]> code.ossystems Code Review - openembedded-core.git/log
openembedded-core.git
7 years agobinutils: CVE-2017-8396
Thiruvadi Rajaraman [Wed, 13 Sep 2017 11:39:39 +0000 (17:09 +0530)]
binutils: CVE-2017-8396

Source: git://sourceware.org/git/binutils-gdb.git
MR: 74101
Type: Security Fix
Disposition: Backport from binutils-2_29
ChangeID: db47540066f83529439566f8621d6e35fe86b77c
Description:

buffer overflow in perform_relocation

The existing reloc offset range tests didn't catch small negative
offsets less than the size of the reloc field.

PR 21432
 * reloc.c (reloc_offset_in_range): New function.
   (bfd_perform_relocation, bfd_install_relocation): Use it.
   (_bfd_final_link_relocate): Likewise.

Affects: <= 2.29
Author: Alan Modra <amodra@gmail.com>
Signed-off-by: Thiruvadi Rajaraman <trajaraman@mvista.com>
Reviewed-by: Armin Kuster <akuster@mvista.com>
Signed-off-by: Armin Kuster <akuster@mvista.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
7 years agoFix seg-fault in the linker when examining a corrupt binary.
Manjunath S Matti [Wed, 13 Sep 2017 10:32:32 +0000 (16:02 +0530)]
Fix seg-fault in the linker when examining a corrupt binary.

Source: https://sourceware.org/
MR: 74244
Type: Security Fix
Disposition: Backport from https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=531336e3a0b79ed60cfc36ad2d6579b6a71175da
ChangeID: 69cc8699fcb0655f3a48778e514552dfaea7229c
Description:

Fix seg-fault in the linker when examining a corrupt binary.

PR ld/20909
* aoutx.h (aout_link_add_symbols): Fix off-by-one error in check
for an illegal string offset.

CVE: CVE-2017-7300
Affects: < 2.27-r0.9.1
Author: Nick Clifton <nickc@redhat.com>
Signed-off-by: Manjunath S Matti <mmatti@mvista.com>
Signed-off-by: Armin Kuster <akuster@mvista.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
7 years agobinutils: CVE-2017-8397
Thiruvadi Rajaraman [Mon, 4 Sep 2017 13:05:19 +0000 (18:35 +0530)]
binutils: CVE-2017-8397

Source: git://sourceware.org/git/binutils-gdb.git
MR: 74114
Type: Security Fix
Disposition: Backport from binutils-2_29
ChangeID: d55e7590c08c4db483bba2fa35df8fbb6283686e
Description:

 Fix a seg-fault when processing a corrupt binary containing reloc(s) with negative addresses.

        PR binutils/21434
        * reloc.c (bfd_perform_relocation): Check for a negative address
        in the reloc.

Affects: <= 2.29

Author: Nick Clifton <nickc@redhat.com>
Signed-off-by: Thiruvadi Rajaraman <trajaraman@mvista.com>
Reviewed-by: Armin Kuster <akuster@mvista.com>
Signed-off-by: Armin Kuster <akuster@mvista.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
7 years agobinutils: CVE-2017-8395
Thiruvadi Rajaraman [Mon, 4 Sep 2017 13:01:38 +0000 (18:31 +0530)]
binutils: CVE-2017-8395

Source: git://sourceware.org/git/binutils-gdb.git
MR: 74153
Type: Security Fix
Disposition: Backport from binutils-2_29
ChangeID: 27dce214c561f9ae6f874990432f9d76a7de29d4
Description:

    Fix seg-fault attempting to compress a debug section in a corrupt binary.

        PR binutils/21431
        * compress.c (bfd_init_section_compress_status): Check the return
        value from bfd_malloc.

Affects: <= 2.29

Author: Nick Clifton <nickc@redhat.com>
Signed-off-by: Thiruvadi Rajaraman <trajaraman@mvista.com>
Reviewed-by: Armin Kuster <akuster@mvista.com>
Signed-off-by: Armin Kuster <akuster@mvista.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
7 years agobinutils: CVE-2017-8393
Thiruvadi Rajaraman [Mon, 4 Sep 2017 12:56:31 +0000 (18:26 +0530)]
binutils: CVE-2017-8393

Source: git://sourceware.org/git/binutils-gdb.git
MR: 74179
Type: Security Fix
Disposition: Backport from binutils-2_29
ChangeID: 976156cd25454143883090ca42010c38c6d6af0f
Description:

PR 21412, get_reloc_section assumes .rel/.rela name for SHT_REL/RELA.

    This patch fixes an assumption made by code that runs for objcopy and
    strip, that SHT_REL/SHR_RELA sections are always named starting with a
    .rel/.rela prefix.  I'm also modifying the interface for
    elf_backend_get_reloc_section, so any backend function just needs to
    handle name mapping.

Affects: <= 2.29

Author: Alan Modra <amodra@gmail.com>
Signed-off-by: Thiruvadi Rajaraman <trajaraman@mvista.com>
Reviewed-by: Armin Kuster <akuster@mvista.com>
Signed-off-by: Armin Kuster <akuster@mvista.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
7 years agobinutils: CVE-2017-7304
Thiruvadi Rajaraman [Mon, 4 Sep 2017 11:17:25 +0000 (16:47 +0530)]
binutils: CVE-2017-7304

Source: git://sourceware.org/git/binutils-gdb.git
MR: 74192
Type: Security Fix
Disposition: Backport from binutils-2_28-branch
ChangeID: 9a4c249becded1b479c0b9e9f175aebb80294317
Description:

  Fix seg-fault in strip when copying a corrupt binary.

        PR binutils/20931
        * elf.c (copy_special_section_fields): Check for an invalid
        sh_link field before attempting to follow it.

Affects: <= 2.28

Author: Nick Clifton <nickc@redhat.com>
Signed-off-by: Thiruvadi Rajaraman <trajaraman@mvista.com>
Reviewed-by: Armin Kuster <akuster@mvista.com>
Signed-off-by: Armin Kuster <akuster@mvista.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
7 years agobinutils: CVE-2017-7303
Thiruvadi Rajaraman [Mon, 4 Sep 2017 11:14:08 +0000 (16:44 +0530)]
binutils: CVE-2017-7303

Source: git://sourceware.org/git/binutils-gdb.git
MR: 74205
Type: Security Fix
Disposition: Backport from binutils-2_28-branch
ChangeID: db5bfb63661d39846c3b03353e1383c621759d48
Description:

    Fix seg-fault attempting to strip a corrupt binary.

        PR binutils/20922
        * elf.c (find_link): Check for null headers before attempting to
        match them.

Affects: <= 2.28
Author: Nick Clifton <nickc@redhat.com>
Signed-off-by: Thiruvadi Rajaraman <trajaraman@mvista.com>
Reviewed-by: Armin Kuster <akuster@mvista.com>
Signed-off-by: Armin Kuster <akuster@mvista.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
7 years agobinutils: CVE-2017-7302
Thiruvadi Rajaraman [Mon, 4 Sep 2017 11:09:25 +0000 (16:39 +0530)]
binutils: CVE-2017-7302

Source: git://sourceware.org/git/binutils-gdb.git
MR: 74218
Type: Security Fix
Disposition: Backport from binutils-2_28-branch
ChangeID: 11677f4fb24c7a49efc23ea7d54de1bf85e74b12
Description:

  Fix seg-fault running strip on a corrupt binary.

        PR binutils/20921
        * aoutx.h (squirt_out_relocs): Check for and report any relocs
        that could not be recognised.

Affects: <= 2.28

Author: Nick Clifton <nickc@redhat.com>
Signed-off-by: Thiruvadi Rajaraman <trajaraman@mvista.com>
Reviewed-by: Armin Kuster <akuster@mvista.com>
Signed-off-by: Armin Kuster <akuster@mvista.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
7 years agobinutils: CVE-2017-7301
Thiruvadi Rajaraman [Mon, 4 Sep 2017 11:04:32 +0000 (16:34 +0530)]
binutils: CVE-2017-7301

Source: git://sourceware.org/git/binutils-gdb.git
MR: 74231
Type: Security Fix
Disposition: Backport from binutils-2_28-branch
ChangeID: 1fbae9f71e3ad90f930f8b25d550de964e05c259
Description:

   Fix seg-fault in linker parsing a corrupt input file.

        PR ld/20924
        (aout_link_add_symbols): Fix off by one error checking for
        overflow of string offset.

Affects: <= 2.28

Author: Nick Clifton <nickc@redhat.com>
Signed-off-by: Thiruvadi Rajaraman <trajaraman@mvista.com>
Reviewed-by: Armin Kuster <akuster@mvista.com>
Signed-off-by: Armin Kuster <akuster@mvista.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
7 years agobinutils: CVE-2017-7227
Thiruvadi Rajaraman [Mon, 4 Sep 2017 08:33:42 +0000 (14:03 +0530)]
binutils: CVE-2017-7227

Source: git://sourceware.org/git/binutils-gdb.git
MR: 74270
Type: Security Fix
Disposition: Backport from binutils-2_28-branch
ChangeID: e4e88f56ba13671afb5b3194ca4c1c59601e5fd5
Description:

Fix seg-fault in linker when passed a bogus input script.

    PR ld/20906
    * ldlex.l: Check for bogus strings in linker scripts.

Affects: <= 2.28

Author: Nick Clifton <nickc@redhat.com>
Signed-off-by: Thiruvadi Rajaraman <trajaraman@mvista.com>
Reviewed-by: Armin Kuster <akuster@mvista.com>
Signed-off-by: Armin Kuster <akuster@mvista.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
7 years agobinutils: CVE-2017-7225
Thiruvadi Rajaraman [Mon, 4 Sep 2017 08:29:36 +0000 (13:59 +0530)]
binutils: CVE-2017-7225

Source: git://sourceware.org/git/binutils-gdb.git
MR: 74296
Type: Security Fix
Disposition: Backport from binutils-2_29-branch
ChangeID: d2cf3ab15c89351c941c92e4cdf28c2bfa9dcda8
Description:

Fix seg-fault running addr2line on a corrupt binary.

    PR binutils/20891
    * aoutx.h (find_nearest_line): Handle the case where the main file
      name and the directory name are both empty.

Affects: <= 2.29

Author: Nick Clifton <nickc@redhat.com>
Signed-off-by: Thiruvadi Rajaraman <trajaraman@mvista.com>
Reviewed-by: Armin Kuster <akuster@mvista.com>
Signed-off-by: Armin Kuster <akuster@mvista.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
7 years agobinutils: CVE-2017-7224
Thiruvadi Rajaraman [Mon, 4 Sep 2017 08:26:15 +0000 (13:56 +0530)]
binutils: CVE-2017-7224

Source: git://sourceware.org/git/binutils-gdb.git
MR: 74309
Type: Security Fix
Disposition: Backport from binutils-2_29-branch
ChangeID: 640c2ad711ead368a65079a464c55368851e8744
Description:

Fix a seg-fault disassembling a corrupt binary.

    PR binutils/20892
    * aoutx.h (find_nearest_line): Handle the case where the function
      name is empty.

Affects: <= 2.29
Signed-off-by: Thiruvadi Rajaraman <trajaraman@mvista.com>
Reviewed-by: Armin Kuster <akuster@mvista.com>
Signed-off-by: Armin Kuster <akuster@mvista.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
7 years agobinutils: CVE-2017-7223
Thiruvadi Rajaraman [Mon, 4 Sep 2017 08:22:14 +0000 (13:52 +0530)]
binutils: CVE-2017-7223

Source: git://sourceware.org/git/binutils-gdb.git
MR: 74322
Type: Security Fix
Disposition: Backport from binutils-2_29-branch
ChangeID: c7e14cdaab09996e736a6294834d3470ac9ddb6c
Description:

Fix seg fault attempting to unget an EOF character.

    PR gas/20898
    * app.c (do_scrub_chars): Do not attempt to unget EOF.

