summaryrefslogtreecommitdiffstats
AgeCommit message (Collapse)Author
2019-05-07squashfs-tools: set CVE_PRODUCTChenQi/cve_productsChen Qi
Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
2019-05-07flac: also add flac to CVE_PRODUCTChen Qi
flac uses both 'flac' and 'libflac' as cve product. Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
2019-05-04bitbake: HEADER: Drop itRichard Purdie
We don't really need a header boilerplate now the header is simplified, drop it. (Bitbake rev: 9b4a9e5459db5f443fcffbdc499e12f09970e709) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-05-04bitbake: bitbake: Strip old editor directives from file headersRichard Purdie
There are much better ways to handle this and most editors shouldn't need this in modern times, drop the noise from the files. Its not consitently applied anyway. (Bitbake rev: 5e43070e3087d09aea2f459b033d035c5ef747d0) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-05-04bitbake: bitbake: Drop duplicate license boilerplace textRichard Purdie
With the introduction of SPDX-License-Identifier headers, we don't need a ton of header boilerplate in every file. Simplify the files and rely on the top level for the full licence text. (Bitbake rev: 695d84397b68cc003186e22f395caa378b06bc75) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-05-04bitbake: bitbake: Add initial pass of SPDX license headers to source codeRichard Purdie
This adds the SPDX-License-Identifier license headers to the majority of our source files to make it clearer exactly which license files are under. The bulk of the files are under GPL v2.0 with one found to be under V2.0 or later, some under MIT and some have dual license. There are some files which are potentially harder to classify where we've imported upstream code and those can be handled specifically in later commits. The COPYING file is replaced with LICENSE.X files which contain the full license texts. (Bitbake rev: ff237c33337f4da2ca06c3a2c49699bc26608a6b) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-05-03meta-poky: remove obsolete DISTRO_FEATURES_LIBCRoss Burton
(From meta-yocto rev: 2d548e8f5f2eaf0b6ae39d01e612284e47ec0899) Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-05-03uboot-sign: Fix build when UBOOT_DTB_BINARY is emptyAlex Kiernan
When UBOOT_DTB_BINARY is empty and because the code now changes directory into ${B}, the test for the existence becomes `[ -f ]` which succeeds and subsequently the install fails. Reorder the code so it's clear that UBOOT_DTB_BINARY empty is an expected configuration and then quote UBOOT_DTB_BINARY everywhere so no one trips over this again. Fixes: bacb59079eb6 ("uboot-sign: add support for different u-boot configurations") (From OE-Core rev: e79f0db0745625b35dd83483747e486d08eebfde) Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-05-03opkg: fix ptest packaging when OPKGLIBDIR == libdirMartin Jansa
there is small issue with ptest packaging in cases where OPKGLIBDIR is set to /usr/lib. Then all ptest files get packaged in libopkg instead of opkg-ptest and correct QA error is triggered: ERROR: QA Issue: /usr/lib/opkg/ptest/tests/opkgcl.py contained in package libopkg requires /usr/bin/python3, but no providers found in RDEPENDS_libopkg? [file-rdeps] # $FILES_libopkg # set /jenkins/mjansa/build-webos-master/oe-core/meta/recipes-devtools/opkg/opkg_0.4.0.bb:62 # "${libdir}/*.so.* ${OPKGLIBDIR}/opkg/" FILES_libopkg="/usr/lib/*.so.* /usr/lib/opkg/" # $FILES_opkg-ptest [2 operations] # set /jenkins/mjansa/build-webos-master/oe-core/meta/classes/ptest.bbclass:9 # "${PTEST_PATH}" # rename from FILES_${PN}-ptest data.py:117 [expandKeys] # "${PTEST_PATH}" # pre-expansion value: # "${PTEST_PATH}" FILES_opkg-ptest="/usr/lib/opkg/ptest" # $PACKAGES [4 operations] # set /jenkins/mjansa/build-webos-master/oe-core/meta/conf/bitbake.conf:292 # "${PN}-src ${PN}-dbg ${PN}-staticdev ${PN}-dev ${PN}-doc ${PN}-locale ${PACKAGE_BEFORE_PN} ${PN}" # set /jenkins/mjansa/build-webos-master/oe-core/meta/conf/documentation.conf:314 # [doc] "The list of packages to be created from the recipe." # prepend /jenkins/mjansa/build-webos-master/oe-core/meta/classes/ptest.bbclass:20 # "${@bb.utils.contains('PTEST_ENABLED', '1', '${PN}-ptest', '', d)}" # prepend /jenkins/mjansa/build-webos-master/oe-core/meta/recipes-devtools/opkg/opkg_0.4.0.bb:60 # "libopkg" # pre-expansion value: # "libopkg ${@bb.utils.contains('PTEST_ENABLED', '1', '${PN}-ptest', '', d)} ${PN}-src ${PN}-dbg ${PN}-staticdev ${PN}-dev ${PN}-doc ${PN}-locale ${PACKAGE_BEFORE_PN} ${PN}" PACKAGES="libopkg opkg-ptest opkg-src opkg-dbg opkg-staticdev opkg-dev opkg-doc opkg-locale opkg" The easiest fix should be to reorder PACKAGES (the _prepends) so that ${PN}-ptest is prepended later -> ends before libopkg). (From OE-Core rev: e329f1a9ad7e68575912345ec7c18c12f5971998) Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-05-03image: call systemctl preset-all for imagesAlex Kiernan
