Re: [OE-core][kirkstone][PATCH 1/1] ffmpeg: fix for CVE-2022-3341

2023-01-19 Thread Narpat Mali
Sure, Steve. Best Regards, Narpat From: Steve Sakoman Sent: Thursday, January 19, 2023 11:10:52 PM To: Mali, Narpat Cc: openembedded-core@lists.openembedded.org ; Polampalli, Archana ; G Pillai, Hari Subject: Re: [OE-core][kirkstone][PATCH 1/1] ffmpeg: fix

[OE-core][kirkstone][PATCH] openssl: fix CVE-2022-3996 double locking leads to denial of service

2023-01-19 Thread vkumbhar
From: Vivek Kumbhar Signed-off-by: Vivek Kumbhar --- .../openssl/openssl/CVE-2022-3996.patch | 43 +++ .../openssl/openssl_3.0.7.bb | 1 + 2 files changed, 44 insertions(+) create mode 100644

[OE-core][kirkstone 0/9] Pull request (cover letter only)

2023-01-19 Thread Steve Sakoman
The following changes since commit 4760fac939a6204e3cb7dcd3699cd9a2508f9dee: devtool: process local files only for the main branch (2023-01-12 04:56:26 -1000) are available in the Git repository at: https://git.openembedded.org/openembedded-core-contrib stable/kirkstone-next

Re: [OE-core] [PATCH 2/2] curl: enable nghttp2 for support HTTP2

2023-01-19 Thread Changqing Li
On 1/16/23 05:30, Alexandre Belloni wrote: CAUTION: This email comes from a non Wind River email account! Do not click links or open attachments unless you recognize the sender and know the content is safe. On 13/01/2023 16:04:42+0800, Changqing Li wrote: On 1/5/23 22:09, Alexandre Belloni

Re: [OE-core] [PATCH v2 1/3] binutils: Upgrade to 2.40 release

2023-01-19 Thread Khem Raj
On Thu, Jan 19, 2023 at 2:58 PM Luca Ceresoli wrote: > > Hi Khem, > > On Thu, 19 Jan 2023 08:52:09 -0800 > "Khem Raj" wrote: > > > On Thu, Jan 19, 2023 at 1:44 AM Luca Ceresoli > > wrote: > > > > > > Hi Khem, > > > > > > On Wed, 18 Jan 2023 20:27:22 -0800 > > > "Khem Raj" wrote: > > > > > > >

[OE-core] [PATCH v3 3/3] elfutils: Fix build with libcurl >= 7.87

2023-01-19 Thread Khem Raj
Signed-off-by: Khem Raj --- v2 -> v3: - rebase .../elfutils/elfutils_0.188.bb| 4 +- ...od-Fix-usage-of-deprecated-CURLINFO_.patch | 49 +++ ...t-Use-CURLOPT_PROTOCOLS_STR-for-libc.patch | 34 + 3 files changed, 85 insertions(+), 2 deletions(-)

[OE-core] [PATCH v3 2/3] binutils: Package libsframe

2023-01-19 Thread Khem Raj
libsframe is newly added in binutils 2.40 Signed-off-by: Khem Raj --- v1 -> v2: - Rebase v2 -> v3: - Rebase meta/recipes-devtools/binutils/binutils_2.40.bb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta/recipes-devtools/binutils/binutils_2.40.bb

[OE-core] [PATCH 3/3] ruby: Use C11 _Alignof to define ALIGN_OF when possible

2023-01-19 Thread Khem Raj
Signed-off-by: Khem Raj --- ...Alignof-to-define-ALIGN_OF-when-poss.patch | 52 +++ meta/recipes-devtools/ruby/ruby_3.2.0.bb | 1 + 2 files changed, 53 insertions(+) create mode 100644

[OE-core] [PATCH 1/3] lttng-tools: Switch to alternative upstream submitted patch

