Due to we have upgraded go to 1.24.0, we should also bump GOVERSION
to fix preferred version warning
...
WARNING: preferred version 1.22% of go not available (for item go)
WARNING: versions of go available: 1.24.0
...
Signed-off-by: Hongxu Jia
---
meta/conf/distro/include/tcmode-default.inc | 2
export OECMAKE_FORCE_CROSSCOMPILING ??= "0" in cmake.bbclass, when users
encounter the error and explicitly set OECMAKE_FORCE_CROSSCOMPILING = "1"
in recipe, they should be aware of the probably regression of
RUNTIME_DEPENDENCIES in cross compiling situation
Signed-off-by: H
I am also working to upgrade go to 1.24.0 and fix the buildpath issue, I will
send review later
//Hongxu
-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#212086):
https://lists.openembedded.org/g/openembedded-core/message/212086
Mute This Topic
Summary: Upgrade go to 1.42.0
== Comments (indicate scope for each "y" above) ==
* Conditions of submission
* Documentation Changes/Release Notes
= Doc changes
= Release notes
* Git logs
[poky]
commit 351a6f55cba8f43af2f1b54b49c8a05ccbe53d68
Author: Hongxu Jia
Date: Sa
/507d1b22f4b58ac68841582d0c2c0ab6b20e5a98
[2] https://github.com/golang/go/issues/62047
Signed-off-by: Hongxu Jia
---
meta/classes-recipe/go.bbclass | 1 -
meta/recipes-devtools/go/go-common.inc | 1 -
2 files changed, 2 deletions(-)
diff --git a/meta/classes-recipe/go.bbclass b/meta/classes-recipe/go.bbclass
index
/507d1b22f4b58ac68841582d0c2c0ab6b20e5a98
[2]
https://github.com/golang/go/commit/507d1b22f4b58ac68841582d0c2c0ab6b20e5a98#diff-cab5921f94f2667bb0bc1b935d2d46b4c03541b4351b33438ab7290b94dea212R669
Signed-off-by: Hongxu Jia
---
meta/recipes-devtools/go/go-1.24.0.inc| 1 +
meta/recipes-devtools/go/go
Refresh patches
See [1] for Go 1.24 Release Notes
License-Update: update per Google Legal [2]
[1] https://go.dev/doc/go1.24
[2] https://github.com/golang/go/commit/760b722c344d312ab62a5c2f94865a869ce0bab9
Signed-off-by: Hongxu Jia
---
.../go/{go-1.22.12.inc => go-1.24.0.inc} |
change
[1] http://www.dest-unreach.org/socat/
[2] http://www.dest-unreach.org/socat/CHANGES:
Signed-off-by: Hongxu Jia
---
.../socat/{socat_1.8.0.2.bb => socat_1.8.0.3.bb} | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
rename meta/recipes-connectivity/socat/{socat_1.8.0.2
Ping
//Hongxu
On 2/17/25 16:22, hongxu via lists.openembedded.org wrote:
Noteworthy changes in version 1.24.2 (2025-02-10)
-
Take care: This version is from a legacy branch of gpgme created
just before we split out the C++, Qt, and Python
Ping
//Hongxu
On 2/17/25 15:14, hongxu via lists.openembedded.org wrote:
1. Due to upstream commit [GNUmakefile: Require the user to specify
'-R' if their make(1) is too old][1], add option -R to make
2. Due to upstream commit [src/bin/pdfman, scripts/bash_aliases,
pdfman.1: Mak
An integer overflow in sqfs_resolve_symlink in Das U-Boot before 2025.01-rc1
occurs via a crafted squashfs filesystem with an inode size of 0x,
resulting in a malloc of zero and resultant memory overwrite.
https://nvd.nist.gov/vuln/detail/CVE-2024-57255
Signed-off-by: Hongxu Jia
From: Carlos Dominguez
This patch mitigates the vulnerability identified via CVE-2019-14196.
