[OE-core] [meta][PATCHv2] npm.bbclass: avoid building target nodejs for native npm recipes

2021-02-08 Thread Yoann Congal
The current recipe unconditionally RDEPENDS on nodejs (the target one). When building on the "-native recipe" of "BBCLASSEXTEND native" recipe, the target nodejs is unnecessarily built. This patch fixes this by only RDEPENDS on nodejs when building for the target. Signed-

[OE-core] [meta][PATCH] npm.bbclass: avoid building target nodejs for native npm recipes

2021-02-08 Thread Yoann Congal
The current recipe unconditionally RDEPENDS on nodejs (the target one). When building on the "-native recipe" of "BBCLASSEXTEND native" recipe, the target nodejs is unnecessarily built. This patch fixes this by only RDEPENDS on nodejs when building for the target. Signed-

Re: [OE-core] [meta][PATCH] npm.bbclass: avoid building target nodejs for native npm recipes

2021-02-08 Thread Yoann Congal
Le lun. 8 févr. 2021 à 18:55, Konrad Weihmann a écrit : > > > On 08.02.21 18:52, Yoann Congal wrote: > > The current recipe unconditionally RDEPENDS on nodejs (the target one). > > When building on the "-native recipe" of "BBCLASSEXTEND native" recip

Re: [OE-core] [meta][PATCHv2] npm.bbclass: avoid building target nodejs for native npm recipes

2021-02-09 Thread Yoann Congal
Le mar. 9 févr. 2021 à 16:42, Yoann CONGAL a écrit : > Le lun. 8 févr. 2021 à 20:11, Martin Jansa a > écrit : > >> You need the override after the append/prepend operator and append is >> more common than prepend (order of RDEPENDS isn't important) so I would use

[OE-core] [meta][PATCHv3] npm.bbclass: avoid building target nodejs for native npm recipes

2021-02-09 Thread Yoann Congal
The current recipe unconditionally RDEPENDS on nodejs (the target one). When building on the "-native recipe" of "BBCLASSEXTEND native" recipe, the target nodejs is unnecessarily built. This patch fixes this by only RDEPENDS on nodejs when building for the target. Signed-

Re: [OE-core] [meta][PATCHv2] npm.bbclass: avoid building target nodejs for native npm recipes

2021-02-09 Thread Yoann Congal
Le lun. 8 févr. 2021 à 20:11, Martin Jansa a écrit : > You need the override after the append/prepend operator and append is more > common than prepend (order of RDEPENDS isn't important) so I would use: > > RDEPENDS_${PN}_append_class-target = " nodejs" > Hi ! Thanks! I already sent a v2 here

Re: [OE-core] Recent failures on master depmodwrapper-cross

2023-10-16 Thread Yoann Congal
ronly: > 0444:try: > Exception: FileNotFoundError: [Errno 2] No such file or directory: > '/scratch/jenkins-BUILDS-eSDK-dev_eSDK-eSDK-master-next-pipeline-8_ZynqMpDrFull/build/tmp/work/zynqmp_generic-xilinx-linux/depmodwrapper-cross/1.0/sstate-build-create_spdx' &g

Re: [OE-core] Recent failures on master depmodwrapper-cross

2023-10-16 Thread Yoann Congal
Le lun. 16 oct. 2023 à 17:37, Mark Hatle a écrit : > On 10/16/23 7:17 AM, Yoann Congal wrote: > > Hi Mark, > > > > Le lun. 16 oct. 2023 à 02:40, Mark Hatle via lists.openembedded.org > > a écrit : > >> Running a number of builds recently, a small number of t

[OE-core] [PATCH 2/2] insane: unimplemented-ptest: ignore source file errors

2023-10-16 Thread Yoann Congal
In some cases, pathlib.Path.glob() might throw FileNotFoundError when file/directory disappear while it is iterating over them. This "warning" is not important enough to crash build in this case so just take a bb.note of the problem and move on. Signed-off-by: Yoann Congal Reporte

[OE-core] [PATCH 1/2] insane: skip unimplemented-ptest on S=WORKDIR recipes

2023-10-16 Thread Yoann Congal
On S=WORKDIR recipes, the unimplemented-ptest check will scan the whole WORKDIR and "see" disappearing file and directory. Signed-off-by: Yoann Congal Reported-by: Mark Hatle Closes: https://lists.openembedded.org/g/openembedded-core/message/189254 --- meta/classes-global/insane.b

[OE-core] [kirkstone][PATCH] cml1: Fix KCONFIG_CONFIG_COMMAND not conveyed fully in do_menuconfig

2023-09-21 Thread Yoann Congal
File was renamed between kirkstone and master. Signed-off-by: Yoann Congal --- meta/classes/cml1.bbclass | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta/classes/cml1.bbclass b/meta/classes/cml1.bbclass index d319d66ab2..fd087c2a14 100644 --- a/meta/classes/cml1.bbclas

[OE-core] [PATCH 0/2] Empty packages and bogus dependencies (Part 1)

2023-09-28 Thread Yoann Congal
an things up for core and our key layers Regards, Yoann Fawzi KHABER (1): meta/recipes: Remove empty ${PN}/DEV_PKG_DEPENDENCY workarounds Yoann Congal (1): insane: Add QA check for RRECOMMENDS on non-existent packages meta/classes-global/insane.bbclass| 11 +++ meta

[OE-core] [PATCH 2/2] meta/recipes: Remove empty ${PN}/DEV_PKG_DEPENDENCY workarounds

2023-09-28 Thread Yoann Congal
From: Fawzi KHABER Remove superfluous DEV_PKG_DEPENDENCY = "" previously used to bypass ${PN}-dev package RDEPENDS on empty ${PN}. DEV_PKG_DEPENDENCY applies RRECOMMENDS now, all workarounds are not needed anymore. Related to [YOCTO #6839] and [YOCTO #8222] Signed-off-by: Yoann CONG