Affects: <= 2.29

Signed-off-by: Thiruvadi Rajaraman <trajaraman@mvista.com>
Reviewed-by: Armin Kuster <akuster@mvista.com>
Signed-off-by: Armin Kuster <akuster@mvista.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
7 years agobinutils: CVE-2017-12450_12452_12453_12454_12456
Thiruvadi Rajaraman [Thu, 31 Aug 2017 13:53:29 +0000 (19:23 +0530)]
binutils: CVE-2017-12450_12452_12453_12454_12456

Source: git://sourceware.org/git/binutils-gdb.git
MR: 73854, 73827, 73814, 73801, 73775
Type: Security Fix
Disposition: Backport from binutils-2_29-branch
ChangeID: fb23096307f9903872a04edf171d1fd2099e35c5
Description:

Fix address violation errors parsing corrupt binary files.

PR 21813
    binutils* rddbg.c (read_symbol_stabs_debugging_info): Check for an empty
        string whilst concatenating symbol names.

    bfd * mach-o.c (bfd_mach_o_canonicalize_relocs): Pass the base address
        of the relocs to the canonicalize_one_reloc routine.
        * mach-o.h (struct bfd_mach_o_backend_data): Update the prototype
        for the _bfd_mach_o_canonicalize_one_reloc field.
        * mach-o-arm.c (bfd_mach_o_arm_canonicalize_one_reloc): Add
        res_base parameter.  Use to check for corrupt pair relocs.
        * mach-o-aarch64.c (bfd_mach_o_arm64_canonicalize_one_reloc):
        Likewise.
        * mach-o-i386.c (bfd_mach_o_i386_canonicalize_one_reloc):
        Likewise.
        * mach-o-x86-64.c (bfd_mach_o_x86_64_canonicalize_one_reloc):
        Likewise.

        * vms-alpha.c (_bfd_vms_slurp_eihd): Make sure that there is
        enough data in the record before attempting to parse it.
        (_bfd_vms_slurp_eeom): Likewise.

        (_bfd_vms_slurp_egsd): Check for an invalid section index.
        (image_set_ptr): Likewise.
        (alpha_vms_slurp_relocs): Likewise.

Affects: <= 2.29
Signed-off-by: Thiruvadi Rajaraman <trajaraman@mvista.com>
Reviewed-by: Armin Kuster <akuster@mvista.com>
Signed-off-by: Armin Kuster <akuster@mvista.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
7 years agobinutils: CVE-2017-12451
Thiruvadi Rajaraman [Thu, 31 Aug 2017 13:30:45 +0000 (19:00 +0530)]
binutils: CVE-2017-12451

Source: git://sourceware.org/git/binutils-gdb.git
MR: 73840
Type: Security Fix
Disposition: Backport from binutils-2_29-branch
ChangeID: 582c686f18c059d665189a6a09df3a8cc4a3b093
Description:

Fix address violation when attempting to read a corrupt field in a COFF archive header structure.

PR 21786
* coff-rs6000.c (_bfd_strntol): New function.
  (_bfd_strntoll): New function.
  (GET_VALUE_IN_FIELD): New macro.
  (EQ_VALUE_IN_FIELD): new macro.
  (_bfd_xcoff_slurp_armap): Use new macros.
  (_bfd_xcoff_archive_p): Likewise.
  (_bfd_xcoff_read_ar_hdr): Likewise.
  (_bfd_xcoff_openr_next_archived_file): Likewise.
  (_bfd_xcoff_stat_arch_elt): Likewise.

Extend previous fix to coff-rs6000.c to coff64-rs6000.c

PR 21786
* coff64-rs6000.c (_bfd_strntol): New function.
  (_bfd_strntoll): New function.
  (GET_VALUE_IN_FIELD): New macro.
  (xcoff64_slurp_armap): Use new macros.

Affects: <= 2.29
Signed-off-by: Thiruvadi Rajaraman <trajaraman@mvista.com>
Reviewed-by: Armin Kuster <akuster@mvista.com>
Signed-off-by: Armin Kuster <akuster@mvista.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
7 years agobinutils: CVE-2017-12449, CVE-2017_12455, CVE-2017-12457, CVE-2017-12458, CVE-2017...
Thiruvadi Rajaraman [Wed, 30 Aug 2017 12:24:52 +0000 (17:54 +0530)]
binutils: CVE-2017-12449, CVE-2017_12455, CVE-2017-12457, CVE-2017-12458, CVE-2017-12459

Source: git://sourceware.org/git/binutils-gdb.git
MR: 73867, 73788, 73762, 73749, 73734
Type: Security Fix
Disposition: Backport from binutils-2_29-branch
ChangeID: 29a1fd75a879d40560b3891305b7d9577e26ffe5
Description:

Fix address violation issues encountered when parsing corrupt binaries.

PR 21840
 * mach-o.c (bfd_mach_o_read_symtab_strtab): Fail if the symtab
   size is -1.
 * nlmcode.h (nlm_swap_auxiliary_headers_in): Replace assertion
   with error return.
 * section.c (bfd_make_section_with_flags): Fail if the name or bfd
   are NULL.
 * vms-alpha.c (bfd_make_section_with_flags): Correct computation
   of end pointer.
   (evax_bfd_print_emh): Check for invalid string lengths.

Fix address violations when reading corrupt VMS records.

PR binutils/21618
 * vms-alpha.c (evax_bfd_print_emh): Check for insufficient record
   length.
   (evax_bfd_print_eeom): Likewise.
   (evax_bfd_print_egsd): Check for an overlarge record length.
   (evax_bfd_print_etir): Likewise.

Affects: <= 2.29

Signed-off-by: Thiruvadi Rajaraman <trajaraman@mvista.com>
Reviewed-by: Armin Kuster <akuster@mvista.com>
Signed-off-by: Armin Kuster <akuster@mvista.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
7 years agobinutils: CVE-2017-12448
Thiruvadi Rajaraman [Wed, 30 Aug 2017 12:21:17 +0000 (17:51 +0530)]
binutils: CVE-2017-12448

Source: git://sourceware.org/git/binutils-gdb.git
MR: 73880
Type: Security Fix
Disposition: Backport from binutils-2_29-branch
ChangeID: 6ef7c8e941d7a1c069b29e4671178c0d02427e3f
Description:

Fix use-after-free error when parsing a corrupt nested archive.

PR 21787
* archive.c (bfd_generic_archive_p): If the bfd does not have the
  correct magic bytes at the start, set the error to wrong format
  and clear the format selector before returning NULL.

Affects: <= 2.29

Signed-off-by: Thiruvadi Rajaraman <trajaraman@mvista.com>
Reviewed-by: Armin Kuster <akuster@mvista.com>
Signed-off-by: Armin Kuster <akuster@mvista.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
7 years agobinutils: CVE-2017-7226
Thiruvadi Rajaraman [Wed, 23 Aug 2017 08:36:58 +0000 (14:06 +0530)]
binutils: CVE-2017-7226

Source: git://sourceware.org/git/binutils-gdb.git
MR: 74283
Type: Security Fix
Disposition: Backport from binutils_v2_28
ChangeID: 82097a4b98d3d576e1b1bfb7ac9ae17fd153c909
Description:

Use strnlen to avoid running over the end of the string buffer.

Affects: <= 2.28

Signed-off-by: Thiruvadi Rajaraman <trajaraman@mvista.com>
Reviewed-by: Armin Kuster <akuster@mvista.com>
Signed-off-by: Armin Kuster <akuster@mvista.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
7 years agobinutils: Security Fix CVE-2017-9041
Armin Kuster [Wed, 21 Jun 2017 19:01:25 +0000 (12:01 -0700)]
binutils: Security Fix CVE-2017-9041

Source: binutils-gdb.git
MR: 72791
Type: Security Fix
Disposition: Backport from https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;a=commit;h=919383ac718c2a3187ee2a9ad659daa22da26258
ChangeID: 7b4588368a367a4d57efbfdcd9c00fcc0875af7b
Description:

Affects: <= 2.28
Signed-off-by: Armin Kuster <akuster@mvista.com>
Reviewed-by  Jeremy Puhlman <jpuhlman@mvista.com>

Signed-off-by: Armin Kuster <akuster@mvista.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
7 years agobinutils: Security fix for CVE-2017-9040 and 2017-9042
Armin Kuster [Wed, 21 Jun 2017 18:22:35 +0000 (11:22 -0700)]
binutils: Security fix for CVE-2017-9040 and 2017-9042

Source: binutils-gdb.git
MR: 72756, 72805
Type: Security Fix
Disposition: Backport from https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;a=commit;h=7296a62a2a237f6b1ad8db8c38b090e9f592c8cf
ChangeID: af83ec9e8322e0e051bb684bd2fee5fe8a506fbc
Description:

excluded some changes as the code does not exist in our version. Does not affect fix.
Affects: <= Binutils 2017-04-12

Signed-off-by: Armin Kuster <akuster@mvista.com>
Reviewed-by  Jeremy Puhlman <jpuhlman@mvista.com>

Signed-off-by: Armin Kuster <akuster@mvista.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
7 years agobinutils: Security Fix CVE-2017-9039
Armin Kuster [Wed, 21 Jun 2017 17:28:29 +0000 (10:28 -0700)]
binutils: Security Fix CVE-2017-9039

Source: binutils-gbd.git
MR: 72742
Type: Security Fix
Disposition: Backport from git://sourceware.org/binutils-gdb.git
ChangeID: 280f36838862ea67fdcd65b162c1a4835cf924dc
Description:

Affects: <= 2.28

Signed-off-by: Armin Kuster <akuster@mvista.com>
Reviewed-by  Jeremy Puhlman <jpuhlman@mvista.com>

Signed-off-by: Armin Kuster <akuster@mvista.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
7 years agobinutis: Security fix CVE-2017-9038
Armin Kuster [Wed, 21 Jun 2017 16:55:20 +0000 (09:55 -0700)]
binutis: Security fix CVE-2017-9038

Source: Binutils.org
MR: 72728
Type: Security Fix
Disposition: Backport from https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=f32ba72991d2406b21ab17edc234a2f3fa7fb23d
ChangeID: 7e242783945a87af0a821b924bd16624a0f18fb3
Description:

Affects: <= 2.28
Signed-off-by: Armin Kuster <akuster@mvista.com>
Reviewed-by  Jeremy Puhlman <jpuhlman@mvista.com>

Signed-off-by: Armin Kuster <akuster@mvista.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
7 years agobinutis: Security fix CVE-2017-7614
Armin Kuster [Wed, 21 Jun 2017 15:07:20 +0000 (08:07 -0700)]
binutis: Security fix CVE-2017-7614

Source: binutils-gbd.git
MR: 71732
Type: Security Fix
Disposition: Backport from https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=b814a36d3440de95f2ac6eaa4fc7935c322ea456
ChangeID: 44d3f2d902013f6e8faf485bf736106a11603e16
Description:

minor change to get changelog to apply

Affects: binutils < 2.28
Signed-off-by: Armin Kuster <akuster@mvista.com>
Reviewed-by  Jeremy Puhlman <jpuhlman@mvista.com>

Signed-off-by: Armin Kuster <akuster@mvista.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
7 years agolocal.conf.sample: Weakly set BB_DISKMON_DIRS
Richard Purdie [Sat, 6 Jan 2018 10:02:10 +0000 (10:02 +0000)]
local.conf.sample: Weakly set BB_DISKMON_DIRS

For various reasons we need to be able to set and override this from
auto.conf on our test infrastructure. We have tried forcing the variable
but this then breaks other selftests. In the interests of not complicating
things further and needing to modify the tests across releases, weaken
the default assignment.

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
7 years agobuild-appliance-image: Update to morty head revision
Richard Purdie [Thu, 14 Dec 2017 13:30:18 +0000 (13:30 +0000)]
build-appliance-image: Update to morty head revision

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
7 years agopopulate_sdk_ext: Use prebuilt uninative tarball
Richard Purdie [Sat, 9 Dec 2017 10:59:34 +0000 (10:59 +0000)]
populate_sdk_ext: Use prebuilt uninative tarball

For uninative to work, it relies on it being updated to new versions as
newer glibcs are built. This means the uninative generated by the current
build may not be as recent as the uninative that is being downloaded by
uninative.bbclass.

If this occurs, we can get symbol mismatch errors.

Ultimately, the sstate and the uninative versions need to match so we
should use the same tarball as uninative.bbclass is using, not the one
we built.