Rather than rely on systemd's default invocation of preset-all at runtime, we pre-populate the symlink tree as part of of the image. This is done late so any overrides of presets during rootfs construction should already have happened. Whilst we don't strictly need this for the read-write root case, it avoids boot time churn; for read-only root we have to do it here. (From OE-Core rev: a57678a076109c42fbdf7531e90ff4491b387d53) Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-05-03systemctl-native: Rewrite in Python supporting preset-all and maskAlex Kiernan
Rewrite systemctl-native in Python so that extending/testing it is easier. Now that the systemd class sets up service presets instead of actively enabling services, the 'enable' and 'disable' subcommands for systemctl are not actually used anywhere. As such, we can remove these to make sure that nobody inadvertently introduces new uses of them. This implementation covers `preset-all` and `mask` which are the only options used in the current code, but should be readily extensible to other commands. We use `preset-all` at image construction time to populate the symlinks used by systemd. (From OE-Core rev: 86f5a2383692ac1ab01dce534c1a5c5f32ec4b35) Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-05-03systemd: create preset files instead of installing in imageJonas Bonn
At first boot, systemd will create the /etc/systemd/system directory from service preset files. As such, for a normal, writable /etc (writable rootfs), there is no need to set up this directory at image creation time. This patch changes the systemd machinery to create preset files and to rely on systemd to do the service enablement. This breaks the read-only-rootfs case; there's a fix for this in a follow-up patch. (From OE-Core rev: 154abbc3296eded11d2bbe3e102470b6986d42cd) Signed-off-by: Jonas Bonn <jonas@norrbonn.se> Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-05-03systemd-conf: simplify creation of machine-specific configurationAlex Kiernan
The configuration files that systemd installs are just skeletons detailing the available options and their default values. The recommended means of changing the configuration is to provide snippets in configuration directories. For example, journald.conf settings are best set in /usr/lib/system.d/journald.conf.d/ and can be overridden by the user by providing overriding snippets in /etc/systemd/journald.conf.d/. The systemd-conf package is just providing machine-specific overrides for some systemd defaults. This patch restores the installation of config files by systemd and reduces systemd-conf to just providing the config snippets in /usr/lib/systemd/*.conf.d. This simpilfies the systemd-conf recipe considerably since it now just sets up a couple of text files and doesn't even need access to the systemd source anymore. License-Update: configuration snippets licensing is independent of systemd licensing (From OE-Core rev: 3150253898babce70333376d22090b56b4a70bfb) Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-05-03systemd: do not create machine-idJonas Bonn
There is no reason to have an emtpy machine-id as part of the systemd package. Either: i) the filesystem is writable and the file will be created automatically; or ii) the filesystem is read-only, in which case the empty machine-id file should be created as part of the read-only-rootfs tweaks. (From OE-Core rev: 76444b63e614baea33c044851a5859f6d1e69729) Signed-off-by: Jonas Bonn <jonas@norrbonn.se> Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-05-03systemd: don't build firstboot by defaultJonas Bonn
