Commit Graph

43139 Commits

Author SHA1 Message Date
Maxin B. John
da6dd6f9fb GNU_MIRROR: switch from ftp to https
Based on the same reason behind DEBIAN's switch from ftp:
https://www.debian.org/News/2017/20170425

(From OE-Core rev: ba119d836c0f4b20a39c92fa2e64abb0d5a55ad4)

(From OE-Core rev: 16a43d53533dcc9bb6fca141b2a66cff648df0d2)

Signed-off-by: Maxin B. John <maxin.john@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-08-29 16:50:53 +01:00
Maxin B. John
c35d3a6c5e DEBIAN_MIRROR: switch from ftp to http
All public-facing debian.org FTP services will be shut down on November 1, 2017
The mirrors should just be accessed using HTTP instead.

https://www.debian.org/News/2017/20170425

Fixes [YOCTO #11413]

(From OE-Core rev: c2cdc4d9155d7a3b9cba60fa9cbb448cf64c62bd)

(From OE-Core rev: 04790a0d9ddc072a19701ba449a3aefe51dc3997)

Signed-off-by: Maxin B. John <maxin.john@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-08-29 16:50:53 +01:00
Zhixiong Chi
a5dfa90ea8 bash: CVE-2016-0634
A vulnerability was found in a way bash expands the $HOSTNAME.
Injecting the hostname with malicious code would cause it to run
each time bash expanded \h in the prompt string.

Porting patch from <https://ftp.gnu.org/gnu/bash/bash-4.3-patches/
bash43-047> to solve CVE-2016-0634

CVE: CVE-2016-0634

(From OE-Core rev: 7dd6aa1a4bf6e9fc8a1998cda6ac5397bb5cd5cb)

(From OE-Core rev: a4b37b05140b549960baef49237ce3316e84a041)

(From OE-Core rev: a75c9657f785be3b2d14b10a7044105329c88e8a)

Signed-off-by: Zhixiong Chi <zhixiong.chi@windriver.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-08-29 16:50:53 +01:00
Fan Xin
bd631d76b8 libxslt: Fix CVE-2017-5029
Backport upstream patch to fix CVE-2017-5029.

(From OE-Core rev: 5266e74c990df1cf965d162d9695eb5a698883ae)

(From OE-Core rev: 172f76a1a43921d92a385d6d123dffaf27eb368f)

(From OE-Core rev: 25b87ebfce7216b18e85b6bc5fc7f20bcf4cf31d)

Signed-off-by: Fan Xin <fan.xin@jp.fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-08-29 16:50:53 +01:00
Jussi Kukkonen
2c638f46ba libxslt: Add build fix (with ld-is-gold)
Libraries must be linked with "-lm", otherwise gold fails to link
binaries with those libraries.

(From OE-Core rev: 9175164380b50852a21a05d4e81294394c5486f4)

(From OE-Core rev: 3bd47a7db76cead77d0aa2b3b29f8513469dbe60)

Signed-off-by: Jussi Kukkonen <jussi.kukkonen@intel.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-08-29 16:50:53 +01:00
Martin Jansa
f85376290f eudev: set LGPL-2.1+ for libudev package
(From OE-Core rev: 56210d562347eafd1433b3fbab64dd023ece421f)

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-08-29 16:50:53 +01:00
Cody P Schafer
72084f7513 elfutils: fix building elfutils-native with GCC7
This is heavily based on the oe-core master commit with the same
subject, but includes a backport of upstream's fix for the fallthrough
warnings rebased to 0.166 (the oe-core patch which targeted 0.168 did
not apply), a rebase of the format-truncation patch, and a backport of
the upstream format-length patch.

Info from OE-Core master patch follows:

	From OE-Core rev: aaf4c4f3d09ac3897205417eb15e19d54e0c0d05
	From: Joshua Lock <joshua.g.lock@intel.com>

	Backport a fix from upstream for a -Wformat-truncation=2 warning
	and implement a simple fix for a -Wimplicit-fallthrough warning.

	Signed-off-by: Joshua Lock <joshua.g.lock@intel.com>
	Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>

(From OE-Core rev: 3b91be97ae8c36cd6bad86fed992efc9800f4c9e)

Signed-off-by: Cody P Schafer <dev@codyps.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-08-29 16:50:53 +01:00
Joshua Lock
5f7d84821f gcc-6.2: backport fix of check for empty string in ubsan.c
Building gcc-cross-initial with GCC7 on the host fails due to the
comparison of a pointer to an integer in ubsan_use_new_style_p, which
is forbidden by ISO C++:

ubsan.c:1474:23: error: ISO C++ forbids comparison between pointer and
integer [-fpermissive]
       || xloc.file == '\0' || xloc.file[0] == '\xff'

Backport the fix from upstream GCC to enable the build with GCC 7

(From OE-Core rev: 7a7fcbab0365b9501c737dbc02715be14dda72a3)

(From OE-Core rev: ad685600d52b2e8b6f4cdbf46baa9f14b51565dd)

Signed-off-by: Joshua Lock <joshua.g.lock@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Cody P Schafer <dev@codyps.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-08-29 16:50:52 +01:00
Yuanjie Huang
1188ce3e3f binutils: fix CVE-2017-7210
CVE: CVE-2017-7210
[BZ 21157] -- https://sourceware.org/bugzilla/show_bug.cgi?id=21157

PR binutils/21157: Fix handling of corrupt STABS enum type strings.

(From OE-Core rev: 066a7acc4c19a4ef3428d0a7c695a2b08f45bc14)

Signed-off-by: Yuanjie Huang <yuanjie.huang@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-08-29 16:50:52 +01:00
Yuanjie Huang
5d6e240db6 binutils: fix CVE-2017-7209 in readelf
CVE: CVE-2017-7209
[BZ 21135] -- https://sourceware.org/bugzilla/show_bug.cgi?id=21135

PR binutils/21135: Fix invalid read of section contents whilst
processing
a corrupt binary.

(From OE-Core rev: fd7a91e2a6db1fb806c57c137f72efcffbf1f26b)

Signed-off-by: Yuanjie Huang <yuanjie.huang@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-08-29 16:50:52 +01:00
Yuanjie Huang
c7e48934c9 binutils: fix CVE-2017-6969 in readelf
CVE: CVE-2017-6969
[BZ 21156] -- https://sourceware.org/bugzilla/show_bug.cgi?id=21156

PR binutils/21156: Fix illegal memory accesses in readelf when
ing a corrupt binary.
PR binutils/21156: Fix another memory access error in readelf when
parsing a corrupt binary.

(From OE-Core rev: 565d4b9432c898e4483f392a91f4b4aaebb4b184)

Signed-off-by: Yuanjie Huang <yuanjie.huang@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-08-29 16:50:52 +01:00
Khem Raj
6131129c0a openssl-native: Compile with -fPIC
Fixes
| /usr/bin/ld: libcrypto.a(sha1-x86_64.o): relocation R_X86_64_PC32 against undefined symbol `OPENSSL_ia32cap_P' can not be used when making a shared object; recompile with -fPIC
| /usr/bin/ld: final link failed: Bad value

(From OE-Core rev: 9e6a0da06aa832fbce06326622744b2a5ab9c091)

Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 0a19e72081771fca8ed94fb2a2a8996fd3dce00c)
Signed-off-by: Mirza Krak <mirza.krak@endian.se>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-08-29 16:50:52 +01:00
Paul Eggleton
63eab150b2 packagegroup-core-standalone-sdk-target: add libssp
If you want to be able to use -fstack-protector then you need the
runtime support - you can either write this yourself or use libssp
supplied with GCC. If you're using GCC then it seems likely that you'd
just be using libssp, so include in the SDK by default; however use
RRECOMMENDS just in case it's been disabled or you aren't using GCC.

