summaryrefslogtreecommitdiffstats
path: root/meta
Commit message (Collapse)AuthorAgeFilesLines
* zlib: clean up base_libdir symlinkRoss Burton2015-06-281-6/+4
| | | | | | | | | | | | | libz.so symbolic link created in ${libdir} is ../../${base_libdir}/libz.so.1.2.8. This doesn't work if base_libdir or libdir is changed, so use oe.path.relative to construct the correct path at build time. (From OE-Core rev: ada8972ec40441b06e50d3e9ccbc07241a48e30a) (From OE-Core rev: 20a60f137a9a1ae2689286241cc3d68a0392803d) Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* icu-native: fix hard paths in native icuAndré Draszik2015-06-281-0/+1
| | | | | | | | | | | | | | | | | | | | The icu recipe installs icu-native twice, once in the usual location, and once for cross builds into the path given by --with-cross-build. This latter path is not included in the list of paths recognised by chrpath.bbclass, hence the binaries in there retain the rpath as used during compilation. This causes the package to not be relocateable from sstate [YOCTO #6851] We use the infrastructure that is in place already, and simply set PREPROCESS_RELOCATE_DIRS as necessary, and things start to work. (From OE-Core rev: e7fcaa534511e3f65b630b01cf0c824ee5a5fd4d) (From OE-Core rev: 922faf8ed42cd2d105e30a8c92836664d6b5bb18) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* pcmciautils: fix the parallel building issueRoy Li2015-06-283-42/+46
| | | | | | | | | | | | The building failure still display after upstream commit 055a5bbfc[ pcmciautils: fix for parallel build], so refix it. (From OE-Core rev: fb426a1f5a103a1dc096977533dfbec2aefe07ae) (From OE-Core rev: 14b5556ad3a4d7e817442e004b73601041f31b69) Signed-off-by: Roy Li <rongqing.li@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* glibc: CVE-2015-1781: resolv/nss_dns/dns-host.c buffer overflowHaris Okanovic2015-06-282-0/+47
| | | | | | | | | | | | | | | | | | | | | Backport Arjun Shankar's patch for CVE-2015-1781: A buffer overflow flaw was found in the way glibc's gethostbyname_r() and other related functions computed the size of a buffer when passed a misaligned buffer as input. An attacker able to make an application call any of these functions with a misaligned buffer could use this flaw to crash the application or, potentially, execute arbitrary code with the permissions of the user running the application. https://sourceware.org/bugzilla/show_bug.cgi?id=18287 (From OE-Core rev: c0f0b6e6ef1edc0a9f9e1ceffb1cdbbef2e409c6) (From OE-Core rev: 54f5e2001249c117cdfc1c26631ba50bc7a155dd) Signed-off-by: Haris Okanovic <haris.okanovic@ni.com> Reviewed-by: Ben Shelton <ben.shelton@ni.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* native.bbclass: avoid unintended substring replacement when setting PROVIDESMario Domenech Goulart2015-06-281-2/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The way native_virtclass_handler was implemented leaded to unintended substring replacements when setting PROVIDES for native providers, in case the original PROVIDES value contains providees with common substrings. Here's a practical case where the old behavior was problematic: the oracle-jse-jdk-x86-64 recipe provides both virtual/java and virtual/javac: Before: $ bitbake -e oracle-jse-jdk-x86-64-native | grep ^PROVIDES= PROVIDES="oracle-jse-jdk-x86-64-native virtual/java-native virtual/java-nativec" After: $ bitbake -e oracle-jse-jdk-x86-64-native | grep ^PROVIDES= PROVIDES="oracle-jse-jdk-x86-64-native virtual/java-native virtual/javac-native" Change-Id: I8186992dae58e37c2a2364586360ff9b7da9198f (From OE-Core rev: c28291f1fb07fbc80275d9bceefed642c963e204) (From OE-Core rev: e0814f2306e1404fffafc7695862c6ee542b08fa) Signed-off-by: Mario Domenech Goulart <mario@ossystems.com.br> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* gstreamer1.0-plugins-bad: Move EGL requirement for WaylandOtavio