[OE-core] [PATCH] testimage: fix unclosed testdata file

2021-10-15 Thread Ross Burton
Signed-off-by: Ross Burton --- meta/classes/testimage.bbclass | 7 --- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/meta/classes/testimage.bbclass b/meta/classes/testimage.bbclass index a76e773853..4db05a4af4 100644 --- a/meta/classes/testimage.bbclass +++ b/meta/classes

[OE-core] [PATCH 1/2] oe/utils: log exceptions in ThreadedWorker functions

2021-10-14 Thread Ross Burton
is then incorporated into the log stream. Signed-off-by: Ross Burton --- meta/lib/oe/utils.py | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/meta/lib/oe/utils.py b/meta/lib/oe/utils.py index 238af314d1..cf65639647 100644 --- a/meta/lib/oe/utils.py +++ b/meta/lib/oe/utils.py @@ -508,7

[OE-core] [PATCH 2/2] sstate: don't silently handle all exceptions in sstate_checkhashes

2021-10-14 Thread Ross Burton
If checkstatus returns an exception we should silently handle FetchError, as this means the fetch failed for 'normal' reasons such as file not found. However, other exceptions may be raised, and these should be made visible. Signed-off-by: Ross Burton --- meta/classes/sstate.bbclass | 7

Re: [OE-core] [PATCH] linux-yocto: add libmpc-native to DEPENDS

2021-10-14 Thread Ross Burton
On Thu, 14 Oct 2021 at 10:21, Andrey Zhizhikin wrote: > It seems that GCC plugins are somehow disabled in SDK GCC, but Kernel > build system checks them on the host, which does provide them. This > leads to a false identification that plugins are enabled and leads to > further build failures. > >

[OE-core] [PATCH 2/2] license.bbclass: implement ast.NodeVisitor.visit_Constant

2021-10-13 Thread Ross Burton
Since Python 3.8 visit_Num(), visit_Str() and so on are all deprecated and replaced with visit_Constant. We can't yet remove the deprecated functions until we require 3.8, but we can implement visit_Constant to silence the deprecation warnings. Signed-off-by: Ross Burton --- meta/classes

[OE-core] [PATCH 1/2] oe/license: implement ast.NodeVisitor.visit_Constant

2021-10-13 Thread Ross Burton
Since Python 3.8 visit_Num(), visit_Str() and so on are all deprecated and replaced with visit_Constant. We can't yet remove the deprecated functions until we require 3.8, but we can implement visit_Constant to silence the deprecation warnings. Signed-off-by: Ross Burton --- meta/lib/oe

[OE-core] [PATCH][honister][master] curl: fix CVE-2021-22945 through -22947

2021-10-13 Thread Ross Burton
Signed-off-by: Ross Burton --- .../curl/curl/cve-2021-22945.patch| 34 ++ .../curl/curl/cve-2021-22946.patch| 332 .../curl/curl/cve-2021-22947.patch| 355 ++ meta/recipes-support/curl/curl_7.78.0.bb | 3 + 4 files

Re: [OE-core] [PATCH 21/25] libsoup: add a 3.x recipe

2021-10-12 Thread Ross Burton
On Mon, 11 Oct 2021 at 10:41, Alexander Kanavin wrote: > +DEPENDS = "glib-2.0 glib-2.0-native libxml2 sqlite3 libpsl nghttp2" libxml2 was removed as a build dependency. > +PROVIDES = "libsoup-3.0" As they appear to be continuing the parallel installable theme, should we just name the recipe

Re: [OE-core] [PATCH] linux-yocto: add libmpc-native to DEPENDS

2021-10-07 Thread Ross Burton
On Wed, 6 Oct 2021 at 18:59, Khem Raj wrote: > Does it have to be native or target dependency ? Native, as it builds compiler plugins for the host. Ross -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#156708):

Re: [OE-core] [PATCH] linux-yocto: add libmpc-native to DEPENDS

2021-10-06 Thread Ross Burton
- | compilation terminated. On Wed, 6 Oct 2021 at 11:12, Ross Burton wrote: > > On Wed, 6 Oct 2021 at 11:10, Ross Burton wrote: > > This depends on CONFIG_GCC_PLUGINS which I don't believe is enabled in > > any of the default configurations. meta-arm builds a few kernels with &g

Re: [OE-core] [PATCH] linux-yocto: add libmpc-native to DEPENDS

2021-10-06 Thread Ross Burton
On Wed, 6 Oct 2021 at 11:10, Ross Burton wrote: > This depends on CONFIG_GCC_PLUGINS which I don't believe is enabled in > any of the default configurations. meta-arm builds a few kernels with > defconfig, which does. Sorry, brain still not warmed up yet. CONFIG_GCC_PLUGINS needs to b

Re: [OE-core] [PATCH] linux-yocto: add libmpc-native to DEPENDS

2021-10-06 Thread Ross Burton
On Wed, 6 Oct 2021 at 01:17, Bruce Ashfield wrote: > What's the symptom when the native dependency isn't around ? I'm just > wondering why none of my tests have picked this up. Is it only showing > on ARM hosts ? Something else ? > > linux-yocto-dev can use this as well, I can take care of that,

Re: [OE-core] [PATCH 1/7] linux-yocto/5.14: scripts/gcc-plugins: consistently use HOSTCC

