summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* musl: Update to latest masterKhem Raj2019-09-161-1/+1
| | | | | | | | | | | | | | | | | * Added copy_file_range posix_spawn_file_actions_add[f]chdir API * optreset is added to getopt * pthread fixes * Conditionally add legacy long definition of wchar_t Details [1] [1] https://git.musl-libc.org/cgit/musl/log/?qt=range&q=6ad514e4e278f0c3b18eb2db1d45638c9af1c07f..1f0e9f9cc2e3fa354f94e18b3b362de5f1ec7272 (From OE-Core rev: 030b44af19268ae4a72bb25aa77526f7e39bd4a3) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* adwaita-icon-theme: fix rare install raceRoss Burton2019-09-161-4/+8
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | There have been rare errors during the build of adwaita-icon-theme, such as: Exception: bb.process.ExecutionError: Execution of '.../temp/run.sysroot_stage_all.45186' failed with exit code 2: cpio: ./icons/Adwaita/32x32/legacy/_inst.34160_: Cannot stat: No such file or directory cpio: ./icons/Adwaita/32x32/legacy/_inst.33428_: Cannot stat: No such file or directory cpio: ./icons/Adwaita/32x32/legacy/_inst.35421_: Cannot stat: No such file or directory cpio: ./icons/Adwaita/32x32/legacy/_inst.34533_: Cannot stat: No such file or directory cpio: ./icons/Adwaita/32x32/legacy/_inst.35366_: Cannot stat: No such file or directory The problem was that a previous optimisation (oe-core cd9af17028) to massively increase the install speed (by parallelling the hundreds of installs) was subtly wrong. It was essentially doing this: for i in list; do install i & done wait In pure shell this does parallelise the install commands and then wait for them all to finish before exiting, but in Makefiles *each line in a separate shell*. The actual Makefile is closer to this: for i in list; do \ install i & \ done wait The backslashes are required to write a multi-line for loop in a Makefile, but note that when the loop ends the shell exits and all of the install processes that are still running are disowned. The wait command then executes in a new shell, and there are no childen to wait for. The fix is trivial: add more backslashes so that the wait is part of the same shell. (From OE-Core rev: f969a8ff160390726565421d4c9b367e49172487) Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* perf: fix build on kernels which don't have ${S}/tools/include/linux/bits.hMartin Jansa2019-09-161-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * tools/include/linux/bits.h was added in v4.20-rc1 with this commit: commit ba4aa02b417f08a0bee5e7b8ed70cac788a7c854 Author: Arnaldo Carvalho de Melo <acme@redhat.com> Date: Tue Sep 25 10:55:59 2018 -0300 tools include: Adopt linux/bits.h * also if you're building for such older kernel you will probably see do_compile failing with: | config/Makefile:448: Missing perl devel files. Disabling perl scripting support, please install perl-ExtUtils-Embed/libperl-dev | config/Makefile:495: Python 3 is not yet supported; please set | config/Makefile:496: PYTHON and/or PYTHON_CONFIG appropriately. easiest work around is to disable scripting PACKAGECONFIG, because since oe-core commit: commit 584af667e0000129bcb5c9e8108485f2f6590eaf Author: Bruce Ashfield <bruce.ashfield@gmail.com> Date: Wed Aug 28 22:14:41 2019 -0400 perf: change dependencies on python to python3 The upstream kernel can now handle python3 for the perf scripts, coupled with the impending EOL of python2, we switch the dependencies in perf (scripting) to python3. it now uses python3, but the support for that was added in kernel v4.17-rc1 with: commit 66dfdff03d196e51322c6a85c0d8db8bb2bdd655 Author: Jaroslav Skarvada <jskarvad@redhat.com> Date: Fri Jan 19 21:56:41 2018 +0100 perf tools: Add Python 3 support Added Python 3 support while keeping Python 2.7 compatibility. if you really need scripting support than either backport the kernel patch to your kernel or undo the perf recipe changes. (From OE-Core rev: d6ee3d3bdf183a9060b5b0c25b97688a4b9d40dc) Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* meta: add missing descriptions and homepage in bspMaxime Roussin-Bélanger2019-09-165-0/+20
