summaryrefslogtreecommitdiffstats
path: root/meta/recipes-devtools/python
Commit message (Collapse)AuthorAgeFilesLines
* python: Disables SSLv3Sona Sarmadi2015-02-022-0/+38
| | | | | | | | | | | | | | | | | | | | | | | This is related to "SSLv3 POODLE vulnerability" CVE-2014-3566 Building python without SSLv3 support when openssl is built without any support for SSLv3 (e.g. by adding EXTRA_OECONF = " -no-ssl3" in the openssl recipes). Backport from: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=768611#22 [python2.7-nossl3.patch] only Modules/_ssl.c is backported. References: https://bugzilla.yoctoproject.org/show_bug.cgi?id=7015 https://bugzilla.yoctoproject.org/show_bug.cgi?id=6843 http://bugs.python.org/issue22638 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3566 (From OE-Core rev: 3462cac82cf0ab32e5e530f543b14fdcc211c678) Signed-off-by: Sona Sarmadi <sona.sarmadi@enea.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* arch-mips.inc: Change definition of TRANSLATED_TARGET_ARCHMark Hatle2015-01-293-0/+173
| | | | | | | | | | | | | | | | | | | | | | | [YOCTO #7230] In certain system configurations TRANSLATED_TARGET_ARCH will not expand in the right order for gcc-cross-candian-mips64n32 to be generated properly. This will cause SDKs to fail to generate properly. Changing the global definition of TRANSLATED_TARGET_ARCH always expands the ABIEXTENSION, which causes the OVERRIDES to pick it up as well. This effectively defines a new class of overrides for the 'n32'. The side effect is that we need to duplicate some mips64 overrides, and redefine others that were previously 'n32' or 'mips64' exclusive to have the correct semantics. (From OE-Core rev: 4b3a2b703b20583bd107f00a297d972e9bfb514a) Signed-off-by: Mark Hatle <mark.hatle@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* python-smartpm: Fix attemptonly builds when file conflicts occurMark Hatle2015-01-291-31/+66
| | | | | | | | | | | | | | [YOCTO #7299] When file conflicts occur, the RPM transaction aborts. Instead of simply accepting the failure, we now identify, capture, and remove the offending package(s) from the transaction and retry. (From OE-Core rev: cd475aea5f5bc4b6a2dd3e576070a117ae079597) Signed-off-by: Mark Hatle <mark.hatle@windriver.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* python-2.7-manifest: Add package for contextlib modulePhilip Tricca2015-01-231-3/+7
| | | | | | | | | This is required for python code using 'with' statements. (From OE-Core rev: 27dbacdb88ee3e79f4c95a779d8a7e8c5c8f941d) Signed-off-by: Philip Tricca <flihp@twobit.us> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* python3: fix for cross compilingRobert Yang2015-01-234-4/+112
| | | | | | | | | | | | | | | | Fixed: * python3 has introduced _PYTHON_PROJECT_BASE which is used for separate B and S, but it doesn't work when compile Modules, the target python3 runs python3-native's sysconfig to get srcdir which is the native's, there would be errors when native's srcdir has been removed, add _PYTHON_PROJECT_SRC to fix the problem. * Check cross_compiling when get FLAGS (From OE-Core rev: c33639963491f00f55b80299922895fe68b0637d) Signed-off-by: Robert Yang <liezhi.yang@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* python: fix B != SRobert Yang2015-01-163-8/+8
| | | | | | | | | | | | And bump PR to avoid: gcc: error: Parser/tokenizer_pgen.o: No such file or directory gcc: error: Parser/printgrammar.o: No such file or directory gcc: error: Parser/pgenmain.o: No such file or directory (From OE-Core rev: aea42f59c8331c4d5944f698453bfd663aa0c59d) Signed-off-by: Robert Yang <liezhi.yang@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* python-gitdb: upgrade to 0.6.1Robert Yang2015-01-161-2/+3
| | | | | | | (From OE-Core rev: eb46e1d61f6658b921372354771102f91b177c66) Signed-off-by: Robert Yang <liezhi.yang@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* python-git: upgrade to 0.3.3Robert Yang2015-01-161-2/+3
| | | | | | | (From OE-Core rev: 70ca4ede24cd45057992580ab1a81e803a49a68b) Signed-off-by: Robert Yang <liezhi.yang@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* python-2.7-manifest.inc: add stdlib argparse moduleMaciej Borzecki2014-12-231-3/+7