(From OE-Core rev: 6c990655e35bb3a14d59555662ec5802c9980028)

(From OE-Core rev: 69b5643ec66e1495c9d805736d8765a06f67416c)

Signed-off-by: Paul Eggleton <paul.eggleton@linux.intel.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-08-29 16:50:52 +01:00
Daniel Schultz
af43028b3e wic: partition: Run fsck on EXT file systems
Mkfs may create EXT file systems which can only be optimized by fsck
and not by itself, e.g. directory optimization (in Pass 3A).

To prevent those optimizations during runtime, it will be performed after
the creation of an EXT file system.

(From OE-Core rev: b8af7c10637c14b2c226fb7063b736755ee46802)

Signed-off-by: Daniel Schultz <d.schultz@phytec.de>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-08-29 16:50:52 +01:00
Daniel Schultz
e6a1c94eef e2fsprogs: Fix wrong error code after optimization
fsck.ext will return an error code of 1 if a file systems was checked
and successfully repaired. Even when an optimization was performed it
will return this error code.

This patch will change the error code to 0 if only optimizations had
changed the file systems.

The reason for this patch is a question I asked at the ext4 ML:
http://www.spinics.net/lists/linux-ext4/msg55700.html

Backport from git://git.kernel.org/pub/scm/fs/ext2/e2fsprogs.git
    Based on commit bf9f3b6d5b10d19218b4ed904c12b22e36ec57dd

(From OE-Core rev: 34ccb6b66162400c3a3164cbdcca02fc1b42c92b)

Signed-off-by: Daniel Schultz <d.schultz@phytec.de>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-08-29 16:50:52 +01:00
Saul Wold
604b2b2c6c systemtap: Add patch to remove quotes
This fixes the -I include lines that are getting passed to the
kernel macros

[YOCTO #10990]

(From OE-Core rev: b4d2f41a474c111e5fc64cae635d851386d860ba)

(From OE-Core rev: d767d24edb32f2a4303579371df2e526cdbf5c04)

Signed-off-by: Saul Wold <sgw@linux.intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-08-29 16:50:52 +01:00
Alexander Kanavin
0d91032b84 systemtap: update to 3.1
Removed patches are in upstream.

Rebase monitor-option.patch and no-msgfmt-check.patch

Add support for python 3 probes
(this necessitates the 0001-Do-not-let-configure-write-a-python-location-into-th.patch
and the Add 0001-Install-python-modules-to-correct-library-dir.patch to
install python modules to correct destination).

Add perl to RDEPENDS to fix a QA warning about one of the installed files.

(From OE-Core rev: e3bccfba499565ea13f154a11dadcab48ef5e0ab)

(From OE-Core rev: 74f390351bdf5b8749cba6e2345ef14d3ff9f077)

Signed-off-by: Alexander Kanavin <alexander.kanavin@linux.intel.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-08-29 16:50:52 +01:00
Bruce Ashfield
4812871780 linux-yocto/4.8: update to 4.8.24
Integration the -stable updates to 4.8, which comprise the following
commits:

   ae51b3b4efe6 Linux 4.8.24
   accb950219c0 nvme/pci: Disable on removal when disconnected
   995be68699ef padata: avoid race in reordering
   bea2fdcc6d3e blk: improve order of bio handling in generic_make_request()
   26690f5a8bdf mm: workingset: fix premature shadow node shrinking with cgroups
   f52ade55d6e9 MIPS: Lantiq: Fix cascaded IRQ setup
   feae78cdcaef ARM: dts: BCM5301X: Correct GIC_PPI interrupt flags
   e36a1a1a9695 ARM: BCM5301X: Add back handler ignoring external imprecise aborts
   26fbe60844a9 mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd()
   d15202219abe mm: rmap: fix huge file mmap accounting in the memcg stats
   72f38e33793c x86/mce: Fix copy/paste error in exception table entries
   9e08a6f8e64e x86/mm/KASLR: Exclude EFI region from KASLR VA space randomization
   100aa553e31b x86/mm/64: Enable KASLR for vmemmap memory region
   2e5c45495433 drm/etnaviv: (re-)protect fence allocation with GPU mutex
   7f160b149090 drm/vc4: Allocate the right amount of space for boot-time CRTC state.
   38cdfd6153cf drm/radeon: Override fpfn for all VRAM placements in radeon_evict_flags
   ccd0fc5589ca KVM: kvm_io_bus_unregister_dev() should never fail
   332e2ac55d3b KVM: x86: clear bus pointer when destroyed
   fcbdbe1290d6 serial: mxs-auart: Fix baudrate calculation
   3b7bb3391f62 USB: fix linked-list corruption in rh_call_control()
   5f004babfd46 tty/serial: atmel: fix race condition (TX+DMA)
   4509ea7b4349 ACPI: Do not create a platform_device for IOAPIC/IOxAPIC
   12fddf4d255f ACPI: Fix incompatibility with mcount-based function graph tracing
   8805bbdea121 nfsd: map the ENOKEY to nfserr_perm for avoiding warning
   1fa18f8fad45 mmc: sdhci-of-at91: fix MMC_DDR_52 timing selection
   3a0df02f0387 mmc: sdhci: Disable runtime pm when the sdio_irq is enabled
   d742580939f5 ASoC: Intel: Skylake: fix invalid memory access due to wrong reference of pointer
   726514355250 ASoC: atmel-classd: fix audio clock rate
   0dd77376bd45 ALSA: hda - fix a problem for lineout on a Dell AIO machine
   12788ff3a917 ALSA: seq: Fix race during FIFO resize
   5ccedc21345f PCI: iproc: Save host bridge window resource in struct iproc_pcie
   61b133e83718 scsi: scsi_dh_alua: Ensure that alua_activate() calls the completion function
   ae4a71a0b8b4 scsi: scsi_dh_alua: Check scsi_device_get() return value
   1b82bcc866c3 scsi: libsas: fix ata xfer length
   0b9b5b603f27 scsi: sg: check length passed to SG_NEXT_CMD_LEN
   8b02a4b8e3b3 xfs: Use xfs_icluster_size_fsb() to calculate inode alignment mask
   a8eded7e1484 xfs: tune down agno asserts in the bmap code
   7650b45a6dd8 xfs: Use xfs_icluster_size_fsb() to calculate inode chunk alignment
   e9d4a4b55c86 xfs: don't reserve blocks for right shift transactions
   81f456210999 xfs: split indlen reservations fairly when under reserved
   842c9d864561 xfs: handle indlen shortage on delalloc extent merge
   f90db61ed148 xfs: don't fail xfs_extent_busy allocation
   590e612677e2 xfs: reset b_first_retry_time when clear the retry status of xfs_buf_t
   c493142b3a2c xfs: verify free block header fields
   4dda58920fb9 xfs: check for obviously bad level values in the bmbt root
   0faf06ef8b24 xfs: filter out obviously bad btree pointers
   6974d828ce0c xfs: fail _dir_open when readahead fails
   365ec079aeeb xfs: fix toctou race when locking an inode to access the data map
   06a1dbe68823 xfs: fix eofblocks race with file extending async dio writes
   fc1ff6abfb5d xfs: pull up iolock from xfs_free_eofblocks()
   2de02a1aa708 xen/setup: Don't relocate p2m over existing one
   bd37e332bc35 libceph: force GFP_NOIO for socket allocations
   14d57fe1fcd3 sched/rt: Add a missing rescheduling point
   461aa14a19df metag/ptrace: Reject partial NT_METAG_RPIPE writes
   35d078d3b1f5 metag/ptrace: Provide default TXSTATUS for short NT_PRSTATUS
   9519f4083b0d metag/ptrace: Preserve previous registers for short regset write
   b2d2e181ebe4 sparc/ptrace: Preserve previous registers for short regset write
   0a89a38ebbae mips/ptrace: Preserve previous registers for short regset write
   a303cc3a707b h8300/ptrace: Fix incorrect register transfer count
   576d881764eb c6x/ptrace: Remove useless PTRACE_SETREGSET implementation
   1661ca89ebd1 pinctrl: qcom: Don't clear status bit on irq_unmask
   5c52be1e1c55 virtio_balloon: init 1st buffer in stats vq
   171bd47e04fa KVM: x86: cleanup the page tracking SRCU instance
   37c063abc015 xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder
   f5e8896582a0 xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window
   ef704417015e xfrm: policy: init locks early
   54b82b92b678 crypto: algif_hash - avoid zero-sized array
   35a836ab3d9b fbcon: Fix vc attr at deinit
   d64422cfc106 drm: reference count event->completion
   5b8d397ea73a drm/bridge: analogix dp: Fix runtime PM state on driver bind
   409d2330bd85 libceph: don't set weight to IN when OSD is destroyed
   cb7f50af5964 Drivers: hv: vmbus: Don't leak channel ids
   7d63e96a483f intel_th: Don't leak module refcount on failure to activate
   bca70ad00096 blk-mq: don't complete un-started request in timeout handler
   7ca7701e2615 cgroup, net_cls: iterate the fds of only the tasks which are being migrated
   c3accccd8ebe cpufreq: Restore policy min/max limits on CPU online
   42ec5a5b3f7a arm64: kaslr: Fix up the kernel image alignment
   b74685fc49ce ARM: at91: pm: cpu_idle: switch DDR to power-down mode
   cba43efed603 Revert "ARM: at91/dt: sama5d2: Use new compatible for ohci node"
   a54b0f345230 xen/acpi: upload PM state from init-domain to Xen
   3700c9549893 crypto: ccp - Assign DMA commands to the channel's CCP
   c05851c95c30 clk: sunxi-ng: mp: Adjust parent rate for pre-dividers
   298b4bcbee9e mmc: sdhci: Do not disable interrupts while waiting for clock
   d3bde483cd4e mmc: sdhci-of-arasan: fix incorrect timeout clock
   1a0c2899c1fc mmc: sdhci-of-at91: Support external regulators
   512b6b14b972 mmc: sdhci: Rename sdhci_set_power() to sdhci_set_power_noreg()
   fcc465466352 powerpc/64s: Fix idle wakeup potential to clobber registers
   e31490f131bd ext4: lock the xattr block before checksuming it
   9515b8a3e59d ext4: mark inode dirty after converting inline directory
   ee78dd996a48 parport: fix attempt to write duplicate procfiles
   7aa1f90f7bc9 iio: hid-sensor-trigger: Change get poll value function order to avoid sensor properties losing after resume from S3
   46ed5a6a0317 iio: sw-device: Fix config group initialization
   4fd6237dcb15 iio: adc: ti_am335x_adc: fix fifo overrun recovery
   10481fe5bcc5 mmc: ushc: fix NULL-deref at probe
   b18275c8ca06 uwb: hwa-rc: fix NULL-deref at probe
   90f875db3d83 uwb: i1480-dfu: fix NULL-deref at probe
   fedb7364f161 USB: usbtmc: fix probe error path
   19ab12977470 USB: usbtmc: add missing endpoint sanity check
   d2f6089a604a usb: hub: Fix crash after failure to read BOS descriptor
   4fe7f56d5936 usb: musb: cppi41: don't check early-TX-interrupt for Isoch transfer
   c314f1d496b3 USB: wusbcore: fix NULL-deref at probe
   67ca7e6fbefe USB: idmouse: fix NULL-deref at probe
   979ce26d7e67 USB: lvtest: fix NULL-deref at probe
   bc5daa8fcb39 USB: uss720: fix NULL-deref at probe
   778e23f6cd77 usb-core: Add LINEAR_FRAME_INTR_BINTERVAL USB quirk
   8d38a9d16950 usb: gadget: f_uvc: Fix SuperSpeed companion descriptor's wBytesPerInterval
   ac5c5689dd1e ACM gadget: fix endianness in notifications
   8e39a4d96fa0 USB: serial: qcserial: add Dell DW5811e