| | | | | | | | (From OE-Core rev: ec4fdfcc7bcbc9bb92e2f33b37cc8c99bf1b6822) Signed-off-by: Maxime Roussin-Bélanger <maxime.roussinbelanger@gmail.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* busybox-inittab: minor formatting tweaksAndre McCurdy2019-09-161-9/+10
| | | | | | | | | | | | Add an empty line to inittab before the line(s) which start getty. Also cleanup indent in recipe do_install(). (From OE-Core rev: d1955596080f8261efe3b21c5df005648ce207c9) Signed-off-by: Andre McCurdy <armccurdy@gmail.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* busybox: drop inittab from SRC_URI ( now moved to busybox-inittab )Andre McCurdy2019-09-161-1/+0
| | | | | | | | | | | | | The reference to inittab should have been removed from busybox SRC_URI when the file was moved into the busybox-inittab recipe: http://git.openembedded.org/openembedded-core/commit/?id=afb09abd2f0f7555ba156260a87fd3867f591310 (From OE-Core rev: 1840523749ae7cbc39d89363662641fdda15d7d4) Signed-off-by: Andre McCurdy <armccurdy@gmail.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* busybox: drop unused mount.busybox and umount.busybox wrappersAndre McCurdy2019-09-163-8/+0
| | | | | | | | (From OE-Core rev: 7e999dce323a97a3924cb10158d5151ea43e777a) Signed-off-by: Andre McCurdy <armccurdy@gmail.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* font-util: update to 1.3.2Oleksandr Kravchuk2019-09-161-2/+2
| | | | | | | | (From OE-Core rev: 04e2b1cc2ae66402a8fca723cec57220cddd07e6) Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* lttng-modules: Add missing SRCREV_FORMATDaniel Gomez2019-09-161-0/+1
| | | | | | | | | | When using devupstream class the SRCREV_FORMAT variable must be set. (From OE-Core rev: 5d27db85d269f576929fd3c81f94e54d894cdf69) Signed-off-by: Daniel Gomez <daniel@qtec.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* glibc-testsuite: SkipRecipe if libc is not glibcNathan Rossi2019-09-161-0/+7
| | | | | | | | | | | To prevent issues with parsing or dependencies, limit this recipe to use only when the libc is glibc (and libc-locale is glibc-locale). (From OE-Core rev: 88849a0652f1a9cffd5c1b5caae2878b3a438273) Signed-off-by: Nathan Rossi <nathan@nathanrossi.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* iptables: add systemd helper unit to load/restore rulesJack Mitchell2019-09-163-1/+29
| | | | | | | | | | | | | | | | | | | There is currently no way to automatically load iptables rules in OE. Add a systemd unit file to automatically load rules on network connection. This is cribbed from the way ArchLinux handles iptables with some minor modifications for OE. New rules can be generated directly on the target using: # iptables-save -f /etc/iptables/iptables.rules Good documentation for writing rules offline is lacking, but the basics are explained here: https://unix.stackexchange.com/q/400163/49405 (From OE-Core rev: 76d3574d17c38d93ba4660bdae5730ac222994d4) Signed-off-by: Jack Mitchell <jack@embed.me.uk> Signed-off-by: Diego Rondini <diego.rondini@kynetics.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* tune-cortexa57-cortexa53: add tunes for ARM Cortex-A53-Cortex-A57Limeng2019-09-161-0/+18
