The copyright for the software has been transferred to Unicode Inc from IBM,
but the terms are same.
libiculx and libicule are no longer produced as they depend on an external
package icu-le-hb (previous versions had an option of using an internal
implementation which now has been dropped). I have verified that icu
dependencies in oe-core and meta-oe still build.
Signed-off-by: Alexander Kanavin <alexander.kanavin@linux.intel.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
Yi Zhao [Mon, 28 Nov 2016 09:55:40 +0000 (17:55 +0800)]
libxml2: Security fix CVE-2016-5131
CVE-2016-5131 libxml2: Use-after-free vulnerability in libxml2 through
2.9.4, as used in Google Chrome before 52.0.2743.82, allows remote
attackers to cause a denial of service or possibly have unspecified
other impact via vectors related to the XPointer range-to function.
Martin Vuille [Sun, 27 Nov 2016 20:02:37 +0000 (15:02 -0500)]
terminal.py: Pass string instead of bytes to ExecutionError to avoid exception
Based on run() in bitbake/lib/bb/process.py, ExecutionError() expects strings
not bytes. Passing bytes results in a "TypeError: Can't convert 'bytes' object
to str implicitly" exception.
Fixes Bug 10729
Signed-off-by: Martin Vuille <jpmv27@yahoo.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
Zhixiong Chi [Mon, 28 Nov 2016 08:12:04 +0000 (16:12 +0800)]
tiff: Security fix CVE-2016-9540
tools/tiffcp.c in libtiff 4.0.6 has an out-of-bounds write on tiled
images with odd tile width versus image width. Reported as MSVR 35103,
aka "cpStripToTile heap-buffer-overflow."
Aníbal Limón [Thu, 24 Nov 2016 21:06:04 +0000 (15:06 -0600)]
perl: Upgrade to 5.24.0
Configuration changes,
Simple changes was made to bump version and api version, related to
floating point handling now the configuration needs the inf, mantisa
and nan bytes.
The new version comes with the support of API calls like memmem and
{new,free,use}locale also structure for handle siginfo supported by
glibc and musl.
Finally use64bit{int, all} was disable because the previous
configure_args don't come with them and cases some tests to fail
related to bignum's and shared memory respectively. This doesn't
means that perl couldn't use 64-bit data types, it means that don't
stores by default into a 64 bit that is good for embedded space
purposes.
Modules changes,
Some core modules are now deprecated in order to use the core ones
like version-vpp and version-regex inside module-extutils-makemaker.
For full review see perl-rdepends.inc file.
Patches removed, comes with the upgrade now:
- perl/perl-remove-nm-from-libswanted.patch
- perl/perl-fix-CVE-2015-8607.patch
- perl/perl-fix-CVE-2016-2381.patch
Test,
The upgrade was test using ptest the suite is fixed now.
The pod2man and pod2text installation required now for some tests.
Buildhistory was use to review the changes and only diff changes
related to modules commented above.
Signed-off-by: Aníbal Limón <anibal.limon@linux.intel.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
Mark Asselstine [Fri, 25 Nov 2016 04:17:14 +0000 (23:17 -0500)]
systemd.bbclass: don't block on service restart
The current class works fine when a recipe uses SYSTEMD_AUTO_ENABLE
'enable' and has no on device pkg_postinst(), ie when the postinst is
run as part of rootfs creation. However, when there is a component of
pkg_postinst() that is run on device the 'systemctl restart' is run as
part of the run_postinsts.service at boot. This results in the boot
spinning indefinitely with:
[ *** ] A start job is running for Run pending postinsts (7s / no limit)
The issue could potentially be that the packages service has an
'After' clause which comes later in the boot, beyond
run_postinsts.service, creating a chicken before the egg
scenario. Even service files without an 'After' clause cause this
situation however. Despite this not being the cause of the issue this
fix will prevent this scenario from happenning.
Using strace we are able to find that during boot, when
run_postinsts.service is running attempting to start or restart any
service will result in the call get stuck on poll(). Since the
run_postinsts.service does not monitor the outcome of the call to
restart we can work around this by using '--no-block'.
Signed-off-by: Mark Asselstine <mark.asselstine@windriver.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
Patrick Ohly [Thu, 24 Nov 2016 09:51:13 +0000 (10:51 +0100)]
qemuboot.bbclass: do not hook into do_rootfs
Writing qemuboot.conf in write_qemuboot_conf() does not modify the
rootfs and thus conceptually shouldn't be executed as part of rootfs
creation.
Running it as separate task is cleaner and fixes the problem of
missing qemuboot.conf files for meta-swupd virtual images; those
images replace do_rootfs and ROOTFS_POSTPROCESS_COMMANDs don't run at
all.
The task gets added such that it runs roughly at the same time as
before. Probably it doesn't actually need to depend on do_rootfs, but
this way we don't write a useless qemuboot.conf in cases where
do_rootfs fails.
Signed-off-by: Patrick Ohly <patrick.ohly@intel.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
Samuli Piippo [Wed, 23 Nov 2016 14:36:37 +0000 (16:36 +0200)]
mesa: make sure GLES3 headers are installed
Since there is no libgles3-mesa package that would pull in the headers,
add dependency to libgles2-mesa-dev. Now there no need to manually add
GLES3 headers to image or toolchain.
