diff options
author | Jussi Kukkonen <jussi.kukkonen@intel.com> | 2016-04-26 15:19:48 +0300 |
---|---|---|
committer | Richard Purdie <richard.purdie@linuxfoundation.org> | 2016-06-15 18:05:23 +0100 |
commit | ee0188f1e0bdb65bf2dd0e68c1bd4a51f32a4da8 (patch) | |
tree | d01bb29ac5e96870563c238d540f1392f1a03966 /meta/recipes-support | |
parent | 5b076f945a0d563dcc9c60e893d58eb0bf39a8e4 (diff) | |
download | poky-ee0188f1e0bdb65bf2dd0e68c1bd4a51f32a4da8.tar.gz |
vte: Upgrade to 0.44.1
* License change LGPL 2.0 -> LGPL 2.1+
* vte-termcap is no more
* API break: current version seems to be parallel installable
with old one, but I did not opt for that.
* Add patch to avoid stack protection by default
* Use libtool-cross: libtool adds "-nostdlib" when g++ is used,
and this leads to a link failure on PIE builds: "undefined
reference to __init_array_start". libtool-cross has a hack to
avoid "-nostdlib"
(From OE-Core rev: dc21182ada418cf3917ae8319494d219462c5bfd)
Signed-off-by: Jussi Kukkonen <jussi.kukkonen@intel.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Diffstat (limited to 'meta/recipes-support')
-rw-r--r-- | meta/recipes-support/vte/vte-0.28.2/cve-2012-2738.patch | 136 | ||||
-rw-r--r-- | meta/recipes-support/vte/vte-0.28.2/obsolete_automake_macros.patch | 14 | ||||
-rw-r--r-- | meta/recipes-support/vte/vte.inc | 15 | ||||
-rw-r--r-- | meta/recipes-support/vte/vte/0001-Don-t-enable-stack-protection-by-default.patch | 29 | ||||
-rw-r--r-- | meta/recipes-support/vte/vte_0.28.2.bb | 16 | ||||
-rw-r--r-- | meta/recipes-support/vte/vte_0.44.1.bb | 28 |
6 files changed, 57 insertions, 181 deletions
diff --git a/meta/recipes-support/vte/vte-0.28.2/cve-2012-2738.patch b/meta/recipes-support/vte/vte-0.28.2/cve-2012-2738.patch deleted file mode 100644 index 9b9980397a..0000000000 --- a/meta/recipes-support/vte/vte-0.28.2/cve-2012-2738.patch +++ /dev/null | |||
@@ -1,136 +0,0 @@ | |||
1 | Upstream-Status: Backport | ||
2 | CVE: CVE-2012-2738 | ||
3 | Signed-off-by: Ross Burton <ross.burton@intel.com> | ||
4 | |||
5 | From e524b0b3bd8fad844ffa73927c199545b892cdbd Mon Sep 17 00:00:00 2001 | ||
6 | From: Christian Persch <chpe@gnome.org> | ||
7 | Date: Sat, 19 May 2012 19:36:09 +0200 | ||
8 | Subject: [PATCH 1/2] emulation: Limit integer arguments to 65535 | ||
9 | |||
10 | To guard against malicious sequences containing excessively big numbers, | ||
11 | limit all parsed numbers to 16 bit range. Doing this here in the parsing | ||
12 | routine is a catch-all guard; this doesn't preclude enforcing | ||
13 | more stringent limits in the handlers themselves. | ||
14 | |||
15 | https://bugzilla.gnome.org/show_bug.cgi?id=676090 | ||
16 | --- | ||
17 | src/table.c | 2 +- | ||
18 | src/vteseq.c | 2 +- | ||
19 | 2 files changed, 2 insertions(+), 2 deletions(-) | ||
20 | |||
21 | diff --git a/src/table.c b/src/table.c | ||
22 | index 140e8c8..85cf631 100644 | ||
23 | --- a/src/table.c | ||
24 | +++ b/src/table.c | ||
25 | @@ -550,7 +550,7 @@ _vte_table_extract_numbers(GValueArray **array, | ||
26 | if (G_UNLIKELY (*array == NULL)) { | ||
27 | *array = g_value_array_new(1); | ||
28 | } | ||
29 | - g_value_set_long(&value, total); | ||
30 | + g_value_set_long(&value, CLAMP (total, 0, G_MAXUSHORT)); | ||
31 | g_value_array_append(*array, &value); | ||
32 | } while (i++ < arginfo->length); | ||
33 | g_value_unset(&value); | ||
