]> code.ossystems Code Review - openembedded-core.git/log
openembedded-core.git
7 years agoimage.bbclass: drop initramfs bundle related code
Ming Liu [Wed, 16 Aug 2017 04:34:08 +0000 (06:34 +0200)]
image.bbclass: drop initramfs bundle related code

The original purpose of this code snippet was to repackage initramfs
bundled kernel images before do_image_complete, to be able to be
included by rootfs, but it's not going to achieve that since the
initramfs bundled kernel images are not even installed to ${D}/boot
after commit a49569e3a7534779bbe3f01a0647fd076c95798d:
[ kernel.bbclass: do not copy bundled initramfs to /boot ]

So there is not a initramfs bundled kernel package at all, we should
drop the code, because it is leading kernel do_initramfs_bundle
unnecessarily rerun and it's very time consuming and hence is impacting
the performance a lot.

(From OE-Core master rev: eca501aeb4f2cc9255fabab14c68f6910367aaf9)

(From OE-Core rev: 22fd010b71b6ce79f3ede31e4e7da9dbc72de70e)

Signed-off-by: Ming Liu <peter.x.liu@external.atlascopco.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Paul Eggleton <paul.eggleton@linux.intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
7 years agolocal.conf.sample: Weakly set BB_DISKMON_DIRS
Richard Purdie [Sat, 6 Jan 2018 10:02:10 +0000 (10:02 +0000)]
local.conf.sample: Weakly set BB_DISKMON_DIRS

For various reasons we need to be able to set and override this from
auto.conf on our test infrastructure. We have tried forcing the variable
but this then breaks other selftests. In the interests of not complicating
things further and needing to modify the tests across releases, weaken
the default assignment.

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
7 years agobuild-appliance-image: Update to pyro head revision
Richard Purdie [Thu, 14 Dec 2017 13:29:39 +0000 (13:29 +0000)]
build-appliance-image: Update to pyro head revision

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
7 years agocross-localedef-native: Include locale_t.h
Joshua Watt [Wed, 6 Dec 2017 19:46:28 +0000 (13:46 -0600)]
cross-localedef-native: Include locale_t.h

Newer versions of glibc (2.26) moved the struct locale definition from
xlocale.h to bits/types/locale_t.h. For compatibility with build hosts
using this version of glibc, include this header.

See f0be25b6336db7492e47d2e8e72eb8af53b5506d in glibc

(From OE-Core rev: 4e9bb9ab2e5c603f3eb2d52ce272401c8e320cc0)

Signed-off-by: Joshua Watt <JPEWhacker@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
7 years agoglibc_2.25: fix building for x86 with -Os (or -fno-omit-frame-pointer)
Andre McCurdy [Mon, 20 Nov 2017 19:40:30 +0000 (11:40 -0800)]
glibc_2.25: fix building for x86 with -Os (or -fno-omit-frame-pointer)

Glibc 2.25 fails to build for x86 when frame pointers are enabled (ie
when optimised for size or when -fno-omit-frame-pointer is explicitly
included in CFLAGS etc). Backport the upstream fix from glibc 2.26.

  https://sourceware.org/git/?p=glibc.git;a=commitdiff;h=3b33d6ed6096c1d20d05a650b06026d673f7399a

Signed-off-by: Andre McCurdy <armccurdy@gmail.com>
7 years agoweston: add patch to set pitch correctly for subsampled textures
Andrey Konovalov [Sat, 25 Nov 2017 19:47:24 +0000 (22:47 +0300)]
weston: add patch to set pitch correctly for subsampled textures

This fixes display issue with YUV420/I420 and NV12 formats, that
can result in crash of weston.

The master branch has this fix as part of commit 148920f3971d "weston:
Bump version to 3.0.0". The patch has been rebased to apply cleanly
to weston 2.0.0.

Signed-off-by: Andrey Konovalov <andrey.konovalov@linaro.org>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
7 years agobinutls: Security fix for CVE-2017-9955
Armin Kuster [Mon, 27 Nov 2017 00:36:33 +0000 (16:36 -0800)]
binutls: Security fix for CVE-2017-9955

Affects: <= 2.28

[v2]
Fixed signed-off-by for CVE-2017-9955_9

Signed-off-by: Armin Kuster <akuster808@gmail.com>
7 years agobinutils: Security fix for CVE-2017-9954
Armin Kuster [Mon, 27 Nov 2017 00:34:10 +0000 (16:34 -0800)]
binutils: Security fix for CVE-2017-9954

Affects: <= 2.28
Signed-off-by: Armin Kuster <akuster808@gmail.com>
7 years agobinutls: Secuirty fix for CVE-2017-9756
Armin Kuster [Mon, 27 Nov 2017 00:32:47 +0000 (16:32 -0800)]
binutls: Secuirty fix for CVE-2017-9756

Affects: <= 2.28

Signed-off-by: Armin Kuster <akuster808@gmail.com>
7 years agobinutls: Security fix for CVE-2017-9755
Armin Kuster [Mon, 27 Nov 2017 00:31:27 +0000 (16:31 -0800)]
binutls: Security fix for CVE-2017-9755

Affects: <= 2.28

Signed-off-by: Armin Kuster <akuster808@gmail.com>
7 years agobinutls: Security fix for CVE-2017-9753
Armin Kuster [Mon, 27 Nov 2017 00:30:28 +0000 (16:30 -0800)]
binutls: Security fix for CVE-2017-9753

Affects: <= 2.28

Signed-off-by: Armin Kuster <akuster808@gmail.com>
7 years agobinutls: Security fix for CVE-2017-9752
Armin Kuster [Mon, 27 Nov 2017 00:29:17 +0000 (16:29 -0800)]
binutls: Security fix for CVE-2017-9752

Affects: <= 2.28

Signed-off-by: Armin Kuster <akuster808@gmail.com>
7 years agobinutls: Security fix for CVE-2017-9751
Armin Kuster [Mon, 27 Nov 2017 00:27:45 +0000 (16:27 -0800)]
binutls: Security fix for CVE-2017-9751

Affects: <= 2.28

Signed-off-by: Armin Kuster <akuster808@gmail.com>
7 years agoBinutils: Security fix for CVE-2017-9750
Armin Kuster [Mon, 27 Nov 2017 00:26:29 +0000 (16:26 -0800)]
Binutils: Security fix for CVE-2017-9750

Affects: <= 2.28

Signed-off-by: Armin Kuster <akuster808@gmail.com>
7 years agobinutils: Security fix for CVE-2017-9749
Armin Kuster [Mon, 27 Nov 2017 00:25:07 +0000 (16:25 -0800)]
binutils: Security fix for CVE-2017-9749

Affects: <= 2.28

Signed-off-by: Armin Kuster <akuster808@gmail.com>
7 years agobinutls: Security fix for CVE-2017-9748
Armin Kuster [Mon, 27 Nov 2017 00:23:53 +0000 (16:23 -0800)]
binutls: Security fix for CVE-2017-9748

affects: <= 2.28

Signed-off-by: Armin Kuster <akuster808@gmail.com>
7 years agobinutls: Security fix for CVE-2017-9747
Armin Kuster [Mon, 27 Nov 2017 00:22:44 +0000 (16:22 -0800)]
binutls: Security fix for CVE-2017-9747

Affects: <= 2.28

Signed-off-by: Armin Kuster <akuster808@gmail.com>
7 years agobinutls: Security for fix CVE-2017-9746
Armin Kuster [Mon, 27 Nov 2017 00:21:33 +0000 (16:21 -0800)]
binutls: Security for fix CVE-2017-9746

Affects: <= 2.28

Signed-off-by: Armin Kuster <akuster808@gmail.com>
7 years agobinutils: Security fix for CVE-2017-9745
Armin Kuster [Mon, 27 Nov 2017 00:19:46 +0000 (16:19 -0800)]
binutils: Security fix for CVE-2017-9745

Affects: <= 2.28

Signed-off-by: Armin Kuster <akuster808@gmail.com>
7 years agobinutls: Security fix for CVE-2017-9744
Armin Kuster [Mon, 27 Nov 2017 00:14:05 +0000 (16:14 -0800)]
binutls: Security fix for CVE-2017-9744