| | | | | | | | | | | | | | | | commit 3613b2780a6b5d5d70ea6802be5060a8214cbdb5 from git://github.com/renesas-rcar/meta-renesas The renesas rcar SoC H3/M3 is big.LITTLE architecture(cortex-a57.cortex-a53). In order to optimize the performance of the code running on SoC H3/M3, add a tune file for ARM Cortex-A53-Cortex-A57. Create this tune file by refering GCC doc, 3.18.5 ARM Options. (From OE-Core rev: 7e0c9290a9971b92bcb313742f126ca7488d91c3) Signed-off-by: Meng Li <Meng.Li@windriver.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* conf/multilib.conf: Add ovmf to NON_MULTILIB_RECIPESRobert Yang2019-09-161-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | Fixed: MACHINE = "qemux86-64" require conf/multilib.conf MULTILIBS = "multilib:lib32" DEFAULTTUNE_virtclass-multilib-lib32 = "x86" $ bitbake ovmf lib32-ovmf [snip] ERROR: ovmf-edk2-stable201905-r0 do_deploy_setscene: The recipe ovmf is trying to install files into a shared area when those files already exist. Those files and their manifest location are: /buildarea1/lyang1/rebase-work/test_cc/tmp-glibc/deploy/images/qemux86-64/OvmfPkKek1.key (matched in manifest-qemux86_64-lib32-ovmf.deploy) [snip] Add it NON_MULTILIB_RECIPES to fix the problem since it is a firmware, build multilib for it doens't make much sense. (From OE-Core rev: 5c685f55ccba9d47a79e8798903b30b90bdf03c6) Signed-off-by: Robert Yang <liezhi.yang@windriver.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* runqemu: decouple gtk and gl optionsAlexander Kanavin2019-09-162-8/+15
| | | | | | | | | | | This will allow not having to multiply these options for the sdl frontend, instead combining them as needed. (From OE-Core rev: 922eb5012364b1603338cfa617712b941e892bbf) Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* cogl: Do not depend PN-dev on empty PNKhem Raj2019-09-161-0/+2
| | | | | | | | | | | | Fixes image build error e.g. - nothing provides cogl-1.0 = 1.22.4-r0.2 needed by cogl-1.0-dev-1.22.4-r0.2.core2-64 (From OE-Core rev: 70cb0c87a9e1d1001320d771fb84b5d8541591a3) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* python3-pygobject: update to 3.34.0Oleksandr Kravchuk2019-09-161-2/+2
| | | | | | | | (From OE-Core rev: b9280a3055fba5567f670e6c3190771bd4c5fe64) Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* valgrind: disable 256 ptests for aarch64Randy MacLeod2019-09-163-0/+254
| | | | | | | | | | | | | | | | | | | | | | | | | On qemuarm64 systems, about half of the valgrind tests fail and often result in defunct processes, eg: root 819 818 25 00:12 pts/0 00:01:52 /usr/bin/valgrind --command-line-only=yes --memcheck:leak-check=no --tool=memcheck -q --track-origins= root 861 420 0 00:13 pts/0 00:00:00 [sh] <defunct> Eventually these processes use so much memory that the out of memory killer runs. Hide the tests that fail as a horrid work-around until the root cause has been resolved since this at least allows the ptest run to complete. This work-around is done in the run-ptest script using a sorted list of tests so that they can be easily restored one by one without a rebuild during testing. With core-image-minimal on qemuarm64: Recipe | Passed | Failed | Skipped | Time(s) valgrind | 333 | 49 | 17 | 7637 (From OE-Core rev: 208023f8fcbf4aee34544a80f962ae25f25ffb8d) Signed-off-by: Randy MacLeod <Randy.MacLeod@windriver.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* valgrind: ptest improvements to run-ptest and moreRandy MacLeod2019-09-162-18/+47
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Make some changes to the run-ptest script: - after main tests run integrity check like the pkg Makefile. - aesthetic and ordering changes Add the .in_place directory and its contents which allows valgrind to be run in-place thereby enabling the gdbserver_tests to complete rather than hang. Unfortunately directory paths embedded in binaries still cause many of these test to fail. Add the exp-sgcheck tests. With core-image-minimal on qemux86-64/kvm: Recipe | Passed | Failed | Skipped | Time(s) before | 648 | 12 | 60 | 1541 after | 662 | 20 | 38 | 1429 ppc-no-gdbserv | 415 | 196 | 34 | 10689 Since fewer tests timeout, the overall time has decreased. With core-image-sato on qemux86-64/kvm the results are now the same as core-image-minimal. qemuppc/arm64 runs result in the oom-killer eventually running since some processes do not terminate properly and accumulate as defunct processes in memory. Without the gdbserver_tests, the tests complete without defunct process or the oom-killer running for ppc but not for arm64. (From OE-Core rev: 6dbaaeec17eae8329031188b688b33306a871870) Signed-off-by: Randy MacLeod <Randy.MacLeod@windriver.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* valgrind: make a few more ptests passRandy MacLeod2019-09-162-1/+44
