summaryrefslogtreecommitdiffstats
path: root/meta/recipes-devtools
Commit message (Collapse)AuthorAgeFilesLines
* meta: Add explict branch to git SRC_URIsRichard Purdie2021-11-1518-18/+18
| | | | | | | | | | | | | | | | There is uncertainty about the default branch name in git going forward. To try and cover the different possible outcomes, add branch names to all git:// and gitsm:// SRC_URI entries. This update was made with the script added to contrib in this patch which aims to help others convert other layers. (From OE-Core rev: 37b4f66fa23979cbfe82679a74ce21b11fc61557) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit b51c405faf6f8c0365f7533bfaf470d79152a463) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* pseudo: Add fcntl64 wrapperRichard Purdie2021-11-151-1/+1
| | | | | | | | | | | | Add fcntl64 wrapper which hopefully fixes issues seen in findutils and the find command in the libtool removal code when built with LFS compile flags on Gentoo. (From OE-Core rev: f90e4b84d75d8dc4d5905784abe3298488127ff3) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit f26867fe4daec7299f59a82ae4a0d70cceb3e082) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* strace: fix build against 5.15 kernel/kernel-headersBruce Ashfield2021-11-152-0/+152
| | | | | | | | | | | | | | | | | | | | | kernel 5.15 removed ipx.h from the uapi, but strace hasn't adjusted its tests to the removal. There is a WIP patch on the esyr/5.15 branch that solves the problem, so we grab it here, adjust for context and fix our build problem. When strace updates to 5.15, and we can bump our version and drop this patch. Upstream-Status: Backport [commit cca828197c0e16c2599129114] (From OE-Core rev: 1b47465688474cdba603578c1cbb768cfe699579) Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit a8c4ba727251e53494a4aec483fcc51982e6fb75) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* opkg: Fix poor operator combination choiceRichard Purdie2021-11-151-1/+1
| | | | | | | | | | | | Combining :append with += rarely makes sense. Improve it to use the standard format (and tweak the implied spacing). (From OE-Core rev: 0ed0fd99153dd8a4560b6fbbbaa0decc60f79c5a) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 768766dc007ebe9b4bc38d425584be03fbdb98c1) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* dpkg: Install dkpg-perl scripts to versioned perl directoryManuel Leonhardt2021-11-151-2/+2
| | | | | | | | | | | | | | | | | | | | | | | Install dpkg-perl scripts to versioned perl directory, otherwise the following traceback happens when running, e.g. dpkg-architecture on the target: Can't locate Dpkg.pm in @INC (you may need to install the Dpkg module) (@INC contains: /usr/lib/perl5/site_perl/5.30.1/aarch64-linux /usr/lib/perl5/site_perl/5.30.1 /usr/lib/perl5/vendor_perl/5.30.1/aarch64-linux /usr/lib/perl5/vendor_perl/5.30.1 /usr/lib/perl5/5.30.1/aarch64-linux /usr/lib/perl5/5.30.1 .) at /usr/bin/dpkg-architecture line 25. Cc: Richard Purdie <richard.purdie@linuxfoundation.org> (From OE-Core rev: 37030893cdabdce935defc6f468309d8cd275e53) Signed-off-by: Manuel Leonhardt <mleonhardt@arri.de> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit bdd4757ae057c7b3bfe27353fa25c4d7807a86ce) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* squashfs-tools: fix CVE-2021-41072Kai Kang2021-11-155-0/+898
| | | | | | | | | | | | | | | | Backport patch to fix CVE-2021-41072. And 3 more ancestor commits are backported too, otherwise it fails to compile. CVE: CVE-2021-41072 Ref: * https://nvd.nist.gov/vuln/detail/CVE-2021-41072 (From OE-Core rev: 329e893a36cf651bfd73abe8e50f173382e3b015) Signed-off-by: Kai Kang <kai.kang@windriver.com> Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* qemu.inc: Remove empty egg-info directories before running mesonPeter Kjellerstedt2021-11-081-2/+6