Signed-off-by: Samuli Piippo <samuli.piippo@qt.io> Signed-off-by: Ross Burton <ross.burton@intel.com>
Ross Burton [Thu, 24 Nov 2016 20:37:48 +0000 (20:37 +0000)]
insane: rewrite the expanded-d test as a QAPKGTEST
Instead of being executed for every file in every package, this is now just
called for each package. It is also now correctly called for packages which
don't have any content but do have postinst scripts.
[ YOCTO #10711 ]
Signed-off-by: Ross Burton <ross.burton@intel.com>
Ross Burton [Thu, 24 Nov 2016 20:26:44 +0000 (20:26 +0000)]
insane: add QAPKGTEST, a package-wide equivilant to QAPATHTEST
QAPATHTEST defines a function that is executed for every file in every package.
For tests which just need to look at the datastore this is massive overkill.
Add QAPKGTEST, which is invoked for each package in the recipe.
Signed-off-by: Ross Burton <ross.burton@intel.com>
Ross Burton [Thu, 24 Nov 2016 11:24:26 +0000 (11:24 +0000)]
insane: fix expanded-d test
This test should be looking for the expanded value of ${D} in the expanded value
of pkg_postinst and so on, but one of the getVar() calls was passing
expand=False so the test would never be true.
Signed-off-by: Ross Burton <ross.burton@intel.com>
Ross Burton [Wed, 23 Nov 2016 13:33:39 +0000 (13:33 +0000)]
gnomebase: remove gnome-common-native DEPENDS
gnome-common is deprecated upstream and an increasingly smaller fraction of
GNOME packages still use it. To avoid adding it redundantly to DEPENDS, remove
it from the class.
Signed-off-by: Ross Burton <ross.burton@intel.com>
Ross Burton [Wed, 23 Nov 2016 13:29:45 +0000 (13:29 +0000)]
meta: add explicit gnome-common dependencies
As gnome-common is deprecated it is being removed from GNOME packages, so to
avoid redundantly pulling it in as a build dependency to every package it will
be removed from gnomebase.bbclass
Add it explicitly to the recipes that still need it so these still build.
Signed-off-by: Ross Burton <ross.burton@intel.com>
Fabio Berton [Mon, 21 Nov 2016 19:58:52 +0000 (17:58 -0200)]
pigz: Update to version 2.3.4
- Change SRC_URI to fetch sources from Github archives. Pigz official
site maintains only the latest tarball version and Github have all
versions avaiable to download.
- Remove patch link-order.patch. The following commit fix this issue:
https://github.com/madler/pigz/commit/c3f91d1a12a6f
Signed-off-by: Fabio Berton <fabio.berton@ossystems.com.br> Signed-off-by: Ross Burton <ross.burton@intel.com>
Joe Slater [Mon, 21 Nov 2016 19:04:20 +0000 (11:04 -0800)]
libxml-parser-perl: add expat/Makefile dependency
The file Expat.bs (which is empty!) is created by BOOTSTRAP,
but is deleted by INST_DYNAMIC. Make sure we are not creating
and deleting it at the same time.
Signed-off-by: Joe Slater <jslater@windriver.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
Diego Rondini [Mon, 21 Nov 2016 16:22:18 +0000 (16:22 +0000)]
xinput-calibrator: use up-to-date git version
Use up-to-date version from git. While currently there aren't official releases
newer than 0.7.5, quite some new features have been added in git, for example
the ability to disable the calibration screen timeout.
Additionally depend on libxrandr, so that xinput_calibrator can use the library
directly to obtain the geometry, instead of parsing the output of the xrandr
binary (parsing of the output can easily break, for example when the output
name is made up of two words instead of one).
Signed-off-by: Diego Rondini <diego.ml@zoho.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
André Draszik [Fri, 18 Nov 2016 16:06:49 +0000 (16:06 +0000)]
ofono: update 1.18 -> 1.19
In particular, this fixes a crash on shutdown.
From upstream's ChangeLog:
ver 1.19:
Fix issue with DHCP parsing and Huawei modems.
Fix issue with detecting Huawei E3372 modem.
Fix issue with handling serving cell info.
Fix issue with handling SIM SC facility lock.
Fix issue with Android RIL PIN retry logic.
Fix issue with Android RIL and RAT handling.
Add support for Android RIL cell broadcast.
Add support for SoFIA 3GR thermal management.
Signed-off-by: André Draszik <adraszik@tycoint.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
Nathan Lynch [Thu, 17 Nov 2016 20:49:51 +0000 (14:49 -0600)]
busybox: enable fractional sleep arguments
Fractional durations (e.g. 0.5s) for the sleep command are useful and
not terribly uncommon in practice, especially in scripts associated
with test cases (e.g. mdadm, lttng-tools). Enable FEATURE_FLOAT_SLEEP
by default in order to avoid having to patch every instance of a
script using a fractional sleep.
The busybox binary gains a few hundred bytes in text (armv5e shown):
$ size -x busybox.nosuid.{before,after}
text data bss dec hex filename
0x89382 0x71d 0x2250 572655 8bcef busybox.nosuid.before
0x8954e 0x721 0x2250 573119 8bebf busybox.nosuid.after
Signed-off-by: Nathan Lynch <nathan_lynch@mentor.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
kgit-scc: dont mention meta-repo in help ; it doesnt exist
Signed-off-by: Paul Gortmaker <paul.gortmaker@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
commit 08463d684c1952e74c25344cddace4c3f24c739d
Author: Bruce Ashfield <bruce.ashfield@windriver.com>
Date: Mon Oct 31 14:30:12 2016 -0400
scc: exit on error
If there is an error in the processing of the input files, scc
should exit and inform the user.
scc is executed on a combined/preprocessed file and as a result
it doesn't have the granularity to see each input file individually.