| | | | | | | | | | | | | Adjust two memcheck vgtest files to deal with relative paths that are in test executables when cross-compiling. Add libgomp to enable OpenMP tests. Add the bz2 executable for memcheck/tests/vcpu_bz2. (From OE-Core rev: f75792b28e39e4c393c0a00369d5417e3af75b36) Signed-off-by: Randy MacLeod <Randy.MacLeod@windriver.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* valgrind: enable ~500 more ptestsRandy MacLeod2019-09-161-10/+15
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Add valgrind's top level config.h to the ptest package since it is used by several scripts to determine which tests to run. Drop the removal of: none/tests/shell, the content was already moved to: none/tests/scripts/shell so the filter useless and the files no longer cause a problem. Add a few more test directories that had been omitted. Add perf/bigcode for test: none/tests/bigcode Leave .c, .h, .S files in the ptest image since several of them are needed to run the tests. The overhead is ~13 MB which is high but keeping all test code is easier than figuring out which source files are needed and the entire valgrind-ptest package is ~115 MB so in this context it's an acceptable trade-off. Add bash dependency for ptest for none/tests/scripts/shell With core-image-minimal on qemux86-64/kvm: Recipe | Passed | Failed | Skipped | Time(s) before | 149 | 1 | 9 | 663 after | 648 | 12 | 60 | 1541 (From OE-Core rev: 083a5dd27d305ecd12214f2665460dbe06b96c2a) Signed-off-by: Randy MacLeod <Randy.MacLeod@windriver.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* qemu: Security Advisory - qemu - CVE-2019-15890Li Zhou2019-09-162-0/+49
| | | | | | | | | | | | Backporting patch from https://gitlab.freedesktop.org/slirp/libslirp/commit/c5927943 to solve CVE-2019-15890. (From OE-Core rev: 2cccc685cc6359595ef3e943cd03290d8c8866f0) Signed-off-by: Li Zhou <li.zhou@windriver.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* gdb: Mark gdbserver as ALLOW_EMPTY for riscv32Alistair Francis2019-09-161-0/+1
| | | | | | | | | | | riscv64 already has gdbserver set as ALLOW_EMPTY, so let's set it for riscv32 as well. (From OE-Core rev: 21e748d620022a75c0c2d0ab4a763a5992e8f154) Signed-off-by: Alistair Francis <alistair.francis@wdc.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libsoup:enable libsoup build as native packageJiang Lu2019-09-161-0/+2
| | | | | | | | | | | | Enable libsoup build as a native package, for it may invoked by other native package, such as ostree. (From OE-Core rev: 86e654ce051d4067d1601d68ad5f4729ab3d462f) Signed-off-by: Jiang Lu <lu.jiang@windriver.com> Signed-off-by: Liwei Song <liwei.song@windriver.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* glib-networking:enable glib-networking build as native packageJiang Lu2019-09-161-0/+2
| | | | | | | | | | | | Enable glib-networking build as a native package, for it is depended by libsoup. (From OE-Core rev: bfcc9680fbc8a79f114fd66b8a6f9befb4676817) Signed-off-by: Jiang Lu <lu.jiang@windriver.com> Signed-off-by: Liwei Song <liwei.song@windriver.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* gnupg: Extend -native wrapper to fix gpgme-native's gpgconf problemsJason Wessel2019-09-161-0/+3