2021-10-06 Thread Ross Burton
Can you drop this. Turns out in fixing it, I broke it more! Ross On Wed, 6 Oct 2021 at 01:12, Bruce Ashfield wrote: > > From: Bruce Ashfield > > Integrating the following commit(s) to linux-yocto/5.14: > > 724df5812165 scripts/gcc-plugins: consistently use HOSTCC > > Signed-off-by: Bruce

[OE-core] [PATCH] linux-yocto: add libmpc-native to DEPENDS

2021-10-05 Thread Ross Burton
5.14 changed how the GCC plugins are built, which means they now depend on both GMP and MPC to be built. We already depend on gmp-native, so add libmpc-native aswell. Signed-off-by: Ross Burton --- meta/recipes-kernel/linux/linux-yocto_5.14.bb | 2 +- 1 file changed, 1 insertion(+), 1 deletion

Re: [OE-core] [PATCH] riscv: Add configure cache entries for libidl

2021-09-21 Thread Ross Burton
libidl was removed long ago, along with ORBit. Can we just drop these entirely? Ross On Tue, 21 Sept 2021 at 18:02, Khem Raj wrote: > > These were hidden in meta-networking > > Signed-off-by: Khem Raj > --- > meta/site/riscv32-linux | 3 +++ > meta/site/riscv64-linux | 3 +++ > 2 files

[OE-core] eudev retirement/rebooting

2021-09-21 Thread Ross Burton
Because this doesn't appear to be that well known, it appears that Gentoo is stopping development of eudev: https://www.gentoo.org/support/news-items/2021-08-24-eudev-retirement.html Interestingly the reason they're no longer using eudev is that systemd can be built with musl "using patches from

[OE-core] [PATCH] oeqa/target/ssh: don't assume target_dumper is set

2021-09-21 Thread Ross Burton
The target_dumper property is only set by the QemuTarget subclass, so assign a default value and check it isn't None before calling it. Signed-off-by: Ross Burton --- meta/lib/oeqa/core/target/ssh.py | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/meta/lib/oeqa/core

[OE-core] [PATCH 2/2] libsoup-2.4: remove obsolete intltool dependency

2021-09-21 Thread Ross Burton
This hasn't been needed since libsoup 2.65.2. Signed-off-by: Ross Burton --- meta/recipes-support/libsoup/libsoup-2.4_2.72.0.bb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta/recipes-support/libsoup/libsoup-2.4_2.72.0.bb b/meta/recipes-support/libsoup/libsoup

[OE-core] [PATCH 1/2] shared-mime-info: use a more concise description

2021-09-21 Thread Ross Burton
For example we don't need to talk about historic build dependencies. Signed-off-by: Ross Burton --- meta/recipes-support/shared-mime-info/shared-mime-info_git.bb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta/recipes-support/shared-mime-info/shared-mime-info_git.bb b

[OE-core] [PATCH] avahi: remove obsolete intltool-native dependency

2021-09-20 Thread Ross Burton
intltool was replaced with gettext in the 0.8 release. Signed-off-by: Ross Burton --- meta/recipes-connectivity/avahi/avahi_0.8.bb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta/recipes-connectivity/avahi/avahi_0.8.bb b/meta/recipes-connectivity/avahi/avahi_0.8.bb

[OE-core] [PATCH] ffmpeg: fix LICENSE

2021-09-16 Thread Ross Burton
Expat isn't a license name we have, use MIT instead. Signed-off-by: Ross Burton --- meta/recipes-multimedia/ffmpeg/ffmpeg_4.4.bb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta/recipes-multimedia/ffmpeg/ffmpeg_4.4.bb b/meta/recipes-multimedia/ffmpeg/ffmpeg_4.4.bb index

Re: [OE-core] Missing Expat license (was: [PATCH 12/14] ffmpeg: update LICENSE)

2021-09-16 Thread Ross Burton
On Wed, 15 Sept 2021 at 23:26, Peter Kjellerstedt wrote: > > > -LICENSE = "BSD & GPLv2+ & LGPLv2.1+ & MIT" > > > +LICENSE = "GPLv2+ & LGPLv2.1+ & ISC & Expat & BSD-2-Clause & > > > BSD-3-Clause & IJG" > > > > There is no "Expat" license in neither meta/files/common-licenses nor > > in

Re: [OE-core] [yocto-security] OE-core CVE metrics for hardknott on Sun 12 Sep 2021 05:00:01 AM HST

2021-09-15 Thread Ross Burton
On Mon, 13 Sept 2021 at 18:26, Steve Sakoman wrote: > Taking a quick look at the code in cve-update-db-native.bb I see that > database updates can fail with a warning message printed. So it could > well be that the update failed for some reason, printed the warning, > and then used the old

Re: [OE-core] [PATCH 1/7] testimage: TEST_SERVER_IP isn't mandatory

2021-09-10 Thread Ross Burton
Hold off on this, it breaks some potential use-cases. Ross On Fri, 10 Sept 2021 at 11:20, Ross Burton via lists.openembedded.org wrote: > > When using the simpleremote test target, TEST_SERVER_IP doesn't have to > be configured as the code will detect the host's IP if it isn't set. &

