linux/meta-virtualization.git/recipes-networking, branch kirkstone

openvswitch: Upgrade 2.17.6 -> 2.17.9

2024-03-15T03:35:55+00:00

Includes security fixes for - CVE-2023-3966 and CVE-2023-5366 commits short logs: 0bea06d99 (tag: v2.17.9) Set release date for 2.17.9. b8657dada netdev-offload-tc: Check geneve metadata length. e235a421f odp: ND: Follow Open Flow spec converting from OF to DP. 002cba9f1 dpdk: Use DPDK 21.11.6 release for OVS 2.17. ee889659d github: Update versions of action dependencies (Node.js 20). bf717d0f3 ovs-atomic: Fix inclusion of Clang header by GCC 14. 9bbc2cf8a ovsdb-idl.at: Test IDL behavior during database conversion. 049189584 tests: Use _DAEMONIZE macro's to start tcpdump. 30099c5d9 tests-ovsdb: Switch OVSDB_START_IDLTEST to macro. f4b4d650a python: idl: Handle monitor_canceled. d6caa6ed0 vconn: Count vconn_sent regardless of log level. b0eb66a69 backtrace: Fix error in log_backtrace() documentation. bb89735b2 ovsdb: trigger: Do not allow conversion in read-only mode. a79ee883a ovsdb: jsonrpc-server: Fix the DSCP value in default options. 4f01f2f7d jsonrpc: Sort JSON objects while printing debug messages. 3cae42bc5 tests: ovsdb: Use diff -up format for replay test. a7036f6a1 ovsdb-server.at: Enbale debug logs in active-backup tests. c944a30fe ovsdb: transaction: Don't try to diff unchanged columns. 5c0dc9602 ovsdb: transaction: Avoid diffs for different type references. eabd4cb2f ci: Update the GitHub Ubuntu runner image to Ubuntu 22.04. c462aabb3 netdev-afxdp: Disable -Wfree-nonheap-object on receive. b3f8c32ed ovsdb-idl: Preserve change_seqno when deleting rows. d254aedad tunnel: Do not carry source port from a previous tunnel. 1857c569e netdev-offload-tc: Fix offload of tunnel key tp_src. 0a0c500d7 cirrus: Update from FreeBSD 12 to 14. 74633888d dpdk: Use DPDK 21.11.5 release for OVS 2.17. b5e54aa16 ovs-ofctl: Correctly mark the CT flush commands. 1d3609a48 mcast-snooping: Flush flood and report ports when deleting interfaces. df101fe1e mcast-snooping: Test per port explicit flooding. 8313ebbb3 flake8: Fix E721 check failures. f73208151 build-aux: Enable flake8 checks for python extraction scripts. 8b6a8fcb0 build-aux/extract-ofp-msgs: Fix flake8 and syntax errors. 80e922644 build-aux/extract-ofp-fields: Fix flake8 and syntax errors. 1508e7abc build-aux/extract-ofp-errors: Fix flake8 and syntax errors. 98fc48e4d build-aux/extract-ofp-actions: Fix flake8 and syntax errors. d52231171 automake: Move build-aux EXTRA_DIST updates to their own file. 8868756b8 netdev-offload: Fix Clang's static analyzer 'Division by zero' warnings. 46e9cacaa ofp-table: Fix count_common_prefix_run() function. 8e6d1cd04 vswitch.xml: Add entry for dpdkvhostuser userspace-tso. 7838778ad vswitch.xml: Add dpdkvhostuser group status. a3a039507 tests: Use ping timeout instead of deadline. 3351b149c tests/system-traffic: Ensure no name resolution for tcpdump. bce17b0bb tc: Improve logging of mismatched actions. af934924f ofproto-dpif-upcall: Pause revalidators when purging. 48fa54747 db-ctl-base: Fix memory leak of db commands. 7fb2197e1 Prepare for 2.17.9. 275be1eb9 (tag: v2.17.8) Set release date for 2.17.8. be1a8f7ec conntrack: Remove nat_conn introducing key directionality. f179c7c07 conntrack: simplify cleanup path fac770a0a netdev-dpdk: Document status options for VF MAC address. 79ab2eeb1 netdev-offload-dpdk: Fix flushing of a physdev. 4ced485f8 connmgr: Fix ofconn configuration on vswitchd startup. 3c39cfe03 python: idl: Fix last-id update from a monitor reply. a6207b2bc ofproto-dpif-xlate: Fix recirculation with patch port and controller. a141b62c2 ofproto-dpif-xlate: Don't reinstall removed XC_LEARN rule. 586e73dac configure: Avoid deprecated AC_PROG_CC_C99 if possible. bd95fe3d7 tests: Fix time dependency in overlapping flows modification test. 123b7aaa7 python: Use build to generate PEP517 compatible archives. 