| | | | | | | | | | | | | | | | | | | The gpg commit signing in ostree-native doesn't work properly when running from sstate. The ostree-native is linked with gpgme-native's libraries, which have calls into gpg. Ultimately it turned out the problem was that gpgme calls gpgconf and some of the other gnupg-native binaries directly. Not all the binaries have a wrapper which sets the environment variable GNUPG_BIN. Without this wrapper these binaries it gets the path assignment from the original compilation which causes a fault when running from sstate in a new tmp directory because these paths will not exist. (From OE-Core rev: f93bf3bd051923618ce3949d5686fdb8cf998645) Signed-off-by: Jason Wessel <jason.wessel@windriver.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* nfs-utils: fix nfs mount error on 32bit nfs serverYi Zhao2019-09-162-0/+157
| | | | | | | | | | | | | | | | | | | | | | | There is a client side error "Stale file handle" when mounting from a nfs server running on 32bit arch. Steps to reproduce: 1. $ MACHINE=qemux86 bitbake core-image-sato 2. $ runqemu qemux86 kvm nographic qemuparams="-m 1024" 3. $ echo "/nfs_root *(insecure,rw,async,no_root_squash,no_subtree_check)" \ >> /etc/exports $ /etc/init.d/nfsserver restart root@qemux86:~# mount -t nfs 127.0.0.1:/nfs_root /mnt mount: mounting 127.0.0.1:/nfs_root on /mnt failed: Stale file handle Backport a patch to fix this issue. (From OE-Core rev: 727e6ce1f904abf1a1059fde759c3aaea37de199) Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* timezone:upgrade 2019b -> 2019cZang Ruochen2019-09-161-5/+5
| | | | | | | | | | | | | | -tzdata : upgrade from 2019b to 2019c. -tzcode-native : upgrade from 2019b to 2019c. -tzdata.bb and tzcode-native.bb require timezone.inc. (From OE-Core rev: c5a382429d18642d35d40a4df6a58b971c724603) Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* mesa: no need to depend on target python3Ross Burton2019-09-161-1/+6
| | | | Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* python3: handle STAGING_LIBDIR/INCDIR being unsetRoss Burton2019-09-161-12/+16
| | | | Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* systemd: provides ${base_sbindir}/udevadmKai Kang2019-09-161-0/+4
| | | | | | | | | | | | | | | | | In some udev rules files such as 97-hid2hci.rules from bluez5, it calls /sbin/udevadm in a rule. eudev provides /usr/bin/udevadm and /sbin/udevadm which is a link to /usr/bin/udevadm. But systemd only provides /bin/udevadm. It is not convenient to update the rule file that udevadm reside in different directories for eudev and system. So create link file ${base_sbindir}/udevadm in systemd just the same as eudev to fix such kind of issues. (From OE-Core rev: c8bf23349af4972a76cb4b13179dac844812d75f) Signed-off-by: Kai Kang <kai.kang@windriver.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* python-numpy: fix build for libn32Chen Qi2019-09-161-0/+1
| | | | | | | | | | | | | | | | | | | | | Fix do_compile failure for libn32. To reproduce, use the following config. MACHINE = "qemumips64" require conf/multilib.conf MULTILIB_GLOBAL_VARIANTS_append = " libn32" MULTILIBS ?= "multilib:lib32 multilib:libn32" DEFAULTTUNE_virtclass-multilib-lib32 ?= "mips" DEFAULTTUNE_virtclass-multilib-libn32 ?= "mips64-n32" The error message is as following. numpy/core/include/numpy/npy_common.h:206:10: error: #error Unsupported size for type off_t (From OE-Core rev: b659b6dcb6be203e8c7bc678c902d4a31ce9fe70) Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ghostscript: CVE-2019-14811, CVE-2019-14817Stefan Ghinea2019-09-164-0/+577
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | A flaw was found in, ghostscript versions prior to 9.28, in the .pdf_hook_DSC_Creator procedure where it did not properly secure its privileged calls, enabling scripts to bypass `-dSAFER` restrictions. A specially crafted PostScript file could disable security protection and then have access to the file system, or execute arbitrary commands. A flaw was found in, ghostscript versions prior to 9.28, in the .pdfexectoken and other procedures where it did not properly secure its privileged calls, enabling scripts to bypass `-dSAFER` restrictions. A