<feed xmlns='http://www.w3.org/2005/Atom'>
<title>linux/poky.git/meta/recipes-devtools/binutils, branch pyro-17.0.1</title>
<subtitle>Mirror of git.yoctoproject.org/poky</subtitle>
<id>https://git.enea.com/cgit/linux/poky.git/atom?h=pyro-17.0.1</id>
<link rel='self' href='https://git.enea.com/cgit/linux/poky.git/atom?h=pyro-17.0.1'/>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/'/>
<updated>2017-06-05T22:30:22+00:00</updated>
<entry>
<title>binutils: fix CVE-2017-7210</title>
<updated>2017-06-05T22:30:22+00:00</updated>
<author>
<name>Yuanjie Huang</name>
<email>yuanjie.huang@windriver.com</email>
</author>
<published>2017-05-26T02:40:41+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=fa7a1f2115035688c7ca34f3910f119becd3e9b9'/>
<id>urn:sha1:fa7a1f2115035688c7ca34f3910f119becd3e9b9</id>
<content type='text'>
CVE: CVE-2017-7210

[BZ 21157] -- https://sourceware.org/bugzilla/show_bug.cgi?id=21157

PR binutils/21157: Fix handling of corrupt STABS enum type strings.

(From OE-Core rev: d12a99cba6c9dc9e1f6bc3a7ca8057f07e9cb950)

(From OE-Core rev: 4ca4e781f1c62696f896d7027081f759798794aa)

Signed-off-by: Yuanjie Huang &lt;yuanjie.huang@windriver.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>binutils: fix CVE-2017-7209 in readelf</title>
<updated>2017-06-05T22:30:22+00:00</updated>
<author>
<name>Yuanjie Huang</name>
<email>yuanjie.huang@windriver.com</email>
</author>
<published>2017-05-26T02:40:40+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=e28778ee72e4c6508f630edeb963a4666a770165'/>
<id>urn:sha1:e28778ee72e4c6508f630edeb963a4666a770165</id>
<content type='text'>
CVE: CVE-2017-7209

[BZ 21135] -- https://sourceware.org/bugzilla/show_bug.cgi?id=21135

PR binutils/21135: Fix invalid read of section contents whilst processing
a corrupt binary.

(From OE-Core rev: 2df642ca0a1e4a4e6616729018cf32d2108cabb2)

(From OE-Core rev: b262000162cb4e18421dd85bf5216c9fa3bdbf15)

Signed-off-by: Yuanjie Huang &lt;yuanjie.huang@windriver.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>binutils: fix CVE-2017-6969 in readelf</title>
<updated>2017-06-05T22:30:21+00:00</updated>
<author>
<name>Yuanjie Huang</name>
<email>yuanjie.huang@windriver.com</email>
</author>
<published>2017-05-24T09:55:17+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=829e2027b6c7f4f2d6fa03e158bfe371b7848919'/>
<id>urn:sha1:829e2027b6c7f4f2d6fa03e158bfe371b7848919</id>
<content type='text'>
CVE: CVE-2017-6969
[BZ 21156] -- https://sourceware.org/bugzilla/show_bug.cgi?id=21156

PR binutils/21156: Fix illegal memory accesses in readelf when
ing a corrupt binary.
PR binutils/21156: Fix another memory access error in readelf when
parsing a corrupt binary.

(From OE-Core rev: de04c9811f7ce5179ba261bd8eae921d7873d6cd)

(From OE-Core rev: ae0e01474623969dc193687d59fb5a65ab4d42bc)

Signed-off-by: Yuanjie Huang &lt;yuanjie.huang@windriver.com&gt;
Signed-off-by: Ross Burton &lt;ross.burton@intel.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>binutils: Fix CVE-2017-8392</title>
<updated>2017-06-05T22:30:21+00:00</updated>
<author>
<name>Fan Xin</name>
<email>fan.xin@jp.fujitsu.com</email>
</author>
<published>2017-05-24T05:43:11+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=13f7fc465588a3e5f0c616cc881cabcfd3ca808d'/>
<id>urn:sha1:13f7fc465588a3e5f0c616cc881cabcfd3ca808d</id>
<content type='text'>
Backport upsream commit to fix CVE-2017-8392

CVE: CVE-2017-8392

[BZ 21409] -- https://sourceware.org/bugzilla/show_bug.cgi?id=21409

        PR 21409, segfault in _bfd_dwarf2_find_nearest_line

        PR 21409
        * dwarf2.c (_bfd_dwarf2_find_nearest_line): Don't segfault when
        no symbols.

(From OE-Core rev: dff01b827c87ae135a1d5511b1efbdad01c0eaee)

(From OE-Core rev: c5a5017ce710108c61dba0e0af72bb72a9419701)

Signed-off-by: Fan Xin &lt;fan.xin@jp.fujitsu.com&gt;
Signed-off-by: Ross Burton &lt;ross.burton@intel.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>recipes/*-cross recipes: ignore TARGET_ARCH sstate hash</title>
<updated>2017-04-12T14:09:58+00:00</updated>
<author>
<name>Patrick Ohly</name>
<email>patrick.ohly@intel.com</email>
</author>
<published>2017-04-11T18:38:38+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=3e903cb42f94c77900115035155cd62142d29544'/>
<id>urn:sha1:3e903cb42f94c77900115035155cd62142d29544</id>
<content type='text'>
"yocto-compat-layer.py --machines" showed that shared packages like
gcc-cross-powerpc64 have a sstate signature that depends on
TUNEFLAGS. As a result, there are unnecessary rebuilds and potential
conflicts in a multiconfig.