[YOCTO #12405]

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
7 years agouninative: Handle futex hangs caused by glibc version mismatches
Richard Purdie [Fri, 8 Dec 2017 15:14:31 +0000 (15:14 +0000)]
uninative: Handle futex hangs caused by glibc version mismatches

We've been seeing hangs in smart on the autobuilders where it hangs in
pthread futex calls. It appears to happen when some components are
installed from sstate (which use the interpreter from uninative)
and other components are built natively (and use the host's interpreter).

Its primarily affecting software which uses shared memory with futexs in
for locking purposes (which bdb does called from librpm from smart).

This isn't an issue in pyro and rocko and beyond since they use recipe
specific sysroots which included a change to always change to the
uninative interpreter. We could backport those changes but they're
fairly invasive changes to the sstate code. This patch is a more
minimal change which ensures binaries are always using the uninative
interpreter regardless of whether they're built locally or installed
from sstate.

This is only an issue if you're using an sstate mirror and hosts
with a variety of different libc versions. It has only become an issue
on recent libc versions where there was clearly some forwards compatibility
issue introduced.

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
7 years agognu-efi: Support musl-x32 build
sweeaun [Wed, 5 Jul 2017 23:56:34 +0000 (16:56 -0700)]
gnu-efi: Support musl-x32 build

To build 64-bit binaries for musl-x32.

(From OE-Core rev: a9301cbc90a61b54f99f321934f421d432ec8826)

Signed-off-by: sweeaun <swee.aun.khor@intel.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Hand applied for morty version

Signed-off-by: Armin Kuster <akuster808@gmail.com>
7 years agognu-efi: copy header files for x32 build
Saul Wold [Mon, 10 Apr 2017 15:58:30 +0000 (08:58 -0700)]
gnu-efi: copy header files for x32 build

Gnu-efi needs to be build for 64bit since it is a boot time tool. It
needs these 2 headers to be in 64 bit versions, we can use the existing
32bit ones as there is not really any difference.

[YOCTO #11051]

(From OE-Core rev: 3398552663e1e18aaf352d682a77a8ad3af94e5a)

Signed-off-by: Saul Wold <sgw@linux.intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
7 years agognu-efi: ignore arch mismatch for x32
Christopher Larson [Wed, 14 Dec 2016 03:00:57 +0000 (20:00 -0700)]
gnu-efi: ignore arch mismatch for x32

(From OE-Core rev: 97976de2a5465cb476379ebc9d9e1b3f0837853a)

Signed-off-by: Christopher Larson <chris_larson@mentor.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
7 years agognu-efi: build 64-bit for x32
Christopher Larson [Wed, 14 Dec 2016 03:00:35 +0000 (20:00 -0700)]
gnu-efi: build 64-bit for x32

We're targeting the x86_64 EFI ABI.

(From OE-Core rev: 24325410acb670a3e7bc626ac3607efa8df38dc5)

Signed-off-by: Christopher Larson <chris_larson@mentor.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
7 years agonspr: Fix build error due to missing stdint.h> include
Khem Raj [Wed, 6 Sep 2017 16:09:07 +0000 (18:09 +0200)]
nspr: Fix build error due to missing stdint.h> include

(From OE-Core rev: 2f95c71ba17a6d68d3805efe82097c10b6740244)

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Armin Kuster <akuster@mvista.com>
7 years agoadwaita-icon-theme: add a patch to speed up the do_install() task
Alexander Kanavin [Tue, 13 Jun 2017 15:41:40 +0000 (18:41 +0300)]
adwaita-icon-theme: add a patch to speed up the do_install() task

Goes down to 40 seconds from over 4 minutes :)

Note that there is no control over the amount of shell jobs; on my machine
this is not a problem, but if it's a problem on less capable hardware,
we can add some kind of limiter.

(From OE-Core rev: cd9af17028c069f52fb0616074170093dd63c143)

Signed-off-by: Alexander Kanavin <alexander.kanavin@linux.intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
updated to apply to morty

Signed-off-by: Armin Kuster <akuster808@gmail.com>
7 years agogrub: Fix build with gcc7
Khem Raj [Fri, 21 Apr 2017 21:09:47 +0000 (14:09 -0700)]
grub: Fix build with gcc7

backport patches from upsteam and adapt them to 2.0 codebase

(From OE-Core rev: 347976bf08158d1aa46dfea6f0f9d6dcc0d97395)

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
7 years agogrub: Fix build with glibc 2.25
Khem Raj [Mon, 19 Dec 2016 06:39:50 +0000 (22:39 -0800)]
grub: Fix build with glibc 2.25

Backport relevant patch from grub git

(From OE-Core rev: 5e501f8e3ecf14f31da3cca5ab762af5ddc81964)

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
7 years agosystemd: fixes mips64 login issue
Armin Kuster [Wed, 22 Nov 2017 17:46:02 +0000 (09:46 -0800)]
systemd: fixes mips64 login issue

With out this patch, one can not login to a mips64 machine like qumumips64 or Octeon mips64 when
systemd is enabled.

remove PACKAGECONFIG option too

affects: systemd < 2.3.1

Reviewed-by: Jeremy Puhlman <jpuhlman@mvista.com>
Signed-off-by: Jagadeesh Krishnanjanappa <jkrishnanjanappa@mvista.com>
Signed-off-by: Armin Kuster <akuster@mvista.com>
7 years agoglibc: CVE-2017-15670
Thiruvadi Rajaraman [Thu, 16 Nov 2017 13:01:26 +0000 (18:31 +0530)]
glibc: CVE-2017-15670

Source: git://sourceware.org/git/glibc.git
MR: 76647
Type: Security Fix
Disposition: Backport from glibc-2.27
ChangeID: f4494e472d36748c2b3171a91640b26c638f6e0b
Description:

CVE-2017-15670: glob: Fix one-byte overflow [BZ #22320]
Affects: glibc < 2.27

Signed-off-by: Thiruvadi Rajaraman <trajaraman@mvista.com>
Reviewed-by: Armin Kuster <akuster@mvista.com>
Signed-off-by: Armin Kuster <akuster@mvista.com>
7 years agoglibc: Security fix for CVE-2017-8804
Rajkumar Veer [Fri, 22 Sep 2017 15:31:23 +0000 (21:01 +0530)]
glibc: Security fix for CVE-2017-8804

Source: https://sourceware.org
MR: 74337
Type: Security Fix
Disposition: Backport from https://sourceware.org/ml/libc-alpha/2017-05/msg00105.html
ChangeID: c8c51220e40185dd0ac3d657046e70b82cb94bee
Description:

CVE-2017-8804
sunrpc: xdr_bytes/xdr_string need to free buffer on error [BZ #21461]

Affects: glibc < 2.25

Signed-off-by: Rajkumar Veer <rveer@mvista.com>
Reviewed-by: Armin Kuster <akuster@mvista.com>
Signed-off-by: Armin Kuster <akuster@mvista.com>
7 years agoglibc: Fix CVE-2017-1000366
George McCollister [Tue, 21 Nov 2017 20:01:21 +0000 (14:01 -0600)]
glibc: Fix CVE-2017-1000366

Add backported patches from the upstream release/2.24/master branch to
fix CVE-2017-1000366. Also add a backported patch that resolves SSE
related build problems introduced by these patches.

Signed-off-by: George McCollister <george.mccollister@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
7 years agoglibc: Fix CVE-2015-5180
George McCollister [Tue, 21 Nov 2017 20:01:20 +0000 (14:01 -0600)]
glibc: Fix CVE-2015-5180

Add backported patch to fix CVE-2015-5180 from the upstream
release/2.24/master branch.

Signed-off-by: George McCollister <george.mccollister@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
7 years agopython3: do not hardcode "lib" into site-packages search path
Alexander Kanavin [Wed, 22 Nov 2017 19:46:19 +0000 (13:46 -0600)]
python3: do not hardcode "lib" into site-packages search path

This was not working in multilib or x32 setups and amazingly, was not
noticed until now.

The actual modification is in Lib/site.py, the rest is just devtool moving things around in the patch.

Signed-off-by: Alexander Kanavin <alexander.kanavin@linux.intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Armin Kuster <akuster@mvista.com>
7 years agocross-localedef-native: Include locale_t.h
Joshua Watt [Wed, 6 Dec 2017 19:46:28 +0000 (13:46 -0600)]
cross-localedef-native: Include locale_t.h

Newer versions of glibc (2.26) moved the struct locale definition from
xlocale.h to bits/types/locale_t.h. For compatibility with build hosts
using this version of glibc, include this header.

See f0be25b6336db7492e47d2e8e72eb8af53b5506d in glibc

Signed-off-by: Joshua Watt <JPEWhacker@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
7 years agofontconfig: Fix namespace conflicts with glibc
Khem Raj [Wed, 22 Nov 2017 17:51:47 +0000 (17:51 +0000)]
fontconfig: Fix namespace conflicts with glibc

glibc 2.25 will come with TS 18661-1 macro definitions in limits.h which ends with following errors

| ../../fontconfig-2.12.1/src/fcmatch.c:324:63: error: 'PRI_CHAR_WIDTH_STRONG' undeclared here (not in a function)
|  #define FC_OBJECT(NAME, Type, Cmp) { FC_##NAME##_OBJECT, Cmp, PRI_##NAME##_STRONG, PRI_##NAME##_WEAK },
|                                                                ^
| ../../fontconfig-2.12.1/src/fcobjs.h:54:1: note: in expansion of macro 'FC_OBJECT'
|  FC_OBJECT (CHAR_WIDTH,  FcTypeInteger, NULL)
|  ^~~~~~~~~
| ../../fontconfig-2.12.1/src/fcmatch.c:324:84: error: 'PRI_CHAR_WIDTH_WEAK' undeclared here (not in a function)
|  #define FC_OBJECT(NAME, Type, Cmp) { FC_##NAME##_OBJECT, Cmp, PRI_##NAME##_STRONG, PRI_##NAME##_WEAK },
|                                                                                     ^
| ../../fontconfig-2.12.1/src/fcobjs.h:54:1: note: in expansion of macro 'FC_OBJECT'
|  FC_OBJECT (CHAR_WIDTH,  FcTypeInteger, NULL)
|  ^~~~~~~~~
| make[3]: *** [Makefile:632: fcmatch.lo] Error 1

(From OE-Core rev: 3575826752e7140da493c7f560fb5fcf483fc9b4)

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Armin Kuster <akuster@mvista.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
7 years agobuild-appliance-image: Update to morty head revision
Richard Purdie [Wed, 22 Nov 2017 00:05:13 +0000 (00:05 +0000)]
build-appliance-image: Update to morty head revision

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
7 years agoneon: fix fetch error
Armin Kuster [Tue, 21 Nov 2017 01:43:49 +0000 (17:43 -0800)]
neon: fix fetch error

ERROR: neon-native-0.30.1-r0 do_checkuri: Fetcher failure for URL: 'http://www.webdav.org/neon/neon-0.30.1.tar.gz'. URL http://www.webdav.org/neon/neon-0.30.1.tar.gz doesn't work
ERROR: neon-native-0.30.1-r0 do_checkuri: Function failed: do_checkuri

change to https and url to OSL.
www.webdav.org is down or dean

Signed-off-by: Armin Kuster <akuster808@gmail.com>
7 years agobyacc: Fix fetch error
Armin Kuster [Tue, 21 Nov 2017 00:55:12 +0000 (16:55 -0800)]
byacc: Fix fetch error

ERROR: byacc-20160606-r0 do_checkuri: Fetcher failure for URL: 'ftp://invisible-island.net/byacc/byacc-20160606.tgz'. URL ftp://invisible-island.net/byacc/byacc-20160606.tgz doesn't work

update to https and achive location

Signed-off-by: Armin Kuster <akuster808@gmail.com>
7 years agomesa: fix SRC_URI
Armin Kuster [Tue, 21 Nov 2017 00:38:27 +0000 (16:38 -0800)]
mesa: fix SRC_URI

ERROR: mesa-2_12.0.1-r0 do_checkuri: Fetcher failure for URL: 'ftp://ftp.freedesktop.org/pub/mesa/12.0.1/mesa-12.0.1.tar.xz'. URL ftp://ftp.freedesktop.org/pub/mesa/12.0.1/mesa-12.0.1.tar.xz doesn't work

change to https and use older-versions path

Signed-off-by: Armin Kuster <akuster808@gmail.com>
7 years agoppp: include netinet/in.h before linux/in.h in pppoe.h
Yi Zhao [Fri, 17 Nov 2017 02:18:53 +0000 (10:18 +0800)]
ppp: include netinet/in.h before linux/in.h in pppoe.h

The patch ppp-fix-building-with-linux-4.8.patch tries to fix build error
with 4.8 or newer linux headers, but it would break building with kernel
< 4.8. There is a better solution to fix this issue in upstream.
Backport the upstream patch and replace the old one.

