plugins-bad-dc1394 gst-plugins-bad-faac gst-plugins-bad-schro gst-plugins-good/gst-plugins-good-ximagesrc/latest lost dependency on libxdamage gstreamer1.0-plugins-good/gstreamer1.0-plugins-good-ximagesrc/latest lost dependency on libxdamage guile/guile/latest lost dependency on libgc ncurses-libncurses readline libmicrohttpd/libmicrohttpd-bin/latest lost dependency on file libungif/libungif/latest lost dependency on libice libsm libx11 libxau libxcb libxdmcp util-linux-libuuid libungif/libungif-utils/latest lost dependency on libx11 maliit-framework/maliit-framework-gtk/latest lost dependency on eglibc glib-2.0 gtk+ gtk+3 libgcc libqtcore4 maliit-framework pango midori/midori/latest lost dependency on libxscrnsaver mongodb/mongodb/latest lost dependency on libpcap mpd/mpd/latest lost dependency on fluidsynth libao libcdio libcdio-cdda libcdio-paranoia libjack libmms libmodplug libopus mpg123 openal-soft wavpack yajl mpeg2dec/mpeg2dec/latest lost dependency on libx11 libxext libxv mpg123/mpg123/latest lost dependency on audiofile esound libjack libsdl openal-soft portaudio-v19 tslib navit/navit/latest lost dependency on fribidi navit/navit-graphics-gtk/latest lost dependency on imlib2 navit/navit-graphics-sdl/latest lost dependency on eglibc freetype libjpeg-turbo liblzma libpng libsdl libsdl-image tiff tslib zlib opencv/libopencv-highgui/latest lost dependency on jasper libdc1394 oscam/oscam/latest lost dependency on pcsc-lite-lib piglit/piglit/latest lost dependency on libxrender protobuf/protobuf/latest lost dependency on zlib python-efl/python-edje/latest lost dependency on edje eglibc eina libpython2 python-efl/python-elementary/latest lost dependency on eglibc eina elementary evas libpython2 sox/sox/latest lost depe
[oe] [meta-networking][PATCH] strongswan: Security Advisory - strongswan - CVE-2014-2338
From: Yue Tao
IKEv2 in strongSwan 4.0.7 before 5.1.3 allows remote attackers to bypass
authentication by rekeying an IKE_SA during (1) initiation or (2)
re-authentication, which triggers the IKE_SA state to be set to
established.
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-2338
Signed-off-by: Yue Tao
Signed-off-by: Roy Li
---
.../strongswan-5.0.0-5.1.2_reject_child_sa.patch | 36
.../recipes-support/strongswan/strongswan_5.1.1.bb |1 +
2 files changed, 37 insertions(+)
create mode 100644
meta-networking/recipes-support/strongswan/files/strongswan-5.0.0-5.1.2_reject_child_sa.patch
diff --git
a/meta-networking/recipes-support/strongswan/files/strongswan-5.0.0-5.1.2_reject_child_sa.patch
b/meta-networking/recipes-support/strongswan/files/strongswan-5.0.0-5.1.2_reject_child_sa.patch
new file mode 100644
index 000..ab95992
--- /dev/null
+++
b/meta-networking/recipes-support/strongswan/files/strongswan-5.0.0-5.1.2_reject_child_sa.patch
@@ -0,0 +1,36 @@
+From b980ba7757dcfedd756aa055b3271ea58cf85aa6 Mon Sep 17 00:00:00 2001
+From: Martin Willi
+Date: Thu, 20 Feb 2014 16:08:43 +0100
+Subject: [PATCH] ikev2: Reject CREATE_CHILD_SA exchange on unestablished
+ IKE_SAs
+
+Prevents a responder peer to trick us into established state by starting
+IKE_SA rekeying before the IKE_SA has been authenticated during IKE_AUTH.
+
+Fixes CVE-2014-2338 for 5.x versions of strongSwan.