| | | | | | | | | | | | Adding argparse module from Python's standard library. The module has replaced previous python-argparse package that was build using source that are not part of Python 2.7 release. (From OE-Core rev: 198c67c2f9407f9c36127ff5a0778ed981778410) Signed-off-by: Maciej Borzecki <maciej.borzecki@open-rnd.pl> Signed-off-by: Maciek Borzecki <maciek.borzecki@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* python-argparse: remove external argparse moduleMaciej Borzecki2014-12-231-17/+0
| | | | | | | | | | | Python argparse module is a part of a standard library since Python 2.7 release. Remove externally built module in favor of the stdlib one. (From OE-Core rev: c99b7bcb95fb4ede9293119487a7cec391136028) Signed-off-by: Maciej Borzecki <maciej.borzecki@open-rnd.pl> Signed-off-by: Maciek Borzecki <maciek.borzecki@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* python-pycurl: build docstrings to fix rebuildsRoss Burton2014-12-111-0/+5
| | | | | | | | | | | On a rebuild base.bbclass will invoke "make clean" to ensure that old build objects are not used. This will delete docstrings.c and the only way to re-generate that is with a dedicated setup.py target. (From OE-Core rev: f5bc0ba35ac531feae2e84bbc4f9d16f861db6c6) Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* python3-core: Fix minimal python3 installAlejandro Hernandez2014-12-111-5/+9
| | | | | | | | | | | | | | | | | | | Added additional runtime dependencies for python3-core needed to run the interpreter with a minimal install (codecs,io,math,reprlib). Created python3-reprlib package to avoid getting python3-misc bringing lots of unneeded libraries. Fixed FILES-python3-core, missing _sysconfigdata, renamed copyreg undetected before due to previously needed installation of python3-misc. [YOCTO #6967] (From OE-Core rev: bafdfb28726d0a9b30b8283b2472727e8208059d) Signed-off-by: Alejandro Hernandez <alejandro.hernandez@linux.intel.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* python: add python-codecs runtime dependency for python-jsonMagnus Olsson2014-12-111-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | A piece of JSON initialization code that runs when you "import json" tries to use the hex-decoder, thus breaks if you do not have python-codecs installed. Example: >>> import json Traceback (most recent call last): File "<stdin>", line 1, in <module> File "/usr/lib/python2.7/json/__init__.py", line 108, in <module> from .decoder import JSONDecoder File "/usr/lib/python2.7/json/decoder.py", line 24, in <module> NaN, PosInf, NegInf = _floatconstants() File "/usr/lib/python2.7/json/decoder.py", line 18, in _floatconstants _BYTES = '7FF80000000000007FF0000000000000'.decode('hex') LookupError: no codec search functions registered: can't find encoding This patch adds a runtime dependency on python-codecs for python-json and re-generates the python manifests for Python v2.7. Solves [YOCTO #7020]. (From OE-Core rev: 90fd48144f146f455b18372a9b061314ab3a3857) Signed-off-by: Magnus Olsson <magnus@minimum.se> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* python: fix ssl import errorMaxin B. John2014-12-111-1/+1
| | | | | | | | | | | | | | | | | | | Fix this ssl import error: Python 2.7.3 (default, Dec 5 2014, 16:24:17) [GCC 4.9.1] on linux2 Type "help", "copyright", "credits" or "license" for more information. >>> import ssl Traceback (most recent call last): File "<stdin>", line 1, in <module> File "/usr/lib/python2.7/ssl.py", line 92, in <module> import base64 # for DER-to-PEM translation ImportError: No module named base64 (From OE-Core rev: dfa34e70a4c7543dc67835c2e9a270ccd011ac72) Signed-off-by: Maxin B. John <maxin.john@enea.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* python: remove spurious nativesdk dependencyRoss Burton2014-12-051-1/+0
| | | | | | | | | | | | | There's no need to add a dependency on python-crypt_class-native to nativesdk-openssl as the general dependency there is transformed appropriately. Presumably this is cruft from back when SDK packages were suffixed instead of prefixed, and there were mapping problems. (From OE-Core rev: f0b1eab1ef24fabac98609eb9d314f618dca713a) Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* python: ensure all of Python is installed in nativesdkRoss Burton2014-12-051-0/+1