Affects: <= 2.28

Signed-off-by: Armin Kuster <akuster808@gmail.com>
7 years agobinutils: Security fix for CVE-2017-9742
Armin Kuster [Mon, 27 Nov 2017 00:12:39 +0000 (16:12 -0800)]
binutils: Security fix for CVE-2017-9742

Affects: <= 2.28

Signed-off-by: Armin Kuster <akuster808@gmail.com>
7 years agobinutils: Security fix for CVE-2017-9040 and CVE-2017-9042
Armin Kuster [Sun, 26 Nov 2017 21:34:52 +0000 (13:34 -0800)]
binutils: Security fix for CVE-2017-9040 and CVE-2017-9042

Affects: <= 2.28
Signed-off-by: Armin Kuster <akuster808@gmail.com>
7 years agobinutils: Security fix for CVE-2017-9039
Armin Kuster [Sun, 26 Nov 2017 21:32:10 +0000 (13:32 -0800)]
binutils: Security fix for CVE-2017-9039

Affects: <= 2.28

Signed-off-by: Armin Kuster <akuster808@gmail.com>
7 years agobinutils: Security fix for CVE-2017-9038 and CVE-2017-9044
Armin Kuster [Sun, 26 Nov 2017 21:28:58 +0000 (13:28 -0800)]
binutils: Security fix for CVE-2017-9038 and CVE-2017-9044

Signed-off-by: Armin Kuster <akuster808@gmail.com>
7 years agobinutils: Security fix CVE-2017-8421
Armin Kuster [Sun, 26 Nov 2017 21:27:38 +0000 (13:27 -0800)]
binutils: Security fix CVE-2017-8421

Affects: <= 2.28

Signed-off-by: Armin Kuster <akuster808@gmail.com>
7 years agobinutils: Security fix for CVE-2017-8398
Armin Kuster [Sun, 26 Nov 2017 20:54:25 +0000 (12:54 -0800)]
binutils: Security fix for CVE-2017-8398

Affects: <= 2.28

Signed-off-by: Armin Kuster <akuster808@gmail.com>
7 years agobinutils: Secuirty fix CVE-2017-8396 and CVE-2017-8397
Armin Kuster [Sun, 26 Nov 2017 20:52:56 +0000 (12:52 -0800)]
binutils: Secuirty fix CVE-2017-8396 and CVE-2017-8397

Affects: <= 2.28

Signed-off-by: Armin Kuster <akuster808@gmail.com>
7 years agobinutls: Security fix CVE-2017-8395
Armin Kuster [Sun, 26 Nov 2017 20:13:20 +0000 (12:13 -0800)]
binutls: Security fix CVE-2017-8395

Affects: <= 2.28

Signed-off-by: Armin Kuster <akuster808@gmail.com>
7 years agobinutls: Secuirty fix CVE-2017-8394
Armin Kuster [Sun, 26 Nov 2017 20:11:27 +0000 (12:11 -0800)]
binutls: Secuirty fix CVE-2017-8394

Affects: <= 2.28

Signed-off-by: Armin Kuster <akuster808@gmail.com>
7 years agobinutils: Security fix CVE-2017-8393
Armin Kuster [Sun, 26 Nov 2017 20:08:36 +0000 (12:08 -0800)]
binutils: Security fix CVE-2017-8393

Affects: <= 2.28

Signed-off-by: Armin Kuster <akuster808@gmail.com>
7 years agobinutils: Security Fix CVE-2017-7614
Armin Kuster [Sun, 26 Nov 2017 19:51:52 +0000 (11:51 -0800)]
binutils: Security Fix CVE-2017-7614

Affects: <= 2.28

Signed-off-by: Armin Kuster <akuster808@gmail.com>
7 years agobinutils: Security fix CVE-2017-7223
Armin Kuster [Sun, 26 Nov 2017 19:42:46 +0000 (11:42 -0800)]
binutils: Security fix CVE-2017-7223

Affects <= 2.28

Signed-off-by: Armin Kuster <akuster808@gmail.com>
7 years agolib/oe/terminal.py: use an absolute path to execute oe-gnome-terminal-phonehome
Ming Liu [Mon, 20 Nov 2017 18:35:57 +0000 (10:35 -0800)]
lib/oe/terminal.py: use an absolute path to execute oe-gnome-terminal-phonehome

A flaw was found on my Ubuntu 14.04.5 LTS, on which that gnome-terminal is
the default terminal, when I run any of the tasks:
bitbake busybox -c menuconfig/devshell/devpyshell
bitbake virtual/kernel -c menuconfig/devshell/devpyshell

I got a error as follows:
"Failed to execute child process "oe-gnome-terminal-phonehome" (No such file or directory)"

Seems the environment of the process calling Popen is not passed to the
child process, this behaviour is a known issue in Python bug tracker:
http://bugs.python.org/issue8557

It could be fixed by using an absolute path instead per test.

Signed-off-by: Ming Liu <liu.ming50@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 2117c148ef07d84bc605768e3b3671b0126b9337)
Signed-off-by: Andre McCurdy <armccurdy@gmail.com>
7 years agogcc: Use libssp_nonshared linker specs only for ppc/musl
Florin Sarbu [Mon, 13 Nov 2017 19:00:11 +0000 (21:00 +0200)]
gcc: Use libssp_nonshared linker specs only for ppc/musl

Link libssp_nonshared.a only for ppc/musl because glibc already
provides the content for libssp_nonshared in libc_nonshared.a and
therefore we dont need to make it universal.

(From OE-Core rev: c08247e3c7c004a40281d4010186a9ace86e0e47)

Signed-off-by: Florin Sarbu <florin@resin.io>
Signed-off-by: Armin Kuster <akuster@mvista.com>
7 years agodpkg: Add missing RDEPENDS for dpkg-perl
Tom Rini [Fri, 9 Jun 2017 00:00:41 +0000 (20:00 -0400)]
dpkg: Add missing RDEPENDS for dpkg-perl

In order to be able to use dpkg-perl on a system various stock perl
modules must also be installed on the system.  Create the list of
required modules based on a read of the code and testing with additional
utilities and list them in RDEPENDS_${PN}-perl.

Signed-off-by: Tom Rini <trini@konsulko.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
7 years agodpkg: Fix perl modules by moving them to the versioned perl directory
Tom Rini [Sun, 11 Jun 2017 12:36:32 +0000 (08:36 -0400)]
dpkg: Fix perl modules by moving them to the versioned perl directory

In order for the dpkg perl modules to be used the must reside in the
versioned perl library directory (as to be in the default include path).
Be explicit about this location in our FILES_${PN}-perl directive, so
that if this breaks in the future, the recipe will fail).  We can now
drop the custom do_configure as it wasn't fixing this problem.

Signed-off-by: Tom Rini <trini@konsulko.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
7 years agocpan-base.bbclass: Move PERLVERSION and get_perl_version to a new file
Tom Rini [Sun, 11 Jun 2017 12:36:31 +0000 (08:36 -0400)]
cpan-base.bbclass: Move PERLVERSION and get_perl_version to a new file

It is possible for non-CPAN recipes to contain perl modules.  These perl
modules must reside in the versioned perl library directory in order to
work in normal circumstances..  Export this logic to a separate class so
that it can be reused without the rest of the cpan logic.

Without this, dpkg will not export its perl code to the correct location
and will not be found by utilities that expect to use it.

Signed-off-by: Tom Rini <trini@konsulko.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
7 years agopopulate_sdk_ext: Use prebuilt uninative tarball
Richard Purdie [Sat, 9 Dec 2017 11:06:47 +0000 (11:06 +0000)]
populate_sdk_ext: Use prebuilt uninative tarball

For uninative to work, it relies on it being updated to new versions as
newer glibcs are built. This means the uninative generated by the current
build may not be as recent as the uninative that is being downloaded by
uninative.bbclass.

If this occurs, we can get symbol mismatch errors.

Ultimately, the sstate and the uninative versions need to match so we
should use the same tarball as uninative.bbclass is using, not the one
we built.

