summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* linux-yocto/5.10: update to v5.10.113Bruce Ashfield2022-06-073-19/+19
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Updating to the latest korg -stable release that comprises the following commits: 54af9dd2b958 Linux 5.10.113 7992fdb045fb Revert "net: micrel: fix KS8851_MLL Kconfig" 8bedbc8f7f35 block/compat_ioctl: fix range check in BLKGETSIZE fea24b07edfc staging: ion: Prevent incorrect reference counting behavour dccee748af17 spi: atmel-quadspi: Fix the buswidth adjustment between spi-mem and controller 572761645b88 jbd2: fix a potential race while discarding reserved buffers after an abort 50aac4427360 can: isotp: stop timeout monitoring when no first frame was sent e1e96e372721 ext4: force overhead calculation if the s_overhead_cluster makes no sense 4789149b9ea2 ext4: fix overhead calculation to account for the reserved gdt blocks 0c54b093766b ext4, doc: fix incorrect h_reserved size 22c450d39f89 ext4: limit length to bitmap_maxbytes - blocksize in punch_hole 75ac724684b7 ext4: fix use-after-free in ext4_search_dir a46b3d849864 ext4: fix symlink file size not match to file content f6038d43b25b ext4: fix fallocate to use file_modified to update permissions consistently 19590bbc691d perf report: Set PERF_SAMPLE_DATA_SRC bit for Arm SPE event e012f9d1af54 powerpc/perf: Fix power9 event alternatives 0a2cef65b329 drm/vc4: Use pm_runtime_resume_and_get to fix pm_runtime_get_sync() usage f8f8b3124b89 KVM: PPC: Fix TCE handling for VFIO 405d98427416 drm/panel/raspberrypi-touchscreen: Initialise the bridge in prepare 231381f52116 drm/panel/raspberrypi-touchscreen: Avoid NULL deref if not initialised 51d9cbbb0f5a perf/core: Fix perf_mmap fail when CONFIG_PERF_USE_VMALLOC enabled 88fcfd6ee6c5 sched/pelt: Fix attach_entity_load_avg() corner case c55327bc3712 arm_pmu: Validate single/group leader events 5580b974a84b ARC: entry: fix syscall_trace_exit argument 7082650eb826 e1000e: Fix possible overflow in LTR decoding 43a2a3734aa3 ASoC: soc-dapm: fix two incorrect uses of list iterator 54e6180c8c2d gpio: Request interrupts after IRQ is initialized 0837ff17d052 openvswitch: fix OOB access in reserve_sfa_size() 19f6dcb1f0f0 xtensa: fix a7 clobbering in coprocessor context load/store f399ab11dd6c xtensa: patch_text: Fixup last cpu should be master ba2716da2336 net: atlantic: invert deep par in pm functions, preventing null derefs 358a3846f6a9 dma: at_xdmac: fix a missing check on list iterator cf23a960c5c6 ata: pata_marvell: Check the 'bmdma_addr' beforing reading 9ca66d791439 mm/mmu_notifier.c: fix race in mmu_interval_notifier_remove() ed5d4efb4df1 oom_kill.c: futex: delay the OOM reaper to allow time for proper futex cleanup 6b932920b96f mm, hugetlb: allow for "high" userspace addresses 50cbc583fa83 EDAC/synopsys: Read the error count from the correct register 7ec6e06ee405 nvme-pci: disable namespace identifiers for Qemu controllers 316bd86c2261 nvme: add a quirk to disable namespace identifiers 76101c8e0c31 stat: fix inconsistency between struct stat and struct compat_stat bf28bba30410 scsi: qedi: Fix failed disconnect handling a284cca3d81a net: macb: Restart tx only if queue pointer is lagging 9581e07b549b drm/msm/mdp5: check the return of kzalloc() 8d71edabb0ab dpaa_eth: Fix missing of_node_put in dpaa_get_ts_info() b3afe5a7fd75 brcmfmac: sdio: Fix undefined behavior due to shift overflowing the constant 202748f44148 mt76: Fix undefined behavior due to shift overflowing the constant 0de9c104d04a net: atlantic: Avoid out-of-bounds indexing 5bef9fc38ffa cifs: Check the IOCB_DIRECT flag, not O_DIRECT e129c55153c8 vxlan: fix error return code in vxlan_fdb_append 8e7ea1136475 arm64: dts: imx: Fix imx8*-var-som touchscreen property sizes cd227ac03f2a ALSA: usb-audio: Fix undefined behavior due to shift overflowing the constant 490815f0b50e platform/x86: samsung-laptop: Fix an unsigned comparison which can never be negative cb17b56a9b4d reset: tegra-bpmp: Restore Handle errors in BPMP response d513ea9b7ef8 ARM: vexpress/spc: Avoid negative array index when !SMP 052e4a661f90 arm64: mm: fix p?d_leaf() 18ff7a2efa4e arm64/mm: Remove [PUD|PMD]_TABLE_BIT from [pud|pmd]_bad() 3bf8ca350170 selftests: mlxsw: vxlan_flooding: Prevent flooding of unwanted packets 520aab8b723c dmaengine: idxd: add RO check for wq max_transfer_size write 9a3c026dc3a5 dmaengine: idxd: add RO check for wq max_batch_size write f593f49fcd17 net: stmmac: Use readl_poll_timeout_atomic() in atomic state 3d55b195747c netlink: reset network and mac headers in netlink_dump() 49516e6ed914 ipv6: make ip6_rt_gc_expire an atomic_t 078d839f11ac l3mdev: l3mdev_master_upper_ifindex_by_index_rcu should be using netdev_master_upper_dev_get_rcu 0ac8f83d8f64 net/sched: cls_u32: fix possible leak in u32_init_knode() 93366275be72 ip6_gre: Fix skb_under_panic in __gre6_xmit() 200f96ebb389 ip6_gre: Avoid updating tunnel->tun_hlen in __gre6_xmit() 8fb76adb89f0 net/packet: fix packet_sock xmit return value checking a499cb5f3ef9 net/smc: Fix sock leak when release after smc_shutdown() 60592f16a456 rxrpc: Restore removed timer deletion fc7116a79a86 igc: Fix BUG: scheduling while atomic 46b0e4f998ce igc: Fix infinite loop in release_swfw_sync c075c3ea0317 esp: limit skb_page_frag_refill use to a single page 3f7914dbeacd spi: spi-mtk-nor: initialize spi controller after resume f714abf28f81 dmaengine: mediatek:Fix PM usage reference leak of mtk_uart_apdma_alloc_chan_resources 9bc949a181ba dmaengine: imx-sdma: Fix error checking in sdma_event_remap 