specially crafted PostScript file could disable security protection and then have access to the file system, or execute arbitrary commands. References: https://nvd.nist.gov/vuln/detail/CVE-2019-14811 https://nvd.nist.gov/vuln/detail/CVE-2019-14817 Upstream patches: http://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=885444fcbe10dc42787ecb76686c8ee4dd33bf33 http://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=cd1b1cacadac2479e291efe611979bdc1b3bdb19 (From OE-Core rev: 1533b92848ea73d6fe6ba22d87d7b6749b47842c) Signed-off-by: Stefan Ghinea <stefan.ghinea@windriver.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* mesa: Upgrade 19.1.1 -> 19.1.6Otavio Salvador2019-09-166-40/+25
| | | | | | | | | | | | | | | | | | | | | | - Add python3 to DEPENDS: mesa commit cb3072488c changed function that verifies python installation and to this new function works we need to have Python3 in DEPENDS. This is a bugfix only set of releases. Check following links for the relevant release notes: - https://www.mesa3d.org/relnotes/19.1.2.html - https://www.mesa3d.org/relnotes/19.1.3.html - https://www.mesa3d.org/relnotes/19.1.4.html - https://www.mesa3d.org/relnotes/19.1.5.html - https://www.mesa3d.org/relnotes/19.1.6.html (From OE-Core rev: a870ce9261fffc2e4772e55bd2e727aa27172846) Signed-off-by: Otavio Salvador <otavio@ossystems.com.br> Signed-off-by: Fabio Berton <fabio.berton@ossystems.com.br> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* gstreamer1.0-libav: enable gtk-doc againRoss Burton2019-09-162-5/+36
| | | | | | | | | | Remove the broken piece of the API documentation template so the documentation can be generated again. (From OE-Core rev: 25a0d1b0b14a4fcd41ca08084a2f22db54dec58e) Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* oe-git-proxy: fix dash "Bad substitution"Henning Schild2019-09-161-2/+2
| | | | | | | | | | | The script claims it works with dash, make sure that is actually the case. (From OE-Core rev: cb373201464f4a0a90482f62a24a4043abe73fd6) Signed-off-by: Henning Schild <henning.schild@siemens.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* oe-git-proxy: NO_PROXY suffix matching without wildcard for match_hostHenning Schild2019-09-161-1/+1
| | | | | | | | | | | | NO_PROXY can also contain just suffixes that do not start with a "*". We failed to match those so far. Just add an extra "*" to also match those suffixes. If one was there we get "**" which does not hurt. (From OE-Core rev: 12f0cc209aaba48f846c62663e0b9e5efd253d71) Signed-off-by: Henning Schild <henning.schild@siemens.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* oe-git-proxy: disable shell pathname expansion for the whole scriptHenning Schild2019-09-161-0/+3
| | | | | | | | | | | This truly fixes the issue that cbc148d5d93d5f3531434fee7b234a16196b3088 wanted to solve, without breaking the iteration over multiple entries. (From OE-Core rev: 477ee7e673684db988c66a75b6400e33509730b4) Signed-off-by: Henning Schild <henning.schild@siemens.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* Revert "oe-git-proxy: Avoid resolving NO_PROXY against local files"Henning Schild2019-09-161-2/+2
| | | | | | | | | | | | | This reverts commit cbc148d5d93d5f3531434fee7b234a16196b3088. The quoting causes H to be one string with spaces, so looping over multiple entries does not work anymore. (From OE-Core rev: 0fdc12dac6244be135ea519fe9c39109e7cfc6d6) Signed-off-by: Henning Schild <henning.schild@siemens.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* oeqa: add case for oe-git-proxyHenning Schild2019-09-161-0/+58
| | | | | | | | | | | The escaping, splitting and matching of NO_PROXY in oe-git-proxy deserves its own testcase, add it. (From OE-Core rev: c07134711f97c966d70aaf2798800214d5426005) Signed-off-by: Henning Schild <henning.schild@siemens.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* oe-git-proxy: allow setting SOCAT from outsideHenning Schild2019-09-161-4/+6