+---
+ src/libcharon/sa/ikev2/task_manager_v2.c | 9 +
+ 1 file changed, 9 insertions(+)
+
+diff --git a/src/libcharon/sa/ikev2/task_manager_v2.c
b/src/libcharon/sa/ikev2/task_manager_v2.c
+index ac3be90..a5252ab 100644
+--- a/src/libcharon/sa/ikev2/task_manager_v2.c
b/src/libcharon/sa/ikev2/task_manager_v2.c
+@@ -780,6 +780,15 @@ static status_t process_request(private_
+ case CREATE_CHILD_SA:
+ { /* FIXME: we should prevent this on mediation
connections */
+ bool notify_found = FALSE, ts_found = FALSE;
++
++ if (this->ike_sa->get_state(this->ike_sa) ==
IKE_CREATED ||
++ this->ike_sa->get_state(this->ike_sa)
== IKE_CONNECTING)
++ {
++ DBG1(DBG_IKE, "received CREATE_CHILD_SA
request for "
++ "unestablished IKE_SA,
rejected");
++ return FAILED;
++ }
++
+ enumerator =
message->create_payload_enumerator(message);
+ while (enumerator->enumerate(enumerator,
&payload))
+ {
+--
+1.8.1.2
diff --git a/meta-networking/recipes-support/strongswan/strongswan_5.1.1.bb
b/meta-networking/recipes-support/strongswan/strongswan_5.1.1.bb
index a2a2333..f8116e3 100644
--- a/meta-networking/recipes-support/strongswan/strongswan_5.1.1.bb
+++ b/meta-networking/recipes-support/strongswan/strongswan_5.1.1.bb
@@ -9,6 +9,7 @@ DEPENDS = "gmp openssl flex-native flex bison-native"
SRC_URI = "http://download.strongswan.org/strongswan-${PV}.tar.bz2 \
file://fix-funtion-parameter.patch \
+file://strongswan-5.0.0-5.1.2_reject_child_sa.patch \
"
SRC_URI[md5sum] = "e3af3d493d22286be3cd794533a8966a"
--
1.7.10.4
--
___
Openembedded-devel mailing list
Openembedded-devel@lists.openembedded.org
http://lists.openembedded.org/mailman/listinfo/openembedded-devel
[oe] [meta-networking][PATCH 2/3] net-snmp-5.7.2: fix CVE-2014-2284
From: "yanjun.zhu"
The Linux implementation of the ICMP-MIB in Net-SNMP 5.5 before
5.5.2.1, 5.6.x before 5.6.2.1, and 5.7.x before 5.7.2.1 does
not properly validate input, which allows remote attackers
to cause a denial of service via unspecified vectors.
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-2284
Signed-off-by: yanjun.zhu
Signed-off-by: Roy Li
---
.../files/net-snmp-5.7.2-fix-CVE-2014-2284.patch | 126
.../recipes-protocols/net-snmp/net-snmp_5.7.2.bb |1 +
2 files changed, 127 insertions(+)
create mode 100644
meta-networking/recipes-protocols/net-snmp/files/net-snmp-5.7.2-fix-CVE-2014-2284.patch
diff --git
a/meta-networking/recipes-protocols/net-snmp/files/net-snmp-5.7.2-fix-CVE-2014-2284.patch
b/meta-networking/recipes-protocols/net-snmp/files/net-snmp-5.7.2-fix-CVE-2014-2284.patch
new file mode 100644
index 000..10dec17
--- /dev/null
+++
b/meta-networking/recipes-protocols/net-snmp/files/net-snmp-5.7.2-fix-CVE-2014-2284.patch
@@ -0,0 +1,126 @@
+diff -urpN a/agent/mibgroup/mibII/icmp.c b/agent/mibgroup/mibII/icmp.c
+--- a/agent/mibgroup/mibII/icmp.c
b/agent/mibgroup/mibII/icmp.c
+@@ -106,10 +106,20 @@ struct icmp_msg_stats_table_entry {
+ int flags;
+ };
+
++#ifdef linux
++/* Linux keeps track of all possible message types */
++#define ICMP_MSG_STATS_IPV4_COUNT 256
++#else