[OE-core] [PATCH 5/7] oeqa/core/target: remove server port parameter

2021-09-10 Thread Ross Burton
parameter entirely, and let the kernel pick a free port. Signed-off-by: Ross Burton --- meta/lib/oeqa/core/target/qemu.py | 1 - meta/lib/oeqa/core/target/ssh.py| 3 +-- meta/lib/oeqa/runtime/cases/apt.py | 4 +--- meta/lib/oeqa/runtime/cases/dnf.py | 3 +-- meta/lib/oeqa/runtime/cases

[OE-core] [PATCH 2/7] testimage: pass the base image name to the target class

2021-09-10 Thread Ross Burton
Also pass the the base image name to the target class. This is the full path to the deploy directory and the image name without any extensions, so makes it easier to find ancillary files. Signed-off-by: Ross Burton --- meta/classes/testimage.bbclass | 1 + 1 file changed, 1 insertion(+) diff

[OE-core] [PATCH 4/7] oeqa/core/target: move server_ip to superclass

2021-09-10 Thread Ross Burton
Move towards a consistent interface across OETarget subclasses by moving server_ip to the superclass. Signed-off-by: Ross Burton --- meta/lib/oeqa/core/target/__init__.py | 3 ++- meta/lib/oeqa/core/target/qemu.py | 4 +--- meta/lib/oeqa/core/target/ssh.py | 3 +-- 3 files changed, 4

[OE-core] [PATCH 7/7] oeqa/target/ssh: don't assume target_dumper is set

2021-09-10 Thread Ross Burton
The target_dumper property is only set by the QemuTarget subclass, so assign a default value and check it isn't None before calling it. Signed-off-by: Ross Burton --- meta/lib/oeqa/core/target/ssh.py | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/meta/lib/oeqa/core

[OE-core] [PATCH 6/7] oeqa/core/target: add target_ip to superclass

2021-09-10 Thread Ross Burton
Move towards a consistent interface across OETarget subclasses by moving target_ip to the superclass. QemuTarget automatically determines the target IP on startup, so default that to None. Signed-off-by: Ross Burton --- meta/lib/oeqa/core/target/__init__.py | 3 ++- meta/lib/oeqa/core/target

[OE-core] [PATCH 3/7] oeqa/core/target: remove abstract decorations

2021-09-10 Thread Ross Burton
There's no need to inherit from object in Python 3, and marking the methods as abstract is overkill considering the type hierarchy. Signed-off-by: Ross Burton --- meta/lib/oeqa/core/target/__init__.py | 9 + 1 file changed, 1 insertion(+), 8 deletions(-) diff --git a/meta/lib/oeqa/core

[OE-core] [PATCH 1/7] testimage: TEST_SERVER_IP isn't mandatory

2021-09-10 Thread Ross Burton
When using the simpleremote test target, TEST_SERVER_IP doesn't have to be configured as the code will detect the host's IP if it isn't set. Signed-off-by: Ross Burton --- meta/classes/testimage.bbclass | 7 ++- 1 file changed, 2 insertions(+), 5 deletions(-) diff --git a/meta/classes

Re: [OE-core] [PATCH 1/1] oeqa/sdk: assimp.py -> cmake.py

2021-09-10 Thread Ross Burton
On Fri, 10 Sept 2021 at 09:08, Robert Yang wrote: > -self._run("cd {build} && cmake -DCMAKE_VERBOSE_MAKEFILE:BOOL=ON > {source}".format(**dirs)) > +self._run("cd {build} && cmake {source}".format(**dirs)) Verbose makefiles were turned on for a reason: when it breaks, we

Re: [OE-core] [PATCH 1/1] assimp: Remove it

2021-09-08 Thread Ross Burton
On Tue, 7 Sept 2021 at 13:50, Alexander Kanavin wrote: > I'm not sure why layerindex says otherewise, but neither vulkan nor anything > in meta-qt5 actually depend on assimp. > qt5/6 has an option, off by default, to use external assimp, vulkan has no > dependency at all. > > This leaves

Re: [OE-core] [PATCH 1/1] assimp: Remove it

2021-09-07 Thread Ross Burton
On Tue, 7 Sept 2021 at 13:04, Randy MacLeod wrote: > I'll look at the sections that you have pointed out later today. Debian is always worth looking at when there's license issues. https://salsa.debian.org/debian/assimp/-/blob/master/debian/README.source Specifically:

[OE-core] [PATCH] create-spdx: handle CLOSED license

2021-09-06 Thread Ross Burton
The special CLOSED license means that this is closed source code with no other licensing assertions. It's not a generic license in oe-core, and not a SPDX license, so transform it to NONE explicitly. Signed-off-by: Ross Burton --- meta/classes/create-spdx.bbclass | 3 +++ 1 file changed, 3

[OE-core] [PATCH v2 3/4] create-spdx: embed unknown license texts

2021-09-03 Thread Ross Burton
For licenses which are not known to SPDX, find and embed the actual license text in an ExtractedLicesingInfo block. Signed-off-by: Ross Burton --- meta/classes/create-spdx.bbclass | 51 +++- 1 file changed, 37 insertions(+), 14 deletions(-) diff --git a/meta/classes

[OE-core] [PATCH v2 1/4] create-spdx: transform license list into a dict for faster lookups

2021-09-03 Thread Ross Burton
spdx-licenses.json contains an array of licenses objects. As we'll be searching it often, convert that to a dictionary when we parse it. Signed-off-by: Ross Burton --- meta/classes/create-spdx.bbclass | 15 --- 1 file changed, 8 insertions(+), 7 deletions(-) diff --git a/meta

