[OE-core] [PATCH 2/2] mkelfimage: Fix build on x86_64 with hardening

We get linking errors on some hosts like | ld -static --warn-multiple-gp --warn-common -T linux-i386/convert.lds -o objdir/linux-i386/convert ob jdir/linux-i386/head.o objdir/linux-i386/convert_params.o | objdir/linux-i386/convert_params.o: In function `printf': | convert_params.c:(.text+0x1fd): u

[OE-core] [PATCH 1/2] glibc: Update to latest on 2.26 pre-release

Signed-off-by: Khem Raj --- meta/recipes-core/glibc/cross-localedef-native_2.25.90.bb | 2 +- meta/recipes-core/glibc/glibc_2.25.90.bb | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/meta/recipes-core/glibc/cross-localedef-native_2.25.90.bb b/meta/recipes-

Re: [OE-core] [PATCH] gcc-7.inc: add new warning "Wnot-cross-compiler"

On Tue, Jul 18, 2017 at 8:33 PM, Andre McCurdy wrote: > On Tue, Jul 18, 2017 at 5:12 PM, Khem Raj wrote: >> >> On Tue, Jul 18, 2017 at 6:45 PM Juro Bystricky >> wrote: >>> >>> Suppose we have an autotools project that looks like it is using the cross >>> compiler but is actually reaching out to

Re: [OE-core] [PATCH] gcc-7.inc: add new warning "Wnot-cross-compiler"

On Tue, Jul 18, 2017 at 5:12 PM, Khem Raj wrote: > > On Tue, Jul 18, 2017 at 6:45 PM Juro Bystricky > wrote: >> >> Suppose we have an autotools project that looks like it is using the cross >> compiler but is actually reaching out to the host compiler instead. >> On an x86-64 build, you may not e

Re: [OE-core] [PATCH] gcc-7.inc: add new warning "Wnot-cross-compiler"

On Tue, Jul 18, 2017 at 6:45 PM Juro Bystricky wrote: > Suppose we have an autotools project that looks like it is using the cross > compiler but is actually reaching out to the host compiler instead. > On an x86-64 build, you may not even notice. > To be able to prevent this, this patch implemen

[OE-core] [PATCH] gcc-7.inc: add new warning "Wnot-cross-compiler"

Suppose we have an autotools project that looks like it is using the cross compiler but is actually reaching out to the host compiler instead. On an x86-64 build, you may not even notice. To be able to prevent this, this patch implements a new gcc warning "Wnot-cross-compiler". The intention here i

Re: [OE-core] ✗ patchtest: failure for "[morty] libgcrypt: fix CVE-201..." and 1 more

On 07/18/2017 03:31 PM, Patchwork wrote: == Series Details == Series: "[morty] libgcrypt: fix CVE-201..." and 1 more Revision: 1 URL : https://patchwork.openembedded.org/series/7801/ looks like patch test got confused. your patches look fine to me. - armin State : failure == Summary ==

[OE-core] ✗ patchtest: failure for "[morty] libgcrypt: fix CVE-201..." and 1 more

== Series Details == Series: "[morty] libgcrypt: fix CVE-201..." and 1 more Revision: 1 URL : https://patchwork.openembedded.org/series/7801/ State : failure == Summary == Thank you for submitting this patch series to OpenEmbedded Core. This is an automated response. Several tests have been e

[OE-core] ✗ patchtest: failure for "[pyro] libgcrypt: fix CVE-2017..." and 1 more

== Series Details == Series: "[pyro] libgcrypt: fix CVE-2017..." and 1 more Revision: 1 URL : https://patchwork.openembedded.org/series/7800/ State : failure == Summary == Thank you for submitting this patch series to OpenEmbedded Core. This is an automated response. Several tests have been e

Re: [OE-core] [PATCH][morty 1/2] libgcrypt: fix CVE-2017-9526

On 18 July 2017 at 23:09, akuster808 wrote: > is this version 2 or resend? > See I thought I had already sent it but didn't see it in my outbox, so I sent it again. It's just a resend. Ross -- ___ Openembedded-core mailing list Openembedded-core@lis

Re: [OE-core] [PATCH][morty 1/2] libgcrypt: fix CVE-2017-9526

On 07/18/2017 03:07 PM, Ross Burton wrote: In libgcrypt before 1.7.7, an attacker who learns the EdDSA session key (from side-channel observation during the signing process) can easily recover the long-term secret key. 1.7.7 makes a cipher/ecc-eddsa.c change to store this session key in secure

