linux/poky.git/meta/recipes-extended/cpio, branch master-test

cpio: add nativesdk support

2020-07-03T10:38:24+00:00

Since commit [24b80d211f nativesdk.bbclass: set sbindir to bindir] applied, sbindir = bindir in nativesdk, then routine `rmt' is installed to bindir which break `rmdir ${D}${bindir}/' failed with `Directory not empty' Don't rmdir if sbindir != bindir (From OE-Core rev: 6cf92e4d80e6dc85853392865a2ba6eca8bbfdb0) Signed-off-by: Hongxu Jia Signed-off-by: Richard Purdie

recipes: Fix Upstream-Status Accepted -> Backport

2020-06-24T17:06:43+00:00

It helps our stats tracking to use Backport consitently, it mreans the same thing as Accepted in pretty much all cases. (From OE-Core rev: 3e923d86012c981cb332083b87353fdbc0a2b83a) Signed-off-by: Richard Purdie

cpio: add patch to fix issues with gcc 10

2020-05-12T14:20:42+00:00

gcc 10 introduced "-fno-common" as default. Therefore backport the according cpio patch to fix this issue. (From OE-Core rev: ca6e5511b59b585de793ff6424c7c6ccfcd8e61e) Signed-off-by: Richard Leitner Signed-off-by: Richard Purdie

cpio: remove unused CVE patch

2019-12-30T08:47:12+00:00

According to the home page, https://www.gnu.org/software/cpio/, CVE-2015-1197 have been fix in version 2.13, so removed this patch get from SUSE (From OE-Core rev: 6e37b0cba0d59e020ed031659aa050ce4e7c4ccd) Signed-off-by: Changqing Li Signed-off-by: Richard Purdie

cpio: update to 2.13

2019-12-16T23:25:49+00:00

Drop a couple of backports. (From OE-Core rev: 66f3b09364c499d9b0610f7c01763ae5dc1521cf) Signed-off-by: Alexander Kanavin Signed-off-by: Richard Purdie

cpio/tar/native.bbclass: move rmt to sbindir and add a prefix to avoid native clashing

2019-05-08T11:15:17+00:00

The rmt in cpio-native and tar-native is clashing, since tar-native has set var-NATIVE_PACKAGE_PATH_SUFFIX, we move rmt to sbindir, and add suffix NATIVE_PACKAGE_PATH_SUFFIX to sbindir could avoid the clashing. And in Ubuntu, rmt is in sbindir $ which rmt /usr/sbin/rmt (From OE-Core rev: e9ac5ac2f4d135734f549d17cce3ebc52132b7d0) Signed-off-by: Hongxu Jia Signed-off-by: Richard Purdie

cpio: avoid conflict with tar-doc and rmt.8

2019-02-27T18:04:14+00:00

This fixes: Error: Transaction check error: file /usr/share/man/man8/rmt.8 conflicts between attempted installs of cpio-doc-2.12-r0.core2_64 and tar-doc-1.31-r0.core2_64 Prior to commit 348a96a5b401 [tar: upgrade to 1.31] the copies of rmt.8 found in the tar(-doc) and cpio(-doc) packages were the same and thus no conflict was seen. After the upgrade there were small changes in the manpage header which results in the conflict quoted above. The applications themselves make use of the 'update-alternatives' mechanism to allow a user to select which version of 'rmt' to use but since the man pages are essentially the same we disambiguate the source of the man pages and make them both available should both cpio-doc and tar-doc are both installed. And as such we avoid the conflict. (From OE-Core rev: 692d5b1025450bf1c33fb6aa041603f082e2ba4d) Signed-off-by: Mark Asselstine Signed-off-by: Richard Purdie

cpio: update patch to merged version

2018-12-05T12:37:02+00:00

The segfault on append was fixed upstream with a different patch, so apply that instead. (From OE-Core rev: 24000d1fdba2684202e15371f80bb385722c9d91) Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

cpio: fix crash when appending to archives

2018-12-01T11:38:36+00:00

The upstream fix for CVE-2016-2037 introduced a read from uninitialized memory bug when appending to an existing archive, which is an operation we perform when building an image. (From OE-Core rev: 046e3e1fca925febf47b3fdd5d4e9ee2e1fad868) Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

cpio: fix CVE-2016-2037

2018-06-15T16:56:24+00:00

"The cpio_safer_name_suffix function in util.c in cpio 2.11 allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted cpio file." https://nvd.nist.gov/vuln/detail/CVE-2016-2037 Note that there appear to be two versions of this fix. The original patch posted to the bug-cpio mailing list [1] is used by Debian [2], but apparently causes regression [3]. The patch accepted to the upstream git repo [4] seems to be the most complete fix. [1] https://lists.gnu.org/archive/html/bug-cpio/2016-01/msg00005.html [2] https://security-tracker.debian.org/tracker/CVE-2016-2037 [3] https://www.mail-archive.com/bug-cpio@gnu.org/msg00584.html [4] http://git.savannah.gnu.org/cgit/cpio.git/commit/?id=d36ec5f4e93130efb24fb9678aafd88e8070095b (From OE-Core rev: f170288ac706126e69a504a14d564b2e5c3513e4) Signed-off-by: Andre McCurdy Signed-off-by: Ross Burton Signed-off-by: Richard Purdie