Re: [OE-core] [PATCH 1/3] linux/generate-cve-exclusions: fix mishandling of boundary values

2023-09-05 Thread Ross Burton
On 5 Sep 2023, at 08:29, Yuta Hayama wrote: > > affected_versions in kernel_cves.json does not mean "first affected version > to last affected version" but actually "first affected version to fixed > version". Therefore, the variable names, conditional expressions, and > CVE_STATUS descriptions

[OE-core] [PATCH] python3-build: upgrade to 1.0.0

2023-09-05 Thread Ross Burton
From: Ross Burton Signed-off-by: Ross Burton --- .../python/{python3-build_0.10.0.bb => python3-build_1.0.0.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename meta/recipes-devtools/python/{python3-build_0.10.0.bb => python3-build_1.0.0.bb} (89%) diff --git

Re: [OE-core] [PATCH] busybox: remove coreutils dependency in busybox-ptest

2023-09-05 Thread Alexander Kanavin
On Tue, 5 Sept 2023 at 15:35, Ross Burton wrote: > +++ b/meta/recipes-core/busybox/busybox/start-stop-false.patch > @@ -0,0 +1,31 @@ > +Upstream-Status: Pending > +Signed-off-by: Ross Burton Please submit upstream at the same time. Alex -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages

[OE-core] [PATCH 2/8] linux-yocto/6.1: fix CONFIG_F2FS_IO_TRACE configuration warning

2023-09-05 Thread Bruce Ashfield
From: Bruce Ashfield Integrating the following commit(s) to linux-yocto/.: 70924d2512b features/f2fs: remove CONFIG_F2FS_IO_TRACE Signed-off-by: Bruce Ashfield --- meta/recipes-kernel/linux/linux-yocto-rt_6.1.bb | 2 +- meta/recipes-kernel/linux/linux-yocto-tiny_6.1.bb | 2 +-

[OE-core] [PATCH 3/8] linux-yocto/6.4: update to v6.4.12

2023-09-05 Thread Bruce Ashfield
From: Bruce Ashfield Updating to the latest korg -stable release that comprises the following commits: 05d8970cca01 Linux 6.4.12 b237550e1f1b net: fix the RTO timer retransmitting skb every 1ms if linear option is enabled 4a3fcfc3b517 af_unix: Fix null-ptr-deref in

[OE-core] [PATCH 4/8] linux-yocto/6.1: update to v6.1.50

2023-09-05 Thread Bruce Ashfield
From: Bruce Ashfield Updating to the latest korg -stable release that comprises the following commits: a2943d2d9a00 Linux 6.1.50 19641b979b24 ASoC: amd: vangogh: select CONFIG_SND_AMD_ACP_CONFIG 9d5a3b4aee11 maple_tree: disable mas_wr_append() when other readers are possible

[OE-core] [PATCH 5/8] linux-yocto/6.4: update to v6.4.13

2023-09-05 Thread Bruce Ashfield
From: Bruce Ashfield Updating to the latest korg -stable release that comprises the following commits: 388f6d150784 Linux 6.4.13 734cf5795f4b netfilter: nf_tables: fix kdoc warnings after gc rework ae2d1461ebcc TIOCSTI: Document CAP_SYS_ADMIN behaviour in Kconfig 259ff81cee3c

[OE-core] [PATCH 6/8] linux-yocto/6.4: update to v6.4.14

2023-09-05 Thread Bruce Ashfield
From: Bruce Ashfield Updating to the latest korg -stable release that comprises the following commits: babc8be398c3 Linux 6.4.14 9a3ac3bf4dbf thunderbolt: Fix a backport error for display flickering issue bb899e081c6c kallsyms: Fix kallsyms_selftest failure ebc51587d0c5 parisc:

[OE-core] [PATCH 0/8] linux-yocto: consolidated pull request

2023-09-05 Thread Bruce Ashfield
From: Bruce Ashfield Richard, Here's the next round of -stable and configuration changes. I also ran into a build issue with 6.4+ on one of my builders due to a gzip mismatch with zlib versions. So I've included a fix for that. Cheers, Bruce The following changes since commit

[OE-core] [PATCH 1/8] linux-yocto/6.4: fix CONFIG_F2FS_IO_TRACE configuration warning

2023-09-05 Thread Bruce Ashfield
From: Bruce Ashfield Integrating the following commit(s) to linux-yocto/.: 97bba4db5ff features/f2fs: remove CONFIG_F2FS_IO_TRACE Signed-off-by: Bruce Ashfield --- meta/recipes-kernel/linux/linux-yocto-rt_6.4.bb | 2 +- meta/recipes-kernel/linux/linux-yocto-tiny_6.4.bb | 2 +-

