[OE-core][kirkstone][PATCH v2] shadow: backport patch to fix CVE-2023-29383

2023-04-18 Thread Xiangyu Chen
From: Xiangyu Chen The fix of CVE-2023-29383.patch contains a bug that it rejects all characters that are not control ones, so backup another patch named "0001-Overhaul-valid_field.patch" from upstream to fix it. Signed-off-by: Xiangyu Chen --- Changes v1->v2: 1. Based on latest oe-core commi

[OE-core] [PATCH] apt-util: Fix ptest on musl

2023-04-18 Thread Khem Raj
Signed-off-by: Khem Raj --- ...ion-Check-if-transform-is-supported-.patch | 37 +++ meta/recipes-support/apr/apr-util_1.6.3.bb| 1 + 2 files changed, 38 insertions(+) create mode 100644 meta/recipes-support/apr/apr-util/0001-test_transformation-Check-if-transform-is-support

Re: [OE-core][kirkstone][PATCH] go-runtime: Security fix for CVE-2022-41722

2023-04-18 Thread Shubham Kulkarni
Thank you Steve! Apologies for the inconvenience caused. I will take care next time. Thanks, Shubham On Tue, Apr 18, 2023 at 8:04 PM Steve Sakoman wrote: > There were a couple of issues with this patch. I've fixed both so no > need to resubmit, but in the future please be sure to check the > f

[OE-core][PATCH v2] shadow: backport patch to fix CVE-2023-29383

2023-04-18 Thread Xiangyu Chen
From: Xiangyu Chen The fix of CVE-2023-29383.patch contains a bug that it rejects all characters that are not control ones, so backup another patch named "0001-Overhaul-valid_field.patch" from upstream to fix it. Signed-off-by: Xiangyu Chen --- Changes v1->v2: 1. Based on latest oe-core commi

Re: [OE-core] [kirkstone][PATCH] curl: Fix CVE-2023-27536

2023-04-18 Thread Yu, Mingli
On 4/18/23 00:42, Steve Sakoman wrote: CAUTION: This email comes from a non Wind River email account! Do not click links or open attachments unless you recognize the sender and know the content is safe. There is also a patch submitted today that fixes this CVE as well as two others: https://l

[OE-core] [PATCH v2] report-error: make it catch ParseError error

2023-04-18 Thread Yu, Mingli
From: Mingli Yu Make the report-error catch ParseError error as below and then we can check it directly via error report web. ParseError at /build/layers/oe-core/meta/recipes-support/curl/curl_7.88.1.bb:32: unparsed line: 'PACKAGECONFIG[ares] = "--enable-ares,--disable-ares,c-ares,,,threaded-

[OE-core] [PATCH V2] coreutils: delete gcc parameter for ptest

2023-04-18 Thread qi...@fujitsu.com
From: Qiu Tingting If gcc is installed in image, ptest result has 4 ERROR. ERROR: tests/rm/r-root.sh ERROR: tests/rm/rm-readdir-fail.sh ERROR: tests/cp/nfs-removal-race.sh ERROR: tests/ls/getxattr-speedup.sh r-root.log as an example: -- k.c:1:10: fatal error:

Re: [OE-core] [PATCH] parted: upgrade 3.5 -> 3.6

2023-04-18 Thread Khem Raj
fails during do_patch see https://autobuilder.yoctoproject.org/typhoon/#/builders/88/builds/2669/steps/14/logs/stdio On Mon, Apr 17, 2023 at 1:08 AM wangmy wrote: > > From: Wang Mingyu > > Signed-off-by: Wang Mingyu > --- > meta/recipes-extended/parted/{parted_3.5.bb => parted_3.6.bb} | 2 +- >

Re: [OE-core] [PATCH 09/14] image-artifact-names: add IMAGE_MACHINE_SUFFIX variable

2023-04-18 Thread Paul Eggleton
Hi Martin On Tuesday, 14 March 2023 01:15:36 NZST Martin Jansa wrote: > * to make it easier for projects to avoid default -${MACHINE} suffix if > the ${MACHINE} named DEPLOY_DIR_IMAGE works better for them > > * also use IMAGE_LINK_NAME in IMAGE_NAME to make it more clear > that IMAGE_NAME is

Re: [OE-core] [PATCH] make-mod-scripts: preserve libraries when rm_work is used

2023-04-18 Thread Bruce Ashfield
On Tue, Apr 18, 2023 at 5:04 PM Richard Purdie wrote: > > On Tue, 2023-04-18 at 16:25 -0400, Bruce Ashfield wrote: > > On Mon, Apr 17, 2023 at 6:31 PM Jose Quaresma > > wrote: > > > > > > > > > > > > Richard Purdie escreveu no dia > > > segunda, 17/04/2023 à(s) 20:51: > > > > > > > > On Sun, 2