34 | diff --git a/src/vteseq.c b/src/vteseq.c | ||
35 | index 7ef4c8c..10991db 100644 | ||
36 | --- a/src/vteseq.c | ||
37 | +++ b/src/vteseq.c | ||
38 | @@ -557,7 +557,7 @@ vte_sequence_handler_multiple(VteTerminal *terminal, | ||
39 | GValueArray *params, | ||
40 | VteTerminalSequenceHandler handler) | ||
41 | { | ||
42 | - vte_sequence_handler_multiple_limited(terminal, params, handler, G_MAXLONG); | ||
43 | + vte_sequence_handler_multiple_limited(terminal, params, handler, G_MAXUSHORT); | ||
44 | } | ||
45 | |||
46 | static void | ||
47 | -- | ||
48 | 2.4.9 (Apple Git-60) | ||
49 | |||
50 | |||
51 | From cf1ad453a8def873c49cf6d88162593402f32bb2 Mon Sep 17 00:00:00 2001 | ||
52 | From: Christian Persch <chpe@gnome.org> | ||
53 | Date: Sat, 19 May 2012 20:04:12 +0200 | ||
54 | Subject: [PATCH 2/2] emulation: Limit repetitions | ||
55 | |||
56 | Don't allow malicious sequences to cause excessive repetitions. | ||
57 | |||
58 | https://bugzilla.gnome.org/show_bug.cgi?id=676090 | ||
59 | --- | ||
60 | src/vteseq.c | 25 ++++++++++++++++++------- | ||
61 | 1 file changed, 18 insertions(+), 7 deletions(-) | ||
62 | |||
63 | diff --git a/src/vteseq.c b/src/vteseq.c | ||
64 | index 10991db..209522f 100644 | ||
65 | --- a/src/vteseq.c | ||
66 | +++ b/src/vteseq.c | ||
67 | @@ -1392,7 +1392,7 @@ vte_sequence_handler_dc (VteTerminal *terminal, GValueArray *params) | ||
68 | static void | ||
69 | vte_sequence_handler_DC (VteTerminal *terminal, GValueArray *params) | ||
70 | { | ||
71 | - vte_sequence_handler_multiple(terminal, params, vte_sequence_handler_dc); | ||
72 | + vte_sequence_handler_multiple_r(terminal, params, vte_sequence_handler_dc); | ||
73 | } | ||
74 | |||
75 | /* Delete a line at the current cursor position. */ | ||
76 | @@ -1785,7 +1785,7 @@ vte_sequence_handler_reverse_index (VteTerminal *terminal, GValueArray *params) | ||
77 | static void | ||
78 | vte_sequence_handler_RI (VteTerminal *terminal, GValueArray *params) | ||
79 | { | ||
80 | - vte_sequence_handler_multiple(terminal, params, vte_sequence_handler_nd); | ||
81 | + vte_sequence_handler_multiple_r(terminal, params, vte_sequence_handler_nd); | ||
82 | } | ||
83 | |||
84 | /* Save cursor (position). */ | ||
85 | @@ -2777,8 +2777,7 @@ vte_sequence_handler_insert_lines (VteTerminal *terminal, GValueArray *params) | ||
86 | { | ||
87 | GValue *value; | ||
88 | VteScreen *screen; | ||
89 | - long param, end, row; | ||
90 | - int i; | ||
91 | + long param, end, row, i, limit; | ||
92 | screen = terminal->pvt->screen; | ||
93 | /* The default is one. */ | ||
94 | param = 1; | ||
95 | @@ -2796,7 +2795,13 @@ vte_sequence_handler_insert_lines (VteTerminal *terminal, GValueArray *params) | ||
96 | } else { | ||
97 | end = screen->insert_delta + terminal->row_count - 1; | ||
98 | } | ||
99 | - /* Insert the new lines at the cursor. */ | ||
100 | + | ||
101 | + /* Only allow to insert as many lines as there are between this row | ||
102 | + * and the end of the scrolling region. See bug #676090. | ||
103 | + */ | ||
104 | + limit = end - row + 1; | ||
105 | + param = MIN (param, limit); | ||
106 | + | ||
107 | for (i = 0; i < param; i++) { | ||
108 | /* Clear a line off the end of the region and add one to the | ||
109 | * top of the region. */ | ||
110 | @@ -2817,8 +2822,7 @@ vte_sequence_handler_delete_lines (VteTerminal *terminal, GValueArray *params) | ||