[OE-core] [PATCH 1/2] insane: Add QA check for RRECOMMENDS on non-existent packages

2023-09-28 Thread Yoann Congal
off-by: Yoann Congal --- meta/classes-global/insane.bbclass | 11 +++ 1 file changed, 11 insertions(+) diff --git a/meta/classes-global/insane.bbclass b/meta/classes-global/insane.bbclass index 5743d91240..14334f02a9 100644 --- a/meta/classes-global/insane.bbclass +++ b/meta/classes-glo

[OE-core] [PATCH v2 1/4] insane: Add unimplemented-ptest infrastructure

2023-10-04 Thread Yoann Congal
is not enabled by default and may be enabled to hunt down potential ptests with: WARN_QA += "unimplemented-ptest" Signed-off-by: Jérémy Rosen Reviewed-by: Yoann Congal --- meta/classes-global/insane.bbclass | 12 1 file changed, 12 insertions(+) diff --git a/meta/clas

[OE-core] [PATCH v2 3/4] insane: Detect build-system test harnesses

2023-10-04 Thread Yoann Congal
akefile.in as our source instead of Makefile.am to easily follow includes. Filenaming conventions for autotools files are not reliable enough to do naive matching. Signed-off-by: Jérémy Rosen Reviewed-by: Yoann Congal --- meta/classes-global/insane.bbclass | 12 1 file changed, 12

[OE-core] [PATCH v2 4/4] insane: Add a naive heuristic to detect test subdirectories

2023-10-04 Thread Yoann Congal
he usual INSANE_SKIP mechanism Signed-off-by: Jérémy Rosen Reviewed-by: Yoann Congal --- meta/classes-global/insane.bbclass | 4 1 file changed, 4 insertions(+) diff --git a/meta/classes-global/insane.bbclass b/meta/classes-global/insane.bbclass index 35b6408b57..ffae4b98da 100644 --- a

[OE-core] [PATCH v2 0/4] insane: Add unimplemented-ptest checks

2023-10-04 Thread Yoann Congal
To increase ptest coverage we can check if the sources of a recipe looks like it contains unittest and warn the user that a test may be implemented there. This series provide the check infrastructure as a package QA check and some checks for : python pytest, perl Test::, meson, cmake,

[OE-core] [PATCH v2 2/4] insane: Detect python and perl based tests

2023-10-04 Thread Yoann Congal
ytest" or "from pytest" in any python file. perl Test:: is detetected by looking for any t/*.t in the toplevel source directory. Signed-off-by: Jérémy Rosen Reviewed-by: Yoann Congal --- meta/classes-global/insane.bbclass | 22 ++ 1 file changed, 22 insertions(+

Re: [OE-core] [PATCH 0/4] QA, ptest: Add unimplemented-ptest checks

2023-10-03 Thread Yoann Congal
Hi, Le sam. 30 sept. 2023 à 00:05, Yoann Congal a écrit : > To increase ptest coverage we can check if the sources of a recipe looks > like > it contains unittest and warn the user that a test may be implemented > there. > > This series provide the check infrastructure as

[OE-core] [mickledore][PATCH] cml1: Fix KCONFIG_CONFIG_COMMAND not conveyed fully in do_menuconfig

2023-09-20 Thread Yoann Congal
inking the kernel proper. | scripts/Kconfig.include:56: Sorry, this linker is not supported. (From OE-Core rev: 9c483765db762dbe8020423c8778518612b7e5f7) Signed-off-by: Jaeyoon Jung Signed-off-by: Richard Purdie (cherry picked from commit d4664d2b7974354e73d891762ebb2c8a12d62438) Si

[OE-core] [PATCH 1/4] QA, ptest: Add unimplemented-ptest infrastructure

2023-09-29 Thread Yoann Congal
is not enabled by default and may be enabled to hunt down potential ptests with: WARN_QA += "unimplemented-ptest" Signed-off-by: Jérémy Rosen Reviewed-by: Yoann Congal --- meta/classes-global/insane.bbclass | 12 1 file changed, 12 insertions(+) diff --git a/meta/clas

[OE-core] [PATCH 0/4] QA, ptest: Add unimplemented-ptest checks

2023-09-29 Thread Yoann Congal
To increase ptest coverage we can check if the sources of a recipe looks like it contains unittest and warn the user that a test may be implemented there. This series provide the check infrastructure as a package QA check and some checks for : python pytest, perl Test::, meson, cmake,

[OE-core] [PATCH 2/4] QA, ptest: Detect python and perl based tests

2023-09-29 Thread Yoann Congal
ytest" or "from pytest" in any python file. perl Test:: is detetected by looking for any t/*.t in the toplevel source directory. Signed-off-by: Jérémy Rosen Reviewed-by: Yoann Congal --- meta/classes-global/insane.bbclass | 26 ++ 1 file changed, 26 insertions(+

[OE-core] [PATCH 3/4] QA, ptest: Detect build-system test harnesses

2023-09-29 Thread Yoann Congal
akefile.in as our source instead of Makefile.am to easily follow includes. Filenaming conventions for autotools files are not reliable enough to do naive matching. Signed-off-by: Jérémy Rosen Reviewed-by: Yoann Congal --- meta/classes-global/insane.bbclass | 12 1 file changed, 12

[OE-core] [PATCH 4/4] QA, ptest: Add a naive heuristic to detect test subdirectories

2023-09-29 Thread Yoann Congal
he usual INSANE_SKIP mechanism Signed-off-by: Jérémy Rosen Reviewed-by: Yoann Congal --- meta/classes-global/insane.bbclass | 4 1 file changed, 4 insertions(+) diff --git a/meta/classes-global/insane.bbclass b/meta/classes-global/insane.bbclass index a5d3793265..ba12f3ea16 100644 --- a

