- Async generators lost their return value in PyPy. (Github issue :issue:`5465`)
- The outdated C macro _PyGC_FINALIZED() is no longer used in Py3.9+.
- The deprecated Py_OptimizeFlag is no longer used in Python 3.9+. (Github issue :issue:`5343`)
- Using the global __debug__ variable but not assertions could lead to compile errors.
- The broken HTML template support was removed from Tempita. (Github issue :issue:`3309`)
Signed-off-by: Trevor Gamblin <tgamblin@baylibre.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
41.0.2 - 2023-07-10
* Fixed bugs in creating and parsing SSH certificates where critical
options with values were handled incorrectly. Certificates are now
created correctly and parsing accepts correct values as well as the
previously generated invalid forms with a warning. In the next release,
support for parsing these invalid forms will be removed.
Release 4.7.1 (July 2, 2023)
* Fix support for TypedDict, NamedTuple and is_protocol on PyPy-3.7 and
PyPy-3.8. Patch by Alex Waygood. Note that PyPy-3.7 and PyPy-3.8 are
unsupported by the PyPy project. The next feature release of
typing-extensions will drop support for PyPy-3.7 and may also drop
support for PyPy-3.8.
Signed-off-by: Tim Orling <tim.orling@konsulko.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Richard Purdie [Fri, 14 Jul 2023 09:51:17 +0000 (10:51 +0100)]
ptest-runner: Pull in parallel test fixes and output handling
Pull in the commits:
Flush stdout and stderr after test
Remove _child_reader singleton
Report test failure on timeout
Only collect system state on timeout
Revert "Change test timeout to be total elapsed time"
Change test timeout to be total elapsed time
Report if child dies from a signal
Recreate pipe for each test
Revert "runner: Correctly handle running parallel tests"
runner: Correctly handle running parallel tests
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Revert "rootfs-postcommands.bbclass: add post func remove_unused_dnf_log_lock"
This was not well researched or explained, and obscures a problem elsewhere:
if dnf leaves lock files around, the problem should be fixed at the source,
and not in an after-the-fact function.
Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Changqing Li [Fri, 30 Jun 2023 09:14:51 +0000 (17:14 +0800)]
rootfs-postcommands.bbclass: add post func remove_unused_dnf_log_lock
Remove log_lock.pid which maybe created during do_rootfs. In commit
[dnf: only write the log lock to root for native dnf],
native dnf changed to write log lock to root, and target dnf still
use /var/log, so log_lock.pid need to be removed post do_rootfs.
Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
When enabling ipcs and ipcrm configuration into busybox, both tools are
built and then deployed during do_rootfs. These operation lead to below
issue (similar behavior happens for ipcs):
do_rootfs: Postinstall scriptlets of ['busybox'] have failed. If the intention is to defer them to first boot,
then please place them into pkg_postinst_ontarget:${PN} ().
update-alternatives: Error: not linking .../build/tmp/work/board-poky-linux/board-image/1.0-r0/rootfs/usr/bin/ipcrm
to /bin/busybox since .../build/tmp/work/board-poky-linux/board-image/1.0-r0/rootfs/usr/bin/ipcrm exists and is not a link
Binaries enter in conflict with same named util-linux utilities during
do_rootfs step.
Adding ALTERNATIVE_LINK_NAME for both tools fix the issue.
Signed-off-by: Benjamin Bouvier <benjamin.bouvier@ekinops.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
ptest-cargo.bbclass: fix condition to detect test executable
before that, a test executable at None was picked.
Moreover, use universal_newlines to subprocess call to avoid
being polluted by fancy carriage return characters.
