]> code.ossystems Code Review - openembedded-core.git/log
openembedded-core.git
7 years agosystemd-boot: Make EFI_CC overridable
Khem Raj [Thu, 24 Aug 2017 19:17:41 +0000 (12:17 -0700)]
systemd-boot: Make EFI_CC overridable

Some layers may be setting their own EFI_CC
keep that possibility open

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
7 years agomesa: Upgrade to 17.1.7 release
Otavio Salvador [Thu, 24 Aug 2017 18:06:51 +0000 (15:06 -0300)]
mesa: Upgrade to 17.1.7 release

This is a bugfix release and has following upstream bugs as noteworth:

Bug 101334 - AMD SI cards: Some vulkan apps freeze the system
Bug 101766 - Assertion `!"invalid type"' failed when constant expression involves literal of different type
Bug 102024 - FORMAT_FEATURE_SAMPLED_IMAGE_BIT not supported for D16_UNORM and D32_SFLOAT
Bug 102148 - Crash when running qopenglwidget example on mesa llvmpipe win32
Bug 102241 - gallium/wgl: SwapBuffers freezing regularly with swap interval enabled

Signed-off-by: Otavio Salvador <otavio@ossystems.com.br>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
7 years agobitbake.conf: Drop usage of build/BUILD_SYS and target/TARGET_SYS conf files
Richard Purdie [Thu, 24 Aug 2017 13:08:45 +0000 (14:08 +0100)]
bitbake.conf: Drop usage of build/BUILD_SYS and target/TARGET_SYS conf files

Its been highlighted that TARGET_SYS can be changed by MACHINE and DISTRO files
so this doesn't work at all today. build/ configuration files also don't see to
be used. Drop these forms of include files for those reasons and simplfy the code
slightly.

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
7 years agoninja: fix upstream version check
Alexander Kanavin [Thu, 24 Aug 2017 13:53:14 +0000 (16:53 +0300)]
ninja: fix upstream version check

Signed-off-by: Alexander Kanavin <alexander.kanavin@linux.intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
7 years agolibva: fix upstream version check
Alexander Kanavin [Thu, 24 Aug 2017 13:32:26 +0000 (16:32 +0300)]
libva: fix upstream version check

Signed-off-by: Alexander Kanavin <alexander.kanavin@linux.intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
7 years agoqemu: fix upstream version check
Alexander Kanavin [Thu, 24 Aug 2017 13:32:25 +0000 (16:32 +0300)]
qemu: fix upstream version check

Signed-off-by: Alexander Kanavin <alexander.kanavin@linux.intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
7 years agopackage.py: strip_execs: Support for .ko modules
Tobias Hagelborn [Fri, 25 Aug 2017 11:32:37 +0000 (13:32 +0200)]
package.py: strip_execs: Support for .ko modules

* Support stripping of .ko modules verifying file extension and
  check of content "vermagic="

Signed-off-by: Tobias Hagelborn <tobiasha@axis.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
7 years agopackage.py: Fix some lint errors
Tobias Hagelborn [Fri, 25 Aug 2017 11:32:36 +0000 (13:32 +0200)]
package.py: Fix some lint errors

- rename type to exec_type not to shadow type
- rename isELF is_elf

Signed-off-by: Tobias Hagelborn <tobiasha@axis.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
7 years agorng-tools: add systemd service file
Dengke Du [Fri, 25 Aug 2017 06:14:28 +0000 (02:14 -0400)]
rng-tools: add systemd service file

Add systemd service file for rng-tools.

Signed-off-by: Dengke Du <dengke.du@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
7 years agobash: memleak bug fix for builtin command read
Zhang Xiao [Fri, 25 Aug 2017 00:42:38 +0000 (08:42 +0800)]
bash: memleak bug fix for builtin command read

Built in command "read" with "-e" use Readline to obtain the line
in an interactive shell. In this process, a string "rlbuf" is
just allocated without free operation thus cause memory leak.

This patch had been submitted to upstream:
http://lists.gnu.org/archive/html/bug-bash/2017-02/msg00061.html

Signed-off-by: Zhang Xiao <xiao.zhang@windriver.com>
Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
7 years agolibxml2: Fix CVE-2017-8872
Hongxu Jia [Wed, 23 Aug 2017 08:30:45 +0000 (04:30 -0400)]
libxml2: Fix CVE-2017-8872

fix global-buffer-overflow in htmlParseTryOrFinish (HTMLparser.c:5403)

https://bugzilla.gnome.org/show_bug.cgi?id=775200

Here is the reproduce steps on ubuntu 16.04, use clang with "-fsanitize=address"
...
export CC="clang"
export CFLAGS="-fsanitize=address"

./configure --disable-shared

make clean all -j

wget https://bugzilla.gnome.org/attachment.cgi?id=340871 -O poc

./xmllint --html --push poc
==2785==ERROR: AddressSanitizer: global-buffer-overflow on address
0x000000a0de21 at pc 0x0000006a7f6e bp 0x7ffdfe940c10 sp 0x7ffdfe940c08
READ of size 1 at 0x000000a0de21 thread T0    #0 0x6a7f6d
(/home/jiahongxu/Downloads/libxml2-2.9.4/xmllint+0x6a7f6d)    #1 0x6a7356
(/home/jiahongxu/Downloads/libxml2-2.9.4/xmllint+0x6a7356)    #2 0x4f4504
(/home/jiahongxu/Downloads/libxml2-2.9.4/xmllint+0x4f4504)    #3 0x4f045e
(/home/jiahongxu/Downloads/libxml2-2.9.4/xmllint+0x4f045e)    #4 0x7f81977d682f
(/lib/x86_64-linux-gnu/libc.so.6+0x2082f)    #5 0x419ad8
(/home/jiahongxu/Downloads/libxml2-2.9.4/xmllint+0x419ad8)
...

Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
7 years agotaglib: Security fix CVE-2017-12678
Yi Zhao [Fri, 25 Aug 2017 02:56:56 +0000 (10:56 +0800)]
taglib: Security fix CVE-2017-12678

CVE-2017-12678: In TagLib 1.11.1, the rebuildAggregateFrames function in
id3v2framefactory.cpp has a pointer to cast vulnerability, which allows
remote attackers to cause a denial of service or possibly have
unspecified other impact via a crafted audio file.

Reference:
https://nvd.nist.gov/vuln/detail/CVE-2017-12678

Patch from:
https://github.com/taglib/taglib/pull/831/commits/eb9ded1206f18f2c319157337edea2533a40bea6

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
7 years agoe2fsprogs: fix ptest script
Yi Zhao [Fri, 25 Aug 2017 02:11:20 +0000 (10:11 +0800)]
e2fsprogs: fix ptest script

* Fix hardcoded path for ptest script which would cause failure on
  mulitilib:
  ls: cannot access '/usr/lib/e2fsprogs/ptest/test/[a-zA-Z]_*': No such file or directory
  ./test_script: line 54: /usr/lib/e2fsprogs/ptest/test/test_post: No such file or directory

* Add missing '$' for shell variable reference

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
7 years agodb: Add --tag parameter to libtool invocation
Khem Raj [Sat, 19 Aug 2017 17:26:59 +0000 (10:26 -0700)]
db: Add --tag parameter to libtool invocation

Fix do_configure to be able to regenerate configure files

Use cross libtool as installed by OE, as done in normal autotooled recipes

These changes help in invoking the libtool with proper tags for C
and C++ compiler and linker invocation and not use same tag across all
different invocations

Fixes errors like
libtool: compile: unable to infer tagged configuration
libtool: compile: specify a tag with `--tag'

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
7 years agoca-certificates: Fix postinst dependency issues
Richard Purdie [Thu, 24 Aug 2017 14:09:53 +0000 (15:09 +0100)]
ca-certificates: Fix postinst dependency issues

We were relying on running ca-certificates from the -native version. This
meant the host and target path layouts had to match which might not be true,
it certainly isn't true for the sdk builds.

