[OE-core] [PATCH] bind: Whitelist CVE-2019-6470

2019-11-13 Thread Adrian Bunk
Signed-off-by: Adrian Bunk --- meta/recipes-connectivity/bind/bind_9.11.5-P4.bb | 3 +++ 1 file changed, 3 insertions(+) diff --git a/meta/recipes-connectivity/bind/bind_9.11.5-P4.bb b/meta/recipes-connectivity/bind/bind_9.11.5-P4.bb index 3e2412dfa4..0a52a66144 100644 --- a/meta/recipes-connec

[OE-core] [PATCH] libsdl2: fix race when building in parallel

2019-11-13 Thread Anuj Mittal
Fixes a race where it tries to build version res file in build directory before it has even been created. Prevents intermittent errors on autobuilder when building for mingw: | /bin/bash ../SDL2-2.0.10/build-scripts/updaterev.sh | /bin/bash ../SDL2-2.0.10/build-scripts/mkinstalldirs build | mkdir

[OE-core] ✗ patchtest: failure for libsdl2: fix race when building in parallel

2019-11-13 Thread Patchwork
== Series Details == Series: libsdl2: fix race when building in parallel Revision: 1 URL : https://patchwork.openembedded.org/series/21120/ State : failure == Summary == Thank you for submitting this patch series to OpenEmbedded Core. This is an automated response. Several tests have been exe

[OE-core] pthreads should rdepend on libgcc

2019-11-13 Thread Bartosz Golaszewski
This isn't a patch as I'm not sure how to fix the right way it but it seems to my that every program that calls pthread_exit() indirectly rdepends on libgcc_s.so.1 being installed in the system (at least when using glibc). This is because the implementation of __pthread_exit() in glibc calls pthre

[OE-core] [PATCH] libsdl2: fix race when building in parallel

2019-11-13 Thread Anuj Mittal
Fixes a race where it tries to build version res file in build directory before it has even been created. Prevents intermittent errors on autobuilder when building for mingw: | /bin/bash ../SDL2-2.0.10/build-scripts/updaterev.sh | /bin/bash ../SDL2-2.0.10/build-scripts/mkinstalldirs build | mkdir

Re: [OE-core] [PATCH 1/2] tune-riscv: Add support for hard and soft float

2019-11-13 Thread Andre McCurdy
On Wed, Nov 6, 2019 at 12:37 PM Alistair Francis wrote: > > Signed-off-by: Alistair Francis > --- > meta/conf/machine/include/riscv/arch-riscv.inc | 3 ++- > meta/conf/machine/include/riscv/tune-riscv.inc | 17 +++-- > 2 files changed, 17 insertions(+), 3 deletions(-) > > diff --git

[OE-core] fetcher uses wrong SRCREV for class-native

2019-11-13 Thread Andre McCurdy
With the following test recipe, foo.bb: LICENSE = "CLOSED" PV .= "+git${SRCPV}" SRCREV = "015b0cdce1a0abb68ab99510e7fc8d2f77e8ec77" SRCREV_class-native = "fc3e8f717779cabcbe583cac304308eaad5f1648" SRC_URI = "git://github.com/file/file.git;protocol=https" S = "${WORKDIR}/git" BBCLASSE

Re: [OE-core] pthreads should rdepend on libgcc

2019-11-13 Thread Mark Hatle
On 11/13/19 2:34 AM, Bartosz Golaszewski wrote: > This isn't a patch as I'm not sure how to fix the right way it but it > seems to my that every program that calls pthread_exit() indirectly > rdepends on libgcc_s.so.1 being installed in the system (at least when > using glibc). > > This is beca

[OE-core] [warrior 04/25] devtool: Avoid failure for recipes with S == WORKDIR and no local files

2019-11-13 Thread Armin Kuster
From: Peter Kjellerstedt When extracting the sources for a recipe that has S == WORKDIR and no local files in the SRC_URI (which, e.g., can happen for a recipe with a URI that has the unpack=false attribute), the extraction fails with the following backtrace: Traceback (most recent call last):

[OE-core] [warrior 01/25] meson: Backport patch to handle strings in cross file args

2019-11-13 Thread Armin Kuster
From: Peter Kjellerstedt This allows _args and _link_args properties, e.g., c_link_args, in meson.cross to be specified as either a string or a list. Signed-off-by: Peter Kjellerstedt Signed-off-by: Armin Kuster --- meta/recipes-devtools/meson/meson.inc | 1 + ...e-strings-in-cr

[OE-core] [warrior 00/25] Patch review

2019-11-13 Thread Armin Kuster
Please provide comments by Friday The following changes since commit 03b303dbc92521606ff4051bd253f8acc01fd9e5: go-1.12: update to 1.12.9 minor release (2019-11-07 21:56:23 +) are available in the git repository at: git://git.openembedded.org/openembedded-core-contrib stable/warrior-nmut

[OE-core] [warrior 02/25] meson.bbclass: Remove the MESON_*_ARGS variables

2019-11-13 Thread Armin Kuster
From: Peter Kjellerstedt The options in ${HOST_CC_ARCH}${TOOLCHAIN_OPTIONS} are already passed via ${CC}/${CXX} and there is no reason to pass them a second time. Thus we can remove MESON_TOOLCHAIN_ARGS. And when it is removed, the other MESON_*_ARGS variables revert to the standard CFLAGS, CXXFL

[OE-core] [warrior 05/25] package_rpm.bbclass: Remove a misleading bb.note()

2019-11-13 Thread Armin Kuster
From: Peter Kjellerstedt It should have been removed in 3db9d865 (classes/package_rpm.bbclass: Enhance diagnostic messages) when it was split in two new notes. Also change the casing of two other notes to align them with the other notes. Signed-off-by: Peter Kjellerstedt Signed-off-by: Richard