41d2e7e9a python: Use twine to upload sdist package to pypi.org. 66d5562e3 python: Rename build related code to ovs_build_helpers. c880faea8 dpif-netdev: Fix length calculation of netdet_flow_key. 8c7aa5f58 doc: Fix description of max_len for controller action. 34ff03c3c docs: Fix rendering of VLAN Comparison Chart. 93412e00e docs: Run tbl preprocessor in manpage-check rule. 6929485d3 docs: Add `nowarn` region option to tables. 08b6b83a3 tests: Add clang-analyzer-results to gitignore. c252b1f8a ci: Add jobs to test -std=c99 builds. 242bb2624 tests: Fix order of includes in barrier/id-fpool/mpsc-queue tests. 292eca58c sflow: Always enable _BSD_SOURCE. 82aa3fb01 compiler.h: Don't use asm and typeof with non-GNU compilers. a45b3afbf ovs.tmac: Fix troff warning in versions above groff-1.23. a336ef712 connmgr: Count unsent async messages. a74b7dfb9 dpif-netdev: Fix dpif_netdev_flow_put. f04bfd5e4 ofproto-dpif-xlate: Reduce stack usage in recursive xlate functions. 29990edbc cirrus: Update to FreeBSD 13.2. 65bb82369 ci: Fix OPTS not being passed to OSX builds. fe98b0c1f ovsdb-tool: Fix json leak while showing clustered log. 44722bbda ovsdb-server: Fix excessive memory usage on DB open. 9db221fcd tests: Add ovsdb execution cases for set size constraints. 3cfe388cb ovsdb: relay: Fix handling of XOR updates with size constraints. f4d15497f ovsdb: file: Fix diff application to a default column value. 7864ed557 ovsdb: file: Fix inability to read diffs that violate type size. 97d91ad2d ovs-tcpdump: Clear auto-assigned ipv6 address of mirror port. dba7482e0 ofproto-dpif: Fix removal of renamed datapath ports. a1ca9e589 ofproto-dpif-upcall: Mirror packets that are modified. 5d976536b vswitchd: Wait for a bridge exit before replying to exit unixctl. e206df08d Prepare for 2.17.8. f15de6508 (tag: v2.17.7) Set release date for 2.17.7. 4b10b0b87 fatal-signal: Don't share signal fds/handles with forked process. e01ea8e7e cpu: Fix cpuid check for some AMD processors. 111c7be31 tc: Fix crash on malformed reply from kernel. 75152d3d6 netdev-dpdk: Fix warning with gcc 13. 5285dad18 utilities/bashcomp: Fix PS1 generation on new bash. ebe7bd7b6 netdev-offload-dpdk: Fix crash in debug log. 4937a5341 stream-ssl: Disable alerts on unexpected EOF. fe99e6b97 tests: layer3-tunnels: Skip bareudp tests if not supported by kernel. a375055f2 ovs-fields: Modify the width of tpa and spa. 749769be3 netdev-vport: RCU-fy tunnel config. c423fa5f6 smap: Make argument of smap_add_ipv6 constant. 2db06ee6f netdev-vport: Fix unsafe handling of GRE sequence number. 51d804aa4 dpctl: Fix dereferencing null pointer in parse_ct_limit_zones(). 80b15d142 netdev-offload: Fix deadlock/recursive use of the netdev_hmap_rwlock rwlock. 0d3c27e90 ofproto-dpif-xlate: Fix use-after-free when xlate_actions(). 8eb24943c tc: Fix cleaning chains. cbe5852d7 python-stream: Handle SSL error in do_handshake. be3caf455 dpif-netlink: Fix memory leak dpif_netlink_open(). b7e1593f4 ofp-parse: Check ranges on string to uint32_t conversion. 70cb45c66 learning-switch: Fix coredump of OpenFlow15 learning-switch. b08224194 ovsdb: Allow conversion records with no data in a clustered storage. efcdf6c0d ovsdb: Check for ephemeral columns before writing a new schema. bf39ea3c7 ovsdb-tool: Fix cluster-to-standalone for DB conversion records. 4f82f8903 ovs-tcpdump: Stdout is shutdown before ovs-tcpdump exit. 77116d990 Prepare for 2.17.7. Reference: https://www.openvswitch.org/releases/NEWS-2.17.9.txt Signed-off-by: Yogita Urade Signed-off-by: Bruce Ashfield

