linux/poky.git/meta/recipes-extended/bash, branch dunfell-23.0.20

bash: Ensure deterministic build

2021-09-29T23:02:22+00:00

Bash keeps a count of the number of times make was invoked on a directory and changes the output versioning accordingly. We want deterministic output so disable this behaviour. (From OE-Core rev: 8ca4fad65d267c178a416546486c8422001115b0) Signed-off-by: Richard Purdie (cherry picked from commit 13a039e03195a47c750d5901e96fe81cf523481f) Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

meta/recipes-extended: Add HOMEPAGE / DESCRIPTION

2021-03-18T21:20:24+00:00

Added HOMEPAGE and DESCRIPTION for recipes with missing decriptions or homepage [YOCTO #13471] (From OE-Core rev: d2e54108558bcf3a44d65505a643ace5cf365d8a) Signed-off-by: Dorinda Bassey Signed-off-by: Richard Purdie (cherry picked from commit cc6c7af900ae0196a62b7fa1375c55bbcd8e68b4) Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

bash: Rename patch name

2021-01-01T11:55:35+00:00

Because the name of CVE patch is wrong, cve-check-tool cannot get the correct CVE result. Rename the patch name. (From OE-Core rev: 33beb4fc5f23206ccb2f8d81e0135bbc575e238d) Signed-off-by: Zang Ruochen Signed-off-by: Richard Purdie (cherry picked from commit 422f9af7d0f7de7a2e933154853e7a281f98ab93) Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

bash: fix CVE-2019-18276

2020-10-06T13:15:21+00:00

An issue was discovered in disable_priv_mode in shell.c in GNU Bash through 5.0 patch 11. By default, if Bash is run with its effective UID not equal to its real UID, it will drop privileges by setting its effective UID to its real UID. However, it does so incorrectly. On Linux and other systems that support "saved UID" functionality, the saved UID is not dropped. An attacker with command execution in the shell can use "enable -f" for runtime loading of a new builtin, which can be a shared object that calls setuid() and therefore regains privileges. However, binaries running with an effective UID of 0 are unaffected. Get the patch from [1] to fix the issue. [1] https://git.savannah.gnu.org/cgit/bash.git/commit/?h=devel&id=951bdaa (From OE-Core rev: aee0f56a9b3b510649672d0b4427a0e94a001ec4) Signed-off-by: De Huo Signed-off-by: Kai Kang Signed-off-by: Mingli Yu Signed-off-by: Richard Purdie (cherry picked from commit 6f01acae9c279e0a580f46d1ba4c015caa3f8c2c) Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

bash : inlcude patch 17 & 18

2020-10-06T13:15:21+00:00

(From OE-Core rev: bf8f33c62f6fe98777248fb05ce3105e9f63d03a) Signed-off-by: Chee Yang Lee Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

bash: include patch 12-16

2020-02-15T10:26:42+00:00

(From OE-Core rev: 10907c6ea3665e0cacb05e7120c8726ed5790a3c) Signed-off-by: Lee Chee Yang Signed-off-by: Richard Purdie

bash: include patch 8-11

2020-02-04T15:56:29+00:00

(From OE-Core rev: 61c3449b87e5d627134a580bb5298338f389beb1) Signed-off-by: Lee Chee Yang Signed-off-by: Richard Purdie

bash: Don't DEPEND on virtual/libc-locale

2019-12-09T12:00:43+00:00

For ptest only RDEPENDS is needed, and packaging glibc-locale slowed down builds with ptest disabled. (From OE-Core rev: 53f61ca73e69508bff6ea75da666d6873b5384f5) Signed-off-by: Adrian Bunk Signed-off-by: Richard Purdie

bash: Remove .build files for reproducible builds

2019-06-24T09:36:28+00:00

Bash has an internal "build number" that it tracks and automatically increments ever time a given builds is made from the same sandbox. However, this can make builds non-reproducible in the event that a build directory is reused multiple times. Remove the .build files after every build if reproducible builds have been requested which will reset the build build number for the next build. (From OE-Core rev: 9754be5c22de877bd53226908d03d2eef5751808) Signed-off-by: Joshua Watt Signed-off-by: Richard Purdie

bash: use setpriv, sed.sed to run ptests

2019-06-18T10:23:48+00:00

The execscript test in bash fails when run with ptest-runner calling 'su', with the error: bash: cannot set terminal process group (16036): Inappropriate ioctl for device Even with ptest-runner fixed to make a child process use the right process group, 'su' still results in the warning above. Use 'setpriv' instead. 'runuser' was considered and works but depends on pam so it's ruled out. Now that all bash tests are run as a user, the patch: fix-run-coproc-run-heredoc-run-execscript-run-test-f.patch can be removed. Also to create the account 'bashtest' in the 'run-ptest' script the bash-ptest must depend on 'shadow'. Also, in 'run-ptest', ensure that the bash ptests are owned by the 'bashtest' user. Add 'sed' as a dependency for ptests since tests/exp8.sub runs: var=$'x\001y\177z' declare -p var | sed -n l and that results in: sed.busybox: "" sed.sed: declare -- var="x\001y\177z"$ This appears to be a feature that busybox sed has not implemented. With this series of changes, bash-ptest for qemux86-64 passes 79 of 81 tests. The remaining failures are: 1. run-read: # cat tests/read6.sub # test read with a timeout of 0 -- input polling # sleep with fractional seconds argument is not universal echo abcde | { sleep 0.25 2>/dev/null ; read -t 0; } echo $? read -t 0 < $0 echo $? read -t 0 echo $? <-- returns 1, when 0 is expected. I can reproduce this on my workstation but only when using ptest-runner and initially logging into the console as root. That's a little odd and seems like I need to continue to improve ptest-runner. 2. run-trap: # cat tests/trap3.sub PS4='+[$LINENO] ' trap 'echo trap: $LINENO' ERR set -x echo 1 echo 2 echo 3 | cat | false <--- error echo 4 This is a scheduler behaviour difference between the common case on a workstation and the common case in qemu. The test case does warn about the completion order not being deterministic so I plan to ignore it. >From tests/run-trap: UNIX versions number signals and schedule processes differently. If output differing only in line numbers is produced, please do not consider this a test failure. Still, it's notable and slightly odd that the common case output is different. (From OE-Core rev: 81e3f01867cf114b728ab5a417c29426c9bf8122) Signed-off-by: Sakib Sajal Signed-off-by: Randy MacLeod Signed-off-by: Richard Purdie