111 | { | ||
112 | GValue *value; | ||
113 | VteScreen *screen; | ||
114 | - long param, end, row; | ||
115 | - int i; | ||
116 | + long param, end, row, i, limit; | ||
117 | |||
118 | screen = terminal->pvt->screen; | ||
119 | /* The default is one. */ | ||
120 | @@ -2837,6 +2841,13 @@ vte_sequence_handler_delete_lines (VteTerminal *terminal, GValueArray *params) | ||
121 | } else { | ||
122 | end = screen->insert_delta + terminal->row_count - 1; | ||
123 | } | ||
124 | + | ||
125 | + /* Only allow to delete as many lines as there are between this row | ||
126 | + * and the end of the scrolling region. See bug #676090. | ||
127 | + */ | ||
128 | + limit = end - row + 1; | ||
129 | + param = MIN (param, limit); | ||
130 | + | ||
131 | /* Clear them from below the current cursor. */ | ||
132 | for (i = 0; i < param; i++) { | ||
133 | /* Insert a line at the end of the region and remove one from | ||
134 | -- | ||
135 | 2.4.9 (Apple Git-60) | ||
136 | |||
diff --git a/meta/recipes-support/vte/vte-0.28.2/obsolete_automake_macros.patch b/meta/recipes-support/vte/vte-0.28.2/obsolete_automake_macros.patch deleted file mode 100644 index 6763d37540..0000000000 --- a/meta/recipes-support/vte/vte-0.28.2/obsolete_automake_macros.patch +++ /dev/null | |||
@@ -1,14 +0,0 @@ | |||
1 | Upstream-Status: Submitted [https://bugzilla.gnome.org/show_bug.cgi?id=691545] | ||
2 | |||
3 | Signed-off-by: Marko Lindqvist <cazfi74@gmail.com> | ||
4 | diff -Nurd vte-0.28.2/gnome-pty-helper/configure.in vte-0.28.2/gnome-pty-helper/configure.in | ||
5 | --- vte-0.28.2/gnome-pty-helper/configure.in 2010-07-15 20:08:44.000000000 +0300 | ||
6 | +++ vte-0.28.2/gnome-pty-helper/configure.in 2013-01-11 14:50:34.971027440 +0200 | ||
7 | @@ -8,7 +8,6 @@ | ||
8 | AC_ISC_POSIX | ||
9 | AC_PROG_CC | ||
10 | AC_STDC_HEADERS | ||
11 | -AM_PROG_CC_STDC | ||
12 | |||
13 | if test -z "$enable_maintainer_mode"; then | ||
14 | enable_maintainer_mode=yes | ||
diff --git a/meta/recipes-support/vte/vte.inc b/meta/recipes-support/vte/vte.inc deleted file mode 100644 index 8565cc2ad6..0000000000 --- a/meta/recipes-support/vte/vte.inc +++ /dev/null | |||
@@ -1,15 +0,0 @@ | |||
1 | SUMMARY = "Virtual terminal emulator GTK+ widget library" | ||
2 | BUGTRACKER = "https://bugzilla.gnome.org/buglist.cgi?product=vte" | ||
3 | LICENSE = "LGPLv2.0" | ||
4 | DEPENDS = " glib-2.0 gtk+ intltool-native ncurses" | ||
5 | RDEPENDS_libvte = "vte-termcap" | ||
6 | |||
7 | inherit gnome gtk-doc distro_features_check upstream-version-is-even gobject-introspection | ||
8 | ANY_OF_DISTRO_FEATURES = "${GTK2DISTROFEATURES}" | ||
9 | |||
10 | EXTRA_OECONF = "--disable-python" | ||
11 | |||
12 | PACKAGES =+ "libvte vte-termcap" | ||
13 | FILES_libvte = "${libdir}/*.so.* ${libexecdir}/gnome-pty-helper" | ||
14 | FILES_vte-termcap = "${datadir}/vte/termcap-0.0" | ||
15 | |||
diff --git a/meta/recipes-support/vte/vte/0001-Don-t-enable-stack-protection-by-default.patch b/meta/recipes-support/vte/vte/0001-Don-t-enable-stack-protection-by-default.patch new file mode 100644 index 0000000000..fcfc559758 --- /dev/null +++ b/meta/recipes-support/vte/vte/0001-Don-t-enable-stack-protection-by-default.patch | |||
@@ -0,0 +1,29 @@ | |||
1 | From b0a579d83e355545b64742c997fe8b1d58bf4207 Mon Sep 17 00:00:00 2001 | ||
2 | From: Jussi Kukkonen <jussi.kukkonen@intel.com> | ||