[YOCTO #10457]

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
7 years agolinux-yocto/4.8: update to v4.8.26
Bruce Ashfield [Thu, 16 Nov 2017 14:22:25 +0000 (09:22 -0500)]
linux-yocto/4.8: update to v4.8.26

Integrating the stable commits from Paul Gortmaker for 4.8.26:

   72fd9e50372d Linux 4.8.26
   bca975f9d61e pstore: Shut down worker when unregistering
   831528f6d369 libnvdimm, pfn: fix 'npfns' vs section alignment
   24e6cea34654 libnvdimm, pmem: fix a NULL pointer BUG in nd_pmem_notify
   6585d5899c12 libnvdimm, region: fix flush hint detection crash
   5679bab89552 ipmi: Fix kernel panic at ipmi_ssif_thread()
   a0edda9d006a Bluetooth: hci_intel: add missing tty-device sanity check
   bdfa99dcaf41 Bluetooth: hci_bcm: add missing tty-device sanity check
   3a197a20503b Bluetooth: Fix user channel for 32bit userspace on 64bit kernel
   2dd96e6a56f6 tty: pty: Fix ldisc flush after userspace become aware of the data already
   bcb0e0973a3f serial: omap: suspend device on probe errors
   e689fc4ccff0 serial: omap: fix runtime-pm handling on unbind
   f1a81a255788 serial: samsung: Use right device for DMA-mapping calls
   a437a5323381 padata: free correct variable
   a05f144a9d3b CIFS: add misssing SFM mapping for doublequote
   349eb07c3118 cifs: fix CIFS_IOC_GET_MNT_INFO oops
   4ca4593289e4 CIFS: fix oplock break deadlocks
   dfc44a5e2f72 CIFS: fix mapping of SFM_SPACE and SFM_PERIOD
   53c2f66294a5 SMB3: Work around mount failure when using SMB3 dialect to Macs
   f39f85a9ec9c Set unicode flag on cifs echo request to avoid Mac error
   ab4bab94e003 Fix match_prepath()
   853849a70bbb mm: prevent potential recursive reclaim due to clearing PF_MEMALLOC
   2a5e703230d8 fs/block_dev: always invalidate cleancache in invalidate_bdev()
   70a6a7422b35 ceph: fix memory leak in __ceph_setxattr()
   1eeca04d2091 fs/xattr.c: zero out memory copied to userspace in getxattr
   6fba0c4d3153 orangefs: do not check possibly stale size on truncate
   aef961cbc788 orangefs: do not set getattr_time on orangefs_lookup
   ad35f4485072 orangefs: clean up oversize xattr validation
   decc9664a7e4 orangefs: fix bounds check for listxattr
   d62cac98eeb2 ext4: evict inline data when writing to memory map
   ae88e436f00e IB/hfi1: Prevent kernel QP post send hard lockups
   5512f0343e1c IB/mlx4: Reduce SRIOV multicast cleanup warning message to debug level
   c831cf234702 IB/mlx4: Fix ib device initialization error flow
   a2f97e715839 IB/IPoIB: ibX: failed to create mcg debug file
   4bb65c977cec IB/core: For multicast functions, verify that LIDs are multicast LIDs
   20ad33c71d4d IB/core: Fix sysfs registration error flow
   0c4446e4d65c dm thin: fix a memory leak when passing discard bio down
   8d5feb420e3b dm rq: check blk_mq_register_dev() return value in dm_mq_init_request_queue()
   c7c19f2ba5db dm era: save spacemap metadata root after the pre-commit
   820b3860065f crypto: algif_aead - Require setkey before accept(2)
   f0757bc95106 block: fix blk_integrity_register to use template's interval_exp if not 0
   491700e5904b KVM: arm/arm64: fix races in kvm_psci_vcpu_on
   2146d0cf63d9 KVM: x86: fix user triggerable warning in kvm_apic_accept_events()
   42f69a5e282f perf/x86: Fix Broadwell-EP DRAM RAPL events
   b07a3600b881 um: Fix PTRACE_POKEUSER on x86_64
   583a0e218a99 x86, pmem: Fix cache flushing for iovec write < 8 bytes
   57760637e50b selftests/x86/ldt_gdt_32: Work around a glibc sigaction() bug
   60ca4f96555f x86/boot: Fix BSS corruption/overwrite bug in early x86 kernel startup
   7fbd5421d5be usb: hub: Do not attempt to autosuspend disconnected devices
   812c5f577e13 usb: hub: Fix error loop seen after hub communication errors
   41c09b5e0036 usb: Make sure usb/phy/of gets built-in
   2a164b1e1a37 usb: misc: add missing continue in switch
   f184320880ec staging: comedi: jr3_pci: cope with jiffies wraparound
   c38aa7ed4029 staging: comedi: jr3_pci: fix possible null pointer dereference
   452fd7a68826 staging: gdm724x: gdm_mux: fix use-after-free on module unload
   1ad9126ccbcb USB: Proper handling of Race Condition when two USB class drivers try to call init_usb_class simultaneously
   ea0e314f4b99 USB: serial: ftdi_sio: add device ID for Microsemi/Arrow SF2PLUS Dev Kit
   4e9575b41329 usb: host: xhci: print correct command ring address
   fe51d203bf26 usb: xhci: bInterval quirk for TI TUSB73x0
   cb3c76399e7d iscsi-target: Set session_fall_back_to_erl0 when forcing reinstatement
   82d4c0daad4d target/fileio: Fix zero-length READ and WRITE handling
   1fb92530ac51 target: Fix compare_and_write_callback handling for non GOOD status
   82c59b4dee19 block: get rid of blk_integrity_revalidate()
   bb25c9749298 drm/ttm: fix use-after-free races in vm fault handling
   04b96345d77c f2fs: sanity check segment count
   8004022099cb net: mdio-mux: bcm-iproc: call mdiobus_free() in error path
   9974c98f5155 bpf: don't let ldimm64 leak map addresses on unprivileged
   8ed935b2461f bnxt_en: allocate enough space for ->ntp_fltr_bmap
   547e949b6556 ipv6: reorder ip6_route_dev_notifier after ipv6_dev_notf
   41c79abb8e54 ipv6: initialize route null entry in addrconf_init()
   60b4e1ac1bcd rtnetlink: NUL-terminate IFLA_PHYS_PORT_NAME string
   3c76ecbb68fc ipv4, ipv6: ensure raw socket message is big enough to hold an IP header
   51f0c06655d7 tcp: do not inherit fastopen_req from parent
   4f4ef66f8a54 net: usb: qmi_wwan: add Telit ME910 support
   9190457be81e net: ipv6: Do not duplicate DAD on link up
   fdbd8c9606d4 tcp: fix wraparound issue in tcp_lp
   402219c947aa bpf, arm64: fix jit branch offset related to ldimm64
   d1d3b5fac542 tcp: do not underestimate skb->truesize in tcp_trim_head()
   b74a9f53923e macsec: dynamically allocate space for sglist
   49e7abb4251d sparc64: fix fault handling in NGbzero.S and GENbzero.S
   6ed64cb9e610 ALSA: hda - Fix deadlock of controller device lock at unbinding
   8b5e31398ade staging: emxx_udc: remove incorrect __init annotations
   19c278eaeef5 staging: wlan-ng: add missing byte order conversion
   d923e0bc0605 brcmfmac: Make skb header writable before use
   ba43849f60c0 brcmfmac: Ensure pointer correctly set if skb data location changes
   a092754fb592 MIPS: R2-on-R6 MULTU/MADDU/MSUBU emulation bugfix
   f316b49a6127 scsi: mac_scsi: Fix MAC_SCSI=m option when SCSI=m
   276ac4dbab2f serial: 8250_omap: Fix probe and remove for PM runtime
   6525e9e63036 clk: rockchip: add "," to mux_pll_src_apll_dpll_gpll_usb480m_p on rk3036
   9d393de73c66 USB: serial: io_edgeport: fix descriptor error handling
   f66d82e82938 USB: serial: mct_u232: fix modem-status error handling
   f8de7e87ed68 USB: serial: quatech2: fix control-message error handling
   7070f0b5094f USB: serial: ftdi_sio: fix latency-timer error handling
   47f6ccfb10df USB: serial: ark3116: fix open error handling
   53aef8f0af7d USB: serial: ti_usb_3410_5052: fix control-message error handling
   2f54a3328f7a USB: serial: io_edgeport: fix epic-descriptor handling
   5f5f5ba0c0d7 USB: serial: ssu100: fix control-message error handling
   4b1da19109b9 USB: serial: digi_acceleport: fix incomplete rx sanity check
   c88342441acb USB: serial: keyspan_pda: fix receive sanity checks
   b3b834c7459c usb: chipidea: Handle extcon events properly
   0ff8c355d1fd usb: chipidea: Only read/write OTGSC from one place
   f5dc93d23c27 usb: host: ohci-exynos: Decrese node refcount on exynos_ehci_get_phy() error paths
   f42b266cb8e0 usb: host: ehci-exynos: Decrese node refcount on exynos_ehci_get_phy() error paths
   c350ac01f4f5 KVM: nVMX: do not leak PML full vmexit to L1
   3a1e3fa213cf KVM: nVMX: initialize PML fields in vmcs02
   2c44b9685a55 Revert "KVM: nested VMX: disable perf cpuid reporting"
   48d8e6283bc9 x86/platform/intel-mid: Correct MSI IRQ line for watchdog device
   bafa78c1a65e kprobes/x86: Fix kernel panic when certain exception-handling addresses are probed
   cf63da5d56fd clk: Make x86/ conditional on CONFIG_COMMON_CLK
   7b34882df641 x86/pci-calgary: Fix iommu_free() comparison of unsigned expression >= 0
   270dd7dbbf77 x86/ioapic: Restore IO-APIC irq_chip retrigger callback
   6a44ffd4dbc8 iwlwifi: mvm: writing zero bytes to debugfs causes a crash
   301082e9c9b7 iwlwifi: mvm: synchronize firmware DMA paging memory
   ee4cac606ac1 iwlwifi: mvm: fix references to first_agg_queue in DQA mode
   97d3c48bd7d4 iwlwifi: mvm: Use aux queue for offchannel frames in dqa
   8fffec6fff0b iwlwifi: mvm: fix reorder timer re-arming
   46913adaacf1 iwlwifi: pcie: don't increment / decrement a bool
   52368ddf6050 iwlwifi: mvm: overwrite skb info later
   83a12256b172 iwlwifi: fix MODULE_FIRMWARE for 6030
   86c87e0daa7f mwifiex: Avoid skipping WEP key deletion for AP
   748491d99d68 mwifiex: remove redundant dma padding in AMSDU
   1569633df83e mwifiex: debugfs: Fix (sometimes) off-by-1 SSID print
   ad4e8ed421e3 ARM: dts: sun7i: lamobo-r1: Fix CPU port RGMII settings
   c60416688ca4 ARM: OMAP5 / DRA7: Fix HYP mode boot for thumb2 build
   dd58846a5358 leds: ktd2692: avoid harmless maybe-uninitialized warning
   381a374688d0 arm: dts: qcom: Fix ipq board clock rates
   a109c21045cf arm64: dts: r8a7795: Mark EthernetAVB device node disabled
   23f7727a1514 powerpc/ftrace: Fix confusing help text for DISABLE_MPROFILE_KERNEL
   8a35dd72827b powerpc/powernv: Fix opal_exit tracepoint opcode
