]> code.ossystems Code Review - openembedded-core.git/log
openembedded-core.git
10 years agomultilib.bbclass: fix incorrect TARGET_VENDOR in multilib image
Hongxu Jia [Thu, 16 Oct 2014 07:16:25 +0000 (15:16 +0800)]
multilib.bbclass: fix incorrect TARGET_VENDOR in multilib image

While building multilib extended images such as libXX-core-image-minimal,
the WORKDIR has the same dir with the building of core-image-minimal.

$ ls tmp/work/qemux86_64-poky-linux/ -al
...
drwxrwxr-x  3 jiahongxu jiahongxu 4096 Oct 13 16:01 core-image-minimal
drwxrwxr-x  3 jiahongxu jiahongxu 4096 Oct 16 11:11 lib32-core-image-minimal
...

While image class is inherited, it did not assign OVERRIDES with
'virtclass-multilib-libXXX', so the reason is variable TARGET_VENDOR was
not override for multilib in that situation.

It refers what did for PN and MLPREFIX, and manually do the multilib
override for TARGET_VENDOR in RecipePreFinalise handler.

[YOCTO #6844]

(From OE-Core rev: 7ca012fb3addb11ba3f899efa0619ddd8d3c6946)

Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
10 years agoclasses/image: remove obsolete MULTILIB_VENDORS
Hongxu Jia [Thu, 16 Oct 2014 07:19:20 +0000 (15:19 +0800)]
classes/image: remove obsolete MULTILIB_VENDORS

In oe-core commit 03c5f39b4d7dd8c81e0a130b7d5884e5af039a24,
it removed obsolete codes about variable MULTILIB_VENDORS.

We clean up the rest obsolete codes related with
MULTILIB_VENDORS

(From OE-Core rev: 43a1c2dc08b4291e042b6c9ef981bd094ea2c477)

Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
10 years agoelfutils: fix elf_cvt_gnuhash
Roy Li [Tue, 28 Oct 2014 05:09:41 +0000 (13:09 +0800)]
elfutils: fix elf_cvt_gnuhash

The 'dest' and 'src' can be same, we need to save the value of src32[2]
before swaping it.

(From OE-Core rev: b7936bacf0cc89bdda6722d317274bd4a3af840a)

Signed-off-by: Roy Li <rongqing.li@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
10 years agowhich-2.18: Use foreign strictness to avoid automake errors
Jackie Huang [Tue, 28 Oct 2014 02:12:00 +0000 (22:12 -0400)]
which-2.18: Use foreign strictness to avoid automake errors

Fixed:
Makefile.am: error: required file './ChangeLog' not found

(From OE-Core rev: c84bfa0f519e0bb74aed833a6318c21d91fce377)

Signed-off-by: Jackie Huang <jackie.huang@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
10 years agoimage.py: Fix error in graph sorting
Pascal Bach [Fri, 24 Oct 2014 07:41:10 +0000 (09:41 +0200)]
image.py: Fix error in graph sorting

The graph sorting algorithm for image dependencies does a look for an
occurrence of a searched string instead of comparing the chunk to the
searched string. This leads to the problem that ubifs is recognized as ubi aswell.

This fixes this by splitting up the string into chunks.

(From OE-Core rev: cec9725c540c2d54c27092e40d159694cea75b5f)

Signed-off-by: Pascal Bach <pascal.bach@siemens.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
10 years agomklibs: Fix loader for mipsel
Khem Raj [Fri, 24 Oct 2014 16:24:58 +0000 (09:24 -0700)]
mklibs: Fix loader for mipsel

Additionally treat ld.so to be searched in sysroot

Change-Id: I8b4acb821d9855a1163c7149bc8e369c7c438856
(From OE-Core rev: 4cf539e67333ba2c3fe924b092e104da53e68ca0)

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
10 years agoglibc: Delete ldconfig when USE_LDCONFIG is not set
Khem Raj [Fri, 24 Oct 2014 16:24:57 +0000 (09:24 -0700)]
glibc: Delete ldconfig when USE_LDCONFIG is not set

This avoids below QA error/warning
/sbin/ldconfig [installed-vs-shipped]

Change-Id: I028b692eefeaa6e0e0e6507ab4108caa29e41e91
(From OE-Core rev: 2b499db19cd9bd14292457716b50dc62ed90515d)

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
10 years agorm_work: Speed up rootfs/populate_sdk removal
Richard Purdie [Fri, 24 Oct 2014 14:14:31 +0000 (15:14 +0100)]
rm_work: Speed up rootfs/populate_sdk removal

Commands like bitbake X -c rootfs or bitbake X -c populate_sdk do not
trigger rm_work to clean up the directories afterwards since it
traditionally hooks onto do_build. This change means those two tasks now
clean up after themselves. We use the cleandirs function attribute to
handle this.

[YOCTO #6413]

(From OE-Core rev: 6bf06d80c2ce03dfdedac5ad8cf42ef8e36b0ecb)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
10 years agopython: fix ssl import error
Maxin B. John [Fri, 5 Dec 2014 17:08:49 +0000 (18:08 +0100)]
python: fix ssl import error

Fix this ssl import error:
Python 2.7.3 (default, Dec  5 2014, 16:24:17)
[GCC 4.9.1] on linux2
Type "help", "copyright", "credits" or "license" for more information.
>>> import ssl
Traceback (most recent call last):
  File "<stdin>", line 1, in <module>
  File "/usr/lib/python2.7/ssl.py", line 92, in <module>
    import base64        # for DER-to-PEM translation
ImportError: No module named base64

(From OE-Core rev: dfa34e70a4c7543dc67835c2e9a270ccd011ac72)

Signed-off-by: Maxin B. John <maxin.john@enea.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
10 years agocpio: fix bug CVE-2014-9112 for cpio-2.11
Bian Naimeng [Mon, 8 Dec 2014 05:45:07 +0000 (13:45 +0800)]
cpio: fix bug CVE-2014-9112 for cpio-2.11

Obtain detain from following URL.
  http://lists.gnu.org/archive/html/bug-cpio/2014-12/msg00000.html
  http://git.savannah.gnu.org/cgit/cpio.git/commit/?id=746f3ff670dcfcdd28fcc990e79cd6fccc7ae48d

(From OE-Core rev: 9a32da05f5a9bc62c592fd2d6057dc052e363261)

Signed-off-by: Bian Naimeng <biannm@cn.fujitsu.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
10 years agocpio: fix bug CVE-2014-9112 for cpio-2.8
Bian Naimeng [Mon, 8 Dec 2014 05:45:06 +0000 (13:45 +0800)]
cpio: fix bug CVE-2014-9112 for cpio-2.8

Obtain detain from following URL.
http://lists.gnu.org/archive/html/bug-cpio/2014-12/msg00000.html
http://git.savannah.gnu.org/cgit/cpio.git/commit/?id=746f3ff670dcfcdd28fcc990e79cd6fccc7ae48d

(From OE-Core rev: 732fc8de55a9c7987608162879959c03423de907)

Signed-off-by: Bian Naimeng <biannm@cn.fujitsu.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
10 years agokernel.bbclass: Create modules directory even if there is no modules installed
He Zhe [Tue, 21 Oct 2014 09:47:44 +0000 (17:47 +0800)]
kernel.bbclass: Create modules directory even if there is no modules installed

During kernel_do_install it needs to make symbol link at
${D}/lib/modules/${KERNEL_VERSION}/build, but there will not be
${D}/lib/modules/${KERNEL_VERSION} if there is no modules installed for current
image, which will result in a build failure.
Add "mkdir -p ${D}/lib/modules/${KERNEL_VERSION}" here to avoid this failure
and the need of similar changes in other scripts that also expect it to exist.