[OE-core] [PATCH 7/8] linux-yocto/6.1: update to v6.1.51

2023-09-05 Thread Bruce Ashfield
From: Bruce Ashfield Updating to the latest korg -stable release that comprises the following commits: c2cbfe5f5122 Linux 6.1.51 ae0188f9c2a8 thunderbolt: Fix a backport error for display flickering issue 583a8426abb3 kallsyms: Fix kallsyms_selftest failure 5d54040e9d57

[OE-core] [PATCH 8/8] linux-yocto: add gzip-native to DEPENDS

2023-09-05 Thread Bruce Ashfield
From: Bruce Ashfield When building a compressed kernel image on a host with an older gzip, the following error can occur: ERROR: linux-yocto-6.4.11+git-r0 do_compile: oe_runmake failed ERROR: linux-yocto-6.4.11+git-r0 do_compile:

Re: [OE-core] [PATCH 8/8] linux-yocto: add gzip-native to DEPENDS

2023-09-05 Thread Bruce Ashfield
On Tue, Sep 5, 2023 at 11:01 AM Richard Purdie wrote: > > On Tue, 2023-09-05 at 10:37 -0400, bruce.ashfi...@gmail.com wrote: > > From: Bruce Ashfield > > > > When building a compressed kernel image on a host with an older > > gzip, the following error can occur: > > > > ERROR:

Re: [OE-core] [PATCH] busybox: remove coreutils dependency in busybox-ptest

2023-09-05 Thread Ross Burton
On 5 Sep 2023, at 16:56, Alexander Kanavin wrote: > > On Tue, 5 Sept 2023 at 15:35, Ross Burton wrote: >> +++ b/meta/recipes-core/busybox/busybox/start-stop-false.patch >> @@ -0,0 +1,31 @@ >> +Upstream-Status: Pending >> +Signed-off-by: Ross Burton > > Please submit upstream at the same time.

[OE-core] [PATCH] busybox: remove coreutils dependency in busybox-ptest

2023-09-05 Thread Ross Burton
From: Ross Burton A dependency on coreutils was added to busybox-ptest in oe-core 658c5ed to fix a test failure. The failure is because one of the start-stop-daemon tests is known to fail if /bin/false is busybox. Instead of failing, we can check if /bin/false is a symlink to busybox and skip

[oe-core][kirkstone][PATCH 1/1] nasm: fix CVE-2020-21528

2023-09-05 Thread Polampalli, Archana via lists.openembedded.org
A Segmentation Fault issue discovered in in ieee_segment function in outieee.c in nasm 2.14.03 and 2.15 allows remote attackers to cause a denial of service via crafted assembly file. References: https://nvd.nist.gov/vuln/detail/CVE-2020-21528 Upstream patches:

[PATCH 3/6] [OE-core][PATCH] goarch.bbclass: Add loongarch64 to go_map_arch

2023-09-05 Thread Zang Ruochen
Signed-off-by: Zang Ruochen --- meta/classes-recipe/goarch.bbclass | 2 ++ 1 file changed, 2 insertions(+) diff --git a/meta/classes-recipe/goarch.bbclass b/meta/classes-recipe/goarch.bbclass index 61ead30a63..e3555e1e46 100644 --- a/meta/classes-recipe/goarch.bbclass +++

[PATCH 4/6] [OE-core][PATCH] qemuloongarch.inc:Change to use virtio-serial-pci

2023-09-05 Thread Zang Ruochen
If virtio-serial-device is used, the following error occurs on loongarch64: qemu-system-loongarch64: -device virtio-serial-device: No "virtio-bus" bus found for device "virtio-serial-device" Signed-off-by: Zang Ruochen --- meta/conf/machine/include/loongarch/qemuloongarch.inc | 4 ++-- 1 file

[PATCH 2/6] [OE-core][PATCH] gcc-sanitizers: Add loongarch as a compatible architecture.