+ #define ICMP_MSG_STATS_IPV4_COUNT 11
++#endif
+
+ #ifdef NETSNMP_ENABLE_IPV6
++#ifdef linux
++/* Linux keeps track of all possible message types */
++#define ICMP_MSG_STATS_IPV6_COUNT 256
++#else
+ #define ICMP_MSG_STATS_IPV6_COUNT 14
++#endif
+ #else
+ #define ICMP_MSG_STATS_IPV6_COUNT 0
+ #endif /* NETSNMP_ENABLE_IPV6 */
+@@ -177,7 +187,7 @@ icmp_msg_stats_load(netsnmp_cache *cache
+ inc = 0;
+ linux_read_icmp_msg_stat(&v4icmp, &v4icmpmsg, &flag);
+ if (flag) {
+-while (254 != k) {
++while (255 >= k) {
+ if (v4icmpmsg.vals[k].InType) {
+ icmp_msg_stats_table[i].ipVer = 1;
+ icmp_msg_stats_table[i].icmpMsgStatsType = k;
+@@ -1050,6 +1060,12 @@ icmp_stats_table_handler(netsnmp_mib_han
+ continue;
+ table_info =
netsnmp_extract_table_info(request);
+ subid = table_info->colnum;
++ DEBUGMSGTL(( "mibII/icmpStatsTable", "oid: " ));
++ DEBUGMSGOID(( "mibII/icmpStatsTable",
request->requestvb->name,
++
request->requestvb->name_length ));
++ DEBUGMSG(( "mibII/icmpStatsTable", " In %d
InErr %d Out %d OutErr %d\n",
++entry->icmpStatsInMsgs,
entry->icmpStatsInErrors,
++entry->icmpStatsOutMsgs,
entry->icmpStatsOutErrors ));
+
+ switch (subid) {
+ case ICMP_STAT_INMSG:
+@@ -1117,6 +1133,11 @@ icmp_msg_stats_table_handler(netsnmp_mib
+ continue;
+ table_info = netsnmp_extract_table_info(request);
+ subid = table_info->colnum;
++ DEBUGMSGTL(( "mibII/icmpMsgStatsTable", "oid: " ));
++ DEBUGMSGOID(( "mibII/icmpMsgStatsTable",
request->requestvb->name,
++ request->requestvb->name_length ));
++ DEBUGMSG(( "mibII/icmpMsgStatsTable", " In %d Out %d Flags
0x%x\n",
++ entry->icmpMsgStatsInPkts,
entry->icmpMsgStatsOutPkts, entry->flags ));
+
+ switch (subid) {
+ case ICMP_MSG_STAT_IN_PKTS:
+diff -urpN a/agent/mibgroup/mibII/kernel_linux.c
b/agent/mibgroup/mibII/kernel_linux.c
+--- a/agent/mibgroup/mibII/kernel_linux.c
b/agent/mibgroup/mibII/kernel_linux.c
+@@ -81,9 +81,9 @@ decode_icmp_msg(char *line, char *data,
+ index = strtol(token, &delim, 0);
+ if (ERANGE == errno) {
+ continue;
+-} else if (index > LONG_MAX) {
++} else if (index > 255) {
+ continue;
+-} else if (index < LONG_MIN) {
++} else if (index < 0) {
+ continue;
+ }
+ if (NULL == (token = strtok_r(dataptr, " ", &saveptr1)))
+@@ -94,9 +94,9 @@ decode_icmp_msg(char *line, char *data,
+ index = strtol(token, &delim, 0);
+ if (ERANGE == errno) {
+ continue;
+-} else if (index > LONG_MAX) {
++} else if (index > 255) {
+ continue;
+-} else if (index < LONG_MIN) {
++} else if (index < 0) {
+ continue;
+ }
+ if(NULL == (token = strtok_r(dataptr, " ", &saveptr1)))
+@@ -426,14 +426,21 @@ linux_read_icmp6_parse(struct icmp6_mib
+
+ vals = name;
+ if (NULL != icmp6msgs
[oe] [meta-networking][PATCH 3/3] net-snmp-5.7.2: fix CVE-2014-2285
From: yzhu1
The perl_trapd_handler function in perl/TrapReceiver/TrapReceiver.xs
in Net-SNMP 5.7.3.pre3 and earlier, when using certain Perl versions,
allows remote attackers to cause a denial of service (snmptrapd
crash) via an empty community string in an SNMP trap, which triggers
a NULL pointer dereference within the newSVpv function in Perl.
