summaryrefslogtreecommitdiffstats
AgeCommit message (Collapse)Author
2020-02-24qemu: Fix CVE-2020-1711Lee Chee Yang
see https://git.qemu.org/?p=qemu.git;a=commit;h=693fd2acdf14dd86c0bf852610f1c2cca80a74dc Signed-off-by: Lee Chee Yang <chee.yang.lee@intel.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-02-23toolchain-shar-extract: ignore timestamp on decompressJeremy Puhlman
Installing on centos7, which the extended version of the buildtools tarball is supposed to fix and with reproducable builds turned on, all the time stamps are for epoch. This results in the following output for every file: tar: ./sysroots/x86_64-pokysdk-linux/usr/include/c++/9.2.0/cstdalign: implausibly old time stamp 1969-12-31 16:00:00 tar: ./sysroots/x86_64-pokysdk-linux/usr/lib/libstdc++.so.6: implausibly old time stamp 1969-12-31 16:00:00 Ignore the timestamps during the uncompession step. Signed-off-by: Jeremy Puhlman <jpuhlman@mvista.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 319ca22ea4465c56c63730847378a7aee4f5935a) Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-02-23liberror-perl: upgrade 0.17028 -> 0.17029Tim Orling
Upstream release notes: " 0.17029 2020-01-28 - Rebuild for order of 'NAME' and 'VERSION' sections in the generated POD documentation (see 0.001004 in https://metacpan.org/changes/distribution/Pod-Weaver-PluginBundle-SHLOMIF ). - VERSION used to appear before NAME. " Signed-off-by: Tim Orling <timothy.t.orling@linux.intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit f4a520cc827187d83f2997614d893bba7d74a152) Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-02-23perl: Fix makefile race causing configuration differencesRichard Purdie
Add a missing makefile dependency which can cause differences in configuration (submitted upstream). [YOCTO #13800] Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit fe97845a45434902c5a994e253a127a462d7d3b4) Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-02-23perl: Fix encode module reproducibility issuesRichard Purdie
The code is encoding host compiler parameters into target builds. Avoid this for our target builds. This should resolve builds which aren't reproducible between hosts with different compilers. Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 71cdbf426e46e3ca1b5038f40e9f7ba958abc537) Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-02-23perl: fix failing ptestsAlexander Kanavin
Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit f1da6355f13e707b3ffa5025067e509e0120784d) [Fixup for zeus context] Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-02-23perl: improve reproducibilityRoss Burton
Occasionally the reproducibility selftest fails because perl-pod differs, specifically that the perltoc.pod file was sometimes missing modules. Debugging revealed that there are missing dependencies so there is a build race: building perltoc.pod from an clean build tree results in no modules being listed at all. A bug has been filed at https://github.com/arsv/perl-cross/issues/86 to solve this properly, but for now we can just delete perltoc.pod after make has finished and re-generate it. [ YOCTO #13726 ] Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 7e0f6c9ea4f824f29dc30c6631fd8039ebe83a0b) Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-02-23libmodule-build-perl: fix ptestsAlexander Kanavin
Particularly remove a broken detection of skipped tests (which was marking tests that actually passed), and install additional artefacts needed for testing. Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit dbbce0918617c21d0e43e9727d38372c22dff3dc) Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-02-23perl: install typemap and other extutils metadata as part of perl-coreAlexander Kanavin
Modules actually make use of these files, so they belong in perl-core other than perl-doc (the immediate failure was ptests for libmodule-build-perl failing). Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 829e8c49833e4cb8de5db869769eb492c827e8c9) Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-02-23perl: package Config.pm from arch directory into the main perl packageAlexander Kanavin