The firstboot service prompts the user for information about the host at first boot. Systemd determines whether or not a boot is a "first boot" by the existence of the file /etc/machine-id. Since oe-core always includes this file (it is part of the systemd package), the firstboot service never runs so this service is being built but never run. A follow-up patch to this one will remove the machine-id from the systemd build and allow it to be created automatically by systemd at "first boot". With that patch, we don't want the firstboot service to suddenly start being invoked and presenting a prompt to the user. With this patch, the firstboot service becomes a PACKAGECONFIG option that the user must actively select. (From OE-Core rev: 6f0072d34107f4d351c79b43ce71bf4489428a34) Signed-off-by: Jonas Bonn <jonas@norrbonn.se> Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-05-03populate_sdk_base: provide options to set sdk typeChangqing Li
Current sdk type is tar.xz, but for mingw sdk, since we have symlink under the sdk folder, 7zip which used to extract tar.xz cannot handle it, refer 7zip upstream bug: https://sourceforge.net/p/sevenzip/discussion/45797/thread/c71d6b96/ so add option for usr can select the sdk type. Add override SDK_ARCHIVE_TYPE, default type is tar.xz, and also support type zip. user want to use zip type can set SDK_ARCHIVE_TYPE to zip. (From OE-Core rev: 57a33048a89a422cfdc986d3489c67b2d297e1e7) Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-05-03dbus: fix ptest failureChangqing Li
1. since one bug in run-ptest, testcase test-bus have never been actually run (althrough it's result is PASS). After commit 0828850, test-bus can actually run but it did not install: test-service, test-shell-service, test-segfault, and dbus-daemon-launch-helper-test Add the configure flag: --enable-embedded-tests to generate binary dbus-daemon-launch-helper-test, then install them so that test-bus will now pass. 2. fix testcase test-dbus-daemon failed we enable --enable-verbose-mode in recipe dbus-test, and don't enable it in recipe dbus. This will make below test code get unexpect result of have_verbose and assert. disable --enable-verbose-mode for recipe dbus-test to fix it. #ifdef DBUS_ENABLE_STATS g_assert_true (have_stats); #else g_assert_false (have_stats); #endif [RP: Since the new test is slow dbus moves to the slow ptest list] (From OE-Core rev: 2ea676072d7edd06ef9e886827c0d61d574ca377) Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-05-03qemu: Upgrade from 3.1.0 to 4.0.0Alistair Francis
This commit upgrade QEMU to the latest 4.0.0 release. - The COPYING.LIB file has changed SHA to: "Synchronize the LGPL 2.1 with the version from gnu.org" - SDL 1.2 has been removed, along with the --with-sdlabi command line arg - The backported patches have been removed - Al the other patches have been refreshed and the numbering has been updated (From OE-Core rev: fed2a0f37a76732cd3de1b127d6902fb16dd4e05) Signed-off-by: Alistair Francis <alistair.francis@wdc.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-05-02bitbake.conf: Account for older versions of bitbakeJoshua Watt
Older versions of bitbake (prior to 1.42) don't expose the BB_UNIHASH variable which is being used by sstate. For compatibility with these older versions of bitbake, set BB_UNIHASH to BB_TASKHASH (which is the value it should be for non-hash equivalent aware signature generators). if bitbake hasn't already set it. [YOCTO #13314] (From OE-Core rev: de1782b23f8a98df3b42cb57bbcdff690bfa2343) Signed-off-by: Joshua Watt <JPEWhacker@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-05-02elfutils: Fix ptest compile failures on muslRichard Purdie
(From OE-Core rev: 0f3bb3541a01701820b52ee31b41d4a24ddd1d43) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-05-02elfutils: ptest fixesRichard Purdie
