Backport and rebase patch to fix CVE-2023-32435 for webkitgtk 2.38.6:
* drop the patches for the files WasmAirIRGenerator64.cpp and
WasmAirIRGeneratorBase.h which are involved in 2.40.0
* drop test cases as well
CVE: CVE-2023-32435
(From OE-Core rev: c54f98d35f2cb276dc49a5ccd4813ccc34c6f668)
Signed-off-by: Kai Kang <kai.kang@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
Backport patch to fix CVE-2023-32439 for webkitgtk.
CVE: CVE-2023-32439
(From OE-Core rev: 71edb4ec115208950ae5da5305b5fd75823121ec)
Signed-off-by: Kai Kang <kai.kang@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
Update webkitgtk from 2.38.5 to 2.38.6. It fixes CVE-2023-27932 and
CVE-2023-27954.
What’s new in the WebKitGTK 2.38.6 release?
* Enable the Asynchronous Clipboard API to make certain pages work (e.g.
GithHub started recently requiring it).
* Support :has() CSS selectors in content filters.
* Apply basic font properties as font variation settings.
* The Bubblewrap sandbox no longer requires setting an application
identifier via GApplication to operate correctly. Using GApplication
is still recommended, but optional.
* Improvements to the GStreamer multimedia playback, in particular
around MSE, WebRTC, and seeking.
* Fix the build with journald support enabled when using elogind instead
of the systemd libraries.
* Fix the build with Link-Time Optimization enabled (-flto=auto).
* Fix context menus not working in the remote Web Inspector.
* Fix usage of the remote Web Inspector over HTTP.
* Fix debug logs not being emitted in release builds.
* Fix several crashes and rendering issues.
(From OE-Core rev: 34bd08b121f1653907b45eb8d6192a77ef638005)
Signed-off-by: Kai Kang <kai.kang@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
The recommendation from server maintainers is that the https protocol
is both faster and more reliable than the dedicated git protocol at this point.
Switch to it where possible.
(From OE-Core rev: 8f3669f81db8a58f8ed2faef76acab3499f59619)
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 139102a73d4151f4748b4a861bd4ab28dda7dab7)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
Changelog:
==========
- Reverted a change introduced in 1.14.1 which introduced crashes both
with WebKitGTK and WPE running under Wayland in some configurations.
- Fix a crash caused by wrong assertion, which was typically triggered in
debug builds when using the NVidia drivers.
- Fix WebKit no longer repainting after provisional navigation with
PSON enabled.
- Fix graphics buffer leaks by always freeing them in buffer destroy
listener callbacks.
(From OE-Core rev: f248513b4cf0b61a61e8586a3bcf2a7c83a3b538)
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
(cherry picked from commit aa37e18a51714af3281b4127dceb40b38aa8ac3c)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
When gobject-introspection feature is disabled, gettext-native and
glib-2.0-native dependencies are not pulled in, which causes failures
in do_compile due to missing xgettext and gdbus-codegen.
(From OE-Core rev: c9e4c3d437ba7cadb87bc30b85f602b8551a0e17)
Signed-off-by: Petr Kubizňák <kubiznak@2n.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
The cmake bbclass already sets the path to the correct Python for us,
and there appears to be no more scripts in the build which use 'python'
explicitly.
(From OE-Core rev: abbac1588163b63746928403d524a09532875d5a)
Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
License changes were the addition of SPDX license headers and license
header fixes.
(From OE-Core rev: 3466aace65faad08c98188b7072d92f5ba597fa3)
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
License changes were the addition of SPDX license headers and license
header fixes.
(From OE-Core rev: 08b6100a6eaf0a640004bbe71f8f12ac169d2f30)
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
License changes were the addition of SPDX license headers and license
header fixes.
(From OE-Core rev: 3177ca0dea44c7ef2121127dfa85cf65e7a4fa6a)
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
License changes were the addition of SPDX license headers and license
header fixes.
(From OE-Core rev: 6761b8d781314dd9170c3810d42bd83aa67b40c8)
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Update webkitgtk from 2.38.3 to 2.38.4.
* remove 0001-When-building-introspection-files-do-not-quote-CFLAG.patch
which has been merged in upstream
What’s new in the WebKitGTK 2.38.4 release?[1]
* Improve GStreamer multimedia playback across the board with improved
codec selection logic, better handling of latency, and improving frame
discard to avoid audio/video desynchronization, among other fixes.
* Disable HLS media playback by default, which makes web sites use MSE
instead. If needed WEBKIT_GST_ENABLE_HLS_SUPPORT=1 can be set in the
environment to enable it back.
* Disable threaded rendering in GTK4 builds by default, as it was
causing crashes.
* Fix MediaSession API not showing artwork images.
* Fix MediaSession MPRIS usage when running inside a Flatpak sandbox.
* Fix input element controls to correctly scale when applying a zoom
factor different than the default.
* Fix leakage of Web processes in certain situations.
* Fix the injected bundle not being found when running inside a sandbox.
* Fix the build with ENABLE_INTROSPECTION when cross-compiling.
* FIx the build with ENABLE_WEBGL disabled.
* Fix the build with GStreamer-based WebRTC enabled.
* Fix the build with USE_GTK4 enabled.
* Fix several crashes and rendering issues.
[1]: https://webkitgtk.org/2023/02/02/webkitgtk2.38.4-released.html
(From OE-Core rev: a535ea38cb386f88afdfb086b07c047826368e9c)
Signed-off-by: Kai Kang <kai.kang@windriver.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Currently, perl-native is missing from DEPENDS for webkitgtk even though
perlnative bbclass is inherited. This happens because the DEPENDS variable is
reassigned right after perlnative class is inherited:
inherit perlnative (DEPENDS += "perl-native")
...