   492d4c504275 powerpc/mm: Fixup wrong LPCR_VRMASD value
   73ae00c24a34 cpupower: Fix turbo frequency reporting for pre-Sandy Bridge cores
   f348742efaa7 tmp: use pdev for parent device in tpm_chip_alloc
   024f822c0f84 tpm: fix RC value check in tpm2_seal_trusted
   bb61249ebc26 hwmon: (it87) Fix pwm4 detection for IT8620 and IT8628
   2484c067e875 drm/sti: fix GDP size to support up to UHD resolution
   e90276910177 9p: fix a potential acl leak
   b1bde1d61aad dm ioctl: prevent stack leak in dm ioctl call
   19952586021f ceph: try getting buffer capability for readahead/fadvise
   2afa5529d98e hwmon: (it87) Avoid registering the same chip on both SIO addresses
   20f5706414a4 scsi: storvsc: Workaround for virtual DVD SCSI version
   bfd008363cd2 timerfd: Protect the might cancel mechanism proper
   c5eb2c3f266f ftrace/x86: Fix triple fault with graph tracing and suspend-to-ram
   79a67346f310 ARCv2: save r30 on kernel entry as gcc uses it for code-gen
   d3b2ff49ba72 net: can: usb: gs_usb: Fix buffer on stack
   a0b23de216d0 macsec: avoid heap overflow in skb_to_sgvec
   93f3107c481a nfsd: stricter decoding of write-like NFSv2/v3 ops
   0b02144efadc nfsd4: minor NFSv2/v3 write decoding cleanup
   cf2b8df2aeea nfsd: check for oversized NFSv2/v3 arguments
   25673437d3fa Input: i8042 - add Clevo P650RS to the i8042 reset list
   328bc25d3525 ASoC: intel: Fix PM and non-atomic crash in bytcr drivers
   fe671099fe8d p9_client_readdir() fix
   29e8f9612740 MIPS: Avoid BUG warning in arch_check_elf
   a10a315719a5 MIPS: cevt-r4k: Fix out-of-bounds array access
   da135df655bf MIPS: KGDB: Use kernel context for sleeping threads
   741f4ca5cc4a ALSA: seq: Don't break snd_use_lock_sync() loop by timeout
   f379be22874a ALSA: firewire-lib: fix inappropriate assignment between signed/unsigned type
   44b8f005e518 ALSA: oxfw: fix regression to handle Stanton SCS.1m/1d
   52b55c9a73a4 ipv6: check raw payload size correctly in ioctl
   2d55be6b35f3 tcp: memset ca_priv data to 0 properly
   3571e0a934e0 ipv6: check skb->protocol before lookup for nexthop
   47a52f3af5b3 net: ipv6: regenerate host route if moved to gc list
   0719e904a617 macvlan: Fix device ref leak when purging bc_queue
   974c18f8cebc net/mlx5e: Fix ETHTOOL_GRXCLSRLALL handling
   ef68966cafe2 net/mlx5e: Fix small packet threshold
   1a3947d78b89 ip6mr: fix notification device destruction
   8907cd376e97 netpoll: Check for skb->queue_mapping
   58fb2345c82e net: ipv6: RTF_PCPU should not be settable from userspace
   92cfda6d6c88 dp83640: don't recieve time stamps twice
   efe73421873e sh_eth: unmap DMA buffers when freeing rings
   aa146f0df8e6 net: vrf: Fix setting NLM_F_EXCL flag when adding l3mdev rule
   193a114497ae net-timestamp: avoid use-after-free in ip_recv_error
   11d565eec8c8 ipv6: Fix idev->addr_list corruption
   aa1985f1aff7 tcp: clear saved_syn in tcp_disconnect()
   b5323dffe1b4 sctp: listen on the sock only when it's state is listening or closed
   eed6013d5c23 net: ipv4: fix multipath RTM_GETROUTE behavior when iif is given
   12add9d91a53 l2tp: fix PPP pseudo-wire auto-loading
   a3fa03ac269b l2tp: take reference on sessions being dumped
   9921b663da3b net/packet: fix overflow in check for tp_reserve
   fb125e7739e8 net/packet: fix overflow in check for tp_frame_nr
   d4380e099256 l2tp: purge socket queues in the .destruct() callback
   5ea6fbde7c3a kcm: return immediately after copy_from_user() failure
   b7c5f5e113a5 net: phy: handle state correctly in phy_stop_machine
   853ff758b593 net: neigh: guard against NULL solicit() method
   cc2ac542fad4 sparc64: Fix kernel panic due to erroneous #ifdef surrounding pmd_write()
   875b971b846a sparc64: kern_addr_valid regression
   1e33ff438412 ping: implement proper locking
   fc5b4dcef3f8 Revert "mmc: sdhci-msm: Enable few quirks"
   cb66cad28324 x86/mce/AMD: Give a name to MCA bank 3 when accessed with legacy MSRs
   c15018165b38 powerpc/kprobe: Fix oops when kprobed on 'stdu' instruction
   19aea564a24f ubi/upd: Always flush after prepared for an update
   a4f1bff6eb6e mac80211: reject ToDS broadcast data frames
   6e9b4ada4075 mmc: sdhci-esdhc-imx: increase the pad I/O drive strength for DDR50 card
   d7f182088aab Input: elantech - add Fujitsu Lifebook E547 to force crc_enabled
   1edb7d9791b8 s390/mm: fix CMMA vs KSM vs others
   302dc30d4442 CIFS: remove bad_network_name flag
   08f16bf5c9ba cifs: Do not send echoes before Negotiate is complete
   07c9b2816029 ring-buffer: Have ring_buffer_iter_empty() return true when empty
   c2bd41c8a061 tracing: Allocate the snapshot buffer before enabling probe
   9ec3d1139f9b KEYS: fix keyctl_set_reqkey_keyring() to not leak thread keyrings
   46756acd3faf KEYS: Change the name of the dead type to ".dead" to prevent user access
   fd9a944708bd KEYS: Disallow keyrings beginning with '.' to be joined as session keyrings
   970e219ec7e1 Linux 4.8.25
   3f6b8912e69f Allow stack to grow up to address space limit
   19a363d4402a mm: fix new crash in unmapped_area_topdown()
   c8955c83e743 mm: larger stack guard gap, between vmas
   a82d21362f92 net: ipv6: check route protocol when deleting routes
   e359556b299b virtio-console: avoid DMA from stack
   528b66933f17 [media] dvb-usb-firmware: don't do DMA on stack
   5655955e2035 [media] dvb-usb: don't use stack for firmware load
   b86699b34fa2 mm: Tighten x86 /dev/mem with zeroing reads
   d5b2bb5bd980 rtc: tegra: Implement clock handling
   ac2ac7ec1681 x86/xen: Fix APIC id mismatch warning on Intel
   a831c1987779 platform/x86: acer-wmi: setup accelerometer when machine has appropriate notify event
   84170de6d3e2 nbd: fix 64-bit division
   c429ae72cf29 nbd: use loff_t for blocksize and nbd_set_size args
   1b141a09624f drm/nouveau/disp/mcp7x: disable dptmds workaround
   76b43ba43287 mm: memcontrol: use special workqueue for creating per-memcg caches
   72728f399c48 ext4: fix inode checksum calculation problem if i_extra_size is small
   33046ab810d1 [media] dvb-usb-v2: avoid use-after-free
   9ec073c459f4 ath9k: fix NULL pointer dereference
   fcbe53258784 crypto: ahash - Fix EINPROGRESS notification callback
   137b0eb0f463 crypto: algif_aead - Fix bogus request dereference in completion function
   1ff725fc2f3a ftrace: Fix function pid filter on instances
   de250a35cfc4 zram: do not use copy_page with non-page aligned address
   6285713e76c7 char: lack of bool string made CONFIG_DEVPORT always on
   d201330068bb ftrace: Fix removing of second function probe
   1c89c5b0ae04 irqchip/irq-imx-gpcv2: Fix spinlock initialization
   0f7c92a68fee pwm: rockchip: State of PWM clock should synchronize with PWM enabled state
   3618cee7ddb0 can: ifi: use correct register to read rx status
   e9561d080af6 libnvdimm: fix reconfig_mutex, mmap_sem, and jbd2_handle lockdep splat
   f65e33661a10 xen, fbfront: fix connecting to backend
   f582e5052686 target: Avoid mappedlun symlink creation during lun shutdown
   be322b49b2c8 scsi: sd: Fix capacity calculation with 32-bit sector_t
   c5958346d28c scsi: qla2xxx: Add fix to read correct register value for ISP82xx.
   303fe475c738 scsi: sd: Consider max_xfer_blocks if opt_xfer_blocks is unusable
   86efd3fc929b scsi: sr: Sanity check returned mode data
   edadf1178d73 iscsi-target: Drop work-around for legacy GlobalSAN initiator
   1f501b60dde5 iscsi-target: Fix TMR reference leak during session shutdown
   2cb216efc35f efi/fb: Avoid reconfiguration of BAR that covers the framebuffer
   57765d387d5f efi/libstub: Skip GOP with PIXEL_BLT_ONLY format
   d90cac84a86b ACPI / scan: Set the visited flag for all enumerated devices
   5abbbaefcd3e x86/vdso: Plug race between mapping and ELF header setup
   920f423183ee x86/vdso: Ensure vdso32_enabled gets set to valid values only
   f4426d1f0c68 x86, pmem: fix broken __copy_user_nocache cache-bypass assumptions
   0624cecc272a x86/signals: Fix lower/upper bound reporting in compat siginfo
   9dcf17398d35 perf/x86: Avoid exposing wrong/stale data in intel_pmu_lbr_read_32()
   774eb28fa29d Input: xpad - add support for Razer Wildcat gamepad
   da3214318021 CIFS: store results of cifs_reopen_file to avoid infinite wait
   4c8f2f3e96f7 drm/nouveau/mmu/nv4a: use nv04 mmu rather than the nv44 one
   fe2c5a1cab29 drm/nouveau/mpeg: mthd returns true on success now
   4f0d2ae5a754 zsmalloc: expand class bit
   14826db7e76f thp: fix MADV_DONTNEED vs clear soft dirty race
   307ea67867f7 thp: fix MADV_DONTNEED vs. MADV_FREE race
   84fcd4c616b3 tcmu: Skip Data-Out blocks before gathering Data-In buffer for BIDI case
   50a18a2c13e7 tcmu: Fix wrongly calculating of the base_command_size
   04129b9eac53 tcmu: Fix possible overwrite of t_data_sg's last iov[]
   1a96c4236345 cgroup, kthread: close race window where new kthreads can be migrated to non-root cgroups
   5af2034c5fa7 dma-buf: add support for compat ioctl
   47dc33b02d9f net/mlx4_core: Fix when to save some qp context flags for dynamic VST to VGT transitions
   ca1cf7fa5e89 net/mlx4_core: Fix racy CQ (Completion Queue) free
   c5d6272b48da net/mlx4_en: Fix bad WQE issue
   0cbe1ba52ac8 usb: hub: Wait for connection to be reestablished after port reset
   7e3909e459be blk-mq: Avoid memory reclaim when remapping queues
   e53675310932 net/packet: fix overflow in check for priv area size
   9f81b537bdcd crypto: caam - fix invalid dereference in caam_rsa_init_tfm()