Salvador2015-06-281-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | The EGL is used by the Wayland backend. When building using Software Rendering and without Wayland support the EGL backend is not available so we should not require EGL for GLES2 support. This fixes following build error: ,---- | ... | checking for bcm_host_init in -lbcm_host... no | checking for WAYLAND_EGL... no | configure: error: Could not find the required EGL libraries | Configure failed. The contents of all config.log files follows to aid debugging | ERROR: oe_runconf failed `---- (From OE-Core rev: 9c3a94aea1de3ab98e5693640926bfc86acde2db) (From OE-Core rev: 2a0a2f276ef631bf7d60ec9821800d9b40a5832b) Signed-off-by: Otavio Salvador <otavio@ossystems.com.br> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* boost: properly fix do_boostconfig re-executionMartin Jansa2015-06-281-6/+4
| | | | | | | | | | | | | | | | | | | | * it was partially fixed in: commit 291e20a51544c640d07767d1dc32d762f4370f41 Author: Venkata ramana gollamudi <ramana.gollamudi@huawei.com> Date: Fri Apr 13 11:42:46 2012 +0000 Subject: boost: fix re-execution of task but with disadvantage that when CXX or *FLAGS variables were changed it was continuing to use old values * just remove the line before appending it with current values to fix that (From OE-Core rev: 8ce9584a78079b3db88eabfa902025a94443378d) (From OE-Core rev: f055d084ad74a01a431ea87ead6bfdcaca0d7bde) Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* systemd: removing workaround odering journal after remote-fs.targetBruno Bottazzini2015-06-281-3/+0
| | | | | | | | | | | | This workaround is not needed in version 219 since the fix is upstreamed with: 919699ec301ea507edce4a619141ed22e789ac0d (From OE-Core rev: e3330d0602fb3ad347f028063d25f634a36ea344) (From OE-Core rev: fdcbbb50a9946733bd204b8db45606c929e43822) Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ncurses: inherit pkgconfigChristophe Guillon2015-06-281-1/+1
| | | | | | | | | | | | | Without pkgconfig being present at build time it's possible for the .pc files to not be installed correctly. (From OE-Core rev: f049a53078b3876be9fefc1e5f64404a3f378724) (From OE-Core rev: c6e39f271a737aa867a15f70c2975987e9d7b209) Signed-off-by: Christophe Guillon <christophe.guillon@st.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* e2fsprogs: install populate-extfs.shMartin Jansa2015-06-281-0/+2
| | | | | | | | | | | | | | | | * install populate-extfs.sh from contrib, be aware that in order to use it you need to set DEBUGFS shell variable, otherwise it will try to use debugfs from relative path which is almost always incorrect: CONTRIB_DIR=$(dirname $(readlink -f $0)) DEBUGFS="$CONTRIB_DIR/../debugfs/debugfs" (From OE-Core rev: 525b7b587a00466e4322450c171d920b47201e56) (From OE-Core rev: 32e847f6988eb488dad23badf1cabae92ef803df) Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* mesa: fix do_install_appendRobert Yang2015-06-282-2/+2
| | | | | | | | | | | | | "ifdef MESA_EGL_NO_X11_HEADERS" -> "if defined(MESA_EGL_NO_X11_HEADERS)" (From OE-Core master rev: 3a464d67b60f70b865f7db768e7edc53e40ff450) (From OE-Core rev: 12e467f436fbc22f274558c753f0ac9756ce1071) Signed-off-by: Robert Yang <liezhi.yang@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Joshua Lock <joshua.lock@collabora.co.uk> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* glibc: Fix x32 make raceRichard Purdie2015-06-282-0/+52
