summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* build-appliance-image: Update to dunfell head revisionyocto-3.1.27dunfell-23.0.27Steve Sakoman2023-08-041-1/+1
| | | | | | (From OE-Core rev: 6dd64ca2d726d0b222a7608c65eb0a20454c3f99) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* gcc: fix runpath errors in cc1 binarySteve Sakoman2023-08-041-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | The runpath in the cc1 binary is: Library runpath: [$ORIGIN/../../../recipe-sysroot-native/usr/lib:$ORIGIN/../../../recipe-sysroot-native/lib] This does not match the actual location of the libraries, which would require: Library runpath: [$ORIGIN/../../recipe-sysroot-native/usr/lib:$ORIGIN/../../recipe-sysroot-native/lib] Prior to gcc 9.1 the recipe set B explicity with: B = "${WORKDIR}/gcc-${PV}/build.${HOST_SYS}.${TARGET_SYS}" and this build directory structure matches the runpath in cc1, so there is no issue. This line was commented out in versions 9.1 through 11.3. The upgrade to 12.1 once again uncommented this line. As a result the runpath is incorrect in version 9.1 through 11.3 and cc1 defaults to using host libraries. This patch restores setting B as done in master and versions prior to 9.1 (From OE-Core rev: 43d5ebde6d609898064ea70c89a7eba002e5fd74) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* ref-manual: document image-specific variant of INCOMPATIBLE_LICENSEMichael Opdenacker2023-08-022-9/+19
| | | | | | | | | | | This has been around without being properly documented since 2019 (!!!), and is nowadays the preferred method for enforcing license restrictions. (From yocto-docs rev: 7a67426330decf108b8f152c3cb6cd6d167c98e4) Signed-off-by: Alexander Kanavin <alex@linutronix.de Signed-off-by: Michael Opdenacker <michael.opdenacker@bootlin.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* build-appliance-image: Update to dunfell head revisionSteve Sakoman2023-07-221-1/+1
| | | | | | (From OE-Core rev: ab6a0d053d910c3d50fcb06e9c2ca98430b673a4) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* poky.conf: bump version for 3.1.27Steve Sakoman2023-07-221-1/+1
| | | | | | (From meta-yocto rev: e7886680c9436f78ba74f7882eb26999590229f4) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* documentation: update for 3.1.27Steve Sakoman2023-07-221-5/+5
| | | | | | | | (From yocto-docs rev: 957952fb61427d8549e3bc902b38b4a5acd2c618) Signed-off-by: Steve Sakoman <steve@sakoman.com> Reviewed-by: Michael Opdenacker <michael.opdenacker@bootlin.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* openssl: fix intermittent openssl-ptest reproducibility issueSteve Sakoman2023-07-222-0/+39
| | | | | | | | | | | | Adds two missing key sorts in generation of unified_info Backported from a similar (but more invasive) patch in the 3.x source code: https://github.com/openssl/openssl/commit/764cf5b26306a8712e8b3d41599c44dc5ed07a25] (From OE-Core rev: 6c505ef6c9950eb6d09bcec683fefe6edc7b2e6b) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* cmake: Fix CMAKE_SYSTEM_PROCESSOR setting for SDKTom Hochstein2023-07-221-4/+1
| | | | | | | | | | | | | | | | When building using an SDK, cmake complains that the target architecture 'cortexa53-crypto' is unknown. The same build in bitbake uses the target architecture 'aarch64'. Set CMAKE_SYSTEM_PROCESSOR the same as for bitbake. (From OE-Core rev: 7a7ef9d73affc23fa14712d56f1a40d0c46569cb) Signed-off-by: Tom Hochstein <tom.hochstein@nxp.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit d32a6225eefce2073a1cd401034b5b4c68351bfe) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* libpng: Add ptest for libpngNikhil R2023-07-223-2/+43
| | | | | | | | | | | | | | | | | | | | | | | libpng is a platform-independent library which supports all PNG features. This ptest executes the below binaries, parses the png image and prints the image features. 1. pngfix - provides information about PNG image copyrights details. 2. pngtest - tests, optimizes and optionally fixes the zlib header in PNG files. 3. pngstest - verifies the integrity of PNG image by dumping chunk level information. 4. timepng - provides details about PNG image chunks. (From OE-Core rev: 843803bcc248b18cdefb29d610a1371e32e815ce) Signed-off-by: Nikhil R <nikhil.r@kpit.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* kernel-fitimage: fix dtbo support for fit imagesAnthony Bagwell2023-07-221-1/+1
| | | | | | | | | | | 8a2f4e143 added support for u-boot boot script but missed adding the extra parameter to fitimage_emit_section_config on the dtbo branch (From OE-Core rev: d1b6c34d33704f05374154e4ea7d8acdea7b8018) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 22bac8aea0d5d28cc5a3bf20edf638225cce2f88) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* vim: upgrade 9.0.1527 -> 9.0.1592Trevor Gamblin2023-07-221-2/+2
| | | | | | | | | | | | | | | | | Fixes: https://nvd.nist.gov/vuln/detail/CVE-2023-2609 d1ae836 patch 9.0.1531: crash when register contents ends up being invalid https://nvd.nist.gov/vuln/detail/CVE-2023-2610 ab9a2d8 patch 9.0.1532: crash when expanding "~" in substitute causes very long text (From OE-Core rev: 8a481b1dfeeee8d8d3430f527da1f3f5b7d96999) Signed-off-by: Trevor Gamblin <tgamblin@baylibre.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 1e4b4dfb4145bc00eb6937b5f54a41170e9a5b4c) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* wireless-regdb: upgrade 2023.02.13 -> 2023.05.03Alexander Kanavin2023-07-221-1/+1
| | | | | | | | | (From OE-Core rev: 67adfd6cbcdbb765460e6f97d8957c872d8f5c81) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 47438402fa430499864a4b1f1a13eaac66aa21c0) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* linux-firmware: upgrade 20230404 -> 20230515Alexander Kanavin2023-07-221-2/+2
| | | | | | | | | | | License-Update: additional firmwares (From OE-Core rev: 17988a2cebcccb7ddacb3d085deeab0f0b8f646a) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 64603f602d00999220fe5bafeed996ddcb56d36b) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* glibc: stable 2.31 branch updates.Deepthi Hemraj2023-07-221-1/+1
| | | | | | | | | | Below commits on glibc-2.31 stable branch are updated. 2d4f26e5cf x86: Fix wcsnlen-avx2 page cross length comparison (From OE-Core rev: d89f5692514c68050349f37315e1dea14cbcfa24) Signed-off-by: Deepthi Hemraj <Deepthi.Hemraj@windriver.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* tzdata: upgrade to 2023cPriyal Doshi2023-07-221-3/+3
| | | | | | | (From OE-Core rev: 62c42d4a1029de4fe9b19631cbd34722f6535edf) Signed-off-by: Priyal Doshi <pdoshi@mvista.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* qemu: backport Debian patch to fix CVE-2023-0330Vijay Anusuri2023-07-222-0/+78
| | | | | | | | | | | | | | import patch from ubuntu to fix CVE-2023-0330 Upstream-Status: Backport [import from ubuntu https://git.launchpad.net/ubuntu/+source/qemu/tree/debian/patches?h=ubuntu/focal-security Upstream commit https://gitlab.com/qemu-project/qemu/-/commit/b987718bbb1d0eabf95499b976212dd5f0120d75] (From OE-Core rev: 559327579bcee685c6dc22b7ad5595960aa896c0) Signed-off-by: Vijay Anusuri <vanusuri@mvista.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* python3: fix CVE-2023-24329 urllib.parse url blocklisting bypassVivek Kumbhar2023-07-222-0/+81