Re: [OE-core] [PATCH v2 0/4] insane: Add unimplemented-ptest checks

2023-10-05 Thread Yoann Congal
Hi, Le jeu. 5 oct. 2023 à 10:47, Alexander Kanavin a écrit : > On Wed, 4 Oct 2023 at 14:57, Yoann Congal wrote: > > Currently, this check find: > > * 309 unimplemented ptest in oe-core/meta-poky/meta-yocto-bsp > > * 827 unimplemented ptest in meta-openembedd

[OE-core] [PATCH v3 1/4] insane: Add unimplemented-ptest infrastructure

2023-10-10 Thread Yoann Congal
is not enabled by default and may be enabled to hunt down potential ptests with: WARN_QA += "unimplemented-ptest" Signed-off-by: Jérémy Rosen Reviewed-by: Yoann Congal --- meta/classes-global/insane.bbclass | 9 + 1 file changed, 9 insertions(+) diff --git a/meta/classes-global/insane.

[OE-core] [PATCH v3 2/4] insane: Detect python and perl based tests

2023-10-10 Thread Yoann Congal
ytest" or "from pytest" in any python file. perl Test:: is detetected by looking for any t/*.t in the toplevel source directory. Signed-off-by: Jérémy Rosen Reviewed-by: Yoann Congal --- meta/classes-global/insane.bbclass | 22 ++ 1 file changed, 22 insertions(+

[OE-core] [PATCH v3 0/4] insane: Add unimplemented-ptest checks

2023-10-10 Thread Yoann Congal
To increase ptest coverage we can check if the sources of a recipe looks like it contains unittest and warn the user that a test may be implemented there. This series provide the check infrastructure as a package QA check and some checks for : python pytest, perl Test::, meson, cmake,

[OE-core] [PATCH v3 4/4] insane: Add a naive heuristic to detect test subdirectories

2023-10-10 Thread Yoann Congal
he usual INSANE_SKIP mechanism Signed-off-by: Jérémy Rosen Reviewed-by: Yoann Congal --- meta/classes-global/insane.bbclass | 4 1 file changed, 4 insertions(+) diff --git a/meta/classes-global/insane.bbclass b/meta/classes-global/insane.bbclass index 3fa9da8aff..07de974a54 100644 --- a

[OE-core] [PATCH v3 3/4] insane: Detect build-system test harnesses

2023-10-10 Thread Yoann Congal
akefile.in as our source instead of Makefile.am to easily follow includes. Filenaming conventions for autotools files are not reliable enough to do naive matching. Signed-off-by: Jérémy Rosen Reviewed-by: Yoann Congal --- meta/classes-global/insane.bbclass | 12 1 file changed, 12

Re: [OE-core] [PATCH v2 0/4] insane: Add unimplemented-ptest checks

2023-10-06 Thread Yoann Congal
Le ven. 6 oct. 2023 à 09:20, Richard Purdie < richard.pur...@linuxfoundation.org> a écrit : > On Wed, 2023-10-04 at 14:57 +0200, Yoann Congal wrote: > > To increase ptest coverage we can check if the sources of a recipe looks > like > > it contains unittest and warn

[OE-core] Detecting unimplemented ptests with heuristics

2023-10-19 Thread Yoann Congal
5 Regards, -- Yoann Congal Smile ECS - Tech Expert -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#189433): https://lists.openembedded.org/g/openembedded-core/message/189433 Mute This Topic: https://lists.openembedded.org/mt/102056219/21656 G

[OE-core] [PATCH] scripts/patchreview: Add a custom pattern for finding recipe patches

2023-10-10 Thread Yoann Congal
From: Mickael RAMILISON This introduces support for specifying a search pattern with the -p/--pattern option in the patchreview.py script. This is designed to accommodate the directory structure of meta-openembedded. Signed-off-by: Mickael RAMILISON Reviewed-by: Yoann Congal --- Note

Re: [OE-core] Detecting unimplemented ptests with heuristics

2023-10-20 Thread Yoann Congal
On 10/19/23 17:21, Michael Opdenacker wrote: > Hi Yoann Hi, > On 19.10.23 at 10:00, Yoann Congal wrote: >> Hi everyone, >> >> We recently implemented a way to detect recipes for upstream code that >> contain unit tests but does not implement ptests. >>

[OE-core] [PATCH] sanity: Fix small typos

2023-01-24 Thread Yoann Congal
* reproducibile -> reproducible * distrubution -> distribution * Joined lines gone awry * and and -> and Signed-off-by: Yoann Congal --- meta/classes-global/sanity.bbclass | 8 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/meta/classes-global/sanity.bbclas

[OE-core] [PATCH 2/2] meta/recipes: Remove empty ${PN}/DEV_PKG_DEPENDENCY workarounds

2023-02-23 Thread Yoann Congal
From: Fawzi KHABER Remove superfluous DEV_PKG_DEPENDENCY = "" previously used to bypass ${PN}-dev package RDEPENDS on empty ${PN}. DEV_PKG_DEPENDENCY applies RRECOMMENDS now, all workarounds are not needed anymore. Related to [YOCTO #6839] Signed-off-by: Yoann CONGAL Signed-off

[OE-core] [PATCH 1/2] insane: Add QA check for RRECOMMENDS on non-existent packages

2023-02-23 Thread Yoann Congal
of a generated warning: WARNING: python3-3.11.2-r0 do_package_qa: QA Issue: python3-dev -> python3 but won't be build [rrecommends-non-existant] This will make [YOCTO #8222] appears in the QA logs. Signed-off-by: Yoann Congal Signed-off-by: Fawzi KHABER --- meta/classes-global/insane.bbclass |