Rather than moving preprocessing into scc (from spp), we can trap
the line number of the error and dump context around the line.
This gives the user a pointer to the input file and the specific
line that caused the problem.
Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
commit bf99953e8ac14cee653e559f2d4a6022c847a182
Author: Bruce Ashfield <bruce.ashfield@windriver.com>
Date: Fri Oct 28 21:23:27 2016 -0400
kgit-meta: always checkout branches on branch commands
During a tree generation we must always make the branch active when
we see any kind of branch command. This ensures that any subsequent
patches are applied in the proper context.
Previously, only branch creation was changing the active branch, and
this mean that tree generation was not determinstic and relied
on the order of processing to generate a correct tree.
Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
]
Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
Bruce Ashfield [Wed, 16 Nov 2016 14:24:33 +0000 (09:24 -0500)]
linux-yocto/4.8: update from v4.8.6 -> v4.8.8
Updating to the korg -stable release 4.8.8. The short log change
summary follows:
61385cc1db42 Linux 4.8.8 8ed841d6c045 scsi: megaraid_sas: fix macro MEGASAS_IS_LOGICAL to avoid regression 32f60e9b621f scsi: megaraid_sas: Fix data integrity failure for JBOD (passthrough) devices eb2ca7aac349 usb: dwc3: gadget: properly account queued requests 38db26fb3ae5 arch/powerpc: Update parameters for csum_tcpudp_magic & csum_tcpudp_nofold a143c6022cef packet: on direct_xmit, limit tso and csum to supported devices a6289d9ac3fe ip6_tunnel: Update skb->protocol to ETH_P_IPV6 in ip6_tnl_xmit() c9e086b9009a sctp: validate chunk len before actually using it 5a37dce1b679 net sched filters: fix notification of filter delete with proper handle d46b19687fec net: ipv6: Do not consider link state for nexthop validation eb77db88ea11 macsec: Fix header length if SCI is added if explicitly disabled 027ab3b8ee5a netvsc: fix incorrect receive checksum offloading b75edf27a6c3 udp: fix IP_CHECKSUM handling 5ee356021c42 sctp: fix the panic caused by route update d90cbfaf5439 net: sctp, forbid negative length 64774617da37 net: fec: Call swap_buffer() prior to IP header alignment c6c82c2b707e ipv4: use the right lock for ping_group_range 8418193f7052 ipv4: disable BH in set_ping_group_range() 23c110c4cdbc net: add recursion limit to GRO d3bbd04b92fd net: core: Correctly iterate over lower adjacency list fc5722f8f8f2 rtnetlink: Add rtnexthop offload flag to compare mask 4ac3ca8c2933 switchdev: Execute bridge ndos only for bridge ports 63d82a2cbd0c bridge: multicast: restore perm router ports on multicast enable e9a5921c393f net: pktgen: remove rcu locking in pktgen_change_name() 2eeb5735dd04 net/mlx4_en: fixup xdp tx irq to match rx 27bb6e31d32d IB/ipoib: move back IB LL address into the hard header f280126ec8d8 ipv6: correctly add local routes when lo goes up 0f3e77623916 ip6_tunnel: fix ip6_tnl_lookup a148a818df84 net: phy: Trigger state machine on state change and not polling. 2a9099899a6a ipv6: tcp: restore IP6CB for pktoptions skbs 50b43ad1dce6 net_sched: reorder pernet ops and act ops registrations dac04913ee27 drivers/ptp: Fix kernel memory disclosure 3f841d1555ad netlink: do not enter direct reclaim from netlink_dump() 5086cadf8fa4 packet: call fanout_release, while UNREGISTERING a netdev 6fff1319fdac net: Add netdev all_adj_list refcnt propagation to fix panic 9caee42c800e net/sched: act_vlan: Push skb->data to mac_header prior calling skb_vlan_*() functions c002dfd8adaa net: pktgen: fix pkt_size ff1b27c31706 net: fec: set mac address unconditionally 567aeca9fbb7 Linux 4.8.7 1bf121d3b234 HID: usbhid: add ATEN CS962 to list of quirky devices 05a833d4b051 cpufreq: intel_pstate: Set P-state upfront in performance mode c89771511deb ubi: fastmap: Fix add_vol() return value test in ubi_attach_fastmap() 591bf1362e9e btrfs: qgroup: Prevent qgroup->reserved from going subzero 0c879624701d kvm: x86: Check memopp before dereference (CVE-2016-8630) 725a92be3926 ARM: fix oops when using older ARMv4T CPUs e339609bf377 tty: vt, fix bogus division in csi_J 4a22930a74ac v4l: vsp1: Prevent pipelines from running when not streaming 59f9693a170a usb: musb: Fix hardirq-safe hardirq-unsafe lock order error 086ac9180437 usb: chipidea: host: fix NULL ptr dereference during shutdown 07bae478e1c1 usb: dwc3: Fix size