cni: clean dir ${B}/plugins before do_compile

2023-12-14T19:59:10+00:00

Clean dir ${B}/plugins before do_compile to avoid cni generated binaries like /usr/libexec/cni/bridge has wrong dynamic linker path and reports error like: /usr/libexec/cni/bridge: no such file or directory". Reproduce steps: 1. bitbake cni 2. enable usrmerge feature in local.conf 3. bitbake cni After step 2, GOBUILDFLAGS changed, "-I /lib64/ld-linux-aarch64.so.1" -> "/usr/lib/ld-linux-aarch64.so.1" But "go build" seems only check if the cached packagefile changed, since all not changed, the dynamic linker still use the old one, maybe go build should improve this. Clean dir ${B}/plugins to trigger rebuild of the binaries here. Signed-off-by: Changqing Li Signed-off-by: Bruce Ashfield

cni: fix textrel QA issue

2023-12-14T19:59:10+00:00

When building cni, we get textrel QA issue like below: cni: ELF binary /usr/libexec/cni/macvlan has relocations in .text The problem could be solved by adding '-buildmode=pie' to ${GO}. In go.bbclass, this flag is added to GOBUILDFLAGS conditionally, that is, if the arch is not mips nor riscv32, this '-buildmode=pie' is added to GOBUILDFLAGS. So make use of that. Signed-off-by: Chen Qi Signed-off-by: Bruce Ashfield

