Commit Graph

70530 Commits

Author SHA1 Message Date
Michael Opdenacker
c50eae0a3e contributor-guide: recipe-style-guide: add Upstream-Status
(From yocto-docs rev: 52459e2ee09d5e79bacb69b64cb7755ddc8082ab)

Signed-off-by: Michael Opdenacker <michael.opdenacker@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-09-29 04:33:44 -10:00
Michael Opdenacker
452511f674 dev-manual: new-recipe.rst fix inconsistency with contributor guide
This document was suggesting a way to version pre-releases
which doesn't match the latest recommendations from the
contributor guide.

(From yocto-docs rev: bb74a9f83b84fa0d2836ed09175cac3c671b1042)

Signed-off-by: Michael Opdenacker <michael.opdenacker@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-09-29 04:33:44 -10:00
Michael Opdenacker
473d725a5f dev-manual: disk-space: improve wording for obsolete sstate cache files
Replace "duplicate" by "obsolete", more appropriate.
"duplicate" probably comes from the "--remove-duplicated"
option of the sstate-cache-management.sh script.

Improve other sentences too.

(From yocto-docs rev: e893d66999a97732780ff2b1ba6fb7e6e9d2eff7)

Signed-off-by: Michael Opdenacker <michael.opdenacker@bootlin.com>
Reported-by: Richard Purdie <richard.purdie@linuxfoundation.org>
CC: Quentin Schulz <quentin.schulz@theobroma-systems.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-09-29 04:33:44 -10:00
Michael Opdenacker
20bbfa89c3 sdk-manual: extensible.rst: fix multiple formatting issues
Take advantage of this edit to also fix alignment
issues in the sources.

(From yocto-docs rev: 6d17f91c3078b5aeb6fa4acab8c9a0ff8e962fa5)

Signed-off-by: Michael Opdenacker <michael.opdenacker@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-09-29 04:33:44 -10:00
Jaeyoon Jung
cd0c6173a3 cml1: Fix KCONFIG_CONFIG_COMMAND not conveyed fully in do_menuconfig
Variable overrides in KCONFIG_CONFIG_COMMAND do not work as expected due
to double quote mismatches. The issue is reproducible in an environment
where gold is the default linker. Below is an example snippet of
run.do_terminal generated by do_menuconfig.

do_terminal() {
exec sh -c "make menuconfig   CC="aarch64-webos-linux-gcc ..."
LD="aarch64-webos-linux-ld.bfd ..."
...
}

Although LD override is set to bfd correctly, it is not passed to make
and make menuconfig ends up with messages like:
| gold linker is not supported as it is not capable of linking the kernel proper.
| scripts/Kconfig.include:56: Sorry, this linker is not supported.

(From OE-Core rev: 9c483765db762dbe8020423c8778518612b7e5f7)

(From OE-Core rev: 75f8485d7862b08e2f96f919e992d203df6c8d9c)

Signed-off-by: Jaeyoon Jung <jaeyoon.jung@lge.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit d4664d2b79)
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-09-29 04:33:44 -10:00
Chen Qi
6e379bfb8e gcc-crosssdk: ignore MULTILIB_VARIANTS in signature computation
The gcc_multilib_setup function is a function that is run at the
do_configure step, so it's counted into the signature computation.
The MULTILIB_VARIANTS this function uses is also extracted to be
taken into consideration. After the change of setting MULTILIB_VARIANTS
explictly vardeps on MULTILIBS, the change of MULTILIBS changes the
signature, thus causing rebuilding. However, in case of gcc-crosssdk,
the setting of multilib should have no effect on it, as it's used
to build nativesdk packages, not the target packages. So ignore
MULTILIB_VARIANTS in signature computation. This fixes oe-selftest
case sstatetests.SStateHashSameSigs2.test_sstate_nativesdk_samesigs_multilib.

(From OE-Core rev: 537c71162a711dec32a63a657c4b101269a3e267)

(From OE-Core rev: 6b87f7c9e955abe5833820ee7eda9d525c77d2ea)

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-09-29 04:33:44 -10:00
Chen Qi
8420a581fd multilib.conf: explicitly make MULTILIB_VARIANTS vardeps on MULTILIBS
This patch is to ensure recipes get rebuilt correctly and avoid
incorrect sstate cache reuse when toggling multilib.

The following steps show one example of such incorrect sstate cache reuse.
1. enable multilib && bitbake <some_image> -c populate_sdk
2. disable multilib && bitbake <some_image> -c populate_sdk

The error message is as below:
Error:
 Problem: conflicting requests
   - nothing provides binutils-cross-canadian-i686 needed by packagegroup-cross-canadian-intel-x86-64-1.0-r0.x86_64_nativesdk
   - nothing provides gcc-cross-canadian-i686 needed by packagegroup-cross-canadian-intel-x86-64-1.0-r0.x86_64_nativesdk
   - nothing provides gdb-cross-canadian-i686 needed by packagegroup-cross-canadian-intel-x86-64-1.0-r0.x86_64_nativesdk
 (try to add '--skip-broken' to skip uninstallable packages)

We get this error because packagegroup-cross-canadian recipe is
not rebuilt when it should be.

Current codes have tracked the dependency to MULTILIB_VARIANTS, as
shown in the following chain:
RDEPENDS:packagegroup-cross-canadian-intel-x86-64 ->
all_multilib_tune_values -> MULTILIB_VARIANTS.

However, MULTILIB_VARIANTS cannot automatically depend on MULTILIBS.
See some results from 'bitbake-dumpsigs' below:
List of dependencies for variable MULTILIB_VARIANTS is ['extend_variants']
Variable MULTILIB_VARIANTS value is ${@extend_variants(d,'MULTILIBS','multilib')}

It's obvious that the value of MULTILIB_VARIANTS depend on the
value of MULTILIBS, so let's set this dependency manually.

(From OE-Core rev: 9f47d8eb51816d16078a23c0cef4d697555f913f)

(From OE-Core rev: 8ed254dd5e44d0685e5b952f724af08d75ce3d9d)

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-09-29 04:33:44 -10:00
Lee Chee Yang
6b44e2fb62 ffmpeg: 5.1.2 -> 5.1.3
drop patch which is already part of 5.1.3.

0001-avcodec-rpzaenc-stop-accessing-out-of-bounds-frame.patch(CVE-2022-3964):
1eb002596e

0001-avcodec-smcenc-stop-accessing-out-of-bounds-frame.patch(CVE-2022-3965):
293dc39bca

ffmpeg-fix-vulkan.patch :  7268323193

(From OE-Core rev: aeee19cda946b67f33c7b7c02c86513676bc89bd)

Signed-off-by: Lee Chee Yang <chee.yang.lee@intel.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-09-29 04:33:44 -10:00
Lee Chee Yang
9936e86de8 bind: update to 9.18.19
release notes:
https://downloads.isc.org/isc/bind9/9.18.19/doc/arm/html/notes.html#notes-for-bind-9-18-19

Security Fixes

Previously, sending a specially crafted message over the control channel
could cause the packet-parsing code to run out of available stack
memory, causing named to terminate unexpectedly. This has been fixed.
(CVE-2023-3341)

ISC would like to thank Eric Sesterhenn from X41 D-Sec GmbH for bringing
this vulnerability to our attention. [GL #4152]

A flaw in the networking code handling DNS-over-TLS queries could cause
named to terminate unexpectedly due to an assertion failure under
significant DNS-over-TLS query load. This has been fixed.
(CVE-2023-4236)

ISC would like to thank Robert Story from USC/ISI Root Server Operations
for bringing this vulnerability to our attention. [GL #4242]

Removed Features

The dnssec-must-be-secure option has been deprecated and will be removed
in a future release. [GL #4263]

Feature Changes

If the server command is specified, nsupdate now honors the nsupdate -v
option for SOA queries by sending both the UPDATE request and the
initial query over TCP. [GL #1181]

Bug Fixes

The value of the If-Modified-Since header in the statistics channel was
not being correctly validated for its length, potentially allowing an
authorized user to trigger a buffer overflow. Ensuring the statistics
channel is configured correctly to grant access exclusively to
authorized users is essential (see the statistics-channels block
definition and usage section). [GL #4124]

This issue was reported independently by Eric Sesterhenn of X41 D-Sec
GmbH and Cameron Whitehead.