| | | | | | | (From OE-Core rev: 307f23e066e06793ec60f0cddf8ff1c64c02d834) Signed-off-by: Vivek Kumbhar <vkumbhar@mvista.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* curl: fix CVE-2023-28320 siglongjmp race condition may lead to crashVivek Kumbhar2023-07-223-0/+285
| | | | | | | | | | | | Introduced by: https://github.com/curl/curl/commit/3c49b405de4fbf1fd7127f91908261268640e54f (curl-7_9_8) Fixed by: https://github.com/curl/curl/commit/13718030ad4b3209a7583b4f27f683cd3a6fa5f2 (curl-8_1_0) Follow-up: https://github.com/curl/curl/commit/f446258f0269a62289cca0210157cb8558d0edc3 (curl-8_1_0) https://curl.se/docs/CVE-2023-28320.html (From OE-Core rev: a6b2b550690c2ffdce1aef9da1595a42d1bc6348) Signed-off-by: Vivek Kumbhar <vkumbhar@mvista.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* go: Fix CVE-2023-29400Ashish Sharma2023-07-222-0/+95
| | | | | | | | | | emit filterFailsafe for empty unquoted attr value (From OE-Core rev: 02a0e76e04ddbbbb381202d61cbb084333336f38) Signed-off-by: Ashish Sharma <asharma@mvista.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* libx11: Fix CVE-2023-3138 for dunfell branchPoonam Jadhav2023-07-222-0/+112
| | | | | | | | | | | Add patch to fix CVE-2023-3138 for dunfell branch Link: https://gitlab.freedesktop.org/xorg/lib/libx11/-/commit/304a654a0d57bf0f00d8998185f0360332cfa36c.patch (From OE-Core rev: aed61452f5c9fc377ce3336b765eb1cb195482a8) Signed-off-by: Poonam Jadhav <poonam.jadhav@kpit.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* cve-update-nvd2-native: actually use API keysRoss Burton2023-07-131-11/+12
| | | | | | | | | | | | | | | There were vestigal remains of API key support which could be removed, but as using an API key - in theory - gives the user larger rate limits it's probably wise to expose it. If the user has an API key, then set NVDCVE_API_KEY. (From OE-Core rev: b3fc8ef9aba822b3d485242c8ebd0e0bff0ebfc8) Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit a542de684282bfec79f24ae2f1a2027ffde319d8) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* cve-update-nvd2-native: log a little moreRoss Burton2023-07-131-5/+7
| | | | | | | | | | | | | Add a note of what range we're fetching, and use bb.note() instead of debug() as messages about retrying shouldn't really be considered debug logging. (From OE-Core rev: f6c3ee35ae9950aec4b3dc15062b1c1fb5610011) Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit b64a869b9c5e1d504f1011da16b5c5ff721afbf0) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* cve-update-nvd2-native: increase retry countPeter Marko2023-07-131-1/+1
| | | | | | | | | | | | | | | | | Current 503 errors seem to last several seconds. In most cases there are two errors and third request succeeds. However sometimes the outage takes more than time needed for two retries and third one also fails. Extend retry count from 3 to 5 to improve the probablity that the fetcher succeeds. (From OE-Core rev: 46286a641f1113e22d39a427a5dc0a11321d434e) Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit f4d118af2360cff7f234102fd5e4b65a6f4146a6) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* cve-update-nvd2-native: retry all errors and sleep between retriesPeter Marko2023-07-131-7/+4
| | | | | | | | | | | | | | | | | | | | Last couple days it is not possible to update NVD DB as servers are returning lot of errors. Mostly "HTTP Error 503: Service Unavailable" is observed but sporadially also some others. Retrying helps in most cases, so extend retries to all errors. Additionally add sleep which is recommended by NVD between requests. These retries are already implemented between successful requests, but giving servers time between failed ones is important, too. (From OE-Core rev: 8bba9342f641e9aa51ccaebc02bc5d51354e1c72) Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 88dad8f198baa80af5ab576498f4df6ed639d551) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* cve-update-nvd2-native: fix cvssV3 metricsPeter Marko2023-07-131-4/+11
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | After upgrade to soon-to-be-released kirkstone 4.0.11 CVE annotations got broken. Anything which has only cvssV3 does not resolve properly. Fix the API fields used to extract it. i0.0 score is now at level of NVD DB 1.1. All CVEs with UNKNOWN vector are not present in NVD DB 1.1. NVD API 1.1: sqlite> select vector, count(vector) from nvd group by vector; ADJACENT_NETWORK|4776 LOCAL|32146 NETWORK|167746 PHYSICAL|185 sqlite> select scorev3, count(scorev3) from nvd group by scorev3; 0.0|73331 1.8|7 1.9|3 ... NVD API 2.0 (broken): sqlite> select vector, count(vector) from nvd group by vector; ADJACENT_NETWORK|4587 LOCAL|26273 NETWORK|150421 UNKNOWN|24644 sqlite> select scorev3, count(scorev3) from nvd group by scorev3; 0.0|205925 NVD API 2.0 (fixed): sqlite> select vector, count(vector) from nvd group by vector; ADJACENT_NETWORK|5090 LOCAL|32322 NETWORK|168004 PHYSICAL|213 UNKNOWN|511 sqlite> select scorev3, count(scorev3) from nvd group by scorev3; 0.0|73841 1.8|7 1.9|3 ... (From OE-Core rev: 2233a187dc0da833401297667c1e2ed6bf5627fd) Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 61a5857efdcc0f49c69c0deb24fce99007aeef19) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* cve-update-nvd2-native: use exact times, don't truncateRoss Burton2023-07-131-2/+2
| | | | | | | | | | | | | | | When requesting updates in a specific range, use the actual current time and database mtime instead of truncating to midnight, and explicitly set the timezone to UTC so that NIST don't treat the timestamps as _their_ local time when they're _our_ local time. (From OE-Core rev: e12b81ede54c92e372f0d80373bb91254d0a889f) Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 9aa0ec37f5f74252588d2494a71c71a7d8e68df9) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* cve-update-nvd2-native: handle all configuration nodes, not just firstRoss Burton2023-07-131-4/+5
| | | | | | | | | | | | | | | | | Some CVEs, such as CVE-2013-6629, list multiple configurations which are vulnerable. The current JSON parser only considers the first configuration. Instead, consider every configuration. We don't yet handle the AND/OR logical operators, but this is a step in the right direction. (From OE-Core rev: e521d6ce48d3b04eb2d53c710bba18593a908fe3) Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit e1bf4f6dd686055fe9a8bdcc3f739eac2807bae0) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* grub: submit determinism.patch upstreamAlexander Kanavin2023-07-121-1/+1
| | | | | | | | | (From OE-Core rev: 1fe434d42a3365f232b07864638128b7ac70f627) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 61947762e410c685f667e0af6440fb8a33cd6777) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* useradd-staticids.bbclass: improve error messageMikko Rapeli2023-07-121-1/+1
| | | | | | | | | | | | | | | | | | | | | Current error message is difficult to read: ERROR: Nothing PROVIDES 'image' trs-image was skipped: image - image: normal username test does not have a static ID defined. Add test to one of these files It's not clear that first "image" is recipe name, second "image" is binary package name and that "test" is the user account which does not have a static ID defined. Improve the error message so that these are more explicit. Now the error message looks like: image was skipped: Recipe image, package image: normal username "test" does not have a static ID defined. (From OE-Core rev: ea997ec788a5397598e24301e40d1c30ffa68c04) Signed-off-by: Mikko Rapeli <mikko.rapeli@linaro.org> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> (cherry picked from commit 07898218f3908a83e07178b6530dfa48d55d4ec2) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* oeqa/selftest/bbtests: add non-existent prefile/postfile testsFabien Mahot2023-07-121-0/+8