(From OE-Core rev: f2f72f8ff623d24fffbb1b0ad40bc08f05ff31dd)

Signed-off-by: He Zhe <zhe.he@windriver.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
10 years agogst-ffmpeg: fixes for CVE-2014-8548 and CVE-2014-8541
Roy Li [Wed, 19 Nov 2014 03:02:11 +0000 (21:02 -0600)]
gst-ffmpeg: fixes for CVE-2014-8548 and CVE-2014-8541

Issue: LIN7-1755
Issue: LIN7-1739

http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-8541

libavcodec/mjpegdec.c in FFmpeg before 2.4.2 considers only dimension
differences, and not bits-per-pixel differences, when determining whether an
image size has changed, which allows remote attackers to cause a denial of
service (out-of-bounds access) or possibly have unspecified other impact via
crafted MJPEG data.

http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-8548

Off-by-one error in libavcodec/smc.c in FFmpeg before 2.4.2 allows remote
attackers to cause a denial of service (out-of-bounds access) or possibly
have unspecified other impact via crafted Quicktime Graphics (aka SMC) video
data.

(From OE-Core rev: 4bd50c5a967af2b8f0fe77b8f9c100169e4fc531)

Signed-off-by: Roy Li <rongqing.li@windriver.com>
Signed-off-by: Mark Hatle <mark.hatle@windriver.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
10 years agowic: Use overhead factor when creating partitions from rootfs directories
Tom Zanussi [Wed, 29 Oct 2014 22:04:20 +0000 (17:04 -0500)]
wic: Use overhead factor when creating partitions from rootfs directories

When creating partitions sized to given rootfs directories, filesystem
creation could fail in cases where the calculated target partition
size was too small to contain the filesystem created using mkfs.  This
occurred in particular when creating partitions to contain very large
filesystems such as those containing sdk image artifacts.

This same limition is present in the oe-core image creation classes,
which can be readily see by changing IMAGE_OVERHEAD_FACTOR from the
default 1.3 to 1.0 and building a sato-sdk image.

It should be possible to calculate required sizes exactly given the
source rootfs and target filesystem types, but for now, to address the
specific problem users are hitting in such situations, we'll just do
exactly what oe-core does and define and use an IMAGE_OVERHEAD_FACTOR
or 1.3 in those cases.

Fixes [YOCTO #6863].

(From OE-Core rev: bbaef3ff5833fc1d97b7b028d7770834f62789da)

Signed-off-by: Tom Zanussi <tom.zanussi@linux.intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
10 years agobuildtools-tarball: package all of Python
Ross Burton [Wed, 5 Nov 2014 20:34:40 +0000 (20:34 +0000)]
buildtools-tarball: package all of Python

Instead of cherry-picking pieces of Python to put into the buildtools tarball,
ship all of it.  We can't predict what bits of Python will be needed in the
future.

Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
10 years agobabeltrace: Backport fix for unaligned integer
Saul Wold [Tue, 18 Nov 2014 00:18:34 +0000 (16:18 -0800)]
babeltrace: Backport fix for unaligned integer

[YOCTO #6464]

Signed-off-by: Saul Wold <sgw@linux.intel.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
10 years agoxkeyboard-config: Inherit gettext
Andrei Gherzan [Wed, 26 Nov 2014 16:22:14 +0000 (08:22 -0800)]
xkeyboard-config: Inherit gettext

In a GPLv3-free build we have two different versions of gettext in sysroot due
to GPLv3 restrictions. In this case we need gettext-native too so we can have
the needed macros and avoid errors like:
"error: possibly undefined macro: AM_GNU_GETTEXT"

The needed dependency is added by gettext class which is prefered because it
takes care of NLS flags too.

(From OE-Core rev: 23d8a4d64e9ff126d6460a69e6d086b1c86e87a9)

Signed-off-by: Andrei Gherzan <andrei.gherzan@windriver.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
10 years agopackage_manager: DpkgPM fix populate_sdk
Aníbal Limón [Wed, 26 Nov 2014 16:22:13 +0000 (08:22 -0800)]
package_manager: DpkgPM fix populate_sdk

DpkgPM change all_arch_list variable set from PACKAGE_ARCHS to passed
archs variable because is different when is executed from rootfs.py
and sdk.py.

Credits to: Ricardo Ribalda <ricardo.ribalda@gmail.com>

(From OE-Core rev: f6fb8c16f49fd9a2b124ad55f5c4fed82d7e6dca)

Signed-off-by: Aníbal Limón <anibal.limon@linux.intel.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
10 years agopython: Fix CVE-2014-7185
Wenzong Fan [Wed, 26 Nov 2014 16:22:12 +0000 (08:22 -0800)]
python: Fix CVE-2014-7185

Integer overflow in bufferobject.c in Python before 2.7.8 allows
context-dependent attackers to obtain sensitive information from
process memory via a large size and offset in a "buffer" function.

This back-ported patch fixes CVE-2014-7185

(From OE-Core rev: 49ceed974e39ab8ac4be410e5caa5e1ef7a646d9)

Signed-off-by: Wenzong Fan <wenzong.fan@windriver.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Conflicts:
meta/recipes-devtools/python/python_2.7.3.bb

hand merged bb file since I did not take previous patch.
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
10 years agoshadow-securetty: add ttyAM[0-3] serial ports
Javier Viguera [Wed, 26 Nov 2014 16:22:11 +0000 (08:22 -0800)]
shadow-securetty: add ttyAM[0-3] serial ports

Old version of the ARM AMBA serial port driver creates those device nodes.

(From OE-Core rev: fa17b9ea435f5c49e3bea56524152b21d915d464)

Signed-off-by: Javier Viguera <javier.viguera@digi.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
10 years agowic: Update bootimg-partition to use bootimg_dir
Tom Zanussi [Wed, 26 Nov 2014 16:22:09 +0000 (08:22 -0800)]
wic: Update bootimg-partition to use bootimg_dir

Update bootimg-partition to use bootimg_dir instead of img_deploy_dir,
to match similar usage in other plugins.

As mentioned elsewhere, plugins should use the passed-in value for
bootimg_dir directly if non-null, which corresponds to a user-assigned
value specified via a -b command-line param, and only fetch the value
from bitbake if that value is null.

(From OE-Core rev: 3822f8a7b33da56ecd9144b4bcae50734fb1af81)

Signed-off-by: Tom Zanussi <tom.zanussi@linux.intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
10 years agowic: Remove special-case bootimg_dir
Tom Zanussi [Wed, 26 Nov 2014 16:22:08 +0000 (08:22 -0800)]
wic: Remove special-case bootimg_dir

The first iterations of wic very shortsightedly catered to two
specific use-cases and added special-purpose params for those cases so
that they could be directly given their corresponding boot artifacts.
(hdddir and staging_data_dir).

As more use-cases are added, it becomes rather obvious that such a
scheme doens't scale, and additionally causes confusion for plugin
writers.

This removes those special cases and states explicitly in the help
text that plugins are responsible for locating their own boot
artifacts.