Otherwise, some modules such as libmodule-build-perl fail to work properly. Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit e4072d53a7fb4fbbdacce9a20968e71ef6cff307) Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-02-23perl: update to 5.30.1Alexander Kanavin
Drop fix-setgroup.patch as the upstream has fixed the issue. Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 45edc6d23e20f7634c50db71e419c7e3bb7f393e) [Bug fix only update] Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-02-23linux-yocto/5.2: update to v5.2.29Bruce Ashfield
Updating linux-yocto/5.2 to the latest korg -stable release that comprises the following commits: 928ea9c56927 Linux 5.2.29 4e41907620bc slip: Fix use-after-free Read in slip_open d11814f97a05 can: slcan: Fix use-after-free Read in slcan_open 01313dcf66e7 can: kvaser_usb: kvaser_usb_leaf: Fix some info-leaks to USB devices 7f006e58efc2 scsi: libsas: stop discovering if oob mode is disconnected 0e5c48d6b011 staging: comedi: usbduxfast: usbduxfast_ai_cmdtest rounding error d8b3d5fb8765 USB: serial: option: add support for Foxconn T77W968 LTE modules c4fe1d495f9c USB: serial: option: add support for DW5821e with eSIM support 4ac031b15d86 USB: serial: mos7840: fix remote wakeup 4d44a218aea6 USB: serial: mos7720: fix remote wakeup 3561f4d3242f USB: serial: mos7840: add USB ID to support Moxa UPort 2210 13a33fb9debe appledisplay: fix error handling in the scheduled work 0cd437d7c16b USB: chaoskey: fix error case of a timeout 2136119fde46 usb-serial: cp201x: support Mark-10 digital force gauge 3a71173a4a45 usbip: tools: fix fd leakage in the function of read_attr_usbip_status 726510907c68 USBIP: add config dependency for SGL_ALLOC 7dd553573bc5 media: mceusb: fix out of bounds read in MCE receiver buffer 1e4921f684ca media: imon: invalid dereference in imon_touch_event d482dfe2776a media: cxusb: detect cxusb_ctrl_msg error in query ab4952849dd8 media: b2c2-flexcop-usb: add sanity checking e2aa61cda115 media: uvcvideo: Fix error path in control parsing failure 115fa3afd4d1 cpufreq: Add NULL checks to show() and store() methods of cpufreq 767facdefa23 media: usbvision: Fix races among open, close, and disconnect ba90b62cb0bd media: usbvision: Fix invalid accesses after device disconnect 829b703e9706 media: vivid: Set vid_cap_streaming and vid_out_streaming to true 57f2b5c44f02 nfc: port100: handle command failure cleanly 5fc4dc967e06 ALSA: usb-audio: Fix NULL dereference at parsing BADD c938307a439a futex: Prevent robust futex exit race 8b0f13ee2b7b nbd: prevent memory leak 1bfd67a1c47b ARM: 8904/1: skip nomap memblocks while finding the lowmem/highmem boundary a634776bcd5e md/raid10: prevent access of uninitialized resync_pages offset 40c0b4538c8b Revert "dm crypt: use WQ_HIGHPRI for the IO and crypt workqueues" 53eaf5993eea ath9k_hw: fix uninitialized variable data 5a1b959a78ea ath10k: Fix a NULL-ptr-deref bug in ath10k_usb_alloc_urb_from_pipe 8b16c7096bc9 ath10k: Fix HOST capability QMI incompatibility ceee3b64b0b5 ath10k: restore QCA9880-AR1A (v1) detection 08c0402ed497 Bluetooth: Fix invalid-free in bcsp_close() c1ed057fbe33 drm/i915/userptr: Try to acquire the page lock around set_page_dirty() 5ec5ba44bd85 drm/i915/pmu: "Frequency" is reported as accumulated cycles c7ceeaf80706 drm/amd/powerplay: issue no PPSMC_MSG_GetCurrPkgPwr on unsupported ASICs 1c3fb0c8357e drm/amdgpu: disable gfxoff on original raven ccd9d21f783e drm/amdgpu: disable gfxoff when using register read interface 6e745cbc5051 mm/ksm.c: don't WARN if page is still mapped in remove_stable_node() 79194b4a342c mm/memory_hotplug: don't access uninitialized memmaps in shrink_zone_span() 01d151b7e74e virtio_balloon: fix shrinker count caae62219805 virtio_ring: fix return code on DMA mapping fails 272ed6b7ca4a virtio_console: allocate inbufs in add_port() only if it is needed abce58c3af15 nbd:fix memory leak in nbd_get_socket() 2601193dc253 tools: gpio: Correctly add make