| | | | | | | | | | | | | | | | This is the same solution that has been applied to meson.bbclass to allow building with meson after it has been updated to a new version. It needs to be applied here as well since qemu uses meson without inheriting meson.bbclass. (From OE-Core rev: 3cbe3e6f932151800793854ad5d3569dc6f36ab1) Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 9d05227e910d3f374ba7a9763ff2584b9e40db61) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* meson: install native file in sdkHsia-Jun(Randy) Li2021-11-083-0/+55
| | | | | | | | | | | | | | | | Without a native environment file, find_program() can't locate the native program inside SDK. That stops wayland compositor using wayland scanner. (From OE-Core rev: 2ea62c23bf9d37e46d3cd9aa7527c535994d4b77) Signed-off-by: Hsia-Jun(Randy) Li <randy.li@synaptics.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit c6aed1084006727e3baf70ab9d1f70d9d2d6c01f) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* meson: move lang args to the right sectionRandy Li2021-11-081-2/+4
| | | | | | | | | | | | | | After meson 0.56.0, <lang>_args and <lang>_link_args would be regarded as meson built-in options. (From OE-Core rev: 07e2ace3e9208b1a0806cd0ab768059671974a1c) Signed-off-by: Hsia-Jun(Randy) Li <randy.li@synaptics.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 50c8f654e9006a7c902dd76f75082d4f8d668d0c) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* strace: show test suite log on failureRoss Burton2021-11-081-0/+9
| | | | | | | | | | | | | If the tests fail, dump the log so we can see the failures. (From OE-Core rev: b5e799b94d918ad908eab5a0daf6a0ee460d7581) Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 3154a65039831b1e041217707fdd6ca042f588fb) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* python3-setuptools: _distutils/sysconfig fixTim Orling2021-11-082-1/+38
| | | | | | | | | | | | | | | | | | | | | Add patch to append STAGING_LIBDIR python-sysconfigdata to sys.path so that packages which set SETUPTOOLS_USE_DISUTILS='local' cross-compile properly with python3-setuptools-native. Fixes: ModuleNotFoundError: No module named '_sysconfigdata' References: https://setuptools.pypa.io/en/latest/deprecated/distutils-legacy.html#porting-from-distutils (From OE-Core rev: 2f9a362bfebc83ea6459b5294a6fab3c77ea6cb2) Signed-off-by: Tim Orling <timothy.t.orling@intel.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit f6fb99c53f779966fc902a629d0a8bbd9f84c6be) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* bootchart2: Don't compile python modulesRichard Purdie2021-10-291-1/+5
| | | | | | | | | | | | | "make install" may attempt to compile the python modules but it uses the host python and host paths which means the binaries are not reproducbile. Make things consistent. If anyone needs compiling, it will beed to be fixed to be cross compile compatible. (From OE-Core rev: 6ca6c9c12c93c6df7b18f49ebdbfb69433ff5158) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 1189f95e05c80286e009e1ab46a603ee5b7ca239) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* python3: update to 3.9.7Oleksandr Kravchuk2021-10-291-1/+1
| | | | | | | | | | (From OE-Core rev: 5895b6a51b73735f081267ed6e6e2455c1d717ed) Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> (cherry picked from commit 9612bb0639c13571e661f208aa7b28789953d9ec) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* go: upgrade 1.16.7 -> 1.16.8Sakib Sajal2021-10-298-4/+4
| | | | | | | | | | (From OE-Core rev: 18559ba281a2ea4f8334fcdd4fca427af802ea81) Signed-off-by: Sakib Sajal <sakib.sajal@windriver.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> (cherry picked from commit 97a2f406635f51bad1ab070f018a6466209f257b) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* rpm: Deterministically set vendor macro entryRichard Purdie2021-10-081-1/+2
