Re: [OE-core] [PATCH 0/9] Jethro pull request

[Mittal, AnujX]

Hi,

> -Original Message-
> From: openembedded-core-boun...@lists.openembedded.org
> [mailto:openembedded-core-boun...@lists.openembedded.org] On Behalf Of
> Armin Kuster
> Sent: Sunday, September 25, 2016 11:05 PM
> To: akus...@mvista.com; openembedded-core@lists.openembedded.org
> Subject: [OE-core] [PATCH 0/9] Jethro pull request
> 
> Please consider these changes for Jethro
> 
> The following changes since commit
> c9c85df86cd2270b144fa824ef76adedd3636c8a:
> 
>   util-linux: Security fix for CVE-2016-5011 (2016-09-23 23:21:43 +0100)
> 
> are available in the git repository at:
> 
>   git://git.openembedded.org/openembedded-core-contrib akuster/jethro-next
>   http://cgit.openembedded.org/cgit.cgi/openembedded-core-
> contrib/log/?h=akuster/jethro-next
> 
> Armin Kuster (9):
>   openssl: Security fix CVE-2016-2180
>   openssl: Security fix CVE-2016-8181
>   openssl: Security fix CVE-2016-2182
>   openssl: Security fix CVE-2016-6304

I think there's a typo here. Shouldn't this be CVE-2016-6302?

>   openssl: Security fix CVE-2016-6303
>   openssl: Security fix CVE-2016-6304
>   openssl: Security fix CVE-2016-6303

And, this CVE-2016-6306?

>   tzdata: update to 2016f
>   tzcode-native: update to 2016f
> 
>  .../openssl/openssl/CVE-2016-2180.patch|  44 
>  .../openssl/openssl/CVE-2016-2181_p1.patch |  91 
>  .../openssl/openssl/CVE-2016-2181_p2.patch | 239
> +
>  .../openssl/openssl/CVE-2016-2181_p3.patch |  30 +++
>  .../openssl/openssl/CVE-2016-2182.patch|  70 ++
>  .../openssl/openssl/CVE-2016-6302.patch|  53 +
>  .../openssl/openssl/CVE-2016-6303.patch|  36 
>  .../openssl/openssl/CVE-2016-6304.patch|  75 +++
>  .../openssl/openssl/CVE-2016-6306.patch|  71 ++
>  .../recipes-connectivity/openssl/openssl_1.0.2h.bb |   9 +
>  ...code-native_2016e.bb => tzcode-native_2016f.bb} |   8 +-
>  .../tzdata/{tzdata_2016e.bb => tzdata_2016f.bb}|   4 +-
>  12 files changed, 724 insertions(+), 6 deletions(-)
>  create mode 100644 meta/recipes-connectivity/openssl/openssl/CVE-2016-
> 2180.patch
>  create mode 100644 meta/recipes-connectivity/openssl/openssl/CVE-2016-
> 2181_p1.patch
>  create mode 100644 meta/recipes-connectivity/openssl/openssl/CVE-2016-
> 2181_p2.patch
>  create mode 100644 meta/recipes-connectivity/openssl/openssl/CVE-2016-
> 2181_p3.patch
>  create mode 100644 meta/recipes-connectivity/openssl/openssl/CVE-2016-
> 2182.patch
>  create mode 100644 meta/recipes-connectivity/openssl/openssl/CVE-2016-
> 6302.patch
>  create mode 100644 meta/recipes-connectivity/openssl/openssl/CVE-2016-
> 6303.patch
>  create mode 100644 meta/recipes-connectivity/openssl/openssl/CVE-2016-
> 6304.patch
>  create mode 100644 meta/recipes-connectivity/openssl/openssl/CVE-2016-
> 6306.patch
>  rename meta/recipes-extended/tzcode/{tzcode-native_2016e.bb => tzcode-
> native_2016f.bb} (68%)
>  rename meta/recipes-extended/tzdata/{tzdata_2016e.bb => tzdata_2016f.bb}
> (98%)
> 
> --
> 2.7.4
> 
> --
> ___
> Openembedded-core mailing list
> Openembedded-core@lists.openembedded.org
> http://lists.openembedded.org/mailman/listinfo/openembedded-core
-- 
___
Openembedded-core mailing list
Openembedded-core@lists.openembedded.org
http://lists.openembedded.org/mailman/listinfo/openembedded-core

Re: [OE-core] [PATCH 0/6] [jethro] Consolidated pull

[Mittal, AnujX]

Just wanted to check - when will these changes be merged in Jethro?