[OE-core] [warrior 03/25] nativesdk-meson: Remove some unused variables

2019-11-13 Thread Armin Kuster
From: Peter Kjellerstedt Signed-off-by: Peter Kjellerstedt Signed-off-by: Richard Purdie Signed-off-by: Armin Kuster --- meta/recipes-devtools/meson/nativesdk-meson_0.49.2.bb | 5 - 1 file changed, 5 deletions(-) diff --git a/meta/recipes-devtools/meson/nativesdk-meson_0.49.2.bb b/meta/

[OE-core] [warrior 06/25] tzdata: Correct the packaging of /etc/localtime and /etc/timezone

2019-11-13 Thread Armin Kuster
From: Peter Kjellerstedt During restructuring of the packaging in 2af4d6eb (tzdata: Install everything by default), these two files remained in the tzdata package, which is supposed to be empty. Move them to tzdata-core where they belong. Also simplify the definition of CONFFILES_tzdata-core. As

[OE-core] [warrior 07/25] devtool: finish: Keep patches ordered when updating bbappend

2019-11-13 Thread Armin Kuster
From: Niclas Svensson The _get_patchset_revs() function returns the patches in an OrderedDict to keep them ordered. However, this information was lost when the patches were added to the bbappend file. Signed-off-by: Niclas Svensson Signed-off-by: Peter Kjellerstedt Signed-off-by: Richard Purdi

[OE-core] [warrior 08/25] devtool: finish: Add suppport for the --no-clean option

2019-11-13 Thread Armin Kuster
From: Peter Kjellerstedt This works just like the already existing --no-clean option to the `devtool reset` command. Signed-off-by: Peter Kjellerstedt Signed-off-by: Richard Purdie Signed-off-by: Armin Kuster --- scripts/lib/devtool/standard.py | 3 ++- 1 file changed, 2 insertions(+), 1 del

[OE-core] [warrior 09/25] lib/oe/lsb: Make sure the distro ID is always lowercased

2019-11-13 Thread Armin Kuster
From: Peter Kjellerstedt In commit 8689e561 (lib/oe/lsb: attempt to ensure consistent distro id regardless of source), the distro ID returned by oe.lsb.distro_identifier() was lowercased, but only if a release version is also present. This changes the code to always lowercase the distro ID, incl

[OE-core] [warrior 10/25] tiff: fix CVE-2019-14973

2019-11-13 Thread Armin Kuster
From: Trevor Gamblin CVE reference: https://nvd.nist.gov/vuln/detail/CVE-2019-14973 Upstream merge: https://gitlab.com/libtiff/libtiff/commit/2218055c Signed-off-by: Trevor Gamblin Signed-off-by: Ross Burton [fixup for Warrior context] Signed-off-by: Armin Kuster --- .../libtiff/tiff/CVE-201

[OE-core] [warrior 13/25] python3: fix do_install fail for parallel buiild

2019-11-13 Thread Armin Kuster
From: Changqing Li When using make -j with the 'install' target, it's possible for altbininstall (which normally creates BINDIR) and libainstall (which doesn't, though it installs python-config there) to race, resulting in a failure due to attempting to install python-config into a nonexistent BI

[OE-core] [warrior 16/25] python3: Reformat sysconfig

2019-11-13 Thread Armin Kuster
From: Joshua Watt Reformats the sysconfig file when packaging. This file is output by using the python pprint function. This function will wrap long lines at 80 characters by default, and will even split strings at whitespace boundaries to do so, e.g.: 'A': 'B is really' ' long' This cause

[OE-core] [warrior 20/25] python3: Upgrade 3.7.4 -> 3.7.5

2019-11-13 Thread Armin Kuster
From: Adrian Bunk Backported patch removed. 3.7.5 also includes the fix for CVE-2019-16935. Signed-off-by: Adrian Bunk Signed-off-by: Richard Purdie Signed-off-by: Anuj Mittal Signed-off-by: Armin Kuster --- ...code-lib-as-location-for-site-packages-an.patch | 2 +- ...55-Dont-parse-doma

[OE-core] [warrior 21/25] pseudo: Fix openat() with a symlink pointing to a directory

2019-11-13 Thread Armin Kuster
From: Jason Wessel While working with ostree disk generation in conjunction with wic, I found a problem with pseudo where it tried to resolve a symlink when it shouldn't, based on openat() flags. A C program has been constructed to test pseudo to show that it is working properly with the correct

[OE-core] [warrior 12/25] libxslt: fix CVE-2019-18197

2019-11-13 Thread Armin Kuster
From: Joe Slater Use patch from upstream after 1.1.33 release. Signed-off-by: Joe Slater Signed-off-by: Ross Burton Signed-off-by: Anuj Mittal Signed-off-by: Armin Kuster --- .../libxslt/files/CVE-2019-18197.patch | 33 ++ meta/recipes-support/libxslt/libxslt

[OE-core] [warrior 14/25] python3: fix build on softfloat mips

2019-11-13 Thread Armin Kuster
From: Matthias Schoepfer via Openembedded-core This patch originally only meant to correct the python3 build for mips with softfloat, as the original test only checked for mips hardfloat. Replaced custom C Program for triplet detection with autotools triplet detection. Signed-off-by: Matthias

[OE-core] [warrior 11/25] libtiff: fix CVE-2019-17546

2019-11-13 Thread Armin Kuster
From: Joe Slater Apply unmodified patch from upstream. Signed-off-by: Joe Slater Signed-off-by: Ross Burton Signed-off-by: Anuj Mittal Signed-off-by: Armin Kuster --- .../libtiff/tiff/CVE-2019-17546.patch | 103 + meta/recipes-multimedia/libtiff/tiff_4.0.10.