dependencies for gpio_utils 3608aa07bac2 gpio: max77620: Fixup debounce delays c6bf6af12a68 vhost/vsock: split packets to send using multiple buffers 95a617d1f70c net/mlx5: Update the list of the PCI supported devices febceda6db3f net/mlx5e: Do not use non-EXT link modes in EXT mode f8bddf0e192a net/mlx5e: Fix error flow cleanup in mlx5e_tc_tun_create_header_ipv4/6 e049e3c43308 taprio: don't reject same mqprio settings 8345d40b83bf ipv6/route: return if there is no fib_nh_gw_family 1edfc6649c92 net/tls: enable sk_msg redirect to tls socket egress 27845a1dd06b net/mlx5: Fix auto group size calculation ec6d299939c3 net/mlx5e: Fix set vf link state error flow bab144f2a957 net/mlxfw: Verify FSM error code translation doesn't exceed array size 3eb4c2e70dce sfc: Only cancel the PPS workqueue if it exists a03585b724bc net: sched: ensure opts_len <= IP_TUNNEL_OPTS_MAX in act_tunnel_key 285a19d8dde0 net/sched: act_pedit: fix WARN() in the traffic path 8e40158af458 net: rtnetlink: prevent underflows in do_setvfinfo() 1afad75b2dba net/mlx4_en: Fix wrong limitation for number of TX rings ce1291041c39 net/mlx4_en: fix mlx4 ethtool -N insertion 2a7ad86813a4 mlxsw: spectrum_router: Fix determining underlay for a GRE tunnel da957117e731 fbdev: Ditch fb_edid_add_monspecs 1f043415c4f5 arm64: uaccess: Ensure PAN is re-enabled after unhandled uaccess fault 0063e9b69796 mm/memory_hotplug: fix updating the node span d27074543286 mm/memory_hotplug: don't access uninitialized memmaps in shrink_pgdat_span() 62ca688436d3 block, bfq: deschedule empty bfq_queues not referred by any process 045a481acd16 slcan: Fix memory leak in error path 22bc38eae704 mmc: sdhci-of-at91: fix quirk2 overwrite 8505966cdc7e mm/page_io.c: do not free shared swap slots 349d5ccf8971 mm: hugetlb: switch to css_tryget() in hugetlb_cgroup_charge_cgroup() cb4df7d810ac mm: memcg: switch to css_tryget() in get_mem_cgroup_from_mm() eec30082ea78 mm: mempolicy: fix the wrong return value and potential pages leak of mbind c4b3eaf0585b iommu/vt-d: Fix QI_DEV_IOTLB_PFSID and QI_DEV_EIOTLB_PFSID macros 5a705e36d350 net: ethernet: dwmac-sun8i: Use the correct function in exit path 50d4170ffddd ntp/y2038: Remove incorrect time_t truncation f701a893aba0 ecryptfs_lookup_interpose(): lower_dentry->d_parent is not stable either 97dd5923ba23 ecryptfs_lookup_interpose(): lower_dentry->d_inode is not stable 3c130e6cddae x86/quirks: Disable HPET on Intel Coffe Lake platforms a0f63a47ab13 i2c: acpi: Force bus speed to 400KHz if a Silead touchscreen is present ca7d1676d537 IB/hfi1: Use a common pad buffer for 9B and 16B packets b8b6479e3cc9 IB/hfi1: Ensure full Gen3 speed in a Gen4 system 72ff837e69c5 IB/hfi1: TID RDMA WRITE should not return IB_WC_RNR_RETRY_EXC_ERR 3c1db8a639ac IB/hfi1: Calculate flow weight based on QP MTU for TID RDMA d2f5dd2fd992 IB/hfi1: Ensure r_tid_ack is valid before building TID RDMA ACK packet e88f0707f216 KVM: MMU: Do not treat ZONE_DEVICE pages as being reserved 9e35e5bc4a04 Input: synaptics-rmi4 - destroy F54 poller workqueue when removing 2eaf311ccd38 Input: synaptics-rmi4 - clear IRQ enables for F54 f05aacf5a7b9 Input: synaptics-rmi4 - do not consume more data than we have (F11, F12) 7e649c757a1a Input: synaptics-rmi4 - disable the relative position IRQ in the F12 driver 4b482d7281a6 Input: synaptics-rmi4 - fix video buffer size 74e0752ee79e cgroup: freezer: call cgroup_enter_frozen() with preemption disabled in ptrace_stop() a9cae67b7a20 Btrfs: fix log context list corruption after rename exchange operation 011e452b4d84 ALSA: usb-audio: not submit urb for stopped endpoint c7801593d92a ALSA: usb-audio: Fix missing error check at mixer resolution test ff24b83d0f73 dpaa2-eth: free already allocated channels on probe defer 21790068a579 tcp: remove redundant new line from tcp_event_sk_skb 364436976763 slip: Fix memory leak in slip_open error path b75c75d36816 net: usb: qmi_wwan: add support for Foxconn T77W968 LTE modules c8a648ae5f96 net/smc: fix fastopen for non-blocking connect() b392b2d28e58 net: gemini: add missed free_netdev 612aeedfe77d ipmr: Fix skb headroom in ipmr_get_route(). 