| | | | | | | | | | | | | On an aarch64 build host, vendor is found to be "unknown", on x86 systems it is "pc". This filters through to the PLATFORM tag in target rpms. We saw reproducibility test failures where the PLATFORM tags in noarch rpms were changing depending upon which host built them. Forcing the vendor value to a consistent one makes things deterministic. (From OE-Core rev: f6434075b2bdfc23c683d22281b674b1e6abde77) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* qemu: Define libnfs PACKAGECONFIGAndrei Gherzan2021-10-071-0/+2
| | | | | | | | | | | | | | | | | The upstream qemu recipe uses host's pkg-config files as a solution to detecting host's SDL. This has a side effect of using other host libraries that are later queried by the configure script. This can get into a situation when the host provides libnfs (for example) and because later this dependency is not in place anymore, qemu will fail at runtime. This change adds a PACKAGECONFIG definition for libnfs that is disabled by default, in turn disabling the pkgconfig autodetection in configure. (From OE-Core rev: 42b364a25fdbc987c85dd46b8427045033924d99) Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* abi_version/sstate: Bump HASH_VERSION and SSTATE_VERSIONRichard Purdie2021-10-042-2/+0
| | | | | | | | | | | | | | | At this point the hash equivalence and sstate is 'junk' on the autobuilder unforuntately due to the volume of fixes and also the volume of slighly not quite right patches tested during the development of the fixes. In order to try and help any remaining sanity I might have, bump the version numbers to start with a clean slate so we're working from a known good baseline rather than risk chasing phantom issues. For those upgrading, there wouldn't be much reuse anyway after the changes. (From OE-Core rev: be32692c627a14509de5eb3834e7321c3c5faf25) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* python3: Drop broken pyc filesRichard Purdie2021-10-041-0/+1
| | | | | | | | The underlying py files are editted so delete the now incorrect pyc files. (From OE-Core rev: c4a6d4bfb34a2dd9c50859d5b8bd9c6fe227ca81) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* sstatesig: Add processing for full build paths in sysroot filesRichard Purdie2021-10-044-0/+21
| | | | | | | | | | | | | | | | | | | | | Some files in the populate_sysroot tasks have hardcoded paths in them, particularly if they are postinst-useradd- files or crossscripts. Add some filtering logic to remove these paths. This means that the hashequiv "outhash" matches correcting in more cases allowing for better build artefact reuse. To make this work a new variable is added SSTATE_HASHEQUIV_FILEMAP which maps file globbing to replacement patterns (paths or regex) on a per sstate task basis. It is hoped this shouldn't be needed in many cases. We are in the process to developing QA tests which will better detect issues in this area to allow optimal sstate reuse. (From OE-Core rev: d9852ffbbe728dac33dc081538a08af98f52fd4a) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libtool: Allow libtool-cross to reproduceRichard Purdie2021-10-022-1/+2
| | | | | | | | | The hostname removal from the script is useful to make libtool-cross reproduce. Apply the patch everywhere as it doesn't cause any issues. (From OE-Core rev: 3c61c6f20187154d677085fc9ccdcd762d4cdf3a) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* rpm: Ensure compression parallelism isn't coded into rpmsRichard Purdie2021-10-022-0/+29
| | | | | | | | | | | We don't want the compression thread numbers to be encoded into the rpm since this results in the rpm not being deterministic. Add a patch from Alex Kanavin which addresses this issue (was queued for rpm 4.17 but we need to fix this with 4.16 too). (From OE-Core rev: 1ba0bf50c72f2506dfa507559c49a70e16cd5124) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ruby: fix the reproducibility issueThomas Perrot2021-10-015-0/+162