(From OE-Core rev: 6ba3eb5ff7c47aee6b3419fb3a348a634fe74ac9)

Signed-off-by: Tom Zanussi <tom.zanussi@linux.intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
10 years agoRevert "wic: set bootimg_dir when using image-name artifacts"
Tom Zanussi [Wed, 26 Nov 2014 16:22:07 +0000 (08:22 -0800)]
Revert "wic: set bootimg_dir when using image-name artifacts"

This reverts commit 7ce1dc13f91df70e8a2f420e7c3eba51cbc4bd48.

This patch broke the assumption that a non-null boot_dir means a
user-assigned (-b command-line param) value.

Reverting doesn't break anything, since the case it was added for
doesn't use the boot_dir for anything except debugging anyhow.

Fixes [YOCTO #6290]

(From OE-Core rev: db90f10bf31dec8d7d7bb2d3680d50e133662850)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
10 years agowic: Update the help text to include -D (--debug)
Tom Zanussi [Wed, 26 Nov 2014 16:22:06 +0000 (08:22 -0800)]
wic: Update the help text to include -D (--debug)

The --debug option is missing from the wic help text; this adds it and
at the same time rearranges the usage into a more logical arrangement.

(From OE-Core rev: cf5144ef241d8f4ccaa3461ae5c9f89c2cf2f8d1)

Signed-off-by: Tom Zanussi <tom.zanussi@linux.intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
10 years agowic: Don't allow mkfs to fail silently in partition command
Tom Zanussi [Wed, 26 Nov 2014 16:22:05 +0000 (08:22 -0800)]
wic: Don't allow mkfs to fail silently in partition command

The return code from the mkfs command used by the partition creation
command was being ignored, allowing it to silently fail and leaving
users mystified as to why the resulting filesystem was corrupted.

This became obvious when failures occurred when creating large
e.g. sdk filesystems [YOCTO #6863].

(From OE-Core rev: 8cef3b06f7e9f9d922673f430ddb3170d2fac000)

Signed-off-by: Tom Zanussi <tom.zanussi@linux.intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
10 years agonss: CVE-2014-1568
Chong Lu [Thu, 6 Nov 2014 07:50:38 +0000 (15:50 +0800)]
nss: CVE-2014-1568

the patch comes from:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-1568
https://bugzilla.mozilla.org/show_bug.cgi?id=1064636
nss ng log:
=====
changeset:   11252:ad411fb64046
user:        Kai Engert <kaie@kuix.de>
date:        Tue Sep 23 19:28:34 2014 +0200
summary:     Fix bug 1064636, patch part 2, r=rrelyea
=====
changeset:   11253:4e90910ad2f9
user:        Kai Engert <kaie@kuix.de>
date:        Tue Sep 23 19:28:45 2014 +0200
summary:     Fix bug    1064636, patch part 3, r=rrelyea
=====
changeset:   11254:fb7208e91ae8
user:        Kai Engert <kaie@kuix.de>
date:        Tue Sep 23 19:28:52 2014 +0200
summary:     Fix bug    1064636, patch part 1, r=rrelyea
=====
changeset:   11255:8dd6c6ac977d
user:        Kai Engert <kaie@kuix.de>
date:        Tue Sep 23 19:39:40 2014 +0200
summary:     Bug 1064636, follow up commit to fix Windows build bustage

Signed-off-by: Li Wang <li.wang@windriver.com>
Signed-off-by: Chong Lu <Chong.Lu@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
10 years agocurl: Fixup line ending merge issues
Richard Purdie [Mon, 24 Nov 2014 16:23:16 +0000 (16:23 +0000)]
curl: Fixup line ending merge issues

Somehow the patch line endings got messed up during merge. This restores
the delta.

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
10 years agoserf: uprev to 1.3.7 for fixing CVE-2014-3504
Wenzong Fan [Fri, 21 Nov 2014 06:02:05 +0000 (01:02 -0500)]
serf: uprev to 1.3.7 for fixing CVE-2014-3504

The (1) serf_ssl_cert_issuer, (2) serf_ssl_cert_subject, and (3) serf_-
ssl_cert_certificate functions in Serf 0.2.0 through 1.3.x before 1.3.7
does not properly handle a NUL byte in a domain name in the subject's
Common Name (CN) field of an X.509 certificate, which allows man-in-
the-middle attackers to spoof arbitrary SSL servers via a crafted
certificate issued by a legitimate Certification Authority.

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3504

Signed-off-by: Wenzong Fan <wenzong.fan@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
10 years agotzdata: update to 2014j
Armin Kuster [Tue, 11 Nov 2014 15:10:35 +0000 (07:10 -0800)]
tzdata: update to 2014j

(From OE-Core rev: 3ab9dfb703835fee21fd73c4e5cbad1c34c6a163)

Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
10 years agotzcode: update to 2014j
Armin Kuster [Tue, 11 Nov 2014 15:10:34 +0000 (07:10 -0800)]
tzcode: update to 2014j

(From OE-Core rev: 2f8940e8b2a0537f131a6d5410e85bba07a8c116)

Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
10 years agocurl: Security Advisory - curl - CVE-2014-3620
Chong Lu [Tue, 4 Nov 2014 01:35:18 +0000 (09:35 +0800)]
curl: Security Advisory - curl - CVE-2014-3620

libcurl wrongly allows cookies to be set for Top Level Domains (TLDs), thus
making them apply broader than cookies are allowed. This can allow arbitrary
sites to set cookies that then would get sent to a different and unrelated site
or domain.

(From OE-Core rev: ddbaade8afbc9767583728bfdc220639203d6853)

Signed-off-by: Chong Lu <Chong.Lu@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
10 years agocurl: Security Advisory - curl - CVE-2014-3613
Chong Lu [Fri, 24 Oct 2014 08:26:41 +0000 (16:26 +0800)]
curl: Security Advisory - curl - CVE-2014-3613

By not detecting and rejecting domain names for partial literal IP addresses
properly when parsing received HTTP cookies, libcurl can be fooled to both
sending cookies to wrong sites and into allowing arbitrary sites to set cookies
for others.

(From OE-Core rev: 985ef933208da1dd1f17645613ce08e6ad27e2c1)

Signed-off-by: Chong Lu <Chong.Lu@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
10 years agosubversion: Security Advisory - subversion - CVE-2014-3528
Yue Tao [Wed, 22 Oct 2014 07:37:29 +0000 (03:37 -0400)]
subversion: Security Advisory - subversion - CVE-2014-3528

Apache Subversion 1.0.0 through 1.7.x before 1.7.17 and 1.8.x before
1.8.10 uses an MD5 hash of the URL and authentication realm to store
cached credentials, which makes it easier for remote servers to obtain
the credentials via a crafted authentication realm.

http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-3528

(From OE-Core rev: e0dc0432b13f38d16f642bdadf8ebc78b7a74806)

Signed-off-by: Yue Tao <Yue.Tao@windriver.com>
Signed-off-by: Jackie Huang <jackie.huang@windriver.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
10 years agosubversion: Security Advisory - subversion - CVE-2014-3522
Yue Tao [Wed, 22 Oct 2014 07:37:28 +0000 (03:37 -0400)]
subversion: Security Advisory - subversion - CVE-2014-3522

The Serf RA layer in Apache Subversion 1.4.0 through 1.7.x before 1.7.18
and 1.8.x before 1.8.10 does not properly handle wildcards in the Common
Name (CN) or subjectAltName field of the X.509 certificate, which allows
man-in-the-middle attackers to spoof servers via a crafted
certificate.<a href=http://cwe.mitre.org/data/definitions/297.html
target=_blank>CWE-297: Improper Validation of Certificate with Host
Mismatch</a>

http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-3522

(From OE-Core rev: 06a33cd00ea11abec1ebe9d5883e44778075ccc6)

Signed-off-by: Yue Tao <Yue.Tao@windriver.com>
Signed-off-by: Jackie Huang <jackie.huang@windriver.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
10 years agometa-environment: Fix config-site with a multilib config
Mark Hatle [Tue, 11 Nov 2014 02:09:29 +0000 (20:09 -0600)]
meta-environment: Fix config-site with a multilib config

[YOCTO #6951]

The TOOLCHAIN_CONFIGSITE_SYSROOTCACHE value was defaulting to the nativesdk
path and not the associated target path.  Set the value in toolchain-scripts
to the target path.