[YOCTO #12405]

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
7 years agoruby: Security fix for CVE-2017-14064
Armin Kuster [Sat, 4 Nov 2017 18:56:03 +0000 (11:56 -0700)]
ruby: Security fix for CVE-2017-14064

affects ruby < 2.4.1

Signed-off-by: Armin Kuster <akuster@mvista.com>
7 years agocurl: Security fix for CVE-2017-1000101
Armin Kuster [Sat, 4 Nov 2017 16:12:44 +0000 (09:12 -0700)]
curl: Security fix for CVE-2017-1000101

Affected versions: curl 7.34.0 to and including 7.54.1
Not affected versions: curl < 7.34.0 and >= 7.55.0

Signed-off-by: Armin Kuster <akuster@mvista.com>
7 years agocurl: Security fix for CVE-2017-1000100
Armin Kuster [Sat, 4 Nov 2017 16:09:26 +0000 (09:09 -0700)]
curl: Security fix for CVE-2017-1000100

Affected versions: libcurl 7.15.0 to and including 7.54.1
Not affected versions: libcurl < 7.15.0 and >= 7.55.0

Signed-off-by: Armin Kuster <akuster@mvista.com>
7 years agotiff: Security fix for CVE-2017-7593
Rajkumar Veer [Sat, 4 Nov 2017 05:35:09 +0000 (22:35 -0700)]
tiff: Security fix for CVE-2017-7593

Signed-off-by: Rajkumar Veer <rveer@mvista.com>
Signed-off-by: Armin Kuster <akuster@mvista.com>
7 years agotiff: Security fix for CVE-2017-7602
Rajkumar Veer [Sat, 4 Nov 2017 05:33:41 +0000 (22:33 -0700)]
tiff: Security fix for CVE-2017-7602

Signed-off-by: Rajkumar Veer <rveer@mvista.com>
Signed-off-by: Armin Kuster <akuster@mvista.com>
7 years agotiff: Security fix for CVE-2017-7601
Rajkumar Veer [Sat, 4 Nov 2017 05:31:50 +0000 (22:31 -0700)]
tiff: Security fix for CVE-2017-7601

Signed-off-by: Rajkumar Veer <rveer@mvista.com>
Signed-off-by: Armin Kuster <akuster@mvista.com>
7 years agotiff: Security fix for CVE-2017-7598
Rajkumar Veer [Sat, 4 Nov 2017 05:30:13 +0000 (22:30 -0700)]
tiff: Security fix for CVE-2017-7598

Signed-off-by: Rajkumar Veer <rveer@mvista.com>
Signed-off-by: Armin Kuster <akuster@mvista.com>
7 years agotiff: Security fix for CVE-2017-7596
Rajkumar Veer [Sat, 4 Nov 2017 05:28:49 +0000 (22:28 -0700)]
tiff: Security fix for CVE-2017-7596

Signed-off-by: Rajkumar Veer <rveer@mvista.com>
Signed-off-by: Armin Kuster <akuster@mvista.com>
7 years agotiff: Security fix for CVE-2017-7595
Rajkumar Veer [Sat, 4 Nov 2017 05:27:08 +0000 (22:27 -0700)]
tiff: Security fix for CVE-2017-7595

Signed-off-by: Rajkumar Veer <rveer@mvista.com>
Signed-off-by: Armin Kuster <akuster@mvista.com>
7 years agotiff: Security fix for CVE-2017-7594
Rajkumar Veer [Sat, 4 Nov 2017 05:25:08 +0000 (22:25 -0700)]
tiff: Security fix for CVE-2017-7594

Signed-off-by: Rajkumar Veer <rveer@mvista.com>
Signed-off-by: Armin Kuster <akuster@mvista.com>
7 years agotiff: Security fix for CVE-2017-7592
Rajkumar Veer [Sat, 4 Nov 2017 05:23:27 +0000 (22:23 -0700)]
tiff: Security fix for CVE-2017-7592

Signed-off-by: Rajkumar Veer <rveer@mvista.com>
Signed-off-by: Armin Kuster <akuster@mvista.com>
7 years agotiff: Security fix for CVE-2016-10270
Rajkumar Veer [Sat, 4 Nov 2017 05:18:19 +0000 (22:18 -0700)]
tiff: Security fix for CVE-2016-10270

Signed-off-by: Rajkumar Veer <rveer@mvista.com>
Signed-off-by: Armin Kuster <akuster@mvista.com>
7 years agotiff: Security fix for CVE-2016-10269
Rajkumar Veer [Sat, 4 Nov 2017 05:15:53 +0000 (22:15 -0700)]
tiff: Security fix for CVE-2016-10269

Signed-off-by: Rajkumar Veer <rveer@mvista.com>
Signed-off-by: Armin Kuster <akuster@mvista.com>
7 years agotiff: Security fix CVE-2016-10267
Rajkumar Veer [Sat, 4 Nov 2017 04:58:43 +0000 (21:58 -0700)]
tiff: Security fix CVE-2016-10267

Signed-off-by: Rajkumar Veer <rveer@mvista.com>
Signed-off-by: Armin Kuster <akuster@mvista.com>
7 years agotiff: Security fix CVE-2016-10266
Rajkumar Veer [Sat, 4 Nov 2017 04:49:23 +0000 (21:49 -0700)]
tiff: Security fix CVE-2016-10266

Signed-off-by: Rajkumar Veer <rveer@mvista.com>
Signed-off-by: Armin Kuster <akuster@mvista.com>
7 years agotiff: Security fix CVE-2016-10268
Rajkumar Veer [Sat, 4 Nov 2017 04:45:04 +0000 (21:45 -0700)]
tiff: Security fix CVE-2016-10268

Signed-off-by: Rajkumar Veer <rveer@mvista.com>
Signed-off-by: Armin Kuster <akuster@mvista.com>
7 years agotiff: Secruity fix CVE-2016-10093
Rajkumar Veer [Sat, 4 Nov 2017 04:39:26 +0000 (21:39 -0700)]
tiff: Secruity fix CVE-2016-10093

Signed-off-by: Rajkumar Veer <rveer@mvista.com>
Signed-off-by: Armin Kuster <akuster@mvista.com>
7 years agotiff: Security fix for CVE-2016-10271
Rajkumar Veer [Sat, 4 Nov 2017 04:35:16 +0000 (21:35 -0700)]
tiff: Security fix for CVE-2016-10271

Signed-off-by: Rajkumar Veer <rveer@mvista.com>
Signed-off-by: Armin Kuster <akuster@mvista.com>
7 years agovalgrind: enable on mips soft-float
André Draszik [Mon, 23 Oct 2017 08:09:05 +0000 (09:09 +0100)]
valgrind: enable on mips soft-float

Valgrind support for mips soft-float hosts has been fixed
in the 3.12 [1] and 3.13 [2] releases, so let's start
building it on those, too.

[1] https://sourceware.org/git/?p=valgrind.git;a=commit;h=8f0070d31daea6f0ed18f8fe69498a67530bfcbb
[2] https://sourceware.org/git/?p=valgrind.git;a=commit;h=3172936d63da4b6257099bc05aee5793978269cb

Signed-off-by: André Draszik <adraszik@tycoint.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
(cherry picked from commit 82dbad6aa1390668aa86d28c8a3125b68d6072fa)
Signed-off-by: André Draszik <adraszik@tycoint.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
7 years agooeqa/sdk: Replace buildiptables for buildlzip tests
Jose Perez Carranza [Mon, 3 Jul 2017 20:04:15 +0000 (13:04 -0700)]
oeqa/sdk: Replace buildiptables for buildlzip tests

Buildiptables test cases are conflicting with images built with “musl”
as standard C library, in order to avoid those issues lzip package was
selected to be used on the tests as this does not have any "musl"
dependency.