| | | | | | | | | | | | Fixes [YOCTO #10725] (From OE-Core rev: 74fed908b807056cbb10c20d62d494f3089f52ee) Signed-off-by: Fabien Mahot <fabien.mahot@smile.fr> Reviewed-by: Yoann Congal <yoann.congal@smile.fr> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit b0c33655fad5b2e7d96a45b6210527dfb766797b) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* scripts/runqemu: allocate unfsd ports in a way that doesn't race or clash ↵Alexander Kanavin2023-07-121-11/+8
| | | | | | | | | | | | | | | | | | | | with unrelated processes There is already a neat check_free_port() function for finding an available port atomically, so use that and make two additional tweaks: - no need to allocate two separate ports; per unfsd documentation they can be the same - move lockfile release until after unfsd has been shut down and the port(s) used has been freed [YOCTO #15077] (From OE-Core rev: 816d12f125974fc064d17c735b7769f7a9744597) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit dee96e82fb04ea99ecd6c25513c7bd368df3bd37) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* scripts/runqemu: split lock dir creation into a reusable functionAlexander Kanavin2023-07-121-16/+13
| | | | | | | | | (From OE-Core rev: d296853f1c5bcc6ccd800a4fbcbba18021f98518) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 004d6bcb067ecf1d796801fa43a98820c4efd3c7) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* pm-utils: fix multilib conflictionsKai Kang2023-07-121-1/+4
| | | | | | | | | | | | | | | | | | | | | | | | It fails to instal pm-utils and lib32-pm-utils at same time: Error: Transaction test error: file /usr/bin/pm-is-supported conflicts between attempted installs of lib32-pm-utils-1.4.1-r1.corei7_32 and pm-utils-1.4.1-r1.corei7_64 file /usr/sbin/pm-hibernate conflicts between attempted installs of lib32-pm-utils-1.4.1-r1.corei7_32 and pm-utils-1.4.1-r1.corei7_64 file /usr/sbin/pm-powersave conflicts between attempted installs of lib32-pm-utils-1.4.1-r1.corei7_32 and pm-utils-1.4.1-r1.corei7_64 file /usr/sbin/pm-suspend conflicts between attempted installs of lib32-pm-utils-1.4.1-r1.corei7_32 and pm-utils-1.4.1-r1.corei7_64 file /usr/sbin/pm-suspend-hybrid conflicts between attempted installs of lib32-pm-utils-1.4.1-r1.corei7_32 and pm-utils-1.4.1-r1.corei7_64 All of the conflicted files either is script which source a file in ${libdir}, or a link file to some file in ${libdir}. Compare the content of installed files in ${libdir} exclude binaries, only the paths of ${libdir} diff. So re-define libdir with ${nonarch_libdir} to fix the conflicts. (From OE-Core rev: 292ff56250d2f916370c508fd7a94f3ab769a356) Signed-off-by: Kai Kang <kai.kang@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit f836541bcfdbf033a37537530b4e3b87b0a7f003) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* kmod: remove unused ptest.patchMartin Jansa2023-07-121-25/+0
| | | | | | | | | | | | * it was removed from SRC_URI in 2015: https://git.openembedded.org/openembedded-core/commit/?id=f80d136bdd578468035a88125fa1b84973fd912b (From OE-Core rev: 4342d2a60e2ba8a7aeb683b78f1eef94eb2c2edc) Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit cfc4586b4bf080a3a4aa419dffc76c5da2a95b74) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* lib/terminal.py: Add urxvt terminalPavel Zhukov2023-07-121-0/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This fixes failure [1] of menuconfig task in rxvt-unicode terminal in case if xterm/Konsole/Gnome is not installed. Tested with rxvt-unicode-256color [1] WARNING: Terminal screen is supported but did not start ERROR: No valid terminal found, unable to open devshell. Tried the following commands: tmux split-window -c "{cwd}" "do_terminal" tmux new-window -c "{cwd}" -n "zephyr-helloworld Configuration" "do_terminal" xfce4-terminal -T "zephyr-helloworld Configuration" -e "do_terminal" terminology -T="zephyr-helloworld Configuration" -e do_terminal mate-terminal --disable-factory -t "zephyr-helloworld Configuration" -x do_terminal konsole --separate --workdir . -p tabtitle="zephyr-helloworld Configuration" -e do_terminal gnome-terminal -t "zephyr-helloworld Configuration" -- do_terminal xterm -T "zephyr-helloworld Configuration" -e do_terminal rxvt -T "zephyr-helloworld Configuration" -e do_terminal tmux new -c "{cwd}" -d -s devshell -n devshell "do_terminal" screen -D -m -t "zephyr-helloworld Configuration" -S devshell do_terminal DEBUG: Python function do_menuconfig finished (From OE-Core rev: 9dad23306348af9f54c5fcdfacdbc1e775bf5742) Signed-off-by: Pavel Zhukov <pazhukov@suse.de> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 8d2fe4df8ae33e033caf4119a76715f085be1d15) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* oeqa/selftest/cases/devtool.py: skip all tests require folder a git repoThomas Roos2023-07-121-0/+8
| | | | | | | | | | | | | | | Devtool selftests require poky dir a git repo, when downloading poky as a tar, this is not the case. Those tests will now skipped. [YOCTO #12389] (From OE-Core rev: 5f3128e3a85e3a5d67d5dc1f2585fe6c236e443c) Signed-off-by: Thomas Roos <throos@amazon.de> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 95a5bc130dc51ea9de95c64dbf0e9c7892415d50) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* conf: add nice level to the hash config ignred variablesLorenzo Arena2023-07-121-1/+1
| | | | | | | | | | | | This is needed as each user could be setting different nice levels while building, however this should not make the shared cache unusable. (From OE-Core rev: b77850f613bdc103e5d529b6c62ae90e134106ae) Signed-off-by: Lorenzo Arena <arena.lor@gmail.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> (cherry picked from commit 42784f9360345da1c01d988070253e7ffd5ac4ac) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* go.bbclass: don't use test to check output from lsMartin Jansa2023-07-121-1/+1
| | | | | | | | | | | | * avoids possibly confusing error message in log.do_install like: ls: cannot access 'etcd/3.5.7-r0/build/bin/linux_arm64/': No such file or directory (From OE-Core rev: 236a3e0bf753669b4fddbd91be5fdb10c2e6093f) Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> (cherry picked from commit 2f1777e6ac5269a71203b6a2c562a43503be95ae) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* oe-depends-dot: Handle new format for task-depends.dotRusty Howell2023-07-121-1/+20
| | | | | | | | | | | | | | The .dot file created by `bitbake -g` changed formats a while ago, which broke oe-depends-dot. Also add some useful examples to the --help output. (From OE-Core rev: c49914bb3cb6116f2e1bed7de82a702c2e4f7b5d) Signed-off-by: Rusty Howell <rustyhowell@gmail.com> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* mobile-broadband-provider-info: upgrade 20221107 -> 20230416Wang Mingyu2023-07-121-2/+2