[OE-core] [PATCH][morty 1/2] libgcrypt: fix CVE-2017-9526

In libgcrypt before 1.7.7, an attacker who learns the EdDSA session key (from side-channel observation during the signing process) can easily recover the long-term secret key. 1.7.7 makes a cipher/ecc-eddsa.c change to store this session key in secure memory, to ensure that constant-time point oper

[OE-core] [PATCH][morty 2/2] libgcrypt: fix CVE-2017-7526

Fixes CVE-2017-7526, 'flush+reload side-channel attack on RSA secret keys dubbed "Sliding right into disaster"'. Signed-off-by: Ross Burton --- .../libgcrypt/files/CVE-2017-7526.patch| 455 + meta/recipes-support/libgcrypt/libgcrypt.inc | 1 + 2 files chan

[OE-core] [PATCH][pyro 1/2] libgcrypt: fix CVE-2017-9526

In libgcrypt before 1.7.7, an attacker who learns the EdDSA session key (from side-channel observation during the signing process) can easily recover the long-term secret key. 1.7.7 makes a cipher/ecc-eddsa.c change to store this session key in secure memory, to ensure that constant-time point oper

[OE-core] [PATCH][pyro 2/2] libgcrypt: fix CVE-2017-7526

Fixes CVE-2017-7526, 'flush+reload side-channel attack on RSA secret keys dubbed "Sliding right into disaster"'. Signed-off-by: Ross Burton --- .../libgcrypt/files/CVE-2017-7526.patch| 455 + meta/recipes-support/libgcrypt/libgcrypt.inc | 1 + 2 files chan

Re: [OE-core] [morty][PATCH] glibc: Fix CVE-2015-5180

Yualie, On 07/17/2017 11:14 PM, Yuanjie Huang wrote: Backport upstream patch to fix NULL pointer dereference and process crash in libresolv. (CVE-2015-5180) I will have to hand merge the bb file as I have several other glibc changes sitting in my contrib branch. Thanks for the patch. Signed

Re: [OE-core] [PATCH 0/1] bind: 9.10..3-P3 -> 9.10.5-P3

On Tue, Jul 18, 2017 at 3:14 PM, Alexander Kanavin wrote: > On 07/18/2017 05:04 AM, Kang Kai wrote: > >bind: 9.10..3-P3 -> 9.10.5-P3 >>> >>> >>> Why not 9.11.1? >> >> >> If bind 9.11.x is needed, we could add its recipe. But I think the 9.10.x >> version should be kept for compatibilit

Re: [OE-core] [PATCH 0/1] bind: 9.10..3-P3 -> 9.10.5-P3

On 07/18/2017 05:04 AM, Kang Kai wrote: bind: 9.10..3-P3 -> 9.10.5-P3 Why not 9.11.1? If bind 9.11.x is needed, we could add its recipe. But I think the 9.10.x version should be kept for compatibility. The policy in oe-core master is to update to latest stable upstream releases, so ple

Re: [OE-core] [PATCH 2/6] cryptodev: 1.8 -> 1.9

On Sat, Jul 15, 2017 at 06:13:55AM -0700, Khem Raj wrote: > On Thu, Jul 13, 2017 at 3:03 AM, Robert Yang > wrote: > > > > > > On 07/13/2017 05:50 PM, Burton, Ross wrote: > >> > >> > >> On 13 July 2017 at 03:51, Robert Yang >> > wrote: > >> > >> BTW, I sent a

Re: [OE-core] [PATCH] gstreamer1.0-python: add new recipe

On 07/18/2017 11:37 AM, Khem Raj wrote: On Tue, Jul 18, 2017 at 12:21 PM, Martin Kelly wrote: On 07/17/2017 07:47 PM, Khem Raj wrote: On Mon, Jul 17, 2017 at 8:21 PM, Martin Kelly wrote: Previously, we had a gst-python recipe, but it supported only GStreamer 0.1. After GStreamer switched t

[OE-core] [PATCH v2] gstreamer1.0-python: add new recipe

Previously, we had a gst-python recipe, but it supported only GStreamer 0.1. After GStreamer switched the Python bindings to use GObject introspection, we were no longer able to build the bindings, and they were dropped in this patch: https://patchwork.openembedded.org/patch/93793/ However, at th

Re: [OE-core] [PATCH] systemd-bootchart: Fix build with glibc 2.26

On Tue, Jul 18, 2017 at 6:52 AM, Jussi Kukkonen wrote: > xlocale.h is no more, don't include it. > looks good > Signed-off-by: Jussi Kukkonen > --- > .../0001-parse-util-Don-t-use-xlocale.h.patch | 32 > ++ > .../systemd-bootchart/systemd-bootchart_231.bb | 4 ++-

