Mirror of git.yoctoproject.org/poky https://git.enea.com/cgit/linux/poky.git/atom?h=denzil 2013-01-28T12:43:41+00:00 2013-01-28T12:43:41+00:00 Martin Jansa martin.jansa@gmail.com 2013-01-27T23:39:09+00:00 urn:sha1:498951a247836346cda1b5979cc6a998771884bb (From OE-Core rev: cae95a527c1e9faefc0c051254e67dad7fad4197) Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> 2013-01-03T12:34:25+00:00 yanjun.zhu yanjun.zhu@windriver.com 2012-12-11T10:00:32+00:00 urn:sha1:a86e32a18b542c2c3c5ce0faf5b162fc6c2ebd50 CQID:WIND00366813 Reference: http://squashfs.git.sourceforge.net/git/gitweb.cgi? p=squashfs/squashfs;a=patch;h=8515b3d420f502c5c0236b86e2d6d7e3b23c190e Integer overflow in the queue_init function in unsquashfs.c in unsquashfs in Squashfs 4.2 and earlier allows remote attackers to execute arbitrary code via a crafted block_log field in the superblock of a .sqsh file, leading to a heap-based buffer overflow. http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2012-4025 (From OE-Core rev: e6fddd1961061895e9335fa94b636163efdc9caa) Signed-off-by: yanjun.zhu <yanjun.zhu@windriver.com> [YOCTO #3564] Signed-off-by: Saul Wold <sgw@linux.intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> 2013-01-03T12:34:23+00:00 Khem Raj raj.khem@gmail.com 2012-07-04T19:30:07+00:00 urn:sha1:07f304f4e28dc596b1420ae1cb6607d7706108e4 eglibc 2.16 does not export gets anymore (From OE-Core rev: 043d67c6677fa87496c4c441e9d366e2003ab9aa) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Saul Wold <sgw@linux.intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Resolved merge conflicts with denzil branch and backported guile patch. Signed-off-by: Scott Garman <scott.a.garman@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> 2013-01-03T12:34:23+00:00 Khem Raj raj.khem@gmail.com 2012-07-04T16:15:25+00:00 urn:sha1:db915496d3e513f8d29dd5961764137b26ae8a71 (From OE-Core rev: bc91a267d097c100480ea02ece7fb372167eaf7f) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Saul Wold <sgw@linux.intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> 2013-01-03T12:34:22+00:00 Khem Raj raj.khem@gmail.com 2012-07-04T06:53:16+00:00 urn:sha1:8fe4344e74a70a88e1bbc79d2c6f93255df9e7be These recipes use gnulib which needs this change to use gets when its defined and not otherwise. Until that change goes into gnulib and then all these package upgrade gnulib in their sourcebase we patch them (From OE-Core rev: b955f1a7bc716055c78ed575eccac6f611dc2395) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Saul Wold <sgw@linux.intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Resolved merge conflicts with denzil branch and backported gnutls patch. Signed-off-by: Scott Garman <scott.a.garman@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> 2012-12-07T15:58:20+00:00 yanjun.zhu yanjun.zhu@windriver.com 2012-11-30T11:41:23+00:00 urn:sha1:a6f0dcbe7d8149865896d8917d4962da95f491ba Reference:http://squashfs.git.sourceforge.net/git/gitweb.cgi?p= squashfs/squashfs;a=commit;h=19c38fba0be1ce949ab44310d7f49887576cc123 Fix potential stack overflow in get_component() where an individual pathname component in an extract file (specified on the command line or in an extract file) could exceed the 1024 byte sized targname allocated on the stack. Fix by dynamically allocating targname rather than storing it as a fixed size on the stack. [YOCTO #3513] Fixes denzil [YOCTO #3520] (From OE-Core rev: d35560f33f257bd12a07c7c0be770319086d6ad9) Signed-off-by: yanjun.zhu <yanjun.zhu@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> 2012-12-07T15:58:18+00:00 Martin Jansa martin.jansa@gmail.com 2012-10-24T11:37:05+00:00 urn:sha1:2288ff099c33574bc1615b4aa3422ea8a4ee73da (From OE-Core rev: 119215fee75a64de49d498c3d57446783722a292) Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> 2012-12-07T15:58:17+00:00 Andrei Gherzan andrei@gherzan.ro 2012-10-21T15:40:39+00:00 urn:sha1:93cc23571e4ec3c2e8438dea5d50fbda26acfabb (From OE-Core rev: dadfb4914b25a970c61e7f2354c01086d4823fd6) Signed-off-by: Andrei Gherzan <andrei@gherzan.ro> Signed-off-by: Saul Wold <sgw@linux.intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> 2012-10-10T22:30:08+00:00 Dennis Lan dennis.yxun@gmail.com 2012-10-03T03:24:09+00:00 urn:sha1:9bf253f467e1882d74d2dff6f4b0598ac74eac75 Using Gentoo Linux as the build host, it fails without this patch Use Getopt::Std in place of getopts.pl. https://bugs.gentoo.org/show_bug.cgi?id=420083 which following error: /usr/bin/perl -w ./../msggen.pl -l jstyleModule InterpreterMessages.msg /usr/bin/perl -w ./../msggen.pl -l jstyleModule DssslAppMessages.msg Undefined subroutine &main::Getopts called at ./../msggen.pl line 22. make[2]: *** [InterpreterMessages.h] Error 2 make[2]: *** Waiting for unfinished jobs.... Undefined subroutine &main::Getopts called at ./../msggen.pl line 22. make[2]: *** [DssslAppMessages.h] Error 2 (from OE-Core rev 169a89b10817b742c063fcd76721e4dbbcca6199) (From OE-Core rev: 7c7dcb05685d840c70474d409f6a58ae459c46f0) Signed-off-by: Dennis Lan <dennis.yxun@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> 2012-09-28T15:53:13+00:00 Matthew McClintock msm@freescale.com 2012-09-12T21:06:50+00:00 urn:sha1:57cdce3108052d1cccba196da63f4a02fae35dc7 (From OE-Core rev: a175e09d1b0be85d8cbc58672485ec5ee5475ae2) Signed-off-by: Matthew McClintock <msm@freescale.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>