There was a dependency on run-parts which wasn't represented (we can get it
from busybox or debianutils).

Since this is an allarch script, call the script directly, making sure debianutils
and openssl are available as postinst rootfs time to resolve the issues.

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
7 years agodebianutils: Add a native version (for run-parts)
Richard Purdie [Thu, 24 Aug 2017 14:06:21 +0000 (15:06 +0100)]
debianutils: Add a native version (for run-parts)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
7 years agodefault-providers: Add entries for pkgconfig (due to pkg-conf being added)
Richard Purdie [Thu, 24 Aug 2017 12:12:37 +0000 (13:12 +0100)]
default-providers: Add entries for pkgconfig (due to pkg-conf being added)

This silences warnings generated after pkg-conf was added as an alternative
pkgconfig provider.

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
7 years agopopulate_sdk_ext: Add BB_SERVER_TIMEOUT to SDK_LOCAL_CONF_BLACKLIST
Richard Purdie [Thu, 24 Aug 2017 12:10:12 +0000 (13:10 +0100)]
populate_sdk_ext: Add BB_SERVER_TIMEOUT to SDK_LOCAL_CONF_BLACKLIST

Whilst this should work we see failures in testsdkext at the moment when
this is set. Add this to the blacklist for now until we can fix these issues
meaning we can at least test BB_SERVER_TIMEOUT in other scenarios.

Bug 119733 has been opened to track this.

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
7 years agoboost: add python to default PACKAGECONFIG options
Jackie Huang [Tue, 22 Aug 2017 07:42:19 +0000 (15:42 +0800)]
boost: add python to default PACKAGECONFIG options

We want to provide python libs by default, and some other
popular Linux distributions like redhat/fedora does the same.

Signed-off-by: Jackie Huang <jackie.huang@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
7 years agokernel-yocto: relax BSP definition test
Bruce Ashfield [Wed, 23 Aug 2017 19:20:20 +0000 (15:20 -0400)]
kernel-yocto: relax BSP definition test

commit 44aea7b873 [kernel-yocto: ensure that only valid BSPs are built]
introduced a new check to ensure that a valid BSP definition was found,
rather than building something that 'closely' matched the current
MACHINE.

This check breaks valid configurations which do not have a bsp
definition but are otherwise completely configured machines.

To allow both elements to co-exist (and not add warnings or errors
to otherwise valid builds), we first check to see if an empty bsp
definition was found, but then check to see if a defconfig was
provided.

If a defconfig has been provided, that is a sign that the board
configuration is complete and we should continue the build without
otherwise bothering the user.

Tested on meta-raspberrypi and linux-yocto*

Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
7 years agoacl_2.25: improve reproducibility
Juro Bystricky [Wed, 23 Aug 2017 20:16:18 +0000 (13:16 -0700)]
acl_2.25: improve reproducibility

Remove all host build references from the acl-ptest package.

Signed-off-by: Juro Bystricky <juro.bystricky@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
7 years agoattr: improve reproducibility
Juro Bystricky [Wed, 23 Aug 2017 20:14:19 +0000 (13:14 -0700)]
attr: improve reproducibility

Remove all host build references from the attr-ptest package.

Signed-off-by: Juro Bystricky <juro.bystricky@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
7 years agoinitramfs-framework/setup-live: quote bootparam_root variable
California Sullivan [Wed, 23 Aug 2017 22:47:28 +0000 (15:47 -0700)]
initramfs-framework/setup-live: quote bootparam_root variable

When bootparam_root was empty the if statement would resolve into
invalid syntax instead of short circuiting after the -z, causing a boot
failure.

Signed-off-by: California Sullivan <california.l.sullivan@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
7 years agowebkitgtk: disable gobject-introspection on armv7a
Jackie Huang [Thu, 24 Aug 2017 01:18:38 +0000 (09:18 +0800)]
webkitgtk: disable gobject-introspection on armv7a

Disable gobject-introspection on armv7a and armv7ve
to avoid do_compile failure:

| qemu: uncaught target signal 11 (Segmentation fault) - core dumped
| Segmentation fault

Signed-off-by: Jackie Huang <jackie.huang@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
7 years agocore/target/ssh.py: use reader to handle partial data
Robert Yang [Thu, 24 Aug 2017 06:19:55 +0000 (23:19 -0700)]
core/target/ssh.py: use reader to handle partial data

This can avoid UnicodeDecodeError error.

Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
7 years agolibinput: remove obsolete touchpad patch
Jose Alarcon [Thu, 24 Aug 2017 05:37:53 +0000 (08:37 +0300)]
libinput: remove obsolete touchpad patch

This patch was a temporal workaround needed with 4.1 kernels.
Remove it.

Signed-off-by: Jose Alarcon <jose.alarcon@ge.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
7 years agogpg_sign: depress the owership warnings on homedir
Jia Zhang [Thu, 24 Aug 2017 03:24:28 +0000 (11:24 +0800)]
gpg_sign: depress the owership warnings on homedir

A gpg command, e.g, called by get_gpg_version(), may trigger such a warning:
gpg: WARNING: unsafe ownership on homedir '/home/user/.gnupg'

This sort of warning is harmless so it can be depressed through specifying
--no-permission-warning.

Signed-off-by: Jia Zhang <lans.zhang2008@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
7 years agokernel-yocto: fix typo in error message
Luca Ceresoli [Thu, 24 Aug 2017 07:40:54 +0000 (09:40 +0200)]
kernel-yocto: fix typo in error message

Signed-off-by: Luca Ceresoli <luca@lucaceresoli.net>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
7 years agovulkan: Only build when 'vulkan' distro flag is set
Mark Hatle [Wed, 23 Aug 2017 15:50:16 +0000 (10:50 -0500)]
vulkan: Only build when 'vulkan' distro flag is set

Only build with the vulkan distro flag is set.  (References to this flag
were found in the mesa recipe.)

In addition, only set the RRECOMEMND to mesa, if 'opengl' flag is set.  Mesa
required opengl distro flag to build.