| | | | | | | | | | | | | If any part of Python gets installed in a SDK, we need to ensure that all of Python gets installed to avoid replacing python in the environment with a minimal package set. [ YOCTO #6735 ] (From OE-Core rev: e36ff98a7a4da478bb886f61005cd72a0b5a9c0e) Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* python3: several fixes for cross compilingJackie Huang2014-11-253-8/+70
| | | | | | | | | | | | | | | | * Add a patch to use CROSSPYTHONPATH as PYTHONPATH for PYTHON_FOR_BUILD, otherwise CROSSPYTHONPATH is never used, and it use the path in target builds to find libraries. * Add a patch to avoid finding host headers and libs * Fix a typo: s/python-native3/python3-native/ (From OE-Core rev: d3d00163671bda5395c9046c1109f711772e4ed9) Signed-off-by: Jackie Huang <jackie.huang@windriver.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* python: Fix CVE-2014-7185Wenzong Fan2014-11-202-0/+76
| | | | | | | | | | | | | | Integer overflow in bufferobject.c in Python before 2.7.8 allows context-dependent attackers to obtain sensitive information from process memory via a large size and offset in a "buffer" function. This back-ported patch fixes CVE-2014-7185 (From OE-Core rev: 49ceed974e39ab8ac4be410e5caa5e1ef7a646d9) Signed-off-by: Wenzong Fan <wenzong.fan@windriver.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* python-pygtk: Clean up incorrect "fix"Gary Thomas2014-11-092-28/+21
| | | | | | | | | | | | | | | This patch removes most of "dirty fix #1" which is no longer needed (no dependency on python-pygobject-dev exists). A side effect is that the pygtk code generator will also be installed. Merge 'fix-path.inc' into this recipe as it is not used by any other recipe. (From OE-Core rev: 02985d315f71126d3af789b0666dbf428f586e4b) Signed-off-by: Gary Thomas <gary@mlbassoc.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* python-pycurl: 7.19.3.1 -> 7.19.5Richard Purdie2014-11-061-3/+3
| | | | | | | | Lines in the readme referring to the license moved, license is unchanged. (From OE-Core rev: 330c39685b5d71d4382d4b4930581de07ed689c6) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* python-smartpm: report warn rather than error during install with --attemptHongxu Jia2014-11-041-3/+24
| | | | | | | | | | | | | | | | | | | | | | | | | | With the following config and build image: ... IMAGE_INSTALL_append = "shadow man-pages" EXTRA_IMAGE_FEATURES += "doc-pkgs" ... There is an error during install with --attempt, and it breaks the build. ... |error: file /usr/share/man/man5/passwd.5 from install of shadow-doc-4.2.1-r0.i586 conflicts with file from package man-pages-3.71-r0.i586 ... For complementary and 'attemptonly' package processing, we should make sure the warn rather than error messages reported. [YOCTO #6769] (From OE-Core rev: beb2e989e24e671fecd37805876dfb2375ee0df6) Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* python-pygtk: Restore pkg-config fileGary Thomas2014-11-042-1/+14
| | | | | | | | | | | | | | Some previous version of this recipe was errantly removing the pygtk-2.0.pc (pkg-config) file. This is needed for other packages to be able to build against this library. Also update the .pc file to match current pkg-config use (libdir was missing). (From OE-Core rev: 8c6158d7bcca2ecf3e150d1e8eaaaa4ece58e1e2) Signed-off-by: Gary Thomas <gary@mlbassoc.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* python-2.7.3:remove BOM insertion codeKai Kang2014-11-042-0/+25
| | | | | | | | | | | | | | | | | | Backport patch from: https://hg.python.org/cpython/rev/af46a001d5ec SysLogHandler converts message to utf8 and adds BOM, supposedly to conform with RFC5424, but the implementation is broken: the RFC specifies that the BOM should prefix only unstructured message part, but current Python implementation puts it in the middle of structured part, thus confusing RFC-compliant receivers. (From OE-Core rev: c51caffe5ac0d49844dcbac7967f609d44c20470) Signed-off-by: yzhu1 <yanjun.zhu@windriver.com> Signed-off-by: Kai Kang <kai.kang@windriver.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* python3: do not replace ccache in the middle of a pathRoy Li2014-11-041-1/+1
| | | | | | | | | | | | | | | | | Python recipe did a sed s/ccache/$(CCACHE) on the Makefile, which replaces all "ccache" including ones that consist of a full path. This leads to build error when building in a project path with "ccache" in its name. Fix it by only replacing "ccache " with "$(CCACHE) ". Same fix on python 2.xx is: 1181112cf65bc[python: do not replace ccache in the ] (From OE-Core rev: 9f2398a0ff42389052155d971f136a37c5dc80da) Signed-off-by: Roy Li <rongqing.li@windriver.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* python-smartpm: Add checking for "rpm-ignoresize" optionChong Lu2014-10-242-0/+38