| | | | | | | | | (From OE-Core rev: 698a70eab4384ee4938cb4550fa8469d62db786b) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> (cherry picked from commit 125f72393c9b6fea02757cdc3a22696945e0f490) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* python3: upgrade to 3.8.17Chee Yang Lee2023-07-123-210/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | License-Update: update year to 2023 https://github.com/python/cpython/commit/30afa75ad8deca57a2bd0218f8fd6b3437c89507 Release Notes for 3.8.15: Security content in this release CVE-2022-40674: bundled libexpat was upgraded from 2.4.7 to 2.4.9 which fixes a heap use-after-free vulnerability in function doContent gh-97616: a fix for a possible buffer overflow in list *= int gh-97612: a fix for possible shell injection in the example script get-remote-certificate.py (this issue originally had a CVE assigned to it, which its author withdrew) gh-96577: a fix for a potential buffer overrun in msilib https://www.python.org/downloads/release/python-3815/ Release Notes for 3.8.16: Security content in this release gh-98739: Updated bundled libexpat to 2.5.0 to fix CVE-2022-43680 (heap use-after-free). gh-98517: Port XKCP’s fix for the buffer overflows in SHA-3 to fix CVE-2022-37454. gh-98433: The IDNA codec decoder used on DNS hostnames by socket or asyncio related name resolution functions no longer involves a quadratic algorithm to fix CVE-2022-45061. This prevents a potential CPU denial of service if an out-of-spec excessive length hostname involving bidirectional characters were decoded. Some protocols such as urllib http 3xx redirects potentially allow for an attacker to supply such a name. gh-68966: The deprecated mailcap module now refuses to inject unsafe text (filenames, MIME types, parameters) into shell commands to address CVE-2015-20107. Instead of using such text, it will warn and act as if a match was not found (or for test commands, as if the test failed). gh-100001: python -m http.server no longer allows terminal control characters sent within a garbage request to be printed to the stderr server log. gh-87604: Avoid publishing list of active per-interpreter audit hooks via the gc module. https://www.python.org/downloads/release/python-3816/ Release Notes for 3.8.17: Security content in this release gh-103142: The version of OpenSSL used in Windows and Mac installers has been upgraded to 1.1.1u to address CVE-2023-2650, CVE-2023-0465, CVE-2023-0466, CVE-2023-0464, as well as CVE-2023-0286, CVE-2022-4303, and CVE-2022-4303 fixed previously in 1.1.1t (gh-101727). gh-102153: urllib.parse.urlsplit() now strips leading C0 control and space characters following the specification for URLs defined by WHATWG in response to CVE-2023-24329. gh-99889: Fixed a security in flaw in uu.decode() that could allow for directory traversal based on the input if no out_file was specified. gh-104049: Do not expose the local on-disk location in directory indexes produced by http.client.SimpleHTTPRequestHandler. gh-103935: trace.__main__ now uses io.open_code() for files to be executed instead of raw open(). gh-101283: subprocess.Popen now uses a safer approach to find cmd.exe when launching with shell=True. gh-102953: The extraction methods in tarfile, and shutil.unpack_archive(), have a new filter argument that allows limiting tar features than may be surprising or dangerous, such as creating files outside the destination directory. See Extraction filters for details. https://www.python.org/downloads/release/python-3817/ (From OE-Core rev: 01a1f016a6558566a36098a993adaf4b40e30c78) Signed-off-by: Chee Yang Lee <chee.yang.lee@intel.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* grub2: Fix Multiple CVEsHitendra Prajapati2023-07-124-0/+720
| | | | | | | | | | | | | Backport fixes for: * CVE-2020-27749 - Upstream-Status: Backport from https://git.savannah.gnu.org/cgit/grub.git/commit/?h=grub-2.06&id=c6c426e5ab6ea715153b72584de6bd8c82f698ec && https://git.savannah.gnu.org/cgit/grub.git/commit/?h=grub-2.06&id=b1c9e9e889e4273fb15712051c887e6078511448 && https://git.savannah.gnu.org/cgit/grub.git/commit/?h=grub-2.06&id=3d157bbd06506b170fde5ec23980c4bf9f7660e2 && https://git.savannah.gnu.org/cgit/grub.git/commit/?h=grub-2.06&id=8bc817014ce3d7a498db44eae33c8b90e2430926 && https://git.savannah.gnu.org/cgit/grub.git/commit/?h=grub-2.06&id=030fb6c4fa354cdbd6a8d6903dfed5d36eaf3cb2 && https://git.savannah.gnu.org/cgit/grub.git/commit/?h=grub-2.06&id=4ea7bae51f97e49c84dc67ea30b466ca8633b9f6 * CVE-2021-20225 - Upstream-Status: Backport from https://git.savannah.gnu.org/cgit/grub.git/commit/?h=grub-2.06&id=2a330dba93ff11bc00eda76e9419bc52b0c7ead6 * CVE-2021-20233 - Upstream-Status: Backport from https://git.savannah.gnu.org/cgit/grub.git/commit/?h=grub-2.06&id=2f533a89a8dfcacbf2c9dbc77d910f111f24bf33 (From OE-Core rev: 636aab87bc7e10b4ce0bdaa00dd01416a590a801) Signed-off-by: Hitendra Prajapati <hprajapati@mvista.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* sysstat: fix CVE-2023-33204Chee Yang Lee2023-07-122-0/+47
| | | | | | | | | | | | | import patch from debian to fix CVE-2023-33204 http://security.debian.org/debian-security/pool/updates/main/s/sysstat/sysstat_12.0.3-2+deb10u2.debian.tar.xz upstream patch: https://github.com/sysstat/sysstat/commit/6f8dc568e6ab072bb8205b732f04e685bf9237c0 (From OE-Core rev: c6bc5cfbed71b65753e50aee5a640934e754858a) Signed-off-by: Chee Yang Lee <chee.yang.lee@intel.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* cups: Fix CVE-2023-34241Vijay Anusuri2023-07-122-0/+66
| | | | | | | | | | | | | | | | | OpenPrinting CUPS is a standards-based, open source printing system for Linux and other Unix-like operating systems. Starting in version 2.0.0 and prior to version 2.4.6, CUPS logs data of free memory to the logging service AFTER the connection has been closed, when it should have logged the data right before. This is a use-after-free bug that impacts the entire cupsd process. The exact cause of this issue is the function `httpClose(con->http)` being called in `scheduler/client.c`. The problem is that httpClose always, provided its argument is not null, frees the pointer at the end of the call, only for cupsdLogClient to pass the pointer to httpGetHostname. This issue happens in function `cupsdAcceptClient` if LogLevel is warn or higher and in two scenarios: there is a double-lookup for the IP Address (HostNameLookups Double is set in `cupsd.conf`) which fails to resolve, or if CUPS is compiled with TCP wrappers and the connection is refused by rules from `/etc/hosts.allow` and `/etc/hosts.deny`. Version 2.4.6 has a patch for this issue. References: https://nvd.nist.gov/vuln/detail/CVE-2023-34241 https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25 https://security-tracker.debian.org/tracker/CVE-2023-34241 Upstream Patch: https://github.com/OpenPrinting/cups/commit/9809947a959e18409dcf562a3466ef246cb90cb2 (From OE-Core rev: 28b25ba7a8c6aa5c5744ca17e8686f2762791c72) Signed-off-by: Vijay Anusuri <vanusuri@mvista.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* bitbake: runqueue: Fix deferred task/multiconfig race issueRichard Purdie2023-07-121-4/+12