The previous patch was bypassed/ineffective, and now the vulnerability
is identified via CVE-2022-30767. The patch removes the sanity check
introduced to mitigate CVE-2019-14196 since it's ineffective.
fi
-57256
Signed-off-by: Hongxu Jia
---
.../u-boot/files/CVE-2024-57256.patch | 51 +++
meta/recipes-bsp/u-boot/u-boot_2022.01.bb | 1 +
2 files changed, 52 insertions(+)
create mode 100644 meta/recipes-bsp/u-boot/files/CVE-2024-57256.patch
diff --git a/meta/recipes-bsp/u
A stack consumption issue in sqfs_size in Das U-Boot before 2025.01-rc1
occurs via a crafted squashfs filesystem with deep symlink nesting.
https://nvd.nist.gov/vuln/detail/CVE-2024-57257
Signed-off-by: Hongxu Jia
---
.../u-boot/files/CVE-2024-57257.patch | 228 ++
meta
An integer overflow in sqfs_inode_size in Das U-Boot before
2025.01-rc1 occurs in the symlink size calculation via a
crafted squashfs filesystem.
https://nvd.nist.gov/vuln/detail/CVE-2024-57254
Signed-off-by: Hongxu Jia
---
.../u-boot/files/CVE-2024-57254.patch | 47
sqfs_search_dir in Das U-Boot before 2025.01-rc1 exhibits an off-by-one error
and resultant heap memory corruption for squashfs directory listing because the
path separator is not considered in a size calculation.
https://nvd.nist.gov/vuln/detail/CVE-2024-57259
Signed-off-by: Hongxu Jia
From: Sakib Sajal
Backport appropriate patches to fix CVE-2022-2347 and CVE-2022-30790.
Signed-off-by: Sakib Sajal
---
.../u-boot/files/CVE-2022-2347_1.patch| 129 +++
.../u-boot/files/CVE-2022-2347_2.patch| 66
.../u-boot/files/CVE-2022-30790.patch
Integer overflows in memory allocation in Das U-Boot before 2025.01-rc1
occur for a crafted squashfs filesystem via sbrk, via request2size,
or because ptrdiff_t is mishandled on x86_64.
https://nvd.nist.gov/vuln/detail/CVE-2024-57258
Signed-off-by: Hongxu Jia
---
.../u-boot/files/CVE-2024
Please ignore these series 1/6 ~ 6/6, I lost other two CVE fixes, v2
incoming
//Hongxu
On 2/19/25 16:06, hongxu via lists.openembedded.org wrote:
An integer overflow in sqfs_inode_size in Das U-Boot before
2025.01-rc1 occurs in the symlink size calculation via a
crafted squashfs filesystem
A stack consumption issue in sqfs_size in Das U-Boot before 2025.01-rc1
occurs via a crafted squashfs filesystem with deep symlink nesting.
https://nvd.nist.gov/vuln/detail/CVE-2024-57257
Signed-off-by: Hongxu Jia
---
.../u-boot/files/CVE-2024-57257.patch | 228 ++
meta
An integer overflow in sqfs_resolve_symlink in Das U-Boot before 2025.01-rc1
occurs via a crafted squashfs filesystem with an inode size of 0x,
resulting in a malloc of zero and resultant memory overwrite.
https://nvd.nist.gov/vuln/detail/CVE-2024-57255
Signed-off-by: Hongxu Jia
An integer overflow in sqfs_inode_size in Das U-Boot before
2025.01-rc1 occurs in the symlink size calculation via a
crafted squashfs filesystem.
https://nvd.nist.gov/vuln/detail/CVE-2024-57254
Signed-off-by: Hongxu Jia
---
.../u-boot/files/CVE-2024-57254.patch | 47
Integer overflows in memory allocation in Das U-Boot before 2025.01-rc1
occur for a crafted squashfs filesystem via sbrk, via request2size,
or because ptrdiff_t is mishandled on x86_64.
https://nvd.nist.gov/vuln/detail/CVE-2024-57258
Signed-off-by: Hongxu Jia
---
.../u-boot/files/CVE-2024
sqfs_search_dir in Das U-Boot before 2025.01-rc1 exhibits an off-by-one error
and resultant heap memory corruption for squashfs directory listing because the
path separator is not considered in a size calculation.
https://nvd.nist.gov/vuln/detail/CVE-2024-57259
Signed-off-by: Hongxu Jia
-57256
Signed-off-by: Hongxu Jia
---
.../u-boot/files/CVE-2024-57256.patch | 51 +++
meta/recipes-bsp/u-boot/u-boot_2022.01.bb | 1 +
2 files changed, 52 insertions(+)
create mode 100644 meta/recipes-bsp/u-boot/files/CVE-2024-57256.patch
diff --git a/meta/recipes-bsp/u
An integer overflow in sqfs_inode_size in Das U-Boot before
2025.01-rc1 occurs in the symlink size calculation via a
crafted squashfs filesystem.
