linux/poky.git/meta/recipes-extended/bash, branch master-test

bash: Add makefile race workaround

2021-01-20T22:46:17+00:00

There is a race between two make invocations in 5.1. It has been reported upstream, in the meantime add a work around patch (which upstream may yet even apply). The autobuilder found two instances of this race in a single build. (From OE-Core rev: 62b8580cea567f2d9b7a900fc4302d6bc5a785b2) Signed-off-by: Richard Purdie

bash: Set HEREDOC_PIPESIZE deterministically

2021-01-20T22:46:17+00:00

We had reproducibility issues where the pipe size appears to vary on some build hosts between 65535 and 4096. It should be the former on Linux in general so standarise on that. Easiest way is to pass in CFLAGS. (From OE-Core rev: 6de2152693c31ee1181e9eacc32b90dd63d4e0a9) Signed-off-by: Richard Purdie

bash: update 5.0 -> 5.1

2021-01-20T22:46:17+00:00

[RP: Add aclocal support and patch m4 handling to adapt to OE] (From OE-Core rev: ab4406dfdbd5e21f6fff0865228ebf5da1274505) Signed-off-by: Alexander Kanavin Signed-off-by: Richard Purdie

bash: Rename patch name

2020-12-18T22:52:24+00:00

Because the name of CVE patch is wrong, cve-check-tool cannot get the correct CVE result. Rename the patch name. (From OE-Core rev: 422f9af7d0f7de7a2e933154853e7a281f98ab93) Signed-off-by: Zang Ruochen Signed-off-by: Richard Purdie

bash: fix CVE-2019-18276

2020-09-24T21:32:49+00:00

An issue was discovered in disable_priv_mode in shell.c in GNU Bash through 5.0 patch 11. By default, if Bash is run with its effective UID not equal to its real UID, it will drop privileges by setting its effective UID to its real UID. However, it does so incorrectly. On Linux and other systems that support "saved UID" functionality, the saved UID is not dropped. An attacker with command execution in the shell can use "enable -f" for runtime loading of a new builtin, which can be a shared object that calls setuid() and therefore regains privileges. However, binaries running with an effective UID of 0 are unaffected. Get the patch from [1] to fix the issue. [1] https://git.savannah.gnu.org/cgit/bash.git/commit/?h=devel&id=951bdaa (From OE-Core rev: 6f01acae9c279e0a580f46d1ba4c015caa3f8c2c) Signed-off-by: De Huo Signed-off-by: Kai Kang Signed-off-by: Mingli Yu Signed-off-by: Richard Purdie

bash : include patch 17 & 18

2020-09-21T22:54:39+00:00

patch 17 :- https://ftp.gnu.org/gnu/bash/bash-5.0-patches/bash50-017 There were cases where patch 16 reaped process substitution file descriptors (or FIFOs) and processes to early. This is a better fix for the problem that bash50-016 attempted to solve. path 18 :- https://ftp.gnu.org/gnu/bash/bash-5.0-patches/bash50-018 In certain cases, bash does not perform quoted null removal on patterns that are used as part of word expansions such as ${parameter##pattern}, so empty patterns are treated as non-empty. (From OE-Core rev: 08f8580b1ad2a478538f6974e79cb79e726b6efa) Signed-off-by: Chee Yang Lee Signed-off-by: Richard Purdie

bash: include patch 12-16

2020-02-15T10:26:42+00:00

(From OE-Core rev: 10907c6ea3665e0cacb05e7120c8726ed5790a3c) Signed-off-by: Lee Chee Yang Signed-off-by: Richard Purdie

bash: include patch 8-11

2020-02-04T15:56:29+00:00

(From OE-Core rev: 61c3449b87e5d627134a580bb5298338f389beb1) Signed-off-by: Lee Chee Yang Signed-off-by: Richard Purdie

bash: Don't DEPEND on virtual/libc-locale

2019-12-09T12:00:43+00:00

For ptest only RDEPENDS is needed, and packaging glibc-locale slowed down builds with ptest disabled. (From OE-Core rev: 53f61ca73e69508bff6ea75da666d6873b5384f5) Signed-off-by: Adrian Bunk Signed-off-by: Richard Purdie

bash: Remove .build files for reproducible builds

2019-06-24T09:36:28+00:00

Bash has an internal "build number" that it tracks and automatically increments ever time a given builds is made from the same sandbox. However, this can make builds non-reproducible in the event that a build directory is reused multiple times. Remove the .build files after every build if reproducible builds have been requested which will reset the build build number for the next build. (From OE-Core rev: 9754be5c22de877bd53226908d03d2eef5751808) Signed-off-by: Joshua Watt Signed-off-by: Richard Purdie