| | | | | | | | | | | | | | | Apply some changes on the Ruby makefiles in order to fix the reproducibility: - use a fixed timestamp, - sort linked objects, - doesn't use the current date, - and use UTC date. [YOCTO #14268] (From OE-Core rev: 59b07ab51ff932a4632a31675445ba4192bae36b) Signed-off-by: Thomas Perrot <thomas.perrot@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* python3: Fix sysroot reproducibilityJoshua Watt2021-10-012-1/+5
| | | | | | | | | | | | | | | Fixes the reformatting of the sysconfigdata to be reproducible in the sysroot as well as in the package. During this a bug was uncovered in the way that the data was reformatted where it appears that python cannot parse a single line of code over 40000 characters. To work around this, pass a maximum with of "1" to pprint instead of sys.maxsize which will cause it to wrap as often as possible and should keep it reproducible. (From OE-Core rev: 2def2c145c303f27d93ba73876d4c6b214f18166) Signed-off-by: Joshua Watt <JPEWhacker@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* strace: upgrade 5.13 -> 5.14wangmy2021-10-011-1/+1
| | | | | | | | | | | | | | | | | | | | Improvements Implemented decoding of memfd_secret and quotactl_fd syscalls, introduced in Linux 5.14. Enhanced prctl syscall decoding. Enhanced decoding of IFLA_* netlink attributes. Enhanced decoding of MDBA_ROUTER_PATTR_* mdb router port netlink attributes. Updated lists of BPF_*, IORING_*, MADV_*, MOUNT_ATTR_*, SCTP_*, and UFFD_* constants. Updated lists of ioctl commands from Linux 5.14. Bug fixes Fixed build using bionic libc. (From OE-Core rev: bca3d163d9ed804b4c734ac8fe4fa96e1d05906d) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* pseudo: Add in ability to flush database with shutdown requestRichard Purdie2021-09-261-1/+1
| | | | | | | | | | Pulls in: pseudo_db: Flush DB if there is a shutdown request fcntl: Add support for fcntl F_GETPIPE_SZ and F_SETPIPE_SZ (test fix) (From OE-Core rev: 0882095d608ce3abbcc9814517434c21ea549063) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* qemu-native: add direct dependency on ninja-native and meson-nativeMartin Jansa2021-09-212-2/+2
| | | | | | | | | | | | | | | * with many native dependencies excluded in: layer.conf: Extend recipes not to install without explict dependencies this was now failing with: ERROR: Cannot find Ninja and after adding ninja-native to DEPENDS it was failing due to missing meson as well: /OE/build/oe-core/tmp-glibc/work/x86_64-linux/qemu-native/6.0.0-r0/qemu-6.0.0/configure: 6415: --version: not found /OE/build/oe-core/tmp-glibc/work/x86_64-linux/qemu-native/6.0.0-r0/qemu-6.0.0/configure: 6418: setup: not found (From OE-Core rev: 7b2dfb49105e6465c5436869863e6a9720c60bbd) Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* recipes: Add missing pkgconfig inheritRichard Purdie2021-09-215-4/+5
| | | | | | | | | | | | Various recipes were missing a pkgconfig inherit or pkgconfig-native dependency despite using pkgconfig. Add the inherit to igt-gpu-tools/gdb/libmodulemd/libwpe/xwayland/waffle shaderc/iputils/wpebackend-fdo/lttng-ust/cargo. (From OE-Core rev: 777d9744570c2dc119dc5d04985896bbb1da5885) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* tcf-agent: Move to the latest master versionMark Hatle2021-09-172-58/+1
| | | | | | | | | | | | | There has not been a release since 2018, the 1.7.0 release. A number of recent improvements around thumb and clang debugging prompted this move to a newer version. The patch is no longer necessary as it was a backport patch. (From OE-Core rev: b98c739aa1204ecd842278a6e36a56243bfbc2a5) Signed-off-by: Mark Hatle <mark.hatle@kernel.crashing.org> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* python3: fix multilib qa issueMingli Yu2021-09-161-2/+2