[OE-core] [RFC PATCH 0/2] Handling of ${PN}-dev RRECOMMENDS non-existent ${PN}

2023-02-23 Thread Yoann Congal
This series is a work in progress on 2 related bugs : * [YOCTO #6839] Handle dev package with no main package more gracefully * [YOCTO #8222] Elide dependency from -dev package on main package if there are no shared libraries in it An empty package ${PN} is not generated by default. This has

Re: [OE-core] [RFC PATCH 0/2] Handling of ${PN}-dev RRECOMMENDS non-existent ${PN}

2023-02-24 Thread Yoann Congal
es (maybe by using > pkgdata) This is exactly the kind of discussion we need to have. Thanks! I'm leaning towards "1." but still, I think, it should be generalized to any in-recipe RRECOMMENDS links. Regards, > Regards, > Qi > > > > On 2/24/23 07:29, Yoann Con

[OE-core] [pseudo][PATCH 0/1] pseudo_util.c: Open file with O_CLOEXEC to avoid fd leak

2023-02-28 Thread Yoann Congal
Hi, The following patch is the work done by Pavel Modilaynen in 04-2019 on [YOCTO #13311]. Then, Mingli Yu tried to get it merged in 01-2020 without success. I just added a ref to [YOCTO #13311] in the commit message. Best regards, Yoann Pavel Modilaynen (1): pseudo_util.c: Open file with

[OE-core] [pseudo][PATCH 1/1] pseudo_util.c: Open file with O_CLOEXEC to avoid fd leak

2023-02-28 Thread Yoann Congal
From: Pavel Modilaynen Use close-on-exec (O_CLOEXEC) flag when open log file to make sure its file descriptor is not leaked to parent process on fork/exec. Fixes [YOCTO #13311] Signed-off-by: Mingli Yu Signed-off-by: Yoann Congal --- pseudo_util.c | 2 +- 1 file changed, 1 insertion(+), 1

Re: [OE-core] [pseudo][PATCH 1/1] pseudo_util.c: Open file with O_CLOEXEC to avoid fd leak

2023-03-01 Thread Yoann Congal
Hi, On 3/1/23 09:52, Alexandre Belloni wrote: > On 01/03/2023 01:03:04+0100, Yoann Congal wrote: >> From: Pavel Modilaynen >> >> Use close-on-exec (O_CLOEXEC) flag when open log file to >> make sure its file descriptor is not leaked to parent >> process on for

Re: [OE-core] [PATCH] cve-update-nvd2-native: added the missing http import

2023-04-12 Thread Yoann Congal
ception from urllib... Maybe someone with more knowledge in urllib can tell us? Regards, > Br. > > On Wed, Apr 12, 2023 at 1:36 PM Yoann Congal wrote: >> >> Hi, >> >> On 4/12/23 12:19, Jan Vermaete wrote: >>> Signed-off-by: Jan Vermaete >>> --- >

Re: [OE-core] [PATCH] icu: upgrade 72-1 -> 73-1

2023-04-19 Thread Yoann Congal
fc2e9b74652f1525603b3209a4539d2d345d704e3df3bf9b957e " > > UPSTREAM_CHECK_REGEX = "releases/tag/release-(?P(?!.+rc).+)" > GITHUB_BASE_URI = "https://github.com/unicode-org/icu/releases; Hi Florian, Well, this is not a patch... Let's see internally how we can cleanu

[OE-core] [PATCH] cve-extra-exclusions: linux-yocto: ignore fixed CVE-2023-1652 & CVE-2023-1829

2023-04-23 Thread Yoann Congal
CVE-2023-1652 & CVE-2023-1829 are fixed by all version used by linux-yocto. Fixing commits are not referenced by NVD but are referenced by: * https://www.linuxkernelcves.com * Debian kernel-sec team ... this should be trust worthy enough. Signed-off-by: Yoann Congal --- .../distro/include

Re: [OE-core] [PATCH] cve-extra-exclusions.inc: Exclude some issues not present in linux-yocto

2023-04-04 Thread Yoann Congal
23-1077" > + > +# https://nvd.nist.gov/vuln/detail/CVE-2023-1078 > +# Patched in kernel 6.2 f753a68980cf4b59a80fe677619da2b1804f526d > +# Backported in version 5.15.94 528e3f3a4b53df36dafd10cdf6b8c0fe2aa1c4ba > +# Backported in version 6.1.12 1d52bbfd469af69fbcae88c67f160ce1b968e7f3 &

[OE-core] [PATCH] cve-extra-exclusions: ignore inapplicable linux-yocto CVEs

2023-04-06 Thread Yoann Congal
CVEs CVE-2023-0179, CVE-2023-1079 and CVE-2023-1513 are patched in our kernels but appear as active because the NVD database is not up to date. Signed-off-by: Yoann Congal Reviewed-by: Frank WOLFF --- .../distro/include/cve-extra-exclusions.inc | 25 +++ 1 file changed, 25

Re: [OE-core] [PATCH] cve-extra-exclusions.inc: Exclude some issues not present in linux-yocto

2023-04-06 Thread Yoann Congal
On 4/6/23 10:36, Richard Purdie wrote: > On Thu, 2023-04-06 at 10:23 +0200, Yoann Congal wrote: >> >> For CVE-2022-38457 and CVE-2022-40133 > > This one appears to be fixed for 6.1 only with this change: > > https://git.kernel.org/pub/scm/linux/kernel/git/t

Re: [OE-core] [PATCH] cve-extra-exclusions.inc: Exclude some issues not present in linux-yocto

