summaryrefslogtreecommitdiffstats
AgeCommit message (Collapse)Author
2021-03-22Revert "sstatesig.py: show an error instead of warning when sstate manifest ↵Anuj Mittal
isn't found" This is causing problems. See: https://lists.openembedded.org/g/openembedded-core/message/149374 This reverts commit da6b76bf6152b2a60c6a31756c287289c3559a74.
2021-03-19glib-2.0: Fix CVE-2021-27219Anatol Belski
The upstream patches are only in glib >= 2.66.6 and >= 2.67.3 and won't be backported. This patch is developed based on the upstream patch set and consulting teh backports recently made by Ubuntu for the 2.64.6 series. Signed-off-by: Anatol Belski <anbelski@linux.microsoft.com> Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
2021-03-19systemd-conf: do not ask for DHCP if configured on kernel command lineStefan Schmidt
In cases where we configure the IP address and more on the kernel command line with ip= we should not ask for DHCP with systemd-networkd later on. We have such a setup with our runqemu script. With this match in place we can also deploy this unit on qemu systems. Signed-off-by: Stefan Schmidt <stefan.schmidt@huawei.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 8c4981e740c0e630200dbc77c9e3dfd3e43b790b) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
2021-03-19populate_sdk_ext: record METADATA_REVISIONChen Qi
As we delete the .git/ directory, it's impossible to get METADATA_REVISION inside eSDK. Because of this, we meet the following warning when installing eSDK. WARNING: The base-files:do_install sig is computed to be 16b9d96148d45de183cc94667aae016ec7d102d48255456381e718cd4bbd0aa0, \ but the sig is locked to 6eb0dcaed504282becee94662481d79264db920dee1f7deda18230133fff8f36 in SIGGEN_LOCKEDSIGS_t-qemux86-64 So we record METADATA_REVISION in eSDK generation time to fix this problem. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit ff2ad51b801fd62e2abbc573ba2c9ee8fdc7e012) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
2021-03-19runqemu: use "raw" instead of "bin" for ovmfJon Mason
bin is not an acceptable format for qemu and will throw an error is set. The correct format in this case is raw. Signed-off-by: Jon Mason <jon.mason@arm.com> Change-Id: I9d78e356d39ecb15bef886c19870b029d9badd65 Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit cd279aeb986b4676ea8ecb1e7b12c7e29e83460a) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
2021-03-19devtool: Fix do_kernel_configme taskAlejandro Hernandez Samaniego
The do_kernel_configme task is no longer part of SRCTREECOVEREDTASKS, its been removed from the kernel-yocto.bbclass since b72dbb2e4, but there wasnt a matching patch for devtool for those changes. This patch enables us to invoke the do_kernel_configme task when using a devtool workspace, it also prepends a check for an existing .config file in the source directory and moves it if thats the case, since when using devtool modify a .config is created and do_kernel_configme complains about it, this is not the case when using bitbake since the .config file would be on B instead. Alowing do_kernel_configme to run also fixes the flow where testing a new config fragment from devtool workspace isnt added properly (config queue shows it as ///frg.cfg) and as a side effect it never gets merged into the final config. Signed-off-by: Alejandro Enedino Hernandez Samaniego <alhe@linux.microsoft.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 08dcc0e68095dcf2a159546a48b29d40c9aabc0b) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
2021-03-19iso-codes: fix protocol in SRC_URIMartin Jansa
* it doesn't listen on http and the redirect sometimes doesn't work WARNING: iso-codes-4.6.0-r0 do_fetch: Failed to fetch URL git://salsa.debian.org/iso-codes-team/iso-codes.git;protocol=http;branch=main;, attempting MIRRORS if available The protocol should be changed to https, like all other salsa.debian.org pulls are, so that it doesn't depend on mirrors.bbclass to resolve this. meta/classes/mirrors.bbclass:git://salsa.debian.org/.*     git://salsa.debian.org/PATH;protocol=https \n \ from log.do_fetch: DEBUG: Fetcher accessed the network with the command LANG=C git -c core.fsyncobjectfiles=0 fetch -f --progress http://salsa.debian.org/iso-codes-team/iso-codes.git refs/*:refs/* fatal: unable to access 'http://salsa.debian.org/iso-codes-team/iso-codes.git/': Couldn't connect to server WARNING: Failed to fetch URL git://salsa.debian.org/iso-codes-team/iso-codes.git;protocol=http;branch=main;, attempting MIRRORS if available ... warning: redirecting to https://salsa.debian.org/iso-codes-team/iso-codes.git/ Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 749eeb8cfaa8ffcfda29f3f06a77debaf6304288) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