[OE-core] [PATCH v2 4/4] create-spex: don't duplicate license texts in each package

2021-09-03 Thread Ross Burton
Instead of putting the full license text for non-SPDX licenses into the recipe and every package, use links to the recipe from the packages if possible. Signed-off-by: Ross Burton --- meta/classes/create-spdx.bbclass | 25 ++--- 1 file changed, 14 insertions(+), 11 deletions

[OE-core] [PATCH v2 2/4] create-spdx: remove redundant test

2021-09-03 Thread Ross Burton
add_extracted_document() is only called if the license isn't known to SPDX, so there's no need to check again. Signed-off-by: Ross Burton --- meta/classes/create-spdx.bbclass | 3 --- 1 file changed, 3 deletions(-) diff --git a/meta/classes/create-spdx.bbclass b/meta/classes/create

[OE-core] [PATCH 2/2] create-spex: don't duplicate license texts in each package

2021-09-03 Thread Ross Burton
Instead of putting the full license text for non-SPDX licenses into the recipe and every package, use links to the recipe from the packages if possible. Signed-off-by: Ross Burton --- meta/classes/create-spdx.bbclass | 25 ++--- 1 file changed, 14 insertions(+), 11 deletions

[OE-core] [PATCH 1/2] oeqa/selftest/recipetool: update for license changes

2021-09-03 Thread Ross Burton
Now that recipetool writes BSD-3-Clause, update the test appropriately. Signed-off-by: Ross Burton --- meta/lib/oeqa/selftest/cases/recipetool.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta/lib/oeqa/selftest/cases/recipetool.py b/meta/lib/oeqa/selftest/cases

[OE-core] [PATCH v2] xinetd: correct LICENSE

2021-09-03 Thread Ross Burton
The xinetd license is superficially BSD-like, but it isn't BSD. Now that we have the full SPDX license set in oe-core, use the specific xinetd license. Signed-off-by: Ross Burton --- meta/recipes-extended/xinetd/xinetd_2.3.15.4.bb | 4 +--- 1 file changed, 1 insertion(+), 3 deletions(-) diff

[OE-core] [PATCH 14/14] recipetool/create_buildsys_python: treat BSD as BSD-3-Clause

2021-09-03 Thread Ross Burton
uot;BSD", they are all BSD-3-Clause. As we expect the recipe maintainer to verify the license anyway, and this matches the previous license text, explicitly set the license to BSD-3-Clause. Signed-off-by: Ross Burton --- scripts/lib/recipetool/create_buildsys_python.py | 2 +- 1 file changed, 1

[OE-core] [PATCH 13/14] hdparm: set correct license

2021-09-03 Thread Ross Burton
The bulk of hdparm is under a unique license. Set the correct BSD version, and specify that the hdparm license is also used. Signed-off-by: Ross Burton --- meta/recipes-extended/hdparm/hdparm_9.62.bb | 7 --- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/meta/recipes

[OE-core] [PATCH 12/14] ffmpeg: update LICENSE

2021-09-03 Thread Ross Burton
"BSD" is ambiguous, ffmpeg comprises of several licenses which are BSD-like. Signed-off-by: Ross Burton --- meta/recipes-multimedia/ffmpeg/ffmpeg_4.4.bb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta/recipes-multimedia/ffmpeg/ffmpeg_4.4.bb b/meta/recipes-

[OE-core] [PATCH 11/14] ppp: set precise BSD license

2021-09-03 Thread Ross Burton
"BSD" is ambiguous, use the precise licenses BSD-3-Clause-Attribution and BSD-3-Clause. Signed-off-by: Ross Burton --- meta/recipes-connectivity/ppp/ppp_2.4.9.bb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta/recipes-connectivity/ppp/ppp_2.4.9.bb b/me

[OE-core] [PATCH 09/14] shadow-sysroot: sync license with shadow

2021-09-03 Thread Ross Burton
This recipe is just a single data file from shadow, but as we can't easily tell what license that specific file is under just copy the full license statement. Signed-off-by: Ross Burton --- meta/recipes-extended/shadow/shadow-sysroot_4.6.bb | 2 +- 1 file changed, 1 insertion(+), 1 deletion

[OE-core] [PATCH 10/14] ovmf: set precise BSD license

2021-09-03 Thread Ross Burton
"BSD" is ambiguous, use the precise license BSD-2-Clause-Patent. Signed-off-by: Ross Burton --- meta/recipes-core/ovmf/ovmf_git.bb | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/meta/recipes-core/ovmf/ovmf_git.bb b/meta/recipes-core/ovmf/ovmf_git.bb index 1

[OE-core] [PATCH 08/14] valgrind: set precise BSD license

2021-09-03 Thread Ross Burton
"BSD" is ambiguous, use the precise license BSD-3-Clause. Signed-off-by: Ross Burton --- meta/recipes-devtools/valgrind/valgrind_3.17.0.bb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta/recipes-devtools/valgrind/valgrind_3.17.0.bb b/meta/recipes-devtool

[OE-core] [PATCH 07/14] libxfont: set precise BSD license

2021-09-03 Thread Ross Burton
"BSD" is ambiguous, use the precise license BSD-3-Clause. Note that the actual license text is BSD 4-Clause with clause 3 rescinded: https://gitlab.freedesktop.org/xorg/lib/libxfont/-/blob/master/COPYING#L157 Signed-off-by: Ross Burton --- meta/recipes-graphics/xorg-lib/libxfont_1.