2023-04-06 Thread Yoann Congal
Hi On 4/5/23 11:55, Richard Purdie wrote: > On Wed, 2023-04-05 at 11:51 +0200, Yoann Congal wrote: >> Hi Richard, >> >> On 4/5/23 00:26, Richard Purdie wrote: >>> .../... >>> Thanks, I tweaked those bits. I did a bit more research and the other >>

Re: [OE-core] [PATCH v2] cve-exclusions: Document some further linux-yocto CVE statuses

2023-04-07 Thread Yoann Congal
On 4/7/23 16:24, Richard Purdie wrote: > Add some information about some further kernel CVEs which don't apply for > either linux-yocto or don't apply for linux-yocto 6.1. > > Signed-off-by: Richard Purdie Perfect! Reviewed-by: Yoann Congal > --- > meta/conf/distro

Re: [OE-core] [PATCH] cve-update-nvd2-native: added the missing http import

2023-04-12 Thread Yoann Congal
ou but chose to remove the except block to get my code running. [1]: https://git.yoctoproject.org/poky/tree/meta/recipes-core/meta/cve-update-nvd2-native.bb#n146 > > headers = {} > if api_key: Regards, -- Yoann Congal Smile ECS - Tech Expert -=-=-=-=-=-=-=-=-=-=-=- Links

[OE-core] [PATCH 1/2] cve-exclusions_6.1: ignore patched CVE-2022-38457 & CVE-2022-40133

2023-04-06 Thread Yoann Congal
Ignore CVE-2022-38457 & CVE-2022-40133 as they looks patched in our 6.1 branch. I've asked the NVD to add the commit as the patch for these CVEs, but in the meantime, other sources seem to agree that the commit fixes these CVEs (and I concur). Signed-off-by: Yoann Congal --- meta/rec

[OE-core] [PATCH 2/2] cve-extra-exclusion: ignore disputed CVE-2023-23005

2023-04-06 Thread Yoann Congal
Signed-off-by: Yoann Congal Reviewed-by: Frank WOLFF --- meta/conf/distro/include/cve-extra-exclusions.inc | 10 ++ 1 file changed, 10 insertions(+) diff --git a/meta/conf/distro/include/cve-extra-exclusions.inc b/meta/conf/distro/include/cve-extra-exclusions.inc index 0b89598501

Re: [OE-core] [PATCH] cve-extra-exclusions.inc: Exclude some issues not present in linux-yocto

2023-04-05 Thread Yoann Congal
el.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit?id=49c47cc21b5b7a3d8deb18fc57b0aa2ab1286962 > 5.15.105 > 6.1.20 Included > > CVE-2023-28866: linux-yocto > https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-28866 * > https://git.kernel.org/pub/scm/linux/kerne

Re: [OE-core] [PATCH] cve-exclusions: Document some further linux-yocto CVE statuses

2023-04-07 Thread Yoann Congal
ist.gov/vuln/detail/CVE-2023-1075 > +# Introduced in v4.20 a42055e8d2c30d4decfc13ce943d09c7b9dad221 > +# Patched in kernel v6.2 ffe2a22562444720b05bdfeb999c03e810d84cbb > +# Backported in version 6.1.11 37c0cdf7e4919e5f76381ac60817b67bcbdacb50 > +# 5.15 still has issue, include/net/tls.h:is_tx_ready() would

Re: [OE-core] [PATCH v2 2/2] oeqa/selftest/cases/package.py: adding unittest for package rename conflicts

2023-03-27 Thread Yoann Congal
: > This Unittest tries to rename a package, using an already used name and > fails on do_package. > > Reviewed-by: Yoann CONGAL > Signed-off-by: Fawzi KHABER > --- > .../packagenameconflict/packagenameconflict.bb | 10 ++ > meta/classes-global/package.bbclass

Re: [OE-core] [PATCH v2 1/2] package.bbclass: check packages name conflict in do_package

2023-03-27 Thread Yoann Congal
; + > > ### > # Optimisations > > ### -- Yoann Congal Smile ECS - Tech Expert -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (

[OE-core] [PATCH v2] oeqa/selftest/devtool: add unit test for "devtool add -b"

2023-07-05 Thread Yoann Congal
Fix [Yocto #15085] Co-authored-by: Fawzi KHABER Signed-off-by: Yoann Congal --- meta/lib/oeqa/selftest/cases/devtool.py | 32 + 1 file changed, 32 insertions(+) diff --git a/meta/lib/oeqa/selftest/cases/devtool.py b/meta/lib/oeqa/selftest/cases/devtool.py index

Re: [OE-core] [PATCH] oeqa/selftest/devtool: add unit test for "devtool add -b"

2023-06-29 Thread Yoann Congal
Le mer. 28 juin 2023 à 21:47, Richard Purdie a écrit : > > On Wed, 2023-06-28 at 09:09 +0200, Yoann Congal wrote: > > From: Fawzi KHABER > > > > Fix [Yocto #15085] > > > > Signed-off-by: Fawzi KHABER > > Signed-off-by: Yoann Congal > > --- &

[OE-core] [PATCH] oeqa/selftest/devtool: add unit test for "devtool add -b"

2023-06-28 Thread Yoann Congal
From: Fawzi KHABER Fix [Yocto #15085] Signed-off-by: Fawzi KHABER Signed-off-by: Yoann Congal --- meta/lib/oeqa/selftest/cases/devtool.py | 23 +++ 1 file changed, 23 insertions(+) diff --git a/meta/lib/oeqa/selftest/cases/devtool.py b/meta/lib/oeqa/selftest/cases

[OE-core] [PATCH] recipetool: Fix inherit in created -native* recipes

2023-06-28 Thread Yoann Congal
native and nativesdk classes are special and must be inherited last : put them at the end of the gathered classes to inherit. Signed-off-by: Yoann Congal --- scripts/lib/recipetool/create.py | 4 1 file changed, 4 insertions(+) diff --git a/scripts/lib/recipetool/create.py b/scripts/lib