The Content-Length header in the statistics channel was lacking proper
bounds checking. A negative or excessively large value could potentially
trigger an integer overflow and result in an assertion failure. [GL

This issue was reported by Eric Sesterhenn of X41 D-Sec GmbH.

Several memory leaks caused by not clearing the OpenSSL error stack were
fixed. [GL #4159]

This issue was reported by Eric Sesterhenn of X41 D-Sec GmbH.

The introduction of krb5-subdomain-self-rhs and ms-subdomain-self-rhs
UPDATE policies accidentally caused named to return SERVFAIL responses
to deletion requests for non-existent PTR and SRV records. This has been
fixed. [GL #4280]

The stale-refresh-time feature was mistakenly disabled when the server
cache was flushed by rndc flush. This has been fixed. [GL #4278]

BIND’s memory consumption has been improved by implementing dedicated
jemalloc memory arenas for sending buffers. This optimization ensures
that memory usage is more efficient and better manages the return of
memory pages to the operating system. [GL #4038]

Previously, partial writes in the TLS DNS code were not accounted for
correctly, which could have led to DNS message corruption. This has been
fixed. [GL #4255]

Known Issues

There are no new known issues with this release. See above for a list of
all known issues affecting this BIND 9 branch.

(From OE-Core rev: 663397edba278184a736e97aa602d3f96d2d937a)

Signed-off-by: Lee Chee Yang <chee.yang.lee@intel.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-09-29 04:33:43 -10:00
Wang Mingyu
87a2a74faf bind: upgrade 9.18.17 -> 9.18.18
Changelog:
============
 Deprecate the 'dialup' and 'heartbeat-interval' options.
 Ignore 'max-zone-ttl' on 'dnssec-policy insecure'.
 Return REFUSED to GSS-API TKEY requests if GSS-API support is not configured.
 Mark a primary server as temporarily unreachable if the TCP connection attempt times out.
 Don't process detach and close netmgr events when the netmgr has been paused.

(cherry-pick from commit e78ec619beea6e541b2d83a5dc845ce57ff12564)

(From OE-Core rev: 3cb92c8746f589ef74e337e5866378e04a8133ef)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-09-29 04:33:43 -10:00
Narpat Mali
22af10c1b1 python3-git: upgrade 3.1.32 -> 3.1.37
The delta between 3.1.32 & 3.1.37 contains the CVE-2023-40590 and
CVE-2023-41040 fixes and other bugfixes.

Changelog:
==========
- WIP Quick doc by @LeoDaCoda in #1608
- Partial clean up wrt mypy and black by @bodograumann in #1617
- Disable merge_includes in config writers by @bodograumann in #1618
- feat: full typing for "progress" parameter in Repo class by @madebylydia in #1634
- Fix CVE-2023-40590 by @EliahKagan in #1636
- #1566 Creating a lock now uses python built-in "open()" method to work arou… by @HageMaster3108 in #1619
- util: close lockfile after opening successfully by @skshetry in #1639
- Bump actions/checkout from 3 to 4 by @dependabot in #1643
- Fix 'Tree' object has no attribute '_name' when submodule path is normal path by @CosmosAtlas in #1645
- Fix CVE-2023-41040 by @facutuesca in #1644
- Only make config more permissive in tests that need it by @EliahKagan in #1648
- Added test for PR #1645 submodule path by @CosmosAtlas in #1647
- Fix Windows environment variable upcasing bug by @EliahKagan in #1650
- Improve Python version and OS compatibility, fixing deprecations by @EliahKagan in #1654
- Better document env_case test/fixture and cwd by @EliahKagan in #1657
- Remove spurious executable permissions by @EliahKagan in #1658
- Fix up checks in Makefile and make them portable by @EliahKagan in #1661
- Fix URLs that were redirecting to another license by @EliahKagan in #1662
- Assorted small fixes/improvements to root dir docs by @EliahKagan in #1663
- Use venv instead of virtualenv in test_installation by @EliahKagan in #1664
- Omit py_modules in setup by @EliahKagan in #1665
- Don't track code coverage temporary files by @EliahKagan in #1666
- Configure tox by @EliahKagan in #1667
- Format tests with black and auto-exclude untracked paths by @EliahKagan in #1668
- Upgrade and broaden flake8, fixing style problems and bugs by @EliahKagan in #1673
- Fix rollback bug in SymbolicReference.set_reference by @EliahKagan in #1675
- Remove @NoEffect annotations by @EliahKagan in #1677
- Add more checks for the validity of refnames by @facutuesca in #1672

Note that the changes to the license file are just removal of excess whitespace
(the extra blank line at the end, and spaces appearing at the end of lines).

References:
https://github.com/gitpython-developers/GitPython/releases
https://github.com/gitpython-developers/GitPython/blob/main/doc/source/changes.rst
e1af18377f

(From OE-Core rev: 931af3758a2d79aea534ab6d23db392ede7cc1bb)

Signed-off-by: Narpat Mali <narpat.mali@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-09-29 04:33:43 -10:00
Yash Shinde
516a45c114 glibc: fix CVE-2023-4527
Upstream-Status: Backport[https://sourceware.org/git/?p=glibc.git;a=commitdiff;h=4ea972b7edd7e36610e8cde18bf7a8149d7bac4f]

(From OE-Core rev: 04926dc555a0a75cd2c59729b351a997b018cdbc)

Signed-off-by: Yash Shinde <Yash.Shinde@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-09-29 04:33:43 -10:00
Ross Burton
75a96da596 linux-yocto: update CVE exclusions
(From OE-Core rev: 51ce40e9f994bcce5cd484dff5346b4dd2bff1fc)

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-09-29 04:33:43 -10:00
Sanjay Chitroda
529fa41487 curl: Add CVE-2023-28320 follow-up fix
References:
https://nvd.nist.gov/vuln/detail/CVE-2023-28320
https://security-tracker.debian.org/tracker/CVE-2023-28320

Upstream Patch:
Introduced by: https://github.com/curl/curl/commit/3c49b405de4f (curl-7_9_8)
Fixed by: https://github.com/curl/curl/commit/13718030ad4b (curl-8_1_0)
Follow-up: https://github.com/curl/curl/commit/f446258f0269 (curl-8_1_0)

(From OE-Core rev: 5d6d4768693f9baa9b801e87d4d2aed0d9792613)

Signed-off-by: Sanjay Chitroda <sanjay.chitroda@einfochips.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-09-29 04:33:43 -10:00
Chen Qi
0fb8a7bac1 cmake.bbclass: fix allarch override syntax
The override syntax should be ":allarch" instead of "_allarch".

(From OE-Core rev: 72d3ecb22fea59d2520997b3f0a0651557d69ae7)

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit bea74c9942a3bb4f71aca0f722b4a7306ae52fb4)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-09-20 05:23:02 -10:00
Richard Purdie
e031f2e336 vim: Upgrade 9.0.1664 -> 9.0.1894
This includes multiple CVE fixes.