used in dma_free_coherent() fedede0963c4 pwm: Unexport children before chip removal 7b4b77b9566d omapfb: fix return value check in dsi_bind() a3e55d6342b2 video: fbdev: pxafb: potential NULL dereference on error 13d0f5b3a399 uapi: add missing install of sync_file.h db5025bd08ef UBI: fastmap: scrub PEB when bitflips are detected in a free PEB EC header cc94524e8940 netfilter: xt_NFLOG: fix unexpected truncated packet 720a40113e78 i2c: mark device nodes only in case of successful instantiation f7d8d44a68de drm: i915: Wait for fences on new fb, not old 1cefe4cb4f8c drm/i915/fbc: fix CFB size calculation for gen8+ 809e9e6fc390 drm/i915: Clean up DDI DDC/AUX CH sanitation ba0a959e0334 drm/i915: Respect alternate_aux_channel for all DDI ports 426a724c9972 drm: Release reference from blob lookup after replacing property 5064a6a05387 drm/dp/mst: Check peer device type before attempting EDID read e6fcf953a995 drm/i915/gen9: fix watermarks when using the pipe scaler 0f7f9c456380 drm/i915/gen9: fix DDB partitioning for multi-screen cases 0cc98b5963f8 drm/fb-helper: Keep references for the current set of used connectors 14f4a463dc78 drm/fb-helper: Fix connector ref leak on error 6222f1e0b9ef drm/fb-helper: Don't call dirty callback for untouched clips 7290da41b8da drm/nouveau/acpi: fix check for power resources support fd5f9e1e28cb drm/radeon: drop register readback in cayman_cp_int_cntl_setup e136de5d7331 drm/radeon/si_dpm: workaround for SI kickers fe777e7a595c drm/radeon/si_dpm: Limit clocks on HD86xx part fa6227dbfd6a drm/imx: ipuv3-plane: Access old u/vbo properly in ->atomic_check for YU12/YV12 d040374f3473 drm/imx: ipuv3-plane: Switch EBA buffer only when we don't need modeset 51ed5a2bbf38 Revert "drm/radeon: fix DP link training issue with second 4K monitor" ac6f210dd7a6 md: be careful not lot leak internal curr_resync value into metadata. -- (all) eba4fe9db92f RAID10: ignore discard error 21faa6dbf53f RAID1: ignore discard error b80fcd58e6f6 mmc: dw_mmc-pltfm: fix the potential NULL pointer dereference 1244d3c3a0f6 scsi: arcmsr: Send SYNCHRONIZE_CACHE command to firmware 2a1a0a6f1d60 scsi: scsi_debug: Fix memory leak if LBP enabled and module is unloaded 5bac49422b4a ath10k: cache calibration data when the core is stopped a7d092e946f5 Revert "ath9k_hw: implement temperature compensation support for AR9003+" aea7cb3b7ceb mac80211: discard multicast and 4-addr A-MSDUs 27fa1e735c70 firewire: net: fix fragmented datagram_size off-by-one 032430fb6a2c firewire: net: guard against rx buffer overflows facb17b67ac9 Input: i8042 - add XMG C504 to keyboard reset table 8b535f07898a rtl8xxxu: Fix rtl8723bu driver reload issue 1c9edb27261e rtl8xxxu: Fix big-endian problem reporting mactime ece1b51ae1c4 rtl8xxxu: Fix memory leak in handling rxdesc16 packets 5a805cd29284 dm raid: fix activation of existing raid4/10 devices 6e5456768ba1 dm raid: fix compat_features validation 056290446e8a dm rq: clear kworker_task if kthread_run() returned an error 13a59a868756 dm table: fix missing dm_put_target_type() in dm_table_add_target() 159a17e8dbf6 dm mirror: fix read error on recovery after default leg failure d8db5234adef virtio: console: Unlock vqs while freeing buffers 7569d22a820d virtio_pci: Limit DMA mask to 44 bits for legacy virtio devices 0c2f67a6196d virtio_ring: Make interrupt suppression spec compliant c528df925fba parisc: Ensure consistent state when switching to kernel stack at syscall entry 592de1000694 ovl: fsync after copy-up 3ad464dadb7c ovl: update S_ISGID when setting posix ACLs be9015460ed5 ovl: fix get_acl() on tmpfs 2b632307635f MIPS: KASLR: Fix handling of NULL FDT 1734afcce32b nfsd: Fix general protection fault in release_lock_stateid() 202c6676b963 ARM: dts: fix the SD card on the Snowball db20b510ca5c ARM: mvebu: Select corediv clk for all mvebu v7 SoC c627b2e76ae2 KVM: MIPS: Precalculate MMIO load resume PC f3a0c969e788 KVM: MIPS: Make ERET handle ERL before EXL 961cf133b710 KVM: s390: Fix STHYI buffer alignment for diag224 88aca01f8cb4 KVM: x86: fix wbinvd_dirty_mask use-after-free ea261d177aed dm: free io_barrier after blk_cleanup_queue call 377a2a273c4b Staging: wilc1000: Fix kernel Oops on opening the device 0c4ffbf9e118 iio:chemical:atlas-ph-sensor: Fix use of 32 bit int to hold 16 bit big endian value 52a1e76f16e2 arm64: dts: marvell: fix clocksource for CP110 master SPI0 0dff3c6321a5 tty: limit terminal size to 4M chars 44f0722dc9ac xhci: workaround for hosts missing CAS bit 0894224ae7c0 xhci: add restart quirk for Intel Wildcatpoint PCH b2d28d93cf83 hv: do not lose pending heartbeat vmbus packets eeae0a12a166 vt: clear selection before resizing 9710f5b19328 x86/smpboot: Init apic mapping before usage 58b0a7f115f8 GenWQE: Fix bad page access during abort of resource allocation b9aa0a7290f5 usb: increase ohci watchdog delay to 275 msec 241208e7b721 usb: renesas_usbhs: add wait after initialization for R-Car Gen3 00dbeb06292b xhci: use default USB_RESUME_TIMEOUT when resuming ports. 