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | On x32 builds, sysd-syscalls appears malformed since the make-target-directory appears on the wrong line. This causes races during the build process where you can see failures like: Assembler messages: Fatal error: can't create [...]glibc/2.21-r0/build-x86_64-poky-linux-gnux32/time/gettimeofday.os: No such file or directory Assembler messages: Fatal error: can't create [...]glibc/2.21-r0/build-x86_64-poky-linux-gnux32/time/time.os: No such file or directory The issue is that the carriage return is being escaped when it should not be. The change to sysd-syscalls with this change: before: """ $(foreach p,$(sysd-rules-targets),$(objpfx)$(patsubst %,$p,time).os): \ $(..)sysdeps/unix/make-syscalls.sh $(make-target-directory) (echo '#include <dl-vdso.h>'; """ after: """ $(foreach p,$(sysd-rules-targets),$(objpfx)$(patsubst %,$p,time).os): \ $(..)sysdeps/unix/make-syscalls.sh $(make-target-directory) (echo '#include <dl-vdso.h>'; """ which ensures the target directory is correctly created. Only x32 uses the vdso code which contains the bug which is why the error only really appears on x32. (From OE-Core rev: ae4729ed6c5e5443c42f8825dd85873f06a3570e) (From OE-Core rev: c945453a8453dd6dab5aa5a132bea20e73ae4d6d) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* base: Avoid find raceRichard Purdie2015-06-281-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | In a similar way to http://git.yoctoproject.org/cgit.cgi/poky/commit/?id=aa1438b56f30515f9c31b306decef7f562dda81f and http://git.yoctoproject.org/cgit.cgi/poky/commit/?id=527b28c10955daf0387597020d69593ce24bcaa4 there is a find race in base.bbclass. For recipes with PACKAGES_remove = "${PN}", the find which removes .la files can race against deletion of other directories in WORKDIR e.g.: find: '/home/autobuilder/yocto-autobuilder/yocto-worker/nightly-oe-selftest/build/build/tmp/work/qemux86_64-poky-linux/init-ifupdown/1.0-r7/sstate-build-populate_lic': No such file or directory | WARNING: /home/autobuilder/yocto-autobuilder/yocto-worker/nightly-oe-selftest/build/build/tmp/work/qemux86_64-poky-linux/init-ifupdown/1.0-r7/temp/run.do_configure.6558:1 exit 1 from | find /home/autobuilder/yocto-autobuilder/yocto-worker/nightly-oe-selftest/build/build/tmp/work/qemux86_64-poky-linux/init-ifupdown/1.0-r7 -name \*.la -delete Fix the race in the same way. [YOCTO #7522] (From OE-Core rev: 90861b8908d254154f4d1d613471070df8013da8) (From OE-Core rev: 220141c63161f7c4f4112ac8b95bf44775843a9f) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* alsa-tools: set CLEANBROKENRobert Yang2015-06-281-0/+2
| | | | | | | | | | | | | | | | | Fixed: make[1]: Entering directory `alsa-tools-1.0.28/envy24control' make[1]: *** No rule to make target `clean'. Stop. There is no "make clean" in envy24control when DISTRO_FEATURES is changed from no-x11 to x11. (From OE-Core rev: 8ccc47c37765487b535c4d6a8b43c2b6365ff000) (From OE-Core rev: 4ff4bca025277fd19f11a6ba86102fca8563a1ff) Signed-off-by: Robert Yang <liezhi.yang@windriver.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* unzip: Security Advisory -CVE-2014-9636 and CVE-2015-1315Roy Li2015-06-283-1/+451
| | | | | | | | | | | | | | | | | | | | | | | | http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-9636 unzip 6.0 allows remote attackers to cause a denial of service (out-of-bounds read or write and crash) via an extra field with an uncompressed size smaller than the compressed field size in a zip archive that advertises STORED method compression. http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-1315 Buffer overflow in the charset_to_intern function in unix/unix.c in Info-Zip UnZip 6.10b allows remote attackers to execute arbitrary code via a crafted string, as demonstrated by converting a string from CP866 to UTF-8. (From OE-Core rev: f86a178fd7036541a45bf31a46bddf634c133802) (From OE-Core rev: d868f9e8a6a5d4dc9c38e2881a329f7e3210eab8) Signed-off-by: Roy Li <rongqing.li@windriver.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* kernel-yocto: propagate in tree defconfigs to WORKDIRBruce Ashfield2015-06-281-5/+6