12aa8021c7a7 ASoC: codecs: wcd934x: do not switch off SIDO Buck when codec is in use b6f474cd3097 ASoC: msm8916-wcd-digital: Check failure for devm_snd_soc_register_component 608fc58858bf ASoC: atmel: Remove system clock tree configuration for at91sam9g20ek d29c78d3f9c5 dm: fix mempool NULL pointer race when completing IO cf9b19546494 ALSA: hda/realtek: Add quirk for Clevo NP70PNP 8ce3820fc9d4 ALSA: usb-audio: Clear MIDI port active flag after draining 43ce33a68e2b net/sched: cls_u32: fix netns refcount changes in u32_change() 04dd45d9776e gfs2: assign rgrp glock before compute_bitstructs 378061c9b886 perf tools: Fix segfault accessing sample_id xyarray 5e8446e3820c tracing: Dump stacktrace trigger to the corresponding instance 69848f9488bc mm: page_alloc: fix building error on -Werror=array-compare 08ad7a770efa etherdevice: Adjust ether_addr* prototypes to silence -Wstringop-overead (From OE-Core rev: 96ed22ed1e6b9fa1cbb7e232c17d1e558cdc4260) Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 8be43ceaf742c4c1b59522ac75df4846cc271461) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* linux-yocto/5.15: update to v5.15.37Bruce Ashfield2022-06-073-19/+19
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Updating to the latest korg -stable release that comprises the following commits: 4bf7f350c163 Linux 5.15.37 f59e6886cafb selftests/bpf: Add test for reg2btf_ids out of bounds access dcecd95a1357 mm: gup: make fault_in_safe_writeable() use fixup_user_fault() 4a0123bdb064 btrfs: fallback to blocking mode when doing async dio over multiple extents c81c4f566660 btrfs: fix deadlock due to page faults during direct IO reads and writes 640a6be8e861 gfs2: Fix mmap + page fault deadlocks for direct I/O f86f8d27840a iov_iter: Introduce nofault flag to disable page faults 6e213bc61446 gup: Introduce FOLL_NOFAULT flag to disable page faults d3b744791bf0 iomap: Add done_before argument to iomap_dio_rw ea7a57858875 iomap: Support partial direct I/O on user copy failures a00cc46f97b9 iomap: Fix iomap_dio_rw return value for user copies 81a7fc397a62 gfs2: Fix mmap + page fault deadlocks for buffered I/O 38b58498819a gfs2: Eliminate ip->i_gh 8d363d817353 gfs2: Move the inode glock locking to gfs2_file_buffered_write 416a705304e5 gfs2: Introduce flag for glock holder auto-demotion b25cfbc0e7de gfs2: Clean up function may_grant b88b998579ee gfs2: Add wrapper for iomap_file_buffered_write 1d91c912e7d1 iov_iter: Introduce fault_in_iov_iter_writeable 30e66b1dfcbb iov_iter: Turn iov_iter_fault_in_readable into fault_in_iov_iter_readable 923f05a660e6 gup: Turn fault_in_pages_{readable,writeable} into fault_in_{readable,writeable} 19cbd78fb26a mm: kfence: fix objcgs vector allocation 10033fa72d41 ARM: dts: socfpga: change qspi to "intel,socfpga-qspi" e8749d608847 spi: cadence-quadspi: fix write completion support 8c39925e98d4 bpf: Fix crash due to out of bounds access into reg2btf_ids. 379382b347db bpf/selftests: Test PTR_TO_RDONLY_MEM 2a77c58726ab bpf: Add MEM_RDONLY for helper args that are pointers to rdonly mem. 15166bb3000f bpf: Make per_cpu_ptr return rdonly PTR_TO_MEM. b710f73704d6 bpf: Convert PTR_TO_MEM_OR_NULL to composable types. b453361384c2 bpf: Introduce MEM_RDONLY flag 8d38cde47a7e bpf: Replace PTR_TO_XXX_OR_NULL with PTR_TO_XXX | PTR_MAYBE_NULL 3c141c82b958 bpf: Replace RET_XXX_OR_NULL with RET_XXX | PTR_MAYBE_NULL d58a396fa6c9 bpf: Replace ARG_XXX_OR_NULL with ARG_XXX | PTR_MAYBE_NULL a76020980b9f bpf: Introduce composable reg, ret and arg types. e52da8e4632f floppy: disable FDRAWCMD by default (From OE-Core rev: 90628b9bbcf4ed6f23e880248c92403b29ce20f3) Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 786e668bdda1181438cbe570fa1155ad3b7f06d9) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* cve-check: Allow warnings to be disabledRichard Purdie2022-06-071-1/+2
| | | | | | | | | | | | | When running CVE checks in CI we're usually not interested in warnings on the console for any CVEs present. Add a configuration option CVE_CHECK_SHOW_WARNINGS to allow this to be disabled (it is left enabled by default). (From OE-Core rev: 8fd6a9f521ea6b1e10c80fe33968943db30991ba) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 1054d3366ba528f2ad52585cf951e508958c5c68) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* cve-extra-exclusions: Add kernel CVEsRichard Purdie2022-06-071-0/+37
| | | | | | | | | | | | | | | | | | | | | For OE-Core our policy is to stay as close to the kernel stable releases as we can. This should ensure the bulk of the major kernel CVEs are fixed and we don't dive into each individual issue as the stable maintainers are much more able to do that. Rather than just ignore all kernel CVEs which is what we have been doing, list the ones we ignore on this basis here, allowing new issues to be visible. If anyone wishes to clean up CPE entries with NIST for these, we'd welcome than and then entries can likely be removed from here. (From OE-Core rev: 726ce5bf1ea64d31f523ec5aff905407480c1095) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 319d465d44328b5f062d2da0526c0e8b189b4239) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* cve-check: Only include installed packages for rootfs manifestErnst Sjöstrand2022-06-071-15/+54