1e306cd37a66 USB: serial: ftdi_sio: add support for Infineon TriBoard TC2X7 d082fd105eb9 USB: serial: cp210x: fix tiocmget error handling e8bf726705bd USB: serial: fix potential NULL-dereference at probe 23124735a6f0 usb: gadget: function: u_ether: don't starve tx request queue fe4af125085a usb: gadget: udc: atmel: fix endpoint name 420d16894425 mei: txe: don't clean an unprocessed interrupt cause. 5d30e8f65073 ubifs: Fix regression in ubifs_readdir() b8176cc56bf1 ubifs: Abort readdir upon error 1755f43e9a90 timers: Lock base for same bucket optimization e18ed431d7da timers: Plug locking race vs. timer migration b5e3a038997a timers: Prevent base clock corruption when forwarding 665f7bf33aa8 timers: Prevent base clock rewind when forwarding clock 0d621c57e739 x86/microcode/AMD: Fix more fallout from CONFIG_RANDOMIZE_MEMORY=y e599203f55ad powerpc/64: Fix race condition in setting lock bit in idle/wakeup code 51d784b54768 powerpc/64: Re-fix race condition between going idle and entering guest 2c7ff0e5c311 powerpc/mm/radix: Use tlbiel only if we ever ran on the current cpu ae150de2d5e0 powerpc: Convert cmp to cmpd in idle enter sequence 1198fbca645e btrfs: fix races on root_log_ctx lists bc720ae2ffab cxl: Fix leaking pid refs in some error paths 2a997e83960b ANDROID: binder: Clear binder and cookie when setting handle in flat binder struct 599cfd58ffde ANDROID: binder: Add strong ref checks 2a0efa30b15c ALSA: hda - Fix headset mic detection problem for two Dell laptops 2585e17b71c7 ALSA: hda - Fix surround output pins for ASRock B150M mobo 14456570a4a5 ALSA: hda - Adding a new group of pin cfg into ALC295 pin quirk table 54186c7dd2ec ALSA: hda - allow 40 bit DMA mask for NVidia devices 0f574c90d747 ALSA: seq: Fix time account regression 8ccf154b2654 ALSA: usb-audio: Add quirk for Syntek STK1160 9d3f5b85ef8b device-dax: fix percpu_ref_exit ordering 33bcff297228 security/keys: make BIG_KEYS dependent on stdrng. 5152986c9257 KEYS: Sort out big_key initialisation 5daa841d0437 KEYS: Fix short sprintf buffer in /proc/keys show function 0a38e6c551c4 thermal/powerclamp: correct cpu support check 5db5e0c11c13 mm: memcontrol: do not recurse in direct reclaim 68adb469dd3b mm/slab: fix kmemcg cache creation delayed issue 67ae004e2c52 mm/list_lru.c: avoid error-path NULL pointer deref 5cb73199ca48 libxfs: clean up _calc_dquots_per_chunk d00057ecf82f gpio: GPIO_GET_LINE{HANDLE,EVENT}_IOCTL: Fix file descriptor leak c70eb2cc1276 gpio: GPIOHANDLE_GET_LINE_VALUES_IOCTL: Fix another information leak 6bba4b226521 gpio: GPIO_GET_LINEEVENT_IOCTL: Reject invalid line and event flags e2144827d96b gpio: GPIO_GET_LINEHANDLE_IOCTL: Reject invalid line flags c0699405b147 gpio: GPIO_GET_LINEEVENT_IOCTL: Validate line offset 49bdfb21e37d gpio: GPIOHANDLE_GET_LINE_VALUES_IOCTL: Fix information leak e22edf53b40f gpio: GPIO_GET_LINEHANDLE_IOCTL: Validate line offset a23a59c56a53 gpio: GPIO_GET_CHIPINFO_IOCTL: Fix information leak 78ae767553e4 gpio: GPIO_GET_CHIPINFO_IOCTL: Fix line offset validation 56ffab4f532e gpio / ACPI: fix returned error from acpi_dev_gpio_irq_get() 4366246129ca h8300: fix syscall restarting a639266ae0c3 spi: mark device nodes only in case of successful instantiation d6634d871199 spi: fsl-espi: avoid processing uninitalized data on error 0cee66b72acc drm/dp/mst: Clear port->pdt when tearing down the i2c adapter f2ffb21fb495 i2c: core: fix NULL pointer dereference under race condition 0fda1cdcbb72 i2c: xgene: Avoid dma_buffer overrun 9c619c2a8d4d i2c: rk3x: Give the tuning value 0 during rk3x_i2c_v0_calc_timings
Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
Bruce Ashfield [Wed, 16 Nov 2016 14:24:32 +0000 (09:24 -0500)]
linux-yocto/4.8: update to v4.8.6-rt5
Paul Gortmaker sent along updates to the latest 4.8 -rt version.