| | | | | | | | | | | | | | | | | | | As reported by Steffen Pankratz <Steffen.Pankratz@elektrobit.com>, the previous logic of KBUILD_DEFCONFIG processing would not propagate an in tree defcofig to WORKDIR if one was not already present. We fix the propagation by copying the in tee config if a defconfig is not already in WORKDIR. Additionally we only warn (versus copying) if an in tree configuration is specified, is different than the WORKDIR version and isn't copied. (From OE-Core rev: 58cc903a5156063b24e48011438a709cb6e09f54) (From OE-Core rev: 0b12cc3a326740bd95bb199d4f1b38bf5beadfa9) Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* linux-yocto: fix race between checkout and meta data generationBruce Ashfield2015-06-281-1/+1
| | | | | | | | | | | | | | | | | | | | | | | There are two tasks that must run before a linux-yocto kernel is built. - Kernel checkout and relocation to work-shared (kernel_checkout) - Meta data gathering and configuration prep (kernel_metadata) The current task definitions for both are simply "before do_patch", which is correct, but kernel_checkout must run before and not race with kernel_metadata. So we set the definition of kernel_checkout to be more specific and enforce the proper ordering. [YOCTO: #7731] (From OE-Core rev: 9d806f3d05de918952f839f5e595cb71cd1261db) (From OE-Core rev: 561b7776d93d40cac009360ec95b8de78888f1ca) Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* e2fsprogs: fix the CVE-2015-1572Roy Li2015-06-282-0/+59
| | | | | | | | | | | | Backport a patch to fix CVE-2015-1572 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-1572 (From OE-Core rev: 203e1024cc7517cad28423cc04f641376cc8f2f5) (From OE-Core rev: 7cfbeeec098e19bd27e342cd09a3fa22de6e7e93) Signed-off-by: Roy Li <rongqing.li@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* kernel.bbclass: Fix race conditionEd Bartosh2015-06-281-1/+1
| | | | | | | | | | | | | | | | | | | Race condition between do_compile_kernelmodules and do_shared_workdir tasks occurs when do_compile_kernelmodules changes files in include/generated/* while do_shared_workdir tries to copy them to shared working directory. Fixed race by moving do_shared_workdir after do_compile but before do_compile_kernelmodules. [YOCTO #7321] (From OE-Core rev: b4ec689f71fe9504559c1921c893f5e096d6b744) (From OE-Core rev: a224584b6b0b7f12e0d1962d889587ce50957c60) Signed-off-by: Ed Bartosh <ed.bartosh@linux.intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* directfb: Correct bashismRichard Purdie2015-06-282-1/+20
| | | | | | | | | | Fix builds of directfb on systems with dash as /bin/sh (From OE-Core rev: 8848517fb4c81b9e9cfc985dd20b9baf374764c0) (From OE-Core rev: 493ecc520202851bba664eaf4f1150ce624bf2b1) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* bind: remove 5 backport patchesRobert Yang2015-06-285-482/+0
| | | | | | | | | | | | They are backport patches, and verified that the patches are in the source. (From OE-Core rev: 6e4a10ab030c192e2437592538e4713b1ee2032b) (From OE-Core rev: fd5115556a12c8c2d95c02f077dc38ea4c9253f5) Signed-off-by: Robert Yang <liezhi.yang@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libcap: Avoid passing "-e" to makeMike Crowe2015-06-281-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | oe-core 51540b64f62234c145fc32cfa3fbbaaebbeece08 altered libcap.inc (at the time) to append to EXTRA_OEMAKE rather than assign to it. The default value for EXTRA_OEMAKE contains "-e". This means that the change caused "-e" to be passed to make for the first time. Unfortunately passing "-e" subtly changes the behaviour of libcap's Make.Rules under recursive make when prefix="" (which it is for us since we're using meta-micro.) Without "-e" the prefix comes from the command line in both the parent and submakes. This takes precedence over any attempt to reassign it with a simple "=" operation so the headers are correctly installed in (empty string)/include. With "-e" the prefix still comes from the command line in the parent make but from the environment in the submake. The attempt to assign it fails in the parent make as before, but not in the submake so the headers are installed incorrectly in /usr/include. In all four cases the "ifdef prefix" else clause is executed. So, let's assign EXTRA_OEMAKE in order to avoid using "-e" at all. (From OE-Core rev: a8d35fa4fd76ea4a70063492cd5eab0858f2edb6) (From OE-Core rev: 24a98efa442b323667e1471886ad874e607ff320) Signed-off-by: Mike Crowe <mac@mcrowe.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* elfutils: Security Advisory - CVE-2015-0255Roy Li2015-06-282-0/+60
