Re: [OE-core] [RFC][PATCH] server/process: Avoid hanging if a parser process is terminated

2022-03-25 Thread Peter Kjellerstedt
Bah, this was of course intended for the bitbake list. //Peter > -Original Message- > From: openembedded-core@lists.openembedded.org c...@lists.openembedded.org> On Behalf Of Peter Kjellerstedt > Sent: den 26 mars 2022 06:19 > To: openembedded-core@lists.openembedded.org > Subject:

[OE-core] [RFC][PATCH] server/process: Avoid hanging if a parser process is terminated

2022-03-25 Thread Peter Kjellerstedt
If a parser process is terminated while holding a write lock, then it will lead to a deadlock (see https://docs.python.org/3/library/multiprocessing.html#multiprocessing.Process.terminate). Signed-off-by: Peter Kjellerstedt --- After the discussion on IRC about the hanging parsing processes, I

Re: [OE-core] [PATCH v1 1/2] gpg-sign: Add parameters to gpg signature function

2022-03-25 Thread Ferry Toth
Hi Alexander, I see your answer on gmane, but not by e-mail, strange. But thanks for the tip, it worked and I got oe-selftest -r runtime_test.TestImage.test_testimage_dnf to run successfully. (for future readers: by following "Yocto Project Development Tasks" manual section "Performing

[OE-core] [PATCH 2/2] grep: Fix build on ppc/musl

2022-03-25 Thread Khem Raj
Backport a patch from libsigsegv Signed-off-by: Khem Raj --- ...a-standard-layout-so-glibc-and-musl-.patch | 32 +++ meta/recipes-extended/grep/grep_3.7.bb| 4 ++- 2 files changed, 35 insertions(+), 1 deletion(-) create mode 100644

[OE-core] [PATCH 1/2] diffutils: Fix build on ppc/musl

2022-03-25 Thread Khem Raj
Backport a patch from libsigsegv Signed-off-by: Khem Raj --- ...a-standard-layout-so-glibc-and-musl-.patch | 33 +++ .../diffutils/diffutils_3.8.bb| 1 + 2 files changed, 34 insertions(+) create mode 100644

[oe-core][hardknott][PATCH 1/1] flac: fix CVE-2021-0561

2022-03-25 Thread Joe Slater
From: Li Wang In append_to_verify_fifo_interleaved_ of stream_encoder.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product:

Re: [OE-core] [PATCH v2] zstd: add zstd-bin package

2022-03-25 Thread Alexandre Belloni via lists.openembedded.org
ou check? > This also caused: https://autobuilder.yocto.io/pub/repro-fail/oe-reproducible-20220325-3jr0bu2m/packages/diff-html/ > > --- > > > > Changes in v2: > > - Add zstd-bin package instead of libzstd package > > > > meta/recipes-extended/zstd/zst

Re: [OE-core] [PATCH v2] zstd: add zstd-bin package

2022-03-25 Thread Alexandre Belloni via lists.openembedded.org
Hello, On 25/03/2022 13:29:50+0100, Stefan Herbrechtsmeier wrote: > From: Stefan Herbrechtsmeier > > Add a zstd-bin package to remove libstdc++ runtime dependency from > library users and reduce the dependencies and size of the library > package. > > Signed-off-by: Stefan Herbrechtsmeier >

[OE-core] [PATCH 2/2] mount-copybind: add MOUNT_COPYBIND_AVOID_OVERLAYFS env var to skip OverlayFS

2022-03-25 Thread Luca Bocassi
From: Luca Boccassi In some cases we don't want to even attempt to set up OverlayFS, for example because SELinux in enforcing mode would kill the process attempting to use the mount. See:

[OE-core] [PATCH 1/2] mount-copybind: fix shellcheck warning

2022-03-25 Thread Luca Bocassi
From: Luca Boccassi $ shellcheck meta/recipes-core/volatile-binds/files/mount-copybind In meta/recipes-core/volatile-binds/files/mount-copybind line 54: mountcontext=",rootcontext=$(matchpathcon -n $mountpoint)" ^-^

Re: [OE-core] [PATCH] sanity: Add warning for local hasheqiv server with remote sstate mirrors

2022-03-25 Thread Steve Sakoman
On Fri, Mar 25, 2022 at 7:53 AM Jose Quaresma wrote: > > Hi Steve, > > I see this patch on dunfell-nut but afaik dunfell don't support upstream hash > equivalence server > https://git.yoctoproject.org/poky-contrib/commit/?h=stable/dunfell-nut=1d33ad9c8ea2388f51ff00ba3a3442f15f29e663 Yes, a

Re: [OE-core] [PATCH] sanity: Add warning for local hasheqiv server with remote sstate mirrors