Signed-off-by: Mark Hatle <mark.hatle@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
7 years agobuildhistory.bbclass: add ptest
Robert Yang [Tue, 22 Aug 2017 01:23:13 +0000 (18:23 -0700)]
buildhistory.bbclass: add ptest

The ptest log will be saved to buildhistory/ptest, we can easily get
the regression result between builds by:

$ git show HEAD ptest/pass.fail.skip.*

[YOCTO #11547]

Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
7 years agotestimage.bbclass: update comments
Robert Yang [Tue, 22 Aug 2017 01:23:12 +0000 (18:23 -0700)]
testimage.bbclass: update comments

It's very important to add IMAGE_CLASSES += "testimage" in local.conf firstly,
otherwise the var like TEST_LOG_DIR (defined in testimage.bbclass) will not be
in testdata.json.

[YOCTO #11547]

Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
7 years agobuildhistory.bbclass: print message when no commit
Robert Yang [Tue, 22 Aug 2017 01:23:11 +0000 (18:23 -0700)]
buildhistory.bbclass: print message when no commit

This makes the user easier to know how to make commit in buildhistory.

[YOCTO #11547]

Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
7 years agocore/target/ssh.py: replace decode errors
Robert Yang [Tue, 22 Aug 2017 01:23:10 +0000 (18:23 -0700)]
core/target/ssh.py: replace decode errors

There might be wild strings when read from target (especially when
reading ptest results), replace the errors to avoid breaking the test.

Fixed: (Not always happen)
$ bitbake core-image-sato -ctestimage
[snip]
    status, output = self.target.run('ptest-runner', 0)
  File "/buildarea/lyang1/poky/meta/lib/oeqa/core/target/ssh.py", line 84, in run
    status, output = self._run(sshCmd, processTimeout, True)
  File "/buildarea/lyang1/poky/meta/lib/oeqa/core/target/ssh.py", line 55, in _run
    status, output = SSHCall(command, self.logger, timeout)
  File "/buildarea/lyang1/poky/meta/lib/oeqa/core/target/ssh.py", line 258, in SSHCall
    run()
  File "/buildarea/lyang1/poky/meta/lib/oeqa/core/target/ssh.py", line 236, in run
    output = process.communicate()[0].decode("utf-8")
UnicodeDecodeError: 'utf-8' codec can't decode byte 0xc3 in position 4906: invalid continuation byte

[YOCTO #11547]

Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
7 years agoutils/logparser.py: fix section check
Robert Yang [Tue, 22 Aug 2017 01:23:09 +0000 (18:23 -0700)]
utils/logparser.py: fix section check

The section might be None or '', so use "if section" for it.

Fixed:
File "/buildarea/lyang1/poky/meta/lib/oeqa/utils/logparser.py", line 113, in log_as_files
    prefix += section
TypeError: Can't convert 'NoneType' object to str implicitly

[YOCTO #11547]

Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
7 years agoruntime/cases/_ptest.py: rename it to ptest.py
Robert Yang [Tue, 22 Aug 2017 01:23:08 +0000 (18:23 -0700)]
runtime/cases/_ptest.py: rename it to ptest.py

It works now.

[YOCTO #11547]

Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
7 years agoruntime/cases/_ptest.py: add skip status
Robert Yang [Tue, 22 Aug 2017 01:23:07 +0000 (18:23 -0700)]
runtime/cases/_ptest.py: add skip status

The packages' test cases maybe skipped, check and save them.

[YOCTO #11547]

Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
7 years agooeqa/utils/logparser.py: add skip status
Robert Yang [Tue, 22 Aug 2017 01:23:06 +0000 (18:23 -0700)]
oeqa/utils/logparser.py: add skip status

Some test cases maybe skipped, let's parse it.

[YOCTO #11547]

Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
7 years agoruntime/cases/_ptest.py: revive it
Robert Yang [Tue, 22 Aug 2017 01:23:05 +0000 (18:23 -0700)]
runtime/cases/_ptest.py: revive it

* Make it work with current oeqa
* Skip the test if ptest is not in DISTRO_FEATURES
* Skip the test if ptest-pkgs is not in IMAGE_FEATURES
* The logs are saved to:
  testimage/ptest_log -> testimage/ptest_log.<datetime>
* This provides data that could be used to detect regressions in ptest results

[YOCTO #11547]

Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
7 years agobmap-tools: add "python-mmap" to RDEPENDS
Binghua Guan [Wed, 23 Aug 2017 02:52:14 +0000 (10:52 +0800)]
bmap-tools: add "python-mmap" to RDEPENDS

bmap-tools has run-time dependency on "python-mmp" which is missing in
the RDEPENDS. "bmaptool" command in the target will fail without this
patch.

Signed-off-by: Binghua Guan <freebendy@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
7 years agolibva-utils: add opengl to REQUIRED_DISTRO_FEATURES
Jackie Huang [Wed, 23 Aug 2017 02:23:58 +0000 (10:23 +0800)]
libva-utils: add opengl to REQUIRED_DISTRO_FEATURES

libva-utils depends on libva which requires opengl in
DISTRO_FEATURES.

Signed-off-by: Jackie Huang <jackie.huang@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
7 years agostaging: add missing import errno to staging_populate_sysroot_dir
Marko, Peter [Wed, 23 Aug 2017 12:16:29 +0000 (14:16 +0200)]
staging: add missing import errno to staging_populate_sysroot_dir

Fixes error "Exception: NameError: name 'errno' is not defined"
during build-sysroots.bb:do_build_target_sysroot

Signed-off-by: Marko, Peter <peter.marko@siemens.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
7 years agorecipetool: create: fix npm license code regression
Paul Eggleton [Wed, 23 Aug 2017 12:14:48 +0000 (00:14 +1200)]
recipetool: create: fix npm license code regression

OE-Core commit 1df60b09f7a60427795ec828c9c7180e4e52f98c caused a
regression in npm handling since it still expected to be able to get the
results of the license handling, but this no longer happens until after
the npm plugin is called. Thus, call the license handling function
ourselves here (which will record this as having been handled so it
doesn't get done again later).

Signed-off-by: Paul Eggleton <paul.eggleton@linux.intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
7 years agorecipetool: create: fix broken import in npm module
Paul Eggleton [Wed, 23 Aug 2017 12:14:47 +0000 (00:14 +1200)]
recipetool: create: fix broken import in npm module

With "import oe" in create_npm.py you get "AttributeError: module 'oe'
has no attribute 'package'" when it tries to call
oe.package.npm_split_package_dirs().

Signed-off-by: Paul Eggleton <paul.eggleton@linux.intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
7 years agorunqemu: Use virtio to mount cdrom drives
Richard Purdie [Tue, 22 Aug 2017 21:58:02 +0000 (22:58 +0100)]
runqemu: Use virtio to mount cdrom drives

The IDE driver in the kernel is fragile and in 4.12 is causing backtraces.
To unblock 4.12 kernel merging use the virtio CD driver instead to mount
iso images which should be faster and more stable.

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
7 years agooeqa/parselogs: Ignore device node warnings on mips
Richard Purdie [Tue, 22 Aug 2017 21:57:49 +0000 (22:57 +0100)]
oeqa/parselogs: Ignore device node warnings on mips

THe newner kernels have ope firmware support enabled which leads to warnings
during boot on mips. These aren't interesting and we should ignore them.

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
7 years agosystemd-machine-units: import last recipe from meta-systemd
Martin Jansa [Tue, 22 Aug 2017 19:31:30 +0000 (21:31 +0200)]
systemd-machine-units: import last recipe from meta-systemd

* this recipe is intentionally empty, but useful for BSP layers to
  provide machine specific systemd services in this MACHINE_ARCH
  package.

