linux/poky.git/meta/recipes-core, branch uninative-3.2

libxml2: Add bash dependency for ptests.

2021-05-18T22:52:54+00:00

Before, running ptests on core-image-minimal would result in an error due to missing /bin/bash: [ -d test ] || ln -s ../libxml2-2.9.10/test . make: /bin/bash: No such file or directory make: *** [Makefile:2105: runtests] Error 127 Changing the Makefile to use /bin/sh results in some of the tests failing, so I have added the missing dependancy on bash. (From OE-Core rev: d2e81298c446aec8d7fcf61fd5023ac30350f205) Signed-off-by: Tony Tascioglu Signed-off-by: Richard Purdie

libxml2: Reformat runtest.patch

2021-05-18T22:52:54+00:00

Reformatted runtest.patch to allow it to be applied using git am. This makes it easier to apply the series of patches to the original git repo. There are no changes to the code of the patch other than the reformat. Previously, the patch claimed to be a backport, but I have not found an upstream commit so I've changed the Upstream-Status to pending. (From OE-Core rev: 0361d625e1573e846a2f03ed90a8b897bc405160) Signed-off-by: Tony Tascioglu Signed-off-by: Richard Purdie

libxcrypt-compat: upgrade 4.4.19 -> 4.4.20

2021-05-18T22:52:53+00:00

(From OE-Core rev: d7eb1125e974fddd43062665bd5eb29f352832dc) Signed-off-by: Richard Purdie

expat: upgrade 2.2.10 -> 2.3.0

2021-05-14T06:57:27+00:00

Drop 0001-Add-output-of-tests-result.patch (difficult to rebase). I have verified that ptests still pass, and print PASS for every test. If they start failing we can revisit what kind of output would be beneficial. (From OE-Core rev: ef1a76f9c130e7efaecae15ccb1d48a03fa17b9b) Signed-off-by: Alexander Kanavin Signed-off-by: Richard Purdie

coreutils: Exclude CVE-2016-2781 from cve-check

2021-05-13T10:34:14+00:00

http://git.savannah.gnu.org/cgit/coreutils.git/commit/?id=v8.27-101-gf5d7c0842 "Given runcon is not really a sandbox command, the advice is to use `runcon ... setsid ...` to avoid this particular issue. (From OE-Core rev: 2d273b5aed4a5bd509ec9c68a6f451c17ec17d0c) Signed-off-by: Richard Purdie

ovmf: Fix other reproducibility issues

2021-05-13T10:34:14+00:00

When building in longer paths, the ovmf build changes in many ways. This adds a patch addressing various causes of problems. Full details are in the patch header. (From OE-Core rev: 9113a5815f3c682ef99fd777e35e892b2e08237f) Signed-off-by: Richard Purdie

ovmf: Disable lto to aid reproducibility

2021-05-13T10:34:14+00:00

lto tends to break reproducibility and makes ovmf near impossible to debug reproducibility issues in. Disable it and supress the warnings that then generates from Werror. (From OE-Core rev: 627b6ed763eca90192203932784872b60a65fcaa) Signed-off-by: Richard Purdie

ovmf: Improve reproducibility by enabling prefix mapping

2021-05-11T10:54:26+00:00

We want to pass ${DEBUG_PREFIX_MAP} to gcc commands and also pass in --debug-prefix-map to nasm (we carry a patch to nasm for this). The tools definitions are built by ovmf-native so we need to pass this in at target build time when we know the right values. By using determininistc file paths in the ovmf build, it removes the opportunitity for gcc/ld to change the output binaries due to path lengths overflowing section sizes and causing small changes in the binary output. This also means that if builds have reproducibility issues in future, it becomes much easier to compare intermediate build artefacts. (From OE-Core rev: 51f51310d6d5cced2b55bf27dbb9a5717740a206) Signed-off-by: Richard Purdie

glibc: Document and whitelist CVE-2019-1010022-25

2021-05-11T10:54:26+00:00

These CVEs are disputed by upstream and there is no plan to fix/address them. No other distros are carrying patches for them. There is a patch for 1010025 however it isn't merged upstream and probably carries more risk of other bugs than not having it. (From OE-Core rev: b238db678083cc15313b98d2e33f83cccab03fc6) Signed-off-by: Richard Purdie

busybox: upgrade 1.33.0 -> 1.33.1

2021-05-11T10:54:26+00:00

0001-decompress_gunzip-Fix-DoS-if-gzip-is-corrupt.patch removed since it is included in 1.33.1 (From OE-Core rev: 544236b12a72ee5be5ef0147249ead112082b871) Signed-off-by: Zheng Ruoqin Signed-off-by: Richard Purdie