2023-01-19 Thread Khem Raj
Signed-off-by: Khem Raj --- ...pat-Define-off64_t-as-off_t-on-linux.patch | 75 ++- 1 file changed, 56 insertions(+), 19 deletions(-) diff --git a/meta/recipes-kernel/lttng/lttng-tools/0001-compat-Define-off64_t-as-off_t-on-linux.patch

[OE-core] [PATCH 2/3] libtirpc: Check if file exists before operating on it

2023-01-19 Thread Khem Raj
In some cases (e.g. mingw) this file may not be installed Signed-off-by: Khem Raj --- meta/recipes-extended/libtirpc/libtirpc_1.3.3.bb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta/recipes-extended/libtirpc/libtirpc_1.3.3.bb

Re: [OE-core] [PATCH] librsvg: Only enable the Vala bindings if GObject Introspection is enabled

2023-01-19 Thread Luca Ceresoli via lists.openembedded.org
Hi Peter, On Thu, 19 Jan 2023 10:29:26 +0100 "Luca Ceresoli via lists.openembedded.org" wrote: > Hello Peter, > > On Wed, 18 Jan 2023 22:22:22 + > "Peter Kjellerstedt" wrote: > > > > -Original Message- > > > From: Luca Ceresoli > > > Sent: den 18 januari 2023 17:22 > > > To:

Re: [OE-core] [PATCH v2 1/3] binutils: Upgrade to 2.40 release

2023-01-19 Thread Luca Ceresoli via lists.openembedded.org
Hi Khem, On Thu, 19 Jan 2023 08:52:09 -0800 "Khem Raj" wrote: > On Thu, Jan 19, 2023 at 1:44 AM Luca Ceresoli > wrote: > > > > Hi Khem, > > > > On Wed, 18 Jan 2023 20:27:22 -0800 > > "Khem Raj" wrote: > > > > > Signed-off-by: Khem Raj This version is failing too:

[OE-core] [PATCH v4] u-boot: Upgrade to 2023.01

2023-01-19 Thread Fabio Estevam
From: Fabio Estevam Upgrade to U-Boot 2023.01. Remove the two patches that are now upstream: e67f34f778ba ("riscv: support building double-float modules") 1dde977518f1 ("riscv: Fix build against binutils 2.38") And add a patch that fixes u-boot-tools build. Signed-off-by: Fabio Estevam ---

[oe-core][PATCHv2] gptfdisk: add follow-up patch to fix with current popt

2023-01-19 Thread Markus Volk
sgdisk still segfaults for some tasks (e.g 'sgdisk -v', 'sgdisk -V') Add a follow-up patch that fixes the issue. It was taken from Archlinux Signed-off-by: Markus Volk --- .../fdisk/gptfdisk/popt-1.19-follow-up.patch | 41 +++ meta/recipes-devtools/fdisk/gptfdisk_1.0.9.bb | 1

Re: [oe-core][PATCH] gptfdisk: add follow-up patch to fix with current popt

2023-01-19 Thread Markus Volk
Am Do, 19. Jan 2023 um 16:14:58 +0100 schrieb Alexander Kanavin : It’s not a backport as source comes from source forge. After registering on sourceforge, I found out that the original author had submitted this patch about half a year ago without receiving any comment so far. This reinforces

Re: [OE-core] [PATCH v3] u-boot: Upgrade to 2023.01

2023-01-19 Thread Otavio Salvador
Em qui., 19 de jan. de 2023 às 15:26, Fabio Estevam escreveu: > +++ b/meta/recipes-bsp/u-boot/u-boot_2023.01.bb > @@ -0,0 +1,5 @@ > +require u-boot-common.inc > +require u-boot.inc > + > +DEPENDS += "bc-native dtc-native python3-setuptools-native" > + > python3-setuptools-native has been

Re: [OE-core] [PATCH v2 1/3] binutils: Upgrade to 2.40 release

2023-01-19 Thread Khem Raj
On Thu, Jan 19, 2023 at 9:25 AM Jeff Law wrote: > > > On 1/18/23 21:27, Khem Raj wrote: > > Signed-off-by: Khem Raj > > --- > > v1 -> v2: > > - Fix build on mingw > > - Backport fix to build with --disable-gdb > [ ... ] > Note I think this is going to run afoul of grub2 mkimage. > Yes I am