| | | | | | | | | | | | | | | | | The do_rootfs takes a very long time when build host has mounted many NFS devices. syscall lstat() was being called on every filesystem mounted on the build host during building. The reason for the lstat() is that rpm is verifying that enough free disk space is available to do the install. However, since the install is into the target rootfs it should not matter how much free space there is in the host mounts. Add checking for "rpm-ignoresize", by it, smart can make whether RPM skip checking for diskspace when install a rpm package. (From OE-Core rev: fc0668a019eca422540ceab3efcd2b2a27dd79e0) Signed-off-by: Chong Lu <Chong.Lu@windriver.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* python: force off_t size to 8 to enable large file supportPaul Eggleton2014-10-181-0/+3
| | | | | | | | | | | | | | | If DISTRO_FEATURES contains "largefile", force the size of off_t to 8 as a workaround for having ac_cv_sizeof_off_t=4 on 32-bit systems. In future we will likely drop the value from the site file, but for now this is a slightly safer fix. Fixes [YOCTO #6813]. (From OE-Core rev: a8216030ee6c65531de8fbf3eed878a345a94edc) Signed-off-by: Paul Eggleton <paul.eggleton@linux.intel.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* python-pygobject: add libffi to DEPENDSRoss Burton2014-10-101-2/+2
| | | | | | | | | | libffi is generally present as it's also a build dependency on glib-2.0, but explicitly declare it for determinism. (From OE-Core rev: 85232b154dbaf3fc2ed3fa9291e3cbeaa7f318ab) Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* python-smartpm: Add patches for rpm4Saul Wold2014-09-303-26/+81
| | | | | | | | | | | Add DEPENDS for python-rpm package from either rpm4 or rpm5 Extend the smart-dflags patch to catch an exception if the api does exist (From OE-Core rev: 756e499a95cc928688684cc52bde8e31306e6bbc) Signed-off-by: Saul Wold <sgw@linux.intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* python: obey LDFLAGSChristopher Larson2014-09-221-1/+1
| | | | | | | (From OE-Core rev: 7191b6b7503a5a17f93bd61283f22d409c5cb17b) Signed-off-by: Christopher Larson <chris_larson@mentor.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* python-native: disable user site supportYasir-Khan2014-09-101-0/+4
| | | | | | | | | | | | | | | | | The user site-packages gets inserted into sys.path ahead of the system site directories, so a site package installed there will be used in preference to what's in our sysroot, causing less deterministic builds, and potential build breakage, depending on what the user has installed there. Disable it for our native python, so they don't affect our builds. (From OE-Core rev: c448bf3629ab5d930ed845d4ba48e37e4a85d2a3) Signed-off-by: Christopher Larson <kergoth@gmail.com> Signed-off-by: Yasir-Khan <yasir_khan@mentor.com> Signed-off-by: Saul Wold <sgw@linux.intel.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* python-numpy: Fix build for mips64Khem Raj2014-09-013-0/+173
| | | | | | | | | Add missing mips64 specific config files (From OE-Core rev: 4c0a9ccbad2889b27b4b1d2ab91215a4bdcca3ce) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* python3-distribute: fix interpreterRobert Yang2014-08-281-0/+2
| | | | | | | | | It should use "/usr/bin/env python3" rather than python. (From OE-Core rev: 5cf12b20c08d927af8b1a4e2997d325a030c2269) Signed-off-by: Robert Yang <liezhi.yang@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* python-pygtk: fix native python pathRobert Yang2014-08-151-0/+1
| | | | | | | | | | | | | | Fixed: 1) Set IMAGE_INSTALL_append = " python-pygtk-demo" in local.conf 2) $ bitbake core-image-minimal [snip] Computing transaction...error: Can't install python-pygtk-demo-2.24.0-r1@core2_64: no package provides /usr/bin/python-native/python [snip] (From OE-Core rev: d70bc02a80f8508995cdf8ae536a0153cebee8c9) Signed-off-by: Robert Yang <liezhi.yang@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* python-scons-native: Make it useable if old host install existsPeter Kjellerstedt2014-08-151-1/+1