| | | | | | | | | | | | | | | | | Before this the rootfs manifest and the summary were identical. We should separate the summary and rootfs manifest more clearly, now the summary is for all CVEs and the rootfs manifest is only for things in that image. This is even more useful if you build multiple images. (From OE-Core rev: 65498411d73e8008d5550c2d0a1148f990717587) Signed-off-by: Ernst Sjöstrand <ernstp@gmail.com> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 3b8cc6fc45f0ea5677729ee2b1819bdc7a441ab1) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* cve-check: Add helper for symlink handlingErnst Sjöstrand2022-06-071-21/+13
| | | | | | | | | | | (From OE-Core rev: af227e0c624c74ba90509829000cca607583e929) Signed-off-by: Ernst Sjöstrand <ernstp@gmail.com> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 5046d54df2c3057be2afa4143a2833183fca0d67) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* cve-check.bbclass: Added do_populate_sdk[recrdeptask].leimaohui2022-06-071-0/+1
| | | | | | | | | | | | As product, sdk should do cve check as well as rootfs. (From OE-Core rev: 637d6ff44bc17565edae5466addbbe251f0cdadc) Signed-off-by: Lei Maohui <leimaohui@fujitsu.com> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> (cherry picked from commit cc17753935c5f9e08aaa6c5886f059303147c07b) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libxslt: Mark CVE-2022-29824 as not applyingRichard Purdie2022-06-071-0/+4
| | | | | | | | | | | | We have libxml2 2.9.14 and we don't link statically against libxml2 anyway so the CVE doesn't apply to libxslt. (From OE-Core rev: 82f4186ec0b16d4c1d9a8612fc3b6c6701fee8ea) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit c6315d8a2a1429a0fb7563b1d6352ceee7bc222c) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* tiff: Add jbig PACKAGECONFIG and clarify CVE-2022-1210Richard Purdie2022-06-071-0/+4
| | | | | | | | | | | | | | | We never depended upon libjbig so this was never present. Add the PACKAGECONFIG to make this explict. CVE-2022-1210 is an issue in libjbig so we don't have a problem there, mark as such. (From OE-Core rev: 95f1c5d0bb7bc7cae2715d0c9b569fa369a64575) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 34e6a19f2430ee2fd0fec4bec1891e898a0d9766) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* vim: Upgrade 8.2.4912 -> 8.2.5034 to fix 9 CVEsRichard Purdie2022-06-071-2/+2
| | | | | | | | | | | | Address CVE-2022-1621, CVE-2022-1629, CVE-2022-1674, CVE-2022-1733, CVE-2022-1735 CVE-2022-1769, CVE-2022-1771, CVE-2022-1785, CVE-2022-1796 (From OE-Core rev: c703b970f614ede46f9d3e24bb33cb4eb77d38a2) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit fafce97bd440150ac5c586b53b887ee70a5b66bd) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* tiff: mark CVE-2022-1622 and CVE-2022-1623 as invalidRoss Burton2022-05-281-0/+3
| | | | | | | | | | These issues only affect libtiff post-4.3.0 but before 4.4.0, caused by 3079627e and fixed by b4e79bfa. (From OE-Core rev: 4eb0b7468383a1d0314b3bfd43ea37c95de464d9) Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* license_image.bbclass: Make QA errors fail the buildPeter Kjellerstedt2022-05-281-0/+2
| | | | | | | | | | | | | If, e.g., license-file-missing is added to ERROR_QA, then the build should fail if any licenses are missing. (From OE-Core rev: 72aa42425e456ab0210129df01d829465acadb6d) Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit dd91c4bec8335cab2bbd0b33caf50d314ca72bdc) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* sqlite3: upgrade 3.38.3 -> 3.38.5Alexander Kanavin2022-05-281-1/+1
| | | | | | | | | | | | | | | | | | | | Additional changes in version 3.38.4 (2022-05-04): Fix a byte-code problem in the Bloom filter pull-down optimization added by release 3.38.0 in which an error in the byte code causes the byte code engine to enter an infinite loop when the pull-down optimization encounters a NULL key. Forum thread 2482b32700384a0f. Other minor patches. See the timeline for details. Additional changes in version 3.38.5 (2022-05-06): Fix a blunder in the CLI of the 3.38.4 release. (From OE-Core rev: c762a5c97b61b4d560cda33ba4a7c329df0fc9f8) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit e1bd414792ae2576685b2a352a5cc93343f06985) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* mobile-broadband-provider-info: upgrade 20220315 -> 20220511Alexander Kanavin2022-05-281-2/+2
| | | | | | | | | | | (From OE-Core rev: bbfce5f1c2ec4cb22efdffb1be41d147f4fe1467) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit f14c8094e7a049ac1b04c45b76855d0503559932) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* mesa: upgrade 22.0.2 -> 22.0.3Alexander Kanavin2022-05-283-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Mesa 22.0.3 is a bug fix release New features: None Bug fixes: freedreno: fragile location packing can break cull/clip distance turnip: dEQP-VK.spirv_assembly.instruction.compute.float_controls.fp16.generated_args.* failures piglit ext_image_dma_buf_import.ext_image_dma_buf_import* regression piglit ext_image_dma_buf_import.ext_image_dma_buf_import* regression Grid Autosport via proton/vulkan: glitches on the grass on amdgpu, fine on amdgpu-pro [Bisected] r600: Big performance regression on some games Huge amount of anon_inode:sync_file file descriptor created anv regressions from commit 57445adc891 “anv: Re-enable CCS_E on TGL+” NIR validation failed after nir_opt_if intel: integer_mad_hi / integer_mad_sat / integer_mul_hi produce invalid results Aperture Desk Job rendering artifacts Intel TGL intel: integer_sub_sat produces stack corruption / OpISubBorrow compilation issue r300/rv530: “Black rendering” of Baldur’s Gate Dark Alliance in Xbox emulator CXBX-R under wine with Gallium Nine and RADEON_DEBUG=use_tgsi radv/aco: xfb bug Occasional flicker corruption in Rage 2, e.g. after loading, with ACO on RX 5700 XT RADV: Quake 2 RTX v1.6.0 Corrupted Graphics ‘../src/amd/common/ac_surface.c:1575: void ac_copy_dcc_equation(const struct radeon_info *, ADDR2_COMPUTE_DCCINFO_OUTPUT *, struct gfx9_meta_equation *): assertion “dcc->equation.gfx9.num_bits <= ARRAY_SIZE(equation->u.gfx9.bit)” failed’ (From OE-Core rev: 4bd58b513132cbc855df644faf8be3728c242ae9) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 2f5831ec66c6a7e7b0f21a63cc46307aa68c5b96) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libcgroup: upgrade 2.0.1 -> 2.0.2Alexander Kanavin2022-05-281-1/+1