2022-03-25 Thread Jose Quaresma
Hi Steve, I see this patch on dunfell-nut but afaik dunfell don't support upstream hash equivalence server https://git.yoctoproject.org/poky-contrib/commit/?h=stable/dunfell-nut=1d33ad9c8ea2388f51ff00ba3a3442f15f29e663 Jose Richard Purdie escreveu no dia quarta, 23/03/2022 à(s) 14:24: > We're

Re: [oe-core][dunfell][PATCH] ghostscript: backport patch fix for CVE-2021-3781

2022-03-25 Thread Steve Sakoman
Thanks Davide! I had to do a slight tweak to your patch since I've also got a patch to the ghostscript recipe to fix a couple of CVE issues for ghostscript-native. You can check my work in my stable/dunfell-next branch:

[oe-core][dunfell][PATCH] ghostscript: backport patch fix for CVE-2021-3781

2022-03-25 Thread Davide Gardenal
Upstream advisory: https://ghostscript.com/blog/CVE-2021-3781.html Other than the CVE fix other two commits are backported to fit the patch. Signed-off-by: Davide Gardenal --- .../ghostscript/CVE-2021-3781_1.patch | 121 + .../ghostscript/CVE-2021-3781_2.patch | 37 +++

[OE-core] [dunfell][PATCH] libxml2: fix CVE-2022-23308 regression

2022-03-25 Thread Ralph Siemsen
The fix for the CVE in 2.9.13 caused a regression which was addressed after 2.9.13. We import that patch here. Signed-off-by: Ralph Siemsen --- .../CVE-2022-23308-fix-regression.patch | 98 +++ meta/recipes-core/libxml/libxml2_2.9.10.bb| 1 + 2 files changed, 99

Re: [OE-core] [PATCH] zstd: add libzstd package to minimize runtime dependencies

2022-03-25 Thread Alexander Kanavin
On Fri, 25 Mar 2022 at 15:15, Stefan Herbrechtsmeier wrote: > > No, it's the same here: most (or all) of the consumers link to the > > library, and utilities are mostly for interactive development. > > We have examples for both solutions. xz has a liblzma package and brotli > a brotli-bin

Re: [OE-core] [PATCH] zstd: add libzstd package to minimize runtime dependencies

2022-03-25 Thread Stefan Herbrechtsmeier
Am 25.03.2022 um 14:54 schrieb Alexander Kanavin: On Fri, 25 Mar 2022 at 14:47, Khem Raj wrote: The standard way to do this is to inherit lib_package. that is appropriate when main package is a library but it also has some utilities accompanying it. This case seems reverse, where its tryin

Re: [OE-core] [PATCH] zstd: add libzstd package to minimize runtime dependencies

2022-03-25 Thread Alexander Kanavin
On Fri, 25 Mar 2022 at 14:47, Khem Raj wrote: > > The standard way to do this is to inherit lib_package. > > > > that is appropriate when main package is a library but it also has some > utilities accompanying it. This case seems reverse, where its tryin to > create a fine grained packaging and

Re: [OE-core] [PATCH] zstd: add libzstd package to minimize runtime dependencies

2022-03-25 Thread Khem Raj
On 3/25/22 03:48, Alexander Kanavin wrote: The standard way to do this is to inherit lib_package. that is appropriate when main package is a library but it also has some utilities accompanying it. This case seems reverse, where its tryin to create a fine grained packaging and separating

[OE-core] [PATCH v2] zstd: add zstd-bin package

2022-03-25 Thread Stefan Herbrechtsmeier
From: Stefan Herbrechtsmeier Add a zstd-bin package to remove libstdc++ runtime dependency from library users and reduce the dependencies and size of the library package. Signed-off-by: Stefan Herbrechtsmeier --- Changes in v2: - Add zstd-bin package instead of libzstd package

[OE-core] [PATCH] oeqa/runtime/context: remove duplicate sys.path entries when looking for modules

2022-03-25 Thread Ross Burton
sys.path can contain duplicate entries for each layer, which means that the search in add_controller_list() will find the same name twice and abort. As duplicate directories should be harmless, remove any duplicates before iterating through the entries. Signed-off-by: Ross Burton ---

Re: [OE-core] [PATCH v1 1/2] gpg-sign: Add parameters to gpg signature function

2022-03-25 Thread Alexander Kanavin
You can copy the sstate cache out of build-st somewhere where it will be reused (set up local.conf accordingly). Alex On Fri, 25 Mar 2022 at 12:28, Ferry Toth wrote: > > Hi, > > Op 24-03-2022 om 23:11 schreef Ferry Toth: > > > It doesn't seem to be a particularly volatile area in the code.