Re: [OE-core] [PATCH] gstreamer1.0-python: add new recipe

On Tue, Jul 18, 2017 at 12:21 PM, Martin Kelly wrote: > On 07/17/2017 07:47 PM, Khem Raj wrote: >> >> On Mon, Jul 17, 2017 at 8:21 PM, Martin Kelly wrote: >>> >>> Previously, we had a gst-python recipe, but it supported only GStreamer >>> 0.1. After GStreamer switched the Python bindings to use G

[OE-core] [PATCH] bluez5: cosmetic fixes to bluetooth bootscript

Fix booting messages wrapped over two different lines: Starting bluetooth bluetoothd Stopping bluetooth /usr/libexec/bluetooth/bluetoothd Also reworked whitespace (removed some empty lines). Signed-off-by: Javier Viguera --- meta/recipes-connectivity/bluez5/bluez5/init | 15 ++

Re: [OE-core] [PATCH] gstreamer1.0-python: add new recipe

On 07/17/2017 07:47 PM, Khem Raj wrote: On Mon, Jul 17, 2017 at 8:21 PM, Martin Kelly wrote: Previously, we had a gst-python recipe, but it supported only GStreamer 0.1. After GStreamer switched the Python bindings to use GObject introspection, we were no longer able to build the bindings, and

[OE-core] ✗ patchtest: failure for systemd: refuse to load units with errors (CVE-2017-1000082)

== Series Details == Series: systemd: refuse to load units with errors (CVE-2017-182) Revision: 1 URL : https://patchwork.openembedded.org/series/7796/ State : failure == Summary == Thank you for submitting this patch series to OpenEmbedded Core. This is an automated response. Several tes

[OE-core] [PATCH] systemd: refuse to load units with errors (CVE-2017-1000082)

If a unit has a statement such as User=0day where the username exists but is strictly speaking invalid, the unit will be started as the root user instead. Backport a patch from upstream to mitigate this by refusing to start units such as this. Signed-off-by: Ross Burton --- ...ragment-refuse-un

Re: [OE-core] [PATCHv3 11/30] oeqa/selftest/{case, context}: Add builddir by test class and context

On 07/17/2017 04:45 PM, Aníbal Limón wrote: > The build directory by Test class will enable to use several instances > of bitbake in parallel to enable oe-selftest threaded runs. > > [YOCTO #11429] > > Signed-off-by: Aníbal Limón > --- > meta/lib/oeqa/selftest/case.py| 97 > +

Re: [OE-core] [PATCH v4] kernel: Add support for multiple kernel packages

On 07/17/2017 03:31 PM, Wold, Saul wrote: On Wed, 2017-07-05 at 12:33 -0500, Haris Okanovic wrote: Some distros may want to provide alternate kernel "flavors" via feeds or within bootable images. For example, readily available builds which provide certain diagnostic features can enable develop

Re: [OE-core] State of bitbake world, Failed tasks 2017-07-16

On Tue, Jul 18, 2017 at 4:22 AM, Martin Jansa wrote: > I don't know what setup you're using, but my is described here: > http://www.openembedded.org/wiki/Bitbake_World_Status_Setup > interesting parts are https://github.com/shr-project/jenkins-jobs/blob/master/jenkins-job.sh#L329-L350 I see that

Re: [OE-core] [PATCH] bitbake.conf: Add unzip hosttool

Hi Ross That did the trick. I have just posted a new patch! Thanks! On Tue, Jul 18, 2017 at 12:47 PM, Burton, Ross wrote: > > On 18 July 2017 at 11:03, Ricardo Ribalda Delgado > wrote: >> >> Unzip is required for jar files. Without this patch: >> ERROR: junit4-4.3.1-r0 do_unpack: Unpack failur

[OE-core] [PATCH] base.bbclass: Make .jar file depend on unzip-native

Unzip is required for jar files. Without this patch: ERROR: junit4-4.3.1-r0 do_unpack: Unpack failure for URL: 'http://downloads.sourceforge.net/junit/junit-4.3.1-src.jar'. Unpack command PATH="/var/lib/jenkins/workspace/qt5122-dyspro/build/tmp/sysroots-uninative/x86_64-linux/usr/bin ..." unzi

[OE-core] [PATCH] systemd-bootchart: Fix build with glibc 2.26

xlocale.h is no more, don't include it. Signed-off-by: Jussi Kukkonen --- .../0001-parse-util-Don-t-use-xlocale.h.patch | 32 ++ .../systemd-bootchart/systemd-bootchart_231.bb | 4 ++- 2 files changed, 35 insertions(+), 1 deletion(-) create mode 100644 meta/recipe