https://nvd.nist.gov/vuln/detail/CVE-2024-57254
Signed-off-by: Hongxu Jia
---
.../u-boot/files/CVE-2024-57254.patch | 47
sqfs_search_dir in Das U-Boot before 2025.01-rc1 exhibits an off-by-one error
and resultant heap memory corruption for squashfs directory listing because the
path separator is not considered in a size calculation.
https://nvd.nist.gov/vuln/detail/CVE-2024-57259
Signed-off-by: Hongxu Jia
A stack consumption issue in sqfs_size in Das U-Boot before 2025.01-rc1
occurs via a crafted squashfs filesystem with deep symlink nesting.
https://nvd.nist.gov/vuln/detail/CVE-2024-57257
Signed-off-by: Hongxu Jia
---
.../u-boot/files/CVE-2024-57257.patch | 227 ++
meta
Integer overflows in memory allocation in Das U-Boot before 2025.01-rc1
occur for a crafted squashfs filesystem via sbrk, via request2size,
or because ptrdiff_t is mishandled on x86_64.
https://nvd.nist.gov/vuln/detail/CVE-2024-57258
Signed-off-by: Hongxu Jia
---
.../u-boot/files/CVE-2024
An integer overflow in sqfs_resolve_symlink in Das U-Boot before 2025.01-rc1
occurs via a crafted squashfs filesystem with an inode size of 0x,
resulting in a malloc of zero and resultant memory overwrite.
https://nvd.nist.gov/vuln/detail/CVE-2024-57255
Signed-off-by: Hongxu Jia
-57256
Signed-off-by: Hongxu Jia
---
.../u-boot/files/CVE-2024-57256.patch | 51 +++
meta/recipes-bsp/u-boot/u-boot-common.inc | 1 +
2 files changed, 52 insertions(+)
create mode 100644 meta/recipes-bsp/u-boot/files/CVE-2024-57256.patch
diff --git a/meta/recipes-bsp/u
missing Bcrypt link on Windows (Saleem Abdulrasool)
cmake: Fix compatibility in package version file
Signed-off-by: Hongxu Jia
---
.../libxml/{libxml2_2.13.5.bb => libxml2_2.13.6.bb} | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
rename meta/recipes-core/lib
On 2/18/25 21:47, Alexander Kanavin wrote:
CAUTION: This email comes from a non Wind River email account!
Do not click links or open attachments unless you recognize the sender and know
the content is safe.
On Tue, 18 Feb 2025 at 14:37, hongxu via lists.openembedded.org
wrote:
Explicitly set
_TIMEOUT to 600s in bbclass,
and we could override it in local.conf
[1] https://github.com/pypa/setuptools-scm/blob/main/docs/overrides.md
Signed-off-by: Hongxu Jia
---
meta/classes-recipe/setuptools3-base.bbclass | 4
1 file changed, 4 insertions(+)
diff --git a/meta/classes-recipe/setup
Backport patch from upstream to add subprocess timeout control env var
Signed-off-by: Hongxu Jia
---
.../0001-fix-957-add-subprocess-timeout.patch | 78 +++
.../python/python3-setuptools-scm_8.0.4.bb| 4 +
2 files changed, 82 insertions(+)
create mode 100644
meta/recipes
Sorry, I will resend it later, v2 incoming
//Hongxu
-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#211559):
https://lists.openembedded.org/g/openembedded-core/message/211559
Mute This Topic: https://lists.openembedded.org/mt/111228074/21656
Group
It happens occasionally, in our build farm, similar Yocto Autobuilder, the
build test controller starts up multiple containers for the build on the host,
and each container is allocated for the world build.