| | | | | | | | | | | | | | | | Directory traversal vulnerability in the read_long_names function in libelf/elf_begin.c in elfutils 0.152 and 0.161 allows remote attackers to write to arbitrary files to the root directory via a / (slash) in a crafted archive, as demonstrated using the ar program. https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-9447 (From OE-Core rev: 4a65944b89a76f18c8ff6e148f17508882d387cf) (From OE-Core rev: 5eda84a62201461b9c69498ec35585d2c8142dec) Signed-off-by: Roy Li <rongqing.li@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* pcmciautils: fix for parallel buildRobert Yang2015-06-281-6/+6
| | | | | | | | | | | | | | | | Fixed: Compiling lex_config.c. src/lex_config.l:34:25: fatal error: yacc_config.h: No such file or directory There was a patch for fixing the paralle issue before, so modify the patch again. (From OE-Core rev: 055a5bbfc7686c8eec3aad2bcbcf90c40031cc34) (From OE-Core rev: 45e105e08c56eef5ef8282f2f84778f4c291798a) Signed-off-by: Robert Yang <liezhi.yang@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* curl: Fix wrong assumption about sizeof off_t on largefile systemsKhem Raj2015-06-281-0/+3
| | | | | | | | | | | | | This issue was reported on poky ml as well see https://lists.yoctoproject.org/pipermail/poky/2013-December/009435.html Change-Id: Iedf22467889893111fde0433e411fd0546a38546 (From OE-Core rev: 3c58712465494e441c4036a7cf21d2e6d343efab) (From OE-Core rev: 49c848018484827c433e1bcf9c63416640456f3e) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* elfutils: enable fix-build-gcc-4.8.patchRobert Yang2015-06-281-0/+1
| | | | | | | | | | | The patch fixes a warning seen with gcc 4.8 (especially on ubuntu 13.10) (From OE-Core rev: c577a52b252ccbad9a8dde79c6a4a4f23376d9d8) (From OE-Core rev: 1878cadb02aa01a58f6985d2b7a9268df4f381a6) Signed-off-by: Robert Yang <liezhi.yang@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* texinfo: remove enumerate_greater_than_ten.patchRobert Yang2015-06-281-51/+0
| | | | | | | | | | | It is a backport patch, and verified that the patch is in the source. (From OE-Core rev: a46976b9de5a2270f041a73661a6ed635bf4eb43) (From OE-Core rev: 94116f5be3b3581b364e18c6a008e088f3b1dae9) Signed-off-by: Robert Yang <liezhi.yang@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libaio: remove libaio-generic.patchRobert Yang2015-06-281-65/+0
| | | | | | | | | | | It is already in the source. (From OE-Core rev: e6b2def565c1201c3b0a0d2a8c296b65e6cafb02) (From OE-Core rev: 6c931a231dbb90e16fd092187d6fea42dd7f5908) Signed-off-by: Robert Yang <liezhi.yang@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* lttng-modules: remove bio-bvec-iter.patchRobert Yang2015-06-281-156/+0
| | | | | | | | | | | It is aready in the source. (From OE-Core rev: 4ac3e70f8f39dc6b585e0acb3679d4137f60b296) (From OE-Core rev: 78e377d37a0ef36d595dcdc00c9c51674d828f02) Signed-off-by: Robert Yang <liezhi.yang@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* openssl: remove 3 patchesRobert Yang2015-06-283-107/+0
| | | | | | | | | | | | | | | | | Removed: - openssl-avoid-NULL-pointer-dereference-in-dh_pub_encode.patch - upgate-vegsion-script-for-1.0.2.patch Since they are already in the source. - make-targets.patch It removed test dir from DIRS, which is not needed any more since we need build it. (From OE-Core rev: 5fa533c69f92f2dd46c795509b0830b36413b814) (From OE-Core rev: 2635d1dbe0ef0b43c7505d9c43494eac0f2e6760) Signed-off-by: Robert Yang <liezhi.yang@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* logrotate: remove logrotate-CVE-2011-1548.patchRobert Yang2015-06-281-43/+0