- add PKCS#11 3.0 support
- add support for profile objects
- add ability to adjust module and config paths at run-time via system environmental exports
- make terminal output nicer
- p11-kit: add command to print merged configuration
- p11-kit: add commands to list, add and delete profiles of a token
- trust: add command to check format of .p11-kit files
- virtual: fix libffi type signatures for PKCS#11 3.0 functions
- server: fix umask setting when --group is specified
- server: check SHELL only when neither --sh nor --csh is specified
- rpc: use space string in C_InitToken
- rpc: fix two off-by-one errors identified by asan
- modules: make logging message more translatable
- pkcs11.h: support CRYPTOKI_GNU for IBM vendor mechanisms
- pkcs11.h: add IBM specific mechanism and attributes
- pkcs11.h: add ChaCha20/Salsa20 and Poly1305 mechanisms
- pkcs11.h: add AES-GCM mechanism parameters for message-based encryption
- po: update translations from Transifex
- bug and build fixes
- test fixes
Wang Mingyu [Fri, 7 Jul 2023 03:12:29 +0000 (11:12 +0800)]
msmtp: upgrade 1.8.23 -> 1.8.24
Changelog:
===========
- Added a new configuration command 'from_full_name' to set a full name for the
From header (like -F on the command line)
- Fixed the allow_from_override command
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Wang Mingyu [Fri, 7 Jul 2023 03:12:31 +0000 (11:12 +0800)]
taglib: upgrade 1.13 -> 1.13.1
Changelog:
===========
* Fixed parsing of TXXX frames without description.
* Detect MP4 atoms with invalid length or type.
* Do not miss ID3v2 frames when an extended header is present.
* Use property "DISCSUBTITLE" for ID3v2 "TSST" frame.
* Build system improvements: Use absolute path for macOS dylib install name,
support --define-prefix when using pkg-config, fixed minimum required
CppUnit version.
* Code clean up using clang-tidy.
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
34fd736 (HEAD, tag: v6.8.0) Finalize 97084d8 Remove reliance on typing-extensions, only required for Python 3.7 compatibility. b74d2b2 Merge pull request #460 from Gryfenfer97/main ec7bca0 Disable tests on pypy due to #463 ee4f84a Remove superfluous includes f862e3f Merge branch '2023-handoff' of https://github.com/jaraco/skeleton 23ed6b1 Merge branch 'collapse' into 2023-handoff c29955f Collapse skeleton history. Workaround for jaraco/skeleton#87. cca49a4 Prefer 3.x for Python version (latest stable). 74ba8ac Leverage pytest-enabler 2.2 for the default config. 8e83c3f Expand 'finalize' to commit and tag the change. f5a5617 Merge https://github.com/jaraco/skeleton 3b7d8a9 Require Python 3.8 or later. 07a87ea Remove tox boilerplate, no longer necessary with later versions of tox. cd145f4 Replace workaround for actions/setup-python#508 with 'allow-prereleases' 5ca761c Merge https://github.com/jaraco/skeleton 45c03bd add typing for simple functions 74b0d39 Adopt towncrier for managing changelog. Fixes jaraco/skeleton#83. 2963377 Merge https://github.com/jaraco/skeleton 241541c Remove inclusion of python version for docs e7cd730 Add badge for Ruff. 6f75480 Update RTD boilerplate to new issue. Ref readthedocs/readthedocs.org#10401.
Signed-off-by: Tim Orling <tim.orling@konsulko.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Ross Burton [Mon, 10 Jul 2023 13:06:52 +0000 (14:06 +0100)]
libdmx: remove obsolete library
The Xdmx server was removed from the xorg-server sources in xorg-server
21 (released Oct. 2021), so this is only useful for communicating with
Xdmx from the 1.20 and older releases.
Also remove the DEPENDS on libdmx in xdpyinfo for the same reason.
Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
AUH upgrade failed because the LICENSE checksum no longer matched. This
is because the attribution in the file was removed upstream in v67.8.0.
Patch fuzz also needed to be upgraded for
0001-conditionally-do-not-fetch-code-by-easy_install.patch.
Jose Quaresma [Mon, 10 Jul 2023 22:24:20 +0000 (22:24 +0000)]
pybootchartgui: fix width max usage in draw_label_in_box
The function draw_label_in_box chooses the correct side based on
the maximum width length argument 'maxx'.
Currently the labels are always drawn on the left side and this
is because we are inadvertently passing the 'maxx' argument wrong.
Signed-off-by: Jose Quaresma <jose.quaresma@foundries.io> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Jose Quaresma [Mon, 10 Jul 2023 22:24:18 +0000 (22:24 +0000)]
pybootchartgui: concatenate the elapsed time with the process
The function draw_label_in_box have logic to chose the rigth side
to call the draw_text, so use it instaed of forcing the cordinates
of the right side.