cni: reproducible builds: pass -trimpath

2023-12-14T19:59:10+00:00

Signed-off-by: Bruce Ashfield

ovs: update to 2.17.6

2023-04-21T15:32:25+00:00

Updating openvswitch from 2.17.1 to 2.17.6, pickup the latest security and bug fixes. Changes: 1. Removed the patch 0001-lldp-Fix-bugs-when-parsing-malformed-AutoAttach.patch. 2. Update SRCREV PV-version and CVE_VERSION Commit short log: a08bb41e3 Set release date for 2.17.6. 27fb5db7f ofproto-dpif-xlate: Always mask ip proto field. c3684a060 conntrack-tp: Fix clang warning. be19308aa netdev-offload-tc: Del ufid mapping if device not exist. 4f41e58bc netdev-tc-offloads: Fix misaligned 8 byte read. d6d1cad6a dpif-netlink: Always create at least 1 handler. 09e6e1de7 ofproto-dpif-upcall: Wait for valid hw flow stats before applying min-revalidate-pps. 691b9e514 system-traffic: Fix conntrack test cases which are failing with af_xdp. 7aa314c9c netdev-windows: Add checking when creating netdev with system type on Windows 215278bde ofproto-dpif-upcall: Include hardware offloaded flows in total flows. 4a3f8845e ofproto-dpif-upcall: Reset ukey's last stats value if the datapath changed. 132fa24b6 classifier: Fix missing masks on a final stage with ports trie. 8661abd4c ofproto: Fix re-creation of tunnel backing interfaces on restart. 638441e98 ovs-actions: Correct typo in ovs-actions man page. 3c4bd63bc ofproto-ipfix: Use per-domain template timeouts. d2583ccb7 ofproto-dpif-upcall: Use last known stats ukey stats on revalidate missed dp flows. 705190d88 conntrack: Properly unNAT inner header of related traffic. d87b6180e dpctl: Fix memory leak in flush conntrack. 6626562c5 sparse: Fix build with DPDK and GCC 12. 82dc71f80 ovsdb-server: Fix handling of DNS name for listener configuration. 9b341844e netdev-offload-tc: If the flow has not been used, report it as such. adac28dcd netdev-offload-tc: Conntrack ALGs are not supported with tc. a1c2abba7 netdev-offload-tc: Fix tc conntrack force commit support. 68a2818b0 ofproto-dpif-upcall: New ukey needs to take the old ukey's dump seq. 2eb7a6066 netdev-offload-tc: Preserve tc statistics when flow gets modified. 4f5140769 sparse: Fix numa.h for libnuma >= 2.0.13. 32853c084 tc: Add TCA_KIND flower to delete and get operation to avoid rtnl_lock(). 037131229 netdev-offload-tc: Fix misaligned access to ct label. 206409bb7 ovsdb: Fix database statistics during the database replacement. 0f55eced1 cirrus: Update to use FreeBSD 12.4. e9336a91f tc: Add support for TCA_STATS_PKT64. ba62a1eae Documentation: Fix links in maintainers.rst. 1b76faf8d Documentation: Fix links in the DPDK guide on physical ports. e1ee9c32a treewide: Don't use non-portable '==' with test command. a7d7c30c4 dpif: Fix tunnel key set for IPv6 tunnels with SLOW_ACTION. 8d055809b ci: Fix overriding OPTS provided from the yml. 0eb2aa46b Prepare for 2.17.6. 08971e4b9 Set release date for 2.17.5. ecaacb01a lldp: Fix bugs when parsing malformed AutoAttach. ee002b351 dpif-netdev: Use unmasked key when adding datapath flows. 18dcfda67 ovsdb-cs: Consider default conditions implicitly acked. 793709a85 rculist: Use rculist_back_protected to access prev. abb9d3482 Prepare for 2.17.5. b6c3788fe Set release date for 2.17.4. b50f4e3d2 odp-util: Fix reporting unknown keys as keys with bad length. 44012fccd ovs-dpctl-top: Fix ovs-dpctl-top via pipe. 118e4349d rculist: Fix iteration macros. c9f10ae33 vswitchd: Publish per iface received multicast packets. 4e3f9951f learn: Fix parsing immediate value for a field match. 282ba24d9 datapath-windows: Check the condition to reset pseudo header checksum on Rx side ee0e1d0a5 netdev-offload-dpdk: Enhance the support of tunnel pop action 4e3d762f0 ci: Update meson requirement for DPDK. 0d1e425c7 ovsdb: transaction: Fix weak reference leak. ceab1ca1e ovsdb: transaction: Refactor assess_weak_refs. fa95bf962 ovs-tcpdump: Cleanup mirror port on SIGHUP/SIGTERM. 7ebef81f9 netdev-linux: Fix inability to apply QoS on ports with custom qdiscs. 037ef6301 tc: Fix misaligned writes while parsing pedit. 869e2e1ba odp-util: Add missing separator in format_odp_conntrack_action(). 