[OE-core] [warrior 18/25] python3: fix the test_locale output format

2019-11-13 Thread Armin Kuster
From: Mingli Yu Before this patch: # python3 -m test -v test_locale [snip] test_getsetlocale_issue1813 (test.test_locale.TestMiscellaneous) ... testing with ('tr_TR', 'ISO8859-9') ok [snip] After this patch: # python3 -m test -v test_locale [snip] test_getsetlocale_issue1813 (test.test_

[OE-core] [warrior 17/25] python3: Fix .pyc file reproduciblility

2019-11-13 Thread Armin Kuster
From: Joshua Watt Applies a patch to python that makes the pre-compiled .pyc files generated during the build reproducible. Signed-off-by: Joshua Watt Signed-off-by: Richard Purdie Signed-off-by: Armin Kuster --- ...-Use-FLAG_REF-always-for-interned-strings.patch | 35 ++

[OE-core] [warrior 15/25] python3: python3: Fix build error x86->x86

2019-11-13 Thread Armin Kuster
From: Ricardo Ribalda Delgado When building x86->x86 the system will try to execute .so and related items from the default PYTHONPATH. This will fail if the target CPU contains instructions that the host CPU does not have, add CROSSPYTHONPATH into PYTHONPATH so we can prepend the list to find co

[OE-core] [warrior 19/25] python3: CVE-2019-16056

2019-11-13 Thread Armin Kuster
From: Chen Qi Signed-off-by: Chen Qi Signed-off-by: Richard Purdie Signed-off-by: Armin Kuster --- ...55-Dont-parse-domains-containing-GH-13079.patch | 132 + meta/recipes-devtools/python/python3_3.7.4.bb | 1 + 2 files changed, 133 insertions(+) create mode 100644

[OE-core] [warrior 24/25] patch: the CVE-2019-13638 fix also handles CVE-2018-20969

2019-11-13 Thread Armin Kuster
From: Ross Burton Signed-off-by: Ross Burton Signed-off-by: Richard Purdie Signed-off-by: Armin Kuster --- .../patch/0001-Invoke-ed-directly-instead-of-using-the-shell.patch| 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/meta/recipes-devtools/patch/patch/0001-Invo

[OE-core] [warrior 23/25] pseudo: Add statx support to fix fedora30 issues

2019-11-13 Thread Armin Kuster
From: Richard Purdie Modern distros (e.g. fedora30) are starting to use the new statx() syscall through the newly exposed glibc wrapper function in software like coreutils (e.g. the ls command). Add support to intercept this to pseudo. Signed-off-by: Richard Purdie [Fixup for warrior context]

[OE-core] [warrior 22/25] pseudo: Drop static linking to sqlite3

2019-11-13 Thread Armin Kuster
From: Richard Purdie Back in 2010[1] we made pseudo statically link against sqlite3. Since then the world has changed, pseudo now has separate processes for the database in the server and the client and they have separate linking commands. Also, whilst there were concerns about needing specific

[OE-core] [warrior 25/25] file: fix CVE-2019-18218

2019-11-13 Thread Armin Kuster
From: Ross Burton Signed-off-by: Ross Burton Signed-off-by: Richard Purdie Signed-off-by: Armin Kuster --- .../file/file/CVE-2019-18218.patch | 55 ++ meta/recipes-devtools/file/file_5.36.bb| 3 +- 2 files changed, 57 insertions(+), 1 deletion(

[OE-core] [zeus 02/31] libtiff: fix CVE-2019-17546

2019-11-13 Thread Armin Kuster
From: Joe Slater Apply unmodified patch from upstream. Signed-off-by: Joe Slater Signed-off-by: Ross Burton Signed-off-by: Anuj Mittal --- .../libtiff/tiff/CVE-2019-17546.patch | 103 + meta/recipes-multimedia/libtiff/tiff_4.0.10.bb | 1 + 2 files chang

[OE-core] [zeus 00/31] zeus pull request

2019-11-13 Thread Armin Kuster
Please merge this series to zeus mainline. The following changes since commit 5607d38af39294bf97a878b414a0212278b66b2c: connman: mark connman-wait-online as SYSTEMD_PACKAGE (2019-10-29 08:20:37 +) are available in the git repository at: git://git.openembedded.org/openembedded-core-cont

[OE-core] [zeus 03/31] libxslt: fix CVE-2019-18197

2019-11-13 Thread Armin Kuster
From: Joe Slater Use patch from upstream after 1.1.33 release. Signed-off-by: Joe Slater Signed-off-by: Ross Burton Signed-off-by: Anuj Mittal --- .../libxslt/files/CVE-2019-18197.patch | 33 ++ meta/recipes-support/libxslt/libxslt_1.1.33.bb | 1 + 2 file

[OE-core] [zeus 01/31] e2fsprogs: fix CVE-2019-5094

2019-11-13 Thread Armin Kuster
From: Changqing Li Signed-off-by: Changqing Li Signed-off-by: Anuj Mittal --- .../e2fsprogs/e2fsprogs/CVE-2019-5094.patch| 217 + .../recipes-devtools/e2fsprogs/e2fsprogs_1.45.3.bb | 1 + 2 files changed, 218 insertions(+) create mode 100644 meta/recipes-devtool

[OE-core] [zeus 04/31] python3: Upgrade 3.7.4 -> 3.7.5

2019-11-13 Thread Armin Kuster
From: Adrian Bunk Backported patch removed. 3.7.5 also includes the fix for CVE-2019-16935. Signed-off-by: Adrian Bunk Signed-off-by: Richard Purdie Signed-off-by: Anuj Mittal --- ...code-lib-as-location-for-site-packages-an.patch | 2 +- ...55-Dont-parse-domains-containing-GH-13079.patch