Be sure to set the MLPREFIX within the meta-environment script as multilibs
are processed.

Update the config_site file name to use -BPN- not PN.  Otherwise the
environment processing can't find the correct filename.

Signed-off-by: Mark Hatle <mark.hatle@windriver.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
10 years agoreadline: Patch for readline multikey dispatch issue
Saul Wold [Fri, 7 Nov 2014 13:57:07 +0000 (13:57 +0000)]
readline: Patch for readline multikey dispatch issue

Signed-off-by: Saul Wold <sgw@linux.intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Paul Eggleton <paul.eggleton@linux.intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
10 years agowget: Fix for CVE-2014-4887
Saul Wold [Fri, 7 Nov 2014 13:57:06 +0000 (13:57 +0000)]
wget: Fix for CVE-2014-4887

Signed-off-by: Saul Wold <sgw@linux.intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Paul Eggleton <paul.eggleton@linux.intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
10 years agolicense.bbclass: canonicalise the licenses named with 'X+'
Jackie Huang [Mon, 27 Oct 2014 07:37:41 +0000 (03:37 -0400)]
license.bbclass: canonicalise the licenses named with 'X+'

If INCOMPATIBLE_LICENSE=GPLv3, GPLv3+ should be excluded
as well but not now since there is no SPDXLICENSEMAP for
licenses named with 'X+', we can add all the SPDXLICENSEMAP
settings for licenses named with 'X+' in licenses.conf,
but it's more like a duplication, so improve the canonical_license
function to auto map for 'X+' if SPDXLICENSEMAP for 'X' is
available, so GPLv3+ becomes GPL-3.0+.

(From OE-Core rev: 1d6dab1dbbbfbcb32e58dba3111130157ef2b24f)

Signed-off-by: Jackie Huang <jackie.huang@windriver.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
10 years agonativesdk-cmake: Adjust toolchain paths dynamically
Otavio Salvador [Tue, 21 Oct 2014 01:58:52 +0000 (23:58 -0200)]
nativesdk-cmake: Adjust toolchain paths dynamically

This patch adds a flexible way to configure the CMake in SDKs. It adds
a toolchain configuration script which supports subscripts for
extensions, as for example Qt5.

Signed-off-by: Otavio Salvador <otavio@ossystems.com.br>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
10 years agosystemd: Use ${ROOT_HOME} instead of /root
Dan McGregor [Wed, 3 Sep 2014 19:49:28 +0000 (13:49 -0600)]
systemd: Use ${ROOT_HOME} instead of /root

systemd avoids using nss lookups for the root user, so
naturally it assumes that root's home directory is /root.
In OE that's not the case, and it can lead to long delays when
shutting down due to user shutdown unit failures.

Signed-off-by: Dan McGregor <dan.mcgregor@usask.ca>
Signed-off-by: Ross Burton <ross.burton@intel.com>
10 years agobuild-appliance-image: Update to dizzy head revision
Richard Purdie [Sat, 18 Oct 2014 14:16:27 +0000 (16:16 +0200)]
build-appliance-image: Update to dizzy head revision

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
10 years agogst-ffmpeg: Security Advisory - ffmpeg - CVE-2013-0869
Yue Tao [Fri, 29 Aug 2014 06:46:19 +0000 (14:46 +0800)]
gst-ffmpeg: Security Advisory - ffmpeg - CVE-2013-0869

The field_end function in libavcodec/h264.c in FFmpeg before 1.1.2
allows remote attackers to have an unspecified impact via crafted H.264
data, related to an SPS and slice mismatch and an out-of-bounds array
access.

http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-0869

Signed-off-by: Yue Tao <Yue.Tao@windriver.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
10 years agogst-ffmpeg: Security Advisory - ffmpeg - CVE-2013-4358
Yue Tao [Fri, 29 Aug 2014 06:46:18 +0000 (14:46 +0800)]
gst-ffmpeg: Security Advisory - ffmpeg - CVE-2013-4358

libavcodec/h264.c in FFmpeg before 0.11.4 allows remote attackers to
cause a denial of service (crash) via vectors related to alternating bit
depths in H.264 data.

http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-4358

Signed-off-by: Yue Tao <Yue.Tao@windriver.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
10 years agomtools: fix broken /usr/bin/lz
Wenlin Kang [Thu, 16 Oct 2014 10:26:49 +0000 (06:26 -0400)]
mtools: fix broken /usr/bin/lz

When build fs with mtools-3.9.9, has file /usr/bin/lz in rootfs,
it is the symlink to uz:

root@qemu3:~# /usr/bin/lz
-sh: /usr/bin/lz: No such file or directory
$root@qemu3:~# ls -l /usr/bin/lz
lrwxrwxrwx 1 root root 2 Jul 18 18:07 /usr/bin/lz -> uz
root@qemu3:~# uz
-sh: uz: command not found

But the uz isn't actually exist, so the result is that lz is a
broken symlink.

The root cause is that uz hasn't been installed when install-scripts.

Signed-off-by: Wenlin Kang <wenlin.kang@windriver.com>
Signed-off-by: Jackie Huang <jackie.huang@windriver.com>
10 years agognupg_1.4.7: add package config libusb
Kai Kang [Thu, 16 Oct 2014 09:42:57 +0000 (17:42 +0800)]
gnupg_1.4.7: add package config libusb

If build gnupg 1.4.7 after libusb-compat, it shows warning:

WARNING: QA Issue: gnupg rdepends on libusb-compat, but it isn't a build dependency? [build-deps]

Add package config libusb to fix it.

Signed-off-by: Kai Kang <kai.kang@windriver.com>
10 years agoopenssl: upgrade to 1.0.1j
Ross Burton [Thu, 16 Oct 2014 16:18:11 +0000 (17:18 +0100)]
openssl: upgrade to 1.0.1j

Signed-off-by: Ross Burton <ross.burton@intel.com>
10 years agoreadline: Security Advisory - readline - CVE-2014-2524
Kai Kang [Wed, 15 Oct 2014 05:56:24 +0000 (13:56 +0800)]
readline: Security Advisory - readline - CVE-2014-2524

The _rl_tropen function in util.c in GNU readline before 6.3 patch 3
allows local users to create or overwrite arbitrary files via a symlink
attack on a /var/tmp/rltrace.[PID] file.

http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-2524

Signed-off-by: Yue Tao <Yue.Tao@windriver.com>
Signed-off-by: Kai Kang <kai.kang@windriver.com>
10 years agognupg: CVE-2013-4242
Kai Kang [Wed, 15 Oct 2014 07:16:31 +0000 (15:16 +0800)]
gnupg: CVE-2013-4242

GnuPG before 1.4.14, and Libgcrypt before 1.5.3 as used in GnuPG 2.0.x
and possibly other products, allows local users to obtain private RSA
keys via a cache side-channel attack involving the L3 cache, aka
Flush+Reload.