5fa89b3526c5 ax88172a: fix information leak on short answers 609d02229b16 scsi: core: Handle drivers which set sg_tablesize to zero efa2c8c477dd x86/entry/32: Fix FIXUP_ESPFIX_STACK with user CR3 a0f6ee27e686 x86/pti/32: Calculate the various PTI cpu_entry_area sizes correctly, make the CPU_ENTRY_AREA_PAGES assert precise 60418beeefd7 selftests/x86/sigreturn/32: Invalidate DS and ES when abusing the kernel 777b0ee4fd79 selftests/x86/mov_ss_trap: Fix the SYSENTER test 07b7c6191853 x86/entry/32: Fix NMI vs ESPFIX 62433c16a282 x86/entry/32: Unwind the ESPFIX stack earlier on exception entry 4a2364594599 x86/entry/32: Move FIXUP_FRAME after pushing %fs in SAVE_ALL 0593a806b430 x86/entry/32: Use %ss segment where required 26ce03ac3327 x86/entry/32: Fix IRET exception f74d7e9547de x86/cpu_entry_area: Add guard page for entry stack on 32bit 41cb303e1436 x86/pti/32: Size initial_page_table correctly 2d2e7fe408eb x86/doublefault/32: Fix stack canaries in the double fault handler 1fd0ff871abe x86/xen/32: Simplify ring check in xen_iret_crit_fixup() 68ef02e30623 x86/xen/32: Make xen_iret_crit_fixup() independent of frame layout ef15170227e2 x86/stackframe/32: Repair 32-bit Xen PV 37880a369c68 x86/speculation: Fix redundant MDS mitigation message 459c71f82b48 x86/speculation: Fix incorrect MDS/TAA mitigation status c77d64c158c6 x86/insn: Fix awk regexp warnings 41bbdde13b43 x86: Use CONFIG_PREEMPTION 217d051d8efd x86/entry/32: Pass cr2 to do_async_page_fault() 1ecceee4c859 x86/entry/64: Prevent clobbering of saved CR2 value 8ccce28352fe x86/mm, tracing: Fix CR2 corruption 8873fea5f2d4 x86/entry/64: Update comments and sanity tests for create_gap 7801660649a0 x86/entry/64: Simplify idtentry a little 5d305a697f40 x86/entry/32: Simplify common_exception 216401f82bef x86/paravirt: Make read_cr2() CALLEE_SAVE bf8b9dd0d0bf x86/asm: Move native_write_cr0/4() out of line 222093f0acfd x86/pgtable/32: Fix LOWMEM_PAGES constant 7998b2c4801a x86/alternatives: Fix int3_emulate_call() selftest stack corruption e4a8155be9bd x86/ldt: Initialize the context lock for init_mm f07a9a3a9ad4 x86/alternatives: Add int3_emulate_call() selftest 29b042bbfab8 x86/stackframe/32: Allow int3_emulate_push() 22334402db00 x86/stackframe/32: Provide consistent pt_regs ed6c118e4451 x86/stackframe, x86/ftrace: Add pt_regs frame annotations 7159ebba55a4 x86/stackframe, x86/kprobes: Fix frame pointer annotations ba09efb8b35b x86/stackframe: Move ENCODE_FRAME_POINTER to asm/frame.h c2f632a32c05 x86/entry/32: Clean up return from interrupt preemption path ce394d5e28c6 x86/asm: Pin sensitive CR0 bits b3327106585c x86/asm: Pin sensitive CR4 bits e3534ce1de0c Documentation/x86: Fix path to entry_32.S 487a6cb63d71 x86/asm: Remove unused TASK_TI_flags from asm-offsets.c 2bd8a406516b x86/entry/64: Don't compile ignore_sysret if 32-bit emulation is enabled Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit d320a03b697679dfe223883b23480b70f89ad649) Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-02-23openssh: backport patch to fix "cert not yet valid" testAnuj Mittal
Fixes [YOCTO #13796] Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-02-20xserver-nodm-init: Fix the start failure for non-root userKevin Hao
In order to start the xserver, a non-root user should have the cap_sys_admin capability to set the drm master. We try to get the cap_sys_admin capability by setting it in both the thread and file inheritable set. The side effect of this is that we would have to add the "pam" to the distro features if we want use the xserver-nodm-init for a non-root user. [Yocto #11526] Signed-off-by: Kevin Hao <kexin.hao@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit cfd71a68a4931c8bda15357ebb1e9ebcf0e302dc) Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-02-20qemurunner.py: add try/except for pid handling raceTrevor Gamblin