2021-03-19gcc-sanitizers: Move content from gcclibdir into libdirMike Crowe
In e9e5744ba8b0d43c8b874d365f83071ce20bf0a1, Khem Raj wrote: > OE does not use the traditional /usr/lib/gcc prefix to store > gcc-runtime it basically is moved into libdir, however some newer > files were installed by newer versions of gcc especially libgomp ( > omp.h openacc.h ) into gcclibdir, so we have content in both > directories, this confuses other tools which are trying to guess the > gcc installation and its runtime location, since now we have two > directories, the tools either choose one or other and we get > inconsistent behavior, e.g. clang for aarch64 uses /usr/lib but same > clang for riscv64 chose /usr/lib/gcc > This change ensures that OE ends up with single valid location for gcc > runtime files I think that the same thing needs to happen in gcc-sanitizers.inc, otherwise I get errors like: | .../recipe-sysroot/usr/include/gpg-error-64.h:884:11: fatal error: sanitizer/lsan_interface.h: No such file or directory when attempting to compile with sanitizers enabled. FILES_${PN} needs updating to match too. Signed-off-by: Mike Crowe <mac@mcrowe.com> Cc: Khem Raj <raj.khem@gmail.com> Cc: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 862b4fac3ee7d951758c8c93462331ad52bf0190) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
2021-03-19gstreamer1.0-python: Set internal python library path correctyRichard Purdie
The library hardcodes paths to the python library internally and currently these are build paths. Fix this to use the correct target path and fix reproducibility in the process. Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 4c190e8c9a2b53de3def1065fb6e479b72d040dc) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
2021-03-19selftest/reproducible: Don't call sync between each file compareRichard Purdie
Calling sync between each file compare is horrible performance wise as we compare thousands of files. We don't care about IO latency here so disable. Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 25f78abd8bbeb201fd9452e7983e015027954948) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
2021-03-19apr-util: Fix CFLAGS used in buildRichard Purdie
We need to use CFLAGS with the correct WORKDIR in them, replace those in the sysroot file with the ones appropriate to the current recipe. Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 45edf189961aff1858be9bb7b63116073c0a0c10) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
2021-03-19igt-gpu-tools: Fix reproducibility issueRichard Purdie
Add a configuration option to pass in srcdir, removing hard coded build paths from the binaries. Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit d7e92e3a22f0c87aff4f452b51f50ec417d2949b) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
2021-03-19libsecret: Improve determimismRichard Purdie
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 28175c44e7402397a24a00a4b056eef39b0a03fa) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
2021-03-19python3-jinja2: set CVE_PRODUCTChen Qi
Set CVE_PRODUCT for more accurate CVE scanning. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit aefcc7a7dd012530ed846292caaed70d20589a3a) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
2021-03-10ptest-packagelists: remove libinput-ptestRoss Burton
The libinput ptests are very sensitive to system load, and will fail if events from the kernel don't arrive sufficiently fast (from 20ms to 200ms depending on the test). This is by design as input processing is inherently time-sensitive and to avoid code bugs the test suite considers timing problems fatal. As this is causing a large proportion of ptest runs to fail in libinput, disable the execution of these tests for now. [ YOCTO #14164 ] Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 54e2eb809bdfedb64219f37b82589372bbc96905) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
2021-03-10shadow: whitelist CVE-2013-4235Purushottam Choudhary