0aa55709f vswitch.xml: Fix the name of rstp-path-cost option. af459fa37 mac-learning: Fix learned fdb entries not age out issue. c4336a1f1 ofproto-dpif-xlate: Update tunnel neighbor when receive gratuitous ARP. 683508cd4 bond: Fix crash while logging not yet enabled member. 41b178d52 netdev-dpdk: Fix tx_dropped counters value. d0276481a unaligned: Correct the stats of packet_count and byte_count on Windows. 71401199f tests: Fix filtering of whole-second durations. 3c1c034e5 netdev-offload: Set 'miss_api_supported' to be under netdev. 35615cd37 cmap: Add thread fence for slot update. 5f8ba216a ofproto-dpif-xlate: Do not use zero-weight buckets in select groups. 5e26f88b4 github: Update versions of action dependencies. afce3662f ovs-tcpdump: Fix bond port unable to capture jumbo frames. 602a41bb3 json: Fix deep copy of objects and arrays. 5dde4d748 Prepare for 2.17.4. 2b4b4b868 Set release date for 2.17.3. fbc3b10e9 Add support for OpenSSL 3.0 functions. 5a77d53b8 dhparams: Fix .c file generation with OpenSSL >= 3.0. 09e22fec4 daemon-unix: Fix file descriptor leak when monitor restarts child. 53df50db2 vconn: Allow ECONNREFUSED in refuse connection test. 26a11ca61 dpdk: Use DPDK 21.11.2 release. edf699ec6 m4: Test avx512 for x86 only. 1989caf9e ovsdb-idl: Preserve references for rows deleted in same IDL run as their insertion. db6a612cd python: idl: Fix idl.Row.__str__ method. 73d7bf64a bond: Avoid deadlock while updating post recirculation rules. 70a63391c ofproto-dpif-upcall: Add debug commands to pause/resume revalidators. cf0e12f8a test-list: Fix false-positive build failure with GCC 12. 5cbed27c8 tests: Fix tests with GNU grep 3.8. a5cd60db0 cirrus: Upgrade to FreeBSD 13.1 image. 43ece36f3 netdev-linux: Skip some internal kernel stats gathering. 846d6a0c5 ofproto-dpif-xlate: Fix error messages for nonexistent ports/recirc_ids. e8814c9b8 ofproto-dpif-xlate: Clear tunnel wc bits if original packet is non-tunnel. dfc3e65c8 raft: Fix unnecessary periodic compactions. 6f322ccf8 netdev-offload-tc: Parse tunnel options only for geneve ports. a9f10a2bd netdev-offload-tc: Add missing handling of the tunnel source port. ec2e967c1 netdev-offload-tc: Fix ignoring unknown tunnel keys. 686984d9a netdev-offload-tc: Use masks instead of keys while parsing tunnel attributes. 92c072d94 netdev-offload-tc: Explicitly handle mask for the tunnel destination port. 87f191a3a netdev-offload-tc: Fix the mask for tunnel metadata length. cadcea6fe releases: Mark 2.17 as a new LTS release. 8a1b73448 handlers: Fix handlers mapping. 713072fda handlers: Create additional handler threads when using CPU isolation. 84a8910ff packets: Fix misaligned access to ip6_hdr. fe27e0c88 python: Do not send non-zero flag for a SSL socket. 729a872f1 dpif-netdev: Simplify AVX512 build time checks to enhance readability. 1b566f8b8 github: Move CI to ubuntu 20.04 base image. 86725abe1 netdev-offload-tc: Disable offload of IPv6 fragments. 2276daf88 ovs-save: Use right OpenFlow version for add-tlv-map. c353e757d system-traffic: Fix IPv4 fragmentation test sequence for check-kernel. 6f54dc134 system-traffic: Fix incorrect neigh entry in ipv6 header modification test. 7848ae6ff system-traffic: Don't run IPv6 header modification test on kernels < 5.19. 399185865 netdev-linux: set correct action for packets that passed policer cda60c855 python: Fix E275 missing whitespace after keyword. 3678fb544 tc: Use sparse hex dump while printing inconsistencies. 03a0ec82b netdev-offload-tc: Print unused mask bits on failure. 5b8453a44 dynamic-string: Add function for a sparse hex dump. 8d7cb1daf dpif-netlink: Fix incorrect bit shift in compat mode. d1cec2686 python: Use setuptools instead of distutils. 8d6ecb259 packets: Re-calculate IPv6 checksum only for first frag upon modify. 26dbc822d test-ovsdb: Fix false-positive leaks from LeakSanitizer. 6eab10cf2 m4: Update ax_func_posix_memalign to the latest version. 2f51bfd23 m4: Replace obsolete AC_HELP_STRING with AS_HELP_STRING. 8ad325aab libopenvswitch.pc: Add missing libs for a static build. b64ff3f48 rhel: Stop installing internal headers. b63bbf2db python-c-ext: Handle initialization failures. 