Re: [OE-core][kirkstone 04/15] linux-yocto: Exclude 121 CVEs already fixed upstream

2023-05-10 Thread Yoann Congal
Hi Steve! On 5/10/23 00:32, Steve Sakoman wrote: > From: Yoann Congal > > Exclude CVEs that are fixed in both current linux-yocto version > v5.10.175 and v5.15.108. > > To get the commit fixing a CVE, I used the Debian kernel-sec repo [1]. > > [1]: > https://s

[OE-core] [PATCH][kirkstone] linux-yocto: Exclude 121 CVEs already fixed upstream

2023-05-07 Thread Yoann Congal
Exclude CVEs that are fixed in both current linux-yocto version v5.10.175 and v5.15.108. To get the commit fixing a CVE, I used the Debian kernel-sec repo [1]. [1]: https://salsa.debian.org/kernel-team/kernel-sec/-/commit/86d5040aee9275f9555458fcaf9cb43710dff398 Signed-off-by: Yoann Congal

[OE-core] [PATCH][dunfell] linux-yocto: Exclude 294 CVEs already fixed upstream

2023-05-11 Thread Yoann Congal
Exclude CVEs that are fixed in current linux-yocto version v5.4.237. To get the commit fixing a CVE, I used the Debian kernel-sec repo [1]. [1]: https://salsa.debian.org/kernel-team/kernel-sec/-/commit/86d5040aee9275f9555458fcaf9cb43710dff398 Signed-off-by: Yoann Congal --- meta/recipes

[OE-core] [PATCH v2][kirkstone] linux-yocto: Exclude 121 CVEs already fixed upstream

2023-05-10 Thread Yoann Congal
Exclude CVEs that are fixed in both current linux-yocto version v5.10.175 and v5.15.108. To get the commit fixing a CVE, I used the Debian kernel-sec repo [1]. [1]: https://salsa.debian.org/kernel-team/kernel-sec/-/commit/86d5040aee9275f9555458fcaf9cb43710dff398 Signed-off-by: Yoann Congal

Re: [OE-core] [PATCH] [WIC] Configurable addressing of GTP main table

2024-01-19 Thread Yoann Congal
sector_size) + GPT_OVERHEAD >   > self.min_size *= self.sector_size > self.min_size += self.extra_space > @@ -606,6 +684,14 @@ class PartitionedImage(): > exec_native_cmd("sfdisk --part-type %s %s %s" % \ > (self.path, part.

Re: [OE-core][PATCH] python3-yamllint: Add recipe

2024-01-22 Thread Yoann Congal
nt_1.33.0.bb does not have an assigned maintainer. Please add an entry into meta/conf/distro/include/maintainers.inc. [missing-maintainer] Regards, -- Yoann Congal Smile ECS - Tech Expert -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#194

[OE-core] [PATCH] waf.bbclass: Print waf output on unparsable version

2024-02-15 Thread Yoann Congal
builds/11/steps/32/logs/stdio line 31883 Signed-off-by: Yoann Congal --- meta/classes-recipe/waf.bbclass | 5 - 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/meta/classes-recipe/waf.bbclass b/meta/classes-recipe/waf.bbclass index 5fa0cc4987..70bf3be8fd 100644 --- a/meta/classes-rec

Re: [OE-core] [PATCH] cve-check: Modify judgment processing using "=" in version comparison

2024-02-20 Thread Yoann Congal
mpg123-1.32.3-r0 do_cve_check: mpg123: Failed to compare 1.32.3 = > pre0.59s for CVE-2007-0578 > WARNING: mpg123-1.32.3-r0 do_cve_check: mpg123: Failed to compare 1.32.3 = > pre0.59s_r11 for CVE-2007-0578 > WARNING: mpg123-1.32.3-r0 do_cve_check: mpg123: Failed to compare 1.32.3 = &g

[OE-core] [kirkstone][PATCH v2] externalsrc: Ensure SRCREV is processed before accessing SRC_URI

2023-12-15 Thread Yoann Congal
to bb.fetch.get_srcrev(). Fixes [YOCTO #14918] Signed-off-by: Yoann Congal Suggested-by: Chris Wyse --- v1->v2: * Only call get_srcrev() if SRCREV is used (without it the call may throw an exception e.g with a file:// SRC_URI) --- meta/classes/externalsrc.bbclass | 4 1 file changed, 4 inserti

Re: [OE-core] [kirkstone][PATCH] externalsrc: Ensure SRCREV is processed before accessing SRC_URI

2023-12-15 Thread Yoann Congal
Le 14/12/2023 à 22:50, Yoann Congal a écrit : > Le 14/12/2023 à 17:24, Steve Sakoman a écrit : >> This patch resulted in oe-seftest failures on the autobuilder: >> >> https://autobuilder.yoctoproject.org/typhoon/#/builders/83/builds/6322 >> >>

Re: [OE-core] [kirkstone][PATCH] externalsrc: Ensure SRCREV is processed before accessing SRC_URI

2023-12-14 Thread Yoann Congal
d=14918#c7 I'll look into this. > Steve > > On Thu, Dec 7, 2023 at 12:33 PM Yoann Congal wrote: >> >> Call bb.fetch.get_srcrev() before accessing SRC_URI. Without this new >> bb.fetch.get_srcrev() call, SRC_URI might be accessed before SRCREV had >> a chance to be