[OE-core] [zeus 05/31] libpng: whitelist CVE-2019-17371

2019-11-13 Thread Armin Kuster
From: Ross Burton This is actually a memory leak in gif2png 2.x, so whitelist it in the libpng recipe. Signed-off-by: Ross Burton Signed-off-by: Richard Purdie Signed-off-by: Adrian Bunk Signed-off-by: Anuj Mittal --- meta/recipes-multimedia/libpng/libpng_1.6.37.bb | 3 +++ 1 file changed,

[OE-core] [zeus 06/31] procps: whitelist CVE-2018-1121

2019-11-13 Thread Armin Kuster
From: Ross Burton This CVE is about race conditions in 'ps' which make it unsuitable for security audits. As these race conditions are unavoidable ps shouldn't be used for security auditing, so this isn't a valid CVE. Signed-off-by: Ross Burton Signed-off-by: Richard Purdie Signed-off-by: Adr

[OE-core] [zeus 07/31] libsndfile1: whitelist CVE-2018-13419

2019-11-13 Thread Armin Kuster
From: Ross Burton This is a memory leak that nobody else can replicate and has been rejected by upstream. Signed-off-by: Ross Burton Signed-off-by: Richard Purdie Signed-off-by: Adrian Bunk Signed-off-by: Anuj Mittal --- meta/recipes-multimedia/libsndfile/libsndfile1_1.0.28.bb | 4 1 f

[OE-core] [zeus 08/31] libpam: set CVE_PRODUCT

2019-11-13 Thread Armin Kuster
From: Ross Burton Signed-off-by: Ross Burton Signed-off-by: Richard Purdie Signed-off-by: Adrian Bunk Signed-off-by: Anuj Mittal --- meta/recipes-extended/pam/libpam_1.3.1.bb | 2 ++ 1 file changed, 2 insertions(+) diff --git a/meta/recipes-extended/pam/libpam_1.3.1.bb b/meta/recipes-exten

[OE-core] [zeus 10/31] libsdl2: fix race when building in parallel

2019-11-13 Thread Armin Kuster
From: Anuj Mittal Signed-off-by: Anuj Mittal --- ...heck-for-build-dir-when-building-version-.patch | 45 ++ meta/recipes-graphics/libsdl2/libsdl2_2.0.10.bb| 1 + 2 files changed, 46 insertions(+) create mode 100644 meta/recipes-graphics/libsdl2/libsdl2/0001-configure

[OE-core] [zeus 11/31] pseudo: Drop static linking to sqlite3

2019-11-13 Thread Armin Kuster
From: Richard Purdie Back in 2010[1] we made pseudo statically link against sqlite3. Since then the world has changed, pseudo now has separate processes for the database in the server and the client and they have separate linking commands. Also, whilst there were concerns about needing specific

[OE-core] [zeus 12/31] file: fix CVE-2019-18218

2019-11-13 Thread Armin Kuster
From: Ross Burton Signed-off-by: Ross Burton Signed-off-by: Richard Purdie Signed-off-by: Armin Kuster --- .../file/file/CVE-2019-18218.patch | 55 ++ meta/recipes-devtools/file/file_5.37.bb| 3 +- 2 files changed, 57 insertions(+), 1 deletion(

[OE-core] [zeus 09/31] libgcrypt: fix CVE-2019-13627

2019-11-13 Thread Armin Kuster
From: Trevor Gamblin Backport two fixes for CVE-2019-13627 from upstream to zeus. Signed-off-by: Trevor Gamblin Signed-off-by: Anuj Mittal --- ...dsa-ecdsa-Fix-use-of-nonce-use-larger-one.patch | 128 + ...-ecc-Add-mitigation-against-timing-attack.patch | 70 +++

[OE-core] [zeus 13/31] file: run test suite when building natively

2019-11-13 Thread Armin Kuster
From: Ross Burton As we apply the same patches to native and target builds of file, we can verify that the patches are not breaking by executing the test suite during the build of file-native. Signed-off-by: Ross Burton Signed-off-by: Richard Purdie Signed-off-by: Armin Kuster --- meta/recip

[OE-core] [zeus 14/31] sudo: Fix fetching sources

2019-11-13 Thread Armin Kuster
From: Ferry Toth It looks like https://www.sudo.ws/download.html changed certificate and directory structure. This breaks fetching sources. Signed-off-by: Ferry Toth Signed-off-by: Ross Burton Signed-off-by: Armin Kuster --- meta/recipes-extended/sudo/sudo_1.8.27.bb | 2 +- 1 file changed, 1

[OE-core] [zeus 15/31] mdadm: fix do_package failed when changed local.conf but not cleaned

2019-11-13 Thread Armin Kuster
From: Changqing Li reproduce steps: 1. add DISTRO_FEATURE_append = 'usrmerge' in local.conf 2. bitbake mdadm --success 3. remove DISTRO_FEATURE_append = 'usrmerge' from local.conf 4. bitbake mdadm -- failed when do_package it is not proper to change source Makefile during do_install by sed, fix

[OE-core] [zeus 19/31] qemu-helper-native: showing help shouldn't be an error

2019-11-13 Thread Armin Kuster
From: Ross Burton Displaying a help message if help was requested isn't an error. Signed-off-by: Ross Burton Signed-off-by: Armin Kuster --- meta/recipes-devtools/qemu/qemu-helper/tunctl.c | 14 -- 1 file changed, 8 insertions(+), 6 deletions(-) diff --git a/meta/recipes-devtools