Re: [OE-core] [PATCH] make-mod-scripts: preserve libraries when rm_work is used

2023-04-18 Thread Richard Purdie
On Tue, 2023-04-18 at 16:25 -0400, Bruce Ashfield wrote: > On Mon, Apr 17, 2023 at 6:31 PM Jose Quaresma wrote: > > > > > > > > Richard Purdie escreveu no dia > > segunda, 17/04/2023 à(s) 20:51: > > > > > > On Sun, 2023-04-16 at 12:30 +0200, Christoph Lauer wrote: > > > > From: Christoph Lau

Re: [OE-core] [PATCH] make-mod-scripts: preserve libraries when rm_work is used

2023-04-18 Thread Bruce Ashfield
On Tue, Apr 18, 2023 at 4:25 PM Bruce Ashfield via lists.openembedded.org wrote: > > On Mon, Apr 17, 2023 at 6:31 PM Jose Quaresma wrote: > > > > > > > > Richard Purdie escreveu no dia > > segunda, 17/04/2023 à(s) 20:51: > >> > >> On Sun, 2023-04-16 at 12:30 +0200, Christoph Lauer wrote: > >> >

Re: [OE-core] [PATCH] make-mod-scripts: preserve libraries when rm_work is used

2023-04-18 Thread Bruce Ashfield
On Mon, Apr 17, 2023 at 6:31 PM Jose Quaresma wrote: > > > > Richard Purdie escreveu no dia segunda, > 17/04/2023 à(s) 20:51: >> >> On Sun, 2023-04-16 at 12:30 +0200, Christoph Lauer wrote: >> > From: Christoph Lauer >> > >> > With rm_work active, external module signing throws an error: >> > s

Re: [OE-core] [PATCH v2] machine/qemuarm*: don't explicitly set vmalloc

2023-04-18 Thread Khem Raj
On Tue, Apr 18, 2023 at 9:41 AM Ross Burton wrote: > > In 5c6064 the qemuarm* machines gained vmalloc=256, because in testing > Bruce was seeing problems when the vmalloc area was too big for the > memory size of the machine (eg 256MB). > default seems to be 128M for 32bit systems with memory < 1

[OE-core] [PATCH v2] machine/qemuarm*: don't explicitly set vmalloc

2023-04-18 Thread Ross Burton
In 5c6064 the qemuarm* machines gained vmalloc=256, because in testing Bruce was seeing problems when the vmalloc area was too big for the memory size of the machine (eg 256MB). The intention was for the area to be very small, but 256 bytes is too small and the kernel sets a minimal vmalloc area o

Re: [OE-core] [PATCH] machine/qemuarm*: don't explicitly set vmalloc

2023-04-18 Thread Bruce Ashfield
On Tue, Apr 18, 2023 at 11:59 AM Ross Burton wrote: > > In 5c6064 the qemuarm* machines gained vmalloc=256, because in testing > Bruce was seeing vmap allocation failures. > > However, this parameter is in bytes, so the kernel was setting a minimal > vmalloc area of 16MiB: > > [0.00] vmall

[OE-core] Last call for langdale patches

2023-04-18 Thread Steve Sakoman
The final langdale release build will occur on 2023/05/01 If you have any patches you'd like to get in before langdale support ends, please submit them now! Steve -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#180196): https://lists.openembedded.

[OE-core] [PATCH] machine/qemuarm*: don't explicitly set vmalloc

2023-04-18 Thread Ross Burton
In 5c6064 the qemuarm* machines gained vmalloc=256, because in testing Bruce was seeing vmap allocation failures. However, this parameter is in bytes, so the kernel was setting a minimal vmalloc area of 16MiB: [0.00] vmalloc area is too small, limiting to 16MiB The default value is 240Mi

Re: [OE-core][kirkstone][PATCH] shadow: backport patch to fix CVE-2023-29383

2023-04-18 Thread Steve Sakoman
I encountered a couple of issues with this patch. 1. The patch file for a CVE fix should have the CVE number in the filename, i.e. CVE-2023-29383.patch rather than 0001-Added-control-character-check.patch 2. Applying the patch resulted in many errors of the type: example 1 TOPDIR/tmp/work/core2-

[OE-core] Yocto Project Status 18 April 2023 (WW16)

2023-04-18 Thread Neal Caidin
Current Dev Position: YP 4.3 M1 Next Deadline: 28th April 2023 YP 4.2 Release Next Team Meetings: - Bug Triage meeting Thursday April 20th 7:30 am PDT ( https://zoom.us/j/454367603?pwd=ZGxoa2ZXL3FkM3Y0bFd5aVpHVVZ6dz09) - Weekly Project Engineering Sync Tuesday April 18th at 8 am

Re: [OE-core][kirkstone][PATCH] go-runtime: Security fix for CVE-2022-41722

2023-04-18 Thread Steve Sakoman
There were a couple of issues with this patch. I've fixed both so no need to resubmit, but in the future please be sure to check the following: 1. Patch should be based on the latest kirkstone head -- you were using an earlier state which was missing "go: fix CVE-2022-41724, 41725" so the patch d

Re: [OE-core] [kirkstone][PATCH] cargo : non vulnerable cve-2022-46176 added to excluded list