In some instances, attempts to remove the qemu pidfile within the stop() method fail despite the os.path.exists() call immediately before implying that the file is present. Add a try/except block to log a warning if this occurs, rather than failing outright, since the process simply appears to be exiting at an inconvenient time. [YOCTO #13675] Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit eadb899e23b18eb9eaff145c3bf5b20fb417c3e8) Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-02-20glibc-testsuite: Exclude this recipe from world buildsNathan Rossi
This recipe is intended to be run manually or via oeqa. [YOCTO #13737] Signed-off-by: Nathan Rossi <nathan@nathanrossi.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit eadbe01bb8232de79e0827e6c6b3411f69ea7303) Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-02-20glibc-testsuite: Remove the do_install taskNathan Rossi
This task is not intended to be run as this recipe does not produce any packages or install any sysroot content. Additionally running this task behaves differently from a normal glibc build, and can result in issues. [YOCTO #13737] Signed-off-by: Nathan Rossi <nathan@nathanrossi.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 2b51252cb8bd9badfa28794f9ef9431b48752e3d) Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-02-19Revert "bash: Fix CVE-2019-18276"Anuj Mittal
This reverts commit 09e695246d30ef9b73e743e0130e710e19793d14. This isn't a Backport as indicated in patch and not all the changes in this change are relevant to the CVE. Revert and wait for the fix to be available upstream. Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2020-02-11build-appliance-image: Update to zeus head revisionRichard Purdie
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2020-02-11u-boot.inc: Fix devtool build u-boot for u-boot without menuconfigTom Hochstein
For u-boot recipes without menuconfig support, running devtool results in a do_configure error: cp: cannot stat '/home/r60874/upstream/fsl-xwayland/tmp/work/imx8mmevk-fsl-linux/u-boot-imx/2018.03-r0/u-boot-imx-2018.03//.config': No such file or directory The problem arises because u-boot.inc supports recipes with and without menuconfig. Fix the problem by properly setting DEVTOOL_DISABLE_MENUCONFIG so that devtool can control logic that applies only for menuconfig support. Signed-off-by: Tom Hochstein <tom.hochstein@nxp.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit a6c430b0077eb56b4adbe391a0a05a52133cc8f0) Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-02-11ncurses: Fix reproducibility issueRichard Purdie
The build was deciding whether to rename manpages based upon the presence of /etc/debian_version. Be explicit about the configuration instead and ensure determinism. [YOCTO #13781] (From OE-Core rev: 09c8a28893e7ca94a44232d802e1cb02a8f34b87) (From OE-Core rev: 3d114c08c32578426646f5d97769d2c66fea06cb) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-02-11libevdev: Fix determinism issueRichard Purdie
We need to sort python dict output to be deterministic and generate consistent header files. (From OE-Core rev: 75e4cedb986379db2e8a897df52ee1363f9a9a80) (From OE-Core rev: fc6e8e527698a82bf8047d02e0e792c4a1a64449) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-02-11sysvinit: Fix Reproducibility issueRichard Purdie
With a sequence like: bitbake sysvinit bitbake sysvinit -c clean bitbake sysvinit -c package_write_ipk -f then the resulting package has two files with group "root/70" rather than "root/shutdown". The issue is that of do_package is a setscene task, base-passwd isn't present. This patch fixes that dependency but there may be other cases of this problem around. [YOCTO #13776] (From OE-Core rev: 0227e929021263c51d2e7db36224000fecb01f1c) (From OE-Core rev: cbcba43c18d67aea0ba41f019b357fbec6570ee1) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-02-11sudo: specify where target tools areRoss Burton