[OE-core] [zeus 17/31] cve-check: ensure all known CVEs are in the report

2019-11-13 Thread Armin Kuster
From: Ross Burton CVEs that are whitelisted or were not vulnerable when there are version comparisons were not included in the report, so alter the logic to ensure that all relevant CVEs are in the report for completeness. Signed-off-by: Ross Burton Signed-off-by: Armin Kuster --- meta/classe

[OE-core] [zeus 21/31] linux-yocto/4.19: update to v4.19.78

2019-11-13 Thread Armin Kuster
From: Bruce Ashfield Updating linux-yocto/4.19 to the latest korg -stable release that comprises the following commits: 58fce2064530 Linux 4.19.78 5b0446c8e0a8 9p/cache.c: Fix memory leak in v9fs_cache_session_get_cookie d85bc11a6894 kexec: bail out upon SIGKILL when allocating memor

[OE-core] [zeus 18/31] qemu-helper-native: add missing option to getopt() call

2019-11-13 Thread Armin Kuster
From: Ross Burton Noticed by -Wall. Signed-off-by: Ross Burton Signed-off-by: Armin Kuster --- meta/recipes-devtools/qemu/qemu-helper/tunctl.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta/recipes-devtools/qemu/qemu-helper/tunctl.c b/meta/recipes-devtools/qemu/qemu

[OE-core] [zeus 20/31] qemu-helper-native: pass compiler flags

2019-11-13 Thread Armin Kuster
From: Ross Burton Pass all of the compiler and linker flags so the build is correctly configured. Signed-off-by: Ross Burton Signed-off-by: Armin Kuster --- meta/recipes-devtools/qemu/qemu-helper-native_1.0.bb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta/recipes-de

[OE-core] [zeus 16/31] ltp: Fix overcommit_memory failure

2019-11-13 Thread Armin Kuster
From: He Zhe Backport a patch from upstream to fix the following runtime failure. mem.c:814: INFO: set overcommit_memory to 0 overcommit_memory.c:213: FAIL: alloc passed, expected to fail Signed-off-by: He Zhe Signed-off-by: Ross Burton Signed-off-by: Armin Kuster --- ...memory-update-for-m

[OE-core] [zeus 24/31] selftest: skip virgl test on centos 7 entirely

2019-11-13 Thread Armin Kuster
From: Alexander Kanavin With the sdl frontend, qemu isn't able to even boot fully, so let's skip the test early. Signed-off-by: Alexander Kanavin Signed-off-by: Ross Burton Signed-off-by: Armin Kuster --- meta-selftest/lib/oeqa/runtime/cases/virgl.py | 5 - meta/lib/oeqa/selftest/cases/r

[OE-core] [zeus 26/31] patch: the CVE-2019-13638 fix also handles CVE-2018-20969

2019-11-13 Thread Armin Kuster
From: Ross Burton Signed-off-by: Ross Burton Signed-off-by: Richard Purdie Signed-off-by: Armin Kuster --- .../patch/0001-Invoke-ed-directly-instead-of-using-the-shell.patch| 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/meta/recipes-devtools/patch/patch/0001-Invo

[OE-core] [zeus 22/31] linux-yocto/5.2: update to v5.2.20

2019-11-13 Thread Armin Kuster
From: Bruce Ashfield Updating linux-yocto/5.2 to the latest korg -stable release that comprises the following commits: 56fd0c9f5473 Linux 5.2.20 6f375cee0394 vfs: set fs_context::user_ns for reconfigure fbad63fcf7f8 9p/cache.c: Fix memory leak in v9fs_cache_session_get_cookie 237

[OE-core] [zeus 25/31] recipeutils-test: use a small dependency in the dummy recipe

2019-11-13 Thread Armin Kuster
From: Ross Burton recipeutils-test has virtual/libx11 as a DEPENDS, but this will cause errors if the recipe is built in an environment without x11 in DISTRO_FEATURES. This dependency isn't actually used for anything so we could remove it, but to save updating the test cases too just swap virtua

[OE-core] [zeus 23/31] cve-check: failure to parse versions should be more visible

2019-11-13 Thread Armin Kuster
From: Ross Burton Signed-off-by: Armin Kuster --- meta/classes/cve-check.bbclass | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/meta/classes/cve-check.bbclass b/meta/classes/cve-check.bbclass index f87bcc9..1c8b222 100644 --- a/meta/classes/cve-check.bbclass +++ b/meta/

[OE-core] [zeus 30/31] initscripts/sysfs.sh: Mount /sys/firmware/efi/efivars when possible

2019-11-13 Thread Armin Kuster
From: Haris Okanovic Without this change, efibootmgr is unable to recover BootOrder if lost during a previous write operation, e.g. exceeded storage capacity. This is problematic using EFI to manage boot flow from Linux (E.g. via RAUC). https://www.kernel.org/doc/Documentation/filesystems/efivar

[OE-core] [zeus 29/31] libtirpc: create the symbol link for rpc header files

2019-11-13 Thread Armin Kuster
From: Zhixiong Chi Since the Sun RPC is deprecated in glibc, the rpc header files are not provided any more, but it allows alternative RPC implementations, such as TIRPC or rpcsvc-proto, to be used. So we create the symbol link for rpc header files for tirpc to be more compatible with the glibc

[OE-core] [zeus 31/31] pseudo: Add statx support to fix fedora30 issues

2019-11-13 Thread Armin Kuster
From: Richard Purdie Modern distros (e.g. fedora30) are starting to use the new statx() syscall through the newly exposed glibc wrapper function in software like coreutils (e.g. the ls command). Add support to intercept this to pseudo. Signed-off-by: Richard Purdie Signed-off-by: Armin Kuster