Changes to improve the way ptest runs: a) Use the standalone test mode which allows the tests to be run in their 'installled' locations on target (but not any of the standalone build pieces) b) We want to use the binaries from their installed locations so the run-subr script needs tweaking to run them like that. The rpath conditional isn't enough since we want the second entry in the case statement. c) Add an oecheck make target which we can use to build the test binaries we need d) Add missing -ptest package dependencies (needs coreutils, ${PN}, ${PN}-binutils, make) e) Don't add RPATH to the test binaries, we don't need that f) Add some extra parameters to the make command to ensure tests run correctly Before: ----------------------------------------------------- Recipe | Passed | Failed | Skipped | Time(s) ----------------------------------------------------- elfutils | 31 | 4 | 168 | 6 ----------------------------------------------------- After: ----------------------------------------------------- Recipe | Passed | Failed | Skipped | Time(s) ----------------------------------------------------- elfutils | 173 | 25 | 5 | 15 ----------------------------------------------------- (From OE-Core rev: 7ff76b86299289a4a5741f910399d95232f64f32) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-05-02mpg123: port to use libsdl2Ross Burton
libsdl 1.2 is dead upstream, so change mpg123 to use libsdl2. Luckily the APIs that mpg123 use haven't changed, so this is just a matter of changing the pkg-config name. (From OE-Core rev: 1aa947a60b0eb31c367b1e9818218ee74d388eea) Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-05-02vim: Update to 8.1.1240Tom Rini
This brings us to the current version of vim. As part of this we need to work-around a locale issue that upstream has exposed. We do not support fully / correctly the certain locales. Attempting to use these with msgfmt in order to update the ".desktop" files exposes this problem and leads to the compile failing. (From OE-Core rev: ffa4b0abcab2ed4e4f642b4b3140aa6095938422) Signed-off-by: Tom Rini <trini@konsulko.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-05-02vim: Rework to not rely on relative directoriesTom Rini
The vim recipe has all of the code inside the "src" subdirectory but other things we rely on, such as the license file in a subdirectory relative to the src. However, as there is a top-level "configure" script that moves us down to the src directory, we can rework the recipe to be overall more simple and regularly laid out if we use that. (From OE-Core rev: 2eb66c1ff55a3fe9785967f45f1cb6a27df44f93) Signed-off-by: Tom Rini <trini@konsulko.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-05-01oeqa/ssh: Avoid unicode decode exceptionsRichard Purdie
This code really needs to be rewritten to not split potential multibyte characters, for now work around it to avoid exceptions like: File "/home/pokybuild/yocto-worker/qa-extras2/build/meta/lib/oeqa/core/target/ssh.py", line 211, in run data = reader.read(1024, 4096) File "/usr/lib64/python3.6/codecs.py", line 503, in read newchars, decodedbytes = self.decode(data, self.errors) UnicodeDecodeError: 'utf-8' codec can't decode byte 0x92 in position 0: invalid start byte (From OE-Core rev: 17e87510378f2729208a8262695f28e1efe5eb4c) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-05-01bitbake: build: Disable warning about dependent tasks for nowRichard Purdie
This breaks with rm_work so disable the warning until we find a better solution (and change the test accordingly too). (Bitbake rev: 93e94c06baf013e3d072465a55bddd1fe61c0772) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-05-01bitbake: build: Ensure warning for invalid task dependencies is usefulRichard Purdie
WARNING: elfutils: dependent task do_rm_work does not exist is much less useful than WARNING: elfutils: dependent task do_rm_work for do_deploy does not exist (Bitbake rev: e034c6f75e3d7730ff16a8d1bd0cba03beda0af8) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-05-01bitbake: knotty: Implement console 'keepalive' outputRichard Purdie
CI systems like jenkins and buildbot will timeout applications which haven't had console output in some period of time. Add 'keepalive' output to knotty which gives output every 5000s if not other output was made and tasks are still running. This reduces some problems encountered with our CI testing. (Bitbake rev: aa4f31e5741dd98acec73f16f6028e52f4c22d6f) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-05-01qemux86: Allow higher tunesJoshua Watt
Allows the qemux86 machine to be tuned all the way up to an i7 if desired by overriding DEFAULTTUNE. The default if unspecified is left at i586. This can be useful for enabling advanced processor features like SSE if desired or required by various packages. (From OE-Core rev: 0be64e54a0e67472eaff9c794a33d76971c9b1a3) Signed-off-by: Joshua Watt <JPEWhacker@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-05-01qemu: split out vte into seperate PACKAGECONFIGAndreas Müller