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
7 years agosystemd: add dependency on initscripts-sushell for selinux
Jackie Huang [Tue, 22 Aug 2017 06:34:25 +0000 (14:34 +0800)]
systemd: add dependency on initscripts-sushell for selinux

sushell is required by systemd service debug-shell
when selinux is enabled.

Signed-off-by: Jackie Huang <jackie.huang@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
7 years agoinitscripts: split sushell into sub package
Jackie Huang [Tue, 22 Aug 2017 06:34:24 +0000 (14:34 +0800)]
initscripts: split sushell into sub package

* sushell is required by systemd service debug-shell
  when selinux is enabled, but it doesn't make sense
  to make systemd depend on initscripts, so split sushell
  into sub package initscripts-sushell.

* The bash dependency has been removed by:
  '''
  4917e36a77bd6821b45db52caa43939d344d92f6
  initscripts: Fix regression for requiring /bin/bash
  '''
  so remove bash from RDEPENDS when selinux is enabled.

Signed-off-by: Jackie Huang <jackie.huang@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
7 years agolinux-firmware: package ibt-firmware
Maciej Pijanowski [Sat, 19 Aug 2017 10:22:57 +0000 (12:22 +0200)]
linux-firmware: package ibt-firmware

ibt-firmware was not packaged separately and was part of big linux-firmware
package. Packaging allows to install it separately, according to requirements.

Signed-off-by: Maciej Pijanowski <maciej.pijanowski@3mdeb.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
7 years agolinux-firmware: package iwlfifi-3160-[10-17] firmware
Maciej Pijanowski [Sat, 19 Aug 2017 10:22:56 +0000 (12:22 +0200)]
linux-firmware: package iwlfifi-3160-[10-17] firmware

Package iwlwifi-3160-[10-17] firmware from iwlwifi-misc to seperate packages,
so it is possible to install only required firmare package.

Signed-off-by: Maciej Pijanowski <maciej.pijanowski@3mdeb.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
7 years agovalgrind: improvements for run-ptest
Jackie Huang [Sun, 20 Aug 2017 13:21:28 +0000 (21:21 +0800)]
valgrind: improvements for run-ptest

* Add statistic summary for run-ptest
* Ensure the script can be run anywhere

Signed-off-by: Jackie Huang <jackie.huang@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
7 years agopkgconf: add recipe
Maxin B. John [Mon, 21 Aug 2017 15:09:45 +0000 (18:09 +0300)]
pkgconf: add recipe

pkgconf is a better replacement for pkg-config. Fedora 26 replaces the
system pkg-config implementation with pkgconf because it "provides better
support for handling .pc files and a stable library ABI/API for integrating
into applications." and is actively maintained, unlike pkg-config.

pkgconf aims to offer many improvements over pkg-config such as faster/more
efficient dependency resolver which "allows for the user to more conservatively
link their binaries -- which may be helpful in some environments, such as when
prelink(1) is being used.

pkgconf also aims to provide a more complete implementation of pkg-config.
The features most likely to benefit the Yocto Project build system are the
faster/more efficient dependency resolution and linker flag optimisation.

Move pkgconf recipe to oe-core from meta-pkgconf:
https://github.com/kergoth/meta-kergoth-wip/tree/master/meta-pkgconf

Links:
1. http://pkgconf.org
2. https://fedoraproject.org/wiki/Changes/pkgconf_as_system_pkg-config_implementation
3. https://bugzilla.yoctoproject.org/show_bug.cgi?id=11308

Signed-off-by: Christopher Larson <chris_larson@mentor.com>
Signed-off-by: Maxin B. John <maxin.john@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
7 years agometa: move some text from oe-setup-builddir to conf-notes.txt
Ming Liu [Mon, 21 Aug 2017 11:45:52 +0000 (13:45 +0200)]
meta: move some text from oe-setup-builddir to conf-notes.txt

This allows the end users to be able to override the entire notes
showing on the shell console. For instance, Our company uses a
external conf-notes.txt, and we run bitbake with some extra variables,
looks like: F=xxx D=xxx M=xxx bitbake <target>, so we want to show
exactly these texts on the shell console, that's why we need this
change.

Signed-off-by: Ming Liu <peter.x.liu@external.atlascopco.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
7 years agobuild-appliance-image: include proxy on pip3 installation
Leonardo Sandoval [Mon, 21 Aug 2017 14:32:56 +0000 (07:32 -0700)]
build-appliance-image: include proxy on pip3 installation

Otherwise, we get timeouts, leading to errors:

    pip._vendor.requests.exceptions.ConnectTimeout: HTTPSConnectionPool(host='pypi.python.org', port=443): Max retries exceeded with url: /pypi/pip/json (Caused by ConnectTimeoutError(<pip._vendor.requests.packages.urllib3.connection.VerifiedHTTPSConnection object at 0x7ff741bb3ef0>, 'Connection to pypi.python.org timed out. (connect timeout=5)'))
    WARNING: TOPDIR/tmp/work/qemux86-poky-linux/build-appliance-image/15.0.0-r0/temp/run.do_populate_poky_src.185123:1 exit 1 from 'pip3 install --user -I -U -v -r TOPDIR/tmp/work/qemux86-poky-linux/build-appliance-image/15.0.0-r0/rootfs/home/builder/poky/bitbake/toaster-requirements.txt'
    DEBUG: Python function do_image finished

Complete log at [1]

[1] http://errors.yoctoproject.org/Errors/Build/43393/

Signed-off-by: Leonardo Sandoval <leonardo.sandoval.gonzalez@linux.intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
7 years agooe/path.py: copyhardlinktree: don't overwrite existing symlinks
Ioan-Adrian Ratiu [Mon, 21 Aug 2017 17:09:35 +0000 (20:09 +0300)]
oe/path.py: copyhardlinktree: don't overwrite existing symlinks

Before GNU tar 1.24, only the archive creation command had the '-h'
argument to preserve and follow symlinks. After >= 1.24 via commit
14efeb9f956e38d7be (tar: --dereference consistency) the capability to
preserve symlinks was also added to the archive extraction command.

-h is default at archive creation but is not default at extraction,
meaning that it will replace symlinks with directories even if the
original filesystem directory tree and archive contains them.

Add -h to the copyhardlinktree extraction step so the build can
support symlinks in variables like ${DEPLOY_DIR_IPK/RPM/DEB}.

Signed-off-by: Ioan-Adrian Ratiu <adrian.ratiu@ni.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
7 years agokernel.bbclass: external toolchain fix
Juro Bystricky [Sat, 19 Aug 2017 16:41:35 +0000 (09:41 -0700)]
kernel.bbclass: external toolchain fix

Refactor get_cc_option so it is simpler and also does not fail
when using external toolchain.

Signed-off-by: Juro Bystricky <juro.bystricky@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
7 years agopython2.7: improve reproducibility
Juro Bystricky [Sat, 19 Aug 2017 17:21:57 +0000 (10:21 -0700)]
python2.7: improve reproducibility

The compiled .pyc files contain time stamp corresponding to the compile time.
This prevents binary reproducibility. This patch allows to achieve binary
reproducibility by overriding the build time stamp by the value
exported via SOURCE_DATE_EPOCH.

