linux/poky.git, branch 1.7_M2

populate_sdk_base: Fix grep command usage on old hosts

2014-07-29T08:58:27+00:00

"man grep" on centos: -R, -r, --recursive Read all files under each directory, recursively; this is equivalent to the -d recurse option. "man grep" on a more recent ubuntu system: -r, --recursive Read all files under each directory, recursively, following symbolic links only if they are on the command line. This is equivalent to the -d recurse option. So we have an issue when the SDK installer (even with buildtools-tarball) is used on old hosts since it may try and dereference paths which it should not. This is caused by differences in the behaviour of grep -r on older systems. The fix is to wrap this in find so that only real files are found (as elsewhere in the script. [YOCTO #6577] (From OE-Core rev: 7986adeac16550b33f65fded39a55f668e0e543f) Signed-off-by: Richard Purdie Signed-off-by: Saul Wold Signed-off-by: Richard Purdie

selftest/buildoptions.py: fix QA_WARN test and add more output when failing

2014-07-29T08:58:27+00:00

The -ccleansstate should be done before building the package for the second time. Also printing the command output when failing. (From OE-Core rev: 15e5661d6341004ebc4d3492acb48f73dd86b96e) Signed-off-by: Corneliu Stoicescu Signed-off-by: Saul Wold Signed-off-by: Richard Purdie

libx11: Add missing NULL check

2014-07-29T08:58:27+00:00

Add a check for NULL on dereferencing the xim pointer. Using mplayer with the x11 backend will trigger this and result in a segfault. (From OE-Core rev: f7d8947744d7dd1d08721ef0e707912304722d2b) Signed-off-by: Drew Moseley Signed-off-by: Saul Wold Signed-off-by: Richard Purdie

cml1: correct diffconfig output format

2014-07-29T08:58:27+00:00

If used with some packages using kconfig mechanism, the diffconfig command generates wrong output format. Diff provides all options to format the output correctly. This method formats as intended, is more robust and works with the merge_config.h script from yocto-kernel-tools. (From OE-Core rev: 1d9d035f07be1cef2764949d84cecbff7dd428dd) Signed-off-by: Stefan Müller-Klieser Signed-off-by: Saul Wold Signed-off-by: Richard Purdie

nss: CVE-2013-5606

2014-07-29T08:58:27+00:00

the patch comes from: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-5606 https://bugzilla.mozilla.org/show_bug.cgi?id=910438 http://hg.mozilla.org/projects/nss/rev/d29898e0981c The CERT_VerifyCert function in lib/certhigh/certvfy.c in Mozilla Network Security Services (NSS) 3.15 before 3.15.3 provides an unexpected return value for an incompatible key-usage certificate when the CERTVerifyLog argument is valid, which might allow remote attackers to bypass intended access restrictions via a crafted certificate. (From OE-Core rev: 1e153b1b21276d56144add464d592cd7b96a4ede) Signed-off-by: Li Wang Signed-off-by: Jackie Huang Signed-off-by: Saul Wold Signed-off-by: Richard Purdie

pulseaudio: fix CVE-2014-3970

2014-07-29T08:58:26+00:00

The pa_rtp_recv function in modules/rtp/rtp.c in the module-rtp-recv module in PulseAudio 5.0 and earlier allows remote attackers to cause a denial of service (assertion failure and abort) via an empty UDP packet. Fix it by picking a patch from pulseaudio upstream code. (From OE-Core rev: f9d7407e54f1fa3d3a316a5bbb8b80665e6f03fd) Signed-off-by: Shan Hai Signed-off-by: Jackie Huang Signed-off-by: Saul Wold Signed-off-by: Richard Purdie

base-files: fix up misleading dir grouping names for lsb dirs

2014-07-29T08:58:26+00:00

In commit b0df35f47fb79dc149504bd66d1186b3276f9510 ("base-files: Add to make some directories needed by LSB.") there were new groupings of dirs made. But rather than keep the grouping names permissions based as they clearly were, it seems that it was unfortunately misinterpreted as a counter, simply incrementing as a new group was added. This leads to dir3755 getting chmod'd to 0755 and dir4775 being chmod'd to 2775 which to any new reader of the code is terribly confusing. Choose names that clearly reflect the permissions, and add a lsb suffix to indicate the role. Also note that the settings for /var/mail seem incorrect, and so they have been aligned with what is seen in most common distros. (From OE-Core rev: 5cba414e3fd7dbe761a6f628c6a368a412c0cba3) Signed-off-by: Paul Gortmaker Signed-off-by: Saul Wold Signed-off-by: Richard Purdie

base-files: remove strange 2775 perms from dirs like /home

2014-07-29T08:58:26+00:00

Mark Hatle did the historical research into why this was so, and found that it originally was via debian import, and then it morphed over time: +# chown -R root:root ${D} +# cd ${D} && chown root:src usr/src +# cd ${D} && chown root:staff var/local +# cd ${D} && chown root:staff home + cd ${D} && chmod 755 `find . -type d` + cd ${D} && chmod 1777 `cat ${S}/debian/1777-dirs` + cd ${D} && chmod 2775 `cat ${S}/debian/2775-dirs` that was the original code so THAT is why they're 2775.. they were original 'src' and 'staff'.. which has gotten lost sometime in the last 10 years AND the origin: commit b45c9ed40bb4f893f99127a21776aef3ae888ad7 Author: Chris Larson Date: Tue Sep 30 16:30:41 2003 +0000 Add base-files 3.0.10 (from debian). thats where the brain damage started ... Debian in 2003.. Here we simply convert them to being normal 755 dirs. [YOCTO #6579] (From OE-Core rev: 77e4defa57f02b7f7ad23b07f169ec280228585b) Signed-off-by: Paul Gortmaker Signed-off-by: Saul Wold Signed-off-by: Richard Purdie

base-files: actually install 2775 dirs as 2775, not 2755

2014-07-29T08:58:26+00:00

Nothing interesting to see in the git history ; appears to have been this way since its creation. (From OE-Core rev: f178f56f389e9640a7e80f82250129586edff20c) Signed-off-by: Paul Gortmaker Signed-off-by: Saul Wold Signed-off-by: Richard Purdie

libav: fix PACKAGECONFIG for theora and libvorbis

2014-07-29T08:58:26+00:00

Switches must not be in EXTRA_OECONF anymore. (From OE-Core rev: 251a5cc8c940f54f058588977734fd0ede664c3c) Signed-off-by: Matthieu Crapet Signed-off-by: Saul Wold Signed-off-by: Richard Purdie