[OE-core] [PATCH v3] u-boot: Upgrade to 2023.01

2023-01-19 Thread Fabio Estevam
From: Fabio Estevam Upgrade to U-Boot 2023.01. Remove the two patches that are now upstream: e67f34f778ba ("riscv: support building double-float modules") 1dde977518f1 ("riscv: Fix build against binutils 2.38") And add a patch that fixes u-boot-tools build. Signed-off-by: Fabio Estevam ---

Re: [oe-core][PATCH] gptfdisk: add follow-up patch to fix with current popt

2023-01-19 Thread Markus Volk
Am Do, 19. Jan 2023 um 18:33:35 +0100 schrieb Alexander Kanavin : no one expects you to produce a perfect patch and complete understanding of the issue in your head up-front. I really didn't find the git repository and thought they were still using subversion. But I have to admit that I

Re: [OE-core] [kirkstone][PATCH] glibc: explicit use the internal __time64_t type

2023-01-19 Thread Randy MacLeod
On 2023-01-18 23:04, Yu, Mingli via lists.openembedded.org wrote: From: Mingli Yu Backport a patch [1] to explicit use the internal __time64_t type to fix the issue that nscd wrongly cut /etc/hosts to be /hosts on 32bits system. Already covered by: [OE-core][kirkstone 7/9] glibc: stable 2.35

Re: [OE-core][kirkstone][PATCH 1/1] ffmpeg: fix for CVE-2022-3341

2023-01-19 Thread Steve Sakoman
On Thu, Jan 19, 2023 at 7:20 AM Narpat Mali wrote: > > avformat/nutdec: Add check for avformat_new_stream > Check for failure of avformat_new_stream() and propagate > the error code. > > Signed-off-by: Narpat Mali > --- > ...ec-Add-check-for-avformat_new_stream.patch | 67 +++

Re: [oe-core][PATCH] gptfdisk: add follow-up patch to fix with current popt

2023-01-19 Thread Alexander Kanavin
I sent oe-core patches upstream that aren't mine all the time. Sometimes I as well don't even understand them fully, and then I have upstream explain to me what's wrong with it or why is it not appropriate or poorly written. Or they rework it themselves. The primary goal is to engage the upstream

Re: [OE-core] [PATCH v2 1/3] binutils: Upgrade to 2.40 release

2023-01-19 Thread Jeff Law
On 1/18/23 21:27, Khem Raj wrote: Signed-off-by: Khem Raj --- v1 -> v2: - Fix build on mingw - Backport fix to build with --disable-gdb [ ... ] Note I think this is going to run afoul of grub2 mkimage. In binutils-2.40 the assembler for risc-v was changed to use CALL_PLT relocations rather

Re: [oe-core][PATCH] gptfdisk: add follow-up patch to fix with current popt

2023-01-19 Thread Markus Volk
I don't want to push this work to you. Just wanted to give a reason, why I'd rather dont like to do myself, at least for the next days. Have still plenty of work lying here and in fact I do this only for fun and thats what it still needs to be to give me reason. I'm not related to technical

[OE-core][kirkstone][PATCH 1/1] ffmpeg: fix for CVE-2022-3341

2023-01-19 Thread Narpat Mali
avformat/nutdec: Add check for avformat_new_stream Check for failure of avformat_new_stream() and propagate the error code. Signed-off-by: Narpat Mali --- ...ec-Add-check-for-avformat_new_stream.patch | 67 +++ .../recipes-multimedia/ffmpeg/ffmpeg_5.0.1.bb | 1 + 2 files

Re: [oe-core][PATCH] gptfdisk: add follow-up patch to fix with current popt

2023-01-19 Thread Alexander Kanavin
On Thu, 19 Jan 2023 at 16:27, Markus Volk wrote: > But its neither my patch nor am I familiar with sourceforge or the actual > issue with popt ... and I'm not keen on changing that. I think if the > gptfdisk maintainer wants to release a new version, he will be able to find > the patch on the