* vte-native requires host compiler supporting c++17. Some distros we support ship comilers not supporting c++17 currently. * oe-self-test 'test_testimage_virgl_gtk' sets PACKAGECONFIG_append_pn-qemu-system-native = " gtk+". With vte enabled by 'gtk+'-config, build fails on hosts with ancient compilers [1]. * Alexander Kanavin did some tests: Without vte in PACKAGECONFIG there is still a working terminal available with reduced functionality [2]. * Users wanting 'full' terminal in system-qemu back should add PACKAGECONFIG_append_pn-qemu-system-native = " vte" in their local.conf. The idea of this patch was coming from Ross Burton - thanks! [1] http://lists.openembedded.org/pipermail/openembedded-core/2019-April/281637.html [2] http://lists.openembedded.org/pipermail/openembedded-core/2019-April/281727.html (From OE-Core rev: 78e160ac4b72bc3cfbdd89492c711a318585328b) Signed-off-by: Andreas Müller <schnitzeltony@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-05-01maintainers.inc: take over as perl maintainerAlexander Kanavin
Ross requested; I agreed :-) (From OE-Core rev: 3c5a9ddab11d4b093d95f3a1e6398d14eba0794e) Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-05-01python3-pycairo: update to 1.18.1Alexander Kanavin
Switch over to meson build, as it does not attempt to install headers into /usr/share and pkg-config files into /usr/share/$libdir. (From OE-Core rev: 0e2858bd7d6f013bb31b64552a9ea5873c4f7ced) Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-04-30bitbake: knotty: Pretty print task elapsed timeJacob Kroon
A task's runtime is currently printed in seconds. Change it to include minutes and hours for easier reading. (Bitbake rev: c593ae5ec9fecd4bde823948024e4d56314a60ce) Signed-off-by: Jacob Kroon <jacob.kroon@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-04-30bitbake: build: Add verbnote to shell log commandsStefan Kral
Add the missing bbverbnote fifo cmd for logging from shell. (Bitbake rev: cf11fdb30c405e1a4521a7299f84816c0e13a881) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-04-30bitbake: tests/parse.py: Add testcase for addtask and deltaskRobert Yang
(Bitbake rev: 4ac388646624e08bef848b560fa52deacf2ff4fb) Signed-off-by: Robert Yang <liezhi.yang@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-04-30bitbake: build.py: check dependendent task for addtaskRobert Yang
The following command is incorrect, but was ignored silently, that may suprise users: addtask task after task_not_existed This patch can check and warn for it. It would be better to also check "before" tasks, but there is no easier way to do it. [YOCTO #13282] (Bitbake rev: b1ad36169c2ad189d84c53c707b66c12d5ff812f) Signed-off-by: Robert Yang <liezhi.yang@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-04-30bitbake: BBHandler: Fix addtask and deltaskRobert Yang
The following commands are not supported, but they were ignored silently, that may suprise users: * addtask task1 task2 task2 is ignored * addtask task1 before task2 before task3 Should be: addtask task1 before task2 task3 * addtask task1 after task2 after task3 Should be: addtask task1 after task2 task3 * deltask task1 task2 task2 is ignore This patch can check and warn for them. [YOCTO #13282] (Bitbake rev: 675689aa7cc7287efecf8ef775ca2059369167f1) Signed-off-by: Robert Yang <liezhi.yang@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-04-30linux-yocto/5.0: update TCP patch to mainline versionBruce Ashfield
Updating the SRCREVs to drop our temporary workaround for TCP timeout issues and switch to the mainline version: tcp: add sanity tests in tcp_add_backlog() Revert "tcp: fix issues relaed to implement coalescing on backlog queue" (From OE-Core rev: 07db18609ce2b868d4ff5eb6cf2128bf6eb6d682) Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-04-30staging: add ${datadir}/gtk-doc/html to the sysroot blacklistRoss Burton
When api-documentation is enabled the GNOME stack builds API documentation. As ${datadir} is in SYSROOT_DIRS this documentation is in the sysroot but is never used, wasting time and space. Add ${datadir}/gtk-doc/html to the blacklist so that the generated documentation isn't in the sysroot. Note that we don't blacklist all of ${datadir}/gtk-doc because gtk-doc itself installs files there which are needed to use gtk-doc. (From OE-Core rev: 11c87952c9a71036119d509ce09f17e352e4c6d8) Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-04-30nettle: fix ptest failureMingli Yu