Signed-off-by: Jose Quaresma <jose.quaresma@foundries.io> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
This is based on a previous patch from Alex Kanavin (thanks Alex),
but it retains our use of sed to parse the test output into a usable
form. The intent was to use the test module's --junit-xml feature and
parse the resulting log instead of using sed, but various errors were
encountered when testing this method, so that will need further
investigation before we can consider adopting it. Two missing ptest
dependencies on python3-cgitb and python3-zipapp were already merged
in a previous patch, so only gcc, g++, and binutils were left to add
as ptest RDEPENDS.
Ross Burton [Thu, 13 Jul 2023 19:18:58 +0000 (20:18 +0100)]
qemuarm: pin kernel to 6.1
The 6.4 kernel causes parselog failures when Xorg starts:
(II) FBDEV(0): checking modes against framebuffer device...
(II) FBDEV(0): mode "640x480" test failed
(II) FBDEV(0): mode "640x480" test failed
(II) FBDEV(0): mode "640x480" test failed
(II) FBDEV(0): mode "640x480" test failed
(II) FBDEV(0): mode "640x480" not found
It appears to be specific to qemuarm without GL. Until this is resolved,
pin the qemuarm BSP to 6.1.
Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Enable branch protection (PAC/BTI) for all aarch64 builds. This was
previously enabled at a global level in the GCC build, but that breaks
the gcc test suite.
Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
By changing the default code generation of GCC we're inadvertently
breaking the GCC test suite, which has ~120K+ more failures when run for
aarch64 compared to x86-64.
This was because the generated code fragments included the BTI
instructions, which the test case wasn't expecting. We can't tell the
tests globally to run without branch protection, as that will break the
tests which also turn it on.
Remove the enabling of branch protection by standard in GCC, we'll
enable it in the tune files instead.
Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Ross Burton [Tue, 11 Jul 2023 11:54:47 +0000 (12:54 +0100)]
cve-update-nvd2-native: actually use API keys
There were vestigal remains of API key support which could be removed,
but as using an API key - in theory - gives the user larger rate limits
it's probably wise to expose it.
If the user has an API key, then set NVDCVE_API_KEY.
Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Peter Marko [Tue, 11 Jul 2023 06:36:29 +0000 (08:36 +0200)]
cve-update-nvd2-native: increase retry count
Current 503 errors seem to last several seconds.
In most cases there are two errors and third request succeeds.
However sometimes the outage takes more than time needed
for two retries and third one also fails.
Extend retry count from 3 to 5 to improve the probablity
that the fetcher succeeds.
Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Peter Marko [Tue, 11 Jul 2023 06:36:28 +0000 (08:36 +0200)]
cve-update-nvd2-native: retry all errors and sleep between retries
Last couple days it is not possible to update NVD DB as servers
are returning lot of errors.
Mostly "HTTP Error 503: Service Unavailable" is observed but
sporadially also some others.
Retrying helps in most cases, so extend retries to all errors.
Additionally add sleep which is recommended by NVD between requests.
These retries are already implemented between successful requests,
but giving servers time between failed ones is important, too.
Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Bruce Ashfield [Thu, 6 Jul 2023 19:26:23 +0000 (15:26 -0400)]
linux-yocto/6.1: update to v6.1.38
Updating to the latest korg -stable release that comprises
the following commits:
61fd484b2cf6 Linux 6.1.38 c50065a39279 drm/amd/display: Ensure vmin and vmax adjust for DCE 9d0b2afadfd7 drm/amdgpu: Validate VM ioctl flags. fe56f507a11a docs: Set minimal gtags / GNU GLOBAL version to 6.6.5 c437b26bc3ae scripts/tags.sh: Resolve gtags empty index generation 50e36c2897ba perf symbols: Symbol lookup with kcore can fail if multiple segments match stext 67e3b5230cef nubus: Partially revert proc_create_single_data() conversion 296927dbae7d execve: always mark stack as growing down during early stack setup d856e6f8a0b4 PCI/ACPI: Call _REG when transitioning D-states 788c76c33df9 PCI/ACPI: Validate acpi_pci_set_power_state() parameter a905b0b318ad drm/amd/display: Do not update DRR while BW optimizations pending dd6d6f9d47ae drm/amd/display: Remove optimization for VRR updates 6b2849b3e05d xtensa: fix lock_mm_and_find_vma in case VMA not found
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Bruce Ashfield [Mon, 3 Jul 2023 13:55:42 +0000 (09:55 -0400)]
linux-yocto/6.1: update to v6.1.37
Updating to the latest korg -stable release that comprises
the following commits:
0f4ac6b4c5f0 Linux 6.1.37 323846590c55 xtensa: fix NOMMU build with lock_mm_and_find_vma() conversion c2d89256de75 csky: fix up lock_mm_and_find_vma() conversion 4a1db15878aa parisc: fix expand_stack() conversion 0a1da2dde461 sparc32: fix lock_mm_and_find_vma() conversion 00f04a3385f7 Revert "thermal/drivers/mediatek: Use devm_of_iomap to avoid resource leak in mtk_thermal_probe" a536383ef030 HID: logitech-hidpp: add HIDPP_QUIRK_DELAYED_INIT for the T651. d89750b19681 HID: wacom: Use ktime_t rather than int when dealing with timestamps 879e79c3aead HID: hidraw: fix data race on device refcount cae854249578 fbdev: fix potential OOB read in fast_imageblit() e6bbad75712a mm: always expand the stack with the mmap write lock held c4b31d1b694e execve: expand new process stack manually ahead of time 6a6b5616c3d0 mm: make find_extend_vma() fail if write lock not held 48c232819e77 powerpc/mm: convert coprocessor fault to lock_mm_and_find_vma() 21ee33d51bf9 mm/fault: convert remaining simple cases to lock_mm_and_find_vma() 1f4197f050de arm/mm: Convert to using lock_mm_and_find_vma() ac764deea709 riscv/mm: Convert to using lock_mm_and_find_vma() 7227d70acc78 mips/mm: Convert to using lock_mm_and_find_vma() 82972ea17b47 powerpc/mm: Convert to using lock_mm_and_find_vma() b92cd80e5f0b arm64/mm: Convert to using lock_mm_and_find_vma() 755aa1bc6aaf mm: make the page fault mmap locking killable d6a5c7a1a6e5 mm: introduce new 'lock_mm_and_find_vma()' page fault helper 4e2ad53ababe maple_tree: fix potential out-of-bounds access in mas_wr_end_piv() 31cde3bdadca can: isotp: isotp_sendmsg(): fix return error fix on TX path 0af4750eaaed x86/smp: Cure kexec() vs. mwait_play_dead() breakage 6d3b2e0aef6c x86/smp: Use dedicated cache-line for mwait_play_dead() 50a1abc67702 x86/smp: Remove pointless wmb()s from native_stop_other_cpus() e47037d28b73 x86/smp: Dont access non-existing CPUID leaf edadebb349e8 x86/smp: Make stop_other_cpus() more robust 94a69d699941 x86/microcode/AMD: Load late on both threads too 84f077802e56 mm, hwpoison: when copy-on-write hits poison, take page offline 4af5960d7cd4 mm, hwpoison: try to recover from copy-on write faults 69925a346acb mptcp: ensure listener is unhashed before updating the sk status 42a018a796d1 mm/mmap: Fix error return in do_vmi_align_munmap() a149174ff8bb mm/mmap: Fix error path in do_vmi_align_munmap()
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Bruce Ashfield [Mon, 3 Jul 2023 13:50:18 +0000 (09:50 -0400)]
linux-yocto/6.1: update to v6.1.36
Updating to the latest korg -stable release that comprises
the following commits:
a1c449d00ff8 Linux 6.1.36 29429a1f5871 smb: move client and server files to common directory fs/smb 9d3e4bca4b92 i2c: imx-lpi2c: fix type char overflow issue when calculating the clock cycle 81d4078f7a42 x86/apic: Fix kernel panic when booting with intremap=off and x2apic_phys 679354bea008 KVM: arm64: Restore GICv2-on-GICv3 functionality 6ab9468d3eea vhost_net: revert upend_idx only on retriable error 454e4f391a14 vhost_vdpa: tell vqs about the negotiated 1af1cd7be370 drm/radeon: fix race condition UAF in radeon_gem_set_domain_ioctl 022f2306d94f drm/exynos: fix race condition UAF in exynos_g2d_exec_ioctl aa88042218aa drm/exynos: vidi: fix a wrong error return 711f727f7bab null_blk: Fix: memory release when memory_backed=1 f6076a1386c9 ARM: dts: Fix erroneous ADS touchscreen polarities 1d1baefacdb4 i2c: mchp-pci1xxxx: Avoid cast to incompatible function type 8e3257599409 ALSA: hda/realtek: Add "Intel Reference board" and "NUC 13" SSID in the ALC256 cfa01235b5ed ASoC: fsl_sai: Enable BCI bit if SAI works on synchronous mode with BYP asserted 570583c6251a s390/purgatory: disable branch profiling c2888c460db2 gfs2: Don't get stuck writing page onto itself under direct I/O 878dad66b9b5 ASoC: amd: yc: Add Thinkpad Neo14 to quirks list for acp6x 1c97025d441f ASoC: nau8824: Add quirk to active-high jack-detect 5cc506e9b3e5 soundwire: qcom: add proper error paths in qcom_swrm_startup() 2839e0b64e65 soundwire: dmi-quirks: add new mapping for HP Spectre x360 ee4d36a14d3f ASoC: simple-card: Add missing of_node_put() in case of error e701fb0a5d5b ASoC: codecs: wcd938x-sdw: do not set can_multi_write flag 06b9522ca831 spi: lpspi: disable lpspi module irq in DMA mode 39a77f005f8a s390/cio: unregister device when the only path is gone 552a24eb7168 arm64: dts: qcom: sc7280-qcard: drop incorrect dai-cells from WCD938x SDW 4de58b7c14c0 arm64: dts: qcom: sc7280-idp: drop incorrect dai-cells from WCD938x SDW 2e8ebf1a44cb Input: soc_button_array - add invalid acpi_index DMI quirk handling ba0cc7a2e508 nvme: improve handling of long keep alives 06d9ec407f76 nvme: check IO start time when deciding to defer KA 8a72260619ca nvme: double KA polling frequency to avoid KATO with TBKAS on c8f988c37a6b usb: gadget: udc: fix NULL dereference in remove() 3f6391062d0b btrfs: fix an uninitialized variable warning in btrfs_log_inode a2c3e9bfc02c nfcsim.c: Fix error checking for debugfs_create_dir a05df0643120 media: cec: core: don't set last_initiator if tx in progress f37956a140d1 media: cec: core: disable adapter in cec_devnode_unregister 9d8ac2726cff smb3: missing null check in SMB2_change_notify 3e8458c5b205 arm64: Add missing Set/Way CMO encodings 8428f4c00d8c HID: wacom: Add error check to wacom_parse_and_register() aaa50510adb7 scsi: target: iscsi: Prevent login threads from racing between each other 0357259cb103 gpiolib: Fix irq_domain resource tracking for gpiochip_irqchip_add_domain() 8592ada80ea5 gpio: sifive: add missing check for platform_get_irq cb1108e17493 gpiolib: Fix GPIO chip IRQ initialization restriction 90714f7ed760 arm64: dts: rockchip: fix nEXTRST on SOQuartz e51abd4808f9 arm64: dts: rockchip: Enable GPU on SOQuartz CM4 ec3d0f12e728 revert "net: align SO_RCVMARK required privileges with SO_MARK" b2e2f9c0939f sch_netem: acquire qdisc lock in netem_change() 0434277b72a4 platform/x86/amd/pmf: Register notify handler only if SPS is enabled 2d580c73afdc selftests: forwarding: Fix race condition in mirror installation eff07bf11841 io_uring/net: use the correct msghdr union member in io_sendmsg_copy_hdr 1b7b048c228e bpf: Force kprobe multi expected_attach_type for kprobe_multi link fc3afb337814 bpf/btf: Accept function names that contain dots 22cc989f2b10 Revert "net: phy: dp83867: perform soft reset and retain established link" 3e04743dbacf netfilter: nfnetlink_osf: fix module autoload abd3afddbf9e netfilter: nf_tables: disallow updates of anonymous sets c34b22038543 netfilter: nf_tables: reject unbound chain set before commit phase 46f801ab5fb9 netfilter: nf_tables: reject unbound anonymous set before