2023-04-18 Thread Steve Sakoman
On Tue, Apr 18, 2023 at 1:46 AM Kokkonda, Sundeep wrote: > > Hello Steve, > > When this patch is planned to take into Kirkstone? It is in the set of patches being tested today. So if all goes well it should hit the kirkstone branch later this week. Steve > > Fr

Re: [OE-core] [PATCH v2] scripts/runqemu: Add possibility to disable network

2023-04-18 Thread Mikko Rapeli
Hi, On Tue, Apr 18, 2023 at 03:33:25PM +0200, Pavel Zhukov wrote: > Default network configuration requires tun/tap module and while being > usable it conflicts with tap devices created by VPN clients sometimes > and requires root permissions to use . While it's possible to work > this around it's

[OE-core] [PATCH v2] scripts/runqemu: Add possibility to disable network

2023-04-18 Thread Pavel Zhukov
Default network configuration requires tun/tap module and while being usable it conflicts with tap devices created by VPN clients sometimes and requires root permissions to use . While it's possible to work this around it's not always feasible if network is not required Add nonetwork option which c

[OE-core] [PATCH] scripts/runqemu: Add possibility to disable network

2023-04-18 Thread Pavel Zhukov
Default network configuration requires tun/tap module and while being usable it conflicts with tap devices created by VPN clients sometimes and requires root permissions to use . While it's possible to work this around it's not always feasible if network is not required Add nonetwork option which c

[OE-core][kirkstone][PATCH] go-runtime: Security fix for CVE-2022-41722

2023-04-18 Thread Shubham Kulkarni
From: Shubham Kulkarni path/filepath: do not Clean("a/../c:/b") into c:\b on Windows Backport from https://github.com/golang/go/commit/bdf07c2e168baf736e4c057279ca12a4d674f18c Signed-off-by: Shubham Kulkarni --- meta/recipes-devtools/go/go-1.17.13.inc | 1 + .../go/go-1.18/CVE-2022-4

Re: [OE-core] [kirkstone][PATCH] cargo : non vulnerable cve-2022-46176 added to excluded list

2023-04-18 Thread Sundeep KOKKONDA via lists.openembedded.org
Hello Steve, When this patch is planned to take into Kirkstone? Thanks, Sundeep K. From: openembedded-core@lists.openembedded.org on behalf of Sundeep KOKKONDA via lists.openembedded.org Sent: 02 April 2023 20:58 To: openembedded-core@lists.openembedded.org

[OE-core] time64.inc

2023-04-18 Thread Ola x Nilsson
Hi Alex, I saw on the chat that you want to enable time64.inc by default. Did I understand that correctly? How much testing of 64bit time have you been able to do? I have been working on fixing rust to use the correct glibc APIs, the pull request to the rust-lang/libc project to do that is https

Re: [OE-core][PATCH] shadow: backport patch to fix CVE-2023-29383

2023-04-18 Thread Luca Ceresoli via lists.openembedded.org
Hello Xiangyu, On Tue, 18 Apr 2023 13:49:51 +0800 "Xiangyu Chen" wrote: > From: Xiangyu Chen > > Signed-off-by: Xiangyu Chen This patch does not apply on current oe-core master. It is based on an old commit? Best regards, Luca -- Luca Ceresoli, Bootlin Embedded Linux and Kernel engineerin

[OE-core] [PATCH] scripts/rpm2cpio.sh: Use bzip2 instead of bunzip2

2023-04-18 Thread Pavel Zhukov
bzip2 is in HOSTTOOLS already and used in few other places already. This fixes bin_package class for RPM packages without adding bunzip2 to HOSTTOOLS. Signed-off-by: Pavel Zhukov --- scripts/rpm2cpio.sh | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/scripts/rpm2cpio.sh b/scr

[OE-core] [PATCH v13] Rust Oe-Selftest implementation

2023-04-18 Thread Yash Shinde
The patch implements Rust testing framework similar to other selftest, specifically the gcc selftest in OE. It uses the client and server based method to test the binaries for cross-target on the image. The test framework is a wrapper around the Rust build system as ./x.py test. It tests many funct

[OE-core] [PATCH v13] Rust Oe-Selftest implementation

2023-04-18 Thread Yash Shinde
The patch implements Rust testing framework similar to other selftest, specifically the gcc selftest in OE. It uses the client and server based method to test the binaries for cross-target on the image. The test framework is a wrapper around the Rust build system as ./x.py test. It tests many funct

Re: [OE-core] [PATCH v4 1/2] oeqa/utils/qemurunner: change the serial runner

2023-04-18 Thread Louis Rannou
Hello Luca, You are correct, thanks ! Louis On 12/04/2023 09:57, Luca Ceresoli wrote: Hello Louis, On Tue, 11 Apr 2023 17:05:02 +0200 "Louis Rannou" wrote: [YOCTO #15021] Create a new runner run_serial_socket which usage matches the traditional ssh Nit: I'm not a native English speaker,