linux/poky.git/meta/recipes-bsp/grub, branch master-test

grub: Further reproducibility fix

2021-01-01T23:15:13+00:00

Fix the ordering in the generated unidata.c file to aid reproducibility. [YOCTO #14167] (From OE-Core rev: 6d9c9f7604fd32ef926726a46ae053bbab6ccb4f) Signed-off-by: Richard Purdie

grub: fix "CVE:" line in one of the patches

2021-01-01T23:15:13+00:00

The "CVE:" line in the patch for CVEs 2020-14309, CVE-2020-14310, and CVE-2020-14311 had commas between the CVE numbers, which resulted in CVE-2020-14310 not being picked up as patched by cve-check.bbclass's parsing. Remove the commas to match cve-check.bbclass's expectations. (From OE-Core rev: 396d5c0f9cffa4b54ae94738b1ef2b6fb545f082) Signed-off-by: Scott Murray Signed-off-by: Richard Purdie

grub: Add second fix for determinism issue

2020-12-21T22:29:57+00:00

There is a second list sorting problem in a generator script within grub, add a sort() of a list to resolve this. (From OE-Core rev: cb5e96e05930eaff4d679166416d6c84d6e3236b) Signed-off-by: Richard Purdie

grub: Fix build reproducibility issue

2020-12-20T00:03:05+00:00

We're seeing reproducibility issue on the autobuilder due to changing module dependency ordering. Add some sorting to an awk script to fix this. (From OE-Core rev: 925ddd5edccbfec52ff45c1b54ab2ae1bfe0d57c) Signed-off-by: Richard Purdie

grub: Add support for RISC-V

2020-11-29T20:24:32+00:00

This patch adds RISC-V to the COMPATIBLE_HOST. Since GRUB 2.04, the source code supports the RISC-V, thanks to Alexander Graf. Adding the GRUBPLATFORM for RISC-V prevents autoconf problems. Also, the patch appends the __anonymous method with RISC-V architecture. (From OE-Core rev: 42ea75d441ae38cdffed3b1cd671af886c19fbb6) Signed-off-by: Norbert Kaminski Signed-off-by: Richard Purdie

grub: clean up CVE patches

2020-11-08T14:03:21+00:00

Clean up several patches introduced in commit 6732918498 ("grub:fix several CVEs in grub 2.04"). 1) Add CVE tags to individual patches. 2) Rename upstream patches and prefix them with CVE tags. 3) Add description of reference to upstream patch. (From OE-Core rev: bcb8b6719beaf6625e6b703e91958fe8afba5819) Signed-off-by: Yongxin Liu Signed-off-by: Richard Purdie

grub: add grub-nativesdk

2020-10-30T13:22:48+00:00

Add nativesdk support to make grub-mkimage tool part of Host tools in the generated SDK. The conf file should have "TOOLCHAIN_HOST_TASK_append = " nativesdk-grub" for the grub-mkimage to show up. (From OE-Core rev: cc88a1b04c062373e0db15f7f7e6a26013c050fb) Signed-off-by: Khasim Syed Mohammed Signed-off-by: Richard Purdie

grub: fix several CVEs in grub 2.04

2020-10-30T13:04:39+00:00

Backport patches from https://git.savannah.gnu.org/git/grub.git to fix some CVEs. Here is the list. CVE-2020-14308: 0001-calloc-Make-sure-we-always-have-an-overflow-checking.patch 0002-lvm-Add-LVM-cache-logical-volume-handling.patch 0003-calloc-Use-calloc-at-most-places.patch CVE-2020-14309, CVE-2020-14310, CVE-2020-14311: 0004-safemath-Add-some-arithmetic-primitives-that-check-f.patch 0005-malloc-Use-overflow-checking-primitives-where-we-do-.patch CVE-2020-15706: 0006-script-Remove-unused-fields-from-grub_script_functio.patch 0007-script-Avoid-a-use-after-free-when-redefining-a-func.patch CVE-2020-15707: 0008-linux-Fix-integer-overflows-in-initrd-size-handling.patch (From OE-Core rev: 67329184985a03534f11f95e9df5f9fb2305a261) Signed-off-by: Yongxin Liu Signed-off-by: Richard Purdie

grub2: fix CVE-2020-10713

2020-10-20T10:11:46+00:00

(From OE-Core rev: ec6a2258ca27d5709df4fe18d94841332395bcb2) Signed-off-by: Lee Chee Yang Signed-off-by: Richard Purdie

grub: set CVE_PRODUCT to grub2

2020-08-08T08:17:48+00:00

grub and grub-efi recipes' CVE_PRODUCT should be grub2. (From OE-Core rev: 8682f6bc7e3e8d5fcf682647526f1a8430d08768) Signed-off-by: Chen Qi Signed-off-by: Richard Purdie