This CVE is about TOCTOU (time-of-check time-of-use) race condition when copying and removing directory trees which had very low severity problem and marked as closed and won't fix. Therefore whitelisted CVE-2013-4235. Master, gatesgarth and dunfell all have shadow version 4.81. Hence, this is applicable for master, gatesgarth and dunfell. Link: https://bugzilla.redhat.com/show_bug.cgi?id=884658 Signed-off-by: Sana Kazi <Sana.Kazi@kpit.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit b1c6cd87bee6b019619dc5728fd6c36bc87ed696) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
2021-03-10linux-yocto/5.4: update to v5.4.101Bruce Ashfield
Updating linux-yocto/5.4 to the latest korg -stable release that comprises the following commits: ef1fcccf6e5f Linux 5.4.101 fe257f47e2c3 scripts/recordmcount.pl: support big endian for ARCH sh a2c5e4a083a7 cifs: Set CIFS_MOUNT_USE_PREFIX_PATH flag on setting cifs_sb->prepath. e6f7bf29e32d cxgb4: Add new T6 PCI device id 0x6092 aaf830ad624a NET: usb: qmi_wwan: Adding support for Cinterion MV31 5f2093be3627 KVM: Use kvm_pfn_t for local PFN variable in hva_to_pfn_remapped() 3f9fbe703164 mm: provide a saner PTE walking API for modules 32f070ad274d KVM: do not assume PTE is writable after follow_pfn 78c7b242573a mm: simplify follow_pte{,pmd} 8aeef9c9ac7e mm: unexport follow_pte_pmd 8f869895cf9d scripts: set proper OpenSSL include dir also for sign-file c7ed0a50f20a scripts: use pkg-config to locate libcrypto c8e3bcc6db7c arm64: tegra: Add power-domain for Tegra210 HDA 74c8a6af692a ntfs: check for valid standard information attribute 54a3c25368d9 usb: quirks: add quirk to start video capture on ELMO L-12F document camera reliable 96ef50ec7266 USB: quirks: sort quirk entries fce3654c648d HID: make arrays usage and value to be the same 185c2266c1df bpf: Fix truncation handling for mod32 dst reg wrt zero fc944ddc0b4a Linux 5.4.100 38d777aaf2c3 btrfs: fix backport of 2175bf57dc952 in 5.4.95 c6dd8545fe38 media: pwc: Use correct device for DMA 524a77aa5d69 xen-blkback: fix error handling in xen_blkbk_map() be05138a9cdd xen-scsiback: don't "handle" error by BUG() 52e8f43af540 xen-netback: don't "handle" error by BUG() 7109f61d25ff xen-blkback: don't "handle" error by BUG() 55ccf71c0985 xen/arm: don't ignore return errors from set_phys_to_machine feda880969a5 Xen/gntdev: correct error checking in gntdev_map_grant_pages() 0e382682dda4 Xen/gntdev: correct dev_bus_addr handling in gntdev_map_grant_pages() da92e41f010e Xen/x86: also check kernel mapping in set_foreign_p2m_mapping() 104eef952314 Xen/x86: don't bail early from clear_foreign_p2m_mapping() 49de0a17e68f net: bridge: Fix a warning when del bridge sysfs c35ce3d38caa net: qrtr: Fix port ID for control messages f49731dfdb20 KVM: SEV: fix double locking due to incorrect backport Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit e813c8d776679fc602b06959dd7e280959ffd1ee) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
2021-03-10linux-yocto/5.4: update to v5.4.99Bruce Ashfield
Updating linux-yocto/5.4 to the latest korg -stable release that comprises the following commits: 850e6a95deb5 Linux 5.4.99 e8ffaca0fe27 ovl: expand warning in ovl_d_real() b55528a18e40 net/qrtr: restrict user-controlled length in qrtr_tun_write_iter() 99996cd558ba net/rds: restrict iovecs length for RDS_CMSG_RDMA_ARGS ac79b1d94a88 vsock: fix locking in vsock_shutdown() c025081b57df vsock/virtio: update credit only if socket is not closed 2545c5bd8316 net: watchdog: hold device global xmit lock during tx disable a5f0b6f7b1c0 net/vmw_vsock: improve locking in vsock_connect_timeout() 611d93fbea54 net: fix iteration for sctp transport seq_files 2085d886630a net: gro: do not keep too many GRO packets in napi->rx_list 5c53956a8da0 net: dsa: call teardown method on probe failure 0b42ab078369 udp: fix skb_copy_and_csum_datagram with odd segment sizes 73bc75fda669 rxrpc: Fix clearance of Tx/Rx ring when releasing a call b90e8d5d28d1 usb: dwc3: ulpi: Replace CPU-based busyloop with Protocol-based one 35834bf0b210 usb: dwc3: ulpi: fix checkpatch warning 0b49b82eeea2 h8300: fix PREEMPTION build, TI_PRE_COUNT undefined 1019015a5dca i2c: stm32f7: fix configuration of the digital filter 546d92a43c94 clk: sunxi-ng: mp: fix parent rate change flag check b02db23d2647 drm/sun4i: dw-hdmi: Fix max. frequency for H6 40db7dba50fe drm/sun4i: Fix H6 HDMI PHY configuration 3063b80b4bdf drm/sun4i: tcon: set