| | | | | | | | | | | | | | | Enable tk in PACKAGECONFIG as below in conf/local.conf. PACKAGECONFIG_append_pn-python3 = " tk" $ bitbake lib32-python3 ERROR: lib32-python3-3.9.6-r0 do_package_qa: QA Issue: /usr/lib/python3.9/lib-dynload/_tkinter.cpython-39-i386-linux-gnu.so contained in package lib32-python3-tkinter requires libtk8.6.so, but no providers found in RDEPENDS_lib32-python3-tkinter? [file-rdeps] ERROR: lib32-python3-3.9.6-r0 do_package_qa: QA run found fatal errors. Please consider fixing them. So add MLPREFIX prefix to fix the above issue. (From OE-Core rev: 4a839d7c66e4589050ce3f145a8c7cf820e6b35d) Signed-off-by: Mingli Yu <mingli.yu@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* binutils: inherit pkgconfig to address libdebuginfod depdencyChanho Park2021-09-111-1/+1
| | | | | | | | | | | | | | | | | | | Since libdebuginfo was default distro feature[1], cross build of binutils has been broken due to absence of pkg-config. To find the dependency properly, we should inherit pkgconfig bbclass. checking for aarch64-poky-linux-pkg-config... no checking for pkg-config... no checking whether to use debuginfod... yes checking for libdebuginfod >= 0.179... no configure: error: "--with-debuginfod was given, but libdebuginfod is missing or unusable." [1]: https://lists.openembedded.org/g/openembedded-core/message/150666 (From OE-Core rev: 50154869b496cf63a4fae2c8278350fcf9a2591d) Signed-off-by: Chanho Park <chanho61.park@samsung.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* rpm: Handle proper return value to avoid major issuesRanjitsinh Rathod2021-09-111-11/+14
| | | | | | | | | | | | | | 0001-rpm-rpmio.c-restrict-virtual-memory-usage-if-limit-s.patch changed to avoid critical issues Handled return values of getrlimit() and lzma_cputhreads() functions to avoid unexpected behaviours like devide by zero and potential read of uninitialized variable 'virtual_memory' Upstream-Status: Pending [merge of multithreading patches to upstream] (From OE-Core rev: 5aae9c2cb464350bc443a0f60fd6602942e61f46) Signed-off-by: Ranjitsinh Rathod <ranjitsinh.rathod@kpit.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* perl: fix CVE-2021-36770Kai Kang2021-09-112-0/+41
| | | | | | | | | | | | Backport patch to fix CVE-2021-36770. And drop the section of code which updates version. CVE: CVE-2021-36770 (From OE-Core rev: 9a5e0f3ece45529358b6b712e3450a8594f531c6) Signed-off-by: Kai Kang <kai.kang@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* pseudo: Update with fcntl and glibc 2.34 fixesRichard Purdie2021-09-101-1/+1
| | | | | | | | | | | | | | | | Pull in the following changes: * ports/linux/guts: Add closefrom support for glibc 2.34 * pseudo_client: Make msg static in pseudo_op_client * ports/linux/guts: Add close_range wrapper for glibc 2.34 * pseudo_client: Do not pass null argument to pseudo_diag() * test-openat: Consider device as well as inode number * test: Add missing test-statx test case * fcntl: Add support for fcntl F_GETPIPE_SZ and F_SETPIPE_SZ (From OE-Core rev: 71b549924a7fa7973a8e03e11f3db45fdc29889d) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* systemd: '${systemd_unitdir}/system' => '${systemd_system_unitdir}'Robert P. J. Day2021-09-075-11/+11
| | | | | | | | | | | Repo-wide replacement to use newer variable to represent systemd system unitdir directory. (From OE-Core rev: 5ace3ada5c54500c71becc8e0c6eddeb8bc053e3) Signed-off-by: Robert P. J. Day <rpjday@crashcourse.ca> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* go: Exclude CVE-2021-29923 from report listRichard Purdie2021-09-071-0/+5