| | | | | | | | | | | | | | | | | If there are several multiconfigs in play for example a non-multiconfig with a task with one hash and then three multiconfigs for the same task, different architectures but the same hash (different to the non-mc), the three mcs will be deferred until after the non-mc task but then will all run together and race against each other. Change the code to re-enable deferred tasks one at a time. This way, if they do race, they won't run in parallel against each other. (Bitbake rev: b60c7085ec370473bea9b3b4b65826a17638837f) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 9523e28658ad7fb446645b590608dfac2812afd3) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* linux-yocto/5.4: cfg: fix DECNET configuration warningBruce Ashfield2023-07-043-3/+3
| | | | | | | | | | Dropping CONFIG_DECNET as it has been removed from -stable and we now get a configuration warning. (From OE-Core rev: b7530e5360babbe9321ee4cf1e336412116a98cb) Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* linux-yocto-rt/54: fix 5.4-rt build breakageBruce Ashfield2023-07-043-4/+4
| | | | | | | | | | | | | | | | | | | | | | | | Integrating the following commit: commit 8d8179549a233e7517523ac12887016451da2e20 Author: Bruce Ashfield <bruce.ashfield@gmail.com> Date: Tue Jun 27 10:13:01 2023 -0400 rt: fix 5.4-stable introduced compile errors The 5.4 stable series brough back two elements removed by the -rt patch: - tick_period - deferred/safe printk We fix the build by dropping the use of the period and deferred printk (From OE-Core rev: 13add4fd84c2e8a14caad857fbadf83205758c31) Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* linux-yocto/5.4: update to v5.4.248Bruce Ashfield2023-07-043-18/+18
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Updating to the latest korg -stable release that comprises the following commits: f2b499c27a95 Linux 5.4.248 1cdc48aaff18 mmc: block: ensure error propagation for non-blk de517032ee39 drm/nouveau/kms: Fix NULL pointer dereference in nouveau_connector_detect_depth d3f7f557d8a2 neighbour: delete neigh_lookup_nodev as not used a433b85d1750 net: Remove unused inline function dst_hold_and_use() fbc0209ae3a7 neighbour: Remove unused inline function neigh_key_eq16() bc1ea55bf1cf afs: Fix vlserver probe RTT handling 98acd5f0ce10 selftests/ptp: Fix timestamp printf format for PTP_SYS_OFFSET 1140f8bc29c2 net: tipc: resize nlattr array to correct size b83f86ba414c net: lapbether: only support ethernet devices ec694ad393cc net/sched: cls_api: Fix lockup on flushing explicitly created chain 0456f470fa02 drm/nouveau: add nv_encoder pointer check for NULL b1d76d16af2a drm/nouveau/kms: Don't change EDID when it hasn't actually changed f654b8a1325f drm/nouveau/dp: check for NULL nv_connector->native_mode 2ac7be7718a1 igb: fix nvm.ops.read() error handling 44008337f80e sctp: fix an error code in sctp_sf_eat_auth() edd3d3dc4849 ipvlan: fix bound dev checking for IPv6 l3s mode 6718478c18a4 IB/isert: Fix incorrect release of isert connection f8a91a024ab9 IB/isert: Fix possible list corruption in CMA handler 8a867ab71302 IB/isert: Fix dead lock in ib_isert 22125be516ef IB/uverbs: Fix to consider event queue closing also upon non-blocking mode ea4cf04d3f19 iavf: remove mask from iavf_irq_enable_queues() 19a500f530c2 RDMA/rxe: Fix the use-before-initialization error of resp_pkts 42ab73534583 RDMA/rxe: Removed unused name from rxe_task struct f99b6de58b5e RDMA/rxe: Remove the unused variable obj 46305daf8064 net/sched: cls_u32: Fix reference counter leak leading to overflow 88d6c1958bc0 ping6: Fix send to link-local addresses with VRF. 474e0adf29cf netfilter: nfnetlink: skip error delivery on batch in case of ENOMEM 67cafcd3e661 spi: fsl-dspi: avoid SCK glitches with continuous transfers 8231594e21d1 spi: spi-fsl-dspi: Remove unused chip->void_write_data 9d8b388a24c6 usb: dwc3: gadget: Reset num TRBs before giving back the request 94e52fac1519 serial: lantiq: add missing interrupt ack b577b74f8f83 USB: serial: option: add Quectel EM061KGL series 6b1203ae83c3 Remove DECnet support from kernel aad6addc17ae ALSA: hda/realtek: Add a quirk for Compaq N14JP6 def7e17c98f7 net: usb: qmi_wwan: add support for Compal RXM-G1 74bd53737372 RDMA/uverbs: Restrict usage of privileged QKEYs a8997ffad359 nouveau: fix client work fence deletion race 01fd784b0762 powerpc/purgatory: remove PGO flags b16bf76b3828 kexec: support purgatories with .text.hot sections b27a5fbe3c87 nilfs2: fix possible out-of-bounds segment allocation in resize ioctl 0dd2d8331eb4 nilfs2: fix incomplete buffer cleanup in nilfs_btnode_abort_change_key() e1fb47f13970 nios2: dts: Fix tse_mac "max-frame-size" property 5e531f448e5a ocfs2: check new file size on fallocate call f6878da39f47 ocfs2: fix use-after-free when unmounting read-only filesystem 82173fde61c7 drm:amd:amdgpu: Fix missing buffer object unlock in failure path 63afd766211b xen/blkfront: Only check REQ_FUA for writes 27447dada0b5 mips: Move initrd_start check after initrd address sanitisation. a365600bba27 MIPS: Alchemy: fix dbdma2 6b39b06b8d5b parisc: Flush gatt writes and adjust gatt mask in parisc_agp_mask_memory() de873bce06a8 parisc: Improve cache flushing for PCXL in arch_sync_dma_for_cpu() 28850d25a62c btrfs: handle memory allocation failure in btrfs_csum_one_bio b31586747bae power: supply: Fix logic checking if system is running from battery dd8804117d4b irqchip/meson-gpio: Mark OF related data as maybe unused 30ade27dbe66 regulator: Fix error checking for debugfs_create_dir a12155f0b1b6 platform/x86: asus-wmi: Ignore WMI events with codes 0x7B, 0xC0 d26edc403c0a power: supply: Ratelimit no data debug output af44b2ddfc08 ARM: dts: vexpress: add missing cache properties bd725832eb50 power: supply: bq27xxx: Use mod_delayed_work() instead of cancel() + schedule() 82bfd14f1359 power: supply: sc27xx: Fix external_power_changed race 66d5882dcc9f power: supply: ab8500: Fix external_power_changed race a8f286bfbc71 s390/dasd: Use correct lock while counting channel queue length d60be47f4357 dasd: refactor dasd_ioctl_information 7f3bb75a0484 KEYS: asymmetric: Copy sig and digest in public_key_verify_signature() 75d9e00f65cd test_firmware: fix a memory leak with reqs buffer (From OE-Core rev: ff0f134daad2e1cae942355c9a8eb177be607d13) Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* linux-yocto/5.4: update to v5.4.247Bruce Ashfield2023-07-043-18/+18
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Updating to the latest korg -stable release that comprises the following commits: 61a2f83e4762 Linux 5.4.247 4b0199bc8189 Revert "staging: rtl8192e: Replace macro RTL_PCI_DEVICE with PCI_DEVICE" 85258ae30708 mtd: spinand: macronix: Add support for MX35LFxGE4AD 8e546674031f btrfs: unset reloc control if transaction commit fails in prepare_to_relocate() 4223d91ca1b5 btrfs: check return value of btrfs_commit_transaction in relocation a35d89d3605b rbd: get snapshot context after exclusive lock is ensured to be held 52a40eaa55d6 drm/atomic: Don't pollute crtc_state->mode_blob with error pointers 2cc5d40e4d49 cifs: handle empty list of targets in cifs_reconnect() 307ffb716282 cifs: get rid of unused parameter in reconn_setup_dfs_targets() 73ed7996bbec ext4: only check dquot_initialize_needed() when debugging 7d0a29c74a31 eeprom: at24: also select REGMAP 0360652bf6ab i2c: sprd: Delete i2c adapter in .remove's error path c73f1c2f6816 bonding (gcc13): synchronize bond_{a,t}lb_xmit() types ec946898039a usb: usbfs: Use consistent mmap functions 0147952d158b usb: usbfs: Enforce page requirements for mmap 090878903dd3 pinctrl: meson-axg: add missing GPIOA_18 gpio group c6e842555050 rbd: move RBD_OBJ_FLAG_COPYUP_ENABLED flag setting 69653f941619 Bluetooth: Fix