[YOCTO #11713]

(From OE-Core rev: b798284f62b3cb171373716b1ee84403439314aa)

Signed-off-by: Jose Perez Carranza <jose.perez.carranza@linux.intel.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
7 years agooeqa/runtime: Replace buildiptables for buildlzip on runtime tests
Jose Perez Carranza [Thu, 6 Jul 2017 21:03:07 +0000 (14:03 -0700)]
oeqa/runtime: Replace buildiptables for buildlzip on runtime tests

Buildiptables test cases are conflicting with images built with “musl”
as standard C library, in order to avoid those issues lzip package was
selected to be used on the tests as this does not have any "musl"
dependency.

This patch is applicable for testimage tests

[YOCTO # 11713]

(From OE-Core rev: 41683e0ab316049e28b1f4ceaf39f0fe17722d92)

Signed-off-by: Jose Perez Carranza <jose.perez.carranza@linux.intel.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
7 years agoimage_types.bbclass: Make u-boot signed images more versatile
Tom Rini [Fri, 21 Jul 2017 22:06:34 +0000 (18:06 -0400)]
image_types.bbclass: Make u-boot signed images more versatile

With the introduction of chaining compression/conversion support we can
convert the old image_types_uboot.bbclass code that did a hand-chaining
of a set of ${filesystem}.${compression} into generic and arbitrary
support to sign whatever the user wants to sign for their image.

This, for the record, does remove setting a valid compression type in
the record in favour of just saying none.  This is not a generally
useful feature in U-Boot and I believe being versatile in terms of being
able to pass in arbitrary compressions is more important.

Signed-off-by: Tom Rini <trini@konsulko.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
7 years agoopenssh: Fix key generation with systemd
Joshua Watt [Fri, 6 Oct 2017 14:19:20 +0000 (15:19 +0100)]
openssh: Fix key generation with systemd

106b59d9 broke SSH host key generation when systemd and a read-only root file
system are in use because there isn't a way for systemd to get the optional
weak assigment of SYSCONFDIR from /etc/default/sshd and still provide a default
value if it is not specified. Instead, move the logic for determining if keys
need to be created to a helper script that both the SysV init script and the
systemd unit file can reference.

This does mean that the systemd unit file can't check for file existence to
know if it should start the service, but it wasn't able to do that correctly
anyway anymore. This should be a problem since the serivce is only run once per
power cycle by systemd, and should exit quickly if the keys already exist

Signed-off-by: Joshua Watt <JPEWhacker@gmail.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
(cherry picked from commit 7e49c5879862253ae1b6a26535d07a2740a95798)
Signed-off-by: André Draszik <adraszik@tycoint.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
7 years agojson-c: backport patch to fix gcc7 compilation
André Draszik [Fri, 6 Oct 2017 12:24:08 +0000 (13:24 +0100)]
json-c: backport patch to fix gcc7 compilation

(The native version might be being built using gcc-7)

We can't cherry-pick a commit from master, as master
has upgraded json-c at the same time as applying
this patch, see commit
ccf630e78aad ("json-c: Upgrade to 0.12.1 release")

Signed-off-by: André Draszik <adraszik@tycoint.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
7 years agouseradd-staticids: don't create username-group if gid is specified
André Draszik [Fri, 6 Oct 2017 12:12:59 +0000 (13:12 +0100)]
useradd-staticids: don't create username-group if gid is specified

Adding distcc to an image, and having staticids enabled,
doesn't work as it causes a a superfluous 'distcc' group
being added using a conflicting  GID, thus failing the
build:
 | ERROR: distcc-3.2-r0 do_prepare_recipe_sysroot: distcc: groupadd command did not succeed.

Compared to other recipes, the distcc recipe only
specifies --gid for the primary group, and doesn't specify
--no-user-group, but when --gid is given, it doesn't make
sense to create a matching username-group in addition,
even if --no-user-group was not specified, and 'useradd'
actually complains if --gid and --user-group are given
both.

If only --gid is given, the current code in here
effectively behaves as if --user-group was specified,
taking the group-id of the username-group from the
--gid parameter. This causes the error above, as we try
to add a new group (distcc) with an existing group-id
(nogroup).

This is contrary to the comment in this file just above,
contrary to what useradd can do, contrary to behaviour
without the useradd-staticids bbclass, and non-intuitive.

Change the code such that a username-group is only created
- if a primary group using --gid was not specified, or
- if --no-user-group was not specified

To be in line with useradd, if gid is not given, and
--no-user-group is given, we add the user to the group
'users', which mimics useradd's behaviour.

Signed-off-by: André Draszik <adraszik@tycoint.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit fc3a86ae68919cec72c1a8ae0f9ba1f98ae13f0d)
Signed-off-by: André Draszik <adraszik@tycoint.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
7 years agocurl: enable threaded resolver
André Draszik [Fri, 6 Oct 2017 12:12:58 +0000 (13:12 +0100)]
curl: enable threaded resolver

Multi-threaded applications using libcurl crash
on DNS timeouts when built using OE.

The reason is as follows:
By default, libcurl implements DNS timeouts using a
timer (alarm()) and a pair of setjmp()/longjmp().
This approach is unsafe in multi-threaded applications
for various reasons, as e.g. explained in the relevant
man-pages.

To avoid this, libcurl can be compiled with a built-in
threaded resolver, or against the c-ares asynchronous
resolver library.

To keep extra dependencies to a minimum, and to mimic
other distributions (debian at least), and because
c-ares is not available in OE-core, add a PACKAGECONFIG
to be able to enable use of of the built-in threaded
resolver and enable it by default.

Signed-off-by: André Draszik <adraszik@tycoint.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 41f1e44fce976c4140cda62a41349e91e69d04ef)
Signed-off-by: André Draszik <adraszik@tycoint.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
7 years agokernel-fitimage: support MIPS (compressed)
André Draszik [Fri, 6 Oct 2017 12:12:57 +0000 (13:12 +0100)]
kernel-fitimage: support MIPS (compressed)

On MIPS, the compressed kernel image target is vmlinuz.bin

Signed-off-by: André Draszik <adraszik@tycoint.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
(cherry picked from commit 74d97569aa4e0f82e094a539dec302076103affa)
Signed-off-by: André Draszik <adraszik@tycoint.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
7 years agokernel-uboot: support compressed kernel on MIPS
André Draszik [Fri, 6 Oct 2017 12:12:56 +0000 (13:12 +0100)]
kernel-uboot: support compressed kernel on MIPS

MIPS generates vmlinuz.bin when compression in the kernel build is
enabled, including any necessary objcopy so we can leverage that
and skip our manual invocation of objcopy here. We just have to
put the file into the right place for the rest of the build to
find it.

Signed-off-by: André Draszik <adraszik@tycoint.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
(cherry picked from commit 00bc7682473c2558d72ba42c182f8e3bd445f8af)
Signed-off-by: André Draszik <adraszik@tycoint.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
7 years agokernel-uimage: optimise UBOOT_ENTRYSYMBOL support
André Draszik [Fri, 6 Oct 2017 12:12:55 +0000 (13:12 +0100)]
kernel-uimage: optimise UBOOT_ENTRYSYMBOL support

This is the remaining local change to a fix similar to
commit e0b4f018d1c2 ("kernel-uimage.bbclass: Fix up
generation of uImage from vmlinux"):

Make awk exit on match to save a few CPU cycles so as
to make this similar to kernel-fitimage.bbclass

Signed-off-by: André Draszik <adraszik@tycoint.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
(cherry picked from commit 614e8be7a89a2f2113fa40b11e7a05b9e8155f6a)
Signed-off-by: André Draszik <adraszik@tycoint.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
7 years agokernel-fitimage: unbreak UBOOT_ENTRYSYMBOL support
André Draszik [Fri, 6 Oct 2017 12:12:54 +0000 (13:12 +0100)]
kernel-fitimage: unbreak UBOOT_ENTRYSYMBOL support

- vmlinux is located in ${B}, not ${S}.
- parsing of nm output got broken completely in commit
  b406a89935f148779569fa3770776e009dd51f13 ("kernel-fitimage: add
  initramfs support"), commit ec755d2524fcbd9dfded23a576f25c990d405a6c
  in yocto

While at it, make awk exit on match to save a few CPU cycles.