sudo uses AC_PATH_PROG to find target paths, which means at best potential host-contamination (and reproducible issues) and at worst it thinks sh is at /your/build/path/hosttools/sh. Solve this by explicitly passing the correct paths to configure. (From OE-Core rev: 61650dd8498a093f3bfa93202c9cd2e9a7fb7834) (From OE-Core rev: 6e809474ab686fba6924d8b46fd0b9eab5c66c06) Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-02-11libgcrypt: Fix determinism issueRichard Purdie
The build was injection git information from the wrong git tree, stop this to allow reproducible builds. (From OE-Core rev: 506b36b6d86b3454fcc3cb85f6229cbe8d14f5b5) (From OE-Core rev: 2b68ffc6d7c45541958f1b0c0b9ca9e39064e096) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-02-11libinput: Fix determinism issueRichard Purdie
The build was injection git information from the wrong git tree, stop this to allow reproducible builds. (From OE-Core rev: c3f6a6113f562ecdb13386c3ff52adb7973980a4) (From OE-Core rev: 22dc9a3314eef5925241a9a961bd79815d3172b6) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-02-11iputils: Fix build determinismRichard Purdie
The suid/setcap code depends on whether setcap is on the host system or not with suid as a fallback. Disable this functionality to be deterministic. (From OE-Core rev: 8b00ec484fb851c301f13145e17707c0167feab1) (From OE-Core rev: 3997c47dea49d583fd48cb03f83c007f61d2cb35) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-02-11openssl: Fix reproducibility issueRichard Purdie
There was a build architecture leaking into the target ptest which could vary depending upon host. Remove it as its cosmetic. [YOCTO #13770] (From OE-Core rev: 37db519eedb7eb5cd4f14d05f30f5d580aa7458d) (From OE-Core rev: c31c676319812e6fc036741db2ab8e16eccff723) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-02-11perl: Fix various reproducibile build issuesRichard Purdie
Add a patch which handles the following issues: a) Remove the \n from configure_attr.sh since it gets quoted differently depending on whether the shell is bash or dash which can cause the test result to be incorrect. Reported upstream: https://github.com/arsv/perl-cross/issues/87 b) Sort the order of the module lists from configure_mods.sh since otherwise the result isn't the same leading to makefile differences. Reported upstream: https://github.com/arsv/perl-cross/issues/88 c) Sort the Encode::Byte byte_t.fnm file output (and the makefile depends whilst there for good measure) This needs to go to upstream perl (not done) d) Use bash for perl-cross configure since otherwise trnl gets set to "\n" with bash and "" with dash Reported upstream: https://github.com/arsv/perl-cross/issues/87 (From OE-Core rev: 482fd0d99f989b5a72a25bdf402fb2f219420b5d) (From OE-Core rev: def3a9d748564883d71c506726554df622701b00) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-02-11perl: do not install files that contain build host specific dataAlexander Kanavin
This was breaking reproducibility, and the files aren't needed on target. [YOCTO #13772] (From OE-Core rev: 2e0f30c4680221c693495e3a0327378d502a518b) (From OE-Core rev: 208efc88fa3c57244b272bf7e7f7f8163f14630c) Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-02-11gtk+3: sort resources for reproducible binariesRoss Burton
The list of resources is gathered with $(wildcard) in Make, which isn't sorted. If this order changes then the generated libraries will differ. (From OE-Core rev: f3675be6be29426688187a135221431a0941d007) (From OE-Core rev: a2a6d9fa4df66a1f52c1c1fec45eedb4199e8162) Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-02-11libidn2: Fix reproducibility issueRichard Purdie
The previous tweak for reproducibility didn't handle the duplicate whitepace left behind, fix this. [YOCTO #13771] (From OE-Core rev: 0392fcbdc85180581ce7392212808ebb822cc2e8) (From OE-Core rev: ca213de432d8d9d715ef09e17cea2aa1e6666e91) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-02-11patch: Extend to native/nativesdk and depend uponRichard Purdie