| | | | | | | | | | | It is a backport patch, and verified that the patch is in the source. (From OE-Core rev: 370dc496c2d6f8fa97a18af49747d15a41fc7bcf) (From OE-Core rev: 3cf413bd3f7b022488473aaee15e28cf343c6b12) Signed-off-by: Robert Yang <liezhi.yang@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libxml2: remove libxml2-CVE-2014-3660.patchRobert Yang2015-06-281-147/+0
| | | | | | | | | | | It is a backport patch, and verified that the patch is in the source. (From OE-Core rev: 9a3178b4d3c454e76a0af59afc7b326589c4c666) (From OE-Core rev: 9834785d0b4ee1759d6a469c585a566652cbc38a) Signed-off-by: Robert Yang <liezhi.yang@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* nspr: remove nspr-CVE-2014-1545.patchRobert Yang2015-06-281-67/+0
| | | | | | | | | | | It is a backport patch, and verified that the patch is in the source. (From OE-Core rev: a7e723bd78e280ae48e6de725b2881b35ae21f5c) (From OE-Core rev: f5ef99247b84ac1a39b92daf02a4249d39aacbf1) Signed-off-by: Robert Yang <liezhi.yang@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* python3: remove sys_platform_is_now_always_linux2.patchRobert Yang2015-06-281-29/+0
| | | | | | | | | | | It is aready in the source. (From OE-Core rev: 99f9df3add049ec18dbcd604646a67dc59b3db16) (From OE-Core rev: 6c1b44872d9cd09ad46fd9d2cc3555f9cd3a55e6) Signed-off-by: Robert Yang <liezhi.yang@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* python-numpy: remove 2 dangling patchesRobert Yang2015-06-282-55/+0
| | | | | | | | | | | | | | | | | | Removed: - unbreak-assumptions.diff This patch changs the dir to /non-existant-dir, the source code has changed the dir to /deadir, so it is not needed any more. - trycompile.diff There is no try_compile or try_run in numpy/core/setup.py any more, so assumed that it is not needed. (From OE-Core rev: 56aac948ca9686d79a2c56f4f034f8de445ff37b) (From OE-Core rev: 7f0d86dd43a10a981aa2ad8acde66fe345fe4096) Signed-off-by: Robert Yang <liezhi.yang@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* sstate: Use SSTATE_DIR for FILESPATHRichard Purdie2015-06-281-1/+3
| | | | | | | | | | | | | | | | | FILESPATH was only being overridden in one fetch location, it should be equally handled in both. Also use SSTATE_DIR as FILESPATH so that mirror urls which do remapping can search the local SSTATE_DIR for other paths. Also ensure that MIRRORS is removed in both locations, previously it was only unset in one but both codepaths should be consistent. (From OE-Core rev: ab6bebddbdefec323e284b6438d9c57b3d8a2cc3) (From OE-Core rev: ac255ca3eacece98f60a1a5d8cfc468f73aa67c7) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* split_and_strip_files: regroup hardlinks to make build deterministicEd Bartosh2015-05-152-24/+27
| | | | | | | | | | | | | | | | | | | | | | | Reverted 7c0fd561bad0250a00cef63e3d787573112a59cf Created separate group of hardlinks for the files inside the same package. This should prevent stripped files to be populated outside of package directories. This turns out not to be straightforward and has overlap with the other hardlink handling code in this area. The code is condensed into a more concise and documented form. [Original patch from Ed with tweaks from RP] [YOCTO #7586] (From OE-Core master rev: 82d00f7254b7d3bb6a167d675d798134884d1b19) (From OE-Core rev: 2abacf00ee3f60735bf7c0dc7130c72267822b30) Signed-off-by: Ed Bartosh <ed.bartosh@linux.intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* systemd: bring back the patch to customise root's $HOMERoss Burton2015-05-152-1/+3