use-after-free in hci_remove_ltk/hci_remove_irk 953335a377b6 ceph: fix use-after-free bug for inodes when flushing capsnaps 2416bac0e7b2 can: j1939: avoid possible use-after-free when j1939_can_rx_register fails bf0245bd44c0 can: j1939: change j1939_netdev_lock type to mutex 9eed68d62e2a can: j1939: j1939_sk_send_loop_abort(): improved error queue handling in J1939 Socket 2fc62d51d3e4 drm/amdgpu: fix xclk freq on CHIP_STONEY e752bb1c039f ALSA: hda/realtek: Add Lenovo P3 Tower platform ca599db7a5e0 ALSA: hda/realtek: Add a quirk for HP Slim Desktop S01 d5ca4799e6d3 Input: psmouse - fix OOB access in Elantech protocol 282a96e3f88f Input: xpad - delete a Razer DeathAdder mouse VID/PID entry a3a99a069eb9 batman-adv: Broken sync while rescheduling delayed work df7044fc099b bnxt_en: Query default VLAN before VNIC setup on a VF a6ca81297392 lib: cpu_rmap: Fix potential use-after-free in irq_cpu_rmap_release() 198da74a4e8d net: sched: fix possible refcount leak in tc_chain_tmplt_add() 8f7cbd6d5e39 net: sched: move rtm_tca_policy declaration to include file b8b90f92444b rfs: annotate lockless accesses to RFS sock flow table 28ac3cf2ac21 rfs: annotate lockless accesses to sk->sk_rxhash a4c72805fda4 netfilter: ipset: Add schedule point in call_ad(). 0b705ed9d403 netfilter: conntrack: fix NULL pointer dereference in nf_confirm_cthelper c2c6133eebaf Bluetooth: L2CAP: Add missing checks for invalid DCID 0f841f80390d Bluetooth: Fix l2cap_disconnect_req deadlock b0b1b97702a5 net: dsa: lan9303: allow vid != 0 in port_fdb_{add|del} methods 7e0da73ce546 neighbour: fix unaligned access to pneigh_entry 314713ff4c9b neighbour: Replace zero-length array with flexible-array member e96f52705a63 spi: qup: Request DMA before enabling clocks 1cc6435cd704 i40e: fix build warnings in i40e_alloc.h fc75b8973de4 i40iw: fix build warning in i40iw_manage_apbvt() c425e71826e4 block/blk-iocost (gcc13): keep large values in a new enum ec97af8e8a36 blk-iocost: avoid 64-bit division in ioc_timer_fn (From OE-Core rev: e4928321624e5cd6eb587e6804173559531b7c4c) Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* linux-yocto/5.4: update to v5.4.246Bruce Ashfield2023-07-043-18/+18
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Updating to the latest korg -stable release that comprises the following commits: f568a20f058f Linux 5.4.246 6c0fc4725f6f drm/edid: fix objtool warning in drm_cvt_modes() 914bf541c3bb wifi: rtlwifi: 8192de: correct checking of IQK reload 58bc9baaef92 drm/edid: Fix uninitialized variable in drm_cvt_modes() 77e442733faa RDMA/bnxt_re: Remove the qp from list only if the qp destroy succeeds a616aa258e46 RDMA/bnxt_re: Remove set but not used variable 'dev_attr' 4ffad598bff4 scsi: dpt_i2o: Do not process completions with invalid addresses e2897f133acd scsi: dpt_i2o: Remove broken pass-through ioctl (I2OUSERCMD) 56a4a9dc5ed1 regmap: Account for register length when chunking 94f3bc7e84af test_firmware: fix the memory leak of the allocated firmware buffer fb7dce686fd1 fbcon: Fix null-ptr-deref in soft_cursor 5ea6122caf51 ext4: add lockdep annotations for i_data_sem for ea_inode's b06346ef5778 ext4: disallow ea_inodes with extended attributes ec2a04f8fc9f ext4: set lockdep subclass for the ea_inode in ext4_xattr_inode_cache_find() 2e636c0c9344 ext4: add EA_INODE checking to ext4_iget() d9de088797a0 tracing/probe: trace_probe_primary_from_call(): checked list_first_entry 7df474125c37 selinux: don't use make's grouped targets feature yet b18bc3c9c2c5 tty: serial: fsl_lpuart: use UARTCTRL_TXINV to send break instead of UARTCTRL_SBK ae7fb0c8bf80 mmc: vub300: fix invalid response handling 9d8f5797d791 wifi: rtlwifi: remove always-true condition pointed out by GCC 12 843f51766784 lib/dynamic_debug.c: use address-of operator on section symbols 0638dcc7e75f treewide: Remove uninitialized_var() usage 1eb88dccb827 kernel/extable.c: use address-of operator on section symbols d069c7ce3995 eth: sun: cassini: remove dead code d04adc383f32 gcc-12: disable '-Wdangling-pointer' warning for now 253d70232573 ACPI: thermal: drop an always true check a010f8e64689 x86/boot: Wrap literal addresses in absolute_pointer() f0bb5135553c flow_dissector: work around stack frame size warning cd943425c6aa ata: libata-scsi: Use correct device no in ata_find_dev() 76c67ff783ac scsi: stex: Fix gcc 13 warnings cd91ead608f0 misc: fastrpc: reject new invocations during device removal bf1d0b84dfd2 misc: fastrpc: return -EPIPE to invocations on device removal d5f183881529 usb: gadget: f_fs: Add unbind event before functionfs_unbind ac388cbbd97c net: usb: qmi_wwan: Set DTR quirk for BroadMobi BM818 e101e8160cf0 iio: dac: build ad5758 driver when AD5758 is selected a87236446a62 iio: dac: mcp4725: Fix i2c_master_send() return value handling c3b25245e3a8 iio: light: vcnl4035: fixed chip ID check 711049e31e09 HID: wacom: avoid integer overflow in wacom_intuos_inout() 4251ff7fd4a4 HID: google: add jewel USB id f3b4e2a636d1 iio: adc: mxs-lradc: fix the order of two cleanup operations 030ca3f7b042 mailbox: mailbox-test: fix a locking issue in mbox_test_message_write() 11b084412055 atm: hide unused procfs functions cea581b385ab ALSA: oss: avoid missing-prototype warnings 384fd08858da netfilter: conntrack: define variables exp_nat_nla_policy and any_addr with CONFIG_NF_NAT f7e62f1b7229 wifi: b43: fix incorrect __packed annotation 8a9035110288 scsi: core: Decrease scsi_device's iorequest_cnt if dispatch failed f1e6a1097141 arm64/mm: mark private VM_FAULT_X defines as vm_fault_t c87334f4e705 ARM: dts: stm32: add pin map for CAN controller on stm32f7 a39f24357fdc wifi: rtl8xxxu: fix authentication timeout due to incorrect RCR value 353fd22693a6 media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221 66a6d704c251 media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*() ed47886a73db media: dvb-core: Fix use-after-free due on race condition at dvb_net e9033a425ab2 media: mn88443x: fix !CONFIG_OF error by drop of_match_ptr from ID table 08b20cb8e5b9 media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb() 46e8b0fe538b media: dvb_ca_en50221: fix a size write bug b66849f35462 media: netup_unidvb: fix irq init by register it at the end of probe 88aef84eefb3 media: dvb-usb: dw2102: fix uninit-value in su3000_read_mac_address 6b9a534ec5cf media: dvb-usb: digitv: fix null-ptr-deref in digitv_i2c_xfer() f3c8ed7366cd media: dvb-usb-v2: rtl28xxu: fix null-ptr-deref in rtl28xxu_i2c_xfer 65033ab2f930 media: dvb-usb-v2: ce6230: fix null-ptr-deref in ce6230_i2c_master_xfer() 37e36b426197 media: dvb-usb-v2: ec168: fix null-ptr-deref in ec168_i2c_xfer() 64f1b8296bef media: dvb-usb: az6027: fix three null-ptr-deref in az6027_i2c_xfer() d16f5dc3aa09 media: dvb_demux: fix a bug for the continuity counter a7c87057f259 ASoC: ssm2602: Add workaround for playback distortions 619f008df14e xfrm: Check if_id in inbound policy/secpath match 21ca81704611 ASoC: dwc: limit the number of overrun messages acd5f476c16e nbd: Fix debugfs_create_dir error checking 19ce1e1f348d fbdev: stifb: Fix info entry in sti_struct on error path aa32f2fadb4c fbdev: modedb: Add 1920x1080 at 60 Hz video mode 199f9c5430f9 media: rcar-vin: Select correct interrupt mode for V4L2_FIELD_ALTERNATE b950966b44f9 ARM: 9295/1: unwind:fix unwind abort for uleb128 case a823d8e0bb02 mailbox: mailbox-test: Fix potential double-free in