4ad02ad04 netdev-linux: Do not touch LAG members if master is not attached to OVS. e6dcd07bc netdev: Clear auto_classified if netdev reopened with the type specified. 1eedf45e8 system-traffic: Properly stop dangling ping after geneve test. fb8e34bdb conntrack: Fix conntrack multiple new state. af37f4118 python-c-ext: Fix a couple of build warnings. b7d9f7610 python-c-ext: Remove Python 2 support. 02fb4bfb8 netdev-offload-dpdk: Setting RSS hash types in RSS action. 8e8fcf7bd lib: Print nw_frag in flow key. 29d8ce1ad ovsdb: Remove extra make target dependency for local-config.5. 13ac0bc7c tc: Fix misaligned access while creating pedit actions. 2c85d737a utilities/bashcomp: Fix incorrect file mode. 05e9d2b7a Pmd.at: fix dpcls and dpif configuration test cases. 45ecaa9e5 ovsdb: Add Local_Config schema. 61d64d389 dpif-netdev: Fix leak of AVX512 DPIF scratch pad. a77ad9693 dpif-netdev: Refactor AVX512 runtime checks. ccea7df57 dpif-netdev-extract-avx512: Protect GCC builtin usage. 807f7f994 ovs-tcpdump: Default to OVS_RUNDIR if present. ec13b03ca ovsdb: Fix memory leak on error path in ovsdb_file_read__(). 8b2dff2e3 odp-util: Ignore unknown attributes in parse_key_and_mask_to_match(). 13d97f663 ofproto-dpif: Avoid unneccesary backer revalidation. 9b4035d69 lldp: Fix lldp memory leak. d9351febc ipfix: Trigger revalidation if ipfix options changes. 5419b1de9 conntrack: Fix incorrect bit shift while hashing nat range. 1ab5f94a1 packets: Fix misaligned write to MPLS lse. 8e00be03c tc: Fix misaligned access to stats and time values. 3a1f5341c odp-util: Fix unaligned access to tunnel id. 0c54c43b8 ofpbuf: Fix offsetting a NULL pointer in ofpbuf_reserve. 98edacb40 drop-stats.at: Fix frequent failures of the recursion too deep test. cbc13ce4f odp_util: Fix parse_key_and_mask_to_match() vlan parsing. 73e6ce492 Prepare for 2.17.3. 95979b0f0 Set release date for 2.17.2. 250e1a6dd ofproto-dpif-xlate: Fix internal CT state for non-recirc traffic. fe870ee07 classifier: Adjust segment boundary to execute prerequisite processing. ec0ec464b ovs-tcpdump: Fix error when stopping ovs-tcpdump. 420823e2a ofproto-dpif: Fix meter use-after-free. c762da262 ovs-rcu: Add ovsrcu_barrier. cd9b6b64f dpif-netdev: Fix ALB 'rebalance_intvl' max hard limit. 64f6c49d2 dpif-netdev: Fix ALB parameters type mismatch. b11b84ea7 dpdk: Use DPDK 21.11.1 release. d3bf48e9a raft: Don't use HMAP_FOR_EACH_SAFE when logging commands. e07377bb4 ovsdb: raft: Fix transaction double commit due to lost leadership. 5da86cb36 dynamic-string: Fix undefined behavior due to offsetting null pointer. 369e68890 Revert "odp-util: Always report ODP_FIT_TOO_LITTLE for IGMP." 18341166e ofproto-dpif-xlate: Fix netdev native tunnel neigh discovery spa. 748e4b2b5 ovs-router: Expose the ovs_router_get_netdev_source_address function. 34390bb35 ofproto-dpif: Trigger revalidation if ct tp changes. 1adb07e20 Carefully release NBL in Windows 1ccaba448 tests: Properly kill ovsdb test processes. 260b091c2 ovs-save: Get highest ofp version error. 7606bb121 netdev-linux: Properly access 32-bit aligned rtnl_link_stats64 structs. 0688b9f27 treewide: Avoid offsetting NULL pointers. 92bcf0a82 treewide: Fix invalid bit shift operations. 7fa76371d utilities: Handle dumping packets in GDB TUI. 8cac8baa8 ofproto-dpif-xlate: Remove mirror assert. e0e8f0c54 netdev-dpdk: Fix tx drops statistic for a down netdev. f9b5f8a78 netdev-dpdk: Remove a leftover lock annotation. 4c3976ff2 netdev-dpdk: Refactor the DPDK transmit path. 410b97c83 netdev-offload-dpdk: Fix ethernet type for VLANs. 7948312fe netdev-offload-dpdk: Use has_vlan match attribute. 522c46884 python: idl: Raise AttributeError from uuid_to_row. cb24c524e ofproto-dpif-xlate: Clear out vlan flow fields while processing native tunnel. a665b75de dpif-netdev-avx512: Fix overflow of UINT32_C(1). 60e7badd6 dpif-netdev-avx512: Fix ubsan shift error in bitmasks. 9cc329ec5 python: Politely handle misuse of table.condition. 0631be2b5 ofproto-xlate: Fix crash when forwarding packet between legacy_l3 tunnels. df9790309 system-traffic: Fix fragment reassembly with L3 L4 protocol information. ba159ee0f cirrus: Update FreeBSD versions. bd1a3b6b4 Prepare for 2.17.2. Signed-off-by: Xiangyu Chen Signed-off-by: Bruce Ashfield