| | | | | | | | | | | | | | | | Bug fix release: Fix extra spaces in configure.ac's --enable-bindings Fix potential segfault if there are more than 100 cgroup mount points (From OE-Core rev: 6588c45d6c39f3cd1a6a58a53086bee8908ff7cd) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 2139fd56da0d8e3769bcc0b337c446e7e4b98f90) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* gstreamer1.0-vaapi: upgrade 1.20.1 -> 1.20.2Alexander Kanavin2022-05-281-1/+1
| | | | | | | | | | | | | No changes in vaapi between 1.20.1 -> 1.20.2 (From OE-Core rev: 5b2f2ff633fcb5742ebaf309d86bba70c3eab398) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 423d901d58e7f14d65b657d2cc61245ed9210daa) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* gstreamer1.0: upgrade 1.20.1 -> 1.20.2Alexander Kanavin2022-05-281-1/+1
| | | | | | | | | | | | | | | | | | | | | Bug fix release: devicemonitor: clean up signal handlers and hidden providers list Leaks tracer: fix pthread_atfork return value check leading to bogus warning in log Rust plugins: Not picked up by the plugin loader on macOS Failed to use plugins of latest GStreamer version 1.20.x installed by brew on macOS ptpclock: Allow at least 100ms delay between Sync/Follow_Up and Delay_Req/Delay_Resp messages. Fixes problems acquiring initial sync with certain devices meson: Add -Wl,-rpath,${libdir} on macOS registry: skip Rust dep builddirs when searching for plugins recursively (From OE-Core rev: e779fb1773b2b6e63739e668cd892e196be224e8) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit bb113caee72db30124f6cf8aa12fbaa14277fab5) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* gstreamer1.0-rtsp-server: upgrade 1.20.1 -> 1.20.2Alexander Kanavin2022-05-281-1/+1
| | | | | | | | | | | | | | | | Bug fix release: rtspclientsink: fix possible shutdown deadlock in collect_streams() Minor spelling fixes (From OE-Core rev: cdafe69411554e5cdc835fe7b83afb39dab28d11) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit f6c2cb116bf41312673afbbd71076a2ca8f59cf0) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* gstreamer1.0-python: upgrade 1.20.1 -> 1.20.2Alexander Kanavin2022-05-281-1/+1
| | | | | | | | | | | | | | | Bug fix release: Fix build on systems without C++ compiler (From OE-Core rev: 5ce15470ae6957bb65a63762bb9170efb85a04b3) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 762c930a49022ee7f56e746d3e768087eafd2ac1) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* gstreamer1.0-plugins-ugly: upgrade 1.20.1 -> 1.20.2Alexander Kanavin2022-05-281-1/+1
| | | | | | | | | | | | | | | Bug fix release: x264enc: Don't try to fixate ANY allowed caps (From OE-Core rev: 038cbfa1ae1ae79d09991235c23188f9477e185f) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 49c5fdf15c70862c867bf7f17ed1f4ca57de2307) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* gstreamer1.0-plugins-good: upgrade 1.20.1 -> 1.20.2Alexander Kanavin2022-05-281-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | Bug fix release: deinterlace: silence unused-but-set werror from imported code qtdemux: fix leak of channel_mapping rtpopusdepay: missing sprop-stereo should not assume mono rtpjitterbuffer: Fix invalid memory access in rtp_jitter_buffer_pop() rtpptdemux: fix leak of caps when ignoring a pt rtpredenc: quieten warning about ignoring header extensions soup: Fix pre-processor macros in souploader for libsoup-3.0 twcc: Note that twcc-stats packet loss counts reordering as loss + add some logging video4linux2: Manual backports for RPi users wavparse: handle URI query in any parse state, fixing audio track selection issue in GES wavparse: Unset DISCONT buffer flag for divided into multiple buffers in push mode (From OE-Core rev: 9472f0fe643c34a70139fd3967564a7e6cc0ded0) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 3594cbc054d0f0eb3342282f8100a0285fc9d1fd) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* gstreamer1.0-plugins-base: upgrade 1.20.1 -> 1.20.2Alexander Kanavin2022-05-281-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bug fix release: appsrc: Clarify buffer ref semantics in signals documentation appsrc: fix annotations for bindings typefind: Skip extension parsing for data:// URIs, fixing regression with mp4 files serialised to data uris playbin3: various fixes playbin3: fix missing lock when unknown stream type in pad-removed cb decodebin3: fix collection leaks decodebin3: Don't duplicate stream selections discoverer: chain up to parent finalize methods in all our types to fix memory leaks glmixerbin: slightly better pad/element creation gltransformation: let graphene alloc its structures memory aligned ogg: fix possible buffer overrun rtpbasepayload: Don't write header extensions if there's no corresponding... rtpbasepayload: always store input buffer meta before negotiation rtpbasepayload: fix transfer annotation for push and push_list subparse: don't try to index string with -1 riff-media: fix