| | | | | | | | | | | Upstream don't believe it is a signifiant real world issue and will only fix in 1.17 onwards. Therefore exclude it from our reports. https://github.com/golang/go/issues/30999#issuecomment-910470358 (From OE-Core rev: 5bd5faf0c34b47b2443975d66b71482d2380a01a) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* flex: Add CVE-2019-6293 to exclusions for checksRichard Purdie2021-09-071-0/+5
| | | | | | | | | | | | CVE is effectively disputed - yes there is stack exhaustion but no bug and it is building the parser, not running it, effectively similar to a compiler ICE. Upstream no plans to address and there is no security issue. https://github.com/westes/flex/issues/414 (From OE-Core rev: 0cae5d7a24bedf6784781b62cbb3795a44bab4d1) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* go: upgrade 1.16.5 -> 1.16.7Sakib Sajal2021-09-048-4/+4
| | | | | | | | (From OE-Core rev: dd26135ba4e23ead3a9998087cb60d9e93399e48) Signed-off-by: Sakib Sajal <sakib.sajal@windriver.com> Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* valgrind: set precise BSD licenseRoss Burton2021-09-041-1/+1
| | | | | | | | | "BSD" is ambiguous, use the precise license BSD-3-Clause. (From OE-Core rev: b12cbda349658ddef8cb72d5738c094c2b009e7e) Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* tcl: Exclude CVE-2021-35331 from checksRichard Purdie2021-09-041-0/+4
| | | | | | | | Upstream don't believe this is an issue. (From OE-Core rev: adf7bafee3f8884e525b5639ba092a1cd8e3beb9) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* python3-packaging: fix license statementRoss Burton2021-09-031-1/+1
| | | | | | | | | | | This is licensed as Apache OR BSD, not AND. Also use the precise license BSD-2-Clause. (From OE-Core rev: b7b406287dc05ae7228ef66dbada71c439bce4fb) Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* python3-numpy: remove redundant BSD licenseRoss Burton2021-09-031-1/+1
| | | | | | | | | | The license list already includes BSD-2-Clause and BSD-3-Clause, so remove the redundant and ambiguous BSD license. (From OE-Core rev: 7026bfa36aa07aa95e0e4ecf1787c09001a752bf) Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* rust: remove unused patchesMartin Jansa2021-09-022-101/+0
| | | | | | | | | | * 0001-nfc-Fix-missing-include.patch was only used in 1.51.0 version recently removed * 0001-rustc_target-Fix-dash-vs-underscore-mismatches-in-op.patch was only used in 1.49.0 version in meta-rust (From OE-Core rev: 52b12dac55a3747d8d6f2e799c669ef2bcda57ae) Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* cargo: Apply uninative fix to snapshot as with rustRichard Purdie2021-09-021-0/+5
| | | | | | | | | | Also add the interpreter relocation trick from uninative to the prebuilt cargo binary to match rust-native, just in case that causes other problems later too. (From OE-Core rev: e3cb3958cc14672feef5d4d8953131f55db68573) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* swig: Use specific BSD license variantJoshua Watt2021-09-021-1/+1
| | | | | | | | | | | Make the license more accurate by specifying the specific variant of BSD license instead of the generic one. This helps with SPDX license attribution as "BSD" is not a valid SPDX license. (From OE-Core rev: 01354672728aff07ae146b19e1a4a98977aac52b) Signed-off-by: Joshua Watt <JPEWhacker@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* e2fsprogs: Use specific BSD license variantJoshua Watt2021-09-021-1/+1
| | | | | | | | | | | Make the license more accurate by specifying the specific variant of BSD license instead of the generic one. This helps with SPDX license attribution as "BSD" is not a valid SPDX license. (From OE-Core rev: 966fb77981e4fed0ab7998439940b1e05dd0ee43) Signed-off-by: Joshua Watt <JPEWhacker@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* rust: fix upstream version checksAlexander Kanavin2021-09-011-0/+3
| | | | | | | (From OE-Core rev: e2e87d82ad1ec071077f29613e2e568196912daa) Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* base/kernel: Support zstd-compressed squashfs and cpio initramfsZoltán Böszörményi2021-09-011-1/+1