The license change is due to changes in maintainership, the license
itself is unchanged.

(From OE-Core rev: a90e3d1bac7c965e357103c05bf31fd804b87c0b)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 91e66b93a0c0928f0c2cfe78e22898a6c9800f34)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-09-20 05:23:02 -10:00
Archana Polampalli
fdeb73d660 vim: upgrade 9.0.1592 -> 9.0.1664
Fixes:
https://nvd.nist.gov/vuln/detail/CVE-2023-3896
8154e642a (tag: v9.0.1664) patch 9.0.1664: divide by zero when scrolling with 'smoothscroll' set

(From OE-Core rev: a63a84591bdfc7bb0a7ae125a47122f3693a1334)

Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 4a1ab744142c9229f03a359b45e5e89a1fbae0d3)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-09-20 05:23:02 -10:00
Yogita Urade
190a134f8e qemu: fix CVE-2023-3354
A flaw was found in the QEMU built-in VNC server. When a client connects
to the VNC server, QEMU checks whether the current number of connections
crosses a certain threshold and if so, cleans up the previous connection.
If the previous connection happens to be in the handshake phase and fails,
QEMU cleans up the connection again, resulting in a NULL pointer dereference
issue. This could allow a remote unauthenticated client to cause a denial
of service.

Reference:
https://nvd.nist.gov/vuln/detail/CVE-2023-3354

(From OE-Core rev: 8f0b34f7ad5ef842d60c9b93ce2c6142d3249890)

Signed-off-by: Yogita Urade <yogita.urade@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-09-20 05:23:02 -10:00
Martin Jansa
6ebb52f027 gcc: backport a fix for ICE caused by CVE-2023-4039.patch
* see:
  https://gcc.gnu.org/bugzilla/show_bug.cgi?id=111418
  https://gcc.gnu.org/bugzilla/show_bug.cgi?id=111411

(From OE-Core rev: c49f6b9dc8436322359029fecb90b23d639a2100)

Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-09-20 05:23:02 -10:00
Ross Burton
992074032e gcc: Fix -fstack-protector issue on aarch64
This series of patches fixes deficiencies in GCC's -fstack-protector
implementation for AArch64 when using dynamically allocated stack space.
This is CVE-2023-4039.  See:

https://developer.arm.com/Arm%20Security%20Center/GCC%20Stack%20Protector%20Vulnerability%20AArch64
https://github.com/metaredteam/external-disclosures/security/advisories/GHSA-x7ch-h5rf-w2mf

for more details.

(From OE-Core rev: 0cb253565c863aa1f677084a440294fe2a03beb0)

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-09-20 05:23:02 -10:00
Siddharth Doshi
42d270eeed gdb: Fix CVE-2023-39128
Note: The Fix needs to be pushed in gdb rather than bintuils-gdb as we are
disabling gdb in binutils configure.

Upstream-Status: Backport from [https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=033bc52bb6190393c8eed80925fa78cc35b40c6d]
CVE: CVE-2023-39128
(From OE-Core rev: 173d7ab67f14fc6d8b5d46e1c1de39d20965d6e9)

Signed-off-by: Siddharth Doshi <sdoshi@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-09-20 05:23:02 -10:00
Sanjana
192ba3d46c binutils: Fix CVE-2023-39128
Avoid buffer overflow in ada_decode.

(From OE-Core rev: a6587352b4d204134443430b2ddc605f25a5ae3f)

Signed-off-by: Sanjana <sanjanasanju1608@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-09-20 05:23:02 -10:00
Yogita Urade
31176477ce dropbear: fix CVE-2023-36328
Integer Overflow vulnerability in mp_grow in libtom libtommath before
commit beba892bc0d4e4ded4d667ab1d2a94f4d75109a9, allows attackers to
execute arbitrary code and cause a denial of service (DoS).

References:
https://nvd.nist.gov/vuln/detail/CVE-2023-36328
https://github.com/libtom/libtommath/pull/546

(From OE-Core rev: e2fe2c2066b066b1561eaba7bd7f27d4079c3cd6)

Signed-off-by: Yogita Urade <yogita.urade@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-09-20 05:23:02 -10:00
Michael Opdenacker
2bd4e2392b dev-manual: disk-space: mention faster "find" command to trim sstate cache
[YOCTO #15182]

(From yocto-docs rev: 0bcd2ca98870f4d5bb8c2677fda260da548787d6)

Signed-off-by: Michael Opdenacker <michael.opdenacker@bootlin.com>
Reported-by: Yoann CONGAL <yoann.congal@smile.fr>
Reported-by: Randy MacLeod <randy.macleod@windriver.com>
Reported-by: Josef Holzmayr <jester@theyoctojester.info>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-09-13 06:21:26 -10:00
Michael Opdenacker
1c54f85cf9 manuals: add new contributor guide
(From yocto-docs rev: 77f20d1594db42818aac9a7a92865def8fb7ec36)

Signed-off-by: Michael Opdenacker <michael.opdenacker@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-09-13 06:21:26 -10:00
Yoann Congal
ca4a09f897 dev-manual: remove unsupported :term: markup inside markup
":term:`Initramfs`" in bold text appears verbatim (no link is created).

The term link is present elsewhere in the text so remove the extra
markup.

(From yocto-docs rev: fc8e220290414dab45299d0ac829c8c461b1903c)

Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Reviewed-by: Michael Opdenacker <michael.opdenacker@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-09-13 06:21:26 -10:00
Michael Opdenacker
da107c5031 ref-manual: system-requirements: update supported distros
- Update according to changes in SANITY_TESTED_DISTROS
  (meta-poky/conf/distro/poky.conf)

- No longer declare as "Supported" the distributions versions
  which are End of Life for their vendors, as some of them
  (Ubuntu for example) ship updates to subscribers only,
  which the Yocto Project has no access to.

- List distribution versions which were previously tested
  for the branch of the Yocto Project being considered.

(From yocto-docs rev: fd5113b7e20844a44a2c9da37e1bc10034d46cfe)

Signed-off-by: Michael Opdenacker <michael.opdenacker@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-09-13 06:21:26 -10:00
Lee Chee Yang
654df67339 migration-guides: add release notes for 4.0.12
(From yocto-docs rev: b84954c7d53fe86d6228a2450de5c0d9ea9f0960)

Signed-off-by: Lee Chee Yang <chee.yang.lee@intel.com>
Reviewed-by: Michael Opdenacker <michael.opdenacker@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-09-13 06:21:26 -10:00
Lee Chee Yang
89afc321b5 migration-guides: add release notes for 4.2.3
(From yocto-docs rev: d81b671a7868903b60035ba56a05c714b0d731f1)

Signed-off-by: Lee Chee Yang <chee.yang.lee@intel.com>
Reviewed-by: Michael Opdenacker <michael.opdenacker@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-09-13 06:21:26 -10:00
Michael Halstead
40b0b3989c yocto-uninative: Update to 4.3
Add in stable updates to glibc 2.38 to fix malloc bugs

(From OE-Core rev: 055b7acd73a591cb529629a780558cc0f5b19456)

Signed-off-by: Michael Halstead <mhalstead@linuxfoundation.org>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 39f987fcb20ad7c0e45425b9f508d463c50ce0c1)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-09-13 06:21:26 -10:00
Sakib Sajal
1b98e3f744 go: upgrade 1.20.6 -> 1.20.7
Upgrade to latest 1.20.x release [1]:

$ git log --oneline go1.20.6..go1.20.7 origin/release-branch.go1.20
adb775e309 (tag: go1.20.7, origin/release-branch.go1.20) [release-branch.go1.20] go1.20.7
659f2a2207 [release-branch.go1.20] crypto/tls: restrict RSA keys in certificates to <= 8192 bits
10d85fa0f6 [release-branch.go1.20] cmd/asm, cmd/internal/obj: generate proper atomic ops for riscv64
bd3a1f24e7 [release-branch.go1.20] net: tolerate permission errors in interface tests
6211a024b4 [release-branch.go1.20] cmd/compile: on PPC64, fix sign/zero extension when masking

[1] https://github.com/golang/go/compare/go1.20.6...go1.20.7

Upgrade include fix for CVE-2023-29409 CVE-2023-39533

(cherry picked from commit 039324d917ed124228a14ac1effdd66b27d9e82b)

(From OE-Core rev: 8397964d5a8d995a06c5c2a34883047546edc077)

Signed-off-by: Sakib Sajal <sakib.sajal@windriver.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Chee Yang Lee <chee.yang.lee@intel.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-09-13 06:21:26 -10:00
Chee Yang Lee
6ae9654ab5 python3: update to 3.11.5
upgrade include fix for CVE-2023-40217

Release notes:
https://docs.python.org/3/whatsnew/changelog.html#python-3-11-5-final

(From OE-Core rev: 4a3e3042a0cef3a215d286b0f32be293c3948d1e)

Signed-off-by: Chee Yang Lee <chee.yang.lee@intel.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-09-13 06:21:25 -10:00
Alexander Kanavin
8b372c7d4e python3: update 3.11.3 -> 3.11.4
upgrade include fix for CVE-2023-24329

(cherry picked from commit f7f163ebe8c53de4314d04595c1fbcc7af2deccc )

(From OE-Core rev: 8687de9f20bde7aba118a50342848031adfb7641)

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Chee Yang Lee <chee.yang.lee@intel.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-09-13 06:21:25 -10:00
Alexander Kanavin
b2e008f2d4 python3: upgrade 3.11.2 -> 3.11.3
(cherry picked from commit 7d5bb3a4690ef61a1fee21773b4717e829789e32)

(From OE-Core rev: a991fe85dca51ddf36994666e14e69839dd694b2)

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Chee Yang Lee <chee.yang.lee@intel.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-09-13 06:21:25 -10:00
Kai Kang
1b290ab11c webkitgtk: fix CVE-2023-32435
Backport and rebase patch to fix CVE-2023-32435 for webkitgtk 2.38.6:

* drop the patches for the files WasmAirIRGenerator64.cpp and
  WasmAirIRGeneratorBase.h which are involved in 2.40.0
* drop test cases as well

CVE: CVE-2023-32435

(From OE-Core rev: c54f98d35f2cb276dc49a5ccd4813ccc34c6f668)

Signed-off-by: Kai Kang <kai.kang@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-09-13 06:21:25 -10:00
Kai Kang
97e50bbe64 webkitgtk: fix CVE-2023-32439
Backport patch to fix CVE-2023-32439 for webkitgtk.

CVE: CVE-2023-32439

(From OE-Core rev: 71edb4ec115208950ae5da5305b5fd75823121ec)

Signed-off-by: Kai Kang <kai.kang@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-09-13 06:21:25 -10:00
Yogita Urade
1dc70a8da5 nghttp2: fix CVE-2023-35945
Envoy is a cloud-native high-performance edge/middle/service
proxy. Envoy’s HTTP/2 codec may leak a header map and
bookkeeping structures upon receiving `RST_STREAM` immediately
followed by the `GOAWAY` frames from an upstream server. In
nghttp2, cleanup of pending requests due to receipt of the
`GOAWAY` frame skips de-allocation of the bookkeeping structure
and pending compressed header. The error return [code path] is
taken if connection is already marked for not sending more
requests due to `GOAWAY` frame. The clean-up code is right after
the return statement, causing memory leak. Denial of service
through memory exhaustion. This vulnerability was patched in
versions(s) 1.26.3, 1.25.8, 1.24.9, 1.23.11.

References:
https://nvd.nist.gov/vuln/detail/CVE-2023-35945
https://github.com/envoyproxy/envoy/security/advisories/GHSA-jfxv-29pc-x22r

(From OE-Core rev: 18277a43f7fd6522a67f194f40595bc378468733)

Signed-off-by: Yogita Urade <yogita.urade@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-09-13 06:21:25 -10:00
Chee Yang Lee
643cbec1d9 libssh2: fix CVE-2020-22218
(From OE-Core rev: ff2288cd466c46c4e2cac24498b260037dba5071)

Signed-off-by: Chee Yang Lee <chee.yang.lee@intel.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-09-13 06:21:25 -10:00
Etienne Cordonnier
eaadbc79bb vim: update obsolete comment
vim 8.3 has been out for a long time, so this comment is obsolete.
However we still need UPSTREAM_VERSION_UNKNOWN, since we ignore
the last digit of the upstream version number.

Test result:
$ devtool check-upgrade-status vim
  ...
  INFO: vim                       9.0.1592        UNKNOWN         Tom Rini <trini@konsulko.com> c0370529c027abc5b1698d53fcfb8c02a0c515da

(From OE-Core rev: 65f5de85c3f488136d1ec2b1f7fe8d8426d6c5b3)

(From OE-Core rev: 981fa51afe040550c7c351fff028553d4bbbd1ca)

Signed-off-by: Etienne Cordonnier <ecordonnier@snap.com>
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 868a19357841470eb55fb7f1c4ab1af09dea99ed)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-09-04 04:13:25 -10:00
Richard Purdie
ef9e041052 build-sysroots: Ensure dependency chains are minimal
We need to ensure this recipe doesn't have dependencies on others. The SPDX
classes/tasks introduce dependenies quilt-native and patch-native which can
introduce races on files in the sysroots. Avoid the races by removing the
tasks we don't need.

[YOCTO #15186]

(From OE-Core rev: a3e2e156c602e7fabf0024a6c9dc4603d327f08b)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit a5dc278b077edba8f4099f0f6dfb97e97f680320)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-09-04 04:13:25 -10:00
Ovidiu Panait
f62d8a7103 mdadm: skip running 04update-uuid and 07revert-inplace testcases
04update-uuid and 07revert-inplace tests are unreliable and fail intermittently
on the autobuilder (BZ#15181 and BZ#15159). Unfortunately, the failures cannot
be reproduced locally and the logs cannot be retrieved from the AB.

Mark the testcases as BROKEN to skip them when running ptest.

(From OE-Core rev: f39988353743e35418a730bfd6b9a9b68d946641)

Signed-off-by: Ovidiu Panait <ovidiu.panait@windriver.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit eb219aff7cfe1cff1da93107ac7b22c678c0000f)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-09-04 04:13:25 -10:00
Markus Niebel
d7755c7e12 wic: fix wrong attempt to create file system in upartitioned regions
The kickstart parser defaults fstype to "vfat". This leads to an attempt
to create an empty file system even for regions configured with "--no-table"
if used without fstype when no --sourceparams given.

The fix tests for fstype "none" or no_table in Partition prepare method.
This will omit the file system creation an the potential error for small
region with --no-table option.