[OE-core] [PATCH 06/14] dev-manual/common-tasks: sync libxpm fragment with the recipe

2021-09-03 Thread Ross Burton
Specifically, the actual recipe now has LICENSE=MIT. Signed-off-by: Ross Burton --- documentation/dev-manual/common-tasks.rst | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/documentation/dev-manual/common-tasks.rst b/documentation/dev-manual/common-tasks.rst index

[OE-core] [PATCH 05/14] oeqa/recipeutils: update for license change to python-async-test

2021-09-03 Thread Ross Burton
The python-async-test recipe is now BSD-3-Clause. Signed-off-by: Ross Burton --- meta/lib/oeqa/selftest/cases/recipeutils.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta/lib/oeqa/selftest/cases/recipeutils.py b/meta/lib/oeqa/selftest/cases/recipeutils.py index

[OE-core] [PATCH 03/14] xinetd: correct LICENSE

2021-09-03 Thread Ross Burton
The xinetd license is superficially BSD-like, but it isn't BSD. Now that we have the full SPDX license set in oe-core, use the specific xinetd license. Signed-off-by: Ross Burton --- meta/recipes-extended/xinetd/xinetd_2.3.15.4.bb | 4 +--- 1 file changed, 1 insertion(+), 3 deletions(-) diff

[OE-core] [PATCH 04/14] selftest/python-async-test: set precise BSD license

2021-09-03 Thread Ross Burton
"BSD" is ambiguous, use the precise license BSD-3-Clause. Signed-off-by: Ross Burton --- meta-selftest/recipes-devtools/python/python-async-test.inc | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta-selftest/recipes-devtools/python/python-async-test.inc b/met

[OE-core] [PATCH 02/14] lsof: add upstream check

2021-09-03 Thread Ross Burton
Upstream has moved to GitHub. Whilst it's now too late to upgrade to the latest release, we can add upstream check variables so that we get notified we're out of date. Signed-off-by: Ross Burton --- meta/recipes-extended/lsof/lsof_4.91.bb | 3 +++ 1 file changed, 3 insertions(+) diff --git

[OE-core] [PATCH 01/14] lsof: correct LICENSE

2021-09-03 Thread Ross Burton
The lsof LICENSE is superficially BSD-like, but it isn't BSD. Now that we have the full SPDX license set in oe-core, use Spencer-94. Signed-off-by: Ross Burton --- meta/recipes-extended/lsof/lsof_4.91.bb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta/recipes-extended

[OE-core] [PATCH 14/14] wpebackend-fdo: set precise BSD license

2021-09-02 Thread Ross Burton
"BSD" is ambiguous, use the precise license BSD-2-Clause. Signed-off-by: Ross Burton --- meta/recipes-sato/webkit/wpebackend-fdo_1.10.0.bb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta/recipes-sato/webkit/wpebackend-fdo_1.10.0.bb b/meta/recipes-sato/webkit/

[OE-core] [PATCH 13/14] libwpe: set precise BSD license

2021-09-02 Thread Ross Burton
"BSD" is ambiguous, use the precise license BSD-2-Clause. Signed-off-by: Ross Burton --- meta/recipes-sato/webkit/libwpe_1.10.1.bb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta/recipes-sato/webkit/libwpe_1.10.1.bb b/meta/recipes-sato/webkit/libwpe_1.10.

[OE-core] [PATCH 10/14] iputils: set precise BSD license

2021-09-02 Thread Ross Burton
"BSD" is ambiguous, use the precise license BSD-3-Clause. Signed-off-by: Ross Burton --- meta/recipes-extended/iputils/iputils_20210722.bb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta/recipes-extended/iputils/iputils_20210722.bb b/meta/recipes-extend

[OE-core] [PATCH 11/14] libx11-compose-data: set precise BSD license

2021-09-02 Thread Ross Burton
"BSD" is ambiguous, use the precise licenses BSD-2-Clause BSD-4-Clause. Signed-off-by: Ross Burton --- meta/recipes-graphics/xorg-lib/libx11-compose-data_1.6.8.bb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta/recipes-graphics/xorg-lib/libx11-compose-data_1

[OE-core] [PATCH 12/14] webkitgtk: set precise BSD license

2021-09-02 Thread Ross Burton
"BSD" is ambiguous, use the precise license BSD-2-Clause. Signed-off-by: Ross Burton --- meta/recipes-sato/webkit/webkitgtk_2.32.3.bb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta/recipes-sato/webkit/webkitgtk_2.32.3.bb b/meta/recipes-sato/webkit/webkitgtk

[OE-core] [PATCH 07/14] libevent: set precise BSD license

2021-09-02 Thread Ross Burton
"BSD" is ambiguous, use the precise license BSD-3-Clause. Signed-off-by: Ross Burton --- meta/recipes-support/libevent/libevent_2.1.12.bb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta/recipes-support/libevent/libevent_2.1.12.bb b/meta/recipes-suppor