memory leak after usage for g_strjoin() playbin/playbin3: Allow setting a NULL URI playsink: Complete reconfiguration on pad release. parsebin: Expose streams of unknown type pbutils: Fix wmv screen description detection subparse: don't deref a potentially NULL variable rawvideoparse: set format from caps in gst_raw_video_parse_set_config_from_caps videodecoder: release stream lock after handling gap events videorate: fix assertion when pushing last and only buffer without duration videorate: Revert "don't reset on segment update" to fix segment handling regressions gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution timer also for MinGW build (From OE-Core rev: 19e9c0b2ac92f9ffc3bcea8ce4761c81326ea4a7) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 905766e63a6159535b9da86c4f0af62956285199) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* gstreamer1.0-plugins-bad: upgrade 1.20.1 -> 1.20.2Alexander Kanavin2022-05-281-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bug fix release: av1parse: Fix several issues about the colorimetry. av1parse: fix up various possible logic errors dashsink: fix missing mutex unlock in error code path when failing to get content d3d11videosink: Fix for unhandled mouse double click events interlace: Also handle a missing "interlace-mode" field as progressive msdk: fix build with MSVC mxfdemux: Fix issues at EOS mxfdemux: Handle empty VANC packets nvh264dec, nvh265dec: Fix broken key-unit trick and reverse playback nvvp9sldec: Increase DPB size to cover render delay rvsg: fix cairo include tsdemux: Fix AC-4 detection in MPEG-TS tsdemux: Handle "empty" PMT gracefully va: pool: don't advertise the GST_BUFFER_POOL_OPTION_VIDEO_ALIGNMENT option any more v4l2codecs: Fix memory leak v4l2videodec: set frame duration according to framerate webrtcbin: Update documentation of 'get-stats' action signal webrtcbin: Check data channel transport for notifying 'ice-gathering-state' webrtcbin: Avoid access of freed memory wpe: Reintroduce persistent WebContext Build: use CMake to find some openssl and exr deps Fix multiple "unused-but-set variable" compiler warnings (From OE-Core rev: 8dca7bae0b16c7db820f0d7d60592a7d1d868a8d) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 70ff1c8f54bfb47307cce4d2cb731cc775cd7e21) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* gstreamer1.0-omx: upgrade 1.20.1 -> 1.20.2Alexander Kanavin2022-05-281-1/+1
| | | | | | | | | | | | | No changes in omx from 1.20.1 -> 1.20.2 (From OE-Core rev: 2f8bf9e800e5fa893c89cd4d8b9a63f02db842b1) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 2f9b5b0d8274b5a4990c93edb30c3170de3f87a4) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* gstreamer1.0-libav: upgrade 1.20.1 -> 1.20.2Alexander Kanavin2022-05-281-1/+1
| | | | | | | | | | | | | | | | | | Bug fix only release: video decoders: fix frame leak on negotiation error Fix build on systems without C++ compiler avviddec: Remove vc1/wmv3 override (fixing crash with FFmpeg 5 Segfaults on ASF/WMV files with FFMPEG 5.0+ (From OE-Core rev: b796e337ac4ce189525b5af942226c0b4ab42ca3) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 208ddca121bb213a9e79d21b448547df58b9a511) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* gst-devtools: upgrade 1.20.1 -> 1.20.2Alexander Kanavin2022-05-281-1/+1
| | | | | | | | | | | | | | | The second 1.20 bug-fix release (1.20.2) was released on 2 May 2022. This release only contains bugfixes and it should be safe to update from 1.20.x. (From OE-Core rev: a16fd1683d5518096c5b0aa651fcb4b2afe0f2ff) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit b4c976ea07ff276ae705110769c8e9741827615b) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* go: upgrade 1.17.8 -> 1.17.10Steve Sakoman2022-05-288-3/+3
| | | | | | | | | | | | | | go1.17.9 (released 2022-04-12) includes security fixes to the crypto/elliptic and encoding/pem packages, as well as bug fixes to the linker and runtime. go1.17.10 (released 2022-05-10) includes security fixes to the syscall package, as well as bug fixes to the compiler, runtime, and the crypto/x509 and net/http/httptest packages. (From OE-Core rev: bcbfff47e212627b355c54ab782f38708ed12d4c) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* oeqa/selftest/cve_check: add tests for recipe and image reportsRoss Burton2022-05-281-1/+76
| | | | | | | | | | | | | | | | Add a test to verify that the JSON reports are generated correctly for both single recipe builds and image builds. More tests are needed, but this is better than nothing. (From OE-Core rev: 61e8e3c7f0b7161ff678a0ef4992261c7a1b96b0) Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit df0f35555b09c4bc75470eb45ec9c74e6587d460) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* pcre2: CVE-2022-1586 Out-of-bounds readHitendra Prajapati2022-05-282-2/+61
| | | | | | | | | | | | | | Backport from https://github.com/PCRE2Project/pcre2/commit/50a51cb7e67268e6ad417eb07c9de9bfea5cc55a CVE-2022-1586: pcre2: Out-of-bounds read in compile_xclass_matchingpath in pcre2_jit_compile.c. (From OE-Core rev: fb6c980105ffd0262517299ab366218c61cc0665) Signed-off-by: Hitendra Prajapati <hprajapati@mvista.com> Signed-off-by: Jeremy A. Puhlman <jpuhlman@mvista.com> (cherry picked from commit 7519eb1cb624bb576cfe60f7470d40c566818ac3) Signed-off-by: Jeremy A. Puhlman <jpuhlman@mvista.com> Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* selftest/imagefeatures/overlayfs: Always append to DISTRO_FEATURESRichard Purdie2022-05-252-9/+9
