Re: [OE-core] [PATCH] xserver-xorg: 21.1.1 -> 21.1.3

2022-01-07 Thread Richard Purdie
On Fri, 2022-01-07 at 23:19 +0800, kai wrote: > From: Kai Kang > > Upgrade xserver-xorg from 21.1.1 to 21.1.3. It fixes CVE-2021-4008, > CVE-2021-4009, CVE-2021-4010, CVE-2021-4011 in 21.1.2. > > Adjust indent as well. > > Signed-off-by: Kai Kang > --- > .../{xserver-xorg_21.1.1.bb => xserver

Re: [OE-core] [RFC PATCH 2/3] kernel.bbclass: remove do_strip() method

2022-01-07 Thread Richard Purdie
On Fri, 2022-01-07 at 13:24 -0800, Saul Wold wrote: > Move the do_strip() functionality to a more common location in the > package split_and_strip_files() flow. This makes it possible for the > extended packaging data to be generated correctly for the kernel and > kernel modules. The KERNEL_IMAGE_S

Re: [OE-core] [PATCH] classes: Only allow network in existing network accessing code

2022-01-07 Thread Richard Purdie
On Fri, 2022-01-07 at 23:15 +, Richard Purdie via lists.openembedded.org wrote: > Use the newly added network task flag against tasks where network > access is expected. This is do_fetch, do_checkuri, do_testimage, do_testsdk > and do_testsdkext. > > We can't disable networking in sstate tasks

[OE-core] [PATCH] classes: Only allow network in existing network accessing code

2022-01-07 Thread Richard Purdie
Use the newly added network task flag against tasks where network access is expected. This is do_fetch, do_checkuri, do_testimage, do_testsdk and do_testsdkext. We can't disable networking in sstate tasks due to sstate downloads and also so we can report hash equivalence to the server so network a

[OE-core] [RFC PATCH 2/3] kernel.bbclass: remove do_strip() method

2022-01-07 Thread Saul Wold
Move the do_strip() functionality to a more common location in the package split_and_strip_files() flow. This makes it possible for the extended packaging data to be generated correctly for the kernel and kernel modules. The KERNEL_IMAGE_STRIP_EXTRA_SECTIONS is reused in the runstrip() part of pac

[OE-core] [RFC PATCH 1/3] create-spdx: Add kernel work-shared source

2022-01-07 Thread Saul Wold
Since the kernel source is stored in work-shared, we need to add it to the search path so the kernel and kernel-modules source code can be found correctly. Signed-off-by: Saul Wold --- meta/classes/create-spdx.bbclass | 6 +- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/meta/

[OE-core] [RFC PATCH 0/3] Extend create-spdx to build kernel spdx info

2022-01-07 Thread Saul Wold
This set of changes moves the kernel:do_strip() functionality to the packaging code related to split_and_strip_files(). The code checks the KENREL_IMAGE_STRIP_EXTRA_SECTIONS for the kernel specific path. This also needs to strip out the "/usr/src/kernel" path since the kernel uses work-shared, whi

[OE-core] [RFC PATCH 3/3] package: Add support for kernel stripping

2022-01-07 Thread Saul Wold
This moves the KERNEL_IMAGE_STRIP_EXTRA_SECTIONS from kernel.bbclass to the split_and_strip_files() flow. Since the multiprocess_launch is used here the variable needs to be passed as an argument. Since is_elf() understands kernel modules there is no need to keep a seperate list for kernmodules or

Re: [OE-core] [PATCH v2] libsdl2: Fix build when libunwind is not used

2022-01-07 Thread Alexander Kanavin
Thanks :) Alex On Fri, 7 Jan 2022 at 20:23, Khem Raj wrote: > clang provides libunwind.h and cmake adds a check to > find libunwind when this header is detected, which was > not the case with automake. The check however is expecting > specific unwinder implementation which provides libunwind-ge

[OE-core] [PATCH v2] libsdl2: Fix build when libunwind is not used

2022-01-07 Thread Khem Raj
clang provides libunwind.h and cmake adds a check to find libunwind when this header is detected, which was not the case with automake. The check however is expecting specific unwinder implementation which provides libunwind-generic solib, this is not a standard library that all implementations wil

[OE-core] [PATCH] xserver-xorg: 21.1.1 -> 21.1.3

2022-01-07 Thread kai
From: Kai Kang Upgrade xserver-xorg from 21.1.1 to 21.1.3. It fixes CVE-2021-4008, CVE-2021-4009, CVE-2021-4010, CVE-2021-4011 in 21.1.2. Adjust indent as well. Signed-off-by: Kai Kang --- .../{xserver-xorg_21.1.1.bb => xserver-xorg_21.1.3.bb} | 6 +++--- 1 file changed, 3 insertions(+),

[OE-core] [hardknott][PATCH] webkitgtk: fix fix CVE-2021-42762

2022-01-07 Thread kai
From: Kai Kang Backport and rebase patch to fix CVE-2021-42762 for webkitgtk 2.30.5. CVE: CVE-2021-42762 Ref: * https://bugs.webkit.org/show_bug.cgi?id=231479#c8 Signed-off-by: Kai Kang --- .../webkit/webkitgtk/CVE-2021-42762.patch | 468 ++ meta/recipes-sato/webkit/webki