Patch by Bernhard M. Wiedemann, backported from https://github.com/python/cpython/pull/296

[YOCTO#11241]

Signed-off-by: Juro Bystricky <juro.bystricky@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
7 years agolinux-yocto/4.10: CVE & misc fixes
Bruce Ashfield [Mon, 21 Aug 2017 02:58:22 +0000 (22:58 -0400)]
linux-yocto/4.10: CVE & misc fixes

Updating the 4.10 SRCREVs to import the following changes:

  65370fa249e2 drm/vmwgfx: limit the number of mip levels in vmw_gb_surface_define_ioctl()
  530ec12a0cb0 ACPICA: Namespace: fix operand cache leak
  b1098b5bbded char: lp: fix possible integer overflow in lp_setup()
  56ee0c7811e5 dccp/tcp: do not inherit mc_list from parent
  9f6cbd022bba nfsd: encoders mustn't use unitialized values in error cases
  084036ebc243 nfsd: fix undefined behavior in nfsd4_layout_verify
  973f780eeaa6 xen-blkback: don't leak stack data via response ring
  20c4b5015fea brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx()
  1dff0f28b490 ipx: call ipxitf_put() in ioctl error path
  d666a8e60a45 mm: fix new crash in unmapped_area_topdown()
  73d059ba1a17 mm: larger stack guard gap, between vmas

Which address the following CVEs:

  CVE-2017-8890
  CVE-2017-1000363
  CVE-2017-11472
  CVE-2017-7346
  CVE-2017-1000380
  CVE-2017-7541
  CVE-2017-10911

Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
7 years agokernel-yocto: ensure that only valid BSPs are built
Bruce Ashfield [Mon, 21 Aug 2017 02:58:21 +0000 (22:58 -0400)]
kernel-yocto: ensure that only valid BSPs are built

There was a bug in the search routines responsible for locating
BSP definitions which returned a valid match if only the ktype
matched.

This meant that someone looking for "qemux86foo" (which is an
invalid definition) would potentially end up building "qemuarm"
and be none the wiser (until it didn't boot).

With this fix to the tools search routine, and improved return
code testing, we will now stop the build and report and error to
the user.

[YOCTO: #11878]

Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
7 years agoqemu: bump default version to 4.12
Bruce Ashfield [Mon, 21 Aug 2017 02:58:20 +0000 (22:58 -0400)]
qemu: bump default version to 4.12

Not all the qemu machines carry default kernel specifications.
While we could drop these references, we'll bump them to 4.12
to pick up the latest and remove them in future commits.

Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
7 years agolibc-headers: update to 4.12
Bruce Ashfield [Mon, 21 Aug 2017 02:58:19 +0000 (22:58 -0400)]
libc-headers: update to 4.12

The fall 2017 kernel will have 4.12 as the reference kernel, so
we update the libc-headers to match.

Build tested against glibc and muslc systems.

Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
7 years agolinux-yocto: remove 4.1 recipes
Bruce Ashfield [Mon, 21 Aug 2017 02:58:18 +0000 (22:58 -0400)]
linux-yocto: remove 4.1 recipes

We have 4.4 and 4.9 as LTS kernels, the 4.1 variants are no longer
needed and are dropped.

Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
7 years agolinux-yocto: introduce 4.12 recipes
Bruce Ashfield [Tue, 22 Aug 2017 16:00:14 +0000 (12:00 -0400)]
linux-yocto: introduce 4.12 recipes

The 4.12 kernel will be the default/reference for the fall 2017
release.

These recipes represent the introduction of 4.12.7 + related kernel
meta data. Existing functionality has been validated against this
new kernel version, and older versions will be removed in separate
commits.

Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
7 years agolinux-yocto: add usb-net configs by default
Bruce Ashfield [Mon, 21 Aug 2017 02:58:16 +0000 (22:58 -0400)]
linux-yocto: add usb-net configs by default

As requested by QA to enable testing of linux-yocto images out of the
box, we enable usb-net drivers for the various platforms in all kernel
versions.

Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
7 years agolinux-yocto/4.1: fix fsl-ls10xx sdhci
Bruce Ashfield [Mon, 21 Aug 2017 02:58:15 +0000 (22:58 -0400)]
linux-yocto/4.1: fix fsl-ls10xx sdhci

    mmc: sdhci: fix two compile errors

    | CC drivers/mmc/host/sdhci.o
    | drivers/mmc/host/sdhci.c: In function 'sdhci_execute_tuning':
    | drivers/mmc/host/sdhci.c:1990:4: error: implicit
    | declaration of function 'sdhci_do_reset'
    | [-Werror=implicit-function-declaration]
    | sdhci_do_reset(host, SDHCI_RESET_CMD);
    | ^
    | drivers/mmc/host/sdhci.c:2006:7: error: 'struct
    | mmc_command' has no member named 'busy_timeout'
    | cmd.busy_timeout = 50;
    |        ^

    In function sdhci_execute_tuning, replace sdhci_do_reset
    with sdhci_reset, replace busy_timeout with cmd_timeout_ms.

    Commit a629a90ba0 adds eMMC DDR mode support for t2080qds and
    modified some data structures and function name. Later
    commit a2080cc280 just backport upstream commit 61e53bd004
    without aligning the current source tree thus cause
    these build errors. Fix them.

Signed-off-by: Zhang Xiao <xiao.zhang@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
7 years agokernel-yocto: configuration updates: x86 features
Bruce Ashfield [Mon, 21 Aug 2017 02:58:14 +0000 (22:58 -0400)]
kernel-yocto: configuration updates: x86 features

Integrating the following kernel configuration changes:

 f7fbd4185e5 features/qat: additional configurations, CONFIG_CRYPTO_RSA and CONFIG_CRYPTO_DH
 50c62581d283 features/netfilter: additional configurations
 d67e4ed89556 features/x2apic: add X2APIC feature
 7889b28c5300 features/vfio: add VFIO feature
 dc4ec998757e features/numa: Add NUMA feature
 c88c18de4ca8 features/mtd: add MTD feature
 9035571d32ee features/iommu: add IOMMU feature
 6f3b16136f55 features/intel-txt: add intel-txt feature
 4936a5f508f0 common-pc-wifi: Enable SDIO for BroadCom BRCMFMAC

Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
7 years agoghostscript: CVE-2017-9727, -9835, -11714
Joe Slater [Tue, 22 Aug 2017 21:14:46 +0000 (14:14 -0700)]
ghostscript: CVE-2017-9727, -9835, -11714

CVE-2017-9727: make bounds check in gx_ttfReader__Read more robust
CVE-2017-9835: bounds check the array allocations methods
CVE-2017-11714: prevent trying to reloc a freed object

Signed-off-by: Joe Slater <jslater@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
7 years agoghostscript: fix several CVEs by adding bounds checking
Joe Slater [Tue, 22 Aug 2017 20:18:19 +0000 (13:18 -0700)]
ghostscript: fix several CVEs by adding bounds checking