   d3e557a5e277 USB: serial: option: add Quectel UC15, UC20, EC21, and EC25 modems
   0ff11fc75667 ALSA: hda - Adding a group of pin definition to fix headset problem
   73ac94f75f27 ALSA: seq: Fix racy cell insertions during snd_seq_pool_done()
   ed79a62ce3b5 Input: sur40 - validate number of endpoints before using them
   9f4a9350c962 Input: kbtab - validate number of endpoints before using them
   535ecfd9ce37 Input: cm109 - validate number of endpoints before using them
   d4d90cc1939b Input: yealink - validate number of endpoints before using them
   6cd3c938420d Input: hanwang - validate number of endpoints before using them
   114ea08f2b53 Input: ims-pcu - validate number of endpoints before using them
   8e536247967f Input: iforce - validate number of endpoints before using them
   d8e9da7cf4d2 Input: i8042 - add noloop quirk for Dell Embedded Box PC 3000
   d7bd4ff902d4 Input: elan_i2c - add ASUS EeeBook X205TA special touchpad fw
   15cbc365f36f tcp: initialize icsk_ack.lrcvtime at session start time
   8d816936cb47 socket, bpf: fix sk_filter use after free in sk_clone_lock
   599dca4e637a ipv4: provide stronger user input validation in nl_fib_input()
   4dce5676bf12 net: bcmgenet: remove bcmgenet_internal_phy_setup()
   e54a886d9c7e ipv6: make sure to initialize sockc.tsflags before first use
   de7b203e7a07 net/mlx5e: Count LRO packets correctly
   7e3b2755ae57 net/mlx5e: Count GSO packets correctly
   0bb7b7ed9983 net/mlx5: Increase number of max QPs in default profile
   de1454d45e43 net/mlx5: Add missing entries for set/query rate limit commands
   aea1c1b15494 net: vrf: Reset rt6i_idev in local dst after put
   30467a2d6a10 qmi_wwan: add Dell DW5811e
   74a4f76fd1ac net: unix: properly re-increment inflight counter of GC discarded candidates
   b4927d54c638 openvswitch: Add missing case OVS_TUNNEL_KEY_ATTR_PAD
   d98fc268e284 amd-xgbe: Fix jumbo MTU processing on newer hardware
   4ceda29faefa net: properly release sk_frag.page
   42603fb986e2 net: bcmgenet: Do not suspend PHY if Wake-on-LAN is enabled
   40dbeb5b15df net/openvswitch: Set the ipv6 source tunnel key address attribute correctly
   81ecfc287d5a cgroup/pids: remove spurious suspicious RCU usage warning
   b488f503b905 percpu: acquire pcpu_lock when updating pcpu_nr_empty_pop_pages
   1924ae622fd9 gfs2: Avoid alignment hole in struct lm_lockname
   e279f259f3e2 isdn/gigaset: fix NULL-deref at probe
   0907a6cf5831 target: Fix VERIFY_16 handling in sbc_parse_cdb
   6d71fefbf405 scsi: libiscsi: add lock around task lists to fix list corruption regression
   4835fd5ad7aa scsi: lpfc: Add shutdown method for kexec
   93ecb4c0e2cf target/pscsi: Fix TYPE_TAPE + TYPE_MEDIMUM_CHANGER export
   e5660310dac8 powerpc/boot: Fix zImage TOC alignment
   8ce12dd199ac cpufreq: Fix and clean up show_cpuinfo_cur_freq()
   4d5c2d2099a8 perf/core: Fix event inheritance on fork()
   f7b9504c680d perf/core: Fix use-after-free in perf_release()
   848b0d18a847 parisc: Optimize flush_kernel_vmap_range and invalidate_kernel_vmap_range
   fbb1e639d3e1 qla2xxx: Fix request queue corruption.
   60d674590d02 qla2xxx: Fix memory leak for abts processing
   e5e1af16aeae give up on gcc ilog2() constant optimizations
   2401ecb47c7f drm/vc4: Use runtime autosuspend to avoid thrashing V3D power state.
   c495444e18c6 drm/vc4: Fix termination of the initial scan for branch targets.
   97b74d794fa3 Linux 4.8.23
   5d2e054aa127 crypto: powerpc - Fix initialisation of crc32c context
   30eacf198cab locking/rwsem: Fix down_write_killable() for CONFIG_RWSEM_GENERIC_SPINLOCK=y
   6ceef14519cd futex: Add missing error handling to FUTEX_REQUEUE_PI
   0596ef2a1984 futex: Fix potential use-after-free in FUTEX_REQUEUE_PI
   e0421c6f49b0 x86/perf: Fix CR4.PCE propagation to use active_mm instead of mm
   b88efae3588c x86/kasan: Fix boot with KASAN=y and PROFILE_ANNOTATED_BRANCHES=y
   429bf916381e x86/tsc: Fix ART for TSC_KNOWN_FREQ
   5eb6ff068525 drm/vc4: Fix ->clock_select setting for the VEC encoder
   4a3f522f63ab drm/vc4: Fix race between page flip completion event and clean-up
   02c5256b110c clk: bcm2835: Fix ->fixed_divider of pllh_aux
   d5dd232fc11e usb: gadget: udc: atmel: remove memory leak
   e85561f6aca8 serial: 8250_pci: Detach low-level driver during PCI error recovery
   54c73832c576 ACPI / blacklist: Make Dell Latitude 3350 ethernet work
   f92b80712355 ACPI / blacklist: add _REV quirks for Dell Precision 5520 and 3520
   990db74c5c87 slub: move synchronize_sched out of slab_mutex on shrink
   06e966ded31e [media] uvcvideo: uvc_scan_fallback() for webcams with broken chain
   e30814bb2038 s390/zcrypt: Introduce CEX6 toleration
   c73c813f59ed block: allow WRITE_SAME commands with the SG_IO ioctl
   bb64e9763f59 drm/nouveau/disp/nv50-: specify ctrl/user separately when constructing classes
   3c5d63c13311 drm/nouveau/disp/nv50-: split chid into chid.ctrl and chid.user
   49e8233a2726 drm/nouveau/disp/gp102: fix cursor/overlay immediate channel indices
   275ff35915b3 vfio/spapr: Postpone default window creation
   a6cc475b194a vfio/spapr: Add a helper to create default DMA window
   95045ae80bba powerpc/mm/iommu, vfio/spapr: Put pages on VFIO container shutdown
   789e7eac7ee0 vfio/spapr: Reference mm in tce_container
   28a412c87e63 powerpc/iommu: Stop using @current in mm_iommu_xxx
   605c802e3cb9 powerpc/iommu: Pass mm_struct to init/cleanup helpers
   c70e411994d8 vfio/spapr: Postpone allocation of userspace version of TCE table
   89b9c28ca6d7 Drivers: hv: ring_buffer: count on wrap around mappings in get_next_pkt_raw() (v2)
   ea35dd4dc3d5 PCI: Do any VF BAR updates before enabling the BARs
   ddb11bb30cbc PCI: Ignore BAR updates on virtual functions
   bfaf6ec96d7f PCI: Update BARs using property bits appropriate for type
   c09761e3af3f PCI: Don't update VF BARs while VF memory space is enabled
   f49fdb5fb9aa PCI: Decouple IORESOURCE_ROM_ENABLE and PCI_ROM_ADDRESS_ENABLE
   4453d0980e47 PCI: Add comments about ROM BAR updating
   e9026b999d64 PCI: Remove pci_resource_bar() and pci_iov_resource_bar()
   bf5194f0e771 PCI: Separate VF BAR updates from standard BAR updates
   4c25b4da1978 x86/hyperv: Handle unknown NMIs on one CPU when unknown_nmi_panic
   f86de0bf6845 scsi: ibmvscsis: Synchronize cmds at remove time
   03780edbb14b scsi: ibmvscsis: Synchronize cmds at tpg_enable_store time
   6e76f14e8da7 scsi: ibmvscsis: Rearrange functions for future patches
   87e714992008 scsi: ibmvscsis: Clean up properly if target_submit_cmd/tmr fails
   26d9e831807f scsi: ibmvscsis: Return correct partition name/# to client
   017f9415d242 scsi: ibmvscsis: Issues from Dan Carpenter/Smatch
   1a865ae47435 igb: add i211 to i210 PHY workaround
   7af86b0c55e3 igb: Workaround for igb i210 firmware issue
   15fdb8c2a904 xen: do not re-use pirq number cached in pci device msi msg data
   4af906f27c02 dmaengine: iota: ioat_alloc_chan_resources should not perform sleeping allocations.
   7815d4127881 dccp: fix memory leak during tear-down of unsuccessful connection request
   348714c022b1 tun: fix premature POLLOUT notification on tun devices
   a1bc0a9f122e dccp/tcp: fix routing redirect race
   0a787971aa5b bridge: drop netfilter fake rtable unconditionally
   ee1d5c66f7d9 ipv6: avoid write to a possibly cloned skb
   81ed14c04c32 ipv6: make ECMP route replacement less greedy
   0949ba4922e5 mpls: Do not decrement alive counter for unregister events
   76aaba0ce52e mpls: Send route delete notifications when router module is unloaded