Thanks,

> -Original Message-
> From: openembedded-core-boun...@lists.openembedded.org
> [mailto:openembedded-core-boun...@lists.openembedded.org] On Behalf Of
> Robert Yang
> Sent: Tuesday, July 05, 2016 2:44 PM
> To: openembedded-core@lists.openembedded.org
> Subject: [OE-core] [PATCH 0/6] [jethro] Consolidated pull
> 
> The following changes since commit
> 1f4bfa33073584c25396d74f3929f263f3df188b:
> 
>   toasterconf.json: exclude releases Toaster can't build (2016-06-03 13:36:19
> +0100)
> 
> are available in the git repository at:
> 
>   git://git.openembedded.org/openembedded-core-contrib rbt/jethro-next
>   http://cgit.openembedded.org/cgit.cgi/openembedded-core-
> contrib/log/?h=rbt/jethro-next
> 
> Anuj Mittal (1):
>   gcc: make sure header path is set correctly
> 
> Armin Kuster (2):
>   tzcode: update to 2016e
>   tzdata: update to 2016e
> 
> Enrico Jorns (1):
>   perl-ptest.inc: fix tar call to prevent objcopy failure
> 
> George McCollister (1):
>   wic: fix path parsing, use last occurrence
> 
> Nicolas Dechesne (1):
>   bluez5: move btmgmt to common READLINE section
> 
>  meta/recipes-connectivity/bluez5/bluez5_5.33.bb  | 2 +-
>  meta/recipes-devtools/gcc/gcc-target.inc | 1 -
>  meta/recipes-devtools/perl/perl-ptest.inc| 4 ++--
>  .../tzcode/{tzcode-native_2016d.bb => tzcode-native_2016e.bb}| 9 
> +
>  .../recipes-extended/tzdata/{tzdata_2016d.bb => tzdata_2016e.bb} | 4 ++--
>  scripts/lib/wic/plugin.py| 2 +-
>  6 files changed, 11 insertions(+), 11 deletions(-)
>  rename meta/recipes-extended/tzcode/{tzcode-native_2016d.bb => tzcode-
> native_2016e.bb} (67%)
>  rename meta/recipes-extended/tzdata/{tzdata_2016d.bb => tzdata_2016e.bb}
> (98%)
> 
> --
> 2.8.0
> 
> --
> ___
> Openembedded-core mailing list
> Openembedded-core@lists.openembedded.org
> http://lists.openembedded.org/mailman/listinfo/openembedded-core
-- 
___
Openembedded-core mailing list
Openembedded-core@lists.openembedded.org
http://lists.openembedded.org/mailman/listinfo/openembedded-core

Re: [OE-core] [PATCH] gcc: make sure header path is set correctly

[Mittal, AnujX]

> -Original Message-
> From: Khem Raj [mailto:raj.k...@gmail.com]
> Sent: Thursday, June 16, 2016 10:47 AM
> To: Mittal, AnujX <anujx.mit...@intel.com>
> Cc: openembedded-core@lists.openembedded.org
> Subject: Re: [OE-core] [PATCH] gcc: make sure header path is set correctly
> 
> 
> > On Jun 14, 2016, at 2:10 AM, Anuj Mittal <anujx.mit...@intel.com> wrote:
> >
> > We're setting the native header paths in do_configure_prepend,
> > and don't need to set them again here.
> >
> > This results in gcc-target not being able to locate the headers
> > and not being able to detect glibc version, which in turn
> > results in SSP support not getting detected even though it's available
> > in libc.
> >
> 
> what is this being set to in do_conigure_prepend ?
> that value may not be right for target recipe. For target we are setting 
> sysroot to /
> and if we do not have this option set then it will set native-system-headers 
> dir to
> be
> / relative and not cross sysroot relative. So it will use your build hosts 
> installation
> for these headers which is not correct either. Have you looked deeper into 
> why its
> not
> finding ssp support inside the cross sysroot?