Updating the SRCREVs to include the following commits:
f83a3d4a643b v4.8.6-rt5 74c7ffc2e3f2 NFSv4: don't disable preemption on !RT 9711dc408890 kbuild: Add -fno-pie to KBUILD_AFLAGS: 7b4d4278e307 v4.8.6-rt4 24aa22031f3c v4.8.2-rt3 8541163464e2 kbuild: add -fno-PIE 81b61ced2d45 NFSv4: replace seqcount_t with a seqlock_t a8300ce29d0c worqueue: document the proper argument 9711591ebdc3 genirq: document swork member 1aace69fd88f rbtree: include barrier.h 74d4589809f2 rxrpc: remove unused static variables a941e2f0611c x86/apic: get rid of "warning: 'acpi_ioapic_lock' defined but not used" 9888d1c2e3ab hotplug: Call mmdrop_delayed() in sched_cpu_dying() if PREEMPT_RT_FULL debf0ec42b2e drivers/zram: Don't disable preemption in zcomp_stream_get/put() c84b472ee376 mm/zs_malloc: Fix bit spinlock replacement c17de80bfeba zsmalloc: turn that get_cpu_light() into a local_lock() 33586701e8ad connector/cn_proc: Protect send_msg() with a local lock on RT b20867d36bcd ftrace: Fix trace header alignment
Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
Bruce Ashfield [Wed, 16 Nov 2016 14:24:31 +0000 (09:24 -0500)]
linux-yocto/4.8: fix cryptodev compilation error
It was reported that compilation was broken for the in tree variant of
cryptodev. This commit integrates two patches that fix the issue:
efbdfa1ed95f cryptodev: stomp dynamic version numbering for in tree builds 32f54070205f cryptodev: fix compile error when enable CONFIG_CRYPTODEV
Signed-off-by: Liwei Song <liwei.song@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
Scripts that produces script data to be consumed by gnuplot.
There are two possible plots depending if either the
-S parameter is present or not:
* without -S: Produces a histogram listing top N recipes/tasks versus
stats. The first stat defined in the -s parameter is the one taken
into account for ranking
* -S: Produces a histogram listing tasks versus stats. In this case,
the value of each stat is the sum for that particular stat in all recipes found.
Stats values are in descending order defined by the first stat defined on -s
Jussi Kukkonen [Tue, 15 Nov 2016 11:41:58 +0000 (13:41 +0200)]
x11-common: Merge into xserver-nodm-init
Move the (non-factual) x utils dependencies from x11-common to
x11 packagegroup.
Remove some obsolete configuration from x11-common:
* Xsession.d/12keymap.sh: commented out xmodmap call for kdrive
* default.xmodmap: xmodmap file used by 12keymap.sh
* Xdefaults: rxvt configuration
At this point x11-common is just /etc/X11/Xsession and three
non-intrusive Xsession scripts: make these explicitly part of
xserver-nodm-init. RCONFLICT with the versions of xserver-common
that also provide these files.
VIRTUAL-RUNTIME_xserver_common is no longer a real abstraction but
preserve the setting for backwards compatibility (if the variable
is set to "xserver-common", the right thing still happens).
Signed-off-by: Jussi Kukkonen <jussi.kukkonen@intel.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
Dominic Sacré [Tue, 25 Oct 2016 17:20:17 +0000 (19:20 +0200)]
python3: Build and package precompiled modules
Remove the patch that was applied in the python3 and python3-native
recipes to skip compilation of python modules.
Modify generate-manifest-3.5.py to match '__pycache__' directories in
FILES_*.
This is necessary because Python3 puts .pyc files in '__pycache__'
subdirectories one level below the corresponding .py files, whereas in
Python2 they used to be right next to the sources.
This change significantly reduces the startup overhead of Python3
scripts. For example, on a Cortex-A9, "python3 -c pass" took 0.40s
before, and 0.19s after.
Signed-off-by: Dominic Sacré <dominic.sacre@gmx.de> Signed-off-by: Ross Burton <ross.burton@intel.com>
Ross Burton [Tue, 22 Nov 2016 17:41:43 +0000 (17:41 +0000)]
conf: add C++ flags for uninative interoperatility
Create a common include file for compiler flags which allow native binaries to
be interoperable on a wide range of hosts. In particular the C++ ABI is
problematic so choose the CXX11 version to allow interoperation between gcc4 and
gcc5 based hosts. Moving this to a common include instead of uninative.bbclass
allows uninative to be configured later and used in the eSDK (where its
mandatory) even if the base configuration doesn't enable uninative by default
(e.g. nodistro in OE-Core).
[ YOCTO #10645 ]
Signed-off-by: Ross Burton <ross.burton@intel.com>
Fabio Berton [Thu, 17 Nov 2016 15:26:34 +0000 (13:26 -0200)]
libpcap: Fix build when PACKAGECONFIG ipv6 is not enable
Add patches to fix error:
/
| ERROR: oe_runmake failed
| config.status: creating pcap-config.tmp
| mv pcap-config.tmp pcap-config
| chmod a+x pcap-config
| ../libpcap-1.8.1/gencode.c: In function 'pcap_compile':
| ../libpcap-1.8.1/gencode.c:693:8: error: 'compiler_state_t
| {aka struct _compiler_state}' has no member named 'ai'
| cstate.ai = NULL;
| ^
| ../libpcap-1.8.1/gencode.c: In function 'gen_gateway':
| ../libpcap-1.8.1/gencode.c:4914:13: error: 'cstate' undeclared
| (first use in this function)
| bpf_error(cstate, "direction applied to 'gateway'");
| ^~~~~~
| ../libpcap-1.8.1/gencode.c:4914:13: note: each undeclared identifier is
| reported only once for each function it appears in
\
Jiajie Hu [Fri, 11 Nov 2016 06:02:18 +0000 (14:02 +0800)]
devtool: fix handling of unicode characters from subprocess stdout
In previous implementation, a UnicodeDecodeError exception will be
raised if multi-byte encoded characters are printed by the subprocess.