It should be some kind of limit testing or stress testing for yocto build
-=-=-=-=-=-=-=
-info: https://dev.gnupg.org/T7480
https://dev.gnupg.org/source/gnupg/browse/master/NEWS
Signed-off-by: Hongxu Jia
---
.../0001-Woverride-init-is-not-needed-with-gcc-9.patch | 2 +-
...nfigure.ac-use-a-custom-value-for-the-location-of-.patch | 6 +++---
.../gnupg/0002-use-pkgconfig-instead-of
-off-by: Hongxu Jia
---
...vert-build-Make-gpgme.m4-use-gpgrt-config-with-.pc.patch | 2 +-
.../gpgme/0001-autogen.sh-remove-unknown-in-version.patch | 2 +-
meta/recipes-support/gpgme/gpgme/0001-pkgconfig.patch | 6 +++---
.../0001-posix-io.c-Use-off_t-instead-of-off64_t.patch | 2
_TIMEOUT to 600s in bbclass,
and we could override it in local.conf
[1] https://github.com/pypa/setuptools-scm/blob/main/docs/overrides.md
Signed-off-by: Hongxu Jia
---
meta/classes-recipe/setuptools3-base.bbclass | 4
1 file changed, 4 insertions(+)
diff --git a/meta/classes-recipe/setup
Backport patch from upstream to add subprocess timeout control env var
Signed-off-by: Hongxu Jia
---
.../0001-fix-957-add-subprocess-timeout.patch | 78 +++
.../python/python3-setuptools-scm_8.0.4.bb| 1 +
2 files changed, 79 insertions(+)
create mode 100644
meta/recipes
Signed-off-by: Hongxu Jia
---
...vert-build-Make-gpgme.m4-use-gpgrt-config-with-.pc.patch | 2 +-
.../gpgme/0001-autogen.sh-remove-unknown-in-version.patch | 2 +-
meta/recipes-support/gpgme/gpgme/0001-pkgconfig.patch | 6 +++---
.../0001-posix-io.c-Use-off_t-instead-of-off64_t.patch
Signed-off-by: Hongxu Jia
---
.../0001-Woverride-init-is-not-needed-with-gcc-9.patch | 2 +-
...nfigure.ac-use-a-custom-value-for-the-location-of-.patch | 6 +++---
.../gnupg/0002-use-pkgconfig-instead-of-npth-config.patch | 2 +-
...0004-autogen.sh-fix-find-version-for-beta
_TIMEOUT to 600s in bbclass,
and we could override it in local.conf
[1] https://github.com/pypa/setuptools-scm/blob/main/docs/overrides.md
Signed-off-by: Hongxu Jia
---
meta/classes-recipe/setuptools3-base.bbclass | 4
1 file changed, 4 insertions(+)
diff --git a/meta/classes-recipe/setup
commit/?id=ed9bc1e3277befd6e165270f14e458a5ec4074f1
Signed-off-by: Hongxu Jia
---
.../man-pages/{man-pages_6.9.1.bb => man-pages_6.11.bb} | 9 +++--
1 file changed, 7 insertions(+), 2 deletions(-)
rename meta/recipes-extended/man-pages/{man-pages_6.9.1.bb =>
man-pages_6.11.bb} (92%)
diff --git a/meta/reci
g-with-.pc.patch
+++
b/meta/recipes-support/gpgme/gpgme/0001-Revert-build-Make-gpgme.m4-use-gpgrt-config-with-.pc.patch
@@ -1,4 +1,4 @@
-From b12b01239909b6fb41adc64d3c0ed32795554369 Mon Sep 17 00:00:00 2001
+From 95d0bae453b2b5a7d25b92d99565d27407fffa1b Mon Sep 17 00:00:00 2001
From: Hongxu Jia
Date: F
From: Upgrade Helper
---
.../0001-Woverride-init-is-not-needed-with-gcc-9.patch | 2 +-
...nfigure.ac-use-a-custom-value-for-the-location-of-.patch | 6 +++---
.../gnupg/0002-use-pkgconfig-instead-of-npth-config.patch | 2 +-
...0004-autogen.sh-fix-find-version-for-beta-checking.patch | 2
_TIMEOUT to 600s in bbclass,
and we could override it in local.conf
[1] https://github.com/pypa/setuptools-scm/blob/main/docs/overrides.md
Issue: LINCD-21838
(LOCAL REV: NOT UPSTREAM) -- Sent to oe-core on 20250217
Signed-off-by: Hongxu Jia
---
meta/classes-recipe/setuptools3-base.bbclass | 4 +++
TIMEOUT to 600s in bbclass,
and we could override it in local.conf
[1]
https://github.com/pypa/setuptools-scm/blob/main/docs/overrides.md#subprocess-timeouts
Signed-off-by: Hongxu Jia
---
meta/classes-recipe/setuptools3-base.bbclass | 4
1 file changed, 4 insertions(+)
diff --git a/me
While multiple dynamic loader existed, in order to make executable file is
interpreted by the expected dynamic loader, relocating interpreter only if
the new dynamic loader and executable file have the same arch
[ YOCTO #15722 ]
Signed-off-by: Hongxu Jia
---
scripts/relocate_sdk.py | 32