commit phase b60c0ce0ff31 netfilter: nf_tables: disallow element updates of bound anonymous sets 0d836f917520 netfilter: nft_set_pipapo: .walk does not deal with generations d60be2da67d1 netfilter: nf_tables: drop map element references from preparation phase df27be7c1530 netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain 891cd2edddc7 netfilter: nf_tables: fix chain binding transaction logic f5b6dbec26f1 be2net: Extend xmit workaround to BE3 chip 50f689918db4 net: dsa: mt7530: fix handling of LLDP frames a50f84af215e net: dsa: mt7530: fix handling of BPDUs on MT7530 switch a4e4c7190126 net: dsa: mt7530: fix trapping frames on non-MT7621 SoC MT7530 switch 7fd2e9a69e83 ipvs: align inner_mac_header for encapsulation 6d1eec1f2dd7 mmc: usdhi60rol0: fix deferred probing 7e10fff13353 mmc: sh_mmcif: fix deferred probing 565b8bd2905d mmc: sdhci-acpi: fix deferred probing 645f89ee3e3e mmc: owl: fix deferred probing 251101c32a01 mmc: omap_hsmmc: fix deferred probing 0057a905de5c mmc: omap: fix deferred probing f73b380518b2 mmc: mvsdio: fix deferred probing 4806f6b6b7a3 mmc: mtk-sd: fix deferred probing d28b7a87332f net: qca_spi: Avoid high load if QCA7000 is not available 1d4dd09f13a9 sfc: use budget for TX completions 0bbb8164ed07 net/mlx5: DR, Fix wrong action data allocation in decap action b062caf4f73b xfrm: Linearize the skb after offloading if needed. fff9a18e0128 selftests: net: fcnal-test: check if FIPS mode is enabled 0793ead2ff2c selftests: net: vrf-xfrm-tests: change authentication and encryption algos 6919634176cd selftests: net: tls: check if FIPS mode is enabled ac5671d10060 bpf: Fix a bpf_jit_dump issue for x86_64 with sysctl bpf_jit_enable. 8bb51cdc4fc2 xfrm: fix inbound ipv4/udp/esp packets to UDPv6 dualstack sockets d9a0b1a53c79 bpf: Fix verifier id tracking of scalars on spill 461fc3391c52 bpf: track immediate values written to stack by BPF_ST instruction b36ba84f09a1 KVM: arm64: PMU: Restore the host's PMUSERENR_EL0 c803e91600be xfrm: Ensure policies always checked on XFRM-I input path 94e81817f080 xfrm: interface: rename xfrm_interface.c to xfrm_interface_core.c 8ea03341f78a xfrm: Treat already-verified secpath entries as optional 43489b2cba5a ieee802154: hwsim: Fix possible memory leaks caddcdf2a999 mmc: meson-gx: fix deferred probing 1a2793a25a60 memfd: check for non-NULL file_seals in memfd_create() syscall 364fdcbb035b x86/mm: Avoid using set_pgd() outside of real PGD pages cbfee3d9d5c0 nilfs2: prevent general protection fault in nilfs_clear_dirty_page() 24f473769e7e io_uring/poll: serialize poll linked timer start with poll removal 2d80c85fa404 arm64: dts: rockchip: Fix rk356x PCIe register and range mappings 277a7c23b590 regmap: spi-avmm: Fix regmap_bus max_raw_write b385b1d28e4e regulator: pca9450: Fix LDO3OUT and LDO4OUT MASK ad5daeaa3d57 spi: spi-geni-qcom: correctly handle -EPROBE_DEFER from dma_request_chan() 21945b7a868f wifi: iwlwifi: pcie: Handle SO-F device for PCI id 0x7AF0 1dfca388fc7c bpf: ensure main program has an extable 03b2149d5aca mmc: sunxi: fix deferred probing 8b8756324c5b mmc: bcm2835: fix deferred probing 1db5a39a904e mmc: sdhci-spear: fix deferred probing f1b17198e45b mmc: mmci: stm32: fix max busy timeout calculation 6c2af0fd8301 mmc: meson-gx: remove redundant mmc_request_done() call from irq context 687d34c57807 mmc: sdhci-msm: Disable broken 64-bit DMA on MSM8916 3dd0041c41da mmc: litex_mmc: set PROBE_PREFER_ASYNCHRONOUS 0d7a4e6589a0 cgroup,freezer: hold cpu_hotplug_lock before freezer_mutex in freezer_css_{online,offline}() 7b162a18d332 cgroup: Do not corrupt task iteration when rebinding subsystem c2c46a70282f mptcp: consolidate fallback and non fallback state machine 1d3127542665 mptcp: fix possible list corruption on passive MPJ b747e755986a mptcp: fix possible divide by zero