| | | | | | | | | | | | | Using += unintentionally removes all other entries from DISTRO_FEATURES if DISTRO_FEATURES was set by ?= such as by poky.conf. This reduces sstate reusage on the autobuilder. Fix this to speed up builds. (From OE-Core rev: d3beac233558242ab6895e9ba8536a6df9df8eb3) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 124b82c32c4545bb216a8249954817f692f9795a) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* staging: Fix rare sysroot corruption issueRichard Purdie2022-05-251-0/+24
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | We've seen failures on the autobuilder in oe-selftest where things which should be in the sysroot aren't. The exact steps to reproduce the exact failure are elusive and probably hash equivalance dependency but this set of steps does reproduce corruption which is probably of the same origin: Add DISTRO_FEATURES += "systemd" bitbake dbus Remove DISTRO_FEATURES += "systemd" bitbake dbus bitbake dbus -c clean bitbake dbus -c configure Add DISTRO_FEATURES += "systemd" bitbake quilt-native bitbake dbus -c populate_sysroot Remove DISTRO_FEATURES += "systemd" bitbake dbus -c compile Where dbus will now fail as the compiler was no longer in the sysroot. This works by clearing x11 and other values out of DISTRO_FEATURES so the x11 dependencies are removed from the sysroot. The configure stamp remains valid so when the original configuration is restored, it becomes valid again but a load of the sysroot disappeared and build failures result. Fix this by removing stamps when we remove things from the sysroot. Depends on a change to bitbake build.py to add the clean_stamp API. [YOCTO #14790] (From OE-Core rev: 927837e29a1e79e8eeecaacc6de6b8f9e6aa6f70) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit f4b1cecc82435b71135d7b65f6ea67be0e4f8c66) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* classes: rootfs-postcommands: add skip option to overlayfs_qa_checkClaudius Heine2022-05-252-3/+27
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The overlayfs_qa_check checks if the current root file system has a mount configured for each overlayfs, when the overlayfs class is used. However there are certain instances where this mount point is created at runtime and not static in a fstab entry or systemd mount unit. One such case would be if overlayfs-etc is used, where the device is mounted in the preinit script and not via a mount unit or fstab entry. However there are other possibilities for this as well, like startup scripts that support a dynamic partition layout. For instance when systemd-repart is used. This adds the `OVERLAYFS_QA_SKIP` variable, which allows to define QA skips via its flags. In principle it supports multiple QA skip flags separated by whitespace, but only one (`mount-configured`) is implemented here. To skip this QA check simply add `mount-configured` to the flag of `OVERLAYFS_QA_SKIP` with the same name. For instance if a overlayfs is configured as: OVERLAYFS_MOUNT_POINT[data] = "/data" Skipping this QA check can be done by setting: OVERLAYFS_QA_SKIP[data] = "mount-configured" Also add a testcase and fix a typo (fstat -> fstab). (From OE-Core rev: 34b6d6b5f078c6948e53815af3c7b61de43d851c) Signed-off-by: Claudius Heine <ch@denx.de> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 2ce9173169a2a86392c4a85fe9be7fbbd7353b7f) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* binutils: Bump to latest 2.38 release branchSamuli Piippo2022-05-251-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fixes Qt build with GCC 12.1. Brings following fixes * 3d549e5ccc0 PR29142, segv in ar with empty archive and libdeps specified * c473aa1b9d8 M68K: avoid quadratic slowdlow in label alignment check * 8d1187516e3 Adjust ld ctf test for 32-bit targets * 9c67f6382ac x86: Properly handle function pointer reference * 9a01457e02e s390: Add DT_JMPREL pointing to .rela.[i]plt with static-pie * 82a5bb730a1 s390: Avoid dynamic TLS relocs in PIE * d54081c642a LoongArch: Update ABI eflag in elf header. * fb4d148004f IBM zSystems: Add support for z16 as CPU name. * 975b5540232 libctf, ld: diagnose corrupted CTF header cth_strlen * 99852365513 dlltool: Use the output name as basis for deterministic temp prefixes * 210bf1d6225 Updated Serbian (for binutils/) and Russian (for gprof/) translations * fcf60fe8482 PR28959, obdump doesn't disassemble mftb instruction * e4a35c73196 PowerPC64 DT_RELR relative reloc addresses * 7183434818e Work around gcc-4 warnings in elf64-ppc.c (From OE-Core rev: cefc45625535972d20b252ed0a2f497dff7d5fe5) Signed-off-by: Samuli Piippo <samuli.piippo@qt.io> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit c007a7251e697836a29bd1aebe49d4f2433a5e6e) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* librepo: upgrade 1.14.2 -> 1.14.3wangmy2022-05-251-1/+1
| | | | | | | | | | | | | | | | | | Minor bug fix release with a single commit: Make error messages about repodata and rpm mismatch more user friendly This should help users to recognize the error is not on dnf side but instead on the server (in the repository). (From OE-Core rev: cd16ecd4412708731968b25585d85217fa83858b) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 2b41ae2900dc308e005d3f0e8a4d3912be35bc01) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* mmc-utils: upgrade to latest revisionAlexander Kanavin2022-05-251-1/+1
