linux/poky.git/meta/recipes-devtools, branch daisy-11.0.2

python: force off_t size to 8 to enable large file support

2014-11-06T11:40:38+00:00

If DISTRO_FEATURES contains "largefile", force the size of off_t to 8 as a workaround for having ac_cv_sizeof_off_t=4 on 32-bit systems. In future we will likely drop the value from the site file, but for now this is a slightly safer fix. Fixes [YOCTO #6813]. (From OE-Core master rev: a8216030ee6c65531de8fbf3eed878a345a94edc) (From OE-Core rev: 94483eff5d0858ef1b5a8850268aa6a7bc6e6463) Signed-off-by: Paul Eggleton Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

pseudo.inc: Clean up backport of version update to 1.6.2

2014-11-05T23:27:44+00:00

This uprevs pseudo to 1.6. This merges in all of the existing fixes, and also adds partial support for extended attributes, including storing arbitrary extended attributes in the database, and also interpreting the posix permissions ACLs as chmod requests. The extended attribute support means we need xattr.h, the simplest way to be sure of this is to build attr before pseudo, which doesn't take long. (From OE-Core rev: 606793e7b5c129654f317e5bec9ed7f083d3383d) Signed-off-by: Saul Wold Signed-off-by: Richard Purdie

pseudo*.bb: update to pseudo 1.6.2

2014-11-04T15:13:53+00:00

pseudo 1.6.2 fixes problems with 64-bit inodes and some underlying issues involving file renames that could occasionally cause very strange behaviors files being deleted, linked, or renamed, mostly observed as strange recovery if an inode got reused. (From OE-Core rev: b2c6a032d6e5deb07e76ed75fcd0931fad6a748c) (From OE-Core rev: c2e56d7da8c7df330869babac198678b33eb3802) Signed-off-by: Richard Purdie Conflicts: meta/recipes-devtools/pseudo/pseudo_1.6.2.bb meta/recipes-devtools/pseudo/pseudo_git.bb

perl: fix for CVE-2010-4777

2014-10-10T14:06:06+00:00

The Perl_reg_numbered_buff_fetch function in Perl 5.10.0, 5.12.0, 5.14.0, and other versions, when running with debugging enabled, allows context-dependent attackers to cause a denial of service (assertion failure and application exit) via crafted input that is not properly handled when using certain regular expressions, as demonstrated by causing SpamAssassin and OCSInventory to crash. http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2010-4777 (From OE-Core rev: 368df9f13ddf124e6aaaec06c02ab698c9e0b6c3) (From OE-Core rev: 73aff6efb3374427234a3615ffca07874f22f3fa) Signed-off-by: yanjun.zhu Signed-off-by: Roy Li Signed-off-by: Saul Wold Signed-off-by: Richard Purdie

dpkg: Security Advisory - CVE-2014-3127

2014-10-10T14:06:06+00:00

v2 changes: * update format for commit log * add Upstream-Status for patch commit a12eb58959d0a10584a428f4a3103a49204c410f upstream Dpkg::Source::Patch: Outright reject C-style filenames in patches Because patch only started recognizing C-style filenames in diffs in version 2.7, it's not safe to assume one behaviour or the other, as the system might or might not have a recent enough version, or a GNU patch program at all. There's also no reason we should be supporting this kind of strange encoded filenames in patches, when we have not done so up to now. Let's just ban these types of diffs and be done with it. Fixes: CVE-2014-0471, CVE-2014-3127 Closes: #746306 [drop the text for debian/changelog,because it's not suitable for the veriosn] (From OE-Core rev: 2c3838443eacd3a86ea8917ea53a20248e7bdf03) (From OE-Core rev: 14273b42542151357e3299736f2b730ca3257fc0) Signed-off-by: Wenlin Kang Signed-off-by: Wenzong Fan Signed-off-by: Richard Purdie

dpkg: Security Advisory - CVE-2014-0471

2014-10-10T14:06:06+00:00

v2 changes: * update format for commit log * add Upstream-Status for patch commit a82651188476841d190c58693f95827d61959b51 upstream Dkpkg::Source::Patch: Correctly parse C-style diff filenames We need to strip the surrounding quotes, and unescape any escape sequence, so that we check the same files that the patch program will be using, otherwise a malicious package could overpass those checks, and perform directory traversal attacks on source package unpacking. Fixes: CVE-2014-0471 Reported-by: Jakub Wilk [drop the text for debian/changelog,because it's not suitable for the veriosn] (From OE-Core rev: 81880b34a8261e824c5acafaa4cb321908e554a0) (From OE-Core rev: c75316fc256d229cfad45cd57328920993d93d8d) Signed-off-by: Wenlin Kang Signed-off-by: Wenzong Fan Signed-off-by: Richard Purdie

adt-installer: fix sed input file error

2014-10-10T14:06:05+00:00

When use default install directory, we can't get the environment setup script path. The reason is that opkg-cl list incorrect files paths. This patch sets env_script variable to make us get correct environment setup script path. [YOCTO #6443] (From OE-Core rev: b0ac1ea1f7eaca92b613f874ee2cbf6830743a71) Signed-off-by: Chong Lu Signed-off-by: Richard Purdie

binutils: Add fix for recent patch on older gcc

2014-10-10T14:06:05+00:00

The recent bintuils patch update breaks on older gccs such as CentOS 6. Backport a patch to address this. (From OE-Core rev: 947c1bab91993be149fba1d09aedbe8509902fbe) Signed-off-by: Richard Purdie

qemu: Explicitly disable libiscsi, its not in DEPENDS

2014-09-20T09:41:28+00:00

(From OE-Core rev: 8f67830e41e435a142d0b905a1b9f706a1cf1175) Signed-off-by: Jonathan Liu Signed-off-by: Richard Purdie

binutils: Apply the proper fix for PR 16428

2014-07-25T17:01:22+00:00

It is fixed by commit 4199e3b8669d0a36448687850374fdc2ad7240b6 Author: Alan Modra Date: Wed Jan 15 21:50:55 2014 +1030 non-PIC references to __ehdr_start in pie and shared Rather than hacking every backend to not discard dynamic relocations against an undefined hidden __ehdr_start, make it appear to be defined early. We want __ehdr_start hidden before size_dynamic_sections so that it isn't put in .dynsym, but we do need the dynamic relocations for a PIE or shared library with a non-PIC reference. Defining it early is wrong if we don't actually define the symbol later to its proper value. (In some cases we want to leave the symbol undefined, for example, when the ELF header isn't loaded, and we don't have this infomation available in before_allocation.) So replace the existing patches with this one. (From OE-Core rev: e48b93a495205f812d71967548943ab80df79092) Signed-off-by: Richard Purdie