openvswitch: backport patch to fix CVE-2022-4337 and CVE-2022-4338

2023-01-10T18:51:44+00:00

CVE-2022-4337: openvswitch: Out-of-Bounds Read in Organization Specific TLV CVE-2022-4338: openvswitch: Integer Underflow in Organization Specific TLV Reference: https://github.com/openvswitch/ovs/pull/405 https://github.com/openvswitch/ovs/commit/7490f281f09a8455c48e19b0cf1b99ab758ee4f4 Signed-off-by: Xiangyu Chen Signed-off-by: Bruce Ashfield

cni: Use gcc-based toolchain

2022-08-04T03:19:26+00:00

clang-based builds are still broken due to: https://github.com/llvm/llvm-project/issues/53999 Signed-off-by: Andrei Gherzan Signed-off-by: Bruce Ashfield

slirp4netns: Runtime recommend the tun kernel module

2022-07-15T21:13:04+00:00

slirp4netns uses a TAP device to connect to the internet in an unprivileged way. Without the required kernel support (TAP/TUN), slirp4netns will fail at runtime. Signed-off-by: Andrei Gherzan Signed-off-by: Bruce Ashfield

netns: adjust GOROOT, CGO_CFLAGS and CGO_LDFALGS

2022-06-20T16:09:51+00:00

Adjust the GOROOT setting as directory specified by the original one does not exist. The CGO_CFLAGS and CGO_LDFLAGS should use target flags instead of the nativesdk ones. Signed-off-by: Chen Qi Signed-off-by: Bruce Ashfield

openvswitch: uprev from v2.17.0-30-g2404d4536 to v2.17.1

2022-04-20T18:11:28+00:00

commits short log: 41bb202fb (tag: v2.17.1) Set release date for 2.17.1. 8f42d4f59 NEWS: Highlight libopenvswitch API change caused by UB fixes. 14301b3a3 netdev-offload-tc: Check for ct_state flag combinations that are not offloadable. 3a2eef792 python: idl: Set cond_changed to true if condition change requested. d05ccf288 dpif-netdev: Fix dp_netdev_get_pmd() function getting correct core_id. 79e291f98 alb.at: Add tests for cross-numa polling. 9c3b74fb2 dpif-netdev: Fix PMD auto load balance with pmd-rxq-isolate. 8580ff9dd pmd.at: Add tests for multi non-local numa pmds. 6bf4eeddb dpif-netdev: Fix non-local numa selection for more than two numas. c41434b3b dpif-netdev: Fix typo in function name. e0aa5e132 python: idl: Set cond_changed to false if last id is zero. 8da40d31c ofproto-dpif-xlate: Fix NULL pointer dereference in xlate_normal(). 63a903ab4 ofproto/ofproto-dpif: Fix dpif_type for userspace tunnels. 14d54eb8b sset: add SHORT version of SAFE loop macros. f0e63b115 sparse: bump recommended version and include headers. 70b87cf72 idlc: support short version of SAFE macros. 3777ed90c rculist: use multi-variable helpers for loop macros. bb52e9beb hindex: remove the next variable in safe loops. 7d6cbfa24 hindex: use multi-variable iterators. 97ad96b63 cmap: use multi-variable iterators. cd62fda22 hmap: use short version of safe loops if possible. d56bfd752 hmap: implement UB-safe hmap pop iterator. e2c835486 hmap: use multi-variable helpers for hmap loops. 897d6647e list: use short version of safe loops if possible. 979a9eb5b list: use multi-variable helpers for list loops. 6bacf802c util: add helpers to overload SAFE macro. f127123d6 util: add safe multi-variable iterators. 38e73f0b6 util: add multi-variable loop iterator macros. e91edf456 ovsdb: raft: Fix inability to read the database with DNS host names. The ptest results BEFORE uprev: ERROR: 2340 tests were run, 30 failed unexpectedly. 65 tests were skipped. failed cases: 10 11 12 13 14 15 16 17 18 462 769 785 786 787 788 791 792 793 1024 1180 1181 1182 1183 1184 1185 1290 1291 2387 2391 2394 The ptest results AFTER uprev: ERROR: 2343 tests were run, 30 failed unexpectedly. 65 tests were skipped. failed cases: 10 11 12 13 14 15 16 17 18 462 769 785 786 787 788 791 792 793 1025 1183 1184 1185 1186 1187 1188 1293 1294 2390 2394 2397 Signed-off-by: He Zhe Signed-off-by: Bruce Ashfield