While nativesdk support multilib, there are two dynamic loaders,
$OECORE_NATIVE_SYSROOT/lib64/ld-linux-x86-64.so.2
$OECORE_NATIVE_SYSROOT/lib/ld-linux.so.2
Search them with wildcard and call relocate_sdk.py separately
[ YOCTO #15722 ]
Signed-off-by: Hongxu Jia
---
meta/files
Wed, 2025-01-29 at 16:58 +, Ross Burton via
lists.openembedded.org wrote:
On 21 Jan 2025, at 08:55, hongxu via lists.openembedded.org
wrote:
The nativesdk multilib support required it to fix multilib headers
conflict
So the context here is that luajit apparently needs to be able to
build
The series is available in
https://git.openembedded.org/openembedded-core-contrib/log/?h=mathieu/master-next
selftest/multiconfig: test multiconfig multlib nativesdk gccmathieu/master-next
Hongxu Jia
nativesdk-multiconfig-multlib-toolchain-packager: add recipe Hongxu Jia
gcc-configure
ich
is not necessary any more
Suggested-by Richard Purdie
Signed-off-by: Hongxu Jia
---
Changed in v2:
Do not call bb.build.exec_func to run do_convert_crlf_to_lf in
classes/spdx-common,
preprend it to task do_patch to assure always run before do_patch
Changed in v3:
Add dos2unix-native to PATCH
epare_recipe_sysroot before do_configure do_patch after do_fetch
If V2 is acceptable, I will send a patch to modify do_prepare_recipe_sysroot
later
2. Use V1 as temporary workaround, until we have a better solution and clean
them
//Hongxu
-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all message
nix
before do_convert_crlf_to_lf is executed in any task
Also remove extra do_convert_crlf_to_lf in archiver.bbclass which
is not necessary any more
Suggested-by Richard Purdie
Signed-off-by: Hongxu Jia
---
Changed in v2:
Do not call bb.build.exec_func to run do_convert_crlf_to_lf in
classes/spdx-common,
p
prefunc will not be invoked in bb.build.exec_func
I think prepend function to task do_patch could workaround the issue, v2
incoming
[1]
https://git.yoctoproject.org/poky/commit/?id=0f516fe9a043276c670622895c4760ff6468f293
//Hongxu
-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent
ting also covers gcc-nativesdk without multilib
For other situation, the configuration is the same as usual
[ YOCTO #15722 ]
Signed-off-by: Hongxu Jia
---
Changed in v2,
Fix `cargo build' failded in SDK, the interpreter of dynamical loader
is not right
$ rustc build.rs
$ ./build
./build: cann
- oe-selftest - INFO -
test_multiconfig_64bit_gcc_suport_32bit_multilib (multiconfig.MultiConfig)
...
Skip test case if BUILD_ARCH != 'x86_64'
[ YOCTO #15722 ]
Signed-off-by: Hongxu Jia
---
Changed in v2:
- Skip test case if BUILD_ARCH != 'x86_64'
meta/lib/oeqa/selftest/
While SPDX_INCLUDE_SOURCES = "1", do_create_spdx error happens for
these recipes inherit dos2unix
Refer [1] to fix the issue
[1]
https://git.openembedded.org/openembedded-core/commit/?id=2ceda7c90c0087f52693c54d5ccab143b27f4d21
Signed-off-by: Hongxu Jia
---
meta/lib/oe/spdx_com
multiconfig build to generate 64bit x86_64
buildtools-tarball.
During package runtime installation, script postinst extracted 64bit x86_64
buildtools-tarball and installed it to 32bit x86 nativesdk sysroot.
[ YOCTO #15722 ]
Signed-off-by: Hongxu Jia
Changed in v2:
Commit shortlog (first line of commit
Otherwise 32bit i686 nativesdk-gcc compiled 64bit executable file
failed
$ cat << ENDOF > main.c
int main() {
return 0;
}
ENDOF
$ i686-pokysdk-linux-gcc -m64 main.c -o main
cc1: sorry, unimplemented: 64-bit mode not compiled in
[ YOCTO #15722 ]
Signed-off-by: Hongxu Jia
---
multilib support in
which the symlinks is broken
[ YOCTO #15722 ]
Signed-off-by: Hongxu Jia
---
meta/recipes-devtools/gcc/libgcc-common.inc | 40 +
1 file changed, 40 insertions(+)
diff --git a/meta/recipes-devtools/gcc/libgcc-common.inc
b/meta/recipes-devtools/gcc/libgcc
multiconfig build to generate 64bit x86_64
buildtools-tarball.