[OE-core] [zeus 27/31] linux-firmware: update packaging for brcm files

2019-11-13 Thread Armin Kuster
From: Samuli Piippo Add new package for bcm4366c and include available NVRAM config files into the corrent bcm* packages. Signed-off-by: Samuli Piippo Signed-off-by: Richard Purdie Signed-off-by: Armin Kuster --- .../linux-firmware/linux-firmware_20190815.bb | 18 +++---

[OE-core] [zeus 28/31] rm_work: Promote do_image_qa stamps to setscene versions

2019-11-13 Thread Armin Kuster
From: Jacob Kroon [ YOCTO #13212 ] Suggested-by: Romuald Jeanne Signed-off-by: Jacob Kroon Signed-off-by: Richard Purdie Signed-off-by: Armin Kuster --- meta/classes/rm_work.bbclass | 9 + 1 file changed, 9 insertions(+) diff --git a/meta/classes/rm_work.bbclass b/meta/classes/rm_w

[OE-core] [PATCH] cve-check: fetch CVE data once at a time instead of in a single call

2019-11-13 Thread Ross Burton
This code used to construct a single SQL statement that fetched the NVD data for every CVE requested. For recipes such as the kernel where there are over 2000 CVEs to report this can hit limits in older sqlite releases and the query fails with "sqlite3.OperationalError: too many SQL variables". A

[OE-core] [PATCH v2] cve-check: fetch CVE data once at a time instead of in a single call

2019-11-13 Thread Ross Burton
This code used to construct a single SQL statement that fetched the NVD data for every CVE requested. For recipes such as the kernel where there are over 2000 CVEs to report this can hit the variable count limit and the query fails with "sqlite3.OperationalError: too many SQL variables". The defa

Re: [OE-core] pthreads should rdepend on libgcc

2019-11-13 Thread Ross Burton
On 13/11/2019 15:04, Mark Hatle wrote: This is because the implementation of __pthread_exit() in glibc calls pthread_cancel() which leads to pthread_cancel_init() being called in which said shared object is being loaded with dlopen(). When this fails, the program aborts with the following error m

[OE-core] OEDeM minutes clarification regarding stable branch update frequency

2019-11-13 Thread akuster808
Hello, Reading through the 2019 OEDeM minutes, I saw a statement regarding a more regular update frequency on the stable branches. Based on Richard's response I could not tell if it is regarding merge frequency  to mainline or more dot releases? Since I was not present at the meeting, can someone

[OE-core] ✗ patchtest: failure for cve-check: fetch CVE data once at a time instead of in a single call

2019-11-13 Thread Patchwork
== Series Details == Series: cve-check: fetch CVE data once at a time instead of in a single call Revision: 1 URL : https://patchwork.openembedded.org/series/21124/ State : failure == Summary == Thank you for submitting this patch series to OpenEmbedded Core. This is an automated response. Se

Re: [OE-core] [oe] OEDeM minutes clarification regarding stable branch update frequency

2019-11-13 Thread Mikko.Rapeli
On Wed, Nov 13, 2019 at 07:48:34AM -0800, akuster808 wrote: > Hello, > > Reading through the 2019 OEDeM minutes, I saw a statement regarding a > more regular update frequency on the stable branches. Based on Richard's > response I could not tell if it is regarding merge frequency  to > mainline or

[OE-core] ✗ patchtest: failure for cve-check: fetch CVE data once at a time instead of in a single call (rev2)

2019-11-13 Thread Patchwork
== Series Details == Series: cve-check: fetch CVE data once at a time instead of in a single call (rev2) Revision: 2 URL : https://patchwork.openembedded.org/series/21124/ State : failure == Summary == Thank you for submitting this patch series to OpenEmbedded Core. This is an automated resp

Re: [OE-core] fetcher uses wrong SRCREV for class-native

2019-11-13 Thread Richard Purdie
On Wed, 2019-11-13 at 06:00 -0800, Andre McCurdy wrote: > With the following test recipe, foo.bb: > > LICENSE = "CLOSED" > PV .= "+git${SRCPV}" > SRCREV = "015b0cdce1a0abb68ab99510e7fc8d2f77e8ec77" > SRCREV_class-native = "fc3e8f717779cabcbe583cac304308eaad5f1648" > SRC_URI = "git://gith

Re: [OE-core] fetcher uses wrong SRCREV for class-native

2019-11-13 Thread Richard Purdie
On Wed, 2019-11-13 at 16:21 +, Richard Purdie wrote: > On Wed, 2019-11-13 at 06:00 -0800, Andre McCurdy wrote: > > With the following test recipe, foo.bb: > > > > LICENSE = "CLOSED" > > PV .= "+git${SRCPV}" > > SRCREV = "015b0cdce1a0abb68ab99510e7fc8d2f77e8ec77" > > SRCREV_class-native

Re: [OE-core] fetcher uses wrong SRCREV for class-native

2019-11-13 Thread Andre McCurdy
On Wed, Nov 13, 2019 at 8:23 AM Richard Purdie wrote: > > On Wed, 2019-11-13 at 16:21 +, Richard Purdie wrote: > > On Wed, 2019-11-13 at 06:00 -0800, Andre McCurdy wrote: > > > With the following test recipe, foo.bb: > > > > > > LICENSE = "CLOSED" > > > PV .= "+git${SRCPV}" > > > SRCREV

Re: [OE-core] [PATCH] report-error.bbclass: replace angle brackets with < and >

2019-11-13 Thread Khem Raj
On Tue, 2019-11-12 at 16:32 +0800, changqing...@windriver.com wrote: > From: Changqing Li > > when we have below content in local.conf or auto.conf: > BUILDHISTORY_COMMIT_AUTHOR ?= "Khem Raj " > send-error-report will fail with "HTTP Error 500: OK" > > error-report-web do rudimentary check on al