Patch from commit e2202ff2b704623efc6277fb5256e4e15bac5676 in
git://git.gnupg.org/libgcrypt.git

Signed-off-by: Yong Zhang <yong.zhang@windriver.com>
Signed-off-by: Kai Kang <kai.kang@windriver.com>
10 years agosstate.bbclass: Fix up white space lost in last commit.
Peter Urbanec [Wed, 15 Oct 2014 12:08:17 +0000 (23:08 +1100)]
sstate.bbclass: Fix up white space lost in last commit.

Commit e9672387 split one long line into a multi-line string, but in
the process white space between words was lost. This results in badly
formatted output when this message is printed.

Signed-off-by: Peter Urbanec <openembedded-devel@urbanec.net>
10 years agosstate.bbclass: specify func dirs for sstate_hardcode_path
Wenzong Fan [Wed, 15 Oct 2014 03:10:48 +0000 (23:10 -0400)]
sstate.bbclass: specify func dirs for sstate_hardcode_path

For some recipes that inhrient cmake, the ${B} may be removed by
cmake_do_configure() while sstate_hardcode_path() running, this
causes build errors:

  Exception: OSError: [Errno 2] No such file or directory: \
  '/path/to/build'

The function sstate_hardcode_path() called command:

  $SSTATE_SCAN_CMD which extended as "find ${SSTATE_BUILDDIR} ..."

So the proper function dirs could be ${SSTATE_BUILDDIR}.

Signed-off-by: Wenzong Fan <wenzong.fan@windriver.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
10 years agofile: add wrapper to nativesdk-file
Hongxu Jia [Sat, 11 Oct 2014 08:59:22 +0000 (16:59 +0800)]
file: add wrapper to nativesdk-file

"file" command in exported SDK doesn't work:
...
$ file sysroots/
file: could not find any valid magic files!
...

In oe-core commit 68d548cbae729eaea8ce1403dc95ff63c4a7375c,
it added wrapper to file-native. Do the same thing for
nativesdk-file.

Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
10 years agoopenssh: avoid screen sessions being killed on disconnect with systemd
Paul Eggleton [Tue, 14 Oct 2014 13:39:10 +0000 (14:39 +0100)]
openssh: avoid screen sessions being killed on disconnect with systemd

Tell systemd just to kill the sshd process when the ssh connection drops
instead of the entire cgroup for sshd, so that any screen sessions (and
more to the point, processes within them) do not get killed.

(This is what the Fedora sshd service file does, and what we're already
doing in the dropbear service file).

Signed-off-by: Paul Eggleton <paul.eggleton@linux.intel.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
10 years agopython: force off_t size to 8 to enable large file support
Paul Eggleton [Tue, 14 Oct 2014 09:20:24 +0000 (10:20 +0100)]
python: force off_t size to 8 to enable large file support

If DISTRO_FEATURES contains "largefile", force the size of off_t to 8 as
a workaround for having ac_cv_sizeof_off_t=4 on 32-bit systems. In
future we will likely drop the value from the site file, but for now
this is a slightly safer fix.

Fixes [YOCTO #6813].

Signed-off-by: Paul Eggleton <paul.eggleton@linux.intel.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
10 years agowic/bootimg-pcbios.py: checking the existance of syslinux
Hongxu Jia [Mon, 13 Oct 2014 10:46:34 +0000 (18:46 +0800)]
wic/bootimg-pcbios.py: checking the existance of syslinux

While syslinux not existed in $bootimg_dir, there was a error:

$ wic create directdisk -e core-image-minimal
...
|Creating image(s)...
|Error: exec_cmd: install -m 444 /home/jiahongxu/yocto/
build-20141010-yocto/tmp/deploy/images/qemux86-64/syslinux/
ldlinux.sys /var/tmp/wic/build/hdd/boot/ldlinux.sys
returned '1' instead of 0
...

Add checking for the existance of syslinux to fix this issue.
If syslinux didn't exist in anywhere, prompt user to build it.

[YOCTO #6826]

Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
10 years agobuild-appliance-image: Update to dizzy head revision
Richard Purdie [Sat, 11 Oct 2014 07:11:11 +0000 (08:11 +0100)]
build-appliance-image: Update to dizzy head revision

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
10 years agogcc: backport patch for gcc bug 61144
Saul Wold [Sat, 11 Oct 2014 06:46:16 +0000 (23:46 -0700)]
gcc: backport patch for gcc bug 61144

This fixes gcc bug 6144, which in my case exhibited itself as a kernel
module that failed to load. This was because static platform_data
structures were being corrupted with the optimiser being set to any
value other than -O0.

Originally-submitted-by: Peter Urbanec <openembedded-devel@urbanec.net>
Signed-off-by: Saul Wold <sgw@linux.intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
10 years agopackage_deb: skip pre/postrm scripts on upgrade, write only one shebang
Andreas Oberritter [Fri, 10 Oct 2014 23:36:42 +0000 (18:36 -0500)]
package_deb: skip pre/postrm scripts on upgrade, write only one shebang

Trying to upgrade busybox removing symlinks but update-alternatives
need these links (sed, cut, tail, etc) in order to work.

Adding test to avoid this scripts on upgrade fix the problem, same
solution are found in package_rpm class.

[YOCTO #6768]

Signed-off-by: Andreas Oberritter <obi@opendreambox.org>
Signed-off-by: Aníbal Limón <anibal.limon@linux.intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
10 years agomesa_git.bb: Fix fetch and license errors.
Randy Witt [Fri, 10 Oct 2014 22:39:18 +0000 (15:39 -0700)]
mesa_git.bb: Fix fetch and license errors.

Without these changes mesa_git.bb can't be enabled as the
PREFERRED_VERSION due to build breakage.

Signed-off-by: Randy Witt <randy.e.witt@linux.intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
10 years agobuild-appliance-image: Update to dizzy head revision
Richard Purdie [Fri, 10 Oct 2014 21:40:53 +0000 (22:40 +0100)]
build-appliance-image: Update to dizzy head revision

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
10 years agopackage_do_shlibs: Look for provider in the path thats in shlib_provider dictionary
Khem Raj [Thu, 9 Oct 2014 05:33:05 +0000 (22:33 -0700)]
package_do_shlibs: Look for provider in the path thats in shlib_provider dictionary

shlib2 code puts the information about path where a provider
will be found. e.g.

{'/usr/lib/llvm3.3': ('libllvm3.3-llvm-3.3', '3.3')}

This is obtained from new shlib2 pkgdata from

llvm3.3/3.3-r0/pkgdata/shlibs2/libllvm3.3-llvm-3.3.list

However when we search for NEEDED libraries we ignore the
key above which is the path where the provider library is installed
and instead just seach in libdir and base_libdir and hence
libraries which are not in above standard search paths gets
ignored even if they appear in DT_NEEDED sections

and a note is emitted

NOTE: Couldn't find shared library provider for libLLVM-3.3.so, used by
files: ....