During package runtime installation, script postinst extracted 64bit x86_64
buildtools-tarball and installed it to 32bit x86 nativesdk sysroot.
[ YOCTO #15722 ]
Signed-off-by: Hongxu Jia
---
...ticonfig-multlib-toolchain-packager_0.1.bb | 74
While multiple dynamic loader existed, in order to make executable file is
interpreted by the expected dynamic loader, relocating interpreter only if
the new dynamic loader and executable file have the same arch
[ YOCTO #15722 ]
Signed-off-by: Hongxu Jia
---
scripts/relocate_sdk.py | 32
- oe-selftest - INFO -
test_multiconfig_64bit_gcc_suport_32bit_multilib (multiconfig.MultiConfig)
...
[ YOCTO #15722 ]
Signed-off-by: Hongxu Jia
---
meta/lib/oeqa/selftest/cases/multiconfig.py | 139 +++-
1 file changed, 138 insertions(+), 1 deletion(-)
diff --git a/meta/lib
27;: No such file or directory
Refer perl class-target do_configure, explicitly pass option
'--libdir=${libdir}'
to nativesdk do_configure
Signed-off-by: Hongxu Jia
---
meta/recipes-devtools/perl/perl_5.40.0.bb | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/meta
" and
"/lib64" suffix.
- Harcode dirnames ['m64', 'm32'] and osdirnames ['../lib64', '../lib']
Above setting also covers gcc-nativesdk without multilib
For other situation, the configuration is the same as usual
[ YOCTO #15722 ]
Signed-off-
The nativesdk multilib support required it to fix multilib headers
conflict
[ YOCTO #15722 ]
Signed-off-by: Hongxu Jia
---
meta/classes-recipe/multilib_header.bbclass | 5 -
1 file changed, 5 deletions(-)
diff --git a/meta/classes-recipe/multilib_header.bbclass
b/meta/classes-recipe
While nativesdk support multilib, there are two dynamic loaders,
$OECORE_NATIVE_SYSROOT/lib64/ld-linux-x86-64.so.2
$OECORE_NATIVE_SYSROOT/lib/ld-linux.so.2
Search them with wildcard and call relocate_sdk.py separately
[ YOCTO #15722 ]
Signed-off-by: Hongxu Jia
---
meta/files
INCLUDE_VEX = "all"` + cve-check
which means it does not affect normal build
//Hongxu
Kind regards,
Marta
On Wed, Jan 8, 2025 at 4:47 PM hongxu via lists.openembedded.org
<https://urldefense.com/v3/__http://lists.openembedded.org__;!!AjveYdw8EvQ!a0TdTsiZuoyIgAIBBPS382u
to": [
"http://spdx.org/spdxdocs/unzip-d5d383ad-de07-5ac4-8814-3c95ed6bdaaa/47a621ef0550c7a6a1ed0507b0b8a7b7822447c2ff0995acc4b688eed1e1f1d0/package/unzip";
],
"security_vexVersion": "1.0.0"
},
...
[1]
https://git.openembedded.org/openembedded-core
d1473ae4da277398/vulnerability/CVE-2010-4756";,
"creationInfo": "_:CreationInfo263",
"externalIdentifier": [
{
"type": "ExternalIdentifier",
"externalIdentifierType": "cve",
&quo
Due to commit [cve-check: Rework patch parsing] applied, it missed to
update patched_cves dictionary if cve_id not in patched_cves
Signed-off-by: Hongxu Jia
---
meta/lib/oe/cve_check.py | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/meta/lib/oe/cve_check.py b/meta/lib/oe
to": [
"http://spdx.org/spdxdocs/unzip-d5d383ad-de07-5ac4-8814-3c95ed6bdaaa/47a621ef0550c7a6a1ed0507b0b8a7b7822447c2ff0995acc4b688eed1e1f1d0/package/unzip";
],
"security_vexVersion": "1.0.0"
},
...