Re: [OE-core] [PATCH] bitbake.conf: Add unzip hosttool

On 18 July 2017 at 11:03, Ricardo Ribalda Delgado wrote: > Unzip is required for jar files. Without this patch: > ERROR: junit4-4.3.1-r0 do_unpack: Unpack failure for URL: > 'http://downloads.sourceforge.net/junit/junit-4.3.1-src.jar'. Unpack > command > PATH="/var/lib/jenkins/workspace/qt5122-dy

Re: [OE-core] [PATCH] bitbake.conf: Add unzip hosttool

There is unzip-native available, so you should add it to DEPENDS only where needed.e.g. like in: https://github.com/OSSystems/meta-browser/commit/bd2c39ddba00a3e0171e30ee4a4585b56122990a On Tue, Jul 18, 2017 at 11:03 AM, Ricardo Ribalda Delgado < ricardo.riba...@gmail.com> wrote: > Unzip is requ

[OE-core] [PATCH] bitbake.conf: Add unzip hosttool

Unzip is required for jar files. Without this patch: ERROR: junit4-4.3.1-r0 do_unpack: Unpack failure for URL: 'http://downloads.sourceforge.net/junit/junit-4.3.1-src.jar'. Unpack command PATH="/var/lib/jenkins/workspace/qt5122-dyspro/build/tmp/sysroots-uninative/x86_64-linux/usr/bin ..." unzi

Re: [OE-core] [PATCH 2/6] cryptodev: 1.8 -> 1.9

On 07/18/2017 04:45 PM, Paul Eggleton wrote: On Thursday, 13 July 2017 12:03:19 PM CEST Robert Yang wrote: On 07/13/2017 05:50 PM, Burton, Ross wrote: The list is yo...@yoctoproject.org . Please resend to the list. Sorry, I had sent it to yo...@lists.yoctoproj

Re: [OE-core] [PATCH 2/6] cryptodev: 1.8 -> 1.9

On Thursday, 13 July 2017 12:03:19 PM CEST Robert Yang wrote: > On 07/13/2017 05:50 PM, Burton, Ross wrote: > > The list is yo...@yoctoproject.org . > > Please resend to the list. > > Sorry, I had sent it to yo...@lists.yoctoproject.org which is from README, > but I

Re: [OE-core] State of bitbake world, Failed tasks 2017-07-16

I don't know what setup you're using, but my is described here: http://www.openembedded.org/wiki/Bitbake_World_Status_Setup and the current version published with the results: http://logs.nslu2-linux.org/buildlogs/oe/world/rocko/log.world.qemuarm.20170717_011149.log/world_fixes.inc now I see that

[OE-core] [PATCH 0/2] acl,at: reduce local pending patches

The following changes since commit 81498aac9560fbeaeb58eaada32ce80e0ea51628: yocto-project-qs: Updated Next Steps list (2017-07-12 00:28:16 +0100) are available in the git repository at: https://github.com/DengkeDu/openembedded-core.git dengke/acl-at-reduce-local-pending-patches https://g

[OE-core] [PATCH 2/2] acl: reduce local pending patches

Signed-off-by: Dengke Du --- .../attr/acl/test-fix-directory-permissions.patch | 17 ++--- 1 file changed, 14 insertions(+), 3 deletions(-) diff --git a/meta/recipes-support/attr/acl/test-fix-directory-permissions.patch b/meta/recipes-support/attr/acl/test-fix-directory-permis

[OE-core] [PATCH 1/2] at: reduce local pending patches

Signed-off-by: Dengke Du --- .../at/at/0001-remove-glibc-assumption.patch | 12 +++- 1 file changed, 7 insertions(+), 5 deletions(-) diff --git a/meta/recipes-extended/at/at/0001-remove-glibc-assumption.patch b/meta/recipes-extended/at/at/0001-remove-glibc-assumption.pat

[OE-core] [PATCH] vulkan-demos: Rename ${bindir}/screenshot

This conflicts with sato-screenshot. Signed-off-by: Jussi Kukkonen --- meta/recipes-graphics/vulkan/vulkan-demos_git.bb | 2 ++ 1 file changed, 2 insertions(+) diff --git a/meta/recipes-graphics/vulkan/vulkan-demos_git.bb b/meta/recipes-graphics/vulkan/vulkan-demos_git.bb index fcd9e7b..e08827