| | | | | | | | | | | | | | | | | | | | | | Fixes build error: when using Linux 5.4 kernel: In function read_extcsd: mmc_cmds.c:72:18: error: MMC_BLOCK_MAJOR undeclared (first use in this function) This SRCREV bump includes two commits: b7e4d5a mmc-utils: Add General command CMD56 read support 0d493fb mmc-utils: Fix build error MMC_BLOCK_MAJOR undeclared (From OE-Core rev: a0f25374ea938bcc82396357bd029abc12a6ef0c) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit d98b06c9c6f480de1e5167bfe8392e39300fc02c) Signed-off-by: Ming Liu <liu.ming50@gmail.com> Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* python3: fix reproducibility issue with python3-coreSteve Sakoman2022-05-251-0/+5
| | | | | | | | | | | | | | | traceback.cpython-310.pyc is non-deterministic due to 'frozenset' being written without strict ordering. For now let's just not install the problematic file. (From OE-Core rev: 00b62965bd4c9eb6fd8c016f83126da2a107a5c5) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 4b1f0f7542abcb8606688c974695a6c8a142e7a2) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* cve-check: Fix report generationMarta Rybczynska2022-05-251-8/+10
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The addition of summary output caused two issues: error when building an image and the fact that JSON output was generated even when CVE_CHECK_FORMAT_JSON. When generating an image it caused an error like: ERROR: core-image-minimal-1.0-r0 do_rootfs: Error executing a python function in exec_func_python() autogenerated: The stack trace of python calls that resulted in this exception/failure was: File: 'exec_func_python() autogenerated', lineno: 2, function: <module> 0001: *** 0002:cve_check_write_rootfs_manifest(d) 0003: File: '/home/alexk/poky/meta/classes/cve-check.bbclass', lineno: 213, function: cve_check_write_rootfs_manifest 0209: 0210: link_path = os.path.join(deploy_dir, "%s.json" % link_name) 0211: manifest_path = d.getVar("CVE_CHECK_MANIFEST_JSON") 0212: bb.note("Generating JSON CVE manifest") *** 0213: generate_json_report(json_summary_name, json_summary_link_name) 0214: bb.plain("Image CVE JSON report stored in: %s" % link_path) 0215:} 0216: 0217:ROOTFS_POSTPROCESS_COMMAND:prepend = "${@'cve_check_write_rootfs_manifest; ' if d.getVar('CVE_CHECK_CREATE_MANIFEST') == '1' else ''}" Exception: NameError: name 'json_summary_name' is not defined The fix is to pass the d variable to the pure python function generate_json_report to get correct values of variables and add conditions for the JSON output where needed. In addition clarify the message presenting the summary JSON file, which isn't related to an image. Uses partial fixes from Alex Kiernan, Ernst Sjöstrand (ernstp), and Davide Gardenal. Fixes: f2987891d315 ("cve-check: add JSON format to summary output") (From OE-Core rev: 2fcc696e27d7f8c70ba60f5c7de8c48030a938d3) Signed-off-by: Marta Rybczynska <marta.rybczynska@huawei.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 9015dec93233c7d45fd0c9885ff5d4ec23ad377d) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* curl: Backport CVE fixesRobert Joslyn2022-05-2514-1/+1284
| | | | | | | | | | | | | | | | | | | Backport patches to address the following CVEs: * https://curl.se/docs/CVE-2022-22576.html * https://curl.se/docs/CVE-2022-27775.html * https://curl.se/docs/CVE-2022-27776.html * https://curl.se/docs/CVE-2022-27774.html * https://curl.se/docs/CVE-2022-30115.html * https://curl.se/docs/CVE-2022-27780.html * https://curl.se/docs/CVE-2022-27781.html * https://curl.se/docs/CVE-2022-27779.html * https://curl.se/docs/CVE-2022-27782.html (From OE-Core rev: b83c7ae43c372c1870d13ae25ebfad9c68a0928d) Signed-off-by: Robert Joslyn <robert.joslyn@redrectangle.org> Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* bitbake: build: Add clean_stamp API function to allow removal of task stampsRichard Purdie2022-05-251-5/+9
| | | | | | | | | | | | | | | | | | We currently have no API to be able to remove all the potential stamps of a task. It is unusual to need to do this, particularly as you could race against other things happening in the system but we do have a use case for this in cleaning up sysroots in OE-Core. The alternative is to mess with CLEANMASK in OE-Core but that is just going to add potential for errors. We need the first part of the make_stamp() function so separate that out so it can be called seperately. (Bitbake rev: 494fcfcb7c4469915c67f544997104d81c417266) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 4d671504a25863018ac51c21c005cef0a4d8f05c) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* bitbake: data: Do not depend on vardepvalueexclude flagTomasz Dziendzielski2022-05-251-0/+2
| | | | | | | | | | | | | | | | | If SRC_URI contains python function that extends vardepvalueexclude its value is being tracked by sstate-cache, which can lead to rebuilds if value is set dynamically (for example gerrit replicas). Return empty string if vardepvalueexclude is checked to fix this behaviour. (Bitbake rev: 943701ee8cb55307996545f0237721413edfb168) Signed-off-by: Tomasz Dziendzielski <tomasz.dziendzielski@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit f5f9a7b89a7d8321f03184e61ad6d5ed8d0f840e) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* bitbake: fetch2/osc: Small fixes for osc fetcherGunjan Gupta2022-05-251-6/+10