Rework dlopen-test.patch to fix below dlopen-test failure: # cd /usr/lib64/nettle/ptest # ./run-ptest dlopen failed: /usr/lib/libnettle.so: cannot open shared object file: No such file or directory ./run-ptest: line 8: 7607 Aborted "./$f" FAIL: dlopen-test As the test dlopen-test depends on libnettle.so which belongs to nettle-dev package, so add it to rdepends of nettle-ptest. (From OE-Core rev: 524fcf34128045f9f5726a1f1b8715a12b12ae7c) Signed-off-by: Mingli Yu <Mingli.Yu@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-04-30nettle: fix the Segmentation faultMingli Yu
The commit[8ac8fa8ee1 nettle: update to 3.4.1] add CFLAGS_append = " -std=c99" to silence the below error for native build: | ../nettle-3.4.1/rsa-sign-tr.c: In function 'sec_equal': | ../nettle-3.4.1/rsa-sign-tr.c:243:3: error: 'for' loop initial declarations are only allowed in C99 mode for (size_t i = 0; i < limbs; i++) ^ | ../nettle-3.4.1/rsa-sign-tr.c:243:3: note: use option -std=c99 or -std=gnu99 to compile your code | Makefile:263: recipe for target 'rsa-sign-tr.o' failed But the above change will trigger below Segmentation fault: # echo -n passwd| nettle-pbkdf2 -i 1 -l 16 salt [65534.886509] nettle-pbkdf2[708]: segfault at 1f594260 ip 00007f3332256998 sp 00007fff60d44410 error 4 in libnettle.so.6.5[7f3332244000+1d00] [65534.887525] Code: e8 6d db fe ff 44 01 6d 68 48 83 c4 08 5b 5d 41 5c 41 5d 41 5e 41 5f c3 66 2e 0f 1f 84 00 00 00 00 00 49 89 dc e9 68 ff f Segmentation fault So update the logic to CFLAGS_append = " -std=gnu99" to fix the issue. (From OE-Core rev: 91359a91b8c89dc5e1f3a946137204156c47a3af) Signed-off-by: Mingli Yu <Mingli.Yu@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-04-30libsdl: set CVE_PRODUCTChen Qi
(From OE-Core rev: 1f0cca19014fef24a359d400c96d178463b2760f) Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-04-30piglit: support build piglit without x11Changqing Li
* test PIGLIT_BUILD_GL_TESTS depend on glx library, so depend on x11, so respect the DISTRO_FEATURES, only enable it when x11 is enabled. * mesa-demos depend on libGL.so which is provide by recipe mesa, but when x11 is disabled, libGL.so is not generated. so we can only rdepend on this when x11 is enabled * add x11 PACKAGECONFIG to add correct config/depend/rdepend [YOCTO #6077] (From OE-Core rev: 2edf7a19598e10326603603dfa00ab91c9327e2d) Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-04-30waffle: supprt build waffle without x11Changqing Li
respect DISTRO_FEATURES to make waffle support different platform, gbm platform is supported by default. [YOCTO #6077] (From OE-Core rev: 37dc4ad4a87fb9042dc3e9bb389cedc8b5acadf7) Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-04-30dropbear: set CVE_PRODUCTChen Qi
(From OE-Core rev: 3c247a4a166cabf7ddfea403cf272b3fb4e00872) Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-04-30openssh: fix CVE-2018-20685, CVE-2019-6109, CVE-2019-6111Anuj Mittal
Also backport a patch to fix issues introduced by fix for CVE-2019-6109. (From OE-Core rev: 31b7485d8377c1c535d1878220bbc1d49dc5f13e) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-04-30binutils: fix CVE-2019-9074 CVE-2019-9075 CVE-2019-9076 CVE-2019-9077Anuj Mittal
(From OE-Core rev: 0e366eda53f6f440708531ed8cb2ac4941ca428f) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-04-30gdb: fix CVE-2017-9778Anuj Mittal
(From OE-Core rev: d8faa8974d08651dac42afa7a7e545a4c30d813e) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-04-30gcc: fix CVE-2018-18484Anuj Mittal
(From OE-Core rev: ac6af654f50aa6f3057dee0de806f5dfae10e4a8) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-04-29bitbake: bitbake: fetch2/git: git-lfs checkNaveen Saini
Build will fail if repository has lfs contents in absense of git-lfs tool on host. Build will pass if repository may or may not contains lfs content if host has git-lfs installed. [YOCTO #13198] (Bitbake rev: 3f2c2eb2f59707828bdcdd6414db837da8dc3b0e) Signed-off-by: Naveen Saini <naveen.kumar.saini@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>