[OE-core] [PATCH 09/14] python3-packaging: fix license statement

2021-09-02 Thread Ross Burton
This is licensed as Apache OR BSD, not AND. Also use the precise license BSD-2-Clause. Signed-off-by: Ross Burton --- meta/recipes-devtools/python/python3-packaging_21.0.bb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta/recipes-devtools/python/python3-packaging_21.0

[OE-core] [PATCH 08/14] openssh: remove redundant BSD license

2021-09-02 Thread Ross Burton
The license statement already includes BSD-2-Clause and BSD-3-Clause, so remove the redundant and ambiguous BSD license. Signed-off-by: Ross Burton --- meta/recipes-connectivity/openssh/openssh_8.7p1.bb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta/recipes

[OE-core] [PATCH 06/14] acpica: set precise BSD license

2021-09-02 Thread Ross Burton
"BSD" is ambiguous, use the precise license BSD-3-Clause. Signed-off-by: Ross Burton --- meta/recipes-extended/acpica/acpica_20210730.bb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta/recipes-extended/acpica/acpica_20210730.bb b/meta/recipes-exten

[OE-core] [PATCH 05/14] dtc: set precise BSD license

2021-09-02 Thread Ross Burton
"BSD" is ambiguous, use the precise license BSD-2-Clause. Signed-off-by: Ross Burton --- meta/recipes-kernel/dtc/dtc.inc | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta/recipes-kernel/dtc/dtc.inc b/meta/recipes-kernel/dtc/dtc.inc index 12508b235d9..bfdc9f86

[OE-core] [PATCH 04/14] nfs-utils: set precise BSD license

2021-09-02 Thread Ross Burton
"BSD" is ambiguous, use the precise license BSD-3-Clause. Signed-off-by: Ross Burton --- meta/recipes-connectivity/nfs-utils/nfs-utils_2.5.4.bb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta/recipes-connectivity/nfs-utils/nfs-utils_2.5.4.bb b/meta/recipes-co

[OE-core] [PATCH 02/14] python3-numpy: remove redundant BSD license

2021-09-02 Thread Ross Burton
The license list already includes BSD-2-Clause and BSD-3-Clause, so remove the redundant and ambiguous BSD license. Signed-off-by: Ross Burton --- meta/recipes-devtools/python-numpy/python3-numpy_1.21.2.bb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta/recipes-devtools

[OE-core] [PATCH 03/14] quota: remove BSD license

2021-09-02 Thread Ross Burton
Only the 'quot' tool was BSD licensed, and this was removed upstream in commit 5d30a29 (since 4.05). Signed-off-by: Ross Burton --- meta/recipes-extended/quota/quota_4.06.bb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta/recipes-extended/quota/quota_4.06.bb b/meta

[OE-core] [PATCH 01/14] lz4: remove redundant BSD license

2021-09-02 Thread Ross Burton
The upstream license is BSD-2-Clause or GPLv2, so remove the redundant and ambiguous BSD license. Signed-off-by: Ross Burton --- meta/recipes-support/lz4/lz4_1.9.3.bb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta/recipes-support/lz4/lz4_1.9.3.bb b/meta/recipes

Re: [OE-core] [RFC PATCH] common-licenses: add missing SPDX licences

2021-09-02 Thread Ross Burton
You're right, the script isn't filtering out deprecated licenses. V2 posted. Ross On Wed, 1 Sept 2021 at 22:35, Richard Purdie wrote: > > On Wed, 2021-09-01 at 21:09 +0100, Ross Burton wrote: > > As part of the work to converge our license support with SPDX, ensure > >

[OE-core] [PATCH] ptest: allow the ptest-packagelists.inc warning to be disabled

2021-09-01 Thread Ross Burton
ptest, the build will fail. By changing the combination of anonymous Python and bb.error() to a recipe-scope QA test, this can be handled with the other sanity checks and bbappends can skip the test if desired. Signed-off-by: Ross Burton --- meta/classes/insane.bbclass | 2 +- meta/classes

[OE-core] [PATCH v2] mesa: fix build on Arm V5 with soft float

2021-09-01 Thread Ross Burton
loat-abi=softfp or -mfloat-abi=hard" Take a patch from upstream to check the ABI being used before trying to use NEON instructions. Signed-off-by: Ross Burton --- .../mesa/files/without-neon.patch | 53 +++ meta/recipes-graphics/mesa/mesa.inc | 1 +

[OE-core] [PATCH] mesa: fix build on Arm V5 with soft float

2021-09-01 Thread Ross Burton
loat-abi=softfp or -mfloat-abi=hard" Take a patch from upstream to check the ABI being used before trying to use NEON instructions. Signed-off-by: Ross Burton --- .../mesa/files/without-neon.patch | 53 +++ meta/recipes-graphics/mesa/mesa.inc | 1 +

[OE-core] [PATCH] cpio: backport fix for CVE-2021-38185

2021-08-31 Thread Ross Burton
Signed-off-by: Ross Burton --- .../cpio/cpio-2.13/CVE-2021-38185.patch | 581 ++ meta/recipes-extended/cpio/cpio_2.13.bb | 1 + 2 files changed, 582 insertions(+) create mode 100644 meta/recipes-extended/cpio/cpio-2.13/CVE-2021-38185.patch diff --git a/meta