Re: [OE-core][PATCH] qemu.bbclass: drop OLDEST_KERNEL reference

2022-01-07 Thread Matt Madison
On Fri, Jan 7, 2022 at 4:56 AM Richard Purdie wrote: > > On Fri, 2022-01-07 at 12:51 +, Richard Purdie via lists.openembedded.org > wrote: > > On Fri, 2022-01-07 at 04:36 -0800, Matt Madison wrote: > > > On Fri, Jan 7, 2022 at 3:19 AM Richard Purdie > > > wrote: > > > > > > > > On Wed, 2021-1

Re: [OE-core] [PATCH v2] libsdl2: Move to CMake build

2022-01-07 Thread Richard Purdie
On Tue, 2022-01-04 at 16:11 +0100, Andreas Müller wrote: > Signed-off-by: Andreas Müller > --- > v1->v2: > * Fix '==' typo - Thanks Jacob! > * remove autotools patch > > .../libsdl2/libsdl2/more-gen-depends.patch| 60 --- > .../libsdl2/libsdl2_2.0.18.bb

[OE-core] [PATCH] libsdl2: Fix X11 configure options

2022-01-07 Thread Richard Purdie
We're seeing various failures where the X11 headers are found on the native system but not all libraries are present and hence autoconfiguration of the X11 subcomponents fails. We don't list any of these X11 subcomponents as a dependency so disable them by default. Configuration and dependencies c

[OE-core] [PATCH 2/2] gtk-doc/meson: Fix typos

2022-01-07 Thread Richard Purdie
Fix a couple of function name typos copy and pasted between the classes. Signed-off-by: Richard Purdie --- meta/classes/gtk-doc.bbclass | 2 +- meta/classes/meson.bbclass | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/meta/classes/gtk-doc.bbclass b/meta/classes/gtk-doc.

[OE-core] [PATCH 1/2] allarch: Fix interaction with qemu class

2022-01-07 Thread Richard Purdie
The qemu class declares functions which are architecture specific. If a user such as meson is used in an allarch recipe, this leads to sstate which is machine specific. To fix this, remove the architecture specific part, since there are no binaries in allarch classes, this change shouldn't break a

Re: [OE-core][PATCH] qemu.bbclass: drop OLDEST_KERNEL reference

2022-01-07 Thread Richard Purdie
On Fri, 2022-01-07 at 12:51 +, Richard Purdie via lists.openembedded.org wrote: > On Fri, 2022-01-07 at 04:36 -0800, Matt Madison wrote: > > On Fri, Jan 7, 2022 at 3:19 AM Richard Purdie > > wrote: > > > > > > On Wed, 2021-12-15 at 12:16 -0800, Matt Madison wrote: > > > > which is introducing

Re: [OE-core][PATCH] qemu.bbclass: drop OLDEST_KERNEL reference

2022-01-07 Thread Richard Purdie
On Fri, 2022-01-07 at 04:36 -0800, Matt Madison wrote: > On Fri, Jan 7, 2022 at 3:19 AM Richard Purdie > wrote: > > > > On Wed, 2021-12-15 at 12:16 -0800, Matt Madison wrote: > > > which is introducing task hash changes for some > > > allarch package builds, and should no longer > > > be needed w

Re: [OE-core][PATCH] qemu.bbclass: drop OLDEST_KERNEL reference

2022-01-07 Thread Matt Madison
On Fri, Jan 7, 2022 at 3:19 AM Richard Purdie wrote: > > On Wed, 2021-12-15 at 12:16 -0800, Matt Madison wrote: > > which is introducing task hash changes for some > > allarch package builds, and should no longer > > be needed with recent versions of qemu. > > > > Signed-off-by: Matt Madison > >

Re: [OE-core][PATCH] qemu.bbclass: drop OLDEST_KERNEL reference

2022-01-07 Thread Richard Purdie
On Wed, 2021-12-15 at 12:16 -0800, Matt Madison wrote: > which is introducing task hash changes for some > allarch package builds, and should no longer > be needed with recent versions of qemu. > > Signed-off-by: Matt Madison > --- > meta/classes/qemu.bbclass | 2 +- > 1 file changed, 1 insertio

[OE-core] [PATCH] Revert "qemu.bbclass: drop OLDEST_KERNEL reference"

2022-01-07 Thread Richard Purdie
This patch was merged on the basis that it wasn't needed with recent versions of qemu. That isn't true and has been showen to cause failures for aarch64 on centos7 hosts. Revert the patch as we'll need a different solution. This reverts commit 94b371e1c9e3cea787d70d6d7a09f7d3d69a30aa. --- meta/cl

Re: [OE-core] [PATCH][RFC] cve-check: add lockfile to task

2022-01-07 Thread Konrad Weihmann
On 07.01.22 10:48, Konrad Weihmann wrote: this should prevent running into the very rare error sqlite3.OperationalError: attempt to write a readonly database It's also possible that check_same_thread (that defaults to True ) in the sqlite3.connect causes this (see https://docs.python.org/3/li

[OE-core] [PATCH][RFC] cve-check: add lockfile to task

2022-01-07 Thread Konrad Weihmann
this should prevent running into the very rare error sqlite3.OperationalError: attempt to write a readonly database As highlighted by https://www.sqlite.org/faq.html#q5 it is likely that the adapter won't allow use multiple exec calls at the same time. So it's best to prevent multiple accesses at