That's due to the way how TARGET_ARCH is set. Richard Purdie suggested
setting TARGET_ARCH[vardepvalue] as fix, which works. It would be
shorter to do that in cross.bbclass instead of repeating the relevant
line in different recipes, but Richard was concerned about potential
side-effects in other usages of cross.bbclass.

TARGET_GOARM as used in go.inc is still causing signature differences
for go-cross-powerpc64 and machines b4420qds-64b and p5020ds-64b. This
needs further investigation.

(From OE-Core rev: 39bfa0dd3237cbca47e7fca1075d521f9d073f25)

Signed-off-by: Patrick Ohly &lt;patrick.ohly@intel.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>binutils: Fix CVE-2017-6965 and CVE-2017-6966</title>
<updated>2017-04-11T17:10:18+00:00</updated>
<author>
<name>Yuanjie Huang</name>
<email>yuanjie.huang@windriver.com</email>
</author>
<published>2017-04-11T07:00:24+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=ca22ef73d03ec5140493f29d1fe0cb6c0400c307'/>
<id>urn:sha1:ca22ef73d03ec5140493f29d1fe0cb6c0400c307</id>
<content type='text'>
Backport upstream commit to address vulnerabilities:

CVE: CVE-2017-6965
[BZ 21137] -- https://sourceware.org/bugzilla/show_bug.cgi?id=21137

Fix readelf writing to illegal addresses whilst processing corrupt input
files containing symbol-difference relocations.

	PR binutils/21137
	* readelf.c (target_specific_reloc_handling): Add end parameter.
	Check for buffer overflow before writing relocated values.
	(apply_relocations): Pass end to target_specific_reloc_handling.

CVE: CVE-2017-6966
[BZ 21139] -- https://sourceware.org/bugzilla/show_bug.cgi?id=21139

Fix read-after-free error in readelf when processing multiple, relocated
sections in an MSP430 binary.

	PR binutils/21139
	* readelf.c (target_specific_reloc_handling): Add num_syms
	parameter.  Check for symbol table overflow before accessing
	symbol value.  If reloc pointer is NULL, discard all saved state.
	(apply_relocations): Pass num_syms to target_specific_reloc_handling.
	Call target_specific_reloc_handling with a NULL reloc pointer
	after processing all of the relocs.

(From OE-Core rev: 8c52a530ba2beb438aa47956bcec3777a1eafe5f)

Signed-off-by: Yuanjie Huang &lt;yuanjie.huang@windriver.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>binutils: Detect 64bit mips target for gold</title>
<updated>2017-04-01T22:28:19+00:00</updated>
<author>
<name>Khem Raj</name>
<email>raj.khem@gmail.com</email>
</author>
<published>2017-03-31T18:57:55+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=5a85d39c9d5502aabc2dde20f2a16bf7ac9f2d22'/>
<id>urn:sha1:5a85d39c9d5502aabc2dde20f2a16bf7ac9f2d22</id>
<content type='text'>
(From OE-Core rev: b007eb12a80d81c2aa498941961df3f2899ece7e)

Signed-off-by: Khem Raj &lt;raj.khem@gmail.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>binutils: disable gold on mingw</title>
<updated>2017-03-21T22:39:17+00:00</updated>
<author>
<name>Ross Burton</name>
<email>ross.burton@intel.com</email>
</author>
<published>2017-03-20T12:20:30+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=69d3d55ea7e008d21ca187735b6be2e5fb237aef'/>
<id>urn:sha1:69d3d55ea7e008d21ca187735b6be2e5fb237aef</id>
<content type='text'>
oe-core 759eed (binutils: Enable threading when gold is enabled and is not
default linker) causes linking in mingw SDKs to fail:

.../work/i686-nativesdk-mingw32-pokysdk-mingw32/binutils-cross-canadian-x86-64/2.28-r0
/recipe-sysroot-native/usr/bin/i686-pokysdk-mingw32/../../libexec/i686-pokysdk-mingw32/gcc/i686-pokysdk-mingw32/6.3.0/ld:
cannot find -lpthread

Work around this by disabling gold entirely in mingw SDKs.

(From OE-Core rev: b5a595a4be09756b88e91f3353e3b221b165ab44)

Signed-off-by: Ross Burton &lt;ross.burton@intel.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>binutils: Enable threading when gold is enabled and is not default linker</title>
<updated>2017-03-17T16:53:05+00:00</updated>
<author>
<name>Khem Raj</name>
<email>raj.khem@gmail.com</email>
</author>
<published>2017-03-14T23:35:31+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=56b2f19ca16bc09bfbec5addef360821b631b471'/>
<id>urn:sha1:56b2f19ca16bc09bfbec5addef360821b631b471</id>
<content type='text'>
Currently we enable threaded linking feature of gold linker only
when its used as default ld. There is no need to restrict it when
its not default linker either. As long as gold is enabled, which
is the case here, we should be able to do threaded linking.

(From OE-Core rev: 759eed2b02e0a7b5c8b19d4b087d9151c009eed4)

Signed-off-by: Khem Raj &lt;raj.khem@gmail.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>binutils: Upgrade to 2.28 release</title>
<updated>2017-03-07T20:05:31+00:00</updated>
<author>
<name>Khem Raj</name>
<email>raj.khem@gmail.com</email>
</author>
<published>2017-03-07T08:20:09+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=4485ea5807dd99b7f140b06b35654a6a70c286e4'/>
<id>urn:sha1:4485ea5807dd99b7f140b06b35654a6a70c286e4</id>
<content type='text'>
(From OE-Core rev: e9f839d5fe70a222cc7b8942f401ac86a10e6604)

Signed-off-by: Khem Raj &lt;raj.khem@gmail.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
</feed>