   685e2f71d3d7 crypto: caam - fix RNG deinstantiation error checking
   4b8d172d131a MIPS: Select HAVE_IRQ_EXIT_ON_IRQ_STACK
   06f41eff1758 MIPS: Switch to the irq_stack in interrupts
   c48b1c1a49a2 MIPS: Only change $28 to thread_info if coming from user mode
   43862dab7d91 MIPS: Stack unwinding while on IRQ stack
   7f8386a79663 MIPS: Introduce irq_stack
   0f13c368b848 mtd: bcm47xxpart: fix parsing first block after aligned TRX
   009b4b307221 rt2x00: Fix incorrect usage of CONFIG_RT2X00_LIB_USB
   f436af7dd007 rt2x00usb: do not anchor rx and tx urb's
   ee88a8be30c3 rt2x00usb: fix anchor initialization
   ff61181a39f4 i2c: bcm2835: Fix hang for writing messages larger than 16 bytes
   eb4750b18bbf orangefs: fix buffer size mis-match between kernel space and user space.
   72b953eed0ad drm/i915: Stop using RP_DOWN_EI on Baytrail
   1701d71fc709 drm/i915: Avoid tweaking evaluation thresholds on Baytrail v3
   a8a385efec43 drm/i915: Nuke debug messages from the pipe update critical section
   d6e319631aec drm/i915/gen9: Increase PCODE request timeout to 50ms
   440e2c3517e5 usb-storage: Add ignore-residue quirk for Initio INIC-3619
   dd3716075af6 x86/reboot/quirks: Add ASUS EeeBook X205TA/W reboot quirk
   99219a2e9f79 x86/reboot/quirks: Add ASUS EeeBook X205TA reboot quirk
   4c3ef6907d0d platform/x86: asus-wmi: Detect quirk_no_rfkill from the DSDT
   95315644bbf7 platform/x86: asus-wmi: Set specified XUSB2PR value for X550LB
   b590aade4894 watchdog: s3c2410: Fix infinite interrupt in soft mode
   6fdc067c889b PCI: Add ACS quirk for Qualcomm QDF2400 and QDF2432
   2141fdc4e698 PCI: Sort the list of devices with D3 delay quirk by ID
   0ccdd4e7d8fe mmc: sdhci-of-esdhc: remove default broken-cd for ARM
   eb6e770ac347 PCI: Disable MSI for HiSilicon Hip06/Hip07 Root Ports
   1b87711b21ed PCI: Add Broadcom Northstar2 PAXC quirk for device class and MPSS
   59b53425ef16 ARM: smccc: Update HVC comment to describe new quirk parameter
   8d0029108932 drm/msm/adreno: move function declarations to header file
   d327e7b178fe firmware: qcom: scm: Fix interrupted SCM calls
   71ea9cad84ef arm: kernel: Add SMC structure parameter
   ebb1ca9607ad ASoC: sun4i-i2s: Add quirks to handle a31 compatible
   72f6e982940a ACPI: save NVS memory for Lenovo G50-45
   e362b1d5bfe9 ASoC: Intel: cht_bsw_rt5645: add Baytrail MCLK support
   535fcee36f5b ASoC: Intel: cht_bsw_rt5645: harden ACPI device detection
   b1ed3fbd993c ASoC: Intel: Baytrail: add quirk for Lenovo Thinkpad 10
   eee473322818 ASoC: codecs: rt5670: add quirk for Lenovo Thinkpad 10
   beca997c156f ASoC: rt5670: Add missing 10EC5072 ACPI ID
   1c8321c341da ACPI / button: Change default behavior to lid_init_state=open
   2b02ab5f7391 sata: ahci-da850: implement a workaround for the softreset quirk
   11f02d8d7fe6 PCI: Add ACS quirk for Intel Union Point
   9acd4d7d243a ARM: dts: STiH407-family: set snps,dis_u3_susphy_quirk
   61df7a67273c drm/mga: remove device_is_agp callback
   0a834595f470 usb: dwc3: host: pass quirk-broken-port-ped property for known broken revisions
   d0f8f71e4164 usb: dwc3: Add revision numbers for the USB 3.0 IP
   51ea9fa290a8 usb: host: xhci-plat: enable BROKEN_PED quirk if platform requested
   65e185bbe4d0 usb: xhci: add quirk flag for broken PED bits
   12757d3bd930 ARM: davinci: PM: support da8xx DT platforms
   cbb4822bc2c5 Input: gpio_keys - add support for GPIO descriptors
   36a721bb8fac serial: 8250_omap: Add OMAP_DMA_TX_KICK quirk for AM437x
   5fc8dd1fcaf5 usb: chipidea: msm: Rely on core to override AHBBURST
   9a07b4bc1627 scsi: ufs: issue link starup 2 times if device isn't active
   1afa312a5792 scsi: ufs: introduce a new ufshcd_statea UFSHCD_STATE_EH_SCHEDULED
   10c3c4d5694e drm/i915: actually drive the BDW reserved IDs
   b1451c6b586c drm/i915: more .is_mobile cleanups for BDW
   3afb3167148c drm/i915: fix INTEL_BDW_IDS definition
   955982e63676 drm/i915: Remove .is_mobile field from platform struct
   bc30de19926a drm/edid: constify edid quirk list
   4942997e5413 HID: usbhid: Add quirk for Mayflash/Dragonrise DolphinBar.
   07a85162b9b8 HID: usbhid: Add quirk for the Futaba TOSD-5711BB VFD
   62dce069c3e7 nvme: simplify stripe quirk
   38bbd1f16854 platform/x86: acer-wmi: Only supports AMW0_GUID1 on acer family
   2135d9cd273b ALSA: usb-audio: Add native DSD support for TEAC 501/503 DAC
   1fc78f3d70c3 PCI: Expand "VPD access disabled" quirk message
   508e2ef86c69 ALSA: usb-audio: add implicit fb quirk for Axe-Fx II
   0c79032c962a scsi: ufs: add quirk to increase host PA_SaveConfigTime
   a3cc3396dc8f PCI: thunder-pem: Factor out resource lookup
   6f35e25c8609 arm64: PCI: Add local struct device pointers
   d529876b02ee arm64: PCI: Manage controller-specific data on per-controller basis
   30c5d2cf21f2 x86/intel_idle: Add CPU model 0x4a (Atom Z34xx series)
   fade24327d61 svcauth_gss: Close connection when dropping an incoming message
   cc8fc2110982 scsi: ufs: ensure that host pa_tactivate is higher than device
   ae98a7756e77 mmc: sdhci-msm: Enable few quirks
   b1a90b94df54 HID: multitouch: do not retrieve all reports for all devices
   3d6c18b57d87 HID: multitouch: enable the Surface 3 Type Cover to report multitouch data
   76cc100d5055 HID: microsoft: Add Surface 4 type cover pro 4 (JP)
   56974903bdfc HID: sensor-hub: add quirk for Microchip MM7150
   3aa2d02479fb HID: sensor-hub add quirk for Microsoft Surface 3
   dad6aeb660e1 scsi: ufs: introduce UFSHCD_QUIRK_PRDT_BYTE_GRAN quirk
   e1ce839b3c12 scsi: ufs: Enable no vccq quirk for skhynix device
   61ebc76124e1 clocksource/drivers/arm_arch_timer: Don't assume clock runs in suspend
   7d0017bedd43 net/mlx4_core: Use device ID defines
   5f376717da59 HID: i2c-hid: add a simple quirk to fix device defects
   b50df0349088 HID: usbhid: Add quirks for Mayflash/Dragonrise GameCube and PS3 adapters
   377bf00a97dd clk: lpc32xx: add a quirk for PWM and MS clock dividers
   28b80486dd11 random: use chacha20 for get_random_int/long
   5c14ae6c7827 mm/mempolicy.c: fix error handling in set_mempolicy and mbind.
   c47efb0b87cf Documentation: stable-kernel-rules: fix stable-tag format
   fa71007c6e60 MIPS: c-r4k: Fix Loongson-3's vcache/scache waysize calculation
   d28f0f2ce69a MIPS: Flush wrong invalid FTLB entry for huge page
   2d39761a305e MIPS: Add MIPS_CPU_FTLB for Loongson-3A R2
   f4546c48295c MIPS: Check TLB before handle_ri_rdhwr() for Loongson-3
   0f0cb6322f50 MIPS: Lantiq: fix missing xbar kernel panic
   01b1e6e66f38 MIPS: End spinlocks with .insn
   aa476702873f MIPS: ralink: Fix typos in rt3883 pinctrl
   003987fb012a MIPS: Force o32 fp64 support on 32bit MIPS64r6 kernels
   3788f4d19762 s390/uaccess: get_user() should zero on failure (again)
   a18a3a40ad5d s390/decompressor: fix initrd corruption caused by bss clear
   cf251fc84ece nios2: reserve boot memory for device tree
   c9c6823c8113 dm raid: fix NULL pointer dereference for raid1 without bitmap
   c51b530047c4 powerpc/crypto/crc32c-vpmsum: Fix missing preempt_disable()
   38494d50d37a powerpc: Don't try to fix up misaligned load-with-reservation instructions
   e00fe427b686 powerpc/64: Fix flush_(d|i)cache_range() called from modules
   7fd934338c40 powerpc/kernel: Use kprobe blacklist for asm functions
   c2517a0fb5c0 powerpc/mm: Add missing global TLB invalidate if cxl is active
   d29bfd4a2a5c powerpc: Disable HFSCR[TM] if TM is not supported
   9413b2816e7d metag/usercopy: Add missing fixups
   60e688fa135c metag/usercopy: Fix src fixup in from user rapf loops
   3bd77f9b75ff metag/usercopy: Set flags before ADDZ
   78ba0a0bc796 metag/usercopy: Zero rest of buffer from copy_from_user
   23fe537faf0a metag/usercopy: Add early abort to copy_to_user
   f93708a2faf5 metag/usercopy: Fix alignment error checking
   8a27f50ba14b metag/usercopy: Drop unused macros
   d3226caf07b4 brcmfmac: use local iftype avoiding use-after-free of virtual interface
   b4b6d1cb7013 ring-buffer: Fix return value check in test_ringbuffer()
   d06668b5c696 xfs: Honor FALLOC_FL_KEEP_SIZE when punching ends of files
   f135506f5ce4 dm verity fec: fix bufio leaks
   d10b19745ca0 dm verity fec: limit error correction recursion
   9536055f1ec5 ptrace: fix PTRACE_LISTEN race corrupting task->state
   bf895e98cfcb mm/page_alloc.c: fix print order in show_free_areas()
   93fb8a316b99 Reset TreeId to zero on SMB2 TREE_CONNECT
   00a743bf7f88 cfg80211: check rdev resume callback only for registered wiphy
   75479ff29b44 arm64: mm: unaligned access by user-land should be received as SIGBUS
   4e28a700651d iio: bmg160: reset chip when probing
   89d631362aab kvm: arm/arm64: Fix locking for kvm_free_stage2_pgd
   d52401c31a5f arm/arm64: KVM: Take mmap_sem in kvm_arch_prepare_memory_region
   73ba7e664274 arm/arm64: KVM: Take mmap_sem in stage2_unmap_vm
   6f5c6ce2d9e9 staging: android: ashmem: lseek failed due to no FMODE_LSEEK.
   a9edcc5125e7 sysfs: be careful of error returns from ops->show()
   f9b7f08dea27 drm/vmwgfx: fix integer overflow in vmw_surface_define_ioctl()
   b2e8f39a707a drm/vmwgfx: Remove getparam error message
   a339fb1acddf drm/ttm, drm/vmwgfx: Relax permission checking when opening surfaces
   7394c14ce409 drm/vmwgfx: avoid calling vzalloc with a 0 size in vmw_get_cap_3d_ioctl()
   2ba060df6cd2 drm/vmwgfx: NULL pointer dereference in vmw_surface_define_ioctl()
   f752c3934126 drm/vmwgfx: Type-check lookups of fence objects

Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
7 years agopython-3.3-multilib.patch: Fixes getpath on multilib configurations
Jose Lamego [Thu, 16 Nov 2017 00:56:22 +0000 (18:56 -0600)]
python-3.3-multilib.patch: Fixes getpath on multilib configurations

When using multilib configurations either on arm/arm64 and x86/x86-64
python3 failed to execute due to a failure when looking for its
platform independent and dependent libraries.

This patch fixes this issue by assigning lib_python to the appropriate
macro.

[YOCTO #10812]

Signed-off-by: Alejandro Hernandez <alejandro.hernandez@linux.intel.com>
Signed-off-by: Jose Lamego <jose.a.lamego@linux.intel.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
7 years agozlib: Fix CVE-2016-9843
George McCollister [Tue, 14 Nov 2017 20:01:06 +0000 (14:01 -0600)]
zlib: Fix CVE-2016-9843

Add backported patch to fix CVE-2016-9843 which was fixed in zlib 1.2.9

https://nvd.nist.gov/vuln/detail/CVE-2016-9843

Signed-off-by: George McCollister <george.mccollister@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
7 years agozlib: Fix CVE-2016-9842
George McCollister [Tue, 14 Nov 2017 20:01:05 +0000 (14:01 -0600)]
zlib: Fix CVE-2016-9842

Add backported patch to fix CVE-2016-9842 which was fixed in zlib 1.2.9

https://nvd.nist.gov/vuln/detail/CVE-2016-9842

Signed-off-by: George McCollister <george.mccollister@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
7 years agozlib: Fix CVE-2016-9841
George McCollister [Tue, 14 Nov 2017 20:01:04 +0000 (14:01 -0600)]
zlib: Fix CVE-2016-9841

Add backported patch to fix CVE-2016-9841 which was fixed in zlib 1.2.9

https://nvd.nist.gov/vuln/detail/CVE-2016-9841

Signed-off-by: George McCollister <george.mccollister@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
7 years agozlib: Fix CVE-2016-9840
George McCollister [Tue, 14 Nov 2017 20:01:03 +0000 (14:01 -0600)]
zlib: Fix CVE-2016-9840

Add backported patch to fix CVE-2016-9840 which was fixed in zlib 1.2.9

https://nvd.nist.gov/vuln/detail/CVE-2016-9840

Signed-off-by: George McCollister <george.mccollister@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
7 years agotcf-agent: Fix daemon termination
Jan Kiszka [Tue, 14 Nov 2017 19:56:19 +0000 (20:56 +0100)]
tcf-agent: Fix daemon termination

The upstream init script uses SIGUSR2 to terminate that daemon because
SIGTERM is ignored. As the killproc function does not support specifying
a signal, switch to start-stop-daemon. Drop the retry loop because
SIGUSR2 is lethal for agent.

Signed-off-by: Jan Kiszka <jan.kiszka@siemens.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Javier Viguera <javier.viguera@digi.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
7 years agotcf-agent: kill with USR2 in systemd stop
Martin Kelly [Tue, 14 Nov 2017 19:56:18 +0000 (20:56 +0100)]
tcf-agent: kill with USR2 in systemd stop

tcf-agent ignores SIGTERM, so upstream uses USR2 instead. This issue was noticed
by Jan Kiszka and Brian Avery around the same time:

https://patchwork.openembedded.org/patch/139546/
https://patchwork.openembedded.org/patch/139560/

However, these patches fixed only the init scripts, not the systemd service
file. This patch fixes the systemd file.

Signed-off-by: Martin Kelly <mkelly@xevo.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Javier Viguera <javier.viguera@digi.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
7 years agoopkg: fix conffile errors in 'opkg status' calls
Ross Burton [Tue, 10 Jan 2017 15:39:47 +0000 (15:39 +0000)]
opkg: fix conffile errors in 'opkg status' calls

If a conffile has been deleted (common when building a debugfs) the status
command will throw errors instead of handling that situation.  Stop the code
being executed in the first place if it wasn't asked for, and handle errors
gracefully.

[ YOCTO #10761 ]

Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
7 years agocoreutils_6.9: fix musl compilation
André Draszik [Tue, 3 Oct 2017 02:16:00 +0000 (19:16 -0700)]
coreutils_6.9: fix musl compilation

As per the patch

Signed-off-by: André Draszik <adraszik@tycoint.com>
Acked-by: Sylvain Lemieux <slemieux@tycoint.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Cherry-pick from meta-gplv2:

  http://git.yoctoproject.org/cgit/cgit.cgi/meta-gplv2/commit/?id=e42ded0ee35d0aab0de8fa090eda9f1c08bcbb4c

Signed-off-by: Andre McCurdy <armccurdy@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
7 years agocoreutils_6.9: Disable broken man pages
Richard Purdie [Tue, 3 Oct 2017 02:15:59 +0000 (19:15 -0700)]
coreutils_6.9: Disable broken man pages

These are generated from --help output of the host tools which is clearly
incorrect, particularly given the older nature of this recipe. Simply
disable them entirely.

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Cherry-pick from meta-gplv2:

  http://git.yoctoproject.org/cgit/cgit.cgi/meta-gplv2/commit/?id=46349e1a8734fb94a04bf7c234c01fa175333238

Signed-off-by: Andre McCurdy <armccurdy@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
7 years agogmp_4.2.1: prevent calls to mpn_add_nc() if HAVE_NATIVE_mpn_sub_nc is false
Andre McCurdy [Thu, 2 Nov 2017 00:23:36 +0000 (17:23 -0700)]
gmp_4.2.1: prevent calls to mpn_add_nc() if HAVE_NATIVE_mpn_sub_nc is false

When building for aarch64 (ie relying only on generic C code rather
than asm) libgmp.so contains undefined references to __gmpn_add_nc
and __gmpn_sub_nc which causes attempts to link with -lgmp to fail:

 | .../usr/lib/libgmp.so: undefined reference to `__gmpn_sub_nc'
 | .../usr/lib/libgmp.so: undefined reference to `__gmpn_add_nc'

Solution based on a historical patch posted to the gmp mailing list:

  https://gmplib.org/list-archives/gmp-discuss/2006-May/002344.html

Cherry-pick from meta-gplv2:

  http://git.yoctoproject.org/cgit/cgit.cgi/meta-gplv2/commit/?id=d8668018d5d795be2297f878fd871a27edf532bf

Signed-off-by: Andre McCurdy <armccurdy@gmail.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
7 years agolibevdev: add libcheck dependency
Andre McCurdy [Fri, 3 Nov 2017 20:29:20 +0000 (13:29 -0700)]
libevdev: add libcheck dependency

The libevdev configure script contains an unconditional check for
libcheck. If libcheck is found, libevdev unit tests will be built.

Without a dependency, the presence of libcheck in sysroot is non
deterministic (in morty and earlier) and builds can fail if libcheck
is available during do_configure but not during do_compile.

(In pyro and later, the libcheck dependency is not required to make
libevdev builds deterministic due to recipe specific sysroots).

Signed-off-by: Andre McCurdy <armccurdy@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
7 years agoruby: Security fix for CVE-2017-14064
Rajkumar Veer [Sat, 4 Nov 2017 17:45:58 +0000 (10:45 -0700)]
ruby: Security fix for CVE-2017-14064

Ruby through 2.2.7, 2.3.x through 2.3.4, and 2.4.x through 2.4.1

Signed-off-by: Rajkumar Veer <rveer@mvista.com>
Signed-off-by: Armin Kuster <akuster@mvista.com>
7 years agoruby: Security fix for CVE-2017-14033
Rajkumar Veer [Sat, 4 Nov 2017 17:43:01 +0000 (10:43 -0700)]
ruby: Security fix for CVE-2017-14033

affects ruby before 2.2.8, 2.3.x before 2.3.5, and 2.4.x through 2.4.1

Signed-off-by: Rajkumar Veer <rveer@mvista.com>
Signed-off-by: Armin Kuster <akuster@mvista.com>
7 years agoruby: Security fix for CVE-2017-9229
Thiruvadi Rajaraman [Sat, 4 Nov 2017 17:41:02 +0000 (10:41 -0700)]
ruby: Security fix for CVE-2017-9229

affects ruby < 2.4.1

Signed-off-by: Thiruvadi Rajaraman <trajaraman@mvista.com>
Signed-off-by: Armin Kuster <akuster@mvista.com>
7 years agoruby: Secruity fix for CVE-2017-9226
Thiruvadi Rajaraman [Sat, 4 Nov 2017 17:39:42 +0000 (10:39 -0700)]
ruby: Secruity fix for CVE-2017-9226

affects ruby < 2.4.1

Signed-off-by: Thiruvadi Rajaraman <trajaraman@mvista.com>
Signed-off-by: Armin Kuster <akuster@mvista.com>
7 years agoruby: Security fix for CVE-2017-9228
Thiruvadi Rajaraman [Sat, 4 Nov 2017 17:37:48 +0000 (10:37 -0700)]
ruby: Security fix for CVE-2017-9228

affects ruby < 2.4.1

Signed-off-by: Thiruvadi Rajaraman <trajaraman@mvista.com>
Signed-off-by: Armin Kuster <akuster@mvista.com>
7 years agoruby: Security fix for CVE-2017-9227
Thiruvadi Rajaraman [Sat, 4 Nov 2017 17:35:54 +0000 (10:35 -0700)]
ruby: Security fix for CVE-2017-9227

affects ruby < 2.4.1

Signed-off-by: Thiruvadi Rajaraman <trajaraman@mvista.com>
Signed-off-by: Armin Kuster <akuster@mvista.com>
7 years agoruby: Security fix for CVE-2016-7798
Thiruvadi Rajaraman [Sat, 4 Nov 2017 17:30:06 +0000 (10:30 -0700)]
ruby: Security fix for CVE-2016-7798

affectes ruby < 2.3.1

Signed-off-by: Thiruvadi Rajaraman <trajaraman@mvista.com>
Signed-off-by: Armin Kuster <akuster@mvista.com>
7 years agocurl: Security fix for CVE-2017-1000101
Rajkumar Veer [Sat, 4 Nov 2017 15:15:40 +0000 (08:15 -0700)]
curl: Security fix for CVE-2017-1000101

Affected versions: curl 7.34.0 to and including 7.54.1
Not affected versions: curl < 7.34.0 and >= 7.55.0

Signed-off-by: Rajkumar Veer <rveer@mvista.com>
Signed-off-by: Armin Kuster <akuster@mvista.com>
7 years agocurl: Security fix for CVE-2017-1000100
Rajkumar Veer [Sat, 4 Nov 2017 15:13:14 +0000 (08:13 -0700)]
curl: Security fix for CVE-2017-1000100

Affected versions: libcurl 7.15.0 to and including 7.54.1
Not affected versions: libcurl < 7.15.0 and >= 7.55.0

Signed-off-by: Rajkumar Veer <rveer@mvista.com>
Signed-off-by: Armin Kuster <akuster@mvista.com>
7 years agocurl: Security fix for CVE-2016-9586
Thiruvadi Rajaraman [Sat, 4 Nov 2017 15:10:45 +0000 (08:10 -0700)]
curl: Security fix for CVE-2016-9586

Affected versions: libcurl 7.1 to and including 7.51.0
Not affected versions: libcurl >= 7.52.0

Signed-off-by: Thiruvadi Rajaraman <trajaraman@mvista.com>
Signed-off-by: Armin Kuster <akuster@mvista.com>
7 years agocurl: Security fix for CVE-2016-8624
Thiruvadi Rajaraman [Sat, 4 Nov 2017 15:08:25 +0000 (08:08 -0700)]
curl: Security fix for CVE-2016-8624

Affected versions: curl 7.1 to and including 7.50.3
Not affected versions: curl >= 7.51.0

Signed-off-by: Thiruvadi Rajaraman <trajaraman@mvista.com>
Signed-off-by: Armin Kuster <akuster@mvista.com>
7 years agocurl: Security fix for CVE-2016-8617
Thiruvadi Rajaraman [Sat, 4 Nov 2017 15:03:33 +0000 (08:03 -0700)]
curl: Security fix for CVE-2016-8617

Affected versions: curl 7.1 to and including 7.50.3
Not affected versions: curl >= 7.51.0

Signed-off-by: Thiruvadi Rajaraman <trajaraman@mvista.com>
Signed-off-by: Armin Kuster <akuster@mvista.com>
7 years agocurl: Security fix for CVE-2016-8623
Thiruvadi Rajaraman [Sat, 4 Nov 2017 15:01:20 +0000 (08:01 -0700)]
curl: Security fix for CVE-2016-8623

Affected versions: curl 7.10.7 to and including 7.50.3
Not affected versions: curl < 7.10.7 and curl >= 7.51.0

Signed-off-by: Thiruvadi Rajaraman <trajaraman@mvista.com>
Signed-off-by: Armin Kuster <akuster@mvista.com>
7 years agocurl: Security fix for CVE-2016-8621
Thiruvadi Rajaraman [Sat, 4 Nov 2017 14:59:11 +0000 (07:59 -0700)]
curl: Security fix for CVE-2016-8621

Affected versions: curl 7.12.2 to and including 7.50.3
Not affected versions: curl < 7.12.2 and curl >= 7.51.0

Signed-off-by: Thiruvadi Rajaraman <trajaraman@mvista.com>
Signed-off-by: Armin Kuster <akuster@mvista.com>
7 years agocurl: Security fix for CVE-2016-8620
Thiruvadi Rajaraman [Sat, 4 Nov 2017 14:56:07 +0000 (07:56 -0700)]
curl: Security fix for CVE-2016-8620