(From OE-Core rev: 47b395fe2dc393e82d0a42cfab96d134c1397a43)

Signed-off-by: Markus Niebel <Markus.Niebel@ew.tq-group.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit db771a4cd36bf291a8b68edfd905e03243f2c8b3)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-09-04 04:13:25 -10:00
Martin Jansa
e2c3c0315c tcl: prevent installing another copy of tzdata
It checks build host filesystem and if it doesn't find UTC or GMT
files it installs another copy of tzdata files in:
/usr/lib/tcl8.6/tzdata

Buildhistory shows the difference:
-PKGSIZE = 2227075
+PKGSIZE = 3433088

See the autodetection in configure.in:
  #------------------------------------------------------------------------
  #       Check whether the timezone data is supplied by the OS or has
  #       to be installed by Tcl. The default is autodetection, but can
  #       be overridden on the configure command line either way.
  #------------------------------------------------------------------------

  AC_MSG_CHECKING([for timezone data])
  AC_ARG_WITH(tzdata,
      AC_HELP_STRING([--with-tzdata],
          [install timezone data (default: autodetect)]),
      [tcl_ok=$withval], [tcl_ok=auto])

  #
  # Any directories that get added here must also be added to the
  # search path in ::tcl::clock::Initialize (library/clock.tcl).
  #
  case $tcl_ok in
      no)
          AC_MSG_RESULT([supplied by OS vendor])
      ;;
      yes)
          # nothing to do here
      ;;
      auto*)
          AC_CACHE_VAL([tcl_cv_dir_zoneinfo], [
          for dir in /usr/share/zoneinfo \
                  /usr/share/lib/zoneinfo \
                  /usr/lib/zoneinfo
          do
                  if test -f $dir/UTC -o -f $dir/GMT
                  then
                          tcl_cv_dir_zoneinfo="$dir"
                          break
                  fi
          done])
          if test -n "$tcl_cv_dir_zoneinfo"; then
              tcl_ok=no
              AC_MSG_RESULT([$dir])
          else
              tcl_ok=yes
          fi
      ;;
      *)
          AC_MSG_ERROR([invalid argument: $tcl_ok])
      ;;
  esac
  if test $tcl_ok = yes
  then
      AC_MSG_RESULT([supplied by Tcl])
      INSTALL_TZDATA=install-tzdata
  fi

(From OE-Core rev: d5a038b764720bd3267f258994371909f3f34ad6)

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 3ace9fbfeb42ebf920812e3dd6d665b8b20a1ca0)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-09-04 04:13:25 -10:00
Poonam Jadhav
b872e1c4ad pixman: Remove duplication of license MIT
Remove duplication of license MIT from pixman bbfile.

(From OE-Core rev: 0a14def83fe2bb4f4cc7cf988c7d31d3108e0ed0)

Signed-off-by: Poonam Jadhav <poonam.jadhav@kpit.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit e6c87b267252376ca85b534e3c9ee9b77ff665ca)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-09-04 04:13:25 -10:00
Khem Raj
ba648f3b0b build-sysroots: Add SUMMARY field
Fixes build QA warning about [missing-metadata]

(From OE-Core rev: ff7bb864d89ec8c2da707cc7d3cce8336357955e)

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 4f4c7130f11c069ab18c374dcbfb1276ef37be60)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-09-04 04:13:25 -10:00
Ross Burton
c139c0aeda graphene: fix runtime detection of IEEE754 behaviour
Graphene gates a runtime check on whether it is cross-compiling, when it
should be whether it can run target binaries.

(From OE-Core rev: 49f8ba521e66c489f58b808af7abe61c44af5470)

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 61bb4086bea61a0446f469ed3cb0d525860a1a31)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-09-04 04:13:25 -10:00
Bruce Ashfield
f14bac06cf linux-yocto/6.1: fix IRQ-80 warnings
Integrating the following commit(s) to linux-yocto/6.1:

    44fd0c7a5a79 tick/rcu: fix false positive "softirq work is pending" messages on RT

Paul Gortmaker has found and fixed the root cause of why we are
getting "softirq work is pending" messages on boot with -rt ..
although the issue is not rt-specific.

The fix has been submitted to lkml, but we are integrating it
to avoid the delay of -stable picking it up and then linux-yocto
doing the same.

(From OE-Core rev: 69fffaa7ed863f8811254843e169cfbf3a0400b0)

(From OE-Core rev: bbacef1339cc9aeee77ec4192ade19c5c7d73d14)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 2099b728c48d920aa3914f4297563105a672e174)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-09-04 04:13:25 -10:00
Bruce Ashfield
5232da3251 linux-yocto/6.1: update to v6.1.46
Updating  to the latest korg -stable release that comprises
the following commits:

    6c44e13dc284 Linux 6.1.46
    5525c289dbcf drm/amd/pm/smu7: move variables to where they are used
    4346a66ad198 sch_netem: fix issues in netem_change() vs get_dist_table()
    3ae919c317dd alpha: remove __init annotation from exported page_is_ram()
    cbce265f959f ACPI: scan: Create platform device for CS35L56
    afc4ddd9507f platform/x86: serial-multi-instantiate: Auto detect IRQ resource for CSC3551
    38b0020f68b7 scsi: qedf: Fix firmware halt over suspend and resume
    a9518f4a4978 scsi: qedi: Fix firmware halt over suspend and resume
    fb004497b3ea scsi: fnic: Replace return codes in fnic_clean_pending_aborts()
    b191ff1f075c scsi: core: Fix possible memory leak if device_add() fails
    7723a5d5d187 scsi: snic: Fix possible memory leak if device_add() fails
    9fdb273ede6f scsi: 53c700: Check that command slot is not NULL
    8282d0b35880 scsi: ufs: renesas: Fix private allocation
    ed70fa5629a8 scsi: storvsc: Fix handling of virtual Fibre Channel timeouts
    0e1605ec5bea scsi: core: Fix legacy /proc parsing buffer overflow
    f3f0f95a0233 netfilter: nf_tables: report use refcount overflow
    c21fddce7e45 nvme-rdma: fix potential unbalanced freeze & unfreeze
    cddbaa8dee7e nvme-tcp: fix potential unbalanced freeze & unfreeze
    bf67802453d3 btrfs: set cache_block_group_error if we find an error
    3ae93b316ca4 btrfs: reject invalid reloc tree root keys with stack dump
    9d04716e3665 btrfs: exit gracefully if reloc roots don't match
    7112abc9e8f2 btrfs: properly clear end of the unreserved range in cow_file_range
    504d81c512f6 btrfs: don't stop integrity writeback too early
    4e18c827d61b btrfs: wait for actual caching progress during allocation
    b8cd871d0a18 gpio: sim: mark the GPIO chip as a one that can sleep
    227bd2c1eab1 gpio: ws16c48: Fix off-by-one error in WS16C48 resource region extent
    5e17b8ee64c1 ibmvnic: Ensure login failure recovery is safe from other resets
    206ccf4f0977 ibmvnic: Do partial reset on login failure
    31ccd1ba20d8 ibmvnic: Handle DMA unmapping of login buffs in release functions
    24556c1cc9db ibmvnic: Unmap DMA login rsp buffer on send login fail
    2c5dd8805e6c ibmvnic: Enforce stronger sanity checks on login response
    ad0f73cbace4 net/mlx5: Reload auxiliary devices in pci error handlers
    88ec484ef8e2 net/mlx5: Skip clock update work when device is in error state
    4276f3e7ae4a net/mlx5: LAG, Check correct bucket when modifying LAG
    a824d012ad8f net/mlx5: Allow 0 for total host VFs
    ab06983c5bbd dmaengine: owl-dma: Modify mismatched function name
    dff220037148 dmaengine: mcf-edma: Fix a potential un-allocated memory access
    c4f7de3e8ce1 net: hns3: fix strscpy causing content truncation issue
    87d7e140081f nexthop: Fix infinite nexthop bucket dump when using maximum nexthop ID
    8d6df2c523e2 nexthop: Make nexthop bucket dump more efficient
    0b10d8d1cf85 nexthop: Fix infinite nexthop dump when using maximum nexthop ID
    743f7c1762e0 net: hns3: fix deadlock issue when externel_lb and reset are executed together
    59bad9190ac7 net: hns3: add wait until mac link down
    667ce6a0ff80 net: hns3: refactor hclge_mac_link_status_wait for interface reuse
    758dbcfb257e net: dsa: ocelot: call dsa_tag_8021q_unregister() under rtnl_lock() on driver remove
    001b7d6706e2 net: phy: at803x: remove set/get wol callbacks for AR8032
    a3e5f3b7f25d net: marvell: prestera: fix handling IPv4 routes with nhid
    059ec8287fd3 net: tls: avoid discarding data on record close
    05e6b93da45d RDMA/umem: Set iova in ODP flow
    521860ddf314 wifi: cfg80211: fix sband iftype data lookup for AP_VLAN
    94916b314861 drm/rockchip: Don't spam logs in atomic check
    ac6640f4193d IB/hfi1: Fix possible panic during hotplug remove
    c2efcaf304fb iavf: fix potential races for FDIR filters
    bcbc48b12092 drivers: vxlan: vnifilter: free percpu vni stats on error path
    eeb0e4c1dbdf drivers: net: prevent tun_build_skb() to exceed the packet size limit
    a6ddc1c77487 dccp: fix data-race around dp->dccps_mss_cache
    00f033d451c4 bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
    15b453cf7348 xsk: fix refcount underflow in error path
    da5f42a6e748 tunnels: fix kasan splat when generating ipv4 pmtu error
    f20a941bc2c5 tcp: add missing family to tcp_set_ca_state() tracepoint
    ddebdaec1af2 net/smc: Use correct buffer sizes when switching between TCP and SMC
    584a783270c1 net/packet: annotate data-races around tp->status
    b249c510b43e mptcp: fix the incorrect judgment for msk->cb_flags
    fc0b41ac1106 macsec: use DEV_STATS_INC()
    ebceef298c56 mISDN: Update parameter type of dsp_cmx_send()
    6b2824b198a6 bpf, sockmap: Fix bug that strp_done cannot be called
    ed90fe7435c5 bpf, sockmap: Fix map type error in sock_map_del_link
    20acffcdc2b7 net: core: remove unnecessary frame_sz check in bpf_xdp_adjust_tail()
    e59a2e5a3123 selftests: forwarding: tc_flower: Relax success criterion
    352dc3ee33c6 selftests: forwarding: Switch off timeout
    2df0e4373507 selftests: forwarding: Skip test when no interfaces are specified
    9ff7465b9160 selftests: forwarding: hw_stats_l3_gre: Skip when using veth pairs
    693c0a5a02e1 selftests: forwarding: ethtool_extended_state: Skip when using veth pairs
    10519d0b260d selftests: forwarding: ethtool: Skip when using veth pairs
    1455765e28ce selftests: forwarding: Add a helper to skip test when using veth pairs
    e146162dcf2e selftests/rseq: Fix build with undefined __weak
    e12b1ebc758a interconnect: qcom: sm8450: add enable_mask for bcm nodes
    8d0e2802b111 interconnect: qcom: Add support for mask-based BCMs
    312f04ede209 iio: core: Prevent invalid memory access when there is no parent
    98e470dc73a9 drm/nouveau/disp: Revert a NULL check inside nouveau_connector_get_modes
    19e7feda8966 x86: Move gds_ucode_mitigated() declaration to header
    f276899f8dbc x86/speculation: Add cpu_show_gds() prototype
    179430c2aa46 x86/sev: Do not try to parse for the CC blob on non-AMD hardware
    9ad49178c00a x86/mm: Fix VDSO and VVAR placement on 5-level paging machines
    25085250a150 x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
    d93eeac34e75 x86/srso: Fix build breakage with the LLVM linker
    6f75e0934354 usb: typec: altmodes/displayport: Signal hpd when configuring pin assignment
    57b8f5fb8f17 usb: typec: tcpm: Fix response to vsafe0V event
    e3b37754988a usb: common: usb-conn-gpio: Prevent bailing out if initial role is none
    bed19d95fcb9 USB: Gadget: core: Help prevent panic during UVC unconfigure
    d2a4ded0ee99 usb: dwc3: Properly handle processing of pending events
    0d2d5282d39a usb-storage: alauda: Fix uninit-value in alauda_check_media()
    8ee39ec47914 misc: rtsx: judge ASPM Mode to set PETXCFG Reg
    f11a26633eb6 binder: fix memory leak in binder_init()
    77b689cc27d4 iio: adc: ina2xx: avoid NULL pointer dereference on OF device match
    2f8ebbd0f03e iio: adc: ad7192: Fix ac excitation feature
    5e1ed816a0e1 iio: frequency: admv1013: propagate errors from regulator_get_voltage()
    366563c14f1f iio: cros_ec: Fix the allocation size for cros_ec_command
    5aac2726b693 io_uring: correct check for O_TMPFILE
    b61a06eca15c drm/amd/display: trigger timing sync only if TG is running
    07152d9e87ef drm/amd/display: fix the build when DRM_AMD_DC_DCN is not set
    647e12741e6d drm/amd/display: Retain phantom plane/stream if validation fails
    e61f0ad73668 drm/amd/display: Disable phantom OTG after enable for plane disable
    9caac2a9f69f drm/amd/display: Use update plane and stream routine for DCN32x
    e93ae6e6b660 drm/amd/display: Avoid ABM when ODM combine is enabled for eDP
    4fe91c51aa93 drm/amd/display: Update OTG instance in the commit stream
    b2415df0afba drm/amd/display: Handle seamless boot stream
    9b1a1f168c03 drm/amd/display: Add function for validate and update new stream
    60334c0cba2f drm/amd/display: Handle virtual hardware detect
    0f19195d6397 drm/amd/pm: avoid unintentional shutdown due to temperature momentary fluctuation
    b064f9ccf11c drm/amd/pm: fulfill powerplay peak profiling mode shader/memory clock settings
    b844033ea813 drm/amd/pm: expose swctf threshold setting for legacy powerplay
    2368afd60f64 drm/amd/pm: fulfill swsmu peak profiling mode shader/memory clock settings
    7532ff6edbf5 nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput
    79a96970293b radix tree test suite: fix incorrect allocation size for pthreads
    0176533f5a39 hwmon: (pmbus/bel-pfe) Enable PMBUS_SKIP_STATUS_CHECK for pfe1100
    088773aaafef cpuidle: dt_idle_genpd: Add helper function to remove genpd topology
    3d3fd58bfca1 drm/amd/display: limit DPIA link rate to HBR3
    10347b115da1 drm/amd: Disable S/G for APUs when 64GB or more host memory
    f6166ca452b8 drm/amdgpu: add S/G display parameter
    c3d2d4b02e5e drm/amd/display: check attr flag before set cursor degamma on DCN3+
    9a2393af1f35 drm/amdgpu: fix possible UAF in amdgpu_cs_pass1()
    2322dd8c9d3d drm/shmem-helper: Reset vma->vm_ops before calling dma_buf_mmap()
    a372c3f0db81 drm/nouveau/nvkm/dp: Add workaround to fix DP 1.3+ DPCD issues
    e179b058d720 drm/nouveau/gr: enable memory loads on helper invocation on all channels
    56c79fcae6f3 nvme-pci: add NVME_QUIRK_BOGUS_NID for Samsung PM9B1 256G and 512G
    3fdaa7fbc81b riscv/kexec: handle R_RISCV_CALL_PLT relocation type
    b374684018e4 riscv,mmio: Fix readX()-to-delay() ordering
    98a34f50c15f riscv/kexec: load initrd high in available memory
    593615bf14c9 net: mana: Fix MANA VF unload when hardware is unresponsive
    aec1ce9a30d4 dmaengine: pl330: Return DMA_PAUSED when transaction is paused
    ded9f5551ce5 mptcp: fix disconnect vs accept race
    84aa65a52561 mptcp: avoid bogus reset on fallback close
    d143c736020f selftests: mptcp: join: fix 'implicit EP' test
    aae988c09650 selftests: mptcp: join: fix 'delete and re-add' test
    a537fd9096a1 ipv6: adjust ndisc_is_useropt() to also return true for PIO
    ecab78febff0 mmc: moxart: read scr register without changing byte order
    260ec73757c1 wireguard: allowedips: expand maximum node depth
    839aae189e1f selftests: forwarding: Set default IPv6 traceroute utility
    aa4b5895a80f wifi: rtw89: fix 8852AE disconnection caused by RX full flags
    e642eb67b8c1 wifi: nl80211: fix integer overflow in nl80211_parse_mbssid_elems()
    5bdf1c1f346c KVM: SEV: only access GHCB fields once
    ec18273e41d9 KVM: SEV: snapshot the GHCB before accessing it
    f339d76a3a97 ksmbd: fix wrong next length validation of ea buffer in smb2_set_ea()
    c6bef3bc30fd ksmbd: validate command request size
    ccb1700ed606 tpm: Add a helper for checking hwrng enabled
    d8a7d6136cbf tpm: Disable RNG for all AMD fTPMs
    ed2f8701fb9b Revert "loongarch/cpu: Switch to arch_cpu_finalize_init()"
    65383fe06065 gcc-plugins: Reorganize gimple includes for GCC 13