| | | | | | | | | | | | | | | | | | | | | | The current fetcher seemed to have some issues that made it difficult when trying to use the same. This patch fixes the following * Make consistent use of the path that needs to be used as oscdir * The path mentioned in os.access in download function was not same as ud.moddir which would result into invoking of fetch command instead of update command even if directory already existed * Before creating oscrc, make sure oscdir exists and create it if it does not exist * Updated the configuration to use apiurl and added a new parameter to control whether http or https needs to be used to connect to apiurl (Bitbake rev: 8ac6e09447d884e658c556388d6014279c50f202) Signed-off-by: Gunjan Gupta <viraniac@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 3ec78686f3c0ea2304097b86a965f9be4b0cb879) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* base-passwd: Disable shell for default usersDavide Gardenal2022-05-202-0/+58
| | | | | | | | | | | | | | | | Change the shell of all global static users other than root (which retains /bin/sh) and sync (as /bin/sync is rather harmless) to /sbin/nologin (as /usr/sbin/nologin does not exist in openembedded) Upstream-Status: Backport [https://launchpad.net/ubuntu/+source/base-passwd/3.5.30] (From OE-Core rev: ec9e9497730f0a9c8ad3d696c8cdcec06267aacf) Signed-off-by: Jiaqing Zhao <jiaqing.zhao@linux.intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit ba3bc4d7a0a39a96f6e8d340e1b2654d47475f07) Signed-off-by: Davide Gardenal <davide.gardenal@huawei.com> Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* strace: Don't run ptest as "nobody"Jiaqing Zhao2022-05-201-5/+1
| | | | | | | | | | | | | strace ptests can run successfully with root user, there is no need to run as "nobody". The ptest results are the same. (From OE-Core rev: c20a5f83e9f0483f5458513eeaaec60436dd9d68) Signed-off-by: Jiaqing Zhao <jiaqing.zhao@linux.intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 5ab213178c011152e29dfb0a80251c5e5ab79900) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* sed: Specify shell for "nobody" user in run-ptestJiaqing Zhao2022-05-201-1/+1
| | | | | | | | | | | | | | | ptest testsuite/panic-tests.sh of sed need to be run as a non-root user so that the expected "sed: couldn't open temporary file <filename>: Permission denied" error can be generated. After disabling default shell for "nobody", a shell needs to be specified for running ptest. (From OE-Core rev: 175001feb3b0e5b29cba94a8cdac18b429f84645) Signed-off-by: Jiaqing Zhao <jiaqing.zhao@linux.intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit c6d7216772f76af4429fdaaca518858cf014293f) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* sanity: Don't warn about make 4.2.1 for mintRichard Purdie2022-05-201-1/+1
| | | | | | | | | | | | | | Whilst not a supported distro, we can exclude this from the warning as it is debian derived and doesn't have the issue. (From OE-Core rev: eeba7fdc2878b3c1e90c0babbcaf7711a2e42fc1) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit b561e40f906737eec81245c6a12e78501311f667) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* image.bbclass: allow overriding dependency on virtual/kernel:do_deployDmitry Baryshkov2022-05-201-1/+6
| | | | | | | | | | | | | | | | | Since the commit fe26b2379ecd ("image.bbclass: Depend on virtual/kernel:do_deploy"), the image.bbclass made building images depend on virtual/kernel. For some images, including small initramfs, this is not the case. Allow overriding this dependency in case developers knows what they are doing. (From OE-Core rev: 4caf244256e150fea19cd4f2ca04c13d95d49fee) Signed-off-by: Dmitry Baryshkov <dmitry.baryshkov@linaro.org> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 55875f68212657167ac6dc26f5fd93eac24b098e) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* overlayfs: add docs about skipping QA check & service dependenciesClaudius Heine2022-05-201-3/+15
| | | | | | | | | | | | | | | | | | | | | Add some documentation about skipping the QA check related to missing fstab entries or mount units for base mount points where the overlayfs is mounted from. Also add a short paragraph about adding a systemd unit dependency to services in recipes, so that they are started only after the overlayfs is mounted and ready. No functional change. (From OE-Core rev: 4611cbab3e9593937b64b6db48ef269de37c74db) Signed-off-by: Claudius Heine <ch@denx.de> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 7adc49fa6fdbdf118f74e95193e80ae7ef019e27) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* e2fsprogs: update upstream statusAryaman Gupta2022-05-201-1/+1
| | | | | | | | | | | | Status updated but using the existing patch since it is functionally identical. (From OE-Core rev: 9f2d85b383daeca5bbed601e4ff9ff01a8c3403f) Signed-off-by: Aryaman Gupta <aryaman.gupta@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit aab854a94e73e5035eb82fe1aafe970aaa296a54) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* wic/plugins/rootfs: Fix permissions when splitting rootfs folders across ↵Felix Moessbauer2022-05-201-1/+4
| | | | | | | | | | | | | | | | | | | | | partitions This patches makes locating the file database containing the file and folder usernames and permissions more reliable. In addition to locating it relative to the partition directory, we also try to locate it relative to the IMAGE_ROOTFS. Prior to this patch, the database was not found when using --rootfs-dir=${IMAGE_ROOTFS}/<x> in the WIC script, leading to erronous file permissions and ownership. (From OE-Core rev: a5406116ef647ff0cabc6b9466aa0e34e6a20750) Signed-off-by: Felix Moessbauer <felix.moessbauer@siemens.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 09e18ee246da8b56f446c4db548fb9c7e895142b) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
generated by cgit v1.2.3-54-g00ecf (git 2.39.0) at 2025-08-19 20:52:50 +0000