The release includes fixes for CVE-2021-41771 and CVE-2021-41772
(From OE-Core rev: 69c68f470e8e12456a4d9abf2d1c33b857e4ea37)
Signed-off-by: Pavel Zhukov <pavel.zhukov@huawei.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Fixed issue where control statements on multi lines with a backslash would
not parse correctly if the template itself contained CR/LF pairs as on
Windows.
(From OE-Core rev: 2fa42b223a9bdafd52a7feb335001ef0b5713af8)
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
NOTE: 4.3.0 now requires Python 3.6.0 and above. Python 3.5.x is no longer supported
Changelog:
- Default hash algorithm check updated for SCons FIPS compliance. Now checks for hash viability
first and then walks the tree to use the first viable hash as the default one. This typically
selects SHA1 on FIPS-enabled systems less than Python 3.9 as the new default instead of MD5,
unless SHA1 has also been disabled by security policy, at which point SCons selects SHA256
as the default. For systems running Python 3.9 and later, the hashlib bug has been fixed,
and SCons will once again default to MD5 as the preferred algorithm.
- Fix MSVS tests (vs-N.N-exec.py) for MSVS 6.0, 7.0, and 7.1 (import missing module).
- Add support for Visual Studio 2022.
- Fix reproducible builds. Restore logic respecting SOURCE_DATE_EPOCH when set.
- Fix version tests to work with updated scons --version output. (Date format changed)
- Fix issue #4021. Change the way subst() is used in Textfile() to not evaluate '$$(' -> '$',
but instead it should yield '$('.
- Change SCons.Platform.win32.get_architecture() to return platform.platform() when run in an
environment where neither: PROCESSOR_ARCHITEW6432 nor PROCESSOR_ARCHITECTURE is set.
This should fix platform tests which started failing when HOST_OS/HOST_ARCH changes
introduced by Aaron Franke (listed below) were merged.
- Further PCH updates. It's now recommended that env['PCH'] should always be a File node.
Either via return value from env.PCH() or by explicitly using File('StdAfx.pch').
- Added --no-ignore-skips to runtest.py. Changed default to ignore skips when setting
runtest.py's exit status. Previously would exit 2 if any tests were skipped.
Now will only exit 2 if user specifies --no-ignore-skips and some tests were skipped.
- Small fix to ensure CLVar default value is an empty list.
See MongoDB bug report: https://jira.mongodb.org/browse/SERVER-59656
Code contributed by MongoDB.
- Ninja - Fixed an issue where if you control-c and/or killed ninja while it was running scons to
regenerate build.ninja you would end up with no build.ninja file and have to rerun scons from scratch.
Code contributed by MongoDB.
- Define HOST_OS and HOST_ARCH in the environment for all platforms.
Before this change, these were only defined for Win32 and OS/2.
- Fix ninja tool to never use for_sig substitution because ninja does not use signatures. This
issue affected CommandGeneratorAction function actions specifically.
- Expanded ninja Mkdir to also support Mkdir actions.
- Added support for the PCH environment variable to support subst generators.
- Fix command line escaping for ninja dollar sign escape. Without escaping ninja properly,
the ninja file scons regenerate and callback invocations will lose the $ characters used in
the scons command line which ninja uses itself for escaping. For Example:
scons BUILD=xyz OTHERVAR=$BUILD
Prior to this fix, it would cause ninja to fail to escape the dollar sign, leading to the
single dollar sign being used as a ninja escape character in the ninja file.
- Added ninja API 'NINJA_FORCE_SCONS_BUILD' to force a node to callback to scons.
- Two small Python 3.10 fixes: one more docstring turned into raw
because it contained an escape; updated "helpful" syntax error message
from 3.10 was not expected by SubstTests.py and test/Subst/Syntax.py
- EmitterProxy rich comparison set is completed (checker warning).
Added __le__, __gt__, __ge__.
- Fix gcc/g++ tool failing if "gcc --version" returns text which fails
to_String conversion (i.e., not UTF-8) - failure happens when tool
initialization checks version. For gcc, the initial version string is
not translated, for the rest, don't convert, just consume raw and discard.
- Maintenance and doc: modernize some usage in Scanner package,
calling super(), switching some imitialization to comprehensions,
and code formatting. Docstring for scanner Base moved from
init-method to class-level so it's picked up by Sphinx.
Added new sconsign filenames to skip_entry_list in Scanner/Dir.py
- Change SCons.Scanner.Base to ScannerBase. Old name kept as an alias
but is now unused in SCons itself.
- Call Variables option converter consistently - the converter should
have access to the env if it needs to (issue #2064).
- Fixed the variables Add() method to accept a tuple for the variable
name the same way AddVariables() does (issue #3869).
- The premade validator PathIsDirCreate for for PathVariable now catches
the case where the directory could not be created due to permission
problems, allowing a more helpful error to be emitted (issue #2828)
- Maintenance: Python thread.setDaemon is deprecated in favor of
directly updating daemon attribute - update SCons to do this.
- Make sure when subst'ing a callable, the callable is called with
the correct for_signature value, previously it would be true even
if doing SUBST_RAW (issue #4037)
- Update Util/NodeList implementation to get rid of a workaround for
early Python 3 slicing issue that is no longer a problem.
- Rework some Java tests to skip rather than fail on CI systems, where
the working java is > v9, but a 1.8 or 9 was also found.
- Java updates: on Windows, detect more default JDK install locations.
On all platforms, more Java versions (up to 17.0 now). Add more information
on version selection to docs.
Update docs on JavaH tool in light of javah command dropped since 10.0.
Try to be better about preserving user's passed-in JAVA* construction vars.
- Start the deprecation of the qt tool, which refers to Qt3 (usupported
since around 2006). There's a deprecation warning added, initially
defaulting to disabled.
- Fix crash when scons is run from a python environement where a signal
is set from outside Python.
(From OE-Core rev: bd7b202e09dbf6749271ff57fed5296c2f8fed4a)
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
rust-cross-* imported from meta-rust has incorrect signatures,
depending on MACHINEOVERRIDES making it effectively MACHINE_ARCH
as shown by sstate-diff-machines.sh:
openembedded-core/scripts/sstate-diff-machines.sh --tmpdir=tmp-glibc \
--machines="qemuarm64 qemuarm64copy" --targets=rust-cross-aarch64-glibc \
--analyze
=== Comparing signatures for task do_configure.sigdata between
qemuarm64 and qemuarm64copy ===
ERROR: gcc-runtime different signature for task do_configure.sigdata
between qemuarm64 and qemuarm64copy
NOTE: Starting bitbake server...
Hash for dependent task gcc/gcc-runtime_11.2.bb:do_prepare_recipe_sysroot
changed from
da4ebf1b272cb73153145a0a95e6438d2955ae2d36f84db10f6880b2781ec331 to
47a0ebb7a88c9f896fb9dbce269f575ab8a6faabb2b9e62d164be6e71c5e4e40
Unable to find matching sigdata for
openembedded-core/meta/recipes-devtools/gcc/gcc-runtime_11.2.bb:
do_prepare_recipe_sysroot with hashes
da4ebf1b272cb73153145a0a95e6438d2955ae2d36f84db10f6880b2781ec331 or
47a0ebb7a88c9f896fb9dbce269f575ab8a6faabb2b9e62d164be6e71c5e4e40
The following patch takes TUNE_PKGARCH into consideration instead
of TARGET_ARCH and results in signatures as expected.
[YOCTO #14613]
RP: Added maintainer.inc corresponding change
(From OE-Core rev: bcf48766d1123cea41f80b0cb687584692c96158)
Signed-off-by: Pgowda <pgowda.cve@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
There is really no reason to install them; this was done
in the original recipe submission for unexplained reasons.
(From OE-Core rev: 34f07b88167e0ee6499efbc53142ba0a8dcc3117)
Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
All of them seem like very old, very oe specific tweaks; please adjust otherwise.
(From OE-Core rev: c9c0f7569559aa334f7b8f4486b70ead13226c11)
Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
License-Update: third party version references updated
(From OE-Core rev: 5454c193ff3997523592edd40642b9a0c0f88fb4)
Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
This fixes an arch linux gdb configure error with liblzma installed.
Without the --with-liblzma-prefix option, when configuring the target
gdb, gdb configure may find the native liblzma (on a non-multiarch
system) and try to use it, which gives a configure error. We already
use --with-libexpat-prefix for expat, we just need to do the same for
liblzma.
This was reported here:
https://github.com/sifive/meta-sifive/issues/34https://github.com/sifive/freedom-u-sdk/issues/148
(From OE-Core rev: 56623848f45cf475f909beb75209323a89837169)
Signed-off-by: Jim Wilson <jim.wilson.gcc@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
8.11.0:
New functions
The :func:`before_and_after`, :func:`sliding_window`, and :func:`triplewise` recipes from the Python 3.10 docs were added
:func:`duplicates_everseen` and :func:`duplicates_justseen` (thanks to OrBin and DavidPratt512)
:func:`minmax` (thanks to Ricocotam, MSeifert04, and ruancomelli)
:func:`strictly_n` (thanks to hwalinga and NotWearingPants)
:func:`unique_in_window`
Changes to existing functions
:func:`groupby_transform` had its type stub improved (thanks to mjk4 and ruancomelli)
:func:`is_sorted` now accepts a strict parameter (thanks to Dutcho and ruancomelli)
:func:`zip_broadcast` was updated to fix a bug (thanks to kalekundert)
(From OE-Core rev: 7767810424a79c9cb60b4ea763bc1c10efe0b73b)
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
What's Changed
update requirements by @davidism in #1524
test Python 3.10 by @davidism in #1530
test Python 3.11 by @davidism in #1531
Tests: Adapt expected traceback regexes for Python 3.11.0a1 by @hroncok in #1527
simplify CodeType rewriting by @davidism in #1536
native: keep same behavior on Python 3.10 by @mkrizek in #1537
Reduce async overhead due to auto_await by @mohd-akram in #1516
Use object.__hash__ for Node.__hash__ by @klette in #1522
Fix typos by @kianmeng in #1509
rewrite Template class doc by @davidism in #1538
remove reference to macro.defaults by @davidism in #1539
rewrite docs about extending template objects by @davidism in #1540
document chained pow order by @davidism in #1541
PackageLoader works with single module file by @davidism in #1542
release version 3.0.3 by @davidism in #1543
(From OE-Core rev: cb39ee88f1e52551dd5093558fde4c67f30580ae)
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Backport the fix for CVE-2021-43396 ("C stack overflow with coroutines")
from upstream.
(From OE-Core rev: e74fb3f7a8171cc1293583241a9ef43a515a9320)
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
I've tested without this and the ptest results for mips are the same with
and without it so the issue this was fixing in gcc 9 was likely resolved
by gcc 11.
(From OE-Core rev: 567e199862acb948cb8b3361010a9ec221147c41)
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Fixes:
$ python3
>>> import numpy
Traceback (most recent call last):
File "<stdin>", line 1, in <module>
File "/usr/lib/python3.10/site-packages/numpy/__init__.py", line 138, in <module>
from ._version import get_versions
File "/usr/lib/python3.10/site-packages/numpy/_version.py", line 7, in <module>
import json
ModuleNotFoundError: No module named 'json'
>>>
(From OE-Core rev: 1b762dc1e3a91884ce649504da787266fc53e928)
Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
meson 0.60 turns unknown options into them hard errors. Do not add
-Dintrospection by using the new configuration option.
(From OE-Core rev: a2023319eb315ba71f6c6699d2068e51524a2908)
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Needs syscalls issues addressed. fails currently to build
../qemu-6.1.0/linux-user/syscall.c:659:1: error: use of undeclared identi
fier '__NR_nanosleep'; did you mean 'safe_nanosleep'?
(From OE-Core rev: c4ba4da8d885d183cc6a6f8a5d8d5122184bc3a6)
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Since commit 044fb04d in bitbake (fetch2: Allow whitespace only mirror
entries) there is no need to separate the entries in MIRRORS with "\n".
(From OE-Core rev: 5374c45725ef5796a563c0665cde0fc05cecd856)
Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
This is a partial revert of commit 5ace3ada (systemd:
'${systemd_unitdir}/system' => '${systemd_system_unitdir}') where
the string '${systemd_unitdir}/system' matched something other than the
intended directory.
(From OE-Core rev: 9ef86e740e7b95df615fdb476267c72cd9b3dd40)
Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
lnr is a script in oe-core that creates relative symlinks, with the same
behaviour as `ln --relative --symlink`. It was added back in 2014[1] as
not all of the supported host distributions at the time shipped
coreutils 8.16, the first release with --relative.
However the oldest coreutils release in the supported distributions is
now 8.22 in CentOS 7, so lnr can be deprecated and users switched to ln.
[1] 6ae3b85eaffd1b0b6914422e8de7c1230723157d
(From OE-Core rev: 1ca455a98de4c713f58df0a537d4c982d256cd68)
Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Changelog v5.15 (Nov 2021)
mkfs: new defaults!
no-holes
free-space-tree
DUP for metadata unconditionally
libbtrfsutil: add missing profile defines
libbtrfs: minimize its impact on the other code, refactor and separate implementation where needed, cleanup afterwards, reduced header exports
documentation: introduce sphinx build and RST versions of manual pages, will become the new format and replace asciidoc
fixes: fix warning regarding v1 space cache when only v2 (free space tree) is enabled
(From OE-Core rev: 77d08d327b9e675109dc95c27ee4910d9047ec49)
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* it was already added for target and cross-canadian gdb in:
commit 4643d1eb222151384f77d13a936537aae5ca3fe6
Author: Khem Raj <raj.khem@gmail.com>
Date: Fri Nov 5 17:37:33 2021 -0700
gdb: Add dependency on libgmp
gdb 11 has added this library as must have
* but gdb-cross.inc overwrites DEPENDS from gdb-common.inc
and needs the dependency as well as shown in log.do_compile:
checking for libgmp... no
configure: error: GMP is missing or unusable
make[1]: *** [Makefile:9418: configure-gdb] Error 1
and in gdb-cross-i686/11.1-r0/build-i686-oe-linux/gdb/config.log:
configure:10402: checking for libgmp
configure:10422: gcc -o conftest -isystem/OE/tmp-glibc/work/x86_64-linux/gdb-cross-i686/11.1-r0/recipe-sysroot-native/usr/include -O2 -pipe -isystem/OE/tmp-glibc/work/x86_64-linux/gdb-cross-i686/11.1-r0/recipe-sysroot-native/usr/include -I/OE/tmp-glibc/work/x86_64-linux/gdb-cross-i686/11.1-r0/recipe-sysroot-native/usr/include -L/OE/tmp-glibc/work/x86_64-linux/gdb-cross-i686/11.1-r0/recipe-sysroot-native/usr/lib -L/OE/tmp-glibc/work/x86_64-linux/gdb-cross-i686/11.1-r0/recipe-sysroot-native/lib -Wl,--enable-new-dtags -Wl,-rpath-link,/OE/tmp-glibc/work/x86_64-linux/gdb-cross-i686/11.1-r0/recipe-sysroot-native/usr/lib -Wl,-rpath-link,/OE/tmp-glibc/work/x86_64-linux/gdb-cross-i686/11.1-r0/recipe-sysroot-native/lib -Wl,-rpath,/OE/tmp-glibc/work/x86_64-linux/gdb-cross-i686/11.1-r0/recipe-sysroot-native/usr/lib -Wl,-rpath,/OE/tmp-glibc/work/x86_64-linux/gdb-cross-i686/11.1-r0/recipe-sysroot-native/lib -Wl,-O1 -Wl,--allow-shlib-undefined -Wl,--dynamic-linker=/OE/tmp-glibc/sysroots-uninative/x86_64-linux/lib/ld-linux-x86-64.so.2 conftest.c -lncursesw -lm -ldl -lgmp >&5
conftest.c:52:10: fatal error: gmp.h: No such file or directory
52 | #include <gmp.h>
| ^~~~~~~
* this fails only when the host OS doesn't have GMP installed
otherwise it will use libgmp from host and ignore
--with-libgmp-prefix=/OE/tmp-glibc/work/x86_64-linux/gdb-cross-i686/11.1-r0/recipe-sysroot-native/OE/tmp-glibc/work/x86_64-linux/gdb-cross-i686/11.1-r0/recipe-sysroot-native/usr
(From OE-Core rev: 09a7d9d8d83529d82f847e52feac7719efb02a99)
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Meson, as provided by the SDK, would fail to fetch Wraps' sources on bare
systems (i.e. systems, that only provide little more than the SDK).
This change modifies the wrapper script so that it sets an environment
variable (unless it is already set) that is used to determine valid
certificates for secured connections.
It does not affect bitbake's interaction with meson.
The SDK's SSL directory was not searched, so meson would fail when it tried
to fetch sources via https, that were specified in wrap files.
Specifically `urllib` would fail:
```
<urlopen error [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:1129)>
```
Caution: this patch depends on the underlying C library (i.e. openssl)
to consider this environment variable.
(From OE-Core rev: afad2f09ebbfe395f8fafce8218e26056479fe39)
Signed-off-by: Leif Middelschulte <Leif.Middelschulte@klsmartin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
This has been disabled for the given compile error which has been fixed
over time, qemu for target builds fine with musl now a days
(From OE-Core rev: c8902102a96475d7d292a04f0a2e5564cdab4cfe)
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
gdb 11 has added this library as must have
(From OE-Core rev: 4643d1eb222151384f77d13a936537aae5ca3fe6)
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
I do not think upstream is going to accept this; if you disagree
please do the submission.
(From OE-Core rev: 22b0bd6cfdbf7216a6aca34fa9ca93133a3cee64)
Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