IMO this note should actually become an error since if we do
not have all DT_NEEDED libraries in image the system is dysfunctional.

This patch extracts this libpath from key and add it to seach paths
when looing for a provider of a shared library

[YOCTO #6798]

Change-Id: Ie5f08632e37ba8d3439c8aaae33bc68b8996792f
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
10 years agobuild-appliance-image: Update to dizzy head revision
Richard Purdie [Fri, 10 Oct 2014 17:19:46 +0000 (18:19 +0100)]
build-appliance-image: Update to dizzy head revision

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
10 years agobuild-appliance-image: Update to dizzy head revision
Richard Purdie [Fri, 10 Oct 2014 17:18:22 +0000 (18:18 +0100)]
build-appliance-image: Update to dizzy head revision

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
10 years agoncurses: enable-pc-files requires PKG_CONFIG_LIBDIR existed
Robert Yang [Tue, 23 Sep 2014 04:31:39 +0000 (21:31 -0700)]
ncurses: enable-pc-files requires PKG_CONFIG_LIBDIR existed

Fixed ncurses.do_configure:
configure: WARNING: did not find library /path/to/tmp/sysroots/qemuarm/usr/lib/pkgconfig

And then anyone requires ncurses.pc will fail.

The configure.in checks:
[snip]
if test -n "$PKG_CONFIG_LIBDIR" && test -d "$PKG_CONFIG_LIBDIR" ; then
[snip]

Create PKG_CONFIG_LIBDIR in do_configure will fix the problem.

We can reproduce the problem by:
Set SSTATE_DIR=/path/to/sstate-cache
1) In build1, make sure everything is ready in SSTATE_DIR
$ bitbake ncurses
2) In build2, rebuild ncurses only:
$ bitbake ncurses -ccleansstate && bitbake ncurses

Then we will see the warning in log.do_configure.

Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
10 years agoglibc: remove bad patch snippet that eglibc forward ported
Saul Wold [Fri, 10 Oct 2014 15:20:22 +0000 (08:20 -0700)]
glibc: remove bad patch snippet that eglibc forward ported

The s_sin.c patch undoes some code changes in glibc itself, these changes have nothing to
do with the option groups and I suspect crept in as part of the initial conversion.  Undoing
this patch also fixes a test failure in test-double and test-idouble.

[YOCTO #6808]

Signed-off-by: Saul Wold <sgw@linux.intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
10 years agotoolchains-scripts: Add support for target environment scripts
Richard Purdie [Fri, 10 Oct 2014 10:34:05 +0000 (11:34 +0100)]
toolchains-scripts: Add support for target environment scripts

In a similar way to the previous script which adds support for native
environment scripts, this adds support for target environment scripts
too.

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
10 years agosdk.py: fix write target sdk manifest failed based on ipk
Hongxu Jia [Fri, 10 Oct 2014 08:25:55 +0000 (16:25 +0800)]
sdk.py: fix write target sdk manifest failed based on ipk

bitbake meta-toolchain
ls tmp/deploy/sdk/poky-glibc-x86_64-meta-toolchain-i586-toolchain-1.7.manifest -al
...
|-rw-rw-r-- 1 root root 0 Oct 10 15:05 tmp/deploy/sdk/poky-glibc-x86_64-
meta-toolchain-i586-toolchain-1.7.manifest
...

The manifest is empty, the reason is target's ipk config path is
d.getVar('IPKGCONF_TARGET') rather than d.getVar('IPKGCONF_Target')

Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
10 years agowpa-supplicant: fix for rebuild
Robert Yang [Fri, 10 Oct 2014 05:55:07 +0000 (22:55 -0700)]
wpa-supplicant: fix for rebuild

Fixed when rebuild:
make: *** No rule to make target `/path/to/old//sysroots/qemux86-64/usr/lib/dbus-1.0/include/dbus/dbus-arch-deps.h', needed by `dbus/dbus_old.o'.  Stop.

The .d files save the path of the dependencies files which may not exist
when rebuild, we can remove them to make the rebuild work.

Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
10 years agogit: fix do_install error
Robert Yang [Wed, 8 Oct 2014 08:04:03 +0000 (01:04 -0700)]
git: fix do_install error

Fixed when MACHINE = qemux86-64 and libdir = /usr/lib64:
mv: cannot stat `/path/to/image/usr/lib64/perl-native/perl': No such file or directory

The perl-native files are always installed to /usr/lib on both 32/64
bits targets.

Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
10 years agoavahi-ui: fix for building systemd with multilib
Robert Yang [Thu, 9 Oct 2014 15:37:41 +0000 (08:37 -0700)]
avahi-ui: fix for building systemd with multilib

Fixed:
MACHINE = "qemux86-64"
VIRTUAL-RUNTIME_init_manager = " systemd "
DISTRO_FEATURES_append = " systemd"
DISTRO_FEATURES_BACKFILL_CONSIDERED += " sysvinit "

require conf/multilib.conf
MULTILIBS = "multilib:lib32"
DEFAULTTUNE_virtclass-multilib-lib32 = "x86"

$ bitbake avahi avahi-ui
ERROR: QA Issue: avahi-ui: Files/directories were installed but not shipped
  /lib
  /lib/systemd
  /lib/systemd/system
  /lib/systemd/system/avahi-daemon.socket
  /lib/systemd/system/avahi-dnsconfd.service
  /lib/systemd/system/avahi-daemon.service [installed-vs-shipped]
ERROR: The recipe avahi-ui is trying to install files into a sharedarea when those files already exist. Those files and their manifestlocation are:
   /path/to/sysroots/qemux86-64/lib/systemd/system/avahi-daemon.socket
 Matched in manifest-qemux86-64-avahi.populate_sysroot
 /path/to/sysroots/qemux86-64/lib/systemd/system/avahi-dnsconfd.service
 Matched in manifest-qemux86-64-avahi.populate_sysroot
 /path/to/sysroots/qemux86-64/lib/systemd/system/avahi-daemon.service
 Matched in manifest-qemux86-64-avahi.populate_sysroot
Please verify which recipe should provide theabove files.

And remove the duplicated line:
rm ${D}${base_libdir} -rf

Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
10 years agonss-myhostname: skip it when systemd
Robert Yang [Thu, 9 Oct 2014 09:39:09 +0000 (02:39 -0700)]
nss-myhostname: skip it when systemd

Fixed error when systemd is in DISTRO_FEATURES:
ERROR: The recipe systemd is trying to install files into a sharedarea when those files already exist. Those files and their manifestlocation are:
   /path/to/sysroots/qemux86/usr/lib/libnss_myhostname.so.2
 Matched in manifest-qemux86-nss-myhostname.populate_sysroot
Please verify which recipe should provide theabove files.

Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
10 years agorpcbind: make service socket activated
Chen Qi [Thu, 9 Oct 2014 05:35:07 +0000 (13:35 +0800)]
rpcbind: make service socket activated

Instead of setting 'Restart=always' in the service file, we should
make the service socket activated, just like what Fedora does.

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
10 years agosstate.bbclass: split the too long line
Robert Yang [Wed, 8 Oct 2014 06:04:38 +0000 (23:04 -0700)]
sstate.bbclass: split the too long line

The too long line would cause "git send-email" report errors:
patch contains a line longer than 998 characters

Though we can use "--no-validate" to force the send.

Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
10 years agosstate.bbclass: the second bb.fatal not work
Robert Yang [Wed, 8 Oct 2014 05:52:58 +0000 (22:52 -0700)]
sstate.bbclass: the second bb.fatal not work

The code:
bb.fatal("foo1")
bb.fatal("foo2")

Would make the second one not work, use bb.error for first one to fix
the problem.

Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
10 years agovalgrind: Enforce 30 seconds limit for each test
Tudor Florea [Wed, 8 Oct 2014 01:43:27 +0000 (03:43 +0200)]
valgrind: Enforce 30 seconds limit for each test

Signed-off-by: Tudor Florea <tudor.florea@enea.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
10 years agoboost: fix build when ${PARALLEL_MAKE} contains '-l'
Enrico Scholz [Tue, 7 Oct 2014 12:07:11 +0000 (14:07 +0200)]
boost: fix build when ${PARALLEL_MAKE} contains '-l'

The '-l' option which is valid for GNU make (--> limit by load) has a
different meaning in bjam (--> limit maximum execution time) and will
break very likely the build.

Keep only the the '-l' option when passing PARALLEL_MAKE options to
bjam.

Signed-off-by: Enrico Scholz <enrico.scholz@sigma-chemnitz.de>
10 years agodosfstools: place files in /sbin, not in /usr/sbin
Enrico Scholz [Tue, 7 Oct 2014 12:07:33 +0000 (14:07 +0200)]
dosfstools: place files in /sbin, not in /usr/sbin

systemd expects fsck programs to be located in /sbin and fails for
dosfstools with

| Checking was requested for ..., but /sbin/fsck.vfat cannot be used: No such file or directory

Other fsck programs (e.g. ext4) are located in /sbin already so move
vfat programs into this directory too.

Signed-off-by: Enrico Scholz <enrico.scholz@sigma-chemnitz.de>
10 years agopython-pygobject: add libffi to DEPENDS
Ross Burton [Fri, 19 Sep 2014 23:36:40 +0000 (00:36 +0100)]
python-pygobject: add libffi to DEPENDS

libffi is generally present as it's also a build dependency on glib-2.0, but
explicitly declare it for determinism.

Signed-off-by: Ross Burton <ross.burton@intel.com>
10 years agoneard: update service file
Ross Burton [Tue, 24 Jun 2014 09:45:58 +0000 (10:45 +0100)]
neard: update service file

Update the service file to more closely match the service file that has been
committed upstream.

In particular we don't want to restart neard on failure (this results in it
restarting repeatedly if no NFC hardware is found), redirecting stdout to
/dev/null means that any messages are lost instead of being sent to the journal,
and the DBus alias is required for bus activation to work correctly.

Signed-off-by: Ross Burton <ross.burton@intel.com>
10 years agoxserver-xorg: update patch to match upstream
Ross Burton [Wed, 9 Jul 2014 10:06:55 +0000 (11:06 +0100)]
xserver-xorg: update patch to match upstream

10 years agooe-git-proxy: use SOCKS4a instead of SOCKS4
Ross Burton [Tue, 26 Aug 2014 14:44:42 +0000 (15:44 +0100)]
oe-git-proxy: use SOCKS4a instead of SOCKS4

In some situations where a proxy is required the client can't even do DNS
lookups, so instead of using SOCKS4 use SOCKS4a which moves the name resolution
from the client to the proxy.

Signed-off-by: Ross Burton <ross.burton@intel.com>
10 years agognome-desktop-testing: Fix build on uclibc
Khem Raj [Sun, 5 Oct 2014 23:16:19 +0000 (16:16 -0700)]
gnome-desktop-testing: Fix build on uclibc

[YOCTO #6577]

Change-Id: Ia29fb963a7df4e77504993172f85851e0b540c7e
Signed-off-by: Khem Raj <raj.khem@gmail.com>
10 years agocurl: add PACKAGECONFIG option to use libssh2
Fabrice Coulon [Fri, 3 Oct 2014 08:21:49 +0000 (10:21 +0200)]
curl: add PACKAGECONFIG option to use libssh2

The user can enable libssh2 via conf/local.conf or custom distro
configuration, this will pull in libssh2, which is not used by default.

For example, a curl_x.y.z.bbappend file containing the following line:
PACKAGECONFIG += "libssh2"

Signed-off-by: Fabrice Coulon <fabrice.coulon@axis.com>
Signed-off-by: Olof Johansson <olof.johansson@axis.com>
10 years agoxserver-xorg: report DRI3 and Present modules as present
Ross Burton [Fri, 26 Sep 2014 21:48:51 +0000 (22:48 +0100)]
xserver-xorg: report DRI3 and Present modules as present

The DRI3 and Present modules are built-in but some drivers (such as
xf86-video-intel) want to query their presence.  Backport a patch from upstream
to stop this causing an error.

[ YOCTO #6583 ]

Signed-off-by: Ross Burton <ross.burton@intel.com>
10 years agolatencytop: Creates x11 PACKAGECONFIG.
Noor [Tue, 30 Sep 2014 16:03:43 +0000 (21:03 +0500)]
latencytop: Creates x11 PACKAGECONFIG.

* Creates x11 packageconfig and update DEPENDS and EXTRA_OEMAKE_X
  for better handling.

Signed-off-by: Noor Ahsan <noor_ahsan@mentor.com>
10 years agolibassuan: fix for rebuild
Robert Yang [Fri, 10 Oct 2014 05:55:06 +0000 (22:55 -0700)]
libassuan: fix for rebuild

Fixed when rebuild:
rm: cannot remove `/path/to/2.1.2-r0/libassuan-2.1.2/m4/*.m4': No such file or directory

The files may not exist when rebuild.

Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
10 years agometa-toolchain-qt: Fix environment population
Otavio Salvador [Thu, 9 Oct 2014 21:53:14 +0000 (18:53 -0300)]
meta-toolchain-qt: Fix environment population

The generation of the environment has change since the change to use a
meta-environment canadian package in the OE-Core, the SDK environment
setting has been broken. This uses the new subscript environment to
fix it.

Signed-off-by: Otavio Salvador <otavio@ossystems.com.br>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
10 years agotoolchain-scripts.bbclass: Allow sourcing of subscript for environment
Otavio Salvador [Thu, 9 Oct 2014 21:53:13 +0000 (18:53 -0300)]
toolchain-scripts.bbclass: Allow sourcing of subscript for environment

Sometimes we require extra environment settings to be available on the
environment for proper SDK work. This were done, in past, using
'_append' tasks however with the split of the environment in a
canadian package this has been broken.

The easier and more flexible solution is to use environment subscripts
which are sources by the main script. These are now looked at:

 $OECORE_NATIVE_SYSROOT/environment-setup.d/*.sh

and sourced.

Signed-off-by: Otavio Salvador <otavio@ossystems.com.br>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
10 years agopackage_ipk.bbclass: Fix SRC_URI whitespace handling
Mark Hatle [Mon, 6 Oct 2014 14:05:08 +0000 (09:05 -0500)]
package_ipk.bbclass: Fix SRC_URI whitespace handling

The SRC_URI may contain whitespace, but be otherwise empty.  This can happen
in the case:

MYSRC = ""
MYSRC_arm = "file://myarm.patch"
SRC_URI += "${MYSRC}"

Unless we strip blank spaces, to determine if it is empty, we can end up
generating a "Source: " line which in invalid.  This leads to the error:

  invalid Source: field is speified in the generated CONTROL file

Signed-off-by: Mark Hatle <mark.hatle@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
10 years agobash: update and CVE-2014-6278 fix
Mark Hatle [Mon, 6 Oct 2014 14:44:54 +0000 (09:44 -0500)]
bash: update and CVE-2014-6278 fix

Update both bash 3.2.48 (to 57), and bash 4.3 (to 30) to fix the remaining
'shellshock' security issues, CVE-2014-6278.