[1]
https://spdx.github.io/spdx-spec/v3.0.1
Understood, thanks for pointing it out
//Hongxu
-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#209568):
https://lists.openembedded.org/g/openembedded-core/message/209568
Mute This Topic: https://lists.openembedded.org/mt/110301813/21656
Group
Please drop it, I have a better way for it, v2 incoming
//Hongxu
-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#209566):
https://lists.openembedded.org/g/openembedded-core/message/209566
Mute This Topic: https://lists.openembedded.org/mt
-off-by: Hongxu Jia
---
...Dxe-add-checks-to-IScsiBuildKeyValue.patch | 60 +++
meta/recipes-core/ovmf/ovmf_git.bb| 1 +
2 files changed, 61 insertions(+)
create mode 100644
meta/recipes-core/ovmf/ovmf/0001-NetworkPkg-IScsiDxe-add-checks-to-IScsiBuildKeyValue.patch
hs QA error occurs.
Explicitly set INSTALL_CMD with hosttools's install
[1]
https://github.com/openembedded/openembedded-core/commit/dc6306883cc2c7d4d98d595442e5bf4037a160c5
Signed-off-by: Hongxu Jia
---
meta/recipes-support/icu/icu_76-1.bb | 2 ++
1 file changed, 2 insertions(+)
diff --
-8814-3c95ed6bdaaa/6e57f2cbf8f80a80ee21628b8a35cdddaa8ee800cc9e42367d866eb8daa41bb0/package/unzip";
],
"security_vexVersion": "1.0.0"
},
...
[1]
https://spdx.github.io/spdx-spec/v3.0.1/model/Security/Classes/VexFixedVulnAssessmentRelationship/
Signed-off-b
27;grub']
|ERROR: Required build target 'meta-world-pkgdata' has no buildable providers.
|Missing or unbuildable dependency chain was: ['meta-world-pkgdata',
'initramfs-module-install', 'grub']
Signed-off-by: Hongxu Jia
---
meta/recipes-core/images
.
|Missing or unbuildable dependency chain was: ['valgrind']
|ERROR: Required build target 'meta-world-pkgdata' has no buildable providers.
|Missing or unbuildable dependency chain was: ['meta-world-pkgdata',
'packagegroup-core-tools-profile', 'valgrind']
Sign
buildable, removing...
|Missing or unbuildable dependency chain was: ['kexec']
|ERROR: Required build target 'meta-world-pkgdata' has no buildable providers.
|Missing or unbuildable dependency chain was: ['meta-world-pkgdata',
'packagegroup-core-tools-testapps'
nbuildable, removing...
Missing or unbuildable dependency chain was: ['kexec']
ERROR: Required build target 'meta-world-pkgdata' has no buildable providers.
Missing or unbuildable dependency chain was: ['meta-world-pkgdata',
'packagegroup-core-tools-testapps'
r unbuildable dependency chain was: ['valgrind']
ERROR: Required build target 'meta-world-pkgdata' has no buildable providers.
Missing or unbuildable dependency chain was: ['meta-world-pkgdata',
'packagegroup-core-tools-profile', 'valgrind']
Sign
x27;grub']
ERROR: Required build target 'meta-world-pkgdata' has no buildable providers.
Missing or unbuildable dependency chain was: ['meta-world-pkgdata',
'initramfs-module-install', 'grub']
Signed-off-by: Hongxu Jia
---
meta/recipes-core/images
Got it, thanks for the reply
//Hongxu
-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#209103):
https://lists.openembedded.org/g/openembedded-core/message/209103
Mute This Topic: https://lists.openembedded.org/mt/110290207/21656
Group Owner
In order to inherit SPDX class conditionally, using variable ${SPDX_CLASS}
to inherit SPDX class other than original 'INHERIT:remove = "create-spdx"'
and INHERIT += "create-spdx-2.2"
Signed-off-by: Hongxu Jia
---
meta/classes/create-spdx.bbclass | 3 ++-
meta/l
cs.org/openembedded-alias/by-doc-hash/cc72db638e3f8e283e722af0ecc77d19f93cc6736700ee76477e3773b6b07b05/shadow/UNIHASH/license/3_24_0/BSD-3-Clause";
]
},
...