[OE-core] [PATCH] spirv-headers/spirv-tools: set correct branch name

2023-01-19 Thread Ross Burton
As of last week, the SPIRV repositories have renamed their master branches to main: https://github.com/KhronosGroup/SPIRV-Headers/issues/313 We could set branch=main, but the commits we're using are also on release branches so use those instead. Signed-off-by: Ross Burton ---

Re: [OE-core] [PATCH v2 1/3] binutils: Upgrade to 2.40 release

2023-01-19 Thread Khem Raj
On Thu, Jan 19, 2023 at 1:44 AM Luca Ceresoli wrote: > > Hi Khem, > > On Wed, 18 Jan 2023 20:27:22 -0800 > "Khem Raj" wrote: > > > Signed-off-by: Khem Raj > > --- > > v1 -> v2: > > - Fix build on mingw > > - Backport fix to build with --disable-gdb > > > >

[OE-core] [PATCH] systemd: add PACKAGECONFIG to select default compression format

2023-01-19 Thread Luca Bocassi
From: Luca Boccassi If multiple compression libraries are enabled, the format to use for compression is chosen implicitly, so if you want to compress with e.g. lz4 you cannot enable zstd, so you cannot read zstd-compressed journal files. This PACKAGECONFIGs allow to enable all compression

Re: [oe-core][PATCH] gptfdisk: add follow-up patch to fix with current popt

2023-01-19 Thread Markus Volk
Am Do, 19. Jan 2023 um 16:14:58 +0100 schrieb Alexander Kanavin : ck other patches to see the upstream situation and correct the status. But its neither my patch nor am I familiar with sourceforge or the actual issue with popt ... and I'm not keen on changing that. I think if the gptfdisk

Re: [oe-core][PATCH] gptfdisk: add follow-up patch to fix with current popt

2023-01-19 Thread Alexander Kanavin
No. If it can be submitted upstream, then you should do so. Alex On Thu 19. Jan 2023 at 16.16, Markus Volk wrote: > Am Do, 19. Jan 2023 um 16:14:58 +0100 schrieb Alexander Kanavin < > alex.kana...@gmail.com>: > > ck other patches to see the upstream situation and correct the status. > > > Then

Re: [oe-core][PATCH] gptfdisk: add follow-up patch to fix with current popt

2023-01-19 Thread Markus Volk
Am Do, 19. Jan 2023 um 16:14:58 +0100 schrieb Alexander Kanavin : ck other patches to see the upstream situation and correct the status. Then i guess the correct status would be pending ? -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#176146):

Re: [oe-core][PATCH] gptfdisk: add follow-up patch to fix with current popt

2023-01-19 Thread Alexander Kanavin
It’s not a backport as source comes from source forge. Please check other patches to see the upstream situation and correct the status. Alex On Thu 19. Jan 2023 at 14.20, Markus Volk wrote: > sgdisk still segfaults for some tasks (e.g 'sgdisk -v', 'sgdisk -V') > > Add a follow-up patch that

Re: [OE-core] [PATCH 1/3] insane: Improve patch warning/error handling

2023-01-19 Thread Ross Burton
On 19 Jan 2023, at 13:55, Bruce Ashfield via lists.openembedded.org wrote: > I'd prefer the upstream-status check to be disabled for meta-virtualization. > > This isn't something that I'm strictly enforcing, and not something that I > want to start strictly enforcing. With my meta-arm layer

Re: [OE-core] [PATCH 1/3] insane: Improve patch warning/error handling

2023-01-19 Thread Richard Purdie
On Thu, 2023-01-19 at 09:52 -0500, Bruce Ashfield wrote: > On Thu, Jan 19, 2023 at 9:40 AM Richard Purdie > wrote: > > > > On Thu, 2023-01-19 at 08:55 -0500, Bruce Ashfield wrote: > > > On Thu, Jan 19, 2023 at 4:57 AM Richard Purdie > > > wrote: > > > > > > > > Hi Anuj/Bruce/Jan-Simon/Scott, >