sync polarity for tcon1 channel 107cf5eede74 firmware_loader: align .builtin_fw to 8 beb85f4927e8 net: hns3: add a check for queue_id in hclge_reset_vf_queue() a045956a3b41 x86/build: Disable CET instrumentation in the kernel for 32-bit too da1a5442ad2c netfilter: conntrack: skip identical origin tuple in same zone only 0142b957866f ibmvnic: Clear failover_pending if unable to schedule 3f8954cc624c net: stmmac: set TxQ mode back to DCB after disabling CBS c0daa74b8ed7 selftests: txtimestamp: fix compilation issue 6107338c2fa2 net: enetc: initialize the RFS and RSS memories 71d2bd7921db xen/netback: avoid race in xenvif_rx_ring_slots_available() ff758e8a77f3 netfilter: flowtable: fix tcp and udp header checksum update b110391d1e80 netfilter: nftables: fix possible UAF over chains from packet path in netns 35c279e02b7e netfilter: xt_recent: Fix attempt to update deleted entry 7e3a6b820535 bpf: Check for integer overflow when using roundup_pow_of_two() e29126678f65 drm/vc4: hvs: Fix buffer overflow with the dlist handling 69beec4a8b36 mt76: dma: fix a possible memory leak in mt76_add_fragment() 8a5991c8214b lkdtm: don't move ctors to .rodata 4f5416710e13 vmlinux.lds.h: Create section for protection against instrumentation b7f41a7ad444 ARM: kexec: fix oops after TLB are invalidated f49bff85b6db ARM: ensure the signal page contains defined contents 06350c7f7923 ARM: dts: lpc32xx: Revert set default clock rate of HCLK PLL e60577e29deb bfq-iosched: Revert "bfq: Fix computation of shallow depth" 91d604ab2a99 riscv: virt_addr_valid must check the address belongs to linear mapping 0db8d192ee57 drm/amd/display: Decrement refcount of dc_sink before reassignment 5c8f63266255 drm/amd/display: Free atomic state after drm_atomic_commit f35da70b516f drm/amd/display: Fix dc_sink kref count in emulated_link_detect 76979956a8af drm/amd/display: Add more Clock Sources to DCN2.1 4516a0a2c087 nvme-pci: ignore the subsysem NQN on Phison E16 335a285aa0f0 ovl: skip getxattr of security labels 43e3cf46afb1 cap: fix conversions on getxattr df094aa0aab0 ovl: perform vfs_getxattr() with mounter creds cc512646b2e7 platform/x86: hp-wmi: Disable tablet-mode reporting by default 2bb22cd4dae4 ARM: OMAP2+: Fix suspcious RCU usage splats for omap_enter_idle_coupled 2cb208ba0fd1 arm64: dts: qcom: sdm845: Reserve LPASS clocks in gcc 92c40ed0abcb arm64: dts: rockchip: Fix PCIe DT properties on rk3399 2407794f2298 cgroup: fix psi monitor for root cgroup 18d691d837b3 arm/xen: Don't probe xenbus as part of an early initcall a0997a86f5c0 tracing: Check length before giving out the filter buffer 74c7bafdd303 tracing: Do not count ftrace events in top level enable output 4851d7b340e9 gpio: ep93xx: Fix single irqchip with multi gpiochips 2c5abe0f8e9c gpio: ep93xx: fix BUG_ON port F usage Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit c300a9e9d414355af783f2adae53cde0c6319d08) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
2021-03-10local.conf.sample: fix typoUlrich Ölmann
Signed-off-by: Ulrich Ölmann <u.oelmann@pengutronix.de> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 6413f56a19417fe9d2aaa0f3dba4fd12c41b98c4) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
2021-03-10libinput: less parallism to increase chances the test suite worksRoss Burton
Discussion with the libinput maintainer has confirmed that many of the libinput test cases need to run on a relatively unloaded system, because input handling is by definition time-sensitive and any event mismatches are considered a failure to avoid broken code hiding. We can't expect libinput to run on an otherside unloaded machine because the autobuilder ptests execute in a qemu at the same time as builds can be happening. We can however reduce the amount of parallellism happening in the libinput test suite to give it a better chance of succeeding. This may not be enough, but it's worth a go. [ YOCTO #14164 ] Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 5702f7c489ed45b7f4a69c78aa8215e2c98e21c4) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
2021-03-10wpa-supplicant: fix CVE-2021-27803Stefan Ghinea