[OE-core] [PATCH v3] cve-check: fetch CVE data once at a time instead of in a single call

2019-11-13 Thread Ross Burton
This code used to construct a single SQL statement that fetched the NVD data for every CVE requested. For recipes such as the kernel where there are over 2000 CVEs to report this can hit the variable count limit and the query fails with "sqlite3.OperationalError: too many SQL variables". The defa

[OE-core] ✗ patchtest: failure for cve-check: fetch CVE data once at a time instead of in a single call (rev3)

2019-11-13 Thread Patchwork
== Series Details == Series: cve-check: fetch CVE data once at a time instead of in a single call (rev3) Revision: 3 URL : https://patchwork.openembedded.org/series/21124/ State : failure == Summary == Thank you for submitting this patch series to OpenEmbedded Core. This is an automated resp

[OE-core] How to set up custom layer correctly

2019-11-13 Thread Ankur Tyagi
Hi, I have a custom layer for custom board based upon am335x-evm and custom images. I have a master layer called "my-custom-layer" which has three sub-layers - my-custom-distro : custom distro based upon TI's 'arago' distro, Qt and other s/w recipe appends - my-custom-image : custom images, packa

Re: [OE-core] pthreads should rdepend on libgcc

2019-11-13 Thread Bartosz Golaszewski
śr., 13 lis 2019 o 16:04 Mark Hatle napisał(a): > > > > On 11/13/19 2:34 AM, Bartosz Golaszewski wrote: > > This isn't a patch as I'm not sure how to fix the right way it but it > > seems to my that every program that calls pthread_exit() indirectly > > rdepends on libgcc_s.so.1 being installed in

[OE-core] [PATCH] icecc-create-env: Use OE patchelf in SDK

2019-11-13 Thread Joshua Watt
The Icecream environment creation script runs when the SDK is installed and uses patchelf to fix up executables. Rather than rely on the host system to provided patchelf (which often can be older versions that produce buggy executables), mark the OE version of patchelf as a dependency of icecc-crea

Re: [OE-core] [PATCH 1/1] cdrtools-native: Don't set uid/gid during install

2019-11-13 Thread Ross Burton
On 12/11/2019 22:31, Paul Barker wrote: +++ b/meta/recipes-devtools/cdrtools/cdrtools-native/0001-Don-t-set-uid-gid-during-install.patch ERROR: cdrtools-native-3.01a31+really3.01-r0 do_fetch: Fetcher failure: Unable to find file file://0001-Don-t-set-uid-gid-during-install.patch anywhere. Th

Re: [OE-core] [PATCH 1/1] cdrtools-native: Don't set uid/gid during install

2019-11-13 Thread Paul Barker
On Wed, 13 Nov 2019, at 21:28, Ross Burton wrote: > On 12/11/2019 22:31, Paul Barker wrote: > > +++ > > b/meta/recipes-devtools/cdrtools/cdrtools-native/0001-Don-t-set-uid-gid-during-install.patch > > ERROR: cdrtools-native-3.01a31+really3.01-r0 do_fetch: Fetcher failure: > Unable to find file f

Re: [OE-core] [PATCH] icecc-create-env: Use OE patchelf in SDK

2019-11-13 Thread Ross Burton
On 13/11/2019 21:24, Joshua Watt wrote: +RDEPENDS_${PN}_class-nativesdk = "patchelf" Should that be nativesdk-patchelf? Should we just have it in RDEPENDS for all classes? Ross -- ___ Openembedded-core mailing list Openembedded-core@lists.openembe

Re: [OE-core] [PATCH] icecc-create-env: Use OE patchelf in SDK

2019-11-13 Thread Joshua Watt
On 11/13/19 3:44 PM, Ross Burton wrote: On 13/11/2019 21:24, Joshua Watt wrote: +RDEPENDS_${PN}_class-nativesdk = "patchelf" Should that be nativesdk-patchelf?  Should we just have it in RDEPENDS for all classes? I don't think it can be in -native due because that will create circular dep

Re: [OE-core] [PATCH] icecc-create-env: Use OE patchelf in SDK

2019-11-13 Thread Ross Burton
On 13/11/2019 21:47, Joshua Watt wrote: I don't think it can be in -native due because that will create circular dependencies. The script explicitly looks for the patchelf-uninative to break the dependency for that case. I suppose it could also be for class-target... but I not sure how you woul

Re: [OE-core] pthreads should rdepend on libgcc

2019-11-13 Thread Richard Purdie
On Wed, 2019-11-13 at 22:03 +0100, Bartosz Golaszewski wrote: > śr., 13 lis 2019 o 16:04 Mark Hatle > napisał(a): > > On 11/13/19 2:34 AM, Bartosz Golaszewski wrote: > > > This isn't a patch as I'm not sure how to fix the right way it > > > but it > > > seems to my that every program that calls pt

Re: [OE-core] pthreads should rdepend on libgcc

2019-11-13 Thread Khem Raj
On Wed, Nov 13, 2019 at 7:50 AM Ross Burton wrote: > > On 13/11/2019 15:04, Mark Hatle wrote: > >> This is because the implementation of __pthread_exit() in glibc calls > >> pthread_cancel() which leads to pthread_cancel_init() being called in > >> which said shared object is being loaded with dlo