[OE-core] [PATCH] strace: Disable bluetooth support by default

2023-12-12 Thread Yoann Congal
, add "bluez" to strace PACKAGECONFIG. For example, in local.conf: PACKAGECONFIG:append:pn-strace = "bluetooth" Fixes [YOCTO #15323] Signed-off-by: Yoann Congal --- meta/recipes-devtools/strace/strace_6.6.bb | 3 --- 1 file changed, 3 deletions(-) diff --git a/meta/rec

Re: [OE-core] [PATCH] strace: Disable bluetooth support by default

2023-12-12 Thread Yoann Congal
Le 13/12/2023 à 04:45, Tim Orling a écrit : > > > On Tue, Dec 12, 2023 at 3:37 PM Yoann Congal <mailto:yoann.con...@smile.fr>> wrote: > > The bluetooth support adds a bluez5 dependency (and,recursively, a lot > of other stuff). Disable it by default t

Re: [OE-core] [PATCH v2] strace: Disable bluetooth support by default

2023-12-13 Thread Yoann Congal
Le 13/12/2023 à 09:35, Martin Jansa a écrit : > There is missing leading space in suggested: > PACKAGECONFIG:append:pn-strace = "bluez" V3 sent. Thanks! > On Wed, Dec 13, 2023 at 8:43 AM Yoann Congal <mailto:yoann.con...@smile.fr>> wrote: > > The bluetoot

[OE-core] [PATCH v2] strace: Disable bluetooth support by default

2023-12-12 Thread Yoann Congal
, add "bluez" to strace PACKAGECONFIG. For example, in local.conf: PACKAGECONFIG:append:pn-strace = "bluez" Fixes [YOCTO #15323] Signed-off-by: Yoann Congal Suggested-by: Ross Burton --- v1->v2: * Fixed local.conf example (thanks Tim) * Added Suggested-by: Ross (thanks R

[OE-core] [PATCH v3] strace: Disable bluetooth support by default

2023-12-13 Thread Yoann Congal
, add "bluez" to strace PACKAGECONFIG. For example, in local.conf: PACKAGECONFIG:append:pn-strace = " bluez" Fixes [YOCTO #15323] Signed-off-by: Yoann Congal Suggested-by: Ross Burton --- v1->v2: * Fixed local.conf example (thanks Tim) * Added Suggested-by: Ross

Re: [OE-core] [PATCH 0/3] Hi,

2023-12-13 Thread Yoann Congal
| 33 ++--- > meta/recipes-extended/cups/cups.inc | 2 ++ > 2 files changed, 27 insertions(+), 8 deletions(-) > > > base-commit: 564339afb73fc52a66c1a08437587cad1c4d46e7 > > > > > -- Yoann Congal Smile ECS - Tech Ex

Re: [OE-core] [master] [PATCH] cve-update-nvd2-native: increase the delay between subsequent request failures

2023-12-11 Thread Yoann Congal
lowing ideas. > If an HTTP error occurs, assume that the rate limit has already been reached > and wait 30 seconds to ensure that the next window starts. The patch will be > something like this. > > --- > meta/recipes-core/meta/cve-update-nvd2-native.bb | 5 - > 1 file ch

Re: [OE-core] [PATCH] util-linux: Delete md-raid tests

2023-12-15 Thread Yoann Congal
e bluez from the dependency chain of a default core-image-minimal build (https://bugzilla.yoctoproject.org/show_bug.cgi?id=15323) Regards, -- Yoann Congal Smile ECS - Tech Expert -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#192424): https://list

Re: [OE-core] [PATCH v3] strace: Disable bluetooth support by default

2023-12-15 Thread Yoann Congal
Le 14/12/2023 à 20:36, Khem Raj a écrit : > On Thu, Dec 14, 2023 at 11:33 AM Alexandre Belloni > wrote: >> >> On 14/12/2023 10:53:05-0800, Khem Raj wrote: >>> On Thu, Dec 14, 2023 at 1:10 AM Alexander Kanavin >>> wrote: >>>> >&g

[OE-core] [PATCH] lib/oe/patch: handle creating patches for CRLF sources

2023-11-27 Thread Yoann Congal
in patch files that does not apply on the original sources. Switching to open(..., newline='') allows to detect end-of-line but keep the original end-of-line intact. This generate correct patches for CRLF based sources. Fixes [YOCTO #15285] Signed-off-by: Yoann Congal --- meta/lib/oe/patch.py

Re: [OE-core] [PATCH] lib/oe/patch: handle creating patches for CRLF sources

2023-12-05 Thread Yoann Congal
Le mar. 5 déc. 2023 à 08:48, Alexandre Belloni < alexandre.bell...@bootlin.com> a écrit : > Hello, > > This doesn't apply on master, can you rebase? > Yes! I will send a v2 today On 27/11/2023 14:49:03+0100, Yoann Congal wrote: > > Using devtool to patch CRLF based sou

[OE-core] [PATCH v2] lib/oe/patch: handle creating patches for CRLF sources

2023-12-05 Thread Yoann Congal
in patch files that does not apply on the original sources. Switching to open(..., newline='') allows to detect end-of-line but keep the original end-of-line intact. This generate correct patches for CRLF based sources. Fixes [YOCTO #15285] Signed-off-by: Yoann Congal --- v1->v2: Reba

[OE-core] [kirkstone][PATCH] externalsrc: Ensure SRCREV is processed before accessing SRC_URI

2023-12-07 Thread Yoann Congal
[YOCTO #14918] Signed-off-by: Yoann Congal Suggested-by: Chris Wyse --- Richard, Steve: This is the commit we discussed at today's bug triage. --- meta/classes/externalsrc.bbclass | 3 +++ 1 file changed, 3 insertions(+) diff --git a/meta/classes/externalsrc.bbclass b/meta/classes