Re: [OE-core] [PATCH 1/3] insane: Improve patch warning/error handling

2023-01-19 Thread Bruce Ashfield
On Thu, Jan 19, 2023 at 9:40 AM Richard Purdie wrote: > > On Thu, 2023-01-19 at 08:55 -0500, Bruce Ashfield wrote: > > On Thu, Jan 19, 2023 at 4:57 AM Richard Purdie > > wrote: > > > > > > Hi Anuj/Bruce/Jan-Simon/Scott, > > > > > > Please see the links below. This patch, pending for master

Re: [OE-core] [PATCH 1/3] insane: Improve patch warning/error handling

2023-01-19 Thread Richard Purdie
On Thu, 2023-01-19 at 08:55 -0500, Bruce Ashfield wrote: > On Thu, Jan 19, 2023 at 4:57 AM Richard Purdie > wrote: > > > > Hi Anuj/Bruce/Jan-Simon/Scott, > > > > Please see the links below. This patch, pending for master triggers a > > few warnings in a few layers as there are a handful of

[OE-core][dunfell][PATCH] ffmpeg: Fix CVE-2022-3109

2023-01-19 Thread BINDU
From: Bhabu Bindu Add patch to fix CVE-2022-3109 Link: https://github.com/FFmpeg/FFmpeg/commit/656cb0450aeb73b25d7d26980af342b37ac4c568 Signed-off-by: Bhabu Bindu --- .../ffmpeg/ffmpeg/CVE-2022-3109.patch | 41 +++ .../recipes-multimedia/ffmpeg/ffmpeg_4.2.2.bb | 1 +

Re: [OE-core] [PATCH 1/3] insane: Improve patch warning/error handling

2023-01-19 Thread Bruce Ashfield
On Thu, Jan 19, 2023 at 4:57 AM Richard Purdie wrote: > > Hi Anuj/Bruce/Jan-Simon/Scott, > > Please see the links below. This patch, pending for master triggers a > few warnings in a few layers as there are a handful of patches with no > Upstream-Status present in them. > > I know this kind of

[oe-core][PATCH] gptfdisk: add follow-up patch to fix with current popt

2023-01-19 Thread Markus Volk
sgdisk still segfaults for some tasks (e.g 'sgdisk -v', 'sgdisk -V') Add a follow-up patch that fixes the issue. It was taken from Archlinux Signed-off-by: Markus Volk --- .../fdisk/gptfdisk/popt-1.19-follow-up.patch | 42 +++ meta/recipes-devtools/fdisk/gptfdisk_1.0.9.bb | 1

Re: [OE-core] [PATCH] meson: use TRANSLATED_TARGET_ARCH in cross builds

2023-01-19 Thread Richard Purdie
On Thu, 2023-01-19 at 15:10 +0300, Sergey Zhmylev wrote: > From: Sergei Zhmylev > > TARGET_ARCH for most of x86_64 machines sets additional > -march parameter in meson configuration, which is not supported > during build and several meson recipes fail. The patch makes > meson.bbclass use

Re: [OE-core] [PATCH] meson: use TRANSLATED_TARGET_ARCH in cross builds

2023-01-19 Thread Sergey Zhmylev
Accidentally I've sent an incomplete patch, please ignore. Sergei On Thu, 2023-01-19 at 15:10 +0300, Sergey Zhmylev wrote: > From: Sergei Zhmylev > > TARGET_ARCH for most of x86_64 machines sets additional > -march parameter in meson configuration, which is not supported > during build and

[OE-core] [PATCH] meson: use TRANSLATED_TARGET_ARCH in cross builds

2023-01-19 Thread Sergey Zhmylev
From: Sergei Zhmylev TARGET_ARCH for most of x86_64 machines sets additional -march parameter in meson configuration, which is not supported during build and several meson recipes fail. The patch makes meson.bbclass use TRANSLATED_TARGET_ARCH instead of TARGET_ARCH in order to properly set