It's being set to /usr/include:

# teach gcc to find correct target includedir when checking libc ssp 
support
mkdir -p ${B}/gcc
echo "NATIVE_SYSTEM_HEADER_DIR = ${SYSTEMHEADERS}" > ${B}/gcc/t-oe
cat ${S}/gcc/defaults.h | grep -v "\#endif.*GCC_DEFAULTS_H" > 
${B}/gcc/defaults.h.new
cat >>${B}/gcc/defaults.h.new <<_EOF
#define NATIVE_SYSTEM_HEADER_DIR "${SYSTEMHEADERS}"
#define STANDARD_STARTFILE_PREFIX_1 "${SYSTEMLIBS}"
#define STANDARD_STARTFILE_PREFIX_2 "${SYSTEMLIBS1}"
#define SYSTEMLIBS_DIR "${SYSTEMLIBS}"
#endif /* ! GCC_DEFAULTS_H */
_EOF
mv ${B}/gcc/defaults.h.new ${B}/gcc/defaults.h

Having set NATIVE_SYSTEM_HEADER_DIR again in gcc-target just results in gcc not 
being able to find features.h at all, which is present in the target sysroot.

Because it's not able to find features.h, it just assumes that glibc version 
available is 0 and hence disables ssp support. Setting NATIVE_SYSTEM_HEADER_DIR 
to /usr/include just makes sure that target_system_dir in configure script is 
set to right header path within target sysroot & it can pick up the right 
header relative to the sysroot.

When configure option is passed, gcc detects target_system_dir (where 
features.h is present) to be //usr/include 
instead of /usr/include.

I've made sure that its picking up the header from target sysroot rather than 
my host. My host machine has glibc 2.19 whereas the target sysroot has 2.22

Thanks,
Anuj
-- 
___
Openembedded-core mailing list
Openembedded-core@lists.openembedded.org
http://lists.openembedded.org/mailman/listinfo/openembedded-core

Re: [OE-core] [PATCH] gcc: make sure header path is set correctly

[Mittal, AnujX]

> -Original Message-
> From: Mittal, AnujX
> Sent: Tuesday, June 14, 2016 5:10 PM
> To: openembedded-core@lists.openembedded.org
> Cc: Mittal, AnujX <anujx.mit...@intel.com>
> Subject: [PATCH] gcc: make sure header path is set correctly
> 
> We're setting the native header paths in do_configure_prepend,
> and don't need to set them again here.
> 
> This results in gcc-target not being able to locate the headers
> and not being able to detect glibc version, which in turn
> results in SSP support not getting detected even though it's available
> in libc.
> 
> Signed-off-by: Anuj Mittal <anujx.mit...@intel.com>

Can this be considered for merge to krogoth and Jethro as well? 

Please let me know if I should be sending a separate patch for it.

Thanks,

> ---
>  meta/recipes-devtools/gcc/gcc-target.inc | 1 -
>  1 file changed, 1 deletion(-)
> 
> diff --git a/meta/recipes-devtools/gcc/gcc-target.inc b/meta/recipes-
> devtools/gcc/gcc-target.inc
> index a960ed4..37c5c62 100644
> --- a/meta/recipes-devtools/gcc/gcc-target.inc
> +++ b/meta/recipes-devtools/gcc/gcc-target.inc
> @@ -4,7 +4,6 @@ require gcc-configure-common.inc
>  EXTRA_OECONF_PATHS = "\
>  --with-sysroot=/ \
>  --with-build-sysroot=${STAGING_DIR_TARGET} \
> ---with-native-system-header-
> dir=${STAGING_DIR_TARGET}${target_includedir} \
>  --with-gxx-include-dir=${includedir}/c++/${BINV} \
>  "
> 
> --
> 1.9.1

-- 
___
Openembedded-core mailing list
Openembedded-core@lists.openembedded.org
http://lists.openembedded.org/mailman/listinfo/openembedded-core

Re: [OE-core] [meta-intel][master][jethro][PATCH 1/1] tune-corei7.inc: Fix PACKAGE_EXTRA_ARCHS for corei7-32

[Mittal, AnujX]

Hi Robert,

> Subject: [meta-intel][master][jethro][PATCH 1/1] tune-corei7.inc: Fix
> PACKAGE_EXTRA_ARCHS for corei7-32
> 
> From: Chang Rebecca Swee Fun 
> 
> Change the name to core2-32 from core2.
> 
> There's no AVAILTUNES with the name core2. Make sure that we specify the 
> correct
> TUNE name so PACKAGE_EXTRA_ARCHS is expanded correctly.
> 
> [ YOCTO #9197 ]

Can this be merged to Jethro too? Thanks.

> 
> Signed-off-by: Chang Rebecca Swee Fun 
> Signed-off-by: Anuj Mittal 
> ---
>  meta/conf/machine/include/tune-corei7.inc | 2 +-
>  1 file changed, 1 insertion(+), 1 deletion(-)
> 
> diff --git a/meta/conf/machine/include/tune-corei7.inc
> b/meta/conf/machine/include/tune-corei7.inc
> index 153a21b..6edfb68 100644
> --- a/meta/conf/machine/include/tune-corei7.inc
> +++ b/meta/conf/machine/include/tune-corei7.inc
> @@ -21,7 +21,7 @@ AVAILTUNES += "corei7-32"
>  TUNE_FEATURES_tune-corei7-32 = "${TUNE_FEATURES_tune-x86} corei7"
>  BASE_LIB_tune-corei7-32 = "lib"
>  TUNE_PKGARCH_tune-corei7-32 = "corei7-32"
> -PACKAGE_EXTRA_ARCHS_tune-corei7-32 =
> "${PACKAGE_EXTRA_ARCHS_tune-core2} corei7-32"
> +PACKAGE_EXTRA_ARCHS_tune-corei7-32 =
> "${PACKAGE_EXTRA_ARCHS_tune-core2-32} corei7-32"
>  QEMU_EXTRAOPTIONS_corei7-32 = " -cpu Nehalem,check=false"
> 
>  AVAILTUNES += "corei7-64"
> --
> 1.9.1

-- 
___
Openembedded-core mailing list
Openembedded-core@lists.openembedded.org
http://lists.openembedded.org/mailman/listinfo/openembedded-core

Re: [OE-core] [meta-intel][master][jethro][PATCH 1/1] tune-corei7.inc: Fix PACKAGE_EXTRA_ARCHS for corei7-32

[Mittal, AnujX]

Ping

> -Original Message-
> From: Mittal, AnujX
> Sent: Wednesday, March 02, 2016 5:56 PM
> To: openembedded-core@lists.openembedded.org
> Cc: Chang, Rebecca Swee Fun <rebecca.swee.fun.ch...@intel.com>; Mittal, AnujX
> <anujx.mit...@intel.com>
> Subject: [meta-intel][master][jethro][PATCH 1/1] tune-corei7.inc: Fix
> PACKAGE_EXTRA_ARCHS for corei7-32
> 
> From: Chang Rebecca Swee Fun <rebecca.swee.fun.ch...@intel.com>
> 
> Change the name to core2-32 from core2.
> 
> There's no AVAILTUNES with the name core2. Make sure that we specify the 
> correct
> TUNE name so PACKAGE_EXTRA_ARCHS is expanded correctly.
> 
> [ YOCTO #9197 ]
> 
> Signed-off-by: Chang Rebecca Swee Fun <rebecca.swee.fun.ch...@intel.com>
> Signed-off-by: Anuj Mittal <anujx.mit...@intel.com>
> ---
>  meta/conf/machine/include/tune-corei7.inc | 2 +-
>  1 file changed, 1 insertion(+), 1 deletion(-)
> 
> diff --git a/meta/conf/machine/include/tune-corei7.inc
> b/meta/conf/machine/include/tune-corei7.inc
> index 153a21b..6edfb68 100644
> --- a/meta/conf/machine/include/tune-corei7.inc
> +++ b/meta/conf/machine/include/tune-corei7.inc
> @@ -21,7 +21,7 @@ AVAILTUNES += "corei7-32"
>  TUNE_FEATURES_tune-corei7-32 = "${TUNE_FEATURES_tune-x86} corei7"
>  BASE_LIB_tune-corei7-32 = "lib"
>  TUNE_PKGARCH_tune-corei7-32 = "corei7-32"
> -PACKAGE_EXTRA_ARCHS_tune-corei7-32 =
> "${PACKAGE_EXTRA_ARCHS_tune-core2} corei7-32"
> +PACKAGE_EXTRA_ARCHS_tune-corei7-32 =
> "${PACKAGE_EXTRA_ARCHS_tune-core2-32} corei7-32"
>  QEMU_EXTRAOPTIONS_corei7-32 = " -cpu Nehalem,check=false"
> 
>  AVAILTUNES += "corei7-64"
> --
> 1.9.1

-- 
___
Openembedded-core mailing list
Openembedded-core@lists.openembedded.org
http://lists.openembedded.org/mailman/listinfo/openembedded-core