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-2285
Signed-off-by: yzhu1
Signed-off-by: Roy Li
---
.../files/net-snmp-5.7.2-fix-CVE-2014-2285.patch | 26
.../recipes-protocols/net-snmp/net-snmp_5.7.2.bb |3 ++-
2 files changed, 28 insertions(+), 1 deletion(-)
create mode 100644
meta-networking/recipes-protocols/net-snmp/files/net-snmp-5.7.2-fix-CVE-2014-2285.patch
diff --git
a/meta-networking/recipes-protocols/net-snmp/files/net-snmp-5.7.2-fix-CVE-2014-2285.patch
b/meta-networking/recipes-protocols/net-snmp/files/net-snmp-5.7.2-fix-CVE-2014-2285.patch
new file mode 100644
index 000..a031d3a
--- /dev/null
+++
b/meta-networking/recipes-protocols/net-snmp/files/net-snmp-5.7.2-fix-CVE-2014-2285.patch
@@ -0,0 +1,26 @@
+--- a/perl/TrapReceiver/TrapReceiver.xs
b/perl/TrapReceiver/TrapReceiver.xs
+@@ -81,18 +81,18 @@ int perl_trapd_handler( netsnmp_pdu
+ STOREPDUi("securitymodel", pdu->securityModel);
+ STOREPDUi("securitylevel", pdu->securityLevel);
+ STOREPDU("contextName",
+- newSVpv(pdu->contextName, pdu->contextNameLen));
++ newSVpv(pdu->contextName ? pdu->contextName : "",
pdu->contextNameLen));
+ STOREPDU("contextEngineID",
+- newSVpv((char *) pdu->contextEngineID,
++ newSVpv(pdu->contextEngineID ? (char *) pdu->contextEngineID
: "",
+ pdu->contextEngineIDLen));
+ STOREPDU("securityEngineID",
+- newSVpv((char *) pdu->securityEngineID,
++ newSVpv(pdu->securityEngineID ? (char *)
pdu->securityEngineID : "",
+ pdu->securityEngineIDLen));
+ STOREPDU("securityName",
+- newSVpv((char *) pdu->securityName, pdu->securityNameLen));
++ newSVpv(pdu->securityName ? (char *) pdu->securityName : "",
pdu->securityNameLen));
+ } else {
+ STOREPDU("community",
+- newSVpv((char *) pdu->community, pdu->community_len));
++ newSVpv(pdu->community ? (char *) pdu->community : "",
pdu->community_len));
+ }
+
+ if (transport && transport->f_fmtaddr) {
diff --git a/meta-networking/recipes-protocols/net-snmp/net-snmp_5.7.2.bb
b/meta-networking/recipes-protocols/net-snmp/net-snmp_5.7.2.bb
index 8f20ce9..7ab564a 100644
--- a/meta-networking/recipes-protocols/net-snmp/net-snmp_5.7.2.bb
+++ b/meta-networking/recipes-protocols/net-snmp/net-snmp_5.7.2.bb
@@ -17,6 +17,7 @@ SRC_URI =
"${SOURCEFORGE_MIRROR}/net-snmp/net-snmp-${PV}.tar.gz \
file://snmptrapd.service \
file://ifmib.patch \
file://net-snmp-5.7.2-fix-CVE-2014-2284.patch \
+file://net-snmp-5.7.2-fix-CVE-2014-2285.patch \
"
SRC_URI[md5sum] = "5bddd02e2f82b62daa79f82717737a14"
--
1.7.10.4
--
___
Openembedded-devel mailing list
Openembedded-devel@lists.openembedded.org
http://lists.openembedded.org/mailman/listinfo/openembedded-devel
[oe] [meta-networking][PATCH 1/3] net-snmp: Using the target perl
From: Yue Tao
Set the PERLPROG to target perl to avoid host contamination.
Signed-off-by: Yue Tao
Signed-off-by: Roy Li
---
meta-networking/recipes-protocols/net-snmp/net-snmp_5.7.2.bb |4
1 file changed, 4 insertions(+)
diff --git a/meta-networking/recipes-protocols/net-snmp/net-snmp_5.7.2.bb
b/meta-networking/recipes-protocols/net-snmp/net-snmp_5.7.2.bb
index d21995a..f6656ad 100644
--- a/meta-networking/recipes-protocols/net-snmp/net-snmp_5.7.2.bb
+++ b/meta-networking/recipes-protocols/net-snmp/net-snmp_5.7.2.bb
@@ -37,6 +37,10 @@ EXTRA_OECONF = "--disable-embedded-perl \
--with-defaults \
${@base_conditional('SITEINFO_ENDIANNESS', 'le',
'--with-endianness=little', '--with-endianness=big', d)}"
+do_configure_prepend() {
+export PERLPROG="${bindir}/env perl"
+}
+
do_install_append() {
install -d ${D}${sysconfdir}/snmp
install -d ${D}${sysconfdir}/init.d
--
1.7.10.4
--
___
Openembedded-devel mailing list
Openembedded-devel@lists.openembedded.org
http://lists.openembedded.org/mailman/listinfo/openembedded-devel