Signed-off-by: Mark Hatle <mark.hatle@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
10 years agolinuxdoc-tools-native: Makedoc.sh uses /tmp and fails w/ noexec mount
Konrad Scherer [Mon, 6 Oct 2014 14:50:12 +0000 (09:50 -0500)]
linuxdoc-tools-native: Makedoc.sh uses /tmp and fails w/ noexec mount

The Makedoc.sh script uses the following line to set TMPDIR

export TMPDIR=`mktemp -d ${TMPDIR:-/tmp}/ldt.XXXXXXXXXX`;

and then later in the script:

chmod u+x $TMPDIR/linuxdoc

Since TMPDIR is not set the script will default to /tmp and if /tmp
is set to noexec (which is becoming more common), the chmod call fails.

Signed-off-by: Konrad Scherer <Konrad.Scherer@windriver.com>
Signed-off-by: Mark Hatle <mark.hatle@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
10 years agopackage.bbclass: Reverse runtime symlinks should be tied to package generation
Otavio Salvador [Sun, 5 Oct 2014 15:14:22 +0000 (12:14 -0300)]
package.bbclass: Reverse runtime symlinks should be tied to package generation

In case a package is not generated (is empty and does not has allow
empty flag set) the package data regarding reverse runtime dependency
shouldn't be done.

This were causing a false-positive in the meta-fsl-arm layer, when
building mesa, as:

,----[ Error during build of MX53 in meta-fsl-arm ]
| ERROR: The recipe mesa is trying to install files into a shared area
|  when those files already exist. Those files and their manifest
|  location are:
|    /.../build/build/tmp/sysroots/imx53qsb/pkgdata/runtime-reverse/libopenvg-dev
|    Matched in manifest-imx53qsb-amd-gpu-x11-bin-mx51.packagedata
| Please verify which recipe should provide the above files.
`----

Fixes [YOCTO: #6795]

Signed-off-by: Otavio Salvador <otavio@ossystems.com.br>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
10 years agoLTP - realtime tests - fix bad robust mutex conditionals
Gary S. Robertson [Fri, 3 Oct 2014 15:17:48 +0000 (10:17 -0500)]
LTP - realtime tests - fix bad robust mutex conditionals

The tests for robust mutexes contained conditional clauses which failed in
autoconf and/or used nonexistent variable names.  Modified these
conditional clauses to use only the variables actually created by
LTP autoconf for this purpose.

Signed-off-by: Gary S. Robertson <gary.robertson@linaro.org>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
10 years agoLTP - realtime tests - fix bad PI mutex conditionals
Gary S. Robertson [Fri, 3 Oct 2014 15:17:47 +0000 (10:17 -0500)]
LTP - realtime tests - fix bad PI mutex conditionals

The priority inheritance tests for mutexes used conditional variables
which were non-existent.  Changed the conditional clauses to use the
variables which were actually generated by LTP autoconf for that purpose.

Signed-off-by: Gary S. Robertson <gary.robertson@linaro.org>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
10 years agobash: Upgrade bash to latest patch level to fix CVEs
Mark Hatle [Fri, 3 Oct 2014 14:51:25 +0000 (09:51 -0500)]
bash: Upgrade bash to latest patch level to fix CVEs

We upgrade bash_4.3 to patch revision 29, and bash_3.2.48 to 56.

There are numerous community bug fixes included with this set, but the key
items are:

bash32-052      CVE-2014-6271                           9/24/2014
bash32-053      CVE-2014-7169                           9/26/2014
bash32-054      exported function namespace change      9/27/2014
bash32-055      CVE-2014-7186/CVE-2014-7187             10/1/2014
bash32-056      CVE-2014-6277                           10/2/2014

bash43-025      CVE-2014-6271                           9/24/2014
bash43-026      CVE-2014-7169                           9/26/2014
bash43-027      exported function namespace change      9/27/2014
bash43-028      CVE-2014-7186/CVE-2014-7187             10/1/2014
bash43-029      CVE-2014-6277                           10/2/2014

Signed-off-by: Mark Hatle <mark.hatle@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
10 years agopseudo*.bb: update to pseudo 1.6.2
Peter Seebach [Fri, 3 Oct 2014 22:58:31 +0000 (17:58 -0500)]
pseudo*.bb: update to pseudo 1.6.2

pseudo 1.6.2 fixes problems with 64-bit inodes and some underlying issues
involving file renames that could occasionally cause very strange behaviors
files being deleted, linked, or renamed, mostly observed as strange
recovery if an inode got reused.

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
10 years agocross-canadian: Disable the packagedata stamp-extra-info
Richard Purdie [Fri, 3 Oct 2014 16:50:35 +0000 (16:50 +0000)]
cross-canadian: Disable the packagedata stamp-extra-info

Similarly to native/cross disable this since otherwise the packagedata
can be marked as machine specific and if you switch machines
which share an architecture, you'll get toolchain overlapping files
errors.

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
10 years agometa-environment: Deal with machines which change TARGET_OS
Richard Purdie [Fri, 3 Oct 2014 16:52:22 +0000 (16:52 +0000)]
meta-environment: Deal with machines which change TARGET_OS

Some machines change TARGET_OS, cross-canadian resets this which
is not what we want in this specific case. This fixes spe toolchains
for example.

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
10 years agogcc-runtime: Add linux-gnuspe symlink to fix c++ headers
Richard Purdie [Fri, 3 Oct 2014 17:03:25 +0000 (17:03 +0000)]
gcc-runtime: Add linux-gnuspe symlink to fix c++ headers

Some architectures can mix different TARGET_OS values, in most cases
we just use one but in the ppc case, can use two different values. In this
case, to use one toolchain with both, we need to ensure the symlinks exist.

This isn't ideal but does fix the ppc toolchains for the release, after
which better ways of handling this can be investiaged. Without this, failures
in the C++ toolchain are seen.

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
10 years agokernel.bbclass: enable a link for external module building
Nitin A Kamble [Tue, 30 Sep 2014 21:40:05 +0000 (14:40 -0700)]
kernel.bbclass: enable a link for external module building

Even though the kernel-dev package provides the required support for
building external kernel modules on the target, some commonly used scripts
and utilities fail as they are not finding the kernel module build support
files at the desired location.

Create the /lib/modules/<kernel-version>/build link on target pointing to
the sources provided by the kernel-dev package, to fix the issue.

Fixes Bug:
[YOCTO #2968]

Signed-off-by: Nitin A Kamble <nitin.a.kamble@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
10 years agokernel: Added bc-native as DEPENDS
Alejandro Hernandez [Thu, 2 Oct 2014 20:33:23 +0000 (15:33 -0500)]
kernel: Added bc-native as DEPENDS

The makefile checks for bc during for compilation

[YOCTO #6781]

Signed-off-by: Alejandro Hernandez <alejandro.hernandez@linux.intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>