   48325fbb1d05 act_connmark: avoid crashing on malformed nlattrs with null parms
   4331398f440e uapi: fix linux/packet_diag.h userspace compilation error
   f5f6f5529468 net/tunnel: set inner protocol in network gro hooks
   2a00f4bf0780 vrf: Fix use-after-free in vrf_xmit
   61e3a5db6e7d dccp: fix use-after-free in dccp_feat_activate_values
   39ff72664911 net: fix socket refcounting in skb_complete_tx_timestamp()
   9d88ea01fe88 net: fix socket refcounting in skb_complete_wifi_ack()
   65f7a3f9b6c0 tcp: fix various issues for sockets morphing to listen state
   5531ae9e101d dccp: Unlock sock before calling sk_free()
   beb7cb3c2a3d ipv6: orphan skbs in reassembly unit
   728edccaedbf net: net_enable_timestamp() can be called from irq contexts
   e9f82ae95dcc net: don't call strlen() on the user buffer in packet_bind_spkt()
   b0c360a043c0 tcp/dccp: block BH for SYN processing
   b64d0db77b52 mlxsw: spectrum_router: Avoid potential packets loss
   8e1715480d7c l2tp: avoid use-after-free caused by l2tp_ip_backlog_recv
   44797e4d24c0 net sched actions: decrement module reference count after table flush.
   9c1294eeb41e ipv4: mask tos for input route
   368d2236b926 vxlan: don't allow overwrite of config src addr
   9ead713bc6ac vti6: return GRE_KEY for vti6
   a305478b6e7d vxlan: correctly validate VXLAN ID against VXLAN_N_VID
   bc68673783c7 net/mlx5e: Fix wrong CQE decompression
   4e8f4987b785 IB/mlx5: Verify that Q counters are supported
   f0d5cfb83dcb ext4: don't BUG when truncating encrypted inodes on the orphan list
   9ac44a73a4c5 [media] rc: raw decoder for keymap protocol is not loaded on register
   56174559c310 dm: flush queued bios when process blocks to avoid deadlock
   875142c6e879 KVM: arm/arm64: Let vcpu thread modify its own active state
   220f66f1f4d8 KVM: s390: Fix guest migration for huge guests resulting in panic
   3dd1f5f0b22c serial: samsung: Continue to work if DMA request fails
   2a7c66c1a7c0 USB: serial: io_ti: fix information leak in completion handler
   71f396d687e9 USB: serial: io_ti: fix NULL-deref in interrupt callback
   d9682fbb1252 USB: iowarrior: fix NULL-deref in write
   e1affee35832 USB: iowarrior: fix NULL-deref at probe
   07c5918e96e7 USB: serial: omninet: fix reference leaks at open
   782317bc4eba USB: serial: safe_serial: fix information leak in completion handler
   15b553818e00 usb: host: xhci-plat: Fix timeout on removal of hot pluggable xhci controllers
   e5df1d8231d8 usb: host: xhci-dbg: HCIVERSION should be a binary number
   a03e4fb73679 usb: gadget: function: f_fs: pass companion descriptor along
   bf600df6aa66 usb: dwc3-omap: Fix missing break in dwc3_omap_set_mailbox()
   40b091328f1c usb: dwc3: gadget: make Set Endpoint Configuration macros safe
   7ab8263169d2 usb: gadget: dummy_hcd: clear usb_gadget region before registration
   0a9e57a61494 PCI: Prevent VPD access for QLogic ISP2722
   0c925288d9e2 powerpc/xics: Work around limitations of OPAL XICS priority handling
   e7ef86271857 powerpc: Emulation support for load/store instructions on LE
   88cb0342bbc9 i2c: add missing of_node_put in i2c_mux_del_adapters
   49817d5f81a0 efi/arm: Fix boot crash with CONFIG_CPUMASK_OFFSTACK=y
   b463b3b26bf5 tracing: Add #undef to fix compile error
   03a9b9c5eb0f cpmac: remove hopeless #warning
   9e7e1616fb69 MIPS: ralink: Remove unused rt*_wdt_reset functions
   774bd1f0f2e0 MIPS: ralink: Cosmetic change to prom_init().
   1ec4e1a6c373 mtd: pmcmsp: use kstrndup instead of kmalloc+strncpy
   e6c4a646d490 MIPS: Update lemote2f_defconfig for CPU_FREQ_STAT change
   b70dce737466 MIPS: ip22: Fix ip28 build for modern gcc
   c5f71770663f MIPS: Update ip27_defconfig for SCSI_DH change
   4baa71bf6ca0 MIPS: ip27: Disable qlge driver in defconfig
   810c65dcf036 crypto: improve gcc optimization flags for serpent and wp512
   4b256e46c8e3 USB: serial: digi_acceleport: fix OOB data sanity check
   b88d9bf6ce41 fat: fix using uninitialized fields of fat_inode/fsinfo_inode
   bd390a837bf2 mm: do not call mem_cgroup_free() from within mem_cgroup_alloc()
   bc83fdbb1b88 thp: fix another corner case of munlock() vs. THPs
   6f3effcbddd2 x86/tlb: Fix tlb flushing when lguest clears PGE
   52f93fd5358e x86, mm: fix gup_pte_range() vs DAX mappings
   ab0eea711de5 libceph: use BUG() instead of BUG_ON(1)
   6dd79e33d04d drm/i915: Fix not finding the VBT when it overlaps with OPREGION_ASLE_EXT
   267b0207162b drm: Cancel drm_fb_helper_dirty_work on unload
   60a94aca40ff drm/i915/gvt: Disable access to stolen memory as a guest
   076bb9ce1a9f drm/atomic: fix an error code in mode_fixup()
   a6d98a3a3c5c drm/imx: imx-tve: Do not set the regulator voltage
   3036e519c3f8 drm/ttm: Make sure BOs being swapped out are cacheable
   8c52d5581851 drm/edid: Add EDID_QUIRK_FORCE_8BPC quirk for Rotel RSX-1058
   b4f89786c979 drm/ast: Fix AST2400 POST failure without BMC FW or VBIOS
   23c1fdaced81 drm/ast: Call open_key before enable_mmio in POST code
   cb624df381a6 drm/ast: Fix test for VGA enabled
   8b6e3ca35b51 drm/amdgpu: add more cases to DCE11 possible crtc mask setup
   77a708d95727 mac80211: use driver-indicated transmitter STA only for data frames
   72aaf6d71167 mac80211: don't handle filtered frames within a BA session
   680c812d7bdc mac80211: don't reorder frames with SN smaller than SSN
   e9d8c725c29b mac80211: flush delayed work when entering suspend
   9a7a9c5c88b2 xtensa: move parse_tag_fdt out of #ifdef CONFIG_BLK_DEV_INITRD
   b389c603b09e pwm: pca9685: Fix period change with same duty cycle
   711e95e9a7d4 nlm: Ensure callback code also checks that the files match
   29f3a5545183 target: Fix NULL dereference during LUN lookup + active I/O shutdown
   f82148e9ffd3 pci/hotplug/pnv-php: Remove WARN_ON() in pnv_php_put_slot()
   1d53d522e4d1 ceph: remove req from unsafe list when unregistering it
   a0e963dbeecc ktest: Fix child exit code processing
   d8e905726d90 memory/atmel-ebi: Fix ns <-> cycles conversions
   aef2ccf1d832 orangefs: Use RCU for destroy_inode
   f0453d44086f fs: Better permission checking for submounts
   eef4fcd21313 IB/srp: Fix race conditions related to task management
   24960d72feeb IB/srp: Avoid that duplicate responses trigger a kernel bug
   f3572a0ce31f IB/SRP: Avoid using IB_MR_TYPE_SG_GAPS
   63129c2502c1 IB/mlx5: Fix out-of-bound access
   f54cae186e6e IB/ipoib: Fix deadlock between rmmod and set_mode
   77563b9714b9 mnt: Tuck mounts under others instead of creating shadow/side mounts.
   521cf3b70359 brcmfmac: fix incorrect event channel deduction
   55730c566d11 cxl: Prevent read/write to AFU config space while AFU not configured
   3c20ea7dd380 net: mvpp2: fix DMA address calculation in mvpp2_txq_inc_put()
   7006fe7139f6 s390: use correct input data address for setup_randomness
   e936795084d3 s390: make setup_randomness work
   bb318913c8ab s390: TASK_SIZE for kernel threads
   64deb4069c4b s390/chsc: Add exception handler for CHSC instruction
   a35d74c9c4a0 s390/kdump: Use "LINUX" ELF note name instead of "CORE"
   b3e8ded18f8e s390/dcssblk: fix device size calculation in dcssblk_direct_access()
   e1b323f8b65e s390/qdio: clear DSCI prior to scanning multiple input queues
   7d9a72f5eb8c Bluetooth: Add another AR3012 04ca:3018 device
   7f422c5aec89 KVM: VMX: use correct vmcs_read/write for guest segment selector/base
   61157eabc44e KVM: s390: Disable dirty log retrieval for UCONTROL guests
   d44d2ea64003 serial: 8250_pci: Add MKS Tenta SCOM-0800 and SCOM-0801 cards
   eaae8c8005c1 tty: n_hdlc: get rid of racy n_hdlc.tbuf