2023-09-05 Thread Zang Ruochen
https://gcc.gnu.org/git/?p=gcc.git;a=commit;h=600413c4f3d70392285192fb99634bcbeb97f83f Signed-off-by: Zang Ruochen --- meta/recipes-devtools/gcc/gcc-sanitizers.inc | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/meta/recipes-devtools/gcc/gcc-sanitizers.inc

[PATCH 1/6] [OE-core][PATCH] tcf-agent: Disable non-building features on loongarch64

2023-09-05 Thread Zang Ruochen
Signed-off-by: Zang Ruochen --- meta/recipes-devtools/tcf-agent/tcf-agent_git.bb | 1 + 1 file changed, 1 insertion(+) diff --git a/meta/recipes-devtools/tcf-agent/tcf-agent_git.bb b/meta/recipes-devtools/tcf-agent/tcf-agent_git.bb index 4d2ca5f1b0..59b9d7de78 100644 ---

Re: [OE-core] [PATCH v2 7/9] oeqa selftest context.py: fix git commands and set branch name

2023-09-05 Thread Ross Burton
On 23 Aug 2023, at 07:10, Mikko Rapeli via lists.openembedded.org wrote: > -subprocess.check_output("git init; git add *; git commit -a -m > 'initial'", cwd=newselftestdir, shell=True) > +subprocess.check_output("git init -b main && git add * && git commit > -a -m 'initial'",

Re: [OE-core] [PATCH 8/8] linux-yocto: add gzip-native to DEPENDS

2023-09-05 Thread Richard Purdie
On Tue, 2023-09-05 at 10:37 -0400, bruce.ashfi...@gmail.com wrote: > From: Bruce Ashfield > > When building a compressed kernel image on a host with an older > gzip, the following error can occur: > > ERROR: linux-yocto-6.4.11+git-r0 do_compile: oe_runmake failed > ERROR:

[PATCH 5/6] [OE-core][PATCH] gcc: Fresh 0003-64-bit-multilib-hack.patch to add loongarch64 support

2023-09-05 Thread Zang Ruochen
Signed-off-by: Zang Ruochen --- .../gcc/gcc/0003-64-bit-multilib-hack.patch | 54 ++- 1 file changed, 53 insertions(+), 1 deletion(-) diff --git a/meta/recipes-devtools/gcc/gcc/0003-64-bit-multilib-hack.patch b/meta/recipes-devtools/gcc/gcc/0003-64-bit-multilib-hack.patch

[PATCH 6/6] [OE-core][PATCH] kernel-devsrc: Fixed missing loongarch64 kernel source code when test_kernelmodules

2023-09-05 Thread Zang Ruochen
Signed-off-by: Zang Ruochen --- meta/recipes-kernel/linux/kernel-devsrc.bb | 9 + 1 file changed, 9 insertions(+) diff --git a/meta/recipes-kernel/linux/kernel-devsrc.bb b/meta/recipes-kernel/linux/kernel-devsrc.bb index 6764598d48..ce5777fbe9 100644 ---

Re: [OE-core] [PATCH 8/8] linux-yocto: add gzip-native to DEPENDS

2023-09-05 Thread Bruce Ashfield
On Tue, Sep 5, 2023 at 11:02 AM Bruce Ashfield via lists.openembedded.org wrote: > > On Tue, Sep 5, 2023 at 11:01 AM Richard Purdie > wrote: > > > > On Tue, 2023-09-05 at 10:37 -0400, bruce.ashfi...@gmail.com wrote: > > > From: Bruce Ashfield > > > > > > When building a compressed kernel image

[OE-core] [PATCH] cve-exclusion: review the last of the historical kernel CVEs

2023-09-05 Thread Ross Burton
From: Ross Burton Review the last of the historical kernel CVEs. Issues which are specific to other platforms or distributions are ignored in the kernel recipe itself, whereas general security concerns like "ICMP leaks information" and "USB has flaws" are ignored with more details in the

[OE-core] Yocto Project Status 5 September 2023 (WW36)

2023-09-05 Thread Stephen Jolley
Current Dev Position: YP 4.3 Feature Freeze Next Deadline: 28th August 2023 YP 4.3 M3 build date Next Team Meetings: - Bug Triage meeting Thursday September 7th 7:30 am PDT ( https://zoom.us/j/454367603?pwd=ZGxoa2ZXL3FkM3Y0bFd5aVpHVVZ6dz09) - Weekly Project Engineering Sync

Re: [OE-core] [RFC PATCH 3/5] ninja: build modified version with GNU Make jobserver support

2023-09-05 Thread Martin Hundeb?ll
On Mon, 2023-08-28 at 19:31 +0200, Martin Hundeb?ll wrote: >   >  Aug 28, 2023 19:16:28 Khem Raj : >   >  > On Mon, Aug 28, 2023 at 5:48 AM Martin Hundeb?ll > wrote: >  >> >  >> Ninja doesn't (yet) support the GNU Make jobserver out of the > box, but >  >> there is a pull request adding that

[OE-core][PATCH v5 00/14] devtool ide plugin

2023-09-05 Thread Adrian Freihofer
Changes in comparison to v4: - Fix the sstatetests.SStateHashSameSigs4.test_sstate_noop_samesigs This was easy to reproduce and understand --> should be fixed. - Fix devtool.DevtoolIdeTests: - Pass the Qemu IP address to devtool ide (do not use the default) - Improve error message to

[OE-core][PATCH v5 01/14] vscode: add minimal configuration

2023-09-05 Thread Adrian Freihofer
It is essential to configure VSCode indexer plugins to ignore the build folder of bitbake. Otherwise, the indexer plugins run with 100% CPU load until an OOM exception occurs. In practice, this makes VSCode more or less unusable for working with Yocto until a file like the one added by this commit

[OE-core][PATCH v5 03/14] cmake.bbclass: cleanup spaces and tabs

2023-09-05 Thread Adrian Freihofer
Signed-off-by: Adrian Freihofer --- meta/classes-recipe/cmake.bbclass | 6 -- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/meta/classes-recipe/cmake.bbclass b/meta/classes-recipe/cmake.bbclass index 69d566d3154..41748b08207 100644 --- a/meta/classes-recipe/cmake.bbclass +++

[OE-core][PATCH v5 02/14] cmake.bbclass: refactor cmake args

2023-09-05 Thread Adrian Freihofer
Make the details of the cmake configure arguments available to d.getVar(). This allows to share them with devtool via tinfoil. Signed-off-by: Adrian Freihofer --- meta/classes-recipe/cmake.bbclass | 43 +-- 1 file changed, 24 insertions(+), 19 deletions(-) diff

[OE-core][PATCH v5 04/14] cmake.bbclass: support qemu

2023-09-05 Thread Adrian Freihofer
Define the CMAKE_CROSSCOMPILING_EMULATOR variable similar to what the meson bbclass does. This allows for example to execute cross compilied unit tests on the build machine. CMAKE_CROSSCOMPILING_EMULATOR is a semi colon separated list of paramters which could directly handle the -L and the -E

[OE-core][PATCH v5 05/14] devtool: new ide plugin

2023-09-05 Thread Adrian Freihofer
The new devtool ide plugin configures an IDE to work with the eSDK. With this initial implementation VSCode is the default IDE. The plugin works for recipes inheriting the cmake or the meson bbclass. Support for more programming languages and build tools may be added in the future. Using the

[OE-core][PATCH v5 06/14] tests: add a C++ example recipe

2023-09-05 Thread Adrian Freihofer
This simple C++ project supports compilation with cmake and with meson. It's supposed to be used with oe-selftest for the devtool ide plugin. Signed-off-by: Adrian Freihofer --- meta-selftest/recipes-test/cpp/.gitignore | 1 + .../recipes-test/cpp/cmake-example.bb | 17 ++

[OE-core][PATCH v5 07/14] cmake-example: workaround for pseudo breakeage

2023-09-05 Thread Adrian Freihofer
Signed-off-by: Adrian Freihofer --- meta-selftest/recipes-test/cpp/cmake-example.bb | 6 ++ 1 file changed, 6 insertions(+) diff --git a/meta-selftest/recipes-test/cpp/cmake-example.bb b/meta-selftest/recipes-test/cpp/cmake-example.bb index 96d543180b4..fbf1f266721 100644 ---

[OE-core][PATCH v5 08/14] refactor: make multiprocess_launch callable without d

2023-09-05 Thread Adrian Freihofer
This is a preparation for making the strip_execs function callable from devtool without going via tinfoil and a bitbake server process. Signed-off-by: Adrian Freihofer --- meta/conf/bitbake.conf | 2 +- meta/lib/oe/utils.py | 12 +--- 2 files changed, 10 insertions(+), 4 deletions(-)

[OE-core][PATCH v5 09/14] refactor: make strip_execs callable without d

2023-09-05 Thread Adrian Freihofer
This allows to call strip_execs function from devtool without going via tinfoil and a bitbake server process. Signed-off-by: Adrian Freihofer --- meta/classes-global/staging.bbclass | 3 ++- meta/lib/oe/package.py | 7 --- 2 files changed, 6 insertions(+), 4 deletions(-) diff

[OE-core][PATCH v5 10/14] devtool: refactor deploy-target

2023-09-05 Thread Adrian Freihofer
Signed-off-by: Adrian Freihofer --- scripts/lib/devtool/__init__.py | 5 +- scripts/lib/devtool/deploy.py | 230 +--- 2 files changed, 124 insertions(+), 111 deletions(-) diff --git a/scripts/lib/devtool/__init__.py b/scripts/lib/devtool/__init__.py index

[OE-core][PATCH v5 11/14] devtool: ide make deploy-target quicker

2023-09-05 Thread Adrian Freihofer
Instead of calling devtool deploy-target which starts a bitbake server to get some variables the previous refactoring allows to generate a simple script which does no longer depend on variables from bitbake. This is much faster. --- scripts/lib/devtool/ide.py | 115

[OE-core][PATCH v5 12/14] oe-selftest devtool: refactor runqemu pre-requisites

2023-09-05 Thread Adrian Freihofer
Split runqemu pre-requisites into a function which can be re-used by other tests as well. Signed-off-by: Adrian Freihofer --- meta/lib/oeqa/selftest/cases/devtool.py | 48 + 1 file changed, 26 insertions(+), 22 deletions(-) diff --git

[OE-core][PATCH v5 13/14] oe-selftest devtool: ide tests

2023-09-05 Thread Adrian Freihofer
Signed-off-by: Adrian Freihofer --- meta/lib/oeqa/selftest/cases/devtool.py | 179 1 file changed, 179 insertions(+) diff --git a/meta/lib/oeqa/selftest/cases/devtool.py b/meta/lib/oeqa/selftest/cases/devtool.py index b577f6d62a1..3bfc9510109 100644 ---

[OE-core][PATCH v5 14/14] docs: cover devtool ide

2023-09-05 Thread Adrian Freihofer
Signed-off-by: Adrian Freihofer --- documentation/sdk-manual/extensible.rst | 97 - 1 file changed, 96 insertions(+), 1 deletion(-) diff --git a/documentation/sdk-manual/extensible.rst b/documentation/sdk-manual/extensible.rst index 9e08e57a4e7..d05d4e36aa7 100644 ---

[OE-core][PATCH 2/3] python3-git: upgrade 3.1.32 -> 3.1.34

2023-09-05 Thread Trevor Gamblin
Changelog: https://github.com/gitpython-developers/GitPython/blob/main/doc/source/changes.rst 3.1.34 fixes a resource leak by properly closing a lockfile after opening. Signed-off-by: Trevor Gamblin --- .../python/{python3-git_3.1.32.bb => python3-git_3.1.34.bb} | 2 +- 1 file changed, 1

[OE-core][PATCH 1/3] python3-poetry: upgrade 1.6.1 -> 1.7.0

2023-09-05 Thread Trevor Gamblin
Changelog: https://github.com/python-poetry/poetry-core/blob/main/CHANGELOG.md typing_extensions was removed in commit a06650d when support for Python 3.7 was dropped, so that specific md5sum isn't required anymore. Signed-off-by: Trevor Gamblin --- ...thon3-poetry-core_1.6.1.bb =>

[OE-core][PATCH 3/3] python3-hypothesis: upgrade 6.82.7 -> 6.84.0

2023-09-05 Thread Trevor Gamblin
Changelog: https://hypothesis.readthedocs.io/en/latest/changes.html Signed-off-by: Trevor Gamblin --- ...ython3-hypothesis_6.82.7.bb => python3-hypothesis_6.84.0.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename meta/recipes-devtools/python/{python3-hypothesis_6.82.7.bb =>

Re: [OE-core] [PATCH] linux-firmware: add firmware files for NXP BT chipsets

2023-09-05 Thread Tom Hochstein
On Tue, Aug 29, 2023 at 05:08 AM, Tom Hochstein wrote: > > On Fri, Aug 25, 2023 at 07:37 AM, Tom Hochstein wrote: > >> Please hold off on this. The -common design is not working correctly and >> is causing those firmware packages to be registered as a runtime >> dependency of the main package.

[OE-core] [PATCH] webkitgtk: explicitly disable JIT for armv7* with softfp

2023-09-05 Thread Martin Jansa
Signed-off-by: Martin Jansa --- meta/recipes-sato/webkit/webkitgtk_2.40.5.bb | 14 +- 1 file changed, 13 insertions(+), 1 deletion(-) diff --git a/meta/recipes-sato/webkit/webkitgtk_2.40.5.bb b/meta/recipes-sato/webkit/webkitgtk_2.40.5.bb index 39bb6a476f..1d85b3f591 100644 ---

Re: [OE-core] [PATCH 1/2] Add DOCS-WIP

2023-09-05 Thread Richard Purdie
On Sat, 2023-09-02 at 08:13 +0100, Richard Purdie via lists.openembedded.org wrote: > We've needed a way to queue/note/sync docs changes with our manuals, migration > guides and release notes. Add a file which we can use to "stage" information. > We can then ask users submitting changes which need

Re: [OE-core] [PATCH 1/2] Add DOCS-WIP

2023-09-05 Thread Richard Purdie
On Tue, 2023-09-05 at 21:58 +0200, Alexander Kanavin wrote: > On Tue, 5 Sept 2023 at 21:32, Richard Purdie > wrote: > > This has proven contentious. Whilst I think it would help our docs > > maintenance, there are differing views: > > > > * it should be a directory for conflict reasons > > * we

Re: [OE-core] [PATCH 1/2] Add DOCS-WIP

2023-09-05 Thread Alexander Kanavin
On Tue, 5 Sept 2023 at 21:32, Richard Purdie wrote: > This has proven contentious. Whilst I think it would help our docs > maintenance, there are differing views: > > * it should be a directory for conflict reasons > * we don't want a top level directory for this > * we don't want a directory

[OE-core][PATCH 1/2] python3-pytest: upgrade 7.4.0 -> 7.4.1

2023-09-05 Thread Trevor Gamblin
Changelog: https://docs.pytest.org/en/7.4.x/changelog.html Signed-off-by: Trevor Gamblin --- .../python/{python3-pytest_7.4.0.bb => python3-pytest_7.4.1.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename meta/recipes-devtools/python/{python3-pytest_7.4.0.bb =>

[OE-core][PATCH 2/2] python3-sphinx: upgrade 7.1.1 -> 7.2.5

2023-09-05 Thread Trevor Gamblin
Changelog: https://github.com/sphinx-doc/sphinx/blob/master/CHANGES Signed-off-by: Trevor Gamblin --- .../python/{python3-sphinx_7.1.1.bb => python3-sphinx_7.2.5.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename meta/recipes-devtools/python/{python3-sphinx_7.1.1.bb =>

[OE-core] [PATCH v2] busybox: remove coreutils dependency in busybox-ptest

2023-09-05 Thread Ross Burton
From: Ross Burton A dependency on coreutils was added to busybox-ptest in oe-core 658c5ed to fix a test failure. The failure is because one of the start-stop-daemon tests is known to fail if /bin/false is busybox. Instead of failing, we can check if /bin/false is a symlink to busybox and skip

Re: [OE-core] [PATCH 1/3] linux/generate-cve-exclusions: fix mishandling of boundary values

2023-09-05 Thread Yuta Hayama
Hi, On 2023/09/05 20:14, Ross Burton wrote: > On 5 Sep 2023, at 08:29, Yuta Hayama wrote: >> >> affected_versions in kernel_cves.json does not mean "first affected version >> to last affected version" but actually "first affected version to fixed >> version". Therefore, the variable names,

[OE-core][dunfell][PATCH] bind: Backport fix for CVE-2023-2828

2023-09-05 Thread Vijay Anusuri via lists.openembedded.org
From: Vijay Anusuri Upstream Patch: https://downloads.isc.org/isc/bind9/9.16.42/patches/0001-CVE-2023-2828.patch LINK: https://security-tracker.debian.org/tracker/CVE-2023-2828 Signed-off-by: Vijay Anusuri --- .../bind/bind/CVE-2023-2828.patch | 166 ++

[OE-core] [PATCH] rust-target-config: Map rust target to OE target

2023-09-05 Thread Khem Raj
Signed-off-by: Khem Raj --- meta/classes-recipe/rust-target-config.bbclass | 2 ++ 1 file changed, 2 insertions(+) diff --git a/meta/classes-recipe/rust-target-config.bbclass b/meta/classes-recipe/rust-target-config.bbclass index 9aa1fc4da51..926b0630b1f 100644 ---

[PATCH 2/6] [OE-core][PATCH] gcc-sanitizers: Add loongarch as a compatible architecture.

2023-09-05 Thread Zang Ruochen
https://gcc.gnu.org/git/?p=gcc.git;a=commit;h=600413c4f3d70392285192fb99634bcbeb97f83f Signed-off-by: Zang Ruochen --- meta/recipes-devtools/gcc/gcc-sanitizers.inc | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/meta/recipes-devtools/gcc/gcc-sanitizers.inc

[PATCH 1/6] [OE-core][PATCH] tcf-agent: Disable non-building features on loongarch64

2023-09-05 Thread Zang Ruochen
Signed-off-by: Zang Ruochen --- meta/recipes-devtools/tcf-agent/tcf-agent_git.bb | 1 + 1 file changed, 1 insertion(+) diff --git a/meta/recipes-devtools/tcf-agent/tcf-agent_git.bb b/meta/recipes-devtools/tcf-agent/tcf-agent_git.bb index 4d2ca5f1b0..59b9d7de78 100644 ---

[OE-core] [dunfell][PATCH 1/5] python3: update to 3.8.18

2023-09-05 Thread Lee Chee Yang
From: Lee Chee Yang https://docs.python.org/release/3.8.18/whatsnew/changelog.html#changelog Release date: 2023-08-24 Security gh-108310: Fixed an issue where instances of ssl.SSLSocket were vulnerable to a bypass of the TLS handshake and included protections (like certificate verification)

[OE-core] [dunfell][PATCH 2/5] libxpm: fix CVE-2022-46285

2023-09-05 Thread Lee Chee Yang
From: Lee Chee Yang Signed-off-by: Lee Chee Yang --- .../xorg-lib/libxpm/CVE-2022-46285.patch | 40 +++ .../xorg-lib/libxpm_3.5.13.bb | 2 + 2 files changed, 42 insertions(+) create mode 100644 meta/recipes-graphics/xorg-lib/libxpm/CVE-2022-46285.patch

[OE-core] [dunfell][PATCH 3/5] qemu: fix CVE-2020-24165

2023-09-05 Thread Lee Chee Yang
From: Lee Chee Yang Signed-off-by: Lee Chee Yang --- meta/recipes-devtools/qemu/qemu.inc | 3 +- .../qemu/qemu/CVE-2020-24165.patch| 94 +++ 2 files changed, 96 insertions(+), 1 deletion(-) create mode 100644

[OE-core] [dunfell][PATCH 4/5] nasm: update 2.15.03 -> 2.15.05

2023-09-05 Thread Lee Chee Yang
From: Alexander Kanavin Use autotools-brokensep as new version needs that. upgrade include fix for CVE-2020-21686 and CVE-2022-29654 (cherry picked from commit c9c724ffa36757b56e70bc8d7b880c0c5777b153) Signed-off-by: Alexander Kanavin Signed-off-by: Richard Purdie Signed-off-by: Lee Chee

[OE-core] [dunfell][PATCH 5/5] nasm: fix CVE-2022-44370

2023-09-05 Thread Lee Chee Yang
From: Archana Polampalli NASM v2.16 was discovered to contain a heap buffer overflow in the component quote_for_pmake() asm/nasm.c:856 References: https://nvd.nist.gov/vuln/detail/CVE-2022-44370 Upstream patches:

[OE-core] [PATCH v2] linux-firmware: add firmware files for NXP BT chipsets

2023-09-05 Thread Tom Hochstein
These BT only firmware files are submitted for NXP chips. 88w8997-bt: uartuart8997_bt_v4.bin version: 16.92.21.p81 helper_uart_300.bin version: 16.92.21.p81 88w8987-bt: uartuart8987_bt.bin version: 16.92.21.p76.5 88w9098-bt: uartuart9098_bt_v1.bin version: 17.92.1.p136.24 iw416-bt:

[PATCH 5/6] [OE-core][PATCH] gcc: Fresh 0003-64-bit-multilib-hack.patch to add loongarch64 support

2023-09-05 Thread Zang Ruochen
Signed-off-by: Zang Ruochen --- .../gcc/gcc/0003-64-bit-multilib-hack.patch | 54 ++- 1 file changed, 53 insertions(+), 1 deletion(-) diff --git a/meta/recipes-devtools/gcc/gcc/0003-64-bit-multilib-hack.patch b/meta/recipes-devtools/gcc/gcc/0003-64-bit-multilib-hack.patch

[PATCH 6/6] [OE-core][PATCH] kernel-devsrc: Fixed missing loongarch64 kernel source code when test_kernelmodules

2023-09-05 Thread Zang Ruochen
Signed-off-by: Zang Ruochen --- meta/recipes-kernel/linux/kernel-devsrc.bb | 9 + 1 file changed, 9 insertions(+) diff --git a/meta/recipes-kernel/linux/kernel-devsrc.bb b/meta/recipes-kernel/linux/kernel-devsrc.bb index 6764598d48..ce5777fbe9 100644 ---

[PATCH 4/6] [OE-core][PATCH] qemuloongarch.inc:Change to use virtio-serial-pci

2023-09-05 Thread Zang Ruochen
If virtio-serial-device is used, the following error occurs on loongarch64: qemu-system-loongarch64: -device virtio-serial-device: No "virtio-bus" bus found for device "virtio-serial-device" Signed-off-by: Zang Ruochen --- meta/conf/machine/include/loongarch/qemuloongarch.inc | 4 ++-- 1 file

[PATCH 3/6] [OE-core][PATCH] goarch.bbclass: Add loongarch64 to go_map_arch

2023-09-05 Thread Zang Ruochen
Signed-off-by: Zang Ruochen --- meta/classes-recipe/goarch.bbclass | 2 ++ 1 file changed, 2 insertions(+) diff --git a/meta/classes-recipe/goarch.bbclass b/meta/classes-recipe/goarch.bbclass index 61ead30a63..e3555e1e46 100644 --- a/meta/classes-recipe/goarch.bbclass +++

[OE-core] [PATCH] apr: Fix ptests on musl

2023-09-05 Thread Khem Raj
musl does not implement dlclose [1] the way apr tests it will always fail, even though it is per posix. Therefore ignore the unload tests [1] https://wiki.musl-libc.org/functional-differences-from-glibc.html#Unloading-libraries Signed-off-by: Khem Raj ---

Re: [OE-core] [PATCH] rust-target-config: Map rust target to OE target

2023-09-05 Thread Alexander Kanavin
The commit message should say 'powerpc 64 bit rust target'. Alex On Wed, 6 Sept 2023 at 02:08, Khem Raj wrote: > > Signed-off-by: Khem Raj > --- > meta/classes-recipe/rust-target-config.bbclass | 2 ++ > 1 file changed, 2 insertions(+) > > diff --git

Re: [OE-core] [PATCH] linux-firmware: add firmware files for NXP BT chipsets

2023-09-05 Thread Alexandre Belloni via lists.openembedded.org
On 05/09/2023 10:41:48-0700, Tom Hochstein wrote: > On Tue, Aug 29, 2023 at 05:08 AM, Tom Hochstein wrote: > > > > > On Fri, Aug 25, 2023 at 07:37 AM, Tom Hochstein wrote: > > > >> Please hold off on this. The -common design is not working correctly and > >> is causing those firmware packages

Re: [OE-core] [PATCH] apr: Fix ptests on musl

2023-09-05 Thread Alexander Kanavin
On Wed, 6 Sept 2023 at 06:09, Khem Raj wrote: > +Subject: [PATCH] testdso: Do not test dlclone on musl > + > +Upstream-Status: Inappropriate [Musl specific] Let's try to avoid adding more invasive patches that need to be rebased forever. This certainly can be offered upstream, please do so.

Re: [PATCH 1/6] [OE-core][PATCH] tcf-agent: Disable non-building features on loongarch64

2023-09-05 Thread Alexandre Belloni via lists.openembedded.org
Hello, On 05/09/2023 19:38:51+0800, Zang Ruochen wrote: > Signed-off-by: Zang Ruochen Your From: and SoB are not matching, either fix you from identity or add your SoB. > --- > meta/recipes-devtools/tcf-agent/tcf-agent_git.bb | 1 + > 1 file changed, 1 insertion(+) > > diff --git

[OE-core][PATCH] glibc-package: Fix conflict error when enable multilib.

2023-09-05 Thread leimaohui
From: Lei Maohui file /usr/include/bits/math-vector.h from install of lib32-libc6-dev-2.38-r0.armv7ahf_neon conflicts with file from package libc6-dev-2.38-r0.aarch64 Reference to the git log of glibc, upstream modified math-vector.h for aarch64, so this file has many differences from

[OE-core] [PATCH] tcl: Add a way to skip ptests

2023-09-05 Thread Khem Raj
Some tests hardcode assumptions on locales, which may not be present in musl systems e.g., therefore add a way to skip such tests using -skip option. Skip unixInit-3* test on musl Signed-off-by: Khem Raj --- meta/recipes-devtools/tcltk/tcl/run-ptest | 4 ++--

[OE-core] [PATCH 1/3] linux/generate-cve-exclusions: fix mishandling of boundary values

2023-09-05 Thread Yuta Hayama
affected_versions in kernel_cves.json does not mean "first affected version to last affected version" but actually "first affected version to fixed version". Therefore, the variable names, conditional expressions, and CVE_STATUS descriptions should be fixed. For example, when the script was run

[OE-core] [PATCH 2/3] linux/generate-cve-exclusions: print the generated time in UTC

2023-09-05 Thread Yuta Hayama
Allow time comparisons to be made regardless of where the script was run. Signed-off-by: Yuta Hayama --- meta/recipes-kernel/linux/generate-cve-exclusions.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta/recipes-kernel/linux/generate-cve-exclusions.py