linux/poky.git/meta/recipes-devtools/ruby, branch zeus-next

ruby: fix CVE-2019-16254

2020-03-16T16:44:53+00:00

(From OE-Core rev: b8e6eb473f3697ab76f30ca8a0abe584d3d10fa6) Signed-off-by: Rahul Chauhan Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie

ruby: fix non-IPv6 support

2019-10-02T09:09:48+00:00

When IPv6 support is disabled, this recipe mis-configures ruby so that it end up non-working: --enable-wide-getaddrinfo instructs ruby to re-implement the standard getaddinfo(), but IPv6 support is still automatically detected via ext/socket/extconf.rb independently of that flag. To re-implement getaddrinfo(), ruby uses the obsolete getipnodebyaddr() and getipnodebyname() functions - i.e. according to the man-page, glibc provided those only in glibc 2.1.91-95; and of course compilation fails. [1] Switch to ruby's standard --enable-ipv6= configure options to make the build work without warnings, and ruby work at runtime as well. [1] Compilation and linking actually succeed, albeit with a warning regarding implicit declaration / unresolved symbols. The error is only obvious at runtime due to the unresolved symbols... (From OE-Core rev: 6ff71dd308b1611df7a8ea811a79b7cb884c99e9) Signed-off-by: André Draszik Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

ruby: configure mis-detects isnan/isinf on musl

2019-10-02T09:09:48+00:00

The configure script does not detect isnan/isinf as macros as is the case in musl: checking for isinf... no checking for isnan... no Backport an upstream patch from 2.7.0-preview1 to address this: checking whether isinf is declared... yes checking whether isnan is declared... yes (From OE-Core rev: b1afaccdba31341cace4b8d84d118ca76098587e) Signed-off-by: André Draszik Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

ruby: drop long-merged CVE patches

2019-10-02T09:09:48+00:00

The CVE patches here address the original problem in a different way to how upstream solved it, and are superfluous. Ruby updated to Onigmo v6.1.3+669ac999761 before its v2.5.0 release, and both CVEs were fixed before Onigmo v6.1.3: https://github.com/k-takata/Onigmo/releases/tag/Onigmo-6.1.3 https://github.com/k-takata/Onigmo/commits/Onigmo-6.1.3 https://github.com/k-takata/Onigmo/commit/40945546578004bf40e6f884834bcad4054c70f7 https://github.com/k-takata/Onigmo/commit/783b7ef491e1422e4be7407ccc3e4305e5013507 Because the issues were fixed differently here and in Ruby (Onigmo), patch never complained about duplicatation during recipe updates. (From OE-Core rev: 90dbe9019c81e25923ed450df80b4401d16287b4) Signed-off-by: André Draszik Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

ruby: Adding zlib-native to native dependencies

2019-08-13T08:37:36+00:00

(From OE-Core rev: c558da63d6ec16a5b0c09a2e558ce72606b33436) Signed-off-by: Jóhann Friðriksson Signed-off-by: Richard Purdie

ruby: update to 2.5.5

2019-07-02T07:13:07+00:00

(From OE-Core rev: f2c5659968dcdb44ceaf030b45b1e3baf3be7a7e) Signed-off-by: Oleksandr Kravchuk Signed-off-by: Richard Purdie

ruby: add ptest

2019-04-12T08:29:06+00:00

(From OE-Core rev: 46f47b700ef7f58c8095db9bd3b4b867a6447360) Signed-off-by: Changqing Li Signed-off-by: Richard Purdie

ruby: make ext module fiddle can compile success

2019-04-12T08:29:06+00:00

ext module fiddle depend on libffi, in ruby source tree, there is in internal libffi in case target platfrom don't install libffi, but autotools.bbclass delete configure under libffi and not run autoreconf to regenerate one.so we met this error: ruby-2.5.3/ext/fiddle/libffi-3.2.1/configure: No such file or directory the fix is add depend and extra_oeconf to use libffi in the system (From OE-Core rev: 55acc9b477919208d91781dbe9a03136f895a94b) Signed-off-by: Changqing Li Signed-off-by: Richard Purdie

ruby: remove CVE-2018-1000073.patch as already fixed

2019-02-12T14:04:31+00:00

rubygems 2.7.6 which is in ruby 2.5.3 has this fix and as currently applied all gem extraction fails as the realpath check is done against the full path including the file to be extracted which will always fail as the file hasnt been extracted yet (From OE-Core rev: 479620023aa0af9467ca1d2807cf7bedd73327f6) Signed-off-by: Brett Grandbois Signed-off-by: Richard Purdie

ruby.inc: Add dependency on readline-native

2019-02-02T11:06:00+00:00

Add dependency on readline-native to fix the following issue uninitialized constant Logfile | Check ext/fiddle/mkmf.log for more details. | readline: | Could not be configured. It will not be installed. | build/tmp/work/x86_64-linux/ruby-native/2.5.1-r0/ruby-2.5.1/ext/readline/extconf.rb:62: Neither readline nor libedit was found | Check ext/readline/mkmf.log for more details. | *** Fix the problems, then remove these directories and try again if you want. (From OE-Core rev: b25acc546b6fc684da9cc8a3a01e44cd195e209b) Signed-off-by: Manjukumar Matha Signed-off-by: Richard Purdie