Signed-off-by: André Draszik <adraszik@tycoint.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
(cherry picked from commit 9d2ec9c046c4a9c6a842d28133d40639f5a65297)
Signed-off-by: André Draszik <adraszik@tycoint.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
7 years agokernel-fitimage: sanitize dtb section name (unbreak MIPS)
André Draszik [Fri, 6 Oct 2017 12:12:53 +0000 (13:12 +0100)]
kernel-fitimage: sanitize dtb section name (unbreak MIPS)

We can't build fitImages for MIPS any more:
| Error: fit-image.its:21.27-28 syntax error
| FATAL ERROR: Unable to parse input tree
| uboot-mkimage: Can't read arch/mips/boot/fitImage.tmp: Invalid argument

Since commit cd2ed7f80b555add07795cc0cbaee866e6c193a3
("kernel-fitimage: dtb sections named by their filenames
and one config section for each dtb"), commit
1ec405ef5df82884c8997878bbe6c66d924b5127 in yocto, dtb
sections are named by the DTB filename, but the filename
can legally be in a subdirectory below
arch/$arch/boot/dts/, and on MIPS all DTBs are actually
in a subdirectory.

If so, mkimage fails with the above error message.

Unbreak this by replacing the offending character
(directory separator /)

Signed-off-by: André Draszik <adraszik@tycoint.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
(cherry picked from commit 335fc50cf54e47db4e3d5c35a9846484faf0270f)
Signed-off-by: André Draszik <adraszik@tycoint.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
7 years agokernel-uimage.bbclass: Fix up generation of uImage from vmlinux
Nathan Rossi [Fri, 6 Oct 2017 12:12:52 +0000 (13:12 +0100)]
kernel-uimage.bbclass: Fix up generation of uImage from vmlinux

Fix up the generation of uImage from vmlinux when KEEPUIMAGE != 'yes'.
This fixes up the working directory that do_uboot_mkimage is run from,
such that it is run from the ${B} directory to access built artefacts.

Simplify the logic in the task so that the parse step either adds the
task or not if the conditions are met. This reduces the need for the
task to run in cases when it is not used. The task is also changed to
depend on the kernel_link_images task as arch/<arch>/boot/* is not
available until after kernel_link_images in certain cases (e.g.
vmlinux/uImage only KERNEL_IMAGETYPES).

Fix up the use of ${S}/vmlinux when pulling the entry symbols
address so that it accesses the vmlinux in ${B}.

Signed-off-by: Nathan Rossi <nathan@nathanrossi.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
(cherry picked from commit e0b4f018d1c2a65e66c81e5be1da8894e9a6c132)
Signed-off-by: André Draszik <adraszik@tycoint.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
7 years agoca-certificates: Fix postinst dependency issues
Richard Purdie [Fri, 6 Oct 2017 12:12:51 +0000 (13:12 +0100)]
ca-certificates: Fix postinst dependency issues

We were relying on running ca-certificates from the -native version. This
meant the host and target path layouts had to match which might not be true,
it certainly isn't true for the sdk builds.

There was a dependency on run-parts which wasn't represented (we can get it
from busybox or debianutils).

Since this is an allarch script, call the script directly, making sure debianutils
and openssl are available as postinst rootfs time to resolve the issues.

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit d9575e05f2cb8bf293534c036ddc0d0336701256)
Signed-off-by: André Draszik <adraszik@tycoint.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
7 years agodebianutils: Add a native version (for run-parts)
Richard Purdie [Fri, 6 Oct 2017 12:12:50 +0000 (13:12 +0100)]
debianutils: Add a native version (for run-parts)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 46985e66c193ad2aa9b575aeab5c78740bc5a4ed)
Signed-off-by: André Draszik <adraszik@tycoint.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
7 years agocopyleft_filter.bbclass: restore possiblity to filter on type
André Draszik [Fri, 6 Oct 2017 12:12:49 +0000 (13:12 +0100)]
copyleft_filter.bbclass: restore possiblity to filter on type

Since the changes introduced in ae9102bda398
("copyleft_filter.bbclass: Allow to filter on name"), it is
impossible to filter on the recipe type, all recipes are
treated as though they should be included if the license
matches, irrespective of the COPYLEFT_RECIPE_TYPES
variable.

Fix this.

Signed-off-by: André Draszik <adraszik@tycoint.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
(cherry picked from commit e612dfa520c7d7ecf58006e82189be601204f38d)
Signed-off-by: André Draszik <adraszik@tycoint.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
7 years agoselftest/archiver: only execute deploy_archives task
André Draszik [Fri, 6 Oct 2017 12:12:48 +0000 (13:12 +0100)]
selftest/archiver: only execute deploy_archives task

There should be no reason to execute a full build, as we're
just interested in the deployment of the archives.

The newly added tests already do the same.

Signed-off-by: André Draszik <adraszik@tycoint.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
(cherry picked from commit 78c2897dff7cd9fe2cab511549cb146d5231e573)
Signed-off-by: André Draszik <adraszik@tycoint.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
7 years agoselftest/archiver: add tests for recipe type filtering
André Draszik [Fri, 6 Oct 2017 12:12:47 +0000 (13:12 +0100)]
selftest/archiver: add tests for recipe type filtering

The archiver used to be able to filter based on COPYLEFT_RECIPE_TYPES.

Unfortunately, this got broken with the fix for
  https://bugzilla.yoctoproject.org/show_bug.cgi?id=6929
in commit ae9102bda398 ("copyleft_filter.bbclass: Allow to filter on name")

Add two tests to prevent that from happening again.

Signed-off-by: André Draszik <adraszik@tycoint.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
(cherry picked from commit 709f02c5cb25983090251c6237bac4fc0a295c4f)
Signed-off-by: André Draszik <adraszik@tycoint.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
7 years agoopenssh: allow to override OpenSSL HostKeys when read-only-rootfs
André Draszik [Fri, 6 Oct 2017 12:12:46 +0000 (13:12 +0100)]
openssh: allow to override OpenSSL HostKeys when read-only-rootfs

With these changes it is possible to have a .bbappend that
- sets SYSCONFDIR to some persistent storage
- modifies SYSCONFDIR/sshd_config to use ssh host keys from
  the (writable) sysconfdir

Signed-off-by: André Draszik <adraszik@tycoint.com>
Reviewed-by: Stephane Ayotte <sayotte@tycoint.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
(cherry picked from commit 106b59d9f96f70d133fa1421091ad280d27a5b6a)
Signed-off-by: André Draszik <adraszik@tycoint.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
7 years agobusybox: add backported patch to support iproute 'scope'
André Draszik [Fri, 6 Oct 2017 12:12:45 +0000 (13:12 +0100)]
busybox: add backported patch to support iproute 'scope'

This is needed for avahi-autoipd, which attempts to
create a link-scope route as part of its work.

Without iproute scope support in busybox, the route is
not created due to an error message, and hence we
aren't accessible by, and can't access ourselves,
IP addresses outside the link-local scope
(169.254.0.0/16) unless we also have a proper
non link-local IP address, which somehow defeats the
purpose of zeroconf.

Signed-off-by: André Draszik <adraszik@tycoint.com>
Reviewed-by: Stephane Ayotte <sayotte@tycoint.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
(cherry picked from commit bd06a1cbe8e97b7f66979b12d4d248092379df4a)
Signed-off-by: André Draszik <adraszik@tycoint.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
7 years agobusybox: fix a linking issue
Ming Liu [Fri, 6 Oct 2017 12:12:44 +0000 (13:12 +0100)]
busybox: fix a linking issue

A following linking error was observed:
| ==========
| archival/lib.a(tar.o): In function `tar_main':
| archival/tar.c:1168: undefined reference to `unpack_Z_stream'
| archival/tar.c:1168: undefined reference to `unpack_Z_stream'
| ld: busybox_unstripped: hidden symbol `unpack_Z_stream' isn't defined
| ld: final link failed: Bad value

this happened with clang compiler, with the following configs:
| CONFIG_TAR=y
| # CONFIG_FEATURE_SEAMLESS_Z is not set

which can be fixed by adding IF_FEATURE_* checks in.