There is a bug in patch 2.7.3 and earlier where index lines in patches can change file modes when they shouldn't: http://git.savannah.gnu.org/cgit/patch.git/patch/?id=82b800c9552a088a241457948219d25ce0a407a4 This leaks into debug sources in particular (e.g. tcp-wrappers where source files are read-only). Add the dependency to target recipes to avoid this problem until we can rely on 2.7.4 or later. We could try and remove all index lines from patch files but it will be a losing battle. We could try and identify all the recipes which change modes on files in patches but again, its a losing battle. Instead, compromise and have patch-native as a dependency for target recipes. We use patch-replacement-native since patch-native is in ASSUME_PROVIDED. Also add nativesdk-patch to buildtools-tarball. [YOCTO #13777] (From OE-Core rev: 5ed0840c93804488cd1c1aba6cb382b2434714a5) (From OE-Core rev: fd3bd61a6fe5190c575dc968f3a0be9c1cbf21ed) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-02-11tar: Fix build determinism, disable rshRichard Purdie
rsh is insecure and obsolete but tar will enable support if the binary is on the host system. Some systems point it at ssh. Lets explictly disable it for now unless someone actually needs/uses this at which point it could become a packageconfig. (From OE-Core rev: d14a4b0db92a9a7d1ff72a2e0faca7f1a23a0b68) (From OE-Core rev: 6bdc5f787af46e9c849947cad06ad40aa401b767) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-02-11mc: Fix manpage date indeterminismRichard Purdie
The man page date can vary depending upon the host perl, e.g. in Russian some versions print 'июня', others 'Июнь' or Polish 'czerwca' or 'czerwiec'. Rather than depend upon perl-native to fix this, just remove the date from the manpages. (From OE-Core rev: 5553c20f9fa4f35bf711b6b9d5717dcf4bfefafa) (From OE-Core rev: 3653fd41fbc28f70259a00bb0098ec8731526449) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-02-11mc: Set zipinfo presence determinsticallyRichard Purdie
This value was floating causing differences in generated files. Set it determinstically. (From OE-Core rev: 11d7a9e37c1d3fc21396a98fefc9d34c0b9e784b) (From OE-Core rev: 8f77075425e2ef9c3b5adbf8e5b29e7cfd7b9b7a) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-02-11mc: Fix build reproducibilityJoshua Watt
Fixes some issues with reproducible builds. Adds a patch to allow the configure arguments to be omitted from the build and also explicitly setting some autoconf paths that were picking up hosttools. (From OE-Core rev: f54d60ee8f15229aa515e168b9c7d248663b48fe) (From OE-Core rev: 164d72b7a6ab20940f9a124beaf485be9ddc07ba) Signed-off-by: Joshua Watt <JPEWhacker@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-02-11libxshmfence: Set shm directory deterministicallyRichard Purdie
Without setting this it will vary depending on which directories are present on the host. [YOCTO #13778] (From OE-Core rev: 6217c3a7201b34888aa2fbae8b6e490bea545574) (From OE-Core rev: 10357b0bf3f6b34b54c0329e7e392ecf2c7043cd) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-02-11sudo: Set vardir deterministicallyRichard Purdie
Without setting this it will vary depending on which directories are present on the host. [YOCTO #13775] (From OE-Core rev: 39fe849b56d70689846262c31ab7c182c8443923) (From OE-Core rev: 51274c9b195ad00dd6362f352ad9bbf7e9a3e098) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-02-11classes/reproducible_build: Read SDE file laterJoshua Watt
Defers the resolution of the SOURCE_DATE_EPOCH until the variable needs to be actually realized with a value. The previous method of loading the value in anonymous python had issues because it could occur before other anonymous python functions that affect the location of the epoch file, such as when a recipe uses AUTOINC/AUTOREV or allarch.bbclass. Also adds more logging to help diagnose issues in the future. [YOCTO #13763] (From OE-Core rev: b3313a10a3eb93f0a3710a35de0404fb49cd6202) (From OE-Core rev: 10515e5f7e38edbc4430e2599062a9ce6fdb42a8) Signed-off-by: Joshua Watt <JPEWhacker@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-02-11oeqa/reproducible: Improve test output and ensure deb+ipk comparedRichard Purdie
