[OE-core] [PATCH 1/2] python3: CVE-2019-16056

2019-10-09 Thread Chen Qi
Signed-off-by: Chen Qi --- ...nt-parse-domains-containing-GH-13079.patch | 130 ++ meta/recipes-devtools/python/python3_3.7.4.bb | 5 +- 2 files changed, 133 insertions(+), 2 deletions(-) create mode 100644

[OE-core] [PATCH 2/2] python: CVE-2019-16056

2019-10-09 Thread Chen Qi
Signed-off-by: Chen Qi --- ...nt-parse-domains-containing-GH-13079.patch | 88 +++ meta/recipes-devtools/python/python_2.7.16.bb | 1 + 2 files changed, 89 insertions(+) create mode 100644

Re: [OE-core] [PATCH RESEND] gdb: Bump from 8.3 to 8.3.1

2019-10-09 Thread Ross Burton
master is frozen for non-bug-fixes becuase we're past M3, this is queued in ross/mut until master re-opens when 3.0 is released. Ross -- ___ Openembedded-core mailing list Openembedded-core@lists.openembedded.org

Re: [OE-core] [thud][PATCH] kernel-devsrc: check for localversion files in the kernel source tree

2019-10-09 Thread Christian Thaler
ping -- ___ Openembedded-core mailing list Openembedded-core@lists.openembedded.org http://lists.openembedded.org/mailman/listinfo/openembedded-core

[OE-core] [PATCH V2 2/2] python: CVE-2019-16056

2019-10-09 Thread Chen Qi
Signed-off-by: Chen Qi --- ...nt-parse-domains-containing-GH-13079.patch | 90 +++ meta/recipes-devtools/python/python_2.7.16.bb | 1 + 2 files changed, 91 insertions(+) create mode 100644

[OE-core] [PATCH V2 1/2] python3: CVE-2019-16056

2019-10-09 Thread Chen Qi
Signed-off-by: Chen Qi --- ...nt-parse-domains-containing-GH-13079.patch | 132 ++ meta/recipes-devtools/python/python3_3.7.4.bb | 5 +- 2 files changed, 135 insertions(+), 2 deletions(-) create mode 100644

Re: [OE-core] [PATCH 0/1] Add new mirror archiver mode

2019-10-09 Thread Paul Barker
On Thu, 26 Sep 2019, at 21:31, Richard Purdie wrote: > On Tue, 2019-09-24 at 10:06 +0100, Paul Barker wrote: > > This patch allows the creation of a full source mirror using the > > archiver > > bbclass. Using the archiver allows us to make use of copyleft license > > filtering, recipe type

[OE-core] [PATCH] oeqa/selftest/imagefeatures: improve test_hypervisor_fmts

2019-10-09 Thread Ross Burton
If this test fails then the output doesn't help in any meaningful way, so improve the test to output the unparsable JSON and display unexpected output. Signed-off-by: Ross Burton --- meta/lib/oeqa/selftest/cases/imagefeatures.py | 8 ++-- 1 file changed, 6 insertions(+), 2 deletions(-)

[OE-core] ✗ patchtest: failure for "python3: CVE-2019-16056..." and 1 more

2019-10-09 Thread Patchwork
== Series Details == Series: "python3: CVE-2019-16056..." and 1 more Revision: 1 URL : https://patchwork.openembedded.org/series/20385/ State : failure == Summary == Thank you for submitting this patch series to OpenEmbedded Core. This is an automated response. Several tests have been

[OE-core] [PATCH] oeqa/selftest/imagefeatures: improve test_hypervisor_fmts

2019-10-09 Thread Ross Burton
If this test fails then the output doesn't help in any meaningful way, so improve the test to output the unparsable JSON and display unexpected output. Signed-off-by: Ross Burton --- meta/lib/oeqa/selftest/cases/imagefeatures.py | 8 ++-- 1 file changed, 6 insertions(+), 2 deletions(-)

[OE-core] [RFC PATCH 2/2] license_image.bbclass: check and reject packages which have incompatible licenses

2019-10-09 Thread Alexander Kanavin
The use case is setting INCOMPATIBLE_LICENSE per image, rather than as an awkward, and too strict global setting. This for example would allow building development images with gplv3 tools, but production images without them, and checking that nothing gpl3-licensed gets into the latter. Examples

