Results from cve-check are not very good at the moment.
One of the reasons for this is that component names used in CVE
database differ from yocto recipe names. This series fixes several
of those name mapping problems by setting the CVE_PRODUCT correctly
in the recipes. To check this mapping with after a build, I'm exporting
LICENSE and CVE_PRODUCT variables to buildhistory for recipes and
packages.
Mikko Rapeli (23):
buildhistory.bbclass: add LICENSE and CVE_PRODUCT to recipe and
package data
buildhistory.bbclass: add BUILDHISTORY_FORCE_UPDATE option
acpid.inc: set CVE_PRODUCT to acpid2
bluez5.inc: set CVE_PRODUCT to bluez
eglinfo.inc: set CVE_PRODUCT to eglinfo
flac_1.3.1.bb: set CVE_PRODUCT to libflac
gcc-common.inc: set CVE_PRODUCT to gcc
glib.inc: set CVE_PRODUCT to glib
glibc-common.inc: set CVE_PRODUCT to glibc
icu.inc: set CVE_PRODUCT to international_components_for_unicode
libpcre_8.40.bb: set CVE_PRODUCT to prce
libpcre2_10.23.bb: set CVE_PRODUCT to pcre2
libsamplerate0_0.1.9.bb: set CVE_PRODUCT to libsamplerate
libsndfile1_1.0.28.bb: set CVE_PRODUCT to libsndfile
nspr_4.14.bb: set CVE_PRODUCT to netscape_portable_runtime
python.inc: set CVE_PRODUCT to python
lttng-ust_2.9.1.bb: set CVE_PRODUCT to ust
quota_4.03.bb: set CVE_PRODUCT to linux_diskquota
sqlite3.inc: set CVE_PRODUCT to sqlite
wpa-supplicant_2.6.bb: set CVE_PRODUCT to wpa_supplicant
cve-check.bbclass: use weak assignment for default CVE_PRODUCT
kernel.bbclass: set CVE_PRODUCT to linux_kernel if not set by recipe
cve-check.bbclass: use "+git" as separator in PV instead of "git+"
meta/classes/buildhistory.bbclass | 28 +++++++++++++++++++---
meta/classes/cve-check.bbclass | 4 ++--
meta/classes/kernel.bbclass | 2 ++
meta/recipes-bsp/acpid/acpid.inc | 2 ++
meta/recipes-connectivity/bluez5/bluez5.inc | 2 ++
.../wpa-supplicant/wpa-supplicant_2.6.bb | 2 ++
meta/recipes-core/glib-2.0/glib.inc | 2 ++
meta/recipes-core/glibc/glibc-common.inc | 1 +
meta/recipes-devtools/gcc/gcc-common.inc | 2 ++
meta/recipes-devtools/python/python.inc | 2 ++
meta/recipes-extended/quota/quota_4.03.bb | 2 ++
meta/recipes-graphics/eglinfo/eglinfo.inc | 2 ++
meta/recipes-kernel/lttng/lttng-ust_2.9.1.bb | 2 ++
meta/recipes-multimedia/flac/flac_1.3.2.bb | 2 ++
.../libsamplerate/libsamplerate0_0.1.9.bb | 2 ++
.../libsndfile/libsndfile1_1.0.28.bb | 2 ++
meta/recipes-support/icu/icu.inc | 2 ++
meta/recipes-support/libpcre/libpcre2_10.23.bb | 2 ++
meta/recipes-support/libpcre/libpcre_8.40.bb | 2 ++
meta/recipes-support/nspr/nspr_4.14.bb | 2 ++
meta/recipes-support/sqlite/sqlite3.inc | 2 ++
21 files changed, 64 insertions(+), 5 deletions(-)
--
1.9.1
--
_______________________________________________
Openembedded-core mailing list
Openembedded-core@lists.openembedded.org
http://lists.openembedded.org/mailman/listinfo/openembedded-core