Re: [OE-core] pthreads should rdepend on libgcc

2019-11-13 Thread Khem Raj
On Wed, Nov 13, 2019 at 12:34 AM Bartosz Golaszewski wrote: > > This isn't a patch as I'm not sure how to fix the right way it but it > seems to my that every program that calls pthread_exit() indirectly > rdepends on libgcc_s.so.1 being installed in the system (at least when > using glibc). > > T

[OE-core] [PATCH] distro_features_check: expand with MACHINE_FEATURES and COMBINED_FEATURES, rename

2019-11-13 Thread Denys Dmytriyenko
From: Denys Dmytriyenko Besides checking DISTRO_FEATURES for required or conflicting features, being able to check MACHINE_FEATURES and/or COMBINED_FEATURES may also be useful at times. Signed-off-by: Denys Dmytriyenko --- ...atures_check.bbclass => features_check.bbclass} | 65 +++

Re: [OE-core] [PATCH 04/20] OEQA: update ltp runtimes to use new structure

2019-11-13 Thread Mittal, Anuj
Hi Armin On Mon, 2019-11-11 at 20:33 -0800, Armin Kuster wrote: > # LTP runtime tests > @OETestDepends(['ssh.SSHTest.test_ssh']) > @OEHasPackage(["ltp"]) > @@ -111,8 +34,10 @@ class LtpTest(LtpTestBase): > @OETestDepends(['ltp.LtpTest.test_ltp_help']) > def test_ltp_groups

Re: [OE-core] [PATCH] distro_features_check: expand with MACHINE_FEATURES and COMBINED_FEATURES, rename

2019-11-13 Thread Khem Raj
On Wed, Nov 13, 2019 at 5:30 PM Denys Dmytriyenko wrote: > > From: Denys Dmytriyenko > > Besides checking DISTRO_FEATURES for required or conflicting features, > being able to check MACHINE_FEATURES and/or COMBINED_FEATURES may also > be useful at times. changing the class name will be disruptiv

Re: [OE-core] [PATCH] distro_features_check: expand with MACHINE_FEATURES and COMBINED_FEATURES, rename

2019-11-13 Thread Denys Dmytriyenko
On Wed, Nov 13, 2019 at 06:52:28PM -0800, Khem Raj wrote: > On Wed, Nov 13, 2019 at 5:30 PM Denys Dmytriyenko wrote: > > > > From: Denys Dmytriyenko > > > > Besides checking DISTRO_FEATURES for required or conflicting features, > > being able to check MACHINE_FEATURES and/or COMBINED_FEATURES may

Re: [OE-core] [PATCH] distro_features_check: expand with MACHINE_FEATURES and COMBINED_FEATURES, rename

2019-11-13 Thread Khem Raj
On Wed, Nov 13, 2019 at 6:56 PM Denys Dmytriyenko wrote: > > On Wed, Nov 13, 2019 at 06:52:28PM -0800, Khem Raj wrote: > > On Wed, Nov 13, 2019 at 5:30 PM Denys Dmytriyenko wrote: > > > > > > From: Denys Dmytriyenko > > > > > > Besides checking DISTRO_FEATURES for required or conflicting feature

Re: [OE-core] [PATCH 04/20] OEQA: update ltp runtimes to use new structure

2019-11-13 Thread akuster808
On 11/13/19 5:53 PM, Mittal, Anuj wrote: > Hi Armin > > On Mon, 2019-11-11 at 20:33 -0800, Armin Kuster wrote: >> # LTP runtime tests >> @OETestDepends(['ssh.SSHTest.test_ssh']) >> @OEHasPackage(["ltp"]) >> @@ -111,8 +34,10 @@ class LtpTest(LtpTestBase): >> @OETestDepends(['l

[OE-core] [PATCH] boost: fix build for x32

2019-11-13 Thread Anuj Mittal
Commit: d336110b94 boost: update to 1.67.0 dropped the patch that ensured boost doesn't over-ride the architecture flags set by us resulting in errors: | build/tmp/work/x86_64_x32-poky-linux-gnux32/boost/1.69.0-r0/recipe-sysroot/usr/include/bits/long-double.h:44:10: fatal error: bits/long-doubl

[OE-core] [PATCH 2/2] libva-utils: upgrade 2.5.0 -> 2.6.0.pre1

2019-11-13 Thread Naveen Saini
Release details can be found here: https://github.com/intel/libva-utils/releases/tag/2.6.0.pre1 Removed the patch which is not required anymore Signed-off-by: Naveen Saini --- ...ple-only-when-X11-backend-is-enabled.patch | 35 --- ...ils_2.5.0.bb => libva-utils_2.6.0.pre1.bb} |

[OE-core] [PATCH 1/2] libva: upgrade 2.5.0 -> 2.6.0.pre1

2019-11-13 Thread Naveen Saini
Details can be found here: https://github.com/intel/libva/releases/tag/2.6.0.pre1 Signed-off-by: Naveen Saini --- .../libva/{libva_2.5.0.bb => libva_2.6.0.pre1.bb} | 7 +++ 1 file changed, 3 insertions(+), 4 deletions(-) rename meta/recipes-graphics/libva/{libva_2.5.0.bb => libva_2

Re: [OE-core] [PATCH] distro_features_check: expand with MACHINE_FEATURES and COMBINED_FEATURES, rename

2019-11-13 Thread Nicolas Dechesne
On Thu, Nov 14, 2019 at 4:01 AM Khem Raj wrote: > > On Wed, Nov 13, 2019 at 6:56 PM Denys Dmytriyenko wrote: > > > > On Wed, Nov 13, 2019 at 06:52:28PM -0800, Khem Raj wrote: > > > On Wed, Nov 13, 2019 at 5:30 PM Denys Dmytriyenko wrote: > > > > > > > > From: Denys Dmytriyenko > > > > > > > > B

  1   2   >