Signed-off-by: Hongxu Jia
---
meta/lib/oe/spdx30_tasks.py | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a
f-5a2d-9a1d-99b12a405441/d0cdb0d02e54d55e52fccf8631f8290b161ad43fe31fffe09e8e25041d2280cf/sourcefile/11048";,
"relationshipType": "hasDeclaredLicense",
"to": [
"http://spdxdocs.org/openembedded-alias/by-doc-hash/cc72db638e3f8e283e722af0ecc77d19f93cc67367
t;LicenseRef-PD",
"value":
"http://spdx.org/spdxdocs/sqlite3-native-e5cc0672-d8dd-57e8-a2df-fe4615831fda/162c62b5b011cd3f82f413b3dae4d6d1542201552c964d5ce69fe170e0720b85/license-text/PD";
}
]
---
Suggested-by: Joshua Watt
Signed-off-by: Hongxu Jia
---
meta/lib/oe/sbom30.py | 12 ++
8/flex-nativeUNIHASH/build/recipe
After applying this commit to remove "/" from namespace.
http://spdxdocs.org/openembedded-alias/by-doc-hash/0b308e4b9ad979f642d8787c61f76c31bdcad04837eeaaf8bc383f33f99bbeb8/flex-native/UNIHASH/build/recipe
Signed-off-by: Hongxu Jia
---
meta/lib/oe/sb
On 12/21/24 00:09, Mathieu Dubois-Briand wrote:
CAUTION: This email comes from a non Wind River email account!
Do not click links or open attachments unless you recognize the sender and know
the content is safe.
Hi Hongxu,
I'm back on this issue. So yesterday I tried again to pick
lias/by-doc-hash/abb77695d73c96547fa2c4d5d658cd5c44a6ca7b4f0c07889cbf868d6c832bb1/openssl-native/UNIHASH/build/recipe
[1] https://valkyrie.yoctoproject.org/api/v2/logs/928428/raw
//Hongxu
-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#208839):
https://lists.openembedded.org/g/openembedded-core/message/
CONFIG_", option ):
'''
According to [1], use raw strings for regular expression
[1] https://docs.python.org/dev/whatsnew/3.12.html#other-language-changes
Signed-off-by: Hongxu Jia
---
...yntaxWarning-for-RegEx-calls-on-Pyth.patch | 60 +++
.../kern-tools/kern-t
8/flex-nativeUNIHASH/build/recipe
After applying this commit to remove "/" from namespace.
http://spdxdocs.org/openembedded-alias/by-doc-hash/0b308e4b9ad979f642d8787c61f76c31bdcad04837eeaaf8bc383f33f99bbeb8/flex-native/UNIHASH/build/recipe
Signed-off-by: Hongxu Jia
---
meta/lib/oe/sb
t;LicenseRef-PD",
"value":
"http://spdx.org/spdxdocs/sqlite3-native-e5cc0672-d8dd-57e8-a2df-fe4615831fda/162c62b5b011cd3f82f413b3dae4d6d1542201552c964d5ce69fe170e0720b85/license-text/PD";
}
]
---
Suggested-by: Joshua Watt
Signed-off-by: Hongxu Jia
---
meta/lib/oe/sbom30.py | 12 ++
openembedded-core/commit/f1499c36c1054fc90f7b7268cc95285f2eca72f7#diff-253805ec3eaba58c6c3967711921d5a2748974ba533c6d864d86a8e5ad4df4c4L923
Signed-off-by: Hongxu Jia
---
meta/lib/oe/sbom30.py | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/meta/lib/oe/sbom30.py b/meta/lib/oe/sbom30.py
index 08fea2aca3..65603e69b7 100644
--
ders
tmp/deploy/spdx/3.0.1/x86_64/recipes/recipe-gcc-cross-arm.spdx.json
"http://spdxdocs.org/openembedded-alias/by-doc-hash/087e29d3627a06f5377effa627b99907607f5af0fe8f6d116b4490650c404a55/linux-libc-headers/UNIHASH/build/recipe";,
Signed-off-by: Hongxu Jia
---
meta/recipes-devtools/gcc/gcc-cross.inc | 1 +
1 file changed, 1 inserti
Got it, submitted PR [1] to shacl2code repo to make StringProp to decode SPDX
alias with actual ID
[1] https://github.com/JPEWdev/shacl2code/pull/34 to shacl2code
//Hongxu
From: Joshua Watt
Sent: Monday, December 16, 2024 11:32 PM
To: Jia, Hongxu
Cc
1 - 100 of 1795 matches
Mail list logo