Affected versions: curl 7.34.0 to and including 7.50.3
Not affected versions: curl < 7.34.0 and curl >= 7.51.0

Signed-off-by: Thiruvadi Rajaraman <trajaraman@mvista.com>
Signed-off-by: Armin Kuster <akuster@mvista.com>
7 years agocurl: Security fix for CVE-2016-8619
Thiruvadi Rajaraman [Sat, 4 Nov 2017 14:53:26 +0000 (07:53 -0700)]
curl: Security fix for CVE-2016-8619

Affected versions: curl 7.3 to and including 7.50.3
Not affected versions: curl < 7.3 and curl >= 7.51.0

Signed-off-by: Thiruvadi Rajaraman <trajaraman@mvista.com>
Signed-off-by: Armin Kuster <akuster@mvista.com>
7 years agocurl: Security fix for CVE-2016-8618
Thiruvadi Rajaraman [Sat, 4 Nov 2017 14:44:32 +0000 (07:44 -0700)]
curl: Security fix for CVE-2016-8618

Affected versions: curl 7.1 to and including 7.50.3
Not affected versions: curl >= 7.51.0

Signed-off-by: Thiruvadi Rajaraman <trajaraman@mvista.com>
Signed-off-by: Armin Kuster <akuster@mvista.com>
7 years agocurl: Security fix for CVE-2016-8615
Thiruvadi Rajaraman [Sat, 4 Nov 2017 14:41:53 +0000 (07:41 -0700)]
curl: Security fix for CVE-2016-8615

Affected versions: curl 7.1 to and including 7.50.3
Not affected versions: curl >= 7.51.0

Signed-off-by: Thiruvadi Rajaraman <trajaraman@mvista.com>
Signed-off-by: Armin Kuster <akuster@mvista.com>
7 years agotiff: Security fix for CVE-2017-7593
Rajkumar Veer [Sat, 4 Nov 2017 05:35:09 +0000 (22:35 -0700)]
tiff: Security fix for CVE-2017-7593

Signed-off-by: Rajkumar Veer <rveer@mvista.com>
Signed-off-by: Armin Kuster <akuster@mvista.com>
7 years agotiff: Security fix for CVE-2017-7602
Rajkumar Veer [Sat, 4 Nov 2017 05:33:41 +0000 (22:33 -0700)]
tiff: Security fix for CVE-2017-7602

Signed-off-by: Rajkumar Veer <rveer@mvista.com>
Signed-off-by: Armin Kuster <akuster@mvista.com>
7 years agotiff: Security fix for CVE-2017-7601
Rajkumar Veer [Sat, 4 Nov 2017 05:31:50 +0000 (22:31 -0700)]
tiff: Security fix for CVE-2017-7601

Signed-off-by: Rajkumar Veer <rveer@mvista.com>
Signed-off-by: Armin Kuster <akuster@mvista.com>
7 years agotiff: Security fix for CVE-2017-7598
Rajkumar Veer [Sat, 4 Nov 2017 05:30:13 +0000 (22:30 -0700)]
tiff: Security fix for CVE-2017-7598

Signed-off-by: Rajkumar Veer <rveer@mvista.com>
Signed-off-by: Armin Kuster <akuster@mvista.com>
7 years agotiff: Security fix for CVE-2017-7596
Rajkumar Veer [Sat, 4 Nov 2017 05:28:49 +0000 (22:28 -0700)]
tiff: Security fix for CVE-2017-7596

Signed-off-by: Rajkumar Veer <rveer@mvista.com>
Signed-off-by: Armin Kuster <akuster@mvista.com>
7 years agotiff: Security fix for CVE-2017-7595
Rajkumar Veer [Sat, 4 Nov 2017 05:27:08 +0000 (22:27 -0700)]
tiff: Security fix for CVE-2017-7595

Signed-off-by: Rajkumar Veer <rveer@mvista.com>
Signed-off-by: Armin Kuster <akuster@mvista.com>
7 years agotiff: Security fix for CVE-2017-7594
Rajkumar Veer [Sat, 4 Nov 2017 05:25:08 +0000 (22:25 -0700)]
tiff: Security fix for CVE-2017-7594

Signed-off-by: Rajkumar Veer <rveer@mvista.com>
Signed-off-by: Armin Kuster <akuster@mvista.com>
7 years agotiff: Security fix for CVE-2017-7592
Rajkumar Veer [Sat, 4 Nov 2017 05:23:27 +0000 (22:23 -0700)]
tiff: Security fix for CVE-2017-7592

Signed-off-by: Rajkumar Veer <rveer@mvista.com>
Signed-off-by: Armin Kuster <akuster@mvista.com>
7 years agotiff: Security fix for CVE-2016-10270
Rajkumar Veer [Sat, 4 Nov 2017 05:18:19 +0000 (22:18 -0700)]
tiff: Security fix for CVE-2016-10270

Signed-off-by: Rajkumar Veer <rveer@mvista.com>
Signed-off-by: Armin Kuster <akuster@mvista.com>
7 years agotiff: Security fix for CVE-2016-10269
Rajkumar Veer [Sat, 4 Nov 2017 05:15:53 +0000 (22:15 -0700)]
tiff: Security fix for CVE-2016-10269

Signed-off-by: Rajkumar Veer <rveer@mvista.com>
Signed-off-by: Armin Kuster <akuster@mvista.com>
7 years agotiff: Security fix CVE-2016-10267
Rajkumar Veer [Sat, 4 Nov 2017 04:58:43 +0000 (21:58 -0700)]
tiff: Security fix CVE-2016-10267

Signed-off-by: Rajkumar Veer <rveer@mvista.com>
Signed-off-by: Armin Kuster <akuster@mvista.com>
7 years agotiff: Security fix CVE-2016-10266
Rajkumar Veer [Sat, 4 Nov 2017 04:49:23 +0000 (21:49 -0700)]
tiff: Security fix CVE-2016-10266

Signed-off-by: Rajkumar Veer <rveer@mvista.com>
Signed-off-by: Armin Kuster <akuster@mvista.com>
7 years agotiff: Security fix CVE-2016-10268
Rajkumar Veer [Sat, 4 Nov 2017 04:45:04 +0000 (21:45 -0700)]
tiff: Security fix CVE-2016-10268

Signed-off-by: Rajkumar Veer <rveer@mvista.com>
Signed-off-by: Armin Kuster <akuster@mvista.com>
7 years agotiff: Secruity fix CVE-2016-10093
Rajkumar Veer [Sat, 4 Nov 2017 04:39:26 +0000 (21:39 -0700)]
tiff: Secruity fix CVE-2016-10093

Signed-off-by: Rajkumar Veer <rveer@mvista.com>
Signed-off-by: Armin Kuster <akuster@mvista.com>
7 years agotiff: Security fix for CVE-2016-10271
Rajkumar Veer [Sat, 4 Nov 2017 04:35:16 +0000 (21:35 -0700)]
tiff: Security fix for CVE-2016-10271

Signed-off-by: Rajkumar Veer <rveer@mvista.com>
Signed-off-by: Armin Kuster <akuster@mvista.com>
7 years agotiff: Security fixes
Yi Zhao [Tue, 22 Aug 2017 00:58:35 +0000 (08:58 +0800)]
tiff: Security fixes

Fix CVE-2017-9147, CVE-2017-9936, CVE-2017-10668, CVE-2017-11335

References:
https://nvd.nist.gov/vuln/detail/CVE-2017-9147
https://nvd.nist.gov/vuln/detail/CVE-2017-9936
https://nvd.nist.gov/vuln/detail/CVE-2017-10668
https://nvd.nist.gov/vuln/detail/CVE-2017-11335

Patches from:
CVE-2017-9147:
https://github.com/vadz/libtiff/commit/4d4fa0b68ae9ae038959ee4f69ebe288ec892f06
CVE-2017-9936:
https://github.com/vadz/libtiff/commit/fe8d7165956b88df4837034a9161dc5fd20cf67a
CVE-2017-10688:
https://github.com/vadz/libtiff/commit/6173a57d39e04d68b139f8c1aa499a24dbe74ba1
CVE-2017-11355:
https://github.com/vadz/libtiff/commit/69bfeec247899776b1b396651adb47436e5f1556

(From OE-Core rev: 5c89539edb17d01ffe82a1b2e7d092816003ecf3)

(From OE-Core rev: eaf72d105bed54e332e2e5c0c5c0a0087ecd91dd)

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
minor fixes to get to apply

Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Armin Kuster <akuster@mvista.com>
7 years agolibtiff: Security Advisory - libtiff - CVE-2017-5225
Li Zhou [Wed, 25 Jan 2017 09:28:22 +0000 (17:28 +0800)]
libtiff: Security Advisory - libtiff - CVE-2017-5225

Libtiff is vulnerable to a heap buffer overflow in the tools/tiffcp
resulting in DoS or code execution via a crafted BitsPerSample value.

Porting patch from <https://github.com/vadz/libtiff/commit/
5c080298d59efa53264d7248bbe3a04660db6ef7> to solve CVE-2017-5225.

(From OE-Core rev: 434990304bdfb70441b399ff8998dbe3fe1b1e1f)

Signed-off-by: Li Zhou <li.zhou@windriver.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Armin Kuster <akuster@mvista.com>
7 years agoruby: fix build of ruby-native with gcc7
Joshua Lock [Fri, 27 Oct 2017 14:49:41 +0000 (15:49 +0100)]
ruby: fix build of ruby-native with gcc7

Marsalling is broken when ruby-2.2.x is built with gcc7, backport the change
fix  in Ruby SVN r57410 to apply to ruby 2.2.5:

https://svn.ruby-lang.org/cgi-bin/viewvc.cgi?view=revision&revision=57410

Fixes [YOCTO #12271]

Signed-off-by: Joshua Lock <joshua.g.lock@intel.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
7 years agowpa_supplicant: fix WPA2 key replay security bug
Ross Burton [Mon, 16 Oct 2017 18:53:07 +0000 (19:53 +0100)]
wpa_supplicant: fix WPA2 key replay security bug

WPA2 is vulnerable to replay attacks which result in unauthenticated users
having access to the network.

* CVE-2017-13077: reinstallation of the pairwise key in the Four-way handshake

* CVE-2017-13078: reinstallation of the group key in the Four-way handshake

* CVE-2017-13079: reinstallation of the integrity group key in the Four-way
handshake

* CVE-2017-13080: reinstallation of the group key in the Group Key handshake

* CVE-2017-13081: reinstallation of the integrity group key in the Group Key
handshake

* CVE-2017-13082: accepting a retransmitted Fast BSS Transition Reassociation
Request and reinstalling the pairwise key while processing it

* CVE-2017-13086: reinstallation of the Tunneled Direct-Link Setup (TDLS)
PeerKey (TPK) key in the TDLS handshake

* CVE-2017-13087: reinstallation of the group key (GTK) when processing a
Wireless Network Management (WNM) Sleep Mode Response frame

* CVE-2017-13088: reinstallation of the integrity group key (IGTK) when
processing a Wireless Network Management (WNM) Sleep Mode Response frame

Backport patches from upstream to resolve these CVEs.

Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
7 years agohostap-utils: use w1.fi for SRC_URI
Maxin B. John [Mon, 11 Sep 2017 11:37:41 +0000 (14:37 +0300)]
hostap-utils: use w1.fi for SRC_URI

epitest.fi is down and hostap-utils source is now available in
w1.fi. So, move SRC_URI to https://w1.fi

Since hostap-utils is only meant for old Intersil Prism2/2.5/3 wifi cards,
this recipe will be removed from oe-core in future (most likely to
meta-handheld)

[YOCTO #12051]

(From OE-Core rev: 541b14c58132e8460a762617889bd5e3d736c1a4)

Signed-off-by: Maxin B. John <maxin.john@intel.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
7 years agodiffstat: use HTTP mirror for SRC_URI
Ross Burton [Tue, 8 Aug 2017 10:09:00 +0000 (11:09 +0100)]
diffstat: use HTTP mirror for SRC_URI

The Invisible Mirror FTP service is currently down, and FTP is horrible, so
switch to the HTTP mirror.

(From OE-Core rev: f31461f8ea11e82dbe14454a1149d9ec2120404d)

Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Armin Kuster <akuster808@gmail.com>