| | | | | | | | | | | | | | | | | This was recently fixed to work on Fedora 17 if no scons is installed on the host by setting the PYTHONPATH to where BitBake has installed scons. However, if an older version of scons than 2.3.0 is installed, then it still breaks. This is due to how scons tries to determine its installation by searching through standard paths. If it finds an old installation it prepends that path to sys.path thereby causing it to ignore the PYTHONPATH. The solution is to instead set SCONS_LIB_PATH which works both if scons is not installed and if an older version is installed. (From OE-Core rev: e16c968ffb96fac3177bb885872c2b5cdde87239) Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* python: Fix build on muslKhem Raj2014-08-152-0/+44
| | | | | | | | | | musl has posix_close which conflicts in python so lets rename it. (From OE-Core rev: 9de4f6eb07696f618d4762c6eeb34dc9ea3080bd) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* python-dbus: use PACKAGECONFIG for doc generationChristopher Larson2014-08-111-0/+4
| | | | | | | | | | | | | Adds 'docs' (for html doc generation) and 'api-docs' (for API doc generation) configurations and leaves them both disabled by default. This avoids autodetected dependency upon docutils. Fixes [YOCTO #6530] (From OE-Core rev: 7216ddad59f6a2315323befa69eebdbf07625e25) Signed-off-by: Christopher Larson <chris_larson@mentor.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* python-smartpm: fix option typo of command channelKai Kang2014-08-021-1/+1
| | | | | | | | | | | | | | | | | | | | | When run smart, it fails: root@qemu1:~# smart channel --remove-all error: No action specified for command 'channel' If no default value of arg 'dest' is provided in method add_option() of optparse.OptionParser, it replaces hyphen('-') in new added option with underscore('_') as dest. In function ensure_action() it checks action strings with options from optparse.OptionParser. So it is 'remove_all' which need to be checked rather than 'remove-all'. (From OE-Core rev: 03266e89a67ec1373529fae32b2cedff21414ff5) Signed-off-by: Kai Kang <kai.kang@windriver.com> Signed-off-by: Saul Wold <sgw@linux.intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* python: python-pycairo: add python-pycairo-nativeMax Eliaser2014-08-021-0/+2
| | | | | | | | | | | | A -native variant of python-pycairo will be necessary for running the native version of pybootchartgui. It may also come in handy for running other Python utilities from the native sysroot. (From OE-Core rev: 39cf9bcc28df7a4a37bc32e220ddc57b645350d4) Signed-off-by: Max Eliaser <max.eliaser@intel.com> Signed-off-by: Saul Wold <sgw@linux.intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* python: fix _json module arbitrary process memory read vulnerabilityDaniel BORNAZ2014-07-253-0/+29
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | http://bugs.python.org/issue21529 Python 2 and 3 are susceptible to arbitrary process memory reading by a user or adversary due to a bug in the _json module caused by insufficient bounds checking. The sole prerequisites of this attack are that the attacker is able to control or influence the two parameters of the default scanstring function: the string to be decoded and the index. The bug is caused by allowing the user to supply a negative index value. The index value is then used directly as an index to an array in the C code; internally the address of the array and its index are added to each other in order to yield the address of the value that is desired. However, by supplying a negative index value and adding this to the address of the array, the processor's register value wraps around and the calculated value will point to a position in memory which isn't within the bounds of the supplied string, causing the function to access other parts of the process memory. (From OE-Core rev: 9ec213bf67afbdfdbe25802ec86487bb22aeb2e4) Signed-off-by: Benjamin Peterson <benjamin@python.org> Applied to python-native recipe in order to fix the above mentioned vulnerability. Upstream-Status: Submitted Signed-off-by: Daniel BORNAZ <daniel.bornaz@enea.com> Signed-off-by: Saul Wold <sgw@linux.intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* python-numpy: add support for powerpc64 architectureTing Liu2014-07-193-0/+173