Re: [OE-core] [PATCH] kernel: Use unexpanded EXTENDPKGV

2021-08-31 Thread Ross Burton
My variation was just: -fullver = d.getVar('EXTENDPKGV') +fullver = d.getVar('EXTENDPKGV', False) Either have the same net result I guess. Ross On Tue, 31 Aug 2021 at 14:30, Richard Purdie wrote: > > EXTENDPKGV can contain AUTOINC so use an expanded form in the variables > allowing >

Re: [OE-core] [meta-oe][PATCH] lzo: add CVE_PRODUCT

2021-08-19 Thread Ross Burton
This replaces the default value of 'lzo', it might be safer to use += so both this name and just lzo are searched for. The CVE database isn't very reliable for consistent naming, so I prefer to cover all bases. Ross On Thu, 19 Aug 2021 at 07:33, Marta Rybczynska wrote: > > lzo was missing

[OE-core] [PATCH] libcgroup: upgrade to 2.0

2021-08-19 Thread Ross Burton
. Don't mess about installing the library into base_libdir as the /lib vs /usr/lib prefix split is moot these days. Delete libcgroupfortesting.so as we don't install the test suite. Signed-off-by: Ross Burton --- .../libcgroup/libcgroup/CVE-2018-14348.patch | 37 .../libcgroup/libcgroup

[OE-core] [PATCH v2] oeqa/sdk: add HTTPS test for buildtools

2021-08-18 Thread Ross Burton
Verify that HTTPS connections work in both wget and Python, as this depends on variables correctly pointing to the certificate chain. Signed-off-by: Ross Burton --- meta/lib/oeqa/sdk/buildtools-cases/https.py | 20 1 file changed, 20 insertions(+) create mode 100644 meta

Re: [OE-core] should "${D}${systemd_unitdir}/system" => "${D}${systemd_system_unitdir}"?

2021-08-18 Thread Ross Burton
No, yes. systemd_system_unitdir is newer so it's used less. Ross On Wed, 18 Aug 2021 at 08:48, Robert P. J. Day wrote: > > > i've (so far) run across a small number of OE recipes that use the > identifier "${D}${systemd_unitdir}/system", which appears(?) to be > equivalent to

[OE-core] [PATCH] oeqa/sdk: add relocation test for buildtools

2021-08-17 Thread Ross Burton
The buildtools-extended tarball includes GCC, which relies on being relocated correctly to work. Add a test case that verifies that the loader paths have all been relocated, as otherwise there are hard-to-debug errors at build time. Signed-off-by: Ross Burton --- meta/lib/oeqa/sdk/buildtools

[OE-core] [PATCH] glibc: package the stub .a libaries into glibc-dev

2021-08-17 Thread Ross Burton
packaged into glibc-staticdev (as they should be), but by this design they should be in glibc-dev. https://sourceware.org/pipermail/libc-alpha/2021-August/129718.html Signed-off-by: Ross Burton --- meta/recipes-core/glibc/glibc-package.inc | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff

[OE-core] [PATCH] oeqa/sdk: add HTTPS test for buildtools

2021-08-17 Thread Ross Burton
Verify that HTTPS connections work in both wget and Python, as this depends on variables correctly pointing to the certificate chain. Signed-off-by: Ross Burton --- meta/lib/oeqa/sdk/buildtools-cases/https.py | 20 1 file changed, 20 insertions(+) create mode 100644 meta

[OE-core] [PATCH] oeqa/selftest/buildoptions: test buildhistory PKGSIZE and FILELIST fields

2021-08-16 Thread Ross Burton
Add tests to ensure that PKGSIZE and FILELIST fields are set correctly. Signed-off-by: Ross Burton --- meta/lib/oeqa/selftest/cases/buildoptions.py | 24 1 file changed, 24 insertions(+) diff --git a/meta/lib/oeqa/selftest/cases/buildoptions.py b/meta/lib/oeqa/selftest

[OE-core] [PATCH][dunfell] ovmf: build natively everywhere

2021-08-16 Thread Ross Burton
-by: Ross Burton Signed-off-by: Richard Purdie --- meta/recipes-core/ovmf/ovmf_git.bb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta/recipes-core/ovmf/ovmf_git.bb b/meta/recipes-core/ovmf/ovmf_git.bb index a73bb916b03..b00119313be 100644 --- a/meta/recipes-core/ovmf/ovmf_git.bb

Re: [OE-core] [yocto-security] OE-core CVE metrics for master on Sun 15 Aug 2021 04:00:01 AM HST

2021-08-16 Thread Ross Burton
On Sun, 15 Aug 2021 at 15:03, Steve Sakoman wrote: > New this week: 3 CVEs > CVE-2021-32803: tar > https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-32803 * > CVE-2021-32804: tar > https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-32804 * These are both node-tar specific, patch

[OE-core] [PATCH] tar: ignore node-tar CVEs

2021-08-16 Thread Ross Burton
These two CVEs are specific to the Node package node-tar. Signed-off-by: Ross Burton --- meta/recipes-extended/tar/tar_1.34.bb | 3 +++ 1 file changed, 3 insertions(+) diff --git a/meta/recipes-extended/tar/tar_1.34.bb b/meta/recipes-extended/tar/tar_1.34.bb index c096a8c9a88..98755a11cc5