Signed-off-by: Ming Liu <peter.x.liu@external.atlascopco.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
(cherry picked from commit 789254b5ae983a94346f53de18286713b80eb5f2)
Signed-off-by: André Draszik <adraszik@tycoint.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
7 years agogdb: fix gdbserver not working in musl/mips context
André Draszik [Fri, 6 Oct 2017 12:12:43 +0000 (13:12 +0100)]
gdb: fix gdbserver not working in musl/mips context

Similar to
  https://bugs.lede-project.org/index.php?do=details&task_id=637&openedfrom=-1%2Bweek

Signed-off-by: André Draszik <adraszik@tycoint.com>
Acked-by: Sylvain Lemieux <slemieux@tycoint.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
(cherry picked from commit 0b9d94a5e54191f93659f7b4e7a3cb4376487823)
Signed-off-by: André Draszik <adraszik@tycoint.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
7 years agooe-pkgdata-util: package-info: Allow extra variables to be displayed
Peter Kjellerstedt [Fri, 8 Sep 2017 14:33:15 +0000 (16:33 +0200)]
oe-pkgdata-util: package-info: Allow extra variables to be displayed

By specifying the -e <var> option one or multiple times, extra
variables available in the pkgdata can be displayed, e.,g,
`oe-pkgdata-util package-info -e SUMMARY -e LICENSE ...`. The extra
variables displayed are quoted since some of them may contain
whitespace.

Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
7 years agobinutils: apply mingw fix only for binutils-cross-canadian
Samuli Piippo [Fri, 15 Sep 2017 10:07:07 +0000 (13:07 +0300)]
binutils: apply mingw fix only for binutils-cross-canadian

Whenever SDKMACHINE is set to mingw32, sdkmingw32 override is defined
everywhere. This meant that value of LDGOLD was different also for
binutils and binutils-cross depending whether SDKMACHINE was set or not.

(From OE-Core rev: 0398f84482dbe5ee99b20e2ca6b3e9984f7ccec5)

Signed-off-by: Samuli Piippo <samuli.piippo@qt.io>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
7 years agooe-build-perf-report: use correct x-axis max value in html charts
Markus Lehtonen [Mon, 15 May 2017 11:18:42 +0000 (14:18 +0300)]
oe-build-perf-report: use correct x-axis max value in html charts

(From OE-Core rev: 1d99b018c2b6a44b9db2f2ede113e64dae751eee)

Signed-off-by: Markus Lehtonen <markus.lehtonen@linux.intel.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
7 years agooe-build-perf-report: allow slashes in {branch} field in tag names
Markus Lehtonen [Thu, 4 May 2017 11:49:58 +0000 (14:49 +0300)]
oe-build-perf-report: allow slashes in {branch} field in tag names

The target branch name might contain slashes.

(From OE-Core rev: 3ddde7d5bcffdd855dae0da6ba5feec752cbacec)

Signed-off-by: Markus Lehtonen <markus.lehtonen@linux.intel.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
7 years agooe-build-perf-report: accept parenthesis in tag names
Markus Lehtonen [Thu, 4 May 2017 11:49:57 +0000 (14:49 +0300)]
oe-build-perf-report: accept parenthesis in tag names

(From OE-Core rev: b1feae0e23300ea3894d14d2e7b1c1f8b419146e)

Signed-off-by: Markus Lehtonen <markus.lehtonen@linux.intel.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
7 years agooeqa/selftest/recipetool: use stable tarball for recipetool create test
Ross Burton [Fri, 15 Sep 2017 11:15:25 +0000 (12:15 +0100)]
oeqa/selftest/recipetool: use stable tarball for recipetool create test

GitHub dynamically generates the /archive/ tarballs but we're encoding checksums
in the test suite.  Change the URL to use a static tarball, and update the
checksums.

(From OE-Core rev: 9c668f9ff989a34e615e2ecc051dadbfe24a5bb4)

Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
7 years agowic: accept '-' in bitbake variables
Enrico Scholz [Fri, 8 Sep 2017 17:33:01 +0000 (19:33 +0200)]
wic: accept '-' in bitbake variables

'-' is valid and common in bitbake variables (e.g. 'FOO_pn-bar'). Accept
it and other characters when reading the .env file.

Also, allow variables to be empty.

(From OE-Core rev: e688ac8e92d2bc451d8b2d437596f630bedccd2c)

(From OE-Core rev: 2a69250abf61e51f633033ddb672e8f459191899)

Signed-off-by: Enrico Scholz <enrico.scholz@ensc.de>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
7 years agouseradd: don't override pseudo environment
Ross Burton [Thu, 14 Sep 2017 16:32:24 +0000 (17:32 +0100)]
useradd: don't override pseudo environment

Back in the dark days before recipe-specific-sysroots the paths being passed in
this manual construction of the pseudo environment made sense, but now they're
incorrect and result in pseudo writing to two different databases during a
single build.  The result is that pseudo doesn't follow changes to /etc/passwd
in the sysroot, and warns in the logs.

Remove the PSEUDO_LOCALSTATEDIR assignment and inherit the correct assignment in
FAKEROOTENV.

(From OE-Core rev: 02457ef7f600ce954874e2d11e74b1c6daaa3bfc)

Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
7 years agogoarch.bbclass: Replace logic for setting GOARM
Will Newton [Fri, 8 Sep 2017 08:52:23 +0000 (09:52 +0100)]
goarch.bbclass: Replace logic for setting GOARM

The previous logic applied a regex to TUNE_FEATURES which could
set the GOARM value to 7 incorrectly, for example when dealing
with an arm1176 core. Simplify to check for the presence of
"armv7" instead. At the same time add a check for "armv6" and
set GOARM to 6 in that case.

Signed-off-by: Will Newton <willn@resin.io>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
7 years agowpa_supplicant: fix WPA2 key replay security bug
Ross Burton [Mon, 16 Oct 2017 18:52:59 +0000 (19:52 +0100)]
wpa_supplicant: fix WPA2 key replay security bug

WPA2 is vulnerable to replay attacks which result in unauthenticated users
having access to the network.

* CVE-2017-13077: reinstallation of the pairwise key in the Four-way handshake

* CVE-2017-13078: reinstallation of the group key in the Four-way handshake

* CVE-2017-13079: reinstallation of the integrity group key in the Four-way
handshake

* CVE-2017-13080: reinstallation of the group key in the Group Key handshake

* CVE-2017-13081: reinstallation of the integrity group key in the Group Key
handshake

* CVE-2017-13082: accepting a retransmitted Fast BSS Transition Reassociation
Request and reinstalling the pairwise key while processing it

* CVE-2017-13086: reinstallation of the Tunneled Direct-Link Setup (TDLS)
PeerKey (TPK) key in the TDLS handshake

* CVE-2017-13087: reinstallation of the group key (GTK) when processing a
Wireless Network Management (WNM) Sleep Mode Response frame

* CVE-2017-13088: reinstallation of the integrity group key (IGTK) when
processing a Wireless Network Management (WNM) Sleep Mode Response frame

Backport patches from upstream to resolve these CVEs.

Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
7 years agoimage.bbclass: Sorted ctypes to avoid basehash error
Gerson Fernando Budke [Fri, 22 Sep 2017 05:29:08 +0000 (07:29 +0200)]
image.bbclass: Sorted ctypes to avoid basehash error

When selected multiple subimages a similar error could happend:
  Variable do_image_cpio[subimages] value changed \
    from 'cpio.gz.u-boot cpio.gz' to 'cpio.gz cpio.gz.u-boot'
To avoid this, 'ctypes' should be sorted at 'gen_conversion_cmds'.

This garantee that 'CONVERSION_CMD_xxx' are always written in tha same
order and consequently 'do_image_cpio' have the same hash.

(From OE-Core rev: 271f1a5f65b8685a1e3645026876251122ef3974)

Signed-off-by: Gerson Fernando Budke <nandojve@gmail.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
7 years agogcc-6.3.inc: Use ucontext_t not struct ucontext.
Juro Bystricky [Thu, 14 Sep 2017 23:18:08 +0000 (16:18 -0700)]
gcc-6.3.inc: Use ucontext_t not struct ucontext.

Use ucontext_t not struct ucontext in linux-unwind.h files.

Current glibc no longer gives the ucontext_t type the tag struct
ucontext, to conform with POSIX namespace rules.  This requires
various linux-unwind.h files in libgcc, that were previously using
struct ucontext, to be fixed to use ucontext_t instead.  This is
similar to the removal of the struct siginfo tag from siginfo_t some
years ago.

Backport of patches by Joseph Myers, taken from
https://gcc.gnu.org/viewcvs/gcc?limit_changes=0&view=revision&revision=249957

[YOCTO #12083]

(From OE-Core rev: ec1c18d866c137b1fa523d0fcc29f65a28f59f44)

Signed-off-by: Juro Bystricky <juro.bystricky@intel.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
7 years agolinuux-yocto/4.1: update to 4.1.43 plus bluetooth CVE-2017-1000251
Armin Kuster [Mon, 18 Sep 2017 16:03:49 +0000 (09:03 -0700)]
linuux-yocto/4.1: update to 4.1.43 plus bluetooth CVE-2017-1000251

Signed-off-by: Armin Kuster <akuster808@gmail.com>
7 years agolibproxy: use stable download URL
Ross Burton [Fri, 15 Sep 2017 10:41:35 +0000 (11:41 +0100)]
libproxy: use stable download URL

GitHub automatically-generated tarballs from tags can and do change over time,
so change libproxy to use the uploaded tarball.

(From OE-Core rev: 1a159da61a8a3d06918f838b1dcec45eed2815a7)

Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
7 years agolinux-yocto/4.9: bluetooth: CVE-2017-1000251
Bruce Ashfield [Thu, 14 Sep 2017 13:47:01 +0000 (09:47 -0400)]
linux-yocto/4.9: bluetooth: CVE-2017-1000251

Integrating the following commit:

[
    commit 16de0149674ed12d983b77a453852ac2e64584b4
    Author: Ben Seri <ben@armis.com>
    Date:   Sat Sep 9 23:15:59 2017 +0200

    Bluetooth: Properly check L2CAP config option output buffer length

    Validate the output buffer length for L2CAP config requests and
    responses to avoid overflowing the stack buffer used for building the
    option blocks.

Cc: stable@vger.kernel.org
Signed-off-by: Ben Seri <ben@armis.com>
Signed-off-by: Marcel Holtmann <marcel@holtmann.org>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
]

(From OE-Core rev: a15ec979910a74d4490aecf30aa21fa5c2f4e99d)

Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
7 years agolinux-yocto/4.4: bluetooth: CVE-2017-1000251
Bruce Ashfield [Thu, 14 Sep 2017 13:47:02 +0000 (09:47 -0400)]
linux-yocto/4.4: bluetooth: CVE-2017-1000251

Integrating the following commit:

[
    commit 16de0149674ed12d983b77a453852ac2e64584b4
    Author: Ben Seri <ben@armis.com>
    Date:   Sat Sep 9 23:15:59 2017 +0200

    Bluetooth: Properly check L2CAP config option output buffer length

    Validate the output buffer length for L2CAP config requests and
    responses to avoid overflowing the stack buffer used for building the
    option blocks.

Cc: stable@vger.kernel.org
Signed-off-by: Ben Seri <ben@armis.com>
Signed-off-by: Marcel Holtmann <marcel@holtmann.org>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
]

(From OE-Core rev: a7e749a7d03818aaa21265dfb455c1a2766782cc)

Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
7 years agolinux-yocto/4.10: bluetooth: CVE-2017-1000251
Bruce Ashfield [Thu, 14 Sep 2017 13:46:59 +0000 (09:46 -0400)]
linux-yocto/4.10: bluetooth: CVE-2017-1000251

Integrating the following commit:

[
    commit 16de0149674ed12d983b77a453852ac2e64584b4
    Author: Ben Seri <ben@armis.com>
    Date:   Sat Sep 9 23:15:59 2017 +0200

    Bluetooth: Properly check L2CAP config option output buffer length

    Validate the output buffer length for L2CAP config requests and
    responses to avoid overflowing the stack buffer used for building the
    option blocks.

Cc: stable@vger.kernel.org
Signed-off-by: Ben Seri <ben@armis.com>
Signed-off-by: Marcel Holtmann <marcel@holtmann.org>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
]

(From OE-Core rev: 7d3ae3213e6da8c27b9618594a8c20c674b0f8f3)

Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
7 years agolinux-yocto/4.9: update to v4.9.49
Bruce Ashfield [Thu, 14 Sep 2017 13:46:56 +0000 (09:46 -0400)]
linux-yocto/4.9: update to v4.9.49

Integrating the korg -stable updates that comprise the following commits:

   f07cb3489cff Linux 4.9.49
   8bc67f67b763 drm/bridge: adv7511: Switch to using drm_kms_helper_hotplug_event()
   8b5a7e443622 drm/bridge: adv7511: Use work_struct to defer hotplug handing to out of irq context
   7791b59153cb scsi: sg: recheck MMAP_IO request length with lock held
   b06e1abf1ff2 scsi: sg: protect against races between mmap() and SG_SET_RESERVED_SIZE
   5b9c6a54c629 cs5536: add support for IDE controller variant
   ec552ece1f25 workqueue: Fix flag collision
   25bdc516b58e drm/nouveau/pci/msi: disable MSI on big-endian platforms by default
   078866740e35 s390/mm: avoid empty zero pages for KVM guests to avoid postcopy hangs
   c193becad9ad MCB: add support for SC31 to mcb-lpc
   0e720cd70631 mwifiex: correct channel stat buffer overflows
   5c23d3ed1190 dlm: avoid double-free on error path in dlm_device_{register,unregister}
   23b7d4f52b69 iwlwifi: pci: add new PCI ID for 7265D
   747562619512 Bluetooth: Add support of 13d3:3494 RTL8723BE device
   b48f7183c64c rtlwifi: rtl_pci_probe: Fix fail path of _rtl_pci_find_adapter
   ed7a384a904f Input: trackpoint - assume 3 buttons when buttons detection fails
   90a1e2e19ed7 ath10k: fix memory leak in rx ring buffer allocation
   d8b992d93555 intel_th: pci: Add Cannon Lake PCH-LP support
   a22d561178ee intel_th: pci: Add Cannon Lake PCH-H support
   5555eb956edc driver core: bus: Fix a potential double free
   ffb58b875d24 iio: adc: ti-ads1015: add adequate wait time to get correct conversion
   ff4a98e3bcb3 iio: adc: ti-ads1015: don't return invalid value from buffer setup callbacks
   1ed4565b7c7b iio: adc: ti-ads1015: avoid getting stale result after runtime resume
   c72ad1a4fdf0 iio: adc: ti-ads1015: enable conversion when CONFIG_PM is not set
   115af6c3b155 iio: adc: ti-ads1015: fix scale information for ADS1115
   177d84e3a72a iio: adc: ti-ads1015: fix incorrect data rate setting update
   e58b04fb5b0b staging/rts5208: fix incorrect shift to extract upper nybble
   afcfe0661a74 USB: core: Avoid race of async_completed() w/ usbdev_release()
   80cdcd7f5335 USB: musb: fix external abort on suspend
   6b3b3a22ef20 usb:xhci:Fix regression when ATI chipsets detected
   99a22c84f51d usb: Add device quirk for Logitech HD Pro Webcam C920-C
   773b93f4255f USB: serial: option: add support for D-Link DWM-157 C1
   2ea91c52ff5f usb: quirks: add delay init quirk for Corsair Strafe RGB keyboard
   8a697a50c090 Linux 4.9.48
   d325f1f1e245 epoll: fix race between ep_poll_callback(POLLFREE) and ep_free()/ep_remove()
   dd2342ad6665 kvm: arm/arm64: Force reading uncached stage2 PGD
   70df301a083c drm/ttm: Fix accounting error when fail to get pages for pool
   12a70ccaa686 xfrm: policy: check policy direction value
   31decdcd8369 lib/mpi: kunmap after finishing accessing buffer
   9e2788ce8f17 wl1251: add a missing spin_lock_init()
   e2ae90bb85f8 CIFS: remove endian related sparse warning
   c5e76654a9e5 CIFS: Fix maximum SMB2 header size
   d4e7dfda905e alpha: uapi: Add support for __SANE_USERSPACE_TYPES__
   309e4dbfaf3d cpuset: Fix incorrect memory_pressure control file mapping
   da16ed52c36a cpumask: fix spurious cpumask_of_node() on non-NUMA multi-node configs
   715849268b34 ceph: fix readpage from fscache
   8cc3acff5f1a mm, madvise: ensure poisoned pages are removed from per-cpu lists
   17c564f629f4 mm, uprobes: fix multiple free of ->uprobes_state.xol_area
   9e0a64330ce5 crypto: algif_skcipher - only call put_page on referenced and used pages
   91a0e1edb80a i2c: ismt: Return EMSGSIZE for block reads with bogus length
   d22f6da47355 i2c: ismt: Don't duplicate the receive length for block reads
   31562136c8d4 irqchip: mips-gic: SYNC after enabling GIC region
   458ca52f1564 Linux 4.9.47
   529ada21ff9e lz4: fix bogus gcc warning
   c47c52cde806 scsi: sg: reset 'res_in_use' after unlinking reserved array
   4099ac938385 scsi: sg: protect accesses to 'reserved' page array
   c0c6dff92303 locking/spinlock/debug: Remove spinlock lockup detection code
   27e7506c33d0 arm64: fpsimd: Prevent registers leaking across exec
   43f776dab360 x86/io: Add "memory" clobber to insb/insw/insl/outsb/outsw/outsl
   509d8b52bbe7 arm64: mm: abort uaccess retries upon fatal signal
   3e033635b2b7 kvm: arm/arm64: Fix race in resetting stage2 PGD
   b8a1532b16fd gcov: support GCC 7.1
   47974403c9ca staging: wilc1000: simplify vif[i]->ndev accesses
   dd758f82a3bf scsi: isci: avoid array subscript warning
   f71996c3ce5d p54: memset(0) whole array