| | | | | | | | | | This allows to write selftests where we can mock the real socat. (From OE-Core rev: ea2690e867ff11250d3dd143184432dd03909910) Signed-off-by: Henning Schild <henning.schild@siemens.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libtasn1: fix build with api-documentation enabledRoss Burton2019-09-162-0/+39
| | | | | | | (From OE-Core rev: 698efe108de724d9129ca938151ab7c7d3cb34cc) Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* elfutils: Fix build on ppc/muslKhem Raj2019-09-162-0/+33
| | | | | | | | | | musl relies on the pt_regs definitions from kernel ptrace headers (From OE-Core rev: 7df9aa52446a031c10e84f321733a0e56f563e85) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* btrfs-tools:upgrade 5.2.1 -> 5.2.2Zang Ruochen2019-09-161-1/+1
| | | | | | | | (From OE-Core rev: 53a7c9c6da894848cba0c3bf2ed93b7b268497ac) Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ptrace: Drop ptrace aid for musl/ppcKhem Raj2019-09-162-32/+0
| | | | | | | | | | This has been fixed and is no longer needed (From OE-Core rev: 74ea0264cc5ba27dd37053f79301d18c8f1b6e7d) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* elfutils: 0.176 -> 0.177Hongxu Jia2019-09-1618-190/+431
| | | | | | | | | | | | | | | | | | | | | | | | - Update Debian patches http://ftp.de.debian.org/debian/pool/main/e/elfutils/elfutils_0.176-1.debian.tar.xz - Rebase Debian patches to 0.177 debian/hppa_backend.diff debian/mips_backend.diff debian/arm_backend.diff debian/mips_readelf_w.patch debian/testsuite-ignore-elflint.diff debian/mips_cfi.patch - Fix build failure while applying debian patches 0001-fix-compile-failure-with-debian-patches.patch - Rebase musl patches (From OE-Core rev: 35143611034758cc670e9d88bc93f97fe33c52fc) Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* screen: add /etc/screenrc as global config fileYi Zhao2019-09-161-1/+2
| | | | | | | | (From OE-Core rev: 15fdf699179038f4b636b9310bb31583a76c8a29) Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* iw: upgrade to 5.3Changhyeok Bae2019-09-161-3/+2
| | | | | | | | | | Separated build dir doesn't work because Makefile points out source dir. (From OE-Core rev: fef943ab63d30bd1d6f9be00b0976000a55cca0e) Signed-off-by: Changhyeok Bae <changhyeok.bae@gmail.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* oeqa/selftest: Rework toolchain tests to use OEPTestResultTestCaseNathan Rossi2019-09-163-12/+15
| | | | | | | | | | Use OEPTestResultTestCase to collect results and add logfile collection and compression. (From OE-Core rev: b75aced558013a459f29617b53cf477cb9b387ac) Signed-off-by: Nathan Rossi <nathan@nathanrossi.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* oeqa/core/case.py: Add OEPTestResultTestCase for ptestresult helpersNathan Rossi2019-09-163-28/+109
| | | | | | | | | | | | | | | | Add the OEPTestResultTestCase class as a mix-in class to provide helper functions for interacting with ptestresults within the extraresults object generated by the test case. This class also provides default compression of log text and log files. Also add support to resulttool for decoding/decompressing log files embedded in the test results. (From OE-Core rev: 06cba9883a5964320969301fd05eeb6bec3e786d) Signed-off-by: Nathan Rossi <nathan@nathanrossi.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* gcc-cross.inc: Process binaries in build dir to be relocatableNathan Rossi2019-09-161-1/+9
| | | | | | | | | | | | Process binaries within the build directory before stashing to be relocatable with ORIGIN relative rpaths. This corrects issues with rpaths being invalid when trying to use the binaries from an unstashed build directory (e.g. gcc-runtime). (From OE-Core rev: 34d9f60a8c2e98fdacbb799af11ec015bc5700f4) Signed-off-by: Nathan Rossi <nathan@nathanrossi.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>