3 | Date: Mon, 13 Jun 2016 11:05:00 +0300 | ||
4 | Subject: [PATCH] Don't enable stack-protection by default | ||
5 | |||
6 | These are set by security_flags.inc. | ||
7 | |||
8 | Upstream-Status: Inappropriate [configuration] | ||
9 | Signed-off-by: Jussi Kukkonen <jussi.kukkonen@intel.com> | ||
10 | --- | ||
11 | configure.ac | 2 -- | ||
12 | 1 file changed, 2 deletions(-) | ||
13 | |||
14 | diff --git a/configure.ac b/configure.ac | ||
15 | index 068d072..d580f84 100644 | ||
16 | --- a/configure.ac | ||
17 | +++ b/configure.ac | ||
18 | @@ -138,8 +138,6 @@ m4_define([compiler_flags_common],[ dnl | ||
19 | -fno-common dnl | ||
20 | -fdiagnostics-show-option dnl | ||
21 | -fno-strict-aliasing dnl | ||
22 | - -fstack-protector dnl | ||
23 | - -fstack-protector-strong dnl | ||
24 | -fno-semantic-interposition dnl | ||
25 | -Wno-deprecated-declarations dnl | ||
26 | ]) | ||
27 | -- | ||
28 | 2.1.4 | ||
29 | |||
diff --git a/meta/recipes-support/vte/vte_0.28.2.bb b/meta/recipes-support/vte/vte_0.28.2.bb deleted file mode 100644 index 74087ca831..0000000000 --- a/meta/recipes-support/vte/vte_0.28.2.bb +++ /dev/null | |||
@@ -1,16 +0,0 @@ | |||
1 | require vte.inc | ||
2 | |||
3 | LIC_FILES_CHKSUM = "file://COPYING;md5=3bf50002aefd002f49e7bb854063f7e7" | ||
4 | |||
5 | PR = "r6" | ||
6 | |||
7 | SRC_URI += "file://obsolete_automake_macros.patch \ | ||
8 | file://cve-2012-2738.patch \ | ||
9 | " | ||
10 | |||
11 | CFLAGS += "-D_GNU_SOURCE" | ||
12 | |||
13 | SRC_URI[archive.md5sum] = "497f26e457308649e6ece32b3bb142ff" | ||
14 | SRC_URI[archive.sha256sum] = "86cf0b81aa023fa93ed415653d51c96767f20b2d7334c893caba71e42654b0ae" | ||
15 | |||
16 | RECIPE_NO_UPDATE_REASON = "matchbox-terminal needs to be ported over to new vte first" | ||
diff --git a/meta/recipes-support/vte/vte_0.44.1.bb b/meta/recipes-support/vte/vte_0.44.1.bb new file mode 100644 index 0000000000..ecbf58a900 --- /dev/null +++ b/meta/recipes-support/vte/vte_0.44.1.bb | |||
@@ -0,0 +1,28 @@ | |||
1 | SUMMARY = "Virtual terminal emulator GTK+ widget library" | ||
2 | BUGTRACKER = "https://bugzilla.gnome.org/buglist.cgi?product=vte" | ||
3 | LICENSE = "LGPLv2.1+" | ||
4 | DEPENDS = "glib-2.0 gtk+3 intltool-native" | ||
5 | |||
6 | LIC_FILES_CHKSUM = "file://COPYING;md5=4fbd65380cdd255951079008b364516c" | ||
7 | |||
8 | inherit gnomebase gtk-doc distro_features_check upstream-version-is-even vala gobject-introspection | ||
9 | |||
10 | SRC_URI += "file://0001-Don-t-enable-stack-protection-by-default.patch" | ||
11 | SRC_URI[archive.md5sum] = "20916d97a5902657e54307cc2757beee" | ||
12 | SRC_URI[archive.sha256sum] = "712dd548339f600fd7e221d12b2670a13a4361b2cd23ba0e057e76cc19fe5d4e" | ||
13 | |||
14 | ANY_OF_DISTRO_FEATURES = "${GTK3DISTROFEATURES}" | ||
15 | |||
16 | PACKAGECONFIG[gnutls] = "--with-gnutls,--without-gnutls,gnutls" | ||
17 | |||
18 | CFLAGS += "-D_GNU_SOURCE" | ||
19 | |||
20 | # Enable vala only if gobject-introspection is enabled | ||
21 | EXTRA_OECONF = "--enable-vala=auto" | ||
22 | |||
23 | # libtool adds "-nostdlib" when g++ is used. This breaks PIE builds. | ||
24 | # Use libtool-cross (which has a hack to prevent that) instead. | ||
25 | EXTRA_OEMAKE_class-target = "LIBTOOL=${STAGING_BINDIR_CROSS}/${HOST_SYS}-libtool" | ||
26 | |||
27 | PACKAGES =+ "libvte" | ||
28 | FILES_libvte = "${libdir}/*.so.*" | ||