(From OE-Core rev: 57819c9f133f168a6a856afa0d0c5ac57a4f2f44)

Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
7 years agolinux-yocto/4.4: update to v4.4.87
Bruce Ashfield [Thu, 14 Sep 2017 13:46:57 +0000 (09:46 -0400)]
linux-yocto/4.4: update to v4.4.87

Integrating the -stable update with the following commits:

   573b59e17e37 Linux 4.4.87
   d95827490c39 crypto: algif_skcipher - only call put_page on referenced and used pages
   ab3ee6b53d67 epoll: fix race between ep_poll_callback(POLLFREE) and ep_free()/ep_remove()
   628212c89fae kvm: arm/arm64: Force reading uncached stage2 PGD
   57ff696f54b5 kvm: arm/arm64: Fix race in resetting stage2 PGD
   94183009ac0e drm/ttm: Fix accounting error when fail to get pages for pool
   9b3dcc98d8df xfrm: policy: check policy direction value
   c0c2e7567a34 wl1251: add a missing spin_lock_init()
   5f08f0aebf70 CIFS: remove endian related sparse warning
   e596cc1454d4 CIFS: Fix maximum SMB2 header size
   6cdda3497db8 alpha: uapi: Add support for __SANE_USERSPACE_TYPES__
   ed48d9230e30 cpuset: Fix incorrect memory_pressure control file mapping
   15e94ec4ec21 cpumask: fix spurious cpumask_of_node() on non-NUMA multi-node configs
   857d0b3dd756 ceph: fix readpage from fscache
   043ccc9781cc i2c: ismt: Return EMSGSIZE for block reads with bogus length
   fab3229af4e5 i2c: ismt: Don't duplicate the receive length for block reads
   e119fc492de9 irqchip: mips-gic: SYNC after enabling GIC region
   cd99a4f3f43b Linux 4.4.86
   c81c4d453edf drm/i915: fix compiler warning in drivers/gpu/drm/i915/intel_uncore.c
   b7571624fe98 scsi: sg: reset 'res_in_use' after unlinking reserved array
   a4075bbb67b9 scsi: sg: protect accesses to 'reserved' page array
   823086b057aa arm64: fpsimd: Prevent registers leaking across exec
   218720fe5939 x86/io: Add "memory" clobber to insb/insw/insl/outsb/outsw/outsl
   a7a074f3a4d5 arm64: mm: abort uaccess retries upon fatal signal
   da981044d049 lpfc: Fix Device discovery failures during switch reboot test.
   389328ea1379 p54: memset(0) whole array
   5acdbe667cf4 lightnvm: initialize ppa_addr in dev_to_generic_addr()
   d255fffdb532 gcov: support GCC 7.1
   2f3e97a814c8 gcov: add support for gcc version >= 6
   41685ae5cd7b i2c: jz4780: drop superfluous init
   05429bbfd726 btrfs: remove duplicate const specifier
   9a64425945a0 ALSA: au88x0: Fix zero clear of stream->resources
   da8477a6695a scsi: isci: avoid array subscript warning

(From OE-Core rev: 6b06a7ae93d7d98c03e7e924a434463a4337e47b)

Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
7 years ago(PRE)MIRRORS: fix pattern for npm:// without slash
Olaf Mandel [Fri, 25 Aug 2017 17:01:57 +0000 (17:01 +0000)]
(PRE)MIRRORS: fix pattern for npm:// without slash

For URIs with the npm:// transport but with no other slash in it, the
common MIRRORS and PREMIRRORS pattern of npm://.*/.* fails to match.
Make the last slash in the pattern optional in the mirros.bbclass and
own-mirrors.bbclass classes.

Many URIs with the npm:// transport have no slash after the host part:

  npm://registry.npmjs.org;name=foo;version=0.1.2

This means that MIRRORS and PREMIRRORS containing entries like the
first one will not match these URIs:

  npm://.*/.*   # fails to match
  npm://.*/?.*  # matches this and URIs with path components

For normal regular expressions, a pattern like 'npm://.*(/.*)?' would
probably be preferred, but that won't work here: the pattern gets split
into the substrings 'npm', '.*(' and '/.*)?', which are not valid
regular expressions individually.

(From OE-Core rev: 0d1e2b4507af28fc451b8fa94130a39ac342637d)

Signed-off-by: Olaf Mandel <o.mandel@menlosystems.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
7 years agowaffle: fix REQUIRED_DISTRO_FEATURES and PACKAGECONFIG virtual/libgl dependencies
Leonardo Sandoval [Thu, 31 Aug 2017 14:00:41 +0000 (07:00 -0700)]
waffle: fix REQUIRED_DISTRO_FEATURES and PACKAGECONFIG virtual/libgl dependencies

Waffle's REQUIRED_DISTRO_FEATURES statement looks into DEPENDS and if
virtual/libgl is present, it includes opengl as distro feature. However,
in a multilib environment, recipes provides virtual/${MLPREFIX}libgl,
thus waffle recipe needs to include the prefix. Also PACKAGECONFIG
statements need this change in order to properly include the libgl
dependency.

The way this error showed up was in a multilib environment and a distro
not containing opengl, i.e. nodistro, leading the following error when
building world -S none (because opengl was not included as required distro
feature):

    ERROR: Nothing PROVIDES 'virtual/lib32-libgl' (but virtual:multilib:lib32:/meta/recipes-graphics/waffle/waffle_1.5.2.bb DEPENDS on or otherwise requires it). Close matches:
      virtual/lib32-libsdl
      virtual/lib32-libc
      virtual/lib32-libsdl2
    ERROR: Required build target 'lib32-meta-world-pkgdata' has no buildable providers.
    Missing or unbuildable dependency chain was: ['lib32-meta-world-pkgdata', 'meta-world-pkgdata', 'lib32-waffle', 'virtual/lib32-libgl']

    Summary: There were 2 ERROR messages shown, returning a non-zero exit code.

[YOCTO #10900]

(From OE-Core rev: 2e3344a3b6d5c709ab0d368dd171240ab5cc6e22)

Signed-off-by: Leonardo Sandoval <leonardo.sandoval.gonzalez@linux.intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Armin Kuster <akuster808@gmail.com>