A vulnerability was discovered in how p2p/p2p_pd.c in wpa_supplicant before 2.10 processes P2P (Wi-Fi Direct) provision discovery requests. It could result in denial of service or other impact (potentially execution of arbitrary code), for an attacker within radio range. References: https://nvd.nist.gov/vuln/detail/CVE-2021-27803 Upstream patches: https://w1.fi/cgit/hostap/commit/?id=8460e3230988ef2ec13ce6b69b687e941f6cdb32 Signed-off-by: Stefan Ghinea <stefan.ghinea@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 81e4260b83c52558c320fd7d1c1eafcb312ad6be) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
2021-03-10qemu: fix CVE-2021-20203Minjae Kim
net: vmxnet3: validate configuration values during activate Upstream-Status: Acepted [https://lists.gnu.org/archive/html/qemu-devel/2021-01/msg07935.html] CVE: CVE-2021-20203 Signed-off-by: Minjae Kim <flowergom@gmail.com> Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
2021-03-10libsdl2: fix CVE-2020-14409 CVE-2020-14410Lee Chee Yang
Signed-off-by: Lee Chee Yang <chee.yang.lee@intel.com> Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
2021-03-10python3: fix CVE-2021-23336Lee Chee Yang
Signed-off-by: Lee Chee Yang <chee.yang.lee@intel.com> Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
2021-03-10bind: fix CVE-2020-8625Minjae Kim
BIND Operational Notification: Zone journal (.jnl) file incompatibility. Signed-off-by: Minjae Kim <flowergom@gmail.com> Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
2021-03-10yocto-uninative.inc: version 3.0 incorporate seccomp filter workaroundMichael Halstead
Signed-off-by: Michael Halstead <mhalstead@linuxfoundation.org> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 317f8bf320383e81085f5740e202a7edb12932c7) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
2021-03-10yocto-uninative.inc: version 2.11 updates glibc to 2.33Michael Halstead
Support glibc 2.33. Signed-off-by: Michael Halstead <mhalstead@linuxfoundation.org> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 5c7f963d395aa4a94d78c37883488baac471ea43) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
2021-03-10parted: Fix reproducibility issueRichard Purdie
We don't use tbe BUILDINFO line of host information in the Makefile so remove it for reproducibility. Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit a9742595fa90d4977fdd8129a4fe4932ddb96a18) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
2021-03-10valgrind: Increase timeout duration 30 -> 90 sYi Fan Yu
Attempt to fix intermittent failure of `drd/tests/std_list` Locally tested to take around 45 s on qemuarm64 [YOCTO #14228] Signed-off-by: Yi Fan Yu <yifan.yu@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit aac00b1c8042e41cd6bb1aea8e3033a1c6dd2b05) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
2021-03-10oeqa/pam: Need shadow installed for the testsKhem Raj
Distros may not use shadow for login manager secondly login --help returns 1 only with shadow provided login utility, with busybox it returns normal 0, the testcase clearly assumes shadow being part of image, therefore add needed checks to ensure the pre-requisites are met Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 0820aeba74869bf6e85b200f39bc610a43ab9a7a) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
2021-03-10bitbake.conf: Split PSEUDO_IGNORE_PATHS to be more readableRichard Purdie
We've had a lot of concern about the readability of diffs of this path setting, refactor to avoid long line length. Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit f3930cba16ccbc4b76ed14187d5586d6479bc59e) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
2021-03-10bitbake.conf/image: Move image specific PSEUDO_IGNORE_PATHS to image classRichard Purdie
This path is image specific so we can move to the image class definition of PSEUDO_IGNORE_PATHS. Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 66a8ca0f206434e0b301a8fdc90f062750d6d118) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
2021-03-10populate_sdk: Add directories to PSEUDO_IGNORE_PATHSRichard Purdie
Some paths used in sdk construction shouldn't be tracked under pseudo so list these. Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 21621e09162ff9e8014a1cfba78d0f2c3746202a) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
2021-03-10image: Add directories to PSEUDO_IGNORE_PATHSRichard Purdie
Some paths used in image construction shouldn't be tracked under pseudo so list these. Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 9463be2292b942a1072eea88881b9644e55aadb9) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
2021-03-10epiphany: Fix distributor contamination from /etc/os-releaseRichard Purdie
