summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorPeter Marko <peter.marko@siemens.com>2024-02-04 21:39:29 +0100
committerSteve Sakoman <steve@sakoman.com>2024-02-05 03:56:26 -1000
commit04511734c6dc8c7dda3a943b385cd273d012d8c7 (patch)
tree12b4388ea5b690a7a8c0a0079fbc12f942c7b891
parent7b93bb0ba1513a60cf75ebe55b29723831dfb79a (diff)
downloadopenembedded-core-contrib-04511734c6dc8c7dda3a943b385cd273d012d8c7.tar.gz
gcc-shared-source: ignore CVE-2023-4039
Concept of gcc-source prevents cve-check to detect existing CVE patch file. So ignore this CVE in all recipes using gcc-source via this include file. Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
-rw-r--r--meta/recipes-devtools/gcc/gcc-shared-source.inc3
1 files changed, 3 insertions, 0 deletions
diff --git a/meta/recipes-devtools/gcc/gcc-shared-source.inc b/meta/recipes-devtools/gcc/gcc-shared-source.inc
index 03f520b093..7aa1c22bf0 100644
--- a/meta/recipes-devtools/gcc/gcc-shared-source.inc
+++ b/meta/recipes-devtools/gcc/gcc-shared-source.inc
@@ -19,3 +19,6 @@ do_deploy_source_date_epoch () {
cp -p $(dirname ${S})/$sde_file ${SDE_DEPLOYDIR}
cp -p $(dirname ${S})/$sde_file ${SDE_FILE}
}
+
+# patch is available via gcc-source recipe
+CVE_CHECK_IGNORE += "CVE-2023-4039"