| | | | | | | | | | | | This patch appears to have been accidently dropped in the move to 219-stable, probably because it didn't apply. Update the patch and re-add it. (From OE-Core master rev: 51aaa647b203d0f7ddd2f53f7191c4d2918b09b8) (From OE-Core rev: 16684ce4072e8cffd321d25303de91fd0e32529c) Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* systemd: remove unused patchesJoshua Lock2015-05-153-257/+0
| | | | | | | | | | | These patches are no longer required since 7bfc9891ff498bdde31aadd2449d3b4692dbc510 (From OE-Core master rev: e45b8bf579f2050ebdb1aa1a4c2f9c3b530c9ad6) (From OE-Core rev: d8b4b70df507f2ef82378a7bfa501fe81ad2a21a) Signed-off-by: Joshua Lock <joshua.lock@collabora.co.uk> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* bitbake.conf: add sed-native to ASSUME_PROVIDEDDmitry Eremin-Solenikov2015-05-151-0/+1
| | | | | | | | | | There is no reason to build sed for the host, however now: ERROR: Nothing RPROVIDES 'sed-native' (but virtual:native:/OE/sources/openembedded-core/meta/recipes-extended/groff/groff_1.22.2.bb RDEPENDS on or otherwise requires it) (From OE-Core rev: f09dcaab4afb6aad5a707418741e97625473b890) Signed-off-by: Dmitry Eremin-Solenikov <dmitry_eremin@mentor.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* util-linux: Add lastb to alternativesBryan Evenson2015-05-151-1/+1
| | | | | | | | | | | | | | | | util-linux creates lastb as a symlink to last during the build. Just as other applications may provide last, other applications may provide lastb. Add alternatives designations for lastb to avoid installation conflicts with other applications. (From OE-Core rev: cde6a85fd327407320adaad21203079a8dacbf23) (From OE-Core rev: 2665431f75ebc9eb1f47dee7d3ef362dcf5917a9) Signed-off-by: Bryan Evenson <bevenson@melinkcorp.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* shadow: add 'util-linux-sulogin' to RDEPENDSChen Qi2015-05-151-1/+2
| | | | | | | | | | | | | | | | | | | | | | | If shadow is installed, sulogin from busybox cannot work correctly because it still assumes that /etc/shadow is not there. This leads to the problem when booting into rescue mode in an image with shadow installed but not sulogin from util-linux. To fix this problem, we add 'util-linux-sulogin' to RDEPENDS of shadow. This runtime dependency is specific to OE, because we have to ensure that sulogin can work correctly and sulogin from busybox cannot because FEATURE_SHADOWPASSWORDS is not enabled by default. And we cannot enable it by default for busybox, because that would lead to utilities in busybox to assume the existence of /etc/shadow which is not always true in OE. [YOCTO #6698] (From OE-Core rev: 9b45b990d2fc870df556f05908dcb48b9ebcfc02) (From OE-Core rev: d2e348537786966fd29187ff7fb9ae42614695af) Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* util-linux: split out util-linux-suloginChen Qi2015-05-151-4/+8
| | | | | | | | | | | [YOCTO #6698] (From OE-Core rev: 4bde182ed236243547929dd98763f1c09eddd097) (From OE-Core rev: eeaf4ca1e5fea56fe7472076bc0372f597876fdc) Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* groff: add runtime dependency on sedChunrong Guo2015-05-151-0/+1
| | | | | | | | | | This is to suppress the following QA warning: groff-1.22.2: groff requires /bin/sed, but no providers in its RDEPENDS [file-rdeps] (From OE-Core rev: f1e5913bee28f59efb252045a0113cae701d848d) Signed-off-by: Chunrong Guo <B40290@freescale.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* autotools: Fix find races on source directoryRichard Purdie2015-05-151-4/+4