Adding newline characters between the packages in the failure output massively improves readability. Also ensure to output ipk failures when there are deb failures by calling self.fail() at the end, else sometimes only partial differences are returned. (From OE-Core rev: 6e2e0480852177db75a6108d77c99c92c4e9950f) (From OE-Core rev: 4d470f48f7fb5e05fba1ca3a59fb4f85d910026e) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-02-11opkg-utils: Fix reproducibility issues in opkg-buildRichard Purdie
There is a sorting problem with opkg-build where the ipk generated is depending upon the order of files on disk. The reason is the --sort option to tar only influences the orders of files tar reads, not those passed by the -T option. Add in a sort call to resolve this issue. To ensure consistent sorting we also need to force to a specific locale (C) else the results are still not deterministic. (From OE-Core rev: a9b8287984c63420e10329a69f7ac5125f1687f8) (From OE-Core rev: b577a6d923042cfc04e67d470e0987488ea61412) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-02-11opkg-utils: upgrade to version 0.4.2Alejandro del Castillo
- Drop 00001-Switch-all-scripts-to-use-Python-3.x.patch - Drop 00001-opkg-build-clamp-mtimes-to-SOURCE_DATE_EPOCH.patch - Drop pipefail.patch (From OE-Core rev: bf51a4a1312562cc9b5944b7dfccba0b3d11dc3c) (From OE-Core rev: 1b71c28e1ca4fddc0f3c340ea4bcd76854ef620c) Signed-off-by: Alejandro del Castillo <alejandro.delcastillo@ni.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-02-11gcc-9.2: fix bug #91102 'aarch64 ICE on Linux kernel with -Os'Taras Kondratiuk via Openembedded-core
Linux kernel compilation for aarch64 triggers ICE if CONFIG_CC_OPTIMIZE_FOR_SIZE=y. The rootcause is GCC bug #91102 'aarch64 ICE on Linux kernel with -Os'. Apply the fix to 9.2. (From OE-Core rev: 14f34d32bfdaa752f5043e62750d2e7b92c4b419) Signed-off-by: Taras Kondratiuk <takondra@cisco.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
2020-02-11devtool/standard.py: Allow recipe to disable menuconfig logicTom Hochstein
u-boot.inc supports u-boot recipes with or without menuconfig [1]. However, running devtool on a u-boot recipe that does not support menuconfig results in an error: cp: cannot stat '/home/r60874/upstream/fsl-xwayland/tmp/work/imx8mmevk-fsl-linux/u-boot-imx/2018.03-r0/u-boot-imx-2018.03//.config': No such file or directory The problem is the devtool logic assumes that any recipe with a do_menuconfig task will generate a .config in do_configure(). Fix the problem by removing the assumption with a flag that the recipe can control, like this: do_configure() { if [ menuconfig-supported ]; then ... else DEVTOOL_DISABLE_MENUCONFIG=true fi } [1] https://github.com/openembedded/openembedded-core/commit/11278e3b2c75be80645b9841763a97dbb35daadc Signed-off-by: Tom Hochstein <tom.hochstein@nxp.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com> Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
2020-02-11cpio: fix CVE-2019-14866Anuj Mittal
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
2020-02-11curl: fix CVE-2019-15601Anuj Mittal
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
2020-02-11rsync: whitelist CVE-2017-16548Lee Chee Yang
patch for this CVE applies to v3.1.3pre1 not for v3.1.3. patch already in v3.1.3. see https://git.samba.org/rsync.git/?p=rsync.git;a=commitdiff;h=47a63d90e71d3e19e0e96052bb8c6b9cb140ecc1;hp=bc112b0e7feece62ce98708092306639a8a53cce (From OE-Core rev: 1e2739c821312527010fb0afbde5a20cd3f03d24) Signed-off-by: Lee Chee Yang <chee.yang.lee@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2020-02-11Revert "bzip2: Fix CVE-2019-12900"Anuj Mittal
This reverts commit 175e6cb75ce328d51a9d4ad18c7e09d9fb92c2e1. This change is already in bzip2 1.0.7. The change fixing a regression caused by this change is in 1.0.8 which is the current version in zeus. This isn't resulting in failures because the patch file isn't included in SRC_URI. Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
2020-02-06build-appliance-image: Update to zeus head revisionRichard Purdie
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>