DEPENDS = " \
..."
Adjust the DEPENDS line to use += in order to fix this.
(From OE-Core rev: a207c8f42f809340e0794cd326cb5c45e32d7d56)
Signed-off-by: Ovidiu Panait <ovidiu.panait@windriver.com>
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Changelog:
===========
- implement a fix for CVE-2022-4170 (reported and analyzed by David Leadbeater).
While present in version 9.30, it should not be exploitable. It is exploitable
in versions 9.25 and 9.26, at least, and allows anybody controlling output to
the terminal to execute arbitrary code in the urxvt process.
- the background extension no longer requires off focus fading support
to be compiled in.
- the confirm-paste extension now offers a choice betwene pasting the original
or a sanitized version, and also frees up memory used to store the paste text
immediately.
- fix compiling without frills.
- fix rewrapMode: never.
- fix regression that caused urxvt to no longer emit responses
to OSC color queries other than OSC 4 ones.
- fix regression that caused urxvt to no longer process OSC 705.
- restore CENTURY to be 1900 to "improve" year parsing in urclock (or at
least go back to the old interpretation) (based on an analysis
by Tommy Pettersson).
- exec_async (used e.g. by the matcher extension to spawn processes) now
sets the URXVT_EXT_WINDOWID variable to the window id of the terminal.
- implement -fps option/refreshRate resource to change the default 60 Hz
maximum refresh limiter. I always wanted an fps option, but had to
wait for a user requesting it.
- new clickthrough extension.
- perl now also requires Xext.
- X region and shape extension functionality has been exposed to perl
extensions.
- RENDER extension no longer depends on ENABLE_XIM_ONTHESPOT.
(From OE-Core rev: 9caf2cbd7dd82e72d0a04052fc93435f62e249ce)
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Upstream has rewritten gobject introspection support,
so the two related patches are ported to that:
0001-FindGObjectIntrospection.cmake-prefix-variables-obta.patch
0001-When-building-introspection-files-do-not-quote-CFLAG.patch
The latter patch is also promoted from Inappropriate to Pending
gtk-doc has been replaced with gi-docgen, accordingly
0001-Tweak-gtkdoc-settings-so-that-gtkdoc-generation-work.patch is removed.
Drop
fix-gstreamer-include-paths.patch
(backport)
0001-Fix-build-without-opengl-or-es.patch
(upstream fixed the issue; follow the link in the patch for details)
(From OE-Core rev: ac06af29503d2d3e0e43ef69d1d1580ce301bdfb)
Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Some Gnome projects have stopped supporting libsoup-2.4. Therefore, switch to libsoup-3.0.
This would unblock the update of geary or gnome-online-accounts, which would otherwise
fail like this:
| Run-time dependency webkit2gtk-4.1 found: NO (tried pkgconfig)
|
| ../git/meson.build:70:0: ERROR: Dependency "webkit2gtk-4.1" not found, tried pkgconfig
(From OE-Core rev: a18f3cb38e0b897c5d60e4943478ad1b7f7e637c)
Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Changelog:
========
New API to provide input events to be treated by WebKit as gamepad inputs.
New API to configure the target refresh rate of view backends.
New API which allow clients to supply an alternative mechanism for spawning WebKit auxiliary processes.
New WPE_ENABLE_XKB build option, enabled by default, which can be used to avoid usage of libxkbcommon.
(From OE-Core rev: 6b2125abeb81db7fb26fdc7d7cafec000b345ac4)
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Changelog:
==========
Fixed a crash caused by trying to deallocate already freed graphics buffers in certain situations.
(From OE-Core rev: 0db4627fe8c6f8a0080248052dc06419774cba4f)
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Changelog:
Fix the build when using Clang's libc++ or the Musl libc.
0001-Fix-build-failure-due-to-libc-using-libc-functions.patch
removed since it's included in 1.12.3
(From OE-Core rev: f8d8cc58c9b9c221158414be186bc12aa5d80e91)
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Resurrect sato-icon-theme and move to a version with scalable icons support
to replace adwaita-icon-theme which no longer supports the icons we need
for the sato desktop.
(From OE-Core rev: 6b515037ab710adf7b2c14ae1bb488375655f311)
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
The renaming left a broken desktop file behind (the others are overwritten).
Fix this by removing it.
(From OE-Core rev: 60925ef384f8c9966499b0d7e67927f1906be495)
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
There was no icon being displayed for this, fix the name so that
is corrected.
(From OE-Core rev: 3bf3d123e1c62d1811039328f1f557ae35dec3fd)
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
This fixes build issues seen on mips, but problem is generic
(From OE-Core rev: 08c06980648d3f72cddbf62a96d6915f5d54b94e)
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Drop patches:
0001-Fix-racy-parallel-build-of-WebKit2-4.0.gir.patch
0001-When-building-introspection-files-add-CMAKE_C_FLAGS-.patch
(both merged upstream)
reduce-memory-overheads.patch
(rejected by upstream, there's no use case - see the discussion)
Rebase to version submitted upstream:
0001-FindGObjectIntrospection.cmake-prefix-variables-obta.patch
Add:
0001-When-building-introspection-files-do-not-quote-CFLAG.patch
angle is no longer needed for x11-less setups.
(From OE-Core rev: 05582e9e6583126879977b0bbb88b691d625056b)
Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