[OE-core] OE Workshop in Brussels, February 6th - gentle reminder

2023-01-19 Thread Josef Holzmayr
Hello all you Open, Embedded, and even OpenEmbedded people out there! This is your gentle reminder that we are hosting an OE Workshop in Brussels on Monday, February 6th - the day after FOSDEM at Avenue Louise 523, 1050 Brussels, Belgium. Find a preliminary schedule at

Re: [OE-core] [PATCH 1/3] insane: Improve patch warning/error handling

2023-01-19 Thread Richard Purdie
Hi Anuj/Bruce/Jan-Simon/Scott, Please see the links below. This patch, pending for master triggers a few warnings in a few layers as there are a handful of patches with no Upstream-Status present in them. I know this kind of thing is annoying but it is probably worth starting to give the wider

Re: [OE-core] [PATCH 1/3] insane: Improve patch warning/error handling

2023-01-19 Thread Luca Ceresoli via lists.openembedded.org
Hello, On Thu, 19 Jan 2023 10:24:23 +0100 "Luca Ceresoli via lists.openembedded.org" wrote: > Hello Richard, > > On Wed, 18 Jan 2023 14:22:19 + > "Richard Purdie" wrote: > > > Currently, whilst patch errors or warnings are shown, the errors don't stop > > builds. > > The configuration

Re: [OE-core] [PATCH v2 1/3] binutils: Upgrade to 2.40 release

2023-01-19 Thread Luca Ceresoli via lists.openembedded.org
Hi Khem, On Wed, 18 Jan 2023 20:27:22 -0800 "Khem Raj" wrote: > Signed-off-by: Khem Raj > --- > v1 -> v2: > - Fix build on mingw > - Backport fix to build with --disable-gdb > > meta/conf/distro/include/tcmode-default.inc | 2 +- > .../{binutils-2.39.inc => binutils-2.40.inc} |22

[OE-core] [dunfell][PATCH] cve-check: write the cve manifest to IMGDEPLOYDIR

2023-01-19 Thread Jermain Horsman
From: Jermain Horsman When building an image cve_check_write_rootfs_manifest() would sometimes fail with a FileNotFoundError when writing the manifest.cve due to the parent directory (DEPLOY_DIR_IMAGE) not (yet) existing. The image task will provide the manifest in the deploy directory

Re: [OE-core] [PATCH] librsvg: Only enable the Vala bindings if GObject Introspection is enabled

2023-01-19 Thread Luca Ceresoli via lists.openembedded.org
Hello Peter, On Wed, 18 Jan 2023 22:22:22 + "Peter Kjellerstedt" wrote: > > -Original Message- > > From: Luca Ceresoli > > Sent: den 18 januari 2023 17:22 > > To: Peter Kjellerstedt > > Cc: openembedded-core@lists.openembedded.org; Richard Purdie > > > > Subject: Re: [OE-core]

Re: [OE-core] [PATCH 1/3] insane: Improve patch warning/error handling

2023-01-19 Thread Luca Ceresoli via lists.openembedded.org
Hello Richard, On Wed, 18 Jan 2023 14:22:19 + "Richard Purdie" wrote: > Currently, whilst patch errors or warnings are shown, the errors don't stop > builds. > The configuration isn't very configurable from WARN_QA and ERROR_QA either. > > This patch: > * Uses the standard mechanisms to

Re: [OE-core] Rust crate checksums

2023-01-19 Thread Alex Kiernan
On Thu, Jan 19, 2023 at 8:53 AM Alexander Kanavin wrote: > > I think Cargo.lock contains those checksums and that forces cargo to > verify them? Can you check that verification happens and fails when it > should by e.g. patching it to have bogus checksums? > Ah, yes... I'll check. > Alex > > On

Re: [OE-core] Rust crate checksums

2023-01-19 Thread Alexander Kanavin
I think Cargo.lock contains those checksums and that forces cargo to verify them? Can you check that verification happens and fails when it should by e.g. patching it to have bogus checksums? Alex On Thu, 19 Jan 2023 at 08:15, Alex Kiernan wrote: > > Unless I'm missing something, I just