On 02/26/2016 08:57 AM, mikko.rap...@bmw.de wrote:
On Fri, Feb 26, 2016 at 03:56:24PM +0100, Mikko Rapeli wrote:
On Fri, Feb 26, 2016 at 08:48:47AM -0600, Mariano Lopez wrote:
On 02/26/2016 02:14 AM, mikko.rap...@bmw.de wrote:
Hi,
On my developer machine the cve-check ran ok for dizzy but on build server
with sstate-cache and rmwork enabled it failed with what looks like a race
condition when scanning the patch files:
17:45:36 ERROR: Error executing a python function in
/home/builder/src/base/poky/meta/recipes-extended/mailx/mailx_12.5.bb:
17:45:36
17:45:36 The stack trace of python calls that resulted in this
exception/failure was:
17:45:36 File: 'do_cve_check', lineno: 17, function: <module>
17:45:36 0013: else:
17:45:36 0014: bb.note("Failed to update CVE database, skipping CVE
check")
17:45:36 0015:
17:45:36 0016:
17:45:36 *** 0017:do_cve_check(d)
17:45:36 0018:
17:45:37 File: 'do_cve_check', lineno: 8, function: do_cve_check
17:45:37 0004: Check recipe for patched and unpatched CVEs
17:45:37 0005: """
17:45:37 0006:
17:45:37 0007: if os.path.exists(d.getVar("CVE_CHECK_TMP_FILE", True)):
17:45:37 *** 0008: patched_cves = get_patches_cves(d)
17:45:37 0009: patched, unpatched = check_cves(d, patched_cves)
17:45:37 0010: if patched or unpatched:
17:45:37 0011: cve_data = get_cve_info(d, patched + unpatched)
17:45:37 0012: cve_write_data(d, patched, unpatched, cve_data)
17:45:37 File: 'cve-check.bbclass', lineno: 13, function: get_patches_cves
17:45:37 0009: cve_match = re.compile("CVE:( CVE\-\d+\-\d+)+")
17:45:37 0010: patched_cves = set()
17:45:37 0011: for url in src_patches(d):
17:45:37 0012: patch_file = bb.fetch.decodeurl(url)[2]
17:45:37 *** 0013: with open(patch_file, "r") as f:
17:45:37 0014: patch_text = f.read()
17:45:37 0015:
17:45:37 0016: # Search for the "CVE: " line
17:45:37 0017: match = cve_match.search(patch_text)
17:45:37 Exception: IOError: [Errno 2] No such file or directory:
'/home/builder/src/base/build/tmp/work/corei7-64-linux/mailx/12.5-r2/heirloom-mailx_12.5-1.diff'
17:45:37
17:45:37 ERROR: Function failed: do_cve_check
So could this be caused by cve-check changes or is this just a side effect
of some other recipe problems?
I could not see that kind of fixes in master.
-Mikko
The changes in patch series were minimal and actually this part of the code
wasn't touched at all. That part of the code will look for all the files in
the SRC_URI variable and will look for the "CVE:" tag in order to find
patches that solve CVEs.
Yep, the code seems straight forward.
It seems the problem is with the bitbake fetcher, or the recipe;
unfortunately the fetcher is one of the components that most change between
releases. Another thing to check is that if actually there is a
heirloom-mailx_12.5-1.diff file in the paths that the fetcher look for. You
can check this in the cve_check or patch log in the work directory of the
recipe.
Unfortunately the file is there if I check with devshell but I have now
four different CI runs with this failure. Only difference to my developer
machine is sstate cache. Build machines maintain their own sstate cache.
Last two runs were with v2 patches.
Would be possible to run these CI with master to check if you see the
error too?
Also, what you can do is to put try: except:, but this won't solve the
problem, just will hide it so the build can finish.
-Mikko
Mariano Lopez
--
_______________________________________________
Openembedded-core mailing list
Openembedded-core@lists.openembedded.org
http://lists.openembedded.org/mailman/listinfo/openembedded-core
