On 23.09.21 00:14, Saul Wold wrote:
When the collect_dep_sources() runs, it collects sources from both native
and non-native recipes. Later when the GENERATED_FROM matching occurs it
may find the file (via checksum) from the native recipe since it's the
same checksum as the target file. The that are generated DocumentRefs
point to the native recipe rather than the target recipe DocumentRef.
Signed-off-by: Saul Wold <saul.w...@windriver.com>
---
meta/classes/create-spdx.bbclass | 4 ++++
1 file changed, 4 insertions(+)
diff --git a/meta/classes/create-spdx.bbclass b/meta/classes/create-spdx.bbclass
index 3c73c21c04..8f7fae43f1 100644
--- a/meta/classes/create-spdx.bbclass
+++ b/meta/classes/create-spdx.bbclass
@@ -336,6 +336,10 @@ def collect_dep_sources(d, dep_recipes):
sources = {}
for dep in dep_recipes:
+ # Don't collect sources from native recipes as they
+ # match non-native sources also.
+ if "-native" in dep.recipe.name:
That looks a bit too fuzzy to me - I would have expected
if dep.recipe.name.endswith("-native"):
here. Otherwise this is very prone to false positives
+ continue
recipe_files = set(dep.recipe.hasFiles)
for spdx_file in dep.doc.files:
-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#156257):
https://lists.openembedded.org/g/openembedded-core/message/156257
Mute This Topic: https://lists.openembedded.org/mt/85801677/21656
Group Owner: openembedded-core+ow...@lists.openembedded.org
Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub
[arch...@mail-archive.com]
-=-=-=-=-=-=-=-=-=-=-=-