As an example, the following command will fail in an en_US.UTF-8
environment because wget quotes its saving destination with '‘'(0xE2
0x80 0x98), while just the first byte is provided for decoding:
Yi Zhao [Thu, 17 Nov 2016 08:08:10 +0000 (16:08 +0800)]
tiff: Security fix CVE-2016-3632
CVE-2016-3632 libtiff: The _TIFFVGetField function in tif_dirinfo.c in
LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of
service (out-of-bounds write) or execute arbitrary code via a crafted
TIFF image.
Yi Zhao [Thu, 17 Nov 2016 06:05:41 +0000 (14:05 +0800)]
grub_git: set COMPATIBLE_HOST_armv7ve to null
When build nxp-ls10xx which enable hard-float, it try to force soft-float:
| checking if compiling with clang... no
| checking for options to compile assembly...
| checking whether -freg-struct-return works... yes
| checking for options to get soft-float... no
| configure: error: could not force soft-float
Set COMPATIBLE_HOST_armv7ve to null to skip the build.
Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
Yi Zhao [Wed, 16 Nov 2016 10:07:43 +0000 (18:07 +0800)]
nfs-utils: fix protocol minor version fall-back
Mount nfs directory would fail if no specific nfsvers:
mount -t nfs IP:/foo/bar/ /mnt/
mount.nfs: an incorrect mount option was specified
mount.nfs currently expects mount(2) to fail with EPROTONOSUPPORT if
the kernel doesn't understand the requested NFS version.
Unfortunately if the requested minor is not known to the kernel
it returns -EINVAL.
Backport patch from nfs-utils-1.3.4 to fix this issue.
Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
Yi Zhao [Wed, 16 Nov 2016 10:07:33 +0000 (18:07 +0800)]
openssl: Security fix CVE-2016-7055
There is a carry propagating bug in the Broadwell-specific Montgomery
multiplication procedure that handles input lengths divisible by, but
longer than 256 bits.
Use SHA256 as default digest for OpenSSL instead of MD5.
CVE: CVE-2004-2761
The MD5 Message-Digest Algorithm is not collision resistant,
which makes it easier for context-dependent attackers to
conduct spoofing attacks, as demonstrated by attacks on the
use of MD5 in the signature algorithm of an X.509 certificate.
Joshua Lock [Tue, 15 Nov 2016 22:08:54 +0000 (22:08 +0000)]
lib/oe/lsb: better handle missing fields
Some rolling release distros, such as Arch Linux, don't include a
VERSION_ID field in their os-release file.
Change release_dict_osr() to better handle this optional field
being absent.
Further improve the resilience of the release_dict_*() methods by
always returning a dict and using dict.get() in distro_identifier()
to supply a default, empty string, value when then key is missing.
Signed-off-by: Joshua Lock <joshua.g.lock@intel.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
There are many more stats on buildstats that 'Elapsed time', so make the script
more flexible to support all stats. Some cmd line examples:
$ buildstats.sh -s 'utime'
Buildstats' data covers proc's stats in different areas, including CPU times,
IO, program system resources and child program system resources. In order
to print values on each of these sets from command line, one can use the
following:
$ buildstats.sh -H -s 'TIME' | less
$ buildstats.sh -H -s 'IO' | less
and 'RUSAGE' and 'CHILD_RUSAGE' for program and program's child system
resources.
Signed-off-by: Leonardo Sandoval <leonardo.sandoval.gonzalez@linux.intel.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
Paul Eggleton [Tue, 15 Nov 2016 20:05:45 +0000 (09:05 +1300)]
devtool: modify: support recipes with only local files as source
The hello-mod recipe is unusual in that it has only local files in
SRC_URI and builds these out of ${WORKDIR}. When you use devtool modify
on it, devtool puts all of those files in an "oe-local-files"
subdirectory of the source tree, which is not ${S} (or ${B}) any more
and thus building the recipe afterwards fails. It's a bit of a hack, but
symlink the files in oe-local-files into the source tree (and commit the
symlinks with an ignored commit so that the repo is clean) to work
around the problem. We only do this at time of extraction, so any files
added to or removed from oe-local-files after that won't be handled, but
I think there's a limit to how far we should go to support these kinds
of recipes - ultimately they are anomalies.
I initially tried a hacky workaround where I set effectively set B =
"${WORKDIR}" and that allowed it to build, but other things such as the
LIC_FILES_CHKSUM checks still broke because they expected to find files
in ${S}. Another hack where I set the sourcetree to point to the
oe-local-files subdirectory works for hello-mod but not for makedevs
since whilst that is similar, unlike hello-mod it does in fact have
files in the source tree (since it has a patch that adds COPYING) and
thus the same issue occurred.
Also tweak one of the tests that tries devtool modify / update-recipe on
the makedevs recipe to try building it since that would have caught this
issue.