Re: [OE-core][mickledore][PATCH 1/1] python3-cryptography: fix CVE-2023-49083

2023-12-07 Thread Yoann Congal
ranch but this branch is EOL (End-of-life). See : https://wiki.yoctoproject.org/wiki/Stable_Release_and_LTS#LTS_.E2.80.9CMixin.E2.80.9D_repositories https://wiki.yoctoproject.org/wiki/Releases Regards, -- Yoann Congal Smile ECS - Tech Expert -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all message

Re: [OE-core] [PATCH] [WIC] Configurable addressing of GTP main table

2024-01-19 Thread Yoann Congal
self.min_size += GPT_OVERHEAD > +self.min_size += (self.main_ptable_offset * 1024 // > self.sector_size) + GPT_OVERHEAD > > self.min_size *= self.sector_size > self.min_size += self.extra_space > @@ -606,6 +684,14 @@ class PartitionedImage()

Re: [OE-core] [PATCH 2/2] mdadm: Disable ptest

2024-01-22 Thread Yoann Congal
purpose in there at the end. > (Oops I've previously answered to Pavel in private, sorry :( ) I guess you are talking about PTESTS_PROBLEMS => https://git.openembedded.org/openembedded-core/tree/meta/conf/distro/include/ptest-packagelists.inc#n142 Regards, Alex > > > > -

[OE-core] [PATCH v2 1/2] selftest/reproducible: Split a long line

2023-11-15 Thread Yoann Congal
No other change. Just cosmetic to avoid tripping the maximum line length of patchtest when the next element will be added to the list. Signed-off-by: Yoann Congal --- meta/lib/oeqa/selftest/cases/reproducible.py | 10 +- 1 file changed, 9 insertions(+), 1 deletion(-) diff --git a/meta

[OE-core] [PATCH v2 2/2] selftest/reproducible: Allow packages exclusion via config

2023-11-15 Thread Yoann Congal
on-reproducible failing ones to > make > investigation easier. NB: Patch was written by Richard with small fixes and a commit message from Yoann. Signed-off-by: Yoann Congal --- meta/lib/oeqa/selftest/cases/reproducible.py | 6 -- 1 file changed, 4 insertions(+), 2 deletions(-) diff --

[OE-core] [PATCH] meta-selftest/files: add xuser to static-passwd/-group

2023-11-15 Thread Yoann Congal
As xuser-account creates a new user, we need to add it to the testing static passwd file. Signed-off-by: Yoann Congal --- meta-selftest/files/static-group | 1 + meta-selftest/files/static-passwd | 1 + 2 files changed, 2 insertions(+) diff --git a/meta-selftest/files/static-group b/meta

Re: [OE-core] [PATCH 2/2] meta/recipes: Remove empty ${PN}/DEV_PKG_DEPENDENCY workarounds

2023-11-16 Thread Yoann Congal
Hi Richard, Le jeu. 16 nov. 2023 à 13:13, Richard Purdie a écrit : > On Thu, 2023-09-28 at 23:56 +0200, Yoann Congal wrote: > > From: Fawzi KHABER > > > > Remove superfluous DEV_PKG_DEPENDENCY = "" previously used to bypass > > ${PN}-dev package RDEPEN

Re: [OE-core] [PATCH] selftest/reproducible: Allow packages exclusion via config

2023-11-14 Thread Yoann Congal
Le mer. 15 nov. 2023 à 00:53, Yoann Congal a écrit : > > From: Richard Purdie > > OEQA_REPRODUCIBLE_EXCLUDED_PACKAGES can be used to prevent known > not-reproducible packages to make the reproducible test fail. > > For example, in local.conf: > OEQA_REPRODUCIBLE_EXCL

[OE-core] [PATCH] selftest/reproducible: Allow packages exclusion via config

2023-11-14 Thread Yoann Congal
on-reproducible failing ones to > make > investigation easier. NB: Patch was written by Richard with small fixes and a commit message from Yoann. Signed-off-by: Yoann Congal --- meta/lib/oeqa/selftest/cases/reproducible.py | 7 --- 1 file changed, 4 insertions(+), 3 deletions(-) diff --

Re: [OE-core] [PATCH 1/2] oeqa/selftest/reproducible: Add OEQA_REPRODUCIBLE_EXCLUDED_PACKAGES support

2023-11-14 Thread Yoann Congal
] selftest/reproducible: Allow packages exclusion via config https://lists.openembedded.org/g/openembedded-core/message/190526 -- Yoann Congal Smile ECS - Tech expert -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#190527): https://lists.openembedded.o

Re: [OE-core] [PATCH] cve-check: Log if CVE_STATUS set but not reported for component

2024-02-23 Thread Yoann Congal
_in_recipe: > bb.note("No CVE records for products in recipe %s" % (pn)) > -- > 2.39.2 > > > > > -- Yoann Congal Smile ECS - Tech expert -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#196116): https://l

Re: [OE-core] [yocto-security] OE-core CVE metrics for master on Sun 03 Mar 2024 01:00:01 AM HST

2024-03-03 Thread Yoann Congal
pt CVE-2024-24806: libuv : 4 days) * locally these CVE do not appear as Unpatched Something is weird on the autobuilder. Maybe keep the build directory around and a copy of the current CVE database for analysis ($DL_DIR/CVE_CHECK/nvdcve_2-1.db) ? > Cheers, > > Richard > > >

Re: [OE-core] [yocto-security] OE-core CVE metrics for master on Sun 03 Mar 2024 01:00:01 AM HST

2024-03-03 Thread Yoann Congal
Le dim. 3 mars 2024 à 15:10, Yoann CONGAL a écrit : > > > Le dim. 3 mars 2024 à 14:18, Peter Marko via lists.yoctoproject.org > a écrit : > >> I already mentioned this last week. >> https://lists.openembedded.org/g/openembedded-core/message/196199 >> >

  1   2   >