CVE-2017-9611
CVE-2017-9612
CVE-2017-9739
CVE-2017-9726

Signed-off-by: Joe Slater <jslater@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
7 years agogrub2: fix build on gcc where _FORTIFY_SOURCE is defined
Martin Jansa [Tue, 22 Aug 2017 22:10:20 +0000 (00:10 +0200)]
grub2: fix build on gcc where _FORTIFY_SOURCE is defined

* e.g. with gentoo gcc-7.1 they define _FORTIFY_SOURCE by default with:
  https://sources.gentoo.org/cgi-bin/viewvc.cgi/gentoo/src/patchsets/gcc/7.1.0/gentoo/10_all_default-fortify-source.patch?view=markup
  which results in following error while building grub-efi-native:
  ./config-util.h:1504:48: error: this use of "defined" may not be portable [-Werror=expansion-to-defined]
               || (defined _FORTIFY_SOURCE && 0 < _FORTIFY_SOURCE \
                                                  ^~~~~~~~~~~~~~~
  this part comes from gnulib and it's used only for Apple and BSD,
  so we can ignore it, but we cannot add -Wno-error=expansion-to-defined
  because this warning was introduced only in gcc-7 and older gcc
  will fail with:
  cc1: error: -Werror=expansion-to-defined: no option -Wexpansion-to-defined
  use #pragma to work around this

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
7 years agotiff: Security fixes
Yi Zhao [Tue, 22 Aug 2017 00:58:35 +0000 (08:58 +0800)]
tiff: Security fixes

Fix CVE-2017-9147, CVE-2017-9936, CVE-2017-10668, CVE-2017-11335

References:
https://nvd.nist.gov/vuln/detail/CVE-2017-9147
https://nvd.nist.gov/vuln/detail/CVE-2017-9936
https://nvd.nist.gov/vuln/detail/CVE-2017-10668
https://nvd.nist.gov/vuln/detail/CVE-2017-11335

Patches from:
CVE-2017-9147:
https://github.com/vadz/libtiff/commit/4d4fa0b68ae9ae038959ee4f69ebe288ec892f06
CVE-2017-9936:
https://github.com/vadz/libtiff/commit/fe8d7165956b88df4837034a9161dc5fd20cf67a
CVE-2017-10688:
https://github.com/vadz/libtiff/commit/6173a57d39e04d68b139f8c1aa499a24dbe74ba1
CVE-2017-11355:
https://github.com/vadz/libtiff/commit/69bfeec247899776b1b396651adb47436e5f1556

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
7 years agomachine-sdk: oldest kernel for x86/x86_64 is 3.2.0 now
Ruslan Bilovol [Tue, 22 Aug 2017 11:06:40 +0000 (14:06 +0300)]
machine-sdk: oldest kernel for x86/x86_64 is 3.2.0 now

With glibc upgrade to 2.26 release (commit d6a0bc57fa07
"glibc: Upgrade to 2.26 final release") it's not possible
to build x86/x86_64 SDK for kernels lower than 3.2.0
(see glibc commit 139ace95756a "Require Linux kernel 3.2
or later on x86 / x86_64.")

Thus drop SDK_OLDEST_KERNEL overrides from machine-specific
conf files, so default version 3.2.0 from conf/bitbake.conf
will be picked up.

Signed-off-by: Ruslan Bilovol <rbilovol@cisco.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
7 years agolibcheck: fix file-rdeps QA issue
Martin Jansa [Mon, 21 Aug 2017 20:56:59 +0000 (22:56 +0200)]
libcheck: fix file-rdeps QA issue

* Fixes:
  ERROR: nativesdk-libcheck-0.10.0-r0 do_package_qa: QA Issue: /usr/local/oecore-x86_64/sysroots/x86_64-oesdk-linux/usr/bin/checkmk contained in package nativesdk-libcheck requires /usr/local/oecore-x86_64/sysroots/x86_64-oesdk-linux/usr/bin/gawk, but no providers found in RDEPENDS_nativesdk-libcheck? [file-rdeps]

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
7 years agosquashfs: fix build with glibc-2.26
Martin Jansa [Mon, 21 Aug 2017 20:57:20 +0000 (22:57 +0200)]
squashfs: fix build with glibc-2.26

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
7 years agoapt: Upgrade to 1.2.24
Aníbal Limón [Tue, 22 Aug 2017 17:20:39 +0000 (12:20 -0500)]
apt: Upgrade to 1.2.24

Add new patches for enable builds on hosts that has GCC version
minor than 5 because doesn't support std::array and std::put_time,
those patches could be removed after get rid of Debian8 and Centos7
support.

  - gcc_4.x_Revert-avoid-changing-the-global-LC_TIME-for-Release.patch
  - gcc_4.x_Revert-use-de-localed-std-put_time-instead-rolling-o.patch
  - gcc_4.x_apt-pkg-contrib-strutl.cc-Include-array-header.patch

The LIC_FILES_CHKSUM changed because the license file now has
style changes in the text remains GPLv2+.

The patch Revert-always-run-dpkg-configure-a-at-the-end-of-our
was updated because now the precision fields use floating
point numbers.

Signed-off-by: Aníbal Limón <anibal.limon@linux.intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
7 years agodpkg: Upgrade to 1.18.24
Aníbal Limón [Mon, 21 Aug 2017 21:31:16 +0000 (16:31 -0500)]
dpkg: Upgrade to 1.18.24

Patches rebased due to don't apply, no major changes,

- 0002-Adapt-to-linux-wrs-kernel-version-which-has-characte.patch
- arch_pm.patch
- noman.patch

Patches related to move ostable/triplettable insida data/ostable and
data/tupletable instead also needs to comply the new format of the
tables for arch detection.

- 0006-add-musleabi-to-known-target-tripets.patch
- add_armeb_triplet_entry.patch

And finally a patch to avoid usage --clamp-mtime in tar needs to be
modified because the dpkg-deb internal API changed.

- 0007-dpkg-deb-build.c-Remove-usage-of-clamp-mtime-in-tar.patch

Signed-off-by: Aníbal Limón <anibal.limon@linux.intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
7 years agostrace: 4.17 -> 4.18
Robert Yang [Mon, 21 Aug 2017 08:00:41 +0000 (01:00 -0700)]
strace: 4.17 -> 4.18

- Updated update-gawk-paths.patch.
- Updated Makefile-ptest.patch
- Removed 0008-replace-struct-ucontext-with-ucontext_t.patch which is already in
  the source.
- The LIC_FILES_CHKSUM is changed because the years have been updated,
  the contents are the same.

Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
7 years agoe2fsprogs: 1.43.4 -> 1.43.5
Robert Yang [Mon, 21 Aug 2017 08:00:40 +0000 (01:00 -0700)]
e2fsprogs: 1.43.4 -> 1.43.5

Removed the following 2 patches which are already in the source:
- 0001-e2fsck-exit-with-exit-status-0-if-no-errors-were-fix.patch
- e2fsprogs-1.43-sysmacros.patch

Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
7 years agotcl: 8.6.6 -> 0.8.7
Robert Yang [Mon, 21 Aug 2017 08:00:39 +0000 (01:00 -0700)]
tcl: 8.6.6 -> 0.8.7

Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
7 years agolibbsd: 0.8.5 -> 0.8.6
Robert Yang [Mon, 21 Aug 2017 08:00:38 +0000 (01:00 -0700)]
libbsd: 0.8.5 -> 0.8.6

Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
7 years agogit: 2.13.2 -> 2.13.3
Robert Yang [Mon, 21 Aug 2017 08:00:37 +0000 (01:00 -0700)]
git: 2.13.2 -> 2.13.3

Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
7 years agokernel-module-split: rrecommend kernel-image instead of rdepend
Martin Hundebøll [Mon, 21 Aug 2017 09:21:34 +0000 (11:21 +0200)]
kernel-module-split: rrecommend kernel-image instead of rdepend

Hard depending on the kernel makes it impossible to install kernel
modules without getting the kernel image installed too. This is
inconvenient in e.g. initramdisks, where the kernel is loaded from
outside the initramdisk.

Making the kernel modules rrecommend kernel-image-<version> instead of
rdepending on it, makes it possible to install kernel modules without
the kernel image by setting "kernel-image" in BAD_RECOMMENDATIONS.

Signed-off-by: Martin Hundebøll <mnhu@prevas.dk>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
7 years agoconnman: Fix for CVE-2017-12865
Sona Sarmadi [Mon, 21 Aug 2017 12:05:34 +0000 (14:05 +0200)]
connman: Fix for CVE-2017-12865

dnsproxy: Fix crash on malformed DNS response
If the response query string is malformed, we might access memory
pass the end of "name" variable in parse_response().

[YOCTO #11959]

Signed-off-by: Sona Sarmadi <sona.sarmadi@enea.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
7 years agognupg: 2.1.20 -> 2.1.23
Hongxu Jia [Mon, 21 Aug 2017 09:49:29 +0000 (05:49 -0400)]
gnupg: 2.1.20 -> 2.1.23

1. COPYING.LIB: Rename to COPYING.LGPL3.
https://git.gnupg.org/cgi-bin/gitweb.cgi?p=gnupg.git;a=commit;h=3419a339d9c4e800bf30e9021e05982d8c1021c1

2. Rebase patches:
- pkgconfig.patch -> 0001
- use-pkgconfig-instead-of-npth-config.patch -> 0002
- dirmngr-uses-libgpg-error.patch -> 0003
- autogen.sh-fix-find-version-for-beta-checking.patch -> 0004

3. Fix gpg2 not found
...
dnf -vy makecache

|Cannot download 'http://192.168.7.1:33541': repomd.xml GPG signature
verification error: gpgme_engine_check_version() error: Invalid crypto
engine.
...

The upstream install gpg by default and no gpg2
...
commit a69464b0b6dac88b360a13d3faf19dd7f2a0e02b
Author: Werner Koch <wk@gnupg.org>
Date:   Sat Aug 5 14:39:32 2017 +0200

    gpg: Install gpg by default under the name gpg.
...
Add --enable-gpg-is-gpg2 to revert it.

Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
7 years agogdk-pixbuf: fix ptest RDEPENDS for multilib build
Wenzong Fan [Mon, 21 Aug 2017 06:09:57 +0000 (02:09 -0400)]
gdk-pixbuf: fix ptest RDEPENDS for multilib build

Don't hardcode the package name, it could be gdk-pixbuf or
lib32-gdk-pixbuf.

Signed-off-by: Wenzong Fan <wenzong.fan@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
7 years agorecipetool: allow plugins to set LICENSE and LIC_FILES_CHKSUM
Paul Eggleton [Mon, 21 Aug 2017 05:39:49 +0000 (17:39 +1200)]
recipetool: allow plugins to set LICENSE and LIC_FILES_CHKSUM

We were being a bit prescriptive in setting LICENSE and
LIC_FILES_CHKSUM. We can't always trust what's in the metadata
accompanying some source which plugins will almost always be pulling
from, however we do want to allow plugins to set the LICENSE and
LIC_FILES_CHKSUM values. Merge what we find in our license file scan
with what the plugin sends back.

Additionally, plugins can now add a "license" item to the handled list
in order to inhibit the normal LICENSE / LIC_FILES_CHKSUM handling if
they have already taken care of it completely.

Thanks to Mark Horn <mark.d.horn@intel.com> for prompting, testing and
fixing this patch.

Signed-off-by: Paul Eggleton <paul.eggleton@linux.intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
7 years agorecipetool: allow plugins to set PN / PV more easily
Paul Eggleton [Mon, 21 Aug 2017 05:39:48 +0000 (17:39 +1200)]
recipetool: allow plugins to set PN / PV more easily

Previously if we were able to auto-determine the name from the URL, that
took precedence over any name that might be set in extravalues by a
plugin. Some plugins might be able to get a better idea of the name and
thus we should move defaulting of the name further down after the
plugins have had a chance to set it.

Signed-off-by: Paul Eggleton <paul.eggleton@linux.intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
7 years agodevtool: import: new plugin to import the devtool workspace
Leonardo Sandoval [Mon, 21 Aug 2017 05:39:47 +0000 (17:39 +1200)]
devtool: import: new plugin to import the devtool workspace

Takes a tar archive created by 'devtool export' and imports (untars) it
into the workspace. Currently the whole tar archive is imported, there
is no way to limit what is imported.

https://bugzilla.yoctoproject.org/show_bug.cgi?id=10510

[YOCTO #10510]

Signed-off-by: Leonardo Sandoval <leonardo.sandoval.gonzalez@linux.intel.com>
Signed-off-by: Paul Eggleton <paul.eggleton@linux.intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
7 years agodevtool: append md5sum only if not already present
Leonardo Sandoval [Mon, 21 Aug 2017 05:39:46 +0000 (17:39 +1200)]
devtool: append md5sum only if not already present

In case the proposed md5sum to be appended to the .devtool_md5 file
is already present, do not append it.

Signed-off-by: Leonardo Sandoval <leonardo.sandoval.gonzalez@linux.intel.com>
Signed-off-by: Paul Eggleton <paul.eggleton@linux.intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
7 years agodevtool: export: new plugin to export the devtool workspace
Leonardo Sandoval [Mon, 21 Aug 2017 05:39:45 +0000 (17:39 +1200)]
devtool: export: new plugin to export the devtool workspace

By default, exports the whole workspace (all recipes) including the source code.
User can also limit what is exported with --included/--excluded flags. As
a result of this operation, a tar archive containing only workspace metadata
and its corresponding source code is created, which can be properly imported
with 'devtool import'.

https://bugzilla.yoctoproject.org/show_bug.cgi?id=10510

[YOCTO #10510]

Signed-off-by: Leonardo Sandoval <leonardo.sandoval.gonzalez@linux.intel.com>
Signed-off-by: Paul Eggleton <paul.eggleton@linux.intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
7 years agodevtool: upgrade: enable branch checking when revision is provided
Chang Rebecca Swee Fun [Mon, 21 Aug 2017 05:39:44 +0000 (17:39 +1200)]
devtool: upgrade: enable branch checking when revision is provided

When devtool upgrade is run on a recipe with revision specified
that is not on master branch, and branch isn't set by --srcbranch or -B,
then we should get the correct branch and append the branch to the URL.