Re: [OE-core] [PATCH v1 1/2] gpg-sign: Add parameters to gpg signature function

2022-03-25 Thread Ferry Toth
Hi, Op 24-03-2022 om 23:11 schreef Ferry Toth: It doesn't seem to be a particularly volatile area in the code. I refreshed Xavier's patches for Gatesgarth, and am actively using unchanged patch on Honisiter. I don't know how the automated testing is working but I guess for RPM a repo

Re: [OE-core] [PATCH] zstd: add libzstd package to minimize runtime dependencies

2022-03-25 Thread Alexander Kanavin
Yes. Alex On Fri, 25 Mar 2022 at 11:55, Stefan Herbrechtsmeier wrote: > > Am 25.03.2022 um 11:48 schrieb Alexander Kanavin: > > The standard way to do this is to inherit lib_package. > > Do you propose to move the binaries to a new zstd-bin package and break > backward compatibility? > >

Re: [OE-core] [PATCH] zstd: add libzstd package to minimize runtime dependencies

2022-03-25 Thread Stefan Herbrechtsmeier
Am 25.03.2022 um 11:48 schrieb Alexander Kanavin: The standard way to do this is to inherit lib_package. Do you propose to move the binaries to a new zstd-bin package and break backward compatibility? Regards Stefan On Fri, 25 Mar 2022 at 11:19, Stefan Herbrechtsmeier wrote: From:

Re: [OE-core] [PATCH] zstd: add libzstd package to minimize runtime dependencies

2022-03-25 Thread Alexander Kanavin
The standard way to do this is to inherit lib_package. Alex On Fri, 25 Mar 2022 at 11:19, Stefan Herbrechtsmeier wrote: > > From: Stefan Herbrechtsmeier > > Add a libzstd package to remove libstdc++ runtime dependency from > library users and reduce the size of the library package and its >

[OE-core] [PATCH] zstd: add libzstd package to minimize runtime dependencies

2022-03-25 Thread Stefan Herbrechtsmeier
From: Stefan Herbrechtsmeier Add a libzstd package to remove libstdc++ runtime dependency from library users and reduce the size of the library package and its dependencies. Signed-off-by: Stefan Herbrechtsmeier --- meta/recipes-extended/zstd/zstd_1.5.2.bb | 4 1 file changed, 4

[OE-core] [PATCH 4/4] librsvg: reenable nativesdk

2022-03-25 Thread Christian Eggers
Rust is now available for nativesdk. So the nativesdk build for librsvg can be enabled again. Signed-off-by: Christian Eggers --- meta/recipes-gnome/librsvg/librsvg_2.52.7.bb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta/recipes-gnome/librsvg/librsvg_2.52.7.bb

[OE-core] [PATCH 3/4] rust-crosssdk: use ${RUST_LIBC} in ${PN}

2022-03-25 Thread Christian Eggers
TCLIBC is only valid for TARGET, not for HOST or NATIVESDK. Fixes build of rust-crosssdk if TCLIBC is set to musl. Signed-off-by: Christian Eggers --- meta/recipes-devtools/rust/rust-crosssdk_1.59.0.bb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git

[OE-core] [PATCH 2/4] machine-sdk: clear ABIEXTENSION for class-crosssdk

2022-03-25 Thread Christian Eggers
For nativesdk/crosssdk, we have no ABIEXTENSION. Fixes build of rust-crosssdk if ABIEXTENSION is set toe something like "eabi". Signed-off-by: Christian Eggers --- meta/conf/machine-sdk/x86_64.conf | 1 + 1 file changed, 1 insertion(+) diff --git a/meta/conf/machine-sdk/x86_64.conf

[OE-core] [PATCH 1/4] rust-common: override RUST_LIBC for crosssdk

2022-03-25 Thread Christian Eggers
For nativesdk/crosssdk, always glibc is used. Fixes build of rust-crosssdk if TCLIBC is set to musl. Signed-off-by: Christian Eggers --- meta/classes/rust-common.bbclass | 1 + 1 file changed, 1 insertion(+) diff --git a/meta/classes/rust-common.bbclass b/meta/classes/rust-common.bbclass index

[OE-core] [PATCH] glib-2.0: upgrade 2.70.4 -> 2.72.0

2022-03-25 Thread Christian Eggers
- 0001-gio-tests-resources.c-comment-out-a-build-host-only-.patch: dropped (integrated upstream) News * Bugs fixed: - #2620 g_time_zone_new_offset() assertion failure if offset >= 25 hours - #2538 Various unit test fixes - #2542 fuzzing: Fix test failure with G_DISABLE_ASSERT - #2547

[OE-core] [PATCH] musl: Update to latest master

2022-03-25 Thread Khem Raj
brings following fixes * 6d8a5157 fix invalid free of duplocale object when malloc has been replaced * 760f5d7e fix __WORDSIZE on x32 sys/user.h * bdb54540 sys/ptrace.h: add PTRACE_GET_RSEQ_CONFIGURATION from linux v5.13 * aa3bab6c sys/prctl.h: add PR_PAC_{SET,GET}_ENABLED_KEYS from linux v5.13 *