linux/poky.git/meta/recipes-core, branch yocto-3.1.23

build-appliance-image: Update to dunfell head revision

2023-02-13T07:48:24+00:00

(From OE-Core rev: daaee6fcb0d201f041678af433d8e1cd6f924d09) Signed-off-by: Richard Purdie

systemd: Consider PACKAGECONFIG in RRECOMMENDS

2023-02-13T07:44:09+00:00

Since RRECOMMENDS declaration implictly induces building the recipes that provide the runtime recommended packages, conditionalize adding such values according to associated PACKAGECONFIG settings in order to avoid redundant building. (From OE-Core rev: a1989add927f7805378fe4d5afbde780b747ba77) (From OE-Core rev: a35444fa035d551b6a4dcb9609ab8de960258618) Signed-off-by: Niko Mauno Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

cve-update-db-native: show IP on failure

2023-02-13T07:44:09+00:00

We get random SSL failures when fetching the CVE database, and it's notable that the NVD server is behind a DNS round-robin or geographically diverse servers. On a hunch that there is one misconfigured server, dump the IP that we connected to. (From OE-Core rev: 48c0e427675f4c99c395cc0a75743ac70eb64802) Signed-off-by: Ross Burton Signed-off-by: Richard Purdie (cherry picked from commit 91f46d431dc8f40e8c6475c800bb61cb08b82b0a) Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

cve-update-db-native: avoid incomplete updates

2023-02-13T07:44:09+00:00

The database update has been done on the original file. In case of network connection issues, temporary outage of the NVD server or a similar situation, the function could exit with incomplete data in the database. This patch solves the issue by performing the update on a copy of the database. It replaces the main one only if the whole update was successful. See https://bugzilla.yoctoproject.org/show_bug.cgi?id=14929 Reported-by: Alberto Pianon (From OE-Core rev: 6a219c50ee12b7fb584e2db3e4dde171903acfb7) Signed-off-by: Marta Rybczynska Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie (cherry picked from commit 8efe99214d8b005f0ecac690ce5ba17b31758f92) Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

cve-update-db-native: add more logging when fetching

2023-02-13T07:44:09+00:00

Add some debug logging when fetching the CVE data. (From OE-Core rev: 60fa8135437ab1e2bc7cead5f838ac787c8dab26) Signed-off-by: Ross Burton Signed-off-by: Richard Purdie (cherry picked from commit 9b230584664873af2ab453b8153b1ad276d3b0af) Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

cve-update-db-native: Allow to overrule the URL in a bbappend.

2023-02-13T07:44:09+00:00

With this small patch, it's possible to overrule the public URL with a local mirror for those without Internet access. (From OE-Core rev: 7290b3217c31cec7dd9985cbf5a003a9c368fa54) Signed-off-by: Jan Vermaete Signed-off-by: Richard Purdie (cherry picked from commit 2d903126e8bbece3a5171c3488c3deae1f0aa3ee) Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

build-appliance-image: Update to dunfell head revision

2023-01-13T18:11:43+00:00

(From OE-Core rev: db81e3c7e7f1d4d9eba52ac35ac97627d0240b63) Signed-off-by: Richard Purdie

ovmf: fix gcc12 warning for device path handling

2023-01-13T18:11:19+00:00

Backport [https://github.com/tianocore/edk2/commit/22130dcd98b4d4b76ac8d922adb4a2dbc86fa52c] Fixes: In function ?SetDevicePathEndNode?, inlined from ?FileDevicePath? at DevicePathUtilities.c:857:5: DevicePathUtilities.c:321:3: error: writing 4 bytes into a region of size 1 [-Werror=stringop-overflow=] 321 | memcpy (Node, &mUefiDevicePathLibEndDevicePath, sizeof (mUefiDevicePathLibEndDevicePath)); | ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ In file included from UefiDevicePathLib.h:22, from DevicePathUtilities.c:16: ../Include/Protocol/DevicePath.h: In function ?FileDevicePath?: ../Include/Protocol/DevicePath.h:51:9: note: destination object ?Type? of size 1 51 | UINT8 Type; ///< 0x01 Hardware Device Path. | ^~~~ (From OE-Core rev: a33abd759e2e9f41e056f87024de3b333e9b948b) Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

ovmf: fix gcc12 warning in LzmaEnc

2023-01-13T18:11:19+00:00

Backport [https://github.com/tianocore/edk2/commit/85021f8cf22d1bd4114803c6c610dea5ef0059f1] Fixes: Sdk/C/LzmaEnc.c: In function ?LzmaEnc_CodeOneMemBlock?: Sdk/C/LzmaEnc.c:2828:19: error: storing the address of local variable ?outStream? in ?*p.rc.outStream? [-Werror=dangling-pointer=] 2828 | p->rc.outStream = &outStream.vt; | ~~~~~~~~~~~~~~~~^~~~~~~~~~~~~~~ Sdk/C/LzmaEnc.c:2811:28: note: ?outStream? declared here 2811 | CLzmaEnc_SeqOutStreamBuf outStream; | ^~~~~~~~~ Sdk/C/LzmaEnc.c:2811:28: note: ?pp? declared here Sdk/C/LzmaEnc.c:2828:19: error: storing the address of local variable ?outStream? in ?*(CLzmaEnc *)pp.rc.outStream? [-Werror=dangling-pointer=] 2828 | p->rc.outStream = &outStream.vt; | ~~~~~~~~~~~~~~~~^~~~~~~~~~~~~~~ Sdk/C/LzmaEnc.c:2811:28: note: ?outStream? declared here 2811 | CLzmaEnc_SeqOutStreamBuf outStream; | ^~~~~~~~~ Sdk/C/LzmaEnc.c:2811:28: note: ?pp? declared here cc1: all warnings being treated as errors (From OE-Core rev: 25cc13c1016c2565694d0e0959a69c8b91054309) Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

ovmf: fix gcc12 warning in GenFfs

2023-01-13T18:11:19+00:00

Backport [https://github.com/tianocore/edk2/commit/7b005f344e533cd913c3ca05b266f9872df886d1] Fixes: GenFfs.c:545:5: error: pointer ?InFileHandle? used after ?fclose? [-Werror=use-after-free] 545 | Error(NULL, 0, 4001, "Resource", "memory cannot be allocated of %s", InFileHandle); | ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ GenFfs.c:544:5: note: call to ?fclose? here 544 | fclose (InFileHandle); | ^~~~~~~~~~~~~~~~~~~~~ (From OE-Core rev: 19da9603f4e7e64d4ffcb6d1e927965dcd161079) Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie