Commit Graph

45506 Commits

Author SHA1 Message Date
Richard Purdie
3dfd4ed0ef siteinfo/autotools: Ensure task checksums reflect site files
Currently, if you change the site files, nothing rebuilds since they are
not accounted for in task checksums. They could/should be through the
file-checksums task flag. We need to cache all the files looked for,
whether the exist or not so that if they do exist and didn't,
the checksum also changes.

This gets complicated by the need to clean out hardcoded build
paths from the variable and that other layers can have site files.

This patch adds this functionality. A new variable, SITEINFO_PATHVARS
is added which controls which substitutions to make on the file-checksum
values to remove the hardcoded paths. Layers adding site files will need
to set this to a variable that has the layer path in it and is excluded
from task hashes (COREBASE is the one the core layer uses).

This patch will cause yocto-check-layer to fail for some layers
where site files are added yet the layer isn't a machine specific layer.
This is arguable correct since these additional site files apply to
all recipes and things from a layer like core could be changed by such
changes so it is right they should rebuild. There is a determinism issue
potentially there if not. meta-openembedded does have some such references
but looking at them they should move to core or likely just be removed as
most look obsolete anyway.

[YOCTO #13729]

(From OE-Core rev: 29daffc2410f06f36b779d5bf1fd1ef6e900ca8f)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-09-23 13:49:11 +01:00
Richard Purdie
282d596b8c image/qemu: Add explict depends for qemu-helper addto_recipe_sysroot task
The populate_sysroot task isn't enough for qemu-helper-native, we need
it's addto_recipe_sysroot task. This corrects what amounts to bad
dependency information to be explicit.

(From OE-Core rev: 55623420208bc4c77a61492d2bbcbc71d3123acd)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-09-23 13:49:11 +01:00
Khem Raj
bea6a00da3 site: Drop ORBit2 relared cached variables
ORBit2 is long gone

(From OE-Core rev: a5c5dd9229553e0e364f083d661382fe0c15600c)

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-09-23 13:49:11 +01:00
Khem Raj
68be1b4a90 site: Drop caching libIDL_cv_long_long_format
recipe for libidl has long been deleted

(From OE-Core rev: 587d0b51b09cd426dc4b2b7646fa063d10ae4f2f)

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-09-23 13:49:11 +01:00
Steve Sakoman
40c44728ab connman: add CVE_PRODUCT
Upstream database uses both "connman" and "connection_manager" to report CVEs

(From OE-Core rev: eadf7bb17289731be9747822e3d4084ab69cf109)

Signed-off-by: Steve Sakoman <steve@sakoman.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-09-23 13:49:11 +01:00
Ross Burton
48587b5e63 oeqa/target/ssh: don't assume target_dumper is set
The target_dumper property is only set by the QemuTarget subclass, so
assign a default value and check it isn't None before calling it.

(From OE-Core rev: add36cf85380bf7dc5339a9d65f951923317440b)

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-09-21 23:44:08 +01:00
Ross Burton
e030167881 libsoup-2.4: remove obsolete intltool dependency
This hasn't been needed since libsoup 2.65.2.

(From OE-Core rev: 250a3f9a804917c8a9427d0209365d27b1b8fa4a)

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-09-21 23:44:08 +01:00
Ross Burton
300b51ac6b shared-mime-info: use a more concise description
For example we don't need to talk about historic build dependencies.

(From OE-Core rev: b67ae98ef803b889fceb5713c539504d48f1a926)

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-09-21 23:44:08 +01:00
Richard Purdie
3f53f869ae cross: Drop unused do_install
All the users of the cross class I could find redefine the do_install
function. It is unusual and likely undesirable for the class to be
changing this from the default and likely a leftover from different
times. Remove it as it isn't doing anything.

[YOCTO #9272]

(From OE-Core rev: 72f0e03a6909e6856510d913863fc9301de32cec)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-09-21 23:44:08 +01:00
Ross Burton
27024e544b avahi: remove obsolete intltool-native dependency
intltool was replaced with gettext in the 0.8 release.

(From OE-Core rev: 0438c8e73419c0a81bbb42f777eb3e36f4878e79)

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-09-21 23:44:08 +01:00
Jon Mason
23cf785f0c testimage: remove aarch64 xorg exclusion
aarch64/qemuarm64 has had graphics support for some time.  Remove this
exclusion and allow graphics tests to be against qemuarm64.

(From OE-Core rev: 1b436e4894663fa76865636b0b41c0c1503cc3bf)

Signed-off-by: Jon Mason <jdmason@kudzu.us>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-09-21 23:44:08 +01:00
Martin Jansa
689097cdf3 qemu-native: add direct dependency on ninja-native and meson-native
* with many native dependencies excluded in:
  layer.conf: Extend recipes not to install without explict dependencies
  this was now failing with:
  ERROR: Cannot find Ninja
  and after adding ninja-native to DEPENDS it was failing due to missing meson as well:
  /OE/build/oe-core/tmp-glibc/work/x86_64-linux/qemu-native/6.0.0-r0/qemu-6.0.0/configure: 6415: --version: not found
  /OE/build/oe-core/tmp-glibc/work/x86_64-linux/qemu-native/6.0.0-r0/qemu-6.0.0/configure: 6418: setup: not found

(From OE-Core rev: 7b2dfb49105e6465c5436869863e6a9720c60bbd)

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-09-21 23:44:08 +01:00
Richard Purdie
50c1efdeb9 lttng-tools: Add missing DEPENDS on bison-native
This was being provided by other pieces of the dependency chain but is
specifically required by configure and could fail if those pieces come
from sstate. Fix such builds by adding the missing dependency.

(From OE-Core rev: ba2587beb2a3fb0ef9139f846e161542d2c5c4ae)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-09-21 23:44:08 +01:00
Richard Purdie
596cbbf615 recipes: Add missing pkgconfig inherit
Various recipes were missing a pkgconfig inherit or pkgconfig-native
dependency despite using pkgconfig.

Add the inherit to igt-gpu-tools/gdb/libmodulemd/libwpe/xwayland/waffle
shaderc/iputils/wpebackend-fdo/lttng-ust/cargo.

(From OE-Core rev: 777d9744570c2dc119dc5d04985896bbb1da5885)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-09-21 23:44:08 +01:00
Richard Purdie
e899b2e25b sqlite3: Exclude CVE-2021-36690 from cve checks
Issue is in an experimental extension we don't have/use. Could also
be windows only.

(From OE-Core rev: 6f5770b49f06168e3d6914bd92f0594bd05f1f8f)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-09-21 23:44:08 +01:00
Richard Purdie
f84fb1032d libgcrypt: Upgrade 1.9.3 -> 1.9.4
Includes a fix for CVE-2021-40528.

(From OE-Core rev: 24664297abd3844902fa40c21e4e975d89f40383)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-09-21 23:44:08 +01:00
Richard Purdie
b29863b6ba vim: Backport fix for CVE-2021-3770
(From OE-Core rev: 54d3d023ce55ba4a7160ed25a283f0918e7d8e2e)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-09-21 23:44:08 +01:00
Alexander Kanavin
b0bcf539e9 testimage: symlink the task log and qemu console log to tmp/log/oeqa
This makes it easier for the AB scripts (particularly, collect-results)
to access and archive these items, as they can contain useful information
when ptests or other qemu tests fail (and also if they don't fail).

[YOCTO #14518]

(From OE-Core rev: 1965b344abcff0ba584136f929b4a14645f1585e)

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-09-21 23:44:08 +01:00
Kai Kang
a0a9df0e8b rust-common.bbclass: make sure ccache exist
It fails to run task rust_create_wrappers of recipe which inherit
rust-common.bbclass such as rust-hello-world if no host ccache exists:

| DEBUG: Executing shell function do_rust_create_wrappers
| /path/to/project/tmp-glibc/work/core2-64-wrs-linux/rust-hello-world/git-r0/temp/run.do_rust_create_wrappers.3422:
    line 179: ccache: command not found

Run task rust_create_wrappers before do_prepare_recipe_sysroot to make
sure required tools such as ccache exist.

(From OE-Core rev: 46575e0d5b9e722558b64e22ed928e6d7b2c654a)

Signed-off-by: Kai Kang <kai.kang@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-09-19 11:33:14 +01:00
Alexander Kanavin
4335ee7063 cpan-base.bbclass: use raw string for regexp
This eliminates a deprecation warning and a future error as stipulated by
https://docs.python.org/3/library/re.html

(From OE-Core rev: 1753a8d8fd2e9d98255beb81428f70cdf3421321)

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-09-19 11:33:14 +01:00
Alexander Kanavin
5128defbc3 meta: correct collections vs collections.abc deprecation
collections.abc is available since 3.3 and doesn't need special handling.

(From OE-Core rev: 01152c9410ba00274c8415a5d914dc33dfd0cf46)

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-09-19 11:33:14 +01:00
Claudius Heine
c5d1550fe6 rng-tools: add systemd-udev-settle wants to service
rngd needs to start after `systemd-udev-settle` in order for the kernel
modules of the random source hardware to be loaded before it is started.

However, since the `rngd.service` does not require or want
`systemd-udev-settle.service` it might not be scheduled for start and
the `After=systemd-udev-settle.service` there has no effect.

Adding `Wants=systemd-udev-settle.service` provides a weak requirement
to it, so that the `rngd` is started after it, if possible.

(From OE-Core rev: e9715d4234eb7b45dee8b323799014646f0a1b07)

Signed-off-by: Claudius Heine <ch@denx.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-09-19 11:33:14 +01:00
Jon Mason
7bbd93f8dc machine/qemuarm*: use virtio graphics
Switch to using virtio graphics for the Arm QEMU machines.  You will
noticed the difference in the dmesg by seeing:
[    2.693337] [drm] pci: virtio-gpu-pci detected at 0000:00:10.0

(From OE-Core rev: 961158653170f53de58672e474c41f1533f469fc)

Signed-off-by: Jon Mason <jdmason@kudzu.us>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-09-19 11:33:14 +01:00
Jon Mason
be665a7983 core-image-sato: Fix runqemu error for qemuarmv5
When attempting to execute runqemu on qemuarmv5, the following error is
encountered:

runqemu - ERROR - Failed to run qemu: qemu-system-arm: versatilepb: memory size must not exceed 256MB

To work around this, limit the QB_MEM size for qemuarmv5, similar to
what is being done for qemumips.

(From OE-Core rev: 6450138afebffcc55ab32afadd5fb979274fff2b)

Signed-off-by: Jon Mason <jdmason@kudzu.us>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-09-17 07:30:39 +01:00
Jon Mason
112f5afe8e Update mailing list address
(From OE-Core rev: 83169c33f7585da25560784f79eaad2c6f029f3c)

Signed-off-by: Jon Mason <jdmason@kudzu.us>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-09-17 07:27:20 +01:00
Mark Hatle
35d18a3c98 tcf-agent: Move to the latest master version
There has not been a release since 2018, the 1.7.0 release.  A number of
recent improvements around thumb and clang debugging prompted this move
to a newer version.

The patch is no longer necessary as it was a backport patch.

(From OE-Core rev: b98c739aa1204ecd842278a6e36a56243bfbc2a5)

Signed-off-by: Mark Hatle <mark.hatle@kernel.crashing.org>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-09-17 07:27:20 +01:00
Konrad Weihmann
2a1743ace5 expat: pull from github releases
sometimes we can find release tarballs from sourceforge are not fully
distributed along all download mirrors leading to fetching faiilures,
depending on what download mirror will be chosen by sourceforge
servers.
As the project moved to github anyway, it's better to pull the tarballs
directly from github releases - serving the very same static artifacts.

Add an override UPSTREAM_CHECK_URI to enable devtool upgrade checks

(From OE-Core rev: 9b5b797b0e9e6f2cb3e29be92c4f9b763c4a41e9)

Signed-off-by: Konrad Weihmann <kweihmann@outlook.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-09-17 07:27:20 +01:00
Ross Burton
c4bc29f593 ffmpeg: fix LICENSE
Expat isn't a license name we have, use MIT instead.

(From OE-Core rev: b1821691c2d7eafb29cf182fc1f2ec7b0cc8340f)

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-09-17 07:27:20 +01:00
Kristian Klausen
7b98f81d2f systemd: Add tpm2 PACKAGECONFIG
The TPM2 support is used, among other things, for unlocking encrypted
volumes.

(From OE-Core rev: 7b7dfbfaedde775add3be7a3cb44b115d8ec5036)

Signed-off-by: Kristian Klausen <kristian@klausen.dk>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-09-16 09:50:34 +01:00
Peter Kjellerstedt
ba7f322a3e create-spdx.bbclass: Search all license directories for licenses
Before, even if the code was seemingly written to search through all
licenses in ${COMMON_LICENSE_DIR} and ${LICENSE_PATH}, it would
actually bail out after only searching ${COMMON_LICENSE_DIR} due to
the exception handling.

Also refrain from using f-strings.

(From OE-Core rev: f58d54b31a1ddb4e60eb07365bfb7dfe78ed56af)

Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-09-16 09:50:34 +01:00
Mingli Yu
42b2fb8651 python3: fix multilib qa issue
Enable tk in PACKAGECONFIG as below in conf/local.conf.
PACKAGECONFIG_append_pn-python3 = " tk"
 $ bitbake lib32-python3
   ERROR: lib32-python3-3.9.6-r0 do_package_qa: QA Issue: /usr/lib/python3.9/lib-dynload/_tkinter.cpython-39-i386-linux-gnu.so contained in package lib32-python3-tkinter requires libtk8.6.so, but no providers found in RDEPENDS_lib32-python3-tkinter? [file-rdeps]
   ERROR: lib32-python3-3.9.6-r0 do_package_qa: QA run found fatal errors. Please consider fixing them.

So add MLPREFIX prefix to fix the above issue.

(From OE-Core rev: 4a839d7c66e4589050ce3f145a8c7cf820e6b35d)

Signed-off-by: Mingli Yu <mingli.yu@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-09-16 09:50:34 +01:00
Mingli Yu
46757ac1e8 insane.bbclass: add FILERDEPENDS related check back
Instead of FILERDEPENDS_*, the FILERDEPENDS should be FILERDEPENDS:*
such as FILERDEPENDS:/usr/bin/python3.9:lib32-python3-core as an example,
so switch to new override syntax to make sure the related check in effect.

(From OE-Core rev: 6e5650be0ce5575da1ce5b6ea8b24a82ec7b1210)

Signed-off-by: Mingli Yu <mingli.yu@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-09-16 09:50:34 +01:00
Mingli Yu
b24b417ebf multilib.bbclass: add RDEPENDS related check back
When multilib enabled, instead of checking RDEPENDS_lib32-python3-core,
we should check RDEPENDS:lib32-python3-core as new override syntax applied.

So switch to new override syntax to make sure the related RDEPENDS check
logic is in effect.

(From OE-Core rev: 63d53e515d8f3d92a4143dc25c2e639c7fb8c3fb)

Signed-off-by: Mingli Yu <mingli.yu@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-09-16 09:50:34 +01:00
Richard Purdie
5ed27d8d9a sstatesig: Allow exclusion of the root directory for do_package
The package task references WORKDIR at it's top level and we can't
easily make the timestamp for that determnistic due to writes to files
there and in other subdirs. We could try and force it to a specific value
but it is easier to just remove it from the package task, we don't need
it there or care about it in this case.

(From OE-Core rev: 9cceeb906527f90d8dd3aad75aa3a8805e2a1df5)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-09-16 09:50:34 +01:00
Richard Purdie
0256b7dac4 bash: Ensure deterministic build
Bash keeps a count of the number of times make was invoked on a directory
and changes the output versioning accordingly. We want deterministic output
so disable this behaviour.

(From OE-Core rev: 13a039e03195a47c750d5901e96fe81cf523481f)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-09-16 09:50:34 +01:00
Richard Purdie
6c5a29035b sstate: Ensure SDE is accounted for in package task timestamps
When creating packages we build them with --clamp-mtime and use
SOURCE_DATE_EPOCH as the maximum mtime. This makes the end packages
reproducible. The data stored in sstate for do_package and the package
task doesn't benefit from this though and have varying timestamps.
This means their outhash varies and means hash equivalance isn't
effective at all and doesn't work as intended/desired.

We could create the sstate archives with the same clamping however
that would lead to different results depending on whether a task was
installed from sstate or not. Making that differ is a path to madness.
It also wouldn't fix the outhash of the task to be determninistic
without clamping of the date in the hash calculation code.

Instead, iterate over the files in sstate output and clamp them at
the code level. This isn't ideal but does make the file timestamps
determnistic everywhere and means we don't have to change the hash
calculation code.

This issue can be clearly seen looking at the do_package outhash for
a recipe which you then re-run the package task for after adding
something like whitespace to the install task. The outhash shouldn't
change but currently does.

(From OE-Core rev: c3b3cc4745811b48b9193f83889946b2e1788932)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-09-16 09:50:34 +01:00
Richard Purdie
95fa69f3d3 package: Fix pkgdata determinism issues
pkgdata output isn't entirely deterministic since the sorting of some of the
variables can change. This likely doesn't have any real world effect but fix
this with some additional sorting as it allows better hash equivalency of
task output.

(From OE-Core rev: a30c4de8a0b309c398c42fe710c45a4df7fcc64d)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-09-16 09:50:34 +01:00
Richard Purdie
516bbba02f useradd: Ensure preinst data is expanded correctly in pkgdata
The preinst data in pkgdata will not expand out the ${XXX_PARAM} variables
since they don't use a package suffix. It happens that the final expansion
used for the packages is corrected by a second trip through the datastore.

The first version is used for calculation of the task output hash and
recent improvements in hash reuse showed this data wasn't using included
in the hashes, meaning for example builds with dynamic IDs were mixing
sstate with builds using static IDs. The result was a mess.

Fix this by expanding the data in the preinst correctly to use the
package specific _PARAM values.

(From OE-Core rev: 375430f249e7e0b6622e566e2478b40ba7e606ab)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-09-16 09:50:34 +01:00
Armin Kuster
9cabb26aa2 tar: ignore node-tar CVEs
These three CVEs are specific to the Node package node-tar.

exclude: CVE-2021-37701 CVE-2021-37712 CVE-2021-37713

(From OE-Core rev: 9f9317a02d73c1e5aea026683a037e52c996c7bb)

Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-09-16 09:50:34 +01:00
Markus Volk
3e1026ef31 util-linux: disable raw
raw.h has been dropped in linux-libc-headers-5.14 leading to:

configure: error: raw selected, but required raw.h header file not available
WARNING: exit code 1 from a shell command.

(From OE-Core rev: 7f577c10913104860121f682b9b3754870c4db23)

Signed-off-by: MarkusVolk <f_l_k@t-online.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-09-16 09:50:34 +01:00
Chanho Park
cb8edc767e binutils: inherit pkgconfig to address libdebuginfod depdency
Since libdebuginfo was default distro feature[1], cross build of binutils
has been broken due to absence of pkg-config. To find the dependency
properly, we should inherit pkgconfig bbclass.

checking for aarch64-poky-linux-pkg-config... no
checking for pkg-config... no
checking whether to use debuginfod... yes
checking for libdebuginfod >= 0.179... no
configure: error: "--with-debuginfod was given, but libdebuginfod is missing or unusable."

[1]: https://lists.openembedded.org/g/openembedded-core/message/150666

(From OE-Core rev: 50154869b496cf63a4fae2c8278350fcf9a2591d)

Signed-off-by: Chanho Park <chanho61.park@samsung.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-09-11 22:39:20 +01:00
Richard Purdie
505fdf638c sstate: Avoid problems with recipes using SRCPV when fetching sstate
When fetching sstate, SRCPV can be expanded withuin PV which breaks the
sstate fetcher as other variables like SRC_URI are changed by the fetcher
code. Expand the variable before doing this to avoid those problems and
hence avoid setscene task failures with remote sstate storage in git
recipes.

(From OE-Core rev: 0d9d7acebe0be42d4cf8a30ecbbbbcb2dfd16a4b)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-09-11 22:39:20 +01:00
Richard Purdie
7074a39333 bitbake.conf: Ensure XZ_THREADS doesn't change sstate checksums
rpm output packages currently depend on the value of XZ_THREADS which
is ok if left to the default value but problematic if system limits
are set such as on the autobuilder.

Force the value to a specific one in the hashes for better sstate reuse
and consistent rpm task checksums.

(From OE-Core rev: 0296dc71c01d1b7953d74ef37d56429e2f4fcfab)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-09-11 22:39:20 +01:00
Armin Kuster
54a8d36902 apr: Security fix for CVE-2021-35940
An out-of-bounds array read in the apr_time_exp*() functions was fixed in the
Apache Portable Runtime 1.6.3 release (CVE-2017-12613). The fix for this issue
was not carried forward to the APR 1.7.x branch, and hence version 1.7.0 regressed
compared to 1.6.3 and is vulnerable to the same issue.

(From OE-Core rev: d52b78c75323fb254b5d0216f9183573b353abd3)

Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-09-11 22:39:20 +01:00
Ranjitsinh Rathod
9886ef691a rpm: Handle proper return value to avoid major issues
0001-rpm-rpmio.c-restrict-virtual-memory-usage-if-limit-s.patch changed
to avoid critical issues
Handled return values of getrlimit() and lzma_cputhreads() functions
to avoid unexpected behaviours like devide by zero and potential read
of uninitialized variable 'virtual_memory'
Upstream-Status: Pending [merge of multithreading patches to upstream]

(From OE-Core rev: 5aae9c2cb464350bc443a0f60fd6602942e61f46)

Signed-off-by: Ranjitsinh Rathod <ranjitsinh.rathod@kpit.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-09-11 22:39:19 +01:00
Mark Hatle
74d7d84dcb externalsrc: Work with reproducible_build
Externalsrc removes do_fetch, do_unpack, and do_patch.  The system normally
discovers the correct reproducible date as a postfuncs of do_unpack, so this
date is never found, so it falls back to the default epoch.

Instead we can move the discovery function to a prefuncs on the epoch
deploy task.  This task will run before do_configure, and since the source
is already available can run safely at anytime.

(From OE-Core rev: 0b7dd711a54e92ce54abe99f59fc67e683d52dfe)

Signed-off-by: Mark Hatle <mark.hatle@xilinx.com>
Signed-off-by: Mark Hatle <mark.hatle@kernel.crashing.org>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-09-11 22:39:19 +01:00
Mark Hatle
88e643a8b7 reproducible_build: Remove BUILD_REPRODUCIBLE_BINARIES checking
Previously if BUILD_REPRODUCIBLE_BINARIES was set to 0, the system would
fall back and select the default epoch (April 2011), but still perform
the reproducible build actions.  This resulted in binaries that had an
unusually old date.

Simplify the functions and remove the anonymous python as no longer
necessary.

Also improve the documentation to better explain what the class is doing
and how a recipe can override the behavior if necessary.

(From OE-Core rev: 1976013b026cfba94de32a13e994d92d7e9e39e5)

Signed-off-by: Mark Hatle <mark.hatle@xilinx.com>
Signed-off-by: Mark Hatle <mark.hatle@kernel.crashing.org>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-09-11 22:39:19 +01:00
Kai Kang
d5723cb241 perl: fix CVE-2021-36770
Backport patch to fix CVE-2021-36770. And drop the section of code which
updates version.

CVE: CVE-2021-36770

(From OE-Core rev: 9a5e0f3ece45529358b6b712e3450a8594f531c6)

Signed-off-by: Kai Kang <kai.kang@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-09-11 22:39:19 +01:00
Peter Bergin
457cc45f51 systemd: add packageconfig for wheel-group
If the distro does not include the group 'wheel' systemd will
complain when trying to parse ACL rules for tmpfiles.d.

  systemd-tmpfiles[273]: Failed to parse ACL "d:group:adm:r-x,d:group:wheel:r-x": Invalid argument. Ignoring

Systemd has a configuration parameter to avoid using 'wheel'
group in the standard config files for tmpfiles. Add this as
a PACKAGECONFIG and enable it by default to keep default.

(From OE-Core rev: 1b5648e6aeb9837cb807ce086c26fbfaa16f6f8b)

Signed-off-by: Peter Bergin <peter@berginkonsult.se>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-09-11 22:39:19 +01:00
Bruce Ashfield
90f5034e48 linux-yocto/5.10: update to v5.10.63
Updating linux-yocto/5.10 to the latest korg -stable release that comprises
the following commits:

    e07f317d5a28 Linux 5.10.63
    4405ea221dea media: stkwebcam: fix memory leak in stk_camera_probe
    ad5e13f15db7 fuse: fix illegal access to inode with reused nodeid
    40ba433a85db new helper: inode_wrong_type()
    ded9137fcf0d spi: Switch to signed types for *_native_cs SPI controller fields
    55bb5193cec5 serial: 8250: 8250_omap: Fix possible array out of bounds access
    8e41134a92a5 ALSA: pcm: fix divide error in snd_pcm_lib_ioctl
    4ffde17862b0 ALSA: hda/realtek: Workaround for conflicting SSID on ASUS ROG Strix G17
    4ee2686b3745 ALSA: hda/realtek: Quirk for HP Spectre x360 14 amp setup
    2808d59fb29b cryptoloop: add a deprecation warning
    61a038f80c80 perf/x86/amd/power: Assign pmu.module
    ec9a82e034f6 perf/x86/amd/ibs: Work around erratum #1197
    23c29490b84d ceph: fix possible null-pointer dereference in ceph_mdsmap_decode()
    d2064a1444d6 perf/x86/intel/pt: Fix mask of num_address_ranges
    0e74bba60452 qede: Fix memset corruption
    35f223cb21b1 net: macb: Add a NULL check on desc_ptp
    cf50d02e474b qed: Fix the VF msix vectors flow
    2177c4943e40 reset: reset-zynqmp: Fixed the argument data type
    9872349b088d gpu: ipu-v3: Fix i.MX IPU-v3 offset calculations for (semi)planar U/V formats
    b983d60292a6 ARM: OMAP1: ams-delta: remove unused function ams_delta_camera_power
    bc860c3f0945 xtensa: fix kconfig unmet dependency warning for HAVE_FUTEX_CMPXCHG
    b1075d2a7052 static_call: Fix unused variable warn w/o MODULE
    ae16b7c66837 Revert "Add a reference to ucounts for each cred"
    1aa3f27e592d Revert "cred: add missing return error code when set_cred_ucounts() failed"
    0c1443874e1c Revert "ucounts: Increase ucounts reference counter before the security hook"
    0479b2bd2959 ubifs: report correct st_size for encrypted symlinks
    3ac01789f6d9 f2fs: report correct st_size for encrypted symlinks
    894a02236d0d ext4: report correct st_size for encrypted symlinks
    b8c298cf57dc fscrypt: add fscrypt_symlink_getattr() for computing st_size
    09a379549620 ext4: fix race writing to an inline_data file while its xattrs are changing
    f6dd002450bf Linux 5.10.62
    0c9a876f2897 bpf: Fix potentially incorrect results with bpf_get_local_storage()
    38c1915d3e9f audit: move put_tree() to avoid trim_trees refcount underflow and UAF
    1890ee7ff87f net: don't unconditionally copy_from_user a struct ifreq for socket ioctls
    0085646e02b2 Revert "parisc: Add assembly implementations for memset, strlen, strcpy, strncpy and strcat"
    17982c664f8b Revert "floppy: reintroduce O_NDELAY fix"
    709c162ddc83 kthread: Fix PF_KTHREAD vs to_kthread() race
    c43add24dffd btrfs: fix NULL pointer dereference when deleting device by invalid id
    1604c42a1ca9 arm64: dts: qcom: msm8994-angler: Fix gpio-reserved-ranges 85-88
    f760c1101f52 lkdtm: Enable DOUBLE_FAULT on all architectures
    b6c657abb893 net: dsa: mt7530: fix VLAN traffic leaks again
    f8242f554c82 usb: typec: ucsi: Clear pending after acking connector change
    e15e32d519fa usb: typec: ucsi: Work around PPM losing change information
    08953884aad4 usb: typec: ucsi: acpi: Always decode connector change information
    9a4f1dc8a17c tracepoint: Use rcu get state and cond sync for static call updates
    b6ae3854075e srcu: Provide polling interfaces for Tiny SRCU grace periods
    450948b06ce8 srcu: Make Tiny SRCU use multi-bit grace-period counter
    641e1d88404a srcu: Provide internal interface to start a Tiny SRCU grace period
    f789de3be808 srcu: Provide polling interfaces for Tree SRCU grace periods
    fdf66e5a7fc8 srcu: Provide internal interface to start a Tree SRCU grace period
    d3c38d8549c0 powerpc/perf: Invoke per-CPU variable access with disabled interrupts
    77b77d45a4b1 perf annotate: Fix jump parsing for C++ code.
    9f9e40ddfca3 perf tools: Fix arm64 build error with gcc-11
    94687c49b65b perf record: Fix memory leak in vDSO found using ASAN
    e0ca67030fda perf symbol-elf: Fix memory leak by freeing sdt_note.args
    0d8e39bb9416 perf env: Fix memory leak of bpf_prog_info_linear member
    133d7f93eecd riscv: Fixup patch_text panic in ftrace
    7e2087249e87 riscv: Fixup wrong ftrace remove cflag
    b42fde92cdde Bluetooth: btusb: check conditions before enabling USB ALT 3 for WBS
    60d69cb4e60d vt_kdsetmode: extend console locking
    0a178a015161 tipc: call tipc_wait_for_connect only when dlen is not 0
    ded6da217ced mtd: spinand: Fix incorrect parameters for on-die ECC
    3b2018f9c9c0 pipe: do FASYNC notifications for every pipe IO, not just state changes
    e91da23c1be1 pipe: avoid unnecessary EPOLLET wakeups under normal loads
    d845f89d59fc btrfs: fix race between marking inode needs to be logged and log syncing
    6f38d95f33be net/rds: dma_map_sg is entitled to merge entries
    b882dda2bf7a drm/nouveau/kms/nv50: workaround EFI GOP window channel format differences
    7f422cda03a6 drm/nouveau/disp: power down unused DP links during init
    6fd6e20520cc drm: Copy drm_wait_vblank to user before returning
    26ee94ba343c blk-mq: don't grab rq's refcount in blk_mq_check_expired()
    b00ca567579a drm/amd/pm: change the workload type for some cards
    3c37ec435022 Revert "drm/amd/pm: fix workload mismatch on vega10"
    cc126b400b25 qed: Fix null-pointer dereference in qed_rdma_create_qp()
    18a65ba06903 qed: qed ll2 race condition fixes
    4ac9c81e8a54 tools/virtio: fix build
    c7ee4d22614e vringh: Use wiov->used to check for read/write desc order
    6c074eaaf785 virtio_vdpa: reject invalid vq indices
    0698278e8eef virtio_pci: Support surprise removal of virtio pci device
    065a13c299b4 virtio: Improve vq->broken access to avoid any compiler optimization
    f41c7462d8ae cpufreq: blocklist Qualcomm sm8150 in cpufreq-dt-platdev
    3dea93159038 opp: remove WARN when no valid OPPs remain
    be37f7dbcd2c iwlwifi: pnvm: accept multiple HW-type TLVs
    9a6a5602c217 clk: renesas: rcar-usb2-clock-sel: Fix kernel NULL pointer dereference
    bdc5049c3698 perf/x86/intel/uncore: Fix integer overflow on 23 bit left shift of a u32
    c5600b914690 dt-bindings: sifive-l2-cache: Fix 'select' matching
    ad5329a53327 usb: gadget: u_audio: fix race condition on endpoint stop
    257ea8a5edc0 drm/i915: Fix syncmap memory leak
    e49b8d9c5e88 net: stmmac: fix kernel panic due to NULL pointer dereference of plat->est
    b2091d47a14e net: stmmac: add mutex lock to protect est parameters
    ac874290e75c Revert "mmc: sdhci-iproc: Set SDHCI_QUIRK_CAP_CLOCK_BASE_BROKEN on BCM2711"
    411680a07cc6 net: hns3: fix get wrong pfc_en when query PFC configuration
    e834ca7c7924 net: hns3: fix duplicate node in VLAN list
    5931ec35e992 net: hns3: add waiting time before cmdq memory is released
    9820af16a879 net: hns3: clear hardware resource when loading driver
    ad0db8385575 rtnetlink: Return correct error on changing device netns
    51bc5c66606d cxgb4: dont touch blocked freelist bitmap after free
    beefd5f0c63a ipv4: use siphash instead of Jenkins in fnhe_hashfun()
    dced8347a727 ipv6: use siphash in rt6_exception_hash()
    f517335a61ff net/sched: ets: fix crash when flipping from 'strict' to 'quantum'
    b493af3a66e0 ucounts: Increase ucounts reference counter before the security hook
    8e0881f6f57e net: marvell: fix MVNETA_TX_IN_PRGRS bit number
    850401a23a85 xgene-v2: Fix a resource leak in the error handling path of 'xge_probe()'
    fb45459d9ddb ip_gre: add validation for csum_start
    e78006b59a30 RDMA/efa: Free IRQ vectors on error flow
    8f1e3ad94569 e1000e: Do not take care about recovery NVM checksum
    87285ac51ecf e1000e: Fix the max snoop/no-snoop latency for 10M
    58b3dbf10c01 igc: Use num_tx_queues when iterating over tx_ring queue
    ae6480ba0665 igc: fix page fault when thunderbolt is unplugged
    384dea502e91 net: usb: pegasus: fixes of set_register(s) return value evaluation;
    3217c9d4602f ice: do not abort devlink info if board identifier can't be found
    3a2c5fbb1cc6 RDMA/bnxt_re: Remove unpaired rtnl unlock in bnxt_re_dev_init()
    56ac7463a140 IB/hfi1: Fix possible null-pointer dereference in _extend_sdma_tx_descs()
    3e949aaa8bef RDMA/bnxt_re: Add missing spin lock initialization
    22c18102ec59 scsi: core: Fix hang of freezing queue between blocking and running device
    01da7c1dc4cf usb: dwc3: gadget: Stop EP0 transfers during pullup disable
    87b2016493eb usb: dwc3: gadget: Fix dwc3_calc_trbs_left()
    56c92b8ddc0c usb: renesas-xhci: Prefer firmware loading on unknown ROM state
    b0bcc8038868 USB: serial: option: add new VID/PID to support Fibocom FG150
    8437e07c370f Revert "USB: serial: ch341: fix character loss at high transfer rates"
    da3067eadcc1 drm/amdgpu: Cancel delayed work when GFXOFF is disabled
    3134292a8e79 Revert "btrfs: compression: don't try to compress if we don't have enough pages"
    921c2533aa3a riscv: Ensure the value of FP registers in the core dump file is up to date
    e55a8b461585 ceph: correctly handle releasing an embedded cap flush
    7008b9981b6a can: usb: esd_usb2: esd_usb2_rx_event(): fix the interchange of the CAN RX and TX error counters
    45b7b2097153 net: mscc: Fix non-GPL export of regmap APIs
    ef2d68ef9a3b ovl: fix uninitialized pointer read in ovl_lookup_real_one()
    c94d50979f20 blk-iocost: fix lockdep warning on blkcg->lock
    6815e21fe28d once: Fix panic when module unload
    f68ad168e235 netfilter: conntrack: collect all entries in one cycle
    a13a2df0b149 ARC: Fix CONFIG_STACKDEPOT
    0af6a9f82ca3 ASoC: component: Remove misplaced prefix handling in pin control functions
    34cc80ec12d6 ASoC: rt5682: Adjust headset volume button threshold
    d81ddadabdee bpf: Fix NULL pointer dereference in bpf_get_local_storage() helper
    9dd6f6d89693 bpf: Fix ringbuf helper function compatibility
    ad41706c771a net: qrtr: fix another OOB Read in qrtr_endpoint_post

(From OE-Core rev: bb885bf8ffe9ba7260f83d9575978f753edf538e)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-09-11 22:39:19 +01:00