mbox_test_message_write() 29bfbc8a63c4 watchdog: menz069_wdt: fix watchdog initialisation 0018639be2d9 mtd: rawnand: marvell: don't set the NAND frequency select 5f0043efdc24 mtd: rawnand: marvell: ensure timing values are written 6c0aacf1b4e1 net: dsa: mv88e6xxx: Increase wait after reset deactivation 94a00f1142c5 net/sched: flower: fix possible OOB write in fl_set_geneve_opt() dd4b5a204dfa udp6: Fix race condition in udp6_sendmsg & connect cd4a37f0dcc9 net/netlink: fix NETLINK_LIST_MEMBERSHIPS length report cec562fbf8c5 ocfs2/dlm: move BITS_TO_BYTES() to bitops.h for wider use 9e6bb63e5e66 net: sched: fix NULL pointer dereference in mq_attach 2188c0f09532 net/sched: Prohibit regrafting ingress or clsact Qdiscs 80b20d528a71 net/sched: Reserve TC_H_INGRESS (TC_H_CLSACT) for ingress (clsact) Qdiscs 321f38375517 net/sched: sch_clsact: Only create under TC_H_CLSACT 5f67d33c01b3 net/sched: sch_ingress: Only create under TC_H_INGRESS 381a703220fb tcp: Return user_mss for TCP_MAXSEG in CLOSE/LISTEN state if user_mss set 32e9a9ee285f tcp: deny tcp_disconnect() when threads are waiting 26e830858a2b af_packet: do not use READ_ONCE() in packet_bind() 43f1402dc2e9 mtd: rawnand: ingenic: fix empty stub helper definitions dd3773e8c8c9 amd-xgbe: fix the false linkup in xgbe_phy_status 603eec060d14 af_packet: Fix data-races of pkt_sk(sk)->num. bab2f42d8d8a netrom: fix info-leak in nr_write_internal() d7aeb591b101 net/mlx5: fw_tracer, Fix event handling c7ac3ebf41ee dmaengine: pl330: rename _start to prevent build error 17d70de57248 iommu/amd: Don't block updates to GATag if guest mode is on fa961ad9ef91 iommu/rockchip: Fix unwind goto issue 5abb81b4d762 RDMA/bnxt_re: Fix return value of bnxt_re_process_raw_qp_pkt_rx 2bafc7f22db3 RDMA/bnxt_re: Refactor queue pair creation code 56446791bccd RDMA/bnxt_re: Enable SRIOV VF support on Broadcom's 57500 adapter series cc5a673d85a9 RDMA/efa: Fix unsupported page sizes in device cf0b1e5482ea Linux 5.4.245 ec14c6e0a2e5 netfilter: ctnetlink: Support offloaded conntrack entry deletion 5b7d4d91c047 ipv{4,6}/raw: fix output xfrm lookup wrt protocol 6c88024cab83 binder: fix UAF caused by faulty buffer cleanup e6183912ee90 bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() 9ba28194ea50 io_uring: have io_kill_timeout() honor the request references 6de3014d4bd8 io_uring: don't drop completion lock before timer is fully initialized b0bfceaa8c0e io_uring: always grab lock in io_cancel_async_work() 00395fd7f9a0 cdc_ncm: Fix the build warning 672e59995e70 net/mlx5: Devcom, serialize devcom registration f42feb29bad9 net/mlx5: devcom only supports 2 ports 67637a7ee6bd fs: fix undefined behavior in bit shift for SB_NOUSER 02281c23d069 power: supply: bq24190: Call power_supply_changed() after updating input current f6518954c146 power: supply: core: Refactor power_supply_set_input_current_limit_from_supplier() db00ef8fd609 power: supply: bq27xxx: After charger plug in/out wait 0.5s for things to stabilize ff484163dfb6 net: cdc_ncm: Deal with too low values of dwNtbOutMaxSize a270ca35a949 cdc_ncm: Implement the 32-bit version of NCM Transfer Block 51d0ac4577c2 Linux 5.4.244 edec0d399907 3c589_cs: Fix an error handling path in tc589_probe() 3dfc1004d9af net/mlx5: Devcom, fix error flow in mlx5_devcom_register_device c59106f8bca1 net/mlx5: Fix error message when failing to allocate device memory 8680d838c98c forcedeth: Fix an error handling path in nv_probe() b8db4a4e2007 ASoC: Intel: Skylake: Fix declaration of enum skl_ch_cfg 0099a29bc5a0 x86/show_trace_log_lvl: Ensure stack pointer is aligned, again c60f38c9bdcb xen/pvcalls-back: fix double frees with pvcalls_new_active_socket() 9b13972e4f23 coresight: Fix signedness bug in tmc_etr_buf_insert_barrier_packet() f6b610730e8f power: supply: sbs-charger: Fix INHIBITED bit for Status reg 0c5f4cec7596 power: supply: bq27xxx: Fix poll_interval handling and races on remove dafe9136be7b power: supply: bq27xxx: Fix I2C IRQ race on remove 7b3b11964979 power: supply: bq27xxx: Fix bq27xxx_battery_update() race condition 96bfafbc7d80 power: supply: leds: Fix blink to LED on transition 011f47c8b838 ipv6: Fix out-of-bounds access in ipv6_find_tlv() 120cdad8b2ae bpf: Fix mask generation for 32-bit narrow loads of 64-bit fields 9928ce5225d6 selftests: fib_tests: mute cleanup error message 58766252f6b2 net: fix skb leak in __skb_tstamp_tx() 2b580d0f03c4 media: radio-shark: Add endpoint checks a730feb672c7 USB: sisusbvga: Add endpoint checks 80100e0863e5 USB: core: Add routines for endpoint checks in old drivers 7e3ae83371a4 udplite: Fix NULL pointer dereference in __sk_mem_raise_allocated(). 9ea0c5f90a27 net: fix stack overflow when LRO is disabled for virtual interfaces 1522dc58bff8 fbdev: udlfb: Fix endpoint check be646802b3dc debugobjects: Don't wake up kswapd from fill_pool() 4e5a7181a6c3 x86/topology: Fix erroneous smp_num_siblings on Intel Hybrid platforms 6d091e0ddcf3 parisc: Fix flush_dcache_page() for usage from irq context b556618baca5 selftests/memfd: Fix unknown type name build failure 04aee084a3fa x86/mm: Avoid incomplete Global INVLPG flushes a9f5423460a6 btrfs: use nofs when cleaning up aborted transactions 4f92934d8073 gpio: mockup: Fix mode of debugfs files da8adda57984 parisc: Allow to reboot machine after system halt 43ffe982a304 parisc: Handle kgdb breakpoints only in kernel context f7d19a366cd2 m68k: Move signal frame following exception on 68020/030 8facb9cc168a ALSA: hda/realtek: Enable headset onLenovo M70/M90 5cc3e698c2bb ALSA: hda/ca0132: add quirk for EVGA X299 DARK 68e4c390173e mt76: mt7615: Fix build with older compilers b558275c1b04 spi: fsl-cpm: Use 16 bit mode for large transfers with even size d64a45c019ac spi: fsl-spi: Re-organise transfer bits_per_word adaptation aabe8ca79139 watchdog: sp5100_tco: Immediately trigger upon starting. aeff9e7e87c1 s390/qdio: fix do_sqbs() inline assembly constraint ab196fe70a18 s390/qdio: get rid of register asm a4e3c4c65ae8 vc_screen: reload load of struct vc_data pointer in vcs_write() to avoid UAF 74e644795d37 vc_screen: rewrite vcs_size to accept vc, not inode e9399d4ea5ee usb: gadget: u_ether: Fix host MAC address case 939cafcdf7de usb: gadget: u_ether: Convert prints to device prints c8489e0fab18 lib/string_helpers: Introduce string_upper() and string_lower() helpers 7e15602c5073 HID: wacom: add three styli to wacom_intuos_get_tool_type 2a12339ce34f HID: wacom: Add new Intuos Pro Small (PTH-460) device IDs b5185f1b11c7 HID: wacom: Force pen out of prox if no events have been received in a while e0c1b35239d9 netfilter: nf_tables: hold mutex on netns pre_exit path 6236af6936dd netfilter: nf_tables: validate NFTA_SET_ELEM_OBJREF based on NFT_SET_OBJECT flag 05b4105e6852 netfilter: nf_tables: stricter validation of element data e832e4bae556 netfilter: nf_tables: allow up to 64 bytes in the set element data area 28fe10236a64 netfilter: nf_tables: add nft_setelem_parse_key() eb5b579bd69f netfilter: nf_tables: validate registers coming from userspace. cfe1b9719cce netfilter: nftables: statify nft_parse_register() 7c788393d453 netfilter: nftables: add nft_parse_register_store() and use it 25336cd96b03 netfilter: nftables: add nft_parse_register_load() and use it 116d53f09ff5 nilfs2: fix use-after-free bug of nilfs_root in nilfs_evict_inode() df89b1753eb1 powerpc/64s/radix: Fix soft dirty tracking 60b9a9c8f370 tpm/tpm_tis: Disable interrupts for more Lenovo devices a33c172c1e34 ceph: force updating the msg pointer in non-split case 6eb9ed0ab7b5 serial: Add support for Advantech PCI-1611U card 21f107a95965 statfs: enforce statfs[64] structure initialization 1eb3e32de7b1 KVM: x86: do not report a vCPU as preempted outside instruction boundaries a88638a95407 can: kvaser_pciefd: Disable interrupts in probe error path 4579e2556767 can: kvaser_pciefd: Do not send EFLUSH command on TFD interrupt 33d5a0a4985a can: kvaser_pciefd: Clear listen-only bit if not explicitly requested e5ac4f12074e can: kvaser_pciefd: Empty SRB buffer in probe c0e9fb21b612 can: kvaser_pciefd: Call request_irq() before enabling interrupts 36cd7601e6b9 can: kvaser_pciefd: Set CAN_STATE_STOPPED in kvaser_pciefd_stop() e65811289346 can: j1939: recvmsg(): allow MSG_CMSG_COMPAT flag 880482525101 ALSA: hda/realtek: Add quirk for 2nd ASUS GU603 57fd0d122edd ALSA: hda/realtek: Add a quirk for HP EliteDesk 805 739056188ad3 ALSA: hda: Add NVIDIA codec IDs a3 through a7 to patch table 4ef155ddf957 ALSA: hda: Fix Oops by 9.1 surround channel names 4f9c0a7c2726 usb: typec: altmodes/displayport: fix pin_assignment_show 33b6648d27b8 usb: dwc3: debugfs: Resume dwc3 before accessing registers 241491524ab0 USB: UHCI: adjust zhaoxin UHCI controllers OverCurrent bit value 1f36dc41616b usb-storage: fix deadlock when a scsi command timeouts more than once 7cef7681aa77 USB: usbtmc: Fix direction for 0-length ioctl control messages f662f856acec vlan: fix a potential uninit-value in vlan_dev_hard_start_xmit() 53bf7cda160b igb: fix bit_shift to be in [1..8] range e20105d967ab cassini: Fix a memory leak in the error handling path of cas_init_one() e519a404a5bb wifi: iwlwifi: mvm: don't trust firmware n_channels d0baaadd1c5e net: bcmgenet: Restore phy_stop() depending upon suspend/close 2cca63d5bc4e net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop() 435855b0831b net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment() ed50fcab1435 drm/exynos: fix g2d_open/close helper function definitions 1550bcf2983a media: netup_unidvb: fix use-after-free at del_timer() 69055f99900b net: hns3: fix reset delay time to avoid configuration timeout 304e5cb77eb8 net: hns3: fix sending pfc frames after reset issue d1bcc606870e erspan: get the proto with the md version for collect_md f185ede016c9 ip_gre, ip6_gre: Fix race condition on o_seqno in collect_md mode 0eb3ec0a3553 ip6_gre: Make o_seqno start from 0 in native mode 304096241398 ip6_gre: Fix skb_under_panic in __gre6_xmit() 7525aa211758 serial: arc_uart: fix of_iomap leak in `arc_serial_probe` 5a90309002cd vsock: avoid to close connected socket after the timeout 5009aead17f0 ALSA: firewire-digi00x: prevent potential use after free b22b514209ff net: fec: Better handle pm_runtime_get() failing in .remove() 033297ef3bba af_key: Reject optional tunnel/BEET mode templates in outbound policies 912a6cff0db1 cpupower: Make TSC read per CPU for Mperf monitor 131eb9c9b1a0 ASoC: fsl_micfil: register platform component before registering cpu dai a3714a47b401 btrfs: fix space cache inconsistency after error loading it from disk 596898303745 btrfs: replace calls to btrfs_find_free_ino with btrfs_find_free_objectid 1e453cb55014 mfd: dln2: Fix memory leak in dln2_probe() bdc33478d5d3 phy: st: miphy28lp: use _poll_timeout functions for waits e6e917e82de4 Input: xpad - add constants for GIP interface numbers 9fcef1e37d54 iommu/arm-smmu-v3: Acknowledge pri/event queue overflow if any 4461f41ece4d clk: tegra20: fix gcc-7 constant overflow warning c23e6383d7fe RDMA/core: Fix multiple -Warray-bounds warnings 3ed95a6f6c64 recordmcount: Fix memory leaks in the uwrite function 38a118fd545b sched: Fix KCSAN noinstr violation cbe3063a9be1 mcb-pci: Reallocate memory region to avoid memory overlapping d5cd2928d310 serial: 8250: Reinit port->pm on port specific driver unbind ccb12585a735 usb: typec: tcpm: fix multiple times discover svids error c5405c767173 HID: wacom: generic: Set battery quirk only when we see battery data d3f32dc2ccc2 spi: spi-imx: fix MX51_ECSPI_* macros when cs > 3 bf80dbd52899 HID: logitech-hidpp: Reconcile USB and Unifying serials e28f9de2d4d7 HID: logitech-hidpp: Don't use the USB serial for USB devices 8a65476dd1ca staging: rtl8192e: Replace macro RTL_PCI_DEVICE with PCI_DEVICE 2112c4c47d36 Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp fa57021262e9 wifi: iwlwifi: dvm: Fix memcpy: detected field-spanning write backtrace 0ad8dd870aa1 wifi: iwlwifi: pcie: Fix integer overflow in iwl_write_to_user_buf f6f2d16c77f9 wifi: iwlwifi: pcie: fix possible NULL pointer dereference a7ec2f424f6e samples/bpf: Fix fout leak in hbm's run_bpf_prog 4ceedc2f8bdf f2fs: fix to drop all dirty pages during umount() if cp_error is set 8659c5f4ffaa ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa() cee78217a7ae ext4: set goal start correctly in ext4_mb_normalize_request d43b1bdb1005 gfs2: Fix inode height consistency check 410e610a96c5 scsi: message: mptlan: Fix use after free bug in mptlan_remove() due to race condition cc2d2b3dbfb0 lib: cpu_rmap: Avoid use after free on rmap->obj array entries 89f5055f9b0b scsi: target: iscsit: Free cmds before session free 67236cf14db3 net: Catch invalid index in XPS mapping 92af9cb86ab0 net: pasemi: Fix return type of pasemi_mac_start_tx() 644a9d5e2276 scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow c4813f858e5c ext2: Check block size validity during mount 56c7e9c39bd5 wifi: brcmfmac: cfg80211: Pass the PMK in binary instead of hex c409eb45f5dd ACPICA: ACPICA: check null return of ACPI_ALLOCATE_ZEROED in acpi_db_display_objects 710e09fd116e ACPICA: Avoid undefined behavior: applying zero offset to null pointer 99c8f2e6f33a drm/tegra: Avoid potential 32-bit integer overflow ccae2233e993 ACPI: EC: Fix oops when removing custom query handlers 48ac727ea4a3 firmware: arm_sdei: Fix sleep from invalid context BUG a2a5d3a584bf memstick: r592: Fix UAF bug in r592_remove due to race condition d73e8c47675e regmap: cache: Return error in cache sync operations for REGCACHE_NONE 9b72cb394f96 drm/amd/display: Use DC_LOG_DC in the trasform pixel function a75d9211a07f fs: hfsplus: remove WARN_ON() from hfsplus_cat_{read,write}_inode() 196528ad4844 af_unix: Fix data races around sk->sk_shutdown. 7d17bc2d4e75 af_unix: Fix a data race of sk->sk_receive_queue->qlen. 699c9e7c9f66 net: datagram: fix data-races in datagram_poll() 1aa872e967f2 ipvlan:Fix out-of-bounds caused by unclear skb->cb 4188c5269475 net: add vlan_get_protocol_and_depth() helper 57a269d82f2e net: tap: check vlan with eth_type_vlan() method 1747aa98ab13 net: annotate sk->sk_err write from do_recvmmsg() a507022c862e netlink: annotate accesses to nlk->cb_running b47aae7038cc netfilter: conntrack: fix possible bug_on with enable_hooks=1 d7343f8de019 net: Fix load-tearing on sk->sk_stamp in sock_recv_cmsgs(). 42e1dafa65e2 linux/dim: Do nothing if no time delta between samples 7460ac5a66fb ARM: 9296/1: HP Jornada 7XX: fix kernel-doc warnings 22b8ac608af5 drm/mipi-dsi: Set the fwnode for mipi_dsi_device d4992b2b5c68 driver core: add a helper to setup both the of_node and fwnode of a device (From OE-Core rev: bc75da82987e243bdfe3e1192bb715438b3a7378) Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
generated by cgit v1.2.3-54-g00ecf (git 2.39.0) at 2025-08-07 17:50:47 +0000