Fixes [YOCTO #10616].
Signed-off-by: Paul Eggleton <paul.eggleton@linux.intel.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
Olof Johansson [Tue, 15 Nov 2016 19:10:39 +0000 (20:10 +0100)]
licenses.conf: Fix variable name in comments (FOSS_NO_COPYRIGHT)
A FOSSology related variable was renamed from FOSS_COPRYIGHT to
FOSS_NO_COPYRIGHT, but the comment block describing the variable
in licenses.conf was missed.
Besides fixing this, this change also removes a redundant comment
about where the variable is defined (it's right there! ;-)).
Signed-off-by: Olof Johansson <olofjn@axis.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
webkitgtk: move recommends on ca-certificates from epiphany to webkitgtk.
* The webkitgtk package should recommend the ca-certificates one,
because any program usign webkit (and not only epiphany) would
expect that the CAs certificates are available and that https
validation works as expected.
* For example, webkitgtk includes a MiniBrowser program that would
fail to proper verify https sites if the ca-certificate package
is not installed
* Instead of making each one of the webkitgtk consumers care about
the certificate package, do this in webkit itself.
Signed-off-by: Carlos Alberto Lopez Perez <clopez@igalia.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
Stephano Cetola [Tue, 15 Nov 2016 17:03:00 +0000 (09:03 -0800)]
recipetool: add postinst to .deb import
The .deb import feature did not import postinst, postrm, preinst, or
prerm functions. This change checks to see if those files exist, and
if so, adds the appropriate functions.
[ YOCTO #10421 ]
Signed-off-by: Stephano Cetola <stephano.cetola@linux.intel.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
Chen Qi [Tue, 15 Nov 2016 06:31:06 +0000 (14:31 +0800)]
rpm: fix multilib macro installation
For now, the rpm macro for multilib is not installed correctly. For
example, in x86-64 lib32 situation, the macro is installed under
tmp/work/x86-pokymllib32-linux/rpm/5.4.16-r0/image/usr/lib/rpm/poky/i686-linux/.
The directory is even not under WORKDIR. And it will of course not be
packaged.
We need to save necessary values before updating the localdata and restore
them so that the macros could be installed into the correct directory.
Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
Stephano Cetola [Tue, 15 Nov 2016 02:30:11 +0000 (18:30 -0800)]
devshell: list commands when throwing NoSupportedTerminals
When attempting to run devshell, if no terminal is available, the
error being thrown was not very specific. This adds a list of
commands that failed, informing the user of what they can install to
fix the error.
[ YOCTO #10472]
Signed-off-by: Stephano Cetola <stephano.cetola@linux.intel.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
Robert Yang [Mon, 14 Nov 2016 14:34:06 +0000 (06:34 -0800)]
sanity.bbclass: fix check_connectivity() for BB_NO_NETWORK = "0"
The old code:
network_enabled = not d.getVar('BB_NO_NETWORK', True)
It is True only when BB_NO_NETWORK is not set (None),
but BB_NO_NETWORK = "0" should also be True while "1" means no network,
"0" means need network in a normal case.
Signed-off-by: Robert Yang <liezhi.yang@windriver.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
Robert Yang [Mon, 14 Nov 2016 14:34:05 +0000 (06:34 -0800)]
sanity.bbclass:check_connectivity(): print more error messages
This can help fix the problem when the error happens.
Now the error message is:
Fetcher failure for URL: 'https://www.example.com/'. URL https://www.example.com/ doesn't work.
Please ensure your host's network is configured correctly,
or set BB_NO_NETWORK = "1" to disable network access if
all required sources are on local disk.
Signed-off-by: Robert Yang <liezhi.yang@windriver.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
Robert Yang [Mon, 14 Nov 2016 14:34:03 +0000 (06:34 -0800)]
populate_sdk_ext.bbclass: use weak assignment for TOOLCHAINEXT_OUTPUTNAME
The TOOLCHAINEXT_OUTPUTNAME is different from TOOLCHAIN_OUTPUTNAME, it
is used for eSDK only, so that it doesn't mix with SDK, use "?=" for it
so that other conf file can define it.
If we don't use "?=" here, then we need use forcevariable to redfine it:
TOOLCHAINEXT_OUTPUTNAME_forcevariable = "foo"
Signed-off-by: Robert Yang <liezhi.yang@windriver.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
André Draszik [Thu, 10 Nov 2016 10:47:01 +0000 (10:47 +0000)]
sysvinit-inittab: make TERM=vt102 on serial consoles
This makes more sense than the default TERM=linux (as set
by the linux kernel).
In addition, when using busybox init, it tries to achieve
the same (in a different way).
Both agetty, and busybox getty support the terminal type as
the last argument.
Signed-off-by: André Draszik <adraszik@tycoint.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
André Draszik [Thu, 10 Nov 2016 10:46:19 +0000 (10:46 +0000)]
opkg-utils: clear update-alternatives database on uninstall
When uninstalling update-alternatives, it doesn't seem to
make much sense to keep the update-alternatives database
around.
In particular when removing packaging data, e.g. due to
read-only rootfs, update-alternatives is removed from
the target file system. Leaving its database around
serves no purpose in that case as there is no way to
use it afterwards anyway.
This frees close to 700KB of (uncompressed) space in
a busybox based environment.
Signed-off-by: André Draszik <adraszik@tycoint.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