If the revision was found on multiple branches, we will display error
to inform user to provide a correct branch and exit.

[YOCTO #11484]

Signed-off-by: Chang Rebecca Swee Fun <rebecca.swee.fun.chang@intel.com>
Signed-off-by: Paul Eggleton <paul.eggleton@linux.intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
7 years agorecipetool: create: replacing PV in SRCURI
Stanley Phoong [Mon, 21 Aug 2017 05:39:43 +0000 (17:39 +1200)]
recipetool: create: replacing PV in SRCURI

During recipe creation, it seems that the automation for replacing
${PV} at the SRCURI for tag, (e.g mbed-tls-${PV}) is causing some
issue due to PV assuming it's a git source. A fix is implemented in
this patch to resolve this issue.

Signed-off-by: Stanley Phoong <stanley.cheong.kwan.phoong@intel.com>
Signed-off-by: Paul Eggleton <paul.eggleton@linux.intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
7 years agorecipetool: create: handle git URLs specifying only a tag
Stanley Phoong [Mon, 21 Aug 2017 05:39:42 +0000 (17:39 +1200)]
recipetool: create: handle git URLs specifying only a tag

If a git URL is passed to recipetool create with a tag=, recipetool
should handle it assuming that the tag is valid.

[YOCTO #11393]

Signed-off-by: Stanley Phoong <stanley.cheong.kwan.phoong@intel.com>
Signed-off-by: Paul Eggleton <paul.eggleton@linux.intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
7 years agorecipetool: create: being able to set branch when revision is provided
Chang Rebecca Swee Fun [Mon, 21 Aug 2017 05:39:41 +0000 (17:39 +1200)]
recipetool: create: being able to set branch when revision is provided

This change is to improve the buildability of the recipe created by
recipetool and devtool.

When recipetool create is run on a git URL and a revision specified
that is not on master, and "branch=" isn't already in the URL, then
we should get the correct branch and append the branch to the URL.

If the revision was found on multiple branches and 'master' is not
in the list, we will display error to inform user to provide a
correct branch and exit.

[YOCTO #11389]

Signed-off-by: Chang Rebecca Swee Fun <rebecca.swee.fun.chang@intel.com>
Signed-off-by: Paul Eggleton <paul.eggleton@linux.intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
7 years agorecipetool: create: disable PREMIRRORS and MIRRORS by default
Chang Rebecca Swee Fun [Mon, 21 Aug 2017 05:39:40 +0000 (17:39 +1200)]
recipetool: create: disable PREMIRRORS and MIRRORS by default

When creating new recipes, we are almost certainly fetching a new
source rather that something that has already been fetched. I have
disable PREMIRRORS and MIRRORS settings in the recipe that created
by devtool while leaving an option for users to enable them manually
if needed. Since devtool already has this options, we need to ensure
that recipetool is able to handle the options passed from devtool.

Signed-off-by: Chang Rebecca Swee Fun <rebecca.swee.fun.chang@intel.com>
Signed-off-by: Paul Eggleton <paul.eggleton@linux.intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
7 years agodevtool/copy_buildsystem: adds meta-skeleton layer in the eSDK installation.
Juan M Cruz Alcaraz [Sat, 19 Aug 2017 00:29:55 +0000 (17:29 -0700)]
devtool/copy_buildsystem: adds meta-skeleton layer in the eSDK installation.

The eSDK installation requires the meta-skeleton layer.
The build system might use the meta-skeleton recipes as layout
to create custom recipes. An example is the recipetool script
that uses the meta-skeleton kernel recipe when creating a custom
kernel recipe.

[YOCTO #11102]

Signed-off-by: Juan M Cruz Alcaraz <juan.m.cruz.alcaraz@linux.intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
7 years agoinitramfs-framework/setup-live: also boot live image if root=/dev/ram0
California Sullivan [Thu, 17 Aug 2017 22:47:30 +0000 (15:47 -0700)]
initramfs-framework/setup-live: also boot live image if root=/dev/ram0

Our grub and syslinux bootloaders both define root=/dev/ram0 for live
images by default. Kernel docs show that root=/dev/ram0 is just a
sentinel value for the kernel to mount the initrd as root, which then
mounts and switches to the real root. This is exactly what our scripts
do, so just check for root=/dev/ram0 as well.

See: https://www.kernel.org/doc/html/v4.11/admin-guide/initrd.html#operation

This fixes the issue where the new initramfs-framework scripts would not
boot live images that use grub or syslinux bootloaders.

Signed-off-by: California Sullivan <california.l.sullivan@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
7 years agoopenssl10: rename back to openssl and make it the default via PREFERRED_VERSION
Alexander Kanavin [Fri, 18 Aug 2017 19:31:29 +0000 (22:31 +0300)]
openssl10: rename back to openssl and make it the default via PREFERRED_VERSION

openssl 1.1 broke 3rd party layers a lot more than was expected; let's flip
the switch at the start of next development cycle.

Add a PROVIDES = "openssl10" to openssl 1.0 recipe; any dependency that is
not compatible with 1.1 should use that in its DEPENDS, as the 1.0
recipe will later be renamed back to openssl10. This does not always work:
http://lists.openembedded.org/pipermail/openembedded-core/2017-August/140957.html
but for many recipes it does.

Signed-off-by: Alexander Kanavin <alexander.kanavin@linux.intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
7 years agoprelink: Change the behavior to avoid checking USER_CLASSES
Mark Hatle [Fri, 18 Aug 2017 19:12:33 +0000 (14:12 -0500)]
prelink: Change the behavior to avoid checking USER_CLASSES

The behavior before this change was to check USER_CLASSES and adjust
the install script to return either exit 0 (don't do anything) or
exit 1 (run on first boot).  This enabled a user to include the prelink
package without enablign the image-prelink bbclass and get a first boot
prelink.

Checking USER_CLASSES is not desired, as an image should be able to simply
inherit the image-prelink and get the same type of behavior.  Modifying
the recipe based on the inclusion of a class is a bad idea as it makes
this style work more difficult.  So we move to a more defined strategy
based on exist uses.  (That we know of...)

If we ae doing a cross install, we want to avoid prelinking.
Prelinking during a cross install should be handled by the image-prelink
bbclass.  If the user desires this to run on the target at first boot
they will need to create a custom boot script.

[YOCTO #11169]

Signed-off-by: Mark Hatle <mark.hatle@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
7 years agoqemu conf: replace deprecated option with new option
Chen Qi [Fri, 18 Aug 2017 10:19:14 +0000 (18:19 +0800)]
qemu conf: replace deprecated option with new option

Replace the deprecated '-usbdevice' option with '-device usb-xx' option.
This would fix runqemu boot error like below.

  '-usbdevice' is deprecated, please use '-device usb-...' instead

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
7 years agoqemu: backport patches to fix boot failure
Chen Qi [Fri, 18 Aug 2017 10:19:13 +0000 (18:19 +0800)]
qemu: backport patches to fix boot failure

Backport two patches to fix the following error when booting qemu.

  Failed to unlock byte 100

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>