| | | | | | | | (From OE-Core rev: 189dae9edf24ba7bc60c51d4f26d91fe5bdf7dec) Signed-off-by: Ting Liu <ting.liu@freescale.com> Signed-off-by: Saul Wold <sgw@linux.intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* python-distribute: add nativesdk to BBCLASSEXTENDJoão Henrique Ferreira de Freitas2014-07-191-1/+7
| | | | | | | | | | Without this, python tools that need python-distribute doesn't install in SDK generated by OE. (From OE-Core rev: 778a00c3dd656bbfac03274b5f60788518f7b964) Signed-off-by: João Henrique Ferreira de Freitas <joaohf@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* python: Forcibly disable tkRichard Purdie2014-07-171-5/+10
| | | | | | | | | | | Avoids the determinism problem shown with the warnings: WARNING: QA Issue: python-tkinter rdepends on libx11 but its not a build dependency? [build-deps] WARNING: QA Issue: python-tkinter rdepends on tcl-lib but its not a build dependency? [build-deps (From OE-Core rev: 53ae544cfdac22c82af452b8c7ebe6664296bd9b) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* python-pycurl: Upgrade 7.19.3 -> 7.19.3.1Richard Purdie2014-07-172-15/+15
| | | | | | | | License text just moved within the README.rst (same checksum) (From OE-Core rev: 2d7566c7b564facb4ada5b29f7a77bfb203ebcb0) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* python-scons: Upgrade 2.3.0 -> 2.3.2Richard Purdie2014-07-172-3/+3
| | | | | | | | License file changes copyright years only. (From OE-Core rev: 31ef959d9c0f2fc9a141d06ef01b5cfb14412c4e) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* python-docutil: Upgrade 0.11 -> 0.12Richard Purdie2014-07-171-3/+3
| | | | | | | | | License change is just a date change in the license file, looks like English to German locale change to the date display. (From OE-Core rev: b3f854884aacd93f6370658eafc0955023c1f31d) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* python3: fix builtins importsRoxana2014-06-301-1/+3
| | | | | | | | | | | | | | | | | The intent of this code is to generate things like -L=/usr/lib/foo so for paths which start with "/" we should appent the "=". We should not do this for ".". On some recent versions of binutils or patchsets on some recent distros this appears to work differently and causes build failures, for example on Ubuntu 14.04 LTS. The simple fix is to check for "." as the path prefix. [YOCTO #6467]. (From OE-Core rev: c36d459f0d40bdbd3ba809835e0475e8992bc778) Signed-off-by: Roxana <roxana.ciobanu@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* python-gst: link python shared library to config directoryyanjun.zhu2014-06-101-0/+6
| | | | | | | | | | python-gst needs python shared library in python config directory. (From OE-Core rev: 7a3b7d70a0cc4cdef81bb63fdac7de8f1309d1fc) Signed-off-by: yanjun.zhu <yanjun.zhu@windriver.com> Signed-off-by: Saul Wold <sgw@linux.intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* generate-manifest-2.7.py: Add importlibMatt Fleming2014-06-061-5/+8
| | | | | | | | | | | importlib isn't currently included in any of the python packages, so create a new one for recipes that require it. Cc: Paul Eggleton <paul.eggleton@linux.intel.com> (From OE-Core rev: b3dae96d9fdb4e26101f6f7edc6e65989375a5a2) Signed-off-by: Matt Fleming <matt.fleming@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* generate-manifest-3.3.py: Add importlibMatt Fleming2014-06-061-3/+7
| | | | | | | | | | | | importlib isn't currently included in any of the python packages, so create a new one for recipes that require it. Cc: Paul Eggleton <paul.eggleton@linux.intel.com> (From OE-Core rev: b17d2e1838f1f1c3310926a4f3eed375898c60f3) Signed-off-by: Matt Fleming <matt.fleming@intel.com> Signed-off-by: Saul Wold <sgw@linux.intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* python-native : Add patch to fix configure error with gcc 4.8.Philip Balister2014-05-271-0/+1
| | | | | | | | | | | | | We apply this patch to the python recipe already. Without this patch the zeroc-ice-native recipe will not build. See: http://bugs.python.org/issue17547 for more details. (From OE-Core rev: 2335a8ed3748e687e7f34f21f27f8e4029d1e26b) Signed-off-by: Philip Balister <philip@balister.org> Signed-off-by: Saul Wold <sgw@linux.intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
generated by cgit v1.2.3-54-g00ecf (git 2.39.0) at 2025-01-01 05:19:15 +0000