| | | | | | | | | | Enable zstd PACKAGECONFIG knob for squashfs-tools and add support for zstd compressed initramfs and squashfs. (From OE-Core rev: fa146049eec5f9730781830270cc9dc55a2146f7) Signed-off-by: Zoltán Böszörményi <zboszor@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* nativesdk-pseudo: Fix to work with glibc 2.34 systemsHongxu Jia2021-08-272-15/+26
| | | | | | | | | | | | | | | | | | | | Since commit [df313aa810 pseudo: Fix to work with glibc 2.34 systems] applied, it fixed native only. And nativesdk has the similar issue Tweak library search order, make prebuilt lib ahead of recipe lib, after apply the fix: ... $ readelf -a lib/pseudo/lib64/libpseudo.so | grep 'Shared library' 0x0000000000000001 (NEEDED) Shared library: [libdl.so.2] 0x0000000000000001 (NEEDED) Shared library:[libpthread.so.0] 0x0000000000000001 (NEEDED) Shared library: [libc.so.6] ... (From OE-Core rev: d6d116b5db78645958ea30be3d0572e0f6d7bd92) Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* python3-pytest: allow python3-pluggy >=1.0.0Tim Orling2021-08-272-0/+66
| | | | | | | | | | | | | | | | | | Fixes ptest failures in python3-jinja2. Backport patch from upstream, for now. Modify upstream patch to use toml and not tomli. We will add the new recipe for python3-tomli when we have an upgrade to python3-pytest. Remove this when we upgrade pytest to a version containing the commit: fbba504cd5e1a74d528a41a11a7b82297cd7da74 (From OE-Core rev: b4cfb0b0dab6bc7f43bab04cdf4f16c145be0223) Signed-off-by: Tim Orling <timothy.t.orling@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* python3-pluggy: upgrade 0.13.1 -> 1.0.0Tim Orling2021-08-271-2/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * All ptests pass on qemux86-64 pluggy 1.0.0 (2021-08-25) Deprecations and Removals #116: Remove deprecated implprefix support. Decorate hook implementations using an instance of HookimplMarker instead. The deprecation was announced in release 0.7.0. #120: Remove the deprecated proc argument to call_historic. Use result_callback instead, which has the same behavior. The deprecation was announced in release 0.7.0. #265: Remove the _Result.result property. Use _Result.get_result() instead. Note that unlike result, get_result() raises the exception if the hook raised. The deprecation was announced in release 0.6.0. #267: Remove official support for Python 3.4. #272: Dropped support for Python 2. Continue to use pluggy 0.13.x for Python 2 support. #308: Remove official support for Python 3.5. #313: The internal pluggy.callers, pluggy.manager and pluggy.hooks are now explicitly marked private by a _ prefix (e.g. pluggy._callers). Only API exported by the top-level pluggy module is considered public. #59: Remove legacy __multicall__ recursive hook calling system. The deprecation was announced in release 0.5.0. Features #282: When registering a hookimpl which is declared as hookwrapper=True but whose function is not a generator function, a PluggyValidationError exception is now raised. Previously this problem would cause an error only later, when calling the hook. In the unlikely case that you have a hookwrapper that returns a generator instead of yielding directly, for example: def my_hook_real_implementation(arg): print("before") yield print("after") @hookimpl(hookwrapper=True) def my_hook(arg): return my_hook_implementation(arg) change it to use yield from instead: @hookimpl(hookwrapper=True) def my_hook(arg): yield from my_hook_implementation(arg) #309: Add official support for Python 3.9. (From OE-Core rev: 4cb9623933e3daeb754c06263167be61100f6c0a) Signed-off-by: Tim Orling <timothy.t.orling@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
generated by cgit v1.2.3-54-g00ecf (git 2.39.0) at 2026-08-17 14:44:17 +0000