(From OE-Core rev: 78ae0bb02175e601ca99387855a743a37294dee2)

Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-08-29 16:50:52 +01:00
Richard Purdie
88ad6d975e bitbake: wget: Fix handling of urls with user/password
URL decoding was improved in the core a while ago and this looks like
a leftover from those times which caused urls needing a user/password to
fail. Use the parameters from the core instead of the broken split
implementation.

[YOCTO #11262]

(Bitbake rev: 32a249cf33f79b579a2cf6224c7d23cdb20d376f)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-08-29 15:12:43 +01:00
Patrick Ohly
7d5822bf4c bitbake: codeparser.py: support deeply nested tokens
For shell constructs like
   echo hello & wait $!
the process_tokens() method ended up with a situation where "token"
in the "name, value = token" assignment was a list of tuples
and not the expected tuple, causing the assignment to fail.

There were already two for loops (one in _parse_shell(), one in
process_tokens()) which iterated over token lists. Apparently the
actual nesting can also be deeper.

Now there is just one such loop in process_token_list() which calls
itself recursively when it detects that a list entry is another list.

As a side effect (improvement?!) of the loop removal in
_parse_shell(), the local function definitions in process_tokens() get
executed less often.

Fixes: [YOCTO #10668]

(Bitbake rev: 887ea6d25cee5114365dfbf1130603599e13ee80)

Signed-off-by: Patrick Ohly <patrick.ohly@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-07-21 22:36:09 +01:00
Ross Burton
2e132efa2f libgcrypt: fix CVE-2017-7526
Fixes CVE-2017-7526, 'flush+reload side-channel attack on RSA secret keys dubbed
"Sliding right into disaster"'.

(From OE-Core rev: e3911133ee9aad7cc3ae89faea80a097f6614fab)

Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-07-19 11:30:27 +01:00
Ross Burton
bbe268e060 libgcrypt: fix CVE-2017-9526
In libgcrypt before 1.7.7, an attacker who learns the EdDSA session key (from
side-channel observation during the signing process) can easily recover the
long-term secret key. 1.7.7 makes a cipher/ecc-eddsa.c change to store this
session key in secure memory, to ensure that constant-time point operations are
used in the MPI library.

(From OE-Core rev: 04d7a4adafa09f9f3012c355f4f2f9728cb0b166)

Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-07-19 11:30:27 +01:00
Richard Purdie
fd7f2d644a bitbake: siggen: Make calc_taskhash match get_taskhash for file checksums
The code in these two functions is meant to be equivlanet in behaviour
but isn't. Add in code to ensure files that don't exist are handled
consistently by both functions. Users did report being able to generate
tracebacks otherwise.

(Bitbake rev: df69c0257aaa9f4e2f4a20d130b7bc0ce2ca0848)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-06-27 13:46:44 +01:00
Robert Yang
d4b41223d3 oe/path.py: fix for "Argument list too long"
Issue: LIN9-1648

Fixed when len(TMPDIR) = 410:
$ bitbake core-image-sato-sdk
[snip]
Subprocess output:
/bin/sh: /bin/cp: Argument list too long

ERROR: core-image-sato-sdk-1.0-r0 do_rootfs: Function failed: do_rootfs
[snip]

This is because "copyhardlinktree(src, dst)" does "cp -afl src/* dst",
while src/* is expanded to "src/file1 src/file2, src/file3..." which
causes the "Argument list too long", use ./* as src and change cwd in
subprocess.check_output() to fix the problem.

(From OE-Core rev: a3dc93eb25fba32109edd1db6e8766074fb52e4b)

(From OE-Core rev: befda6ce3fd916ab04c035d1d82ed173759f7f09)

Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-06-27 11:28:04 +01:00
Changhyeok Bae
a992a31803 ref-manual: uClibc Replaced by musl from Yocto 2.2
(From yocto-docs rev: e131c26ee1ab268679f7762dbe26760bd859e0e5)

Signed-off-by: Kristi Rifenbark <kristi.rifenbark@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-06-22 09:16:50 +01:00
Richard Purdie
b4cf48ecee package_ipk: Clean up Source entry in ipk packages
There is the potential for sensitive information to leak through the urls
there and removing it brings this into the behavior of the other package
backends since filtering it is likely error prone.

Since ipks don't appear to be generated at all if we don't set this, set
the field to the recipe name used (basename only, no paths). This avoids
information leaking. We may want to drop the field if opkg can allow that
at a future point but the recipe name is a suitable identifier for now.

Reported-by: Andrej Valek <andrej.valek@siemens.com>
(From OE-Core rev: 4c353eeff45f91533f22392f129bc5a477ee5207)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-06-16 10:21:06 +01:00
Leonardo Sandoval
cf781e2f9b scripts/lib/bsp/kernel.py: force patching when branch is machine branch is re-use
When a branch is re-used, the kernel tools turns off any patch pushing unless
'mark patching' is explicitly set.

[YOCTO #10674]

(From meta-yocto rev: 4f3cd59d76e3d8a43a4460528082c0086bdbba41)

Signed-off-by: Leonardo Sandoval <leonardo.sandoval.gonzalez@linux.intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-06-14 11:58:46 +01:00
Scott Rifenbark
e707865a6a yocto-project-qs, poky.ent: Fixed pip3 and pexpect package names
Fixes [YOCTO #11578]

The package names "pip3" and "pexpect" do not exist for Ubuntu
and Debian.  They need to be "python3-pip3" and "python3-pexpect".
I changed them in the poky.ent file and did some reformatting so
the install lines appear nice.  I updated the other distributions
as well.

(From yocto-docs rev: 43c92b88c40815d906cfc5fabb3190b0aa4778c7)

Signed-off-by: Scott Rifenbark <srifenbark@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-06-14 10:19:41 +01:00
Ed Bartosh
47fc2d6139 sstate.bbclass: check if mirror directory is writable
Commit 51edde6537 makes a wrong assumption
that SSTATE_MIRRORS have write permissions.

A mirror is by definition outside of it's user control. In my use case
it happens I does not have permissions to update the access time of the
dereferenced symbolic-link file.

Checked if file is writable before changing its atime.

Thanks to Paulo Neves for the patch.