Set our own distro string rather than using the value from /etc/os-release. Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 77f23ece471e8855bfd8be06951f21cabce25545) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
2021-03-10epiphany: Fix reproducibility issueRichard Purdie
We don't want to encide BUILD_ROOT into target packages. This is used for build time tests but in our case those would be on target anyway do use the target paths. Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 2818dc90bd62487879e7da2c68357b39282415b0) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
2021-03-10wic: Warn if an ext filesystem affected by the Y2038 problem is usedFlorian Bezdeka
We are getting closer and closer to the year 2038 where the 32 bit time_t overflow will happen. While products (= embedded systems) with an expected life time of 15 years are still save the situation may change if your system has to survive the next 20 years. ext2 and ext3 filesystems are always affected by the time overflow, so let's warn the user if these filesystems are still being used. If ext4 is affected depends on the inode size chosen during filesystem creation. At least 256 bytes are necessary to be safe. As ext4 is used very often (and partitions may be created small first and extended later) this might be an issue for many users. Some filesystems created during CI runs were already affected by the Y2038 problem. By using `--mkfs-extraopts "-T default"` we tell mke2fs not to auto-detect the usage type based on the filesystem size. mke2fs will use the default values for tuning parameters instead. The inode size is one of these parameters. Signed-off-by: Florian Bezdeka <florian.bezdeka@siemens.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit eecbe625558406680121d2a7e84917fea45ea9dc) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
2021-03-10externalsrc: Pass through npmsw URIs in SRC_URIMike Crowe
NPM shrinkwrap files need to stay in SRC_URI even when using externalsrc so that npm_do_fetch can run to fetch the required dependencies. Signed-off-by: Mike Crowe <mac@mcrowe.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit e889cbecf9a1731b199e57d79a14e574398586bb) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
2021-03-10gcr: Fix reproducibility issueRichard Purdie
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit b53133572de9e5bdf77dd44831a86ec34bf41b2c) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
2021-03-10cups: fix CVE-2020-10001Stefan Ghinea
A buffer (read) overflow in the ippReadIO function. References: https://nvd.nist.gov/vuln/detail/CVE-2020-10001 Upstream patches: https://github.com/OpenPrinting/cups/commit/efbea1742bd30f842fbbfb87a473e5c84f4162f9 Signed-off-by: Stefan Ghinea <stefan.ghinea@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 90eba79bf6f623aa3021eafd0141dad1c3059001) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
2021-03-10cups: Fix reproducibility issuesRichard Purdie
configure inspects the host's /etc/group for these configuration options, fix this to the correct values by using configure options. Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit f16f9c727569414cd52862dcba18d8e423f4e961) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
2021-03-10asciidoc: Switch to using the main branchPeter Kjellerstedt
Upstream has renamed the "master" branch to "main". Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 05637733cf89a81fd5d787402f5a917f279a1a0d) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
2021-03-10sstatesig.py: show an error instead of warning when sstate manifest isn't foundMartin Jansa
* not sure if there are some valid use-cases for missing manifest, but recently I'm seeing increasing number of build failures where something from native recipe is missing (seen it with pseudo, autoconf, nodejs recently) and the only indication that something is wrong (before showing sometimes misleading error like: recipe-sysroot-native/usr/bin/node: No such file or directory is this warning: NOTE: Running task 7844 of 12431 (/meta-oe/meta-oe/recipes-devtools/nodejs/nodejs_12.20.2.bb:do_prepare_recipe_sysroot) NOTE: recipe nodejs-12.20.2-r0: task do_prepare_recipe_sysroot: Started WARNING: nodejs-12.20.2-r0 do_prepare_recipe_sysroot: Manifest /BUILD/sstate-control/manifest-x86_64_ubuntu-18.04-nodejs-native.populate_sysroot