| | | | | | | | | | | | | | | | | | | | | | In a similar way to http://git.yoctoproject.org/cgit.cgi/poky/commit/?id=aa1438b56f30515f9c31b306decef7f562dda81f there are more find races in the autotools class. For recipes with PACKAGES_remove = "${PN}", the find which removes .la files can race against deletion of other directories in WORKDIR e.g.: find: '/home/autobuilder/yocto-autobuilder/yocto-worker/nightly-oe-selftest/build/build/tmp/work/qemux86_64-poky-linux/init-ifupdown/1.0-r7/sstate-build-populate_lic': No such file or directory | WARNING: /home/autobuilder/yocto-autobuilder/yocto-worker/nightly-oe-selftest/build/build/tmp/work/qemux86_64-poky-linux/init-ifupdown/1.0-r7/temp/run.do_configure.6558:1 exit 1 from | find /home/autobuilder/yocto-autobuilder/yocto-worker/nightly-oe-selftest/build/build/tmp/work/qemux86_64-poky-linux/init-ifupdown/1.0-r7 -name \*.la -delete Fix the remaining races in the same way. [YOCTO #7522] (From OE-Core rev: 79770ca14a0cc2f4112fb4d8dc2d8832701b6d5d) (From OE-Core rev: 699e1570e66cb28e4bfd0eb15d41f3af2bed5b62) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libxfont: Security Advisory - libxfont - CVE-2015-1804Li Zhou2015-05-152-0/+81
| | | | | | | | | | | | | | | bdfReadCharacters: ensure metrics fit into xCharInfo struct We use 32-bit ints to read from the bdf file, but then try to stick into a 16-bit int in the xCharInfo struct, so make sure they won't overflow that range. (From OE-Core rev: 4dd4b96b6d60246338bb30ede9f3ab1b2e757be9) (From OE-Core rev: 1e2a947e65f5fb6e01459c9ddd6515a7131d92c7) Signed-off-by: Li Zhou <li.zhou@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libxfont: Security Advisory - libxfont - CVE-2015-1803Li Zhou2015-05-152-0/+41
| | | | | | | | | | | | | | bdfReadCharacters: bailout if a char's bitmap cannot be read Previously would charge on ahead with a NULL pointer in ci->bits, and then crash later in FontCharInkMetrics() trying to access the bits. (From OE-Core rev: 2c7a15a074501beb6b8a4c7bdf30604b1a432a6b) (From OE-Core rev: 7827e9756e82c31707ce87d27c7d0b0392fc0812) Signed-off-by: Li Zhou <li.zhou@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libxfont: Security Advisory - libxfont - CVE-2015-1802Li Zhou2015-05-152-0/+41
| | | | | | | | | | | | | | bdfReadProperties: property count needs range check Avoid integer overflow or underflow when allocating memory arrays by multiplying the number of properties reported for a BDF font. (From OE-Core rev: 0ff9f2bf0e44a7b47a98234a12714c780825e286) (From OE-Core rev: ddc4889d7028d0388b1521d49ab1d3b8decba524) Signed-off-by: Li Zhou <li.zhou@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libarchive: Security Advisory - libarchive - CVE-2015-2304Li Zhou2015-05-152-0/+152
| | | | | | | | | | | | | | | libarchive: Updated libarchive packages fix security vulnerability Alexander Cherepanov discovered that bsdcpio, an implementation of the "cpio" program part of the libarchive project, is susceptible to a directory traversal vulnerability via absolute paths. (From OE-Core master rev: e64a961e9c5e94e643896e4b68b85bd5b4c27470) (From OE-Core rev: c944c1ee3f039979d93022bbbd76f61f57b1577f) Signed-off-by: Li Zhou <li.zhou@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* less: fix CVE-2014-9488Junling Zheng2015-05-152-1/+52
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | An out of bounds read access in the UTF-8 decoding can be triggered with a malformed file in the tool less. The access happens in the function is_utf8_well_formed due to a truncated multibyte character in the sample file. The bug does not crash less, it can only be made visible by running less with valgrind or compiling it with Address Sanitizer. Version 475 of less contains a fix for this issue. The file version.c contains some entry mentioning this issue (without any credit): - v475 3/2/15 Fix possible buffer overrun with invalid UTF-8 The fix is in the file line.c. We derive this patch from: https://blog.fuzzing-project.org/3-less-out-of-bounds-read-access-TFPA-0022014.html Thank Claire Robinson for validating it on Mageia 4 i586. Refer to: https://bugs.mageia.org/show_bug.cgi?id=15567 (From OE-Core master rev: 68994284f3c059b737bfc5afc2600ebd09bdf47f) (From OE-Core rev: 7195d219f7af2b94dffb87a94077ec98dacdcdb0) Signed-off-by: Junling Zheng <zhengjunling@huawei.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
OpenPOWER on IntegriCloud