[YOCTO #11307]

(From OE-Core rev: 112ae104287ad4078a9fa90fb2a42f4c814ef824)

Signed-off-by: Ed Bartosh <ed.bartosh@linux.intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-06-13 07:33:08 +01:00
Ross Burton
8a96509017 oeqa/selftest: lock down Meson git revision for reliability
The test_recipetool_create_github test fetches HEAD of the repository so
upstream changes can (and do) break the test.  Avoid these problems by passing
the rev= argument in the URL to lock the checkout to the same version that is
fetched in the github_tarball test.

Also pass the commands to runCmd() as a list instead of a string, the semicolon
in the URL needs more quotes if the shell is involved and passing a list
bypasses the shell entirely.

(From OE-Core rev: cbb5961d3db27f81967345a73267920f2623ccac)

Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-06-05 18:00:02 +01:00
Richard Purdie
4a48386e91 elfutils: update homepage and upstream souce
In git://sourceware.org/git/elfutils.git:
----------------
commit 1700fd25e6caf26663af2bd994d1d99fab9df59f
Author: Mark Wielaard <mark@klomp.org>
Date:   Sat Dec 24 22:31:41 2016 +0100

    http://elfutils.org/ is now hosted at http://sourceware.org/elfutils/

    fedorahosted used to be our home, but we are now hosted at sourceware.

    Change the elfutils project home to http://elfutils.org/
    Point hosted services (email, release, git, bug tracker and web pages)
    to https://sourceware.org/elfutils/

    Move design notes from README to NOTES.
    Add URLs for home, releases, bugs, git and mailinglist to README.

    Make the --version output of all tools the same by using a common
    print_version function and update the publicly shown copyright holder
    to the elfutils developers.

    Signed-off-by: Mark Wielaard <mark@klomp.org>
------------------

Based on a patch from Hongxu Jia <hongxu.jia@windriver.com>

(From OE-Core rev: 4ee8ad29e0eb3584eb8c6e1ba21a5a18d7a59714)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-06-05 18:00:02 +01:00
Choong YinThong
3643da7804 libnewt: replace fedorahosted.org SRC_URI with pagure.io source
fedorahosted.org was retired on March 1st, 2017. This is to
update the SRC_URI to point to pagure.io. pagure.io is a
replacement for fedorahosted.

[YOCTO #11226]

(From OE-Core rev: b85905bc8b845c9da7d2a086ea239ec00d5142e3)

(From OE-Core rev: 8ae35a4391bd0313cdc8091140fa8c8648122161)

Signed-off-by: Choong YinThong <yin.thong.choong@intel.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-06-05 18:00:02 +01:00
Choong YinThong
61b729a3a8 xmlto: replace fedorahosted.org SRC_URI with pagure.io source
fedorahosted.org was retired on March 1st, 2017. This is to
update the SRC_URI to point to pagure.io. pagure.io is a
replacement for fedorahosted.

[YOCTO #11226]

(From OE-Core rev: 79ae1e98a7c3fd4c732ea4cd0b3099d4e319a111)

(From OE-Core rev: 6785157e7b30ca112ec5c65487a9e7e65b9dd5de)

Signed-off-by: Choong YinThong <yin.thong.choong@intel.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-06-05 18:00:02 +01:00
Choong YinThong
f7c6d8da56 libuser: replace fedorahosted.org SRC_URI with pagure.io source
fedorahosted.org was retired on March 1st, 2017. This is to
update the SRC_URI to point to pagure.io. pagure.io is a
replacement for fedorahosted.

[YOCTO #11226]

(From OE-Core rev: bbe3cde5fc2102fd84ba065ed14f2732bcd0d420)

(From OE-Core rev: 34312ac6edf13dc3e3d8f31b2a07df9044a9a8aa)

Signed-off-by: Choong YinThong <yin.thong.choong@intel.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-06-05 18:00:01 +01:00
Choong YinThong
a55be63437 liberation-fonts: replace fedorahosted.org SRC_URI with pagure.io source
fedorahosted.org was retired on March 1st, 2017. This is to
update the SRC_URI to point to pagure.io. pagure.io is a
replacement for fedorahosted.

[YOCTO #11226]

(From OE-Core rev: 441ad240db4ce64d854e263e14dc6a1752aed956)

(From OE-Core rev: 516d55d3550d86c7458d20cea1adca7dc30ab66b)

Signed-off-by: Choong YinThong <yin.thong.choong@intel.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-06-05 18:00:01 +01:00
Choong YinThong
7ff5544bf3 cronie: replace fedorahosted.org SRC_URI with github.com source
fedorahosted.org was retired on March 1st, 2017. This is to
update the SRC_URI to point to github.com.

[YOCTO #11226]

(From OE-Core rev: b0703175ed650d89870309e4065cda917199ac93)

(From OE-Core rev: a34ca1b1ee4c6e39a7fbc10fc9fc7aebfdbe8abc)

Signed-off-by: Choong YinThong <yin.thong.choong@intel.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-06-05 18:00:01 +01:00
Choong YinThong
96bdd99f36 chkconfig: replace fedorahosted.org SRC_URI with github.com source
fedorahosted.org was retired on March 1st, 2017. This is to update
the SRC_URI to point to github.com.

[YOCTO #11226]

(From OE-Core rev: 0fb5427937576fe46d463b9c9953d0bcdc1f256a)

(From OE-Core rev: 5d57ccab9720f6c75cfefdf0cb153007d79beb2e)

Signed-off-by: Choong YinThong <yin.thong.choong@intel.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-06-05 18:00:01 +01:00
Choong YinThong
b6a1004c73 selftest/recipetool: replace fedorahosted.org SRC_URI with github.com source
fedorahosted.org was retired on March 1st, 2017. This is to
update the SRC_URI to point to github.com.

[YOCTO #11226]

(From OE-Core rev: 9b3c9193d4a04061e64e43d55782a4d73ee166ad)

(From OE-Core rev: c9c0528d7f298dae4f543ab4006057022abe71e5)

Signed-off-by: Choong YinThong <yin.thong.choong@intel.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-06-05 18:00:01 +01:00
Joshua Lock
21aa71dbaa perf: add perf-feature for systemtap
Based on OE-Core rev: 8aafed5f4757550f2ff688e1b8981e5e8e6e3428 if systemtap
isn't disabled it's possible to race with systemtap headers being present
during autodetection and disappearing during the build:

    tests/sdt.c:14:21: fatal error: sys/sdt.h: No such file or directory
     #include <sys/sdt.h>

(From OE-Core rev: b206497bf2a68b1b009ae5a6b1c5a29df3966443)

Signed-off-by: Joshua Lock <joshua.g.lock@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-06-01 13:50:38 +01:00
Richard Purdie
d05941ae45 build-appliance-image: Update to morty head revision
(From OE-Core rev: 8daed12b4327e4c362a7af4ddc38e7a9cea2c939)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-05-29 00:21:14 +01:00
Chang Rebecca Swee Fun
e92165f5ce cryptodev-linux: update SRC_URI
Gna! project announced that the download site from gna.org HTTP server
will soon be closing down. We have verified that the site is no longer
accessible without network proxy cache. We need to update SRC_URI to
point to new alternative (nwl.cc HTTP server) in order to avoid fetcher
issues in future.

[YOCTO #11575]

(From OE-Core rev: eaf1f56a865f8b71ef3ff4e3108b77fcc690d151)

Signed-off-by: Chang Rebecca Swee Fun <rebecca.swee.fun.chang@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-05-27 14:52:35 +01:00
Mariano Lopez
48a8c893ad selftest: Avoid sstate corruption by calling cleansstate
Currently selftest doesn't use sstates because some tests
clean sstate cache; using sstates would give a performance
boost instead of building everything from scratch.

With this sstates are not corrupted using different methods
depending on tests:

devtool: These tests needed to delete the cache so SSTATE_DIR
as SSTATE_MIRRORS and set a temporal SSTATE_DIR.

sstatetests: This module already used a temporal SSTATE_DIR, so
just set up the SSTATE_MIRRORS.

Rest: Removed cleansstate, some of them required to force a
certain task, others were just removed or changed for another
task.

[YOCTO #10929]

(From OE-Core rev: 62c61087a10cc3b26fbff32c9e2efd1704a39724)

(From OE-Core rev: 44ca8b1c23e4b2cf470e9be42705e3cca23b7f85)

Signed-off-by: Mariano Lopez <mariano.lopez@linux.intel.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-05-27 00:21:04 +01:00
Richard Purdie
078915fbf5 selftest: Disable SSTATE_MIRRORS for sstate signing test
Building ed into an sstate mirror, then leaving it enabled for
oe-selftest -r signing.Signing.test_signing_sstate_archive results in:

NOTE: recipe ed-1.14.1-r0: task do_populate_lic_setscene: Started
WARNING: ed-1.14.1-r0 do_populate_lic_setscene: Failed to fetch URL file://29/sstate:ed::1.14.1:r0::3:290bbc39f3b25cc27028dafce4b5aa48_populate_lic.tgz.sig;downloadfilename=29/sstate:ed::1.14.1:r0::3:290bbc39f3b25cc27028dafce4b5aa48_populate_lic.tgz.sig, attempting MIRRORS if available
ERROR: ed-1.14.1-r0 do_populate_lic_setscene: Fetcher failure: Unable to find file file://29/sstate:ed::1.14.1:r0::3:290bbc39f3b25cc27028dafce4b5aa48_populate_lic.tgz.sig;downloadfilename=29/sstate:ed::1.14.1:r0::3:290bbc39f3b25cc27028dafce4b5aa48_populate_lic.tgz.sig anywhere. The paths that were searched were:
    /media/build1/poky/build/test-sstate
    /media/build1/poky/build/test-sstate
WARNING: ed-1.14.1-r0 do_populate_lic_setscene: Cannot verify signature on sstate package /media/build1/poky/build/test-sstate/29/sstate:ed::1.14.1:r0::3:290bbc39f3b25cc27028dafce4b5aa48_populate_lic.tgz
NOTE: recipe ed-1.14.1-r0: task do_populate_lic_setscene: Succeeded

so we need to disable SSTATE_MIRRORS for this test.

(From OE-Core rev: 2ce9962851fe58c099599679340fd87e90f426ec)

(From OE-Core rev: 9bb708cf31850f5a3e53660ee9ea5a9ba7615e43)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-05-27 00:15:04 +01:00
Richard Purdie
3e5a09491d build-appliance-image: Update to morty head revision
(From OE-Core rev: ce06f3a0c9859df1f897583659f836234c47d2d7)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-05-25 17:40:57 +01:00
Richard Purdie
8bbf2e6903 poky: Update distro version to 2.2.2
(From meta-yocto rev: 6ef1a11d63f08771668c8d52c7359a35b104e2f1)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-05-25 17:40:46 +01:00
Ross Burton
c2ade72828 oeqa/selftest: remove test_sanity_unsafe_binary_references
This test was attempting to exercise a broken test, for some reason this broke
with patches under review but investigation revealed that the test itself is
broken.  The test has been removed, so there's no need to test it.

(From OE-Core rev: 4f5f552cd6601ba244ef4efc782616bc477e1340)

(From OE-Core rev: 0b9bb6d9ec4e030ab64bac73680df4657cb7d066)

Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-05-25 17:38:36 +01:00
Ross Burton
00966fd90d insane: remove broken unsafe-references-in-binaries test
This test aims to detect binaries in /bin which link to libraries in /usr/lib,
for the case where the user has /usr on a separate filesystem to /.

However it doesn't scan both image/ and the sysroot, so if a binary in /bin
links to a library in /usr/lib that was built by the same recipe then it will
error out.

This test isn't enabled by default, and because of this serious bug I suspect
nobody else is enabling it either.  As /usr being on a separate partition to /
is a very rare configuration these days I think we should delete the test: if
someone cares sufficiently they should write a test that actually works.

(From OE-Core rev: a6af5bbf3dad6f0951c67a0aae13ef86a8906893)

(From OE-Core rev: 2f5b5685f75fc63489b628b540fcdd4c7cb27096)

Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-05-25 17:38:36 +01:00
Alexander Kanavin
e7f948f28a selftest: do not perform a full build in test_continue
This was fetching and building the toolchain and everything else
against empty download dir and sstate cache, and so was enormously slow.
The test does not need that, it only checks that one fetch task fails and
another succeeds when using bitbake's -k option.

(From OE-Core rev: 6c69b5edc5711d2e5304a931e43eba562a095191)

Signed-off-by: Alexander Kanavin <alexander.kanavin@linux.intel.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-05-25 17:38:36 +01:00
Scott Rifenbark
78890ea227 documentation: Prepared for YP 2.2.2 release of the manuals
Changes include:

 * poky.ent - changing variables for 2.2.2
 * mega-manual.sed - updated "2.2.1" to "2.2.2" for links
 * *.xml - Changed all the manual revision tables to say
   "June 2017" for now.

(From yocto-docs rev: 9f3d983b754398b383b754df74d09fa17911137f)

Signed-off-by: Scott Rifenbark <srifenbark@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-05-18 13:18:42 +01:00
Catalin Enache
1fb5079557 ghostscript : CVE-2016-10219, CVE-2016-10220, CVE-2017-5951
The intersect function in base/gxfill.c in Artifex Software, Inc. Ghostscript
9.20 allows remote attackers to cause a denial of service (divide-by-zero
error and application crash) via a crafted file.

The gs_makewordimagedevice function in base/gsdevmem.c in Artifex Software, Inc.
Ghostscript 9.20 allows remote attackers to cause a denial of service (NULL
pointer dereference and application crash) via a crafted file that is
mishandled in the PDF Transparency module.

The mem_get_bits_rectangle function in base/gdevmem.c in Artifex Software, Inc.
Ghostscript 9.20 allows remote attackers to cause a denial of service (NULL
pointer dereference and application crash) via a crafted file.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-10219
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-10220
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-5951

Upstream patches:
http://git.ghostscript.com/?p=ghostpdl.git;h=4bef1a1d32e29b68855616020dbff574b9cda08f
http://git.ghostscript.com/?p=ghostpdl.git;h=daf85701dab05f17e924a48a81edc9195b4a04e8
http://git.ghostscript.com/?p=ghostpdl.git;h=bfa6b2ecbe48edc69a7d9d22a12419aed25960b8

(From OE-Core rev: 6679a4d4379f6f18554ed0042546cce94d5d0b19)

(From OE-Core rev: 55fa8b210139509859258c0ee11b3534f10fa509)

Signed-off-by: Catalin Enache <catalin.enache@windriver.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-05-18 13:07:34 +01:00