not found in x86_64 x86_64_ubuntu-18.04 (variant '')? NOTE: Running task 7845 of 12431 (/meta-oe/meta-oe/recipes-devtools/nodejs/nodejs_12.20.2.bb:do_unpack) NOTE: recipe nodejs-12.20.2-r0: task do_unpack: Started WARNING: nodejs-12.20.2-r0 do_prepare_recipe_sysroot: Manifest /BUILD/sstate-control/manifest-x86_64_ubuntu-18.04-nodejs-native.populate_sysroot not found in x86_64 x86_64_ubuntu-18.04 (variant '')? NOTE: recipe nodejs-12.20.2-r0: task do_prepare_recipe_sysroot: Succeeded if I rebuild that native dependency, then it gets fixed and I don't see these failures in clean builds (as without sstate and with empty TMPDIR), only in incremental builds * but if there isn't valid reason for missing manifest file, then I think it would be better to error early (or even bb.fatal()) Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 95607a26854d873399d2b9d7e5fcbffc0cbdba4c) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
2021-03-10wpa-supplicant: fix CVE-2021-0326Stefan Ghinea
In p2p_copy_client_info of p2p.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution if the target device is performing a Wi-Fi Direct search, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-8.1 Android-9 Android ID: A-172937525 References: https://nvd.nist.gov/vuln/detail/CVE-2021-0326 Upstream patches: https://w1.fi/cgit/hostap/commit/?id=947272febe24a8f0ea828b5b2f35f13c3821901e<links_for_CVE_patches> Signed-off-by: Stefan Ghinea <stefan.ghinea@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit b7940edabe100512e8f558cc37f9da836feae74d) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
2021-03-10bitbake.conf: Introduce FAKEROOTLOGS variable used by bitbake to print ↵Tomasz Dziendzielski
pseudo.log Bitbake depends on this variable while looking for pseudo.log file in case of fakeroot task failure. Signed-off-by: Tomasz Dziendzielski <tomasz.dziendzielski@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit e8e9e5f62b144828387e20eec2e66fcd61edd0d3) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
2021-03-10babeltrace2: Fix reproducibilityRichard Purdie
babeltrace2-ptest was referencing the host's python version in it's makefiles. Whilst this could be fixed, its easier to correct the python version being found to the target one which works much more effectively and solves the issue. Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 559f16d2fef4f8b04a9db1104b4a5b63f7876c68) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
2021-03-10report-error.bbclass: Add layer and bitbake version info to error reportMilan Shah
Instead of just providing local.conf info, add layer names and their revisions with bitbake version information into error report makes it easier to understand and reproduce failed build. [YOCTO #9700] Signed-off-by: Milan Shah <mshah@mvista.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit a5afd7b1857c0012ab6e3d8bbafa67a96ff9e9e0) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
2021-03-10python3: Fix python interpreter line length for nativesdkMingli Yu
Make sure the python interpreter is "#!/usr/bin/env python3" for nativesdk to avoid the shebang path exceeding the limit when install the sdk under the directory with long path. Before: $ cd ${target_sdk_dir} $ vi ./sysroots/x86_64-oesdk-linux/usr/bin/2to3 #!${target_sdk_dir}/sysroots/${SDK_SYS}/usr/bin/python3.9 [snip] After: $ cd ${target_sdk_dir} $ vi ./sysroots/x86_64-oesdk-linux/usr/bin/2to3 #!/usr/bin/env python3 [snip] Signed-off-by: Mingli Yu <mingli.yu@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit a748e6098fa7d2ff594319937c7e0cf97700e83a) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
2021-03-10libevdev: Update patch status to backportRichard Purdie
The patch was submitted and merged upstream. Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 871bce0703ca9d14e5c44f6ee0b66fcb13cfb630) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
2021-03-10rsync: Fix group name determinism issueRichard Purdie
configure falls back to inspecting the host#s /etc/group for the nobody/nogroup naming. Pass the correct value to configure to ensure host differences don't sneak in. Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit e5f809068b32df32e506f3067cd6086195e03f12) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
generated by cgit 1.2.3-korg (git 2.39.0) at 2024-04-19 01:46:42 +0000