[OE-core] [RFC PATCH 1/2] license.bbclass: split incompatible license check into a helper function

2019-10-09 Thread Alexander Kanavin
This would help with checking incompatible licenses at do_rootfs step in image creation, where it is beneficial to pass the license string directly to the function. Signed-off-by: Alexander Kanavin --- meta/classes/license.bbclass | 25 ++--- 1 file changed, 14

[OE-core] [PATCH] scripts/gen-lockedsig-cache: Don't list paths which don't exist

2019-10-09 Thread Richard Purdie
This avoids failures seen on the autobuilder when generating eSDKs and release sstate copies. Signed-off-by: Richard Purdie --- scripts/gen-lockedsig-cache | 2 ++ 1 file changed, 2 insertions(+) diff --git a/scripts/gen-lockedsig-cache b/scripts/gen-lockedsig-cache index

[OE-core] [PATCH 1/2] metadata_scm.bbclass: Add git human readable ref function

2019-10-09 Thread Andrei Gherzan
This function finds the most recent tag reachable from the current commit and computes a nice reference. In order to avoid code duplication, I generalized the branch and revision functions as well (base_get_metadata_git_branch, base_get_metadata_git_revision). Signed-off-by: Andrei Gherzan ---

[OE-core] [PATCH 2/2] image-buildinfo.bbclass: Introduce IMAGE_BUILDINFO_GITDESCRIBE

2019-10-09 Thread Andrei Gherzan
This knob can switch in between having full revisions and having git describe references in the build info file. By default it is set to 0 to maintain the old behaviour. Signed-off-by: Andrei Gherzan --- meta/classes/image-buildinfo.bbclass | 14 -- 1 file changed, 12 insertions(+),

Re: [OE-core] [PATCH 2/2] image-buildinfo.bbclass: Introduce IMAGE_BUILDINFO_GITDESCRIBE

2019-10-09 Thread Richard Purdie
On Wed, 2019-10-09 at 18:05 +0100, Andrei Gherzan wrote: > This knob can switch in between having full revisions and having git > describe references in the build info file. By default it is set to 0 > to > maintain the old behaviour. > > Signed-off-by: Andrei Gherzan > --- >

Re: [OE-core] [RFC PATCH 2/2] license_image.bbclass: check and reject packages which have incompatible licenses

2019-10-09 Thread Alexander Kanavin
It wouldn't be too hard to add a condition that checks the (image-specific) whitelist, I just wanted to gather a bit of feedback for the overall idea :) Alex On Wed, 9 Oct 2019 at 20:15, Christopher Larson wrote: > Does this obey the whitelist? Can I whitelist a gplv3 package to get it >

Re: [OE-core] [RFC PATCH 2/2] license_image.bbclass: check and reject packages which have incompatible licenses

2019-10-09 Thread Christopher Larson
Does this obey the whitelist? Can I whitelist a gplv3 package to get it installed, ideally with a warning rather than silent or error? I don't have the code in front of me at the moment. I have a class in meta-mentor that does this sort of check, so wanted to see how the implementations compare.

Re: [OE-core] [PATCH 2/2] image-buildinfo.bbclass: Introduce IMAGE_BUILDINFO_GITDESCRIBE

2019-10-09 Thread Andrei Gherzan
On 09/10/2019 18:58, Richard Purdie wrote: On Wed, 2019-10-09 at 18:05 +0100, Andrei Gherzan wrote: This knob can switch in between having full revisions and having git describe references in the build info file. By default it is set to 0 to maintain the old behaviour. Signed-off-by: Andrei

[OE-core] [PATCH] readline-native: Fix builds on tumbleweed

2019-10-09 Thread Richard Purdie
OpenSuse's libreadline has extra symbol information which upsets our uninative loader as our libreadline is missing symbols with the appropriate versions. The simplest solution is to add the version information as they're harmless. Signed-off-by: Richard Purdie ---

[OE-core] ✗ patchtest: failure for readline-native: Fix builds on tumbleweed

2019-10-09 Thread Patchwork
== Series Details == Series: readline-native: Fix builds on tumbleweed Revision: 1 URL : https://patchwork.openembedded.org/series/20403/ State : failure == Summary == Thank you for submitting this patch series to OpenEmbedded Core. This is an automated response. Several tests have been