Re: [OE-core] [PATCH] python3: use monotonic clock for condvar if possible

2021-08-09 Thread Ross Burton
On Tue, 3 Aug 2021 at 05:41, Zhang, Qiang wrote: > The timeout for threading.Lock, threading.Condition, etc, is not using > a monotonic clock, it is affected if the system time (realtime clock) > is set. > > This patch will make condvar use monotonic clock. > Refence:

[OE-core] [PATCH 2/2] parted: update patch status

2021-08-09 Thread Ross Burton
This patch has now been submitted to parted-devel. Signed-off-by: Ross Burton --- meta/recipes-extended/parted/files/check-vfat.patch | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta/recipes-extended/parted/files/check-vfat.patch b/meta/recipes-extended/parted/files

[OE-core] [PATCH 1/2] parted: drop unneeded ld-is-gold patch

2021-08-09 Thread Ross Burton
This patch doesn't appear to be needed anymore, so drop it. Signed-off-by: Ross Burton --- ...ize-link-against-libuuid-explicitly-.patch | 34 --- meta/recipes-extended/parted/parted_3.4.bb| 1 - 2 files changed, 35 deletions(-) delete mode 100644 meta/recipes-extended

[OE-core] [PATCH 1/2] e2fsprogs: ensure small images have 256-byte inodes

2021-08-09 Thread Ross Burton
eu Dubois-Briand sent in April, but the wic change in [1] was accepted instead. I believe that is the wrong approach and this approach covers more cases. [ YOCTO #14478 ] [1] openembedded-core eecbe62 [2] https://lists.openembedded.org/g/openembedded-core/message/150298 Signed-off-by: Ross Burton

[OE-core] [PATCH 2/2] wic: don't forcibly pass -T default

2021-08-09 Thread Ross Burton
This reverts part of oe-core eecbe62555, which was a previous attempt to solve the Y2038 problem. This is now solved centrally in e2fsprogs, so doesn't need to be dealt with in wic. We don't revert the commit entirely, to retain the warning if a filesystem has small inodes. Signed-off-by: Ross

[OE-core] [PATCH v2 1/2] buildtools-tarball: add testsdk task

2021-08-09 Thread Ross Burton
Add a testsdk task, which is essentially the same as testsdk.bbclass but the test case directory is changed. This lets us exercise the buildtools tarballs at build time. Signed-off-by: Ross Burton --- meta/recipes-core/meta/buildtools-tarball.bb | 13 + 1 file changed, 13

[OE-core] [PATCH v2 2/2] oeqa/sdk: add some buildtools tests

2021-08-09 Thread Ross Burton
needless downloading, but sstate is not shared to ensure a build does happen. Signed-off-by: Ross Burton --- meta/lib/oeqa/sdk/buildtools-cases/README| 2 ++ meta/lib/oeqa/sdk/buildtools-cases/build.py | 23 meta/lib/oeqa/sdk/buildtools-cases/sanity.py | 22

Re: [OE-core] [PATCH 1/2] buildtools-tarball: add testsdk task

2021-08-09 Thread Ross Burton
Yeah not sure how that happened! V2 incoming :) On Thu, 22 Jul 2021 at 07:50, Richard Purdie wrote: > > On Wed, 2021-07-21 at 14:54 +0100, Ross Burton wrote: > > Add a testsdk task, which is essentially the same as testsdk.bbclass but > > the test case directory is chan

Re: [OE-core] OE-core CVE metrics for master on Sun 08 Aug 2021 04:00:01 AM HST

2021-08-09 Thread Ross Burton
Did ten minutes digging into some recent issues: > CVE-2021-3507: qemu:qemu-native:qemu-system-native > https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-3507 * No fixes in flight for this. > CVE-2021-35331: tcl:tcl-native >

[OE-core] [PATCH] libx11: fix xkb compilation with _EVDEVK symbols

2021-07-28 Thread Ross Burton
New xkeyboard-config writes defines that use _EVDEVK(), which makekeys can't parse. Take a patch from upstream to also parse these symbols. [ YOCTO #14489 ] Signed-off-by: Ross Burton --- .../xorg-lib/libx11/keysym.patch | 46 +++ .../recipes-graphics/xorg-lib

Re: [OE-core] [PATCH] glew: fix Makefile race

2021-07-22 Thread Ross Burton
2021 at 8:39 AM Ross Burton wrote: > > > > Fix a Makefile race resulting in the target creating a directory being > > executed after the target to write into that directory. > > > > [ YOCTO #14485 ] > > > > Signed-off-by: Ross Burton > >

[OE-core] [PATCH] glew: fix Makefile race

2021-07-22 Thread Ross Burton
Fix a Makefile race resulting in the target creating a directory being executed after the target to write into that directory. [ YOCTO #14485 ] Signed-off-by: Ross Burton --- .../0001-Fix-build-race-in-Makefile.patch | 56 +++ meta/recipes-graphics/glew/glew_2.2.0.bb

[OE-core] [PATCH 1/2] buildtools-tarball: add testsdk task

2021-07-21 Thread Ross Burton
Add a testsdk task, which is essentially the same as testsdk.bbclass but the test case directory is changed. This lets us exercise the buildtools tarballs at build time. Signed-off-by: Ross Burton --- meta/recipes-core/meta/buildtools-tarball.bb | 11 +++ 1 file changed, 11 insertions

  1   2   3   4   5   6   7   8   9   10   >