(From OE-Core rev: 91711cc075d0b44a1a1adab5b3c27da95264dc6f)

(From OE-Core rev: 1520c698d0323002b9aa93d1b4e3e8cf13528261)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 6c758bece326cf43eb46c95a420f0c9eb42e36ad)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-09-04 04:13:25 -10:00
Bruce Ashfield
81d471ccba linux-yocto/6.1: fix uninitialized read in nohz_full/isolcpus setup
Integrating the following commit(s) to linux-yocto/6.1:

    4675ec8d0b9a kernel/sched: Fix uninitialized read in nohz_full/isolcpus setup

The carry forward of commit from the v5.15 linux-yocto kernel:

https://git.yoctoproject.org/linux-yocto/commit/?id=97c96388922

...in which case the sanity checks are properly *after* the allocation
and processing of the bootargs into the cpumask.

However, it seems patch (or wiggle?) apparently decided to put the
sanity checks *before* the population of the cpumask during the
carry-forward and generation of the new v6.1 kernel.  Meaning they are
validating uninitialized memory and hence nohz_full= and isolcpus= are
subject to random failures even for valid input ranges.

(From OE-Core rev: 4b349ee66eab8ebe3150ac4c1b449ea5c264a5be)

(From OE-Core rev: 5caea18a41d184c15e0685191364eb659a84ee59)

Signed-off-by: Adrian Cinal <adriancinal1@gmail.com>
Acked-by: Paul Gortmaker <paul.gortmaker@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 92642acd1166b7990fb520337b78a4d37ce7cbe4)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-09-04 04:13:24 -10:00
Bruce Ashfield
a76e75e0f1 linux-yocto/6.1: update to v6.1.45
Updating  to the latest korg -stable release that comprises
the following commits:

    1321ab403b38 Linux 6.1.45
    f2615bb47be4 x86/CPU/AMD: Do not leak quotient data after a division by 0
    673cdde74fd1 Revert "drm/i915: Disable DC states for all commits"
    af7215182417 drm/amdgpu: Use apt name for FW reserved region
    3d0a34c42f0d drm/amdgpu: Remove unnecessary domain argument
    526defeec474 drm/amdgpu: add vram reservation based on vram_usagebyfirmware_v2_2
    99255a2b6849 arm64/ptrace: Don't enable SVE when setting streaming SVE
    c2fdf827f8fc exfat: check if filename entries exceeds max filename length
    e2fb24ce37ca f2fs: don't reset unchangable mount option in f2fs_remount()
    6ba0594a81f9 f2fs: fix to set flush_merge opt and show noflush_merge
    e355972affb6 selftests/rseq: Play nice with binaries statically linked against glibc 2.35+
    56562676102e drm/amd/display: skip CLEAR_PAYLOAD_ID_TABLE if device mst_en is 0
    63eeb50fa110 drm/amd/display: Ensure that planes are in the same order
    740d4cae248a drm/imx/ipuv3: Fix front porch adjustment upon hactive aligning
    a492b8281c36 powerpc/mm/altmap: Fix altmap boundary check
    f4b700c71802 mtd: rawnand: fsl_upm: Fix an off-by one test in fun_exec_op()
    b71c00256da4 mtd: rawnand: rockchip: Align hwecc vs. raw page helper layouts
    5a8a35b71bd3 mtd: rawnand: rockchip: fix oobfree offset and description
    6c591fce484e mtd: rawnand: omap_elm: Fix incorrect type in assignment
    88b1958fb57d io_uring: annotate offset timeout races
    a78a8bcdc26d f2fs: fix to do sanity check on direct node in truncate_dnode()
    23e72231f828 btrfs: remove BUG_ON()'s in add_new_free_space()
    56c0d76a9722 ext2: Drop fragment support
    295ef44a2aba fs: Protect reconfiguration of sb read-write from racing writes
    1bebbd9b8037 net: usbnet: Fix WARNING in usbnet_start_xmit/usb_submit_urb
    203d58930d4a debugobjects: Recheck debug_objects_enabled before reporting
    29fac1849933 Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
    1416eebaad80 fs/sysv: Null check to prevent null-ptr-deref bug
    ccc6de4d4f34 fs/ntfs3: Use __GFP_NOWARN allocation at ntfs_load_attr_list()
    33d9490b27e5 mm: kmem: fix a NULL pointer dereference in obj_stock_flush_required()
    4968484ac8ef file: reinstate f_pos locking optimization for regular files
    7a1178a3671b bpf, cpumap: Make sure kthread is running before map update returns
    8a211e9118d5 clk: imx93: Propagate correct error in imx93_clocks_probe()
    37f6073f7db3 drm/i915/gt: Cleanup aux invalidation registers
    4db8b39418a6 drm/i915: Fix premature release of request's reusable memory
    1fdd16d89c01 drm/ttm: check null pointer before accessing when swapping
    4f03b0471ee0 open: make RESOLVE_CACHED correctly test for O_TMPFILE
    61f96da37dd4 arm64/fpsimd: Sync FPSIMD state with SVE for SME only systems
    654c1dd350c7 arm64/fpsimd: Clear SME state in the target task when setting the VL
    bae353469a28 arm64/fpsimd: Sync and zero pad FPSIMD state for streaming SVE
    b8ea2a46913b powerpc/ftrace: Create a dummy stackframe to fix stack unwind
    36dd8ca330b7 bpf: Disable preemption in bpf_event_output
    ec062367fa0c rbd: prevent busy loop when requesting exclusive lock
    98cccbd0a19a x86/hyperv: Disable IBT when hypercall page lacks ENDBR instruction
    0526119bf59e wifi: mt76: mt7615: do not advertise 5 GHz on first phy of MT7615D (DBDC)
    767800fc402d net: tap_open(): set sk_uid from current_fsuid()
    b6846d7c408b net: tun_chr_open(): set sk_uid from current_fsuid()
    367fdf369dc7 arm64: dts: stratix10: fix incorrect I2C property for SCL signal
    3654ed5daf49 bpf: Disable preemption in bpf_perf_event_output
    680f4d8aec1b mtd: rawnand: meson: fix OOB available bytes for ECC
    67327cadba59 mtd: spinand: toshiba: Fix ecc_get_status
    724ce05212d0 exfat: release s_lock before calling dir_emit()
    1427a7e96fb9 exfat: use kvmalloc_array/kvfree instead of kmalloc_array/kfree
    bc41119995e4 firmware: arm_scmi: Drop OF node reference in the transport channel setup
    a062da58ed97 ceph: defer stopping mdsc delayed_work
    ad82aac732c2 USB: zaurus: Add ID for A-300/B-500/C-700
    be52667ba243 libceph: fix potential hang in ceph_osdc_notify()
    f62faadc791e scsi: storvsc: Limit max_sectors for virtual Fibre Channel devices
    645603ab5fa8 scsi: zfcp: Defer fc_rport blocking until after ADISC response
    f0618c305b41 rust: allocator: Prevent mis-aligned allocation
    cd4bdf8f98ef tcp_metrics: fix data-race in tcpm_suck_dst() vs fastopen
    e53917e7efea tcp_metrics: annotate data-races around tm->tcpm_net
    6dea95d8caff tcp_metrics: annotate data-races around tm->tcpm_vals[]
    fee608e80271 tcp_metrics: annotate data-races around tm->tcpm_lock
    4a77a0f7526c tcp_metrics: annotate data-races around tm->tcpm_stamp
    71f891a25405 tcp_metrics: fix addr_same() helper
    afac854f8221 prestera: fix fallback to previous version on same major version
    72b3aea3450e net/mlx5: fs_core: Skip the FTs in the same FS_TYPE_PRIO_CHAINS fs_prio
    1ca50e5de43a net/mlx5: fs_core: Make find_closest_ft more generic
    7b8717658dff vxlan: Fix nexthop hash size
    691a09eecad9 ip6mr: Fix skb_under_panic in ip6mr_cache_report()
    86818409f989 s390/qeth: Don't call dev_close/dev_open (DOWN/UP)
    ecff20e19320 net: dcb: choose correct policy to parse DCB_ATTR_BCN
    421e02bda057 bnxt_en: Fix max_mtu setting for multi-buf XDP
    e9f11bfc03fb bnxt_en: Fix page pool logic for page size >= 64K
    64763dd851fa net: netsec: Ignore 'phy-mode' on SynQuacer in DT mode
    8afe27770dea net: korina: handle clk prepare error in korina_probe()
    58660666b464 net: ll_temac: fix error checking of irq_of_parse_and_map()
    834422b06c8b bpf: sockmap: Remove preempt_disable in sock_map_sk_acquire
    d4d3b53a4c66 net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
    7f691439b29b net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
    aab2d095ce4d net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free
    cbd000451885 bpf, cpumap: Handle skb as well when clean up ptr_ring
    4461b2cae326 ice: Fix RDMA VSI removal during queue rebuild
    0b45af982a4d net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
    12d4ba181424 net: annotate data-races around sk->sk_priority
    6326c83ee27e net: add missing data-race annotation for sk_ll_usec
    dd7a1ff07c6c net: add missing data-race annotations around sk->sk_peek_off
    b53468041d20 net: annotate data-races around sk->sk_mark
    c7bb6860645f net: add missing READ_ONCE(sk->sk_rcvbuf) annotation
    10c832159622 net: add missing READ_ONCE(sk->sk_sndbuf) annotation
    0a40103c9191 net: add missing READ_ONCE(sk->sk_rcvlowat) annotation
    be43c8f1c916 net: annotate data-races around sk->sk_max_pacing_rate
    0317c8322d9a net: annotate data-race around sk->sk_txrehash
    60d92bc9c094 net: annotate data-races around sk->sk_reserved_mem
    9da9ea9b132c qed: Fix scheduling in a tasklet while getting stats
    3c42307abe97 mISDN: hfcpci: Fix potential deadlock on &hc->lock
    d652c080b67c net: sched: cls_u32: Fix match key mis-addressing
    22709d85373f perf test uprobe_from_different_cu: Skip if there is no gcc
    5ef5b6e9c17b net: dsa: fix value check in bcm_sf2_sw_probe()
    8dfac8071d58 rtnetlink: let rtnl_bridge_setlink checks IFLA_BRIDGE_MODE length
    24772cc31f00 bpf: Add length check for SK_DIAG_BPF_STORAGE_REQ_MAP_FD parsing
    d628ba98eb16 net/mlx5e: Move representor neigh cleanup to profile cleanup_tx
    94a0eb9c12be net/mlx5e: Fix crash moving to switchdev mode when ntuple offload is set
    a7b5f001004c net/mlx5e: fix return value check in mlx5e_ipsec_remove_trailer()
    0582a3caaa3e net/mlx5: fix potential memory leak in mlx5e_init_rep_rx
    3169c3854397 net/mlx5: DR, fix memory leak in mlx5dr_cmd_create_reformat_ctx
    c818fff3b6cb net/mlx5e: fix double free in macsec_fs_tx_create_crypto_table_groups
    7a6fad03f54c wifi: cfg80211: Fix return value in scan logic
    05e0952ddb75 erofs: fix wrong primary bvec selection on deduplicated extents
    a759972d2549 KVM: s390: fix sthyi error handling
    f168188174b3 word-at-a-time: use the same return type for has_zero regardless of endianness
    5b53b2b44f0c firmware: arm_scmi: Fix chan_free cleanup on SMC
    6289d5486d36 lib/bitmap: workaround const_eval test build failure
    0ca5de8309f9 firmware: smccc: Fix use of uninitialised results structure
    7b0582dddd7e arm64: dts: freescale: Fix VPU G2 clock
    5841d3d0c352 arm64: dts: imx8mn-var-som: add missing pull-up for onboard PHY reset pinmux
    a24f67b71ad2 arm64: dts: phycore-imx8mm: Correction in gpio-line-names
    753a927c5841 arm64: dts: phycore-imx8mm: Label typo-fix of VPU
    608ac7ea5f05 arm64: dts: imx8mm-venice-gw7904: disable disp_blk_ctrl
    d060bbb2fed8 arm64: dts: imx8mm-venice-gw7903: disable disp_blk_ctrl
    8ddb3183c439 iommu/arm-smmu-v3: Document nesting-related errata
    42d04acf1d9b iommu/arm-smmu-v3: Add explicit feature for nesting
    57ae3671ece5 iommu/arm-smmu-v3: Document MMU-700 erratum 2812531
    e3399bd014e9 iommu/arm-smmu-v3: Work around MMU-600 erratum 1076982
    50c24f0c9407 net: ipa: only reset hashed tables when supported
    93f5b881125e net/mlx5: Free irqs only on shutdown callback
    15c22cd1de50 perf: Fix function pointer case
    c7920f992840 io_uring: gate iowait schedule on having pending requests

(From OE-Core rev: 9cdf022205d4bfe30ed71a4b1ac2edfb88eff560)

(From OE-Core rev: 4a7b992e07e9b0d35647df09c0faba7f691e984c)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit e8b3099f472201410cba6c3f30745d3b83e15a21)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-09-04 04:13:24 -10:00