in recvmsg() b7bb71dfb541 mptcp: handle correctly disconnect() failures 1d9dc9bed999 io_uring/net: disable partial retries for recvmsg with cmsg 4d729cc67b05 io_uring/net: clear msg_controllen on partial sendmsg retry 4db49d59a89c PCI: hv: Add a per-bus mutex state_lock 091d03d19859 PCI: hv: Fix a race condition in hv_irq_unmask() that can cause panic 5c09925b1879 PCI: hv: Remove the useless hv_pcichild_state from struct hv_pci_dev da2fff20d92d Revert "PCI: hv: Fix a timing issue which causes kdump to fail occasionally" a74a9d9b756a PCI: hv: Fix a race condition bug in hv_pci_query_relations() ba803d7ac18a Drivers: hv: vmbus: Fix vmbus_wait_for_unload() to scan present CPUs 191cb913293a Drivers: hv: vmbus: Call hv_synic_free() if hv_synic_alloc() fails 4f7e702b74f7 KVM: Avoid illegal stage2 mapping on invalid memory slot 390aeb5ae7c0 ACPI: sleep: Avoid breaking S3 wakeup due to might_sleep() 8e63b1fd24a8 nilfs2: fix buffer corruption due to concurrent device reads d5d7cde2ad19 scripts: fix the gfp flags header path in gfp-translate 4a89bfb1a142 writeback: fix dereferencing NULL mapping->host on writeback_page_template 1fed1f851346 selftests: mptcp: join: fix "userspace pm add & remove address" 53e096bcaeac selftests: mptcp: join: skip fail tests if not supported f17459121c37 selftests: mptcp: join: skip userspace PM tests if not supported f40a7ded34c9 selftests: mptcp: join: skip test if iptables/tc cmds fail bce23d125434 selftests: mptcp: sockopt: skip TCP_INQ checks if not supported 157dcb20000b selftests: mptcp: diag: skip listen tests if not supported 755c8857abde selftests/mount_setattr: fix redefine struct mount_attr build error 94851666aff4 selftests: mptcp: join: skip MPC backups tests if not supported fe1f28db73f7 selftests: mptcp: join: skip fullmesh flag tests if not supported 6313c493e3c9 selftests: mptcp: join: skip backup if set flag on ID not supported efb4f6c2dd4c selftests: mptcp: join: skip implicit tests if not supported dd6c284a3430 selftests: mptcp: join: support RM_ADDR for used endpoints or not 695cce2f2cf5 selftests: mptcp: join: skip Fastclose tests if not supported 0381f30735e2 selftests: mptcp: join: support local endpoint being tracked or not 1c0d9b4b4745 selftests: mptcp: join: skip check if MIB counter not supported e35edb09e53e selftests: mptcp: join: helpers to skip tests 4d65ec947d24 selftests: mptcp: join: use 'iptables-legacy' if available 44d3366bf4b9 selftests: mptcp: lib: skip if not below kernel version c5bdd8eb8e7d selftests: mptcp: userspace pm: skip if not supported 733bf9d80d95 selftests: mptcp: userspace pm: skip if 'ip' tool is unavailable bfe225dec643 selftests: mptcp: sockopt: skip getsockopt checks if not supported 103b4e62de32 selftests: mptcp: sockopt: relax expected returned size 61c1bf0666a9 selftests: mptcp: pm nl: skip fullmesh flag checks if not supported 41f7f7f6e43e selftests: mptcp: pm nl: remove hardcoded default limits e79e5e7642ad selftests: mptcp: connect: skip disconnect tests if not supported cba0db9c1586 selftests: mptcp: connect: skip transp tests if not supported 9ead68270b29 selftests: mptcp: lib: skip if missing symbol 4bed22c6876b selftests: mptcp: join: fix ShellCheck warnings a032ccca15e1 selftests: mptcp: remove duplicated entries in usage 0c6552f83725 tick/common: Align tick period during sched_timer setup 854156d12caa ksmbd: validate session id and tree id in the compound request c86211159bc3 ksmbd: fix out-of-bound read in smb2_write 9650cf70ec9d ksmbd: validate command payload size 0fd4ac3773c3 tpm_crb: Add support for CRB devices based on Pluton a46fa5696613 tpm, tpm_tis: Claim locality in interrupt handler 2e7ad879e1b0 mm: Fix copy_from_user_nofault(). 4ed740c6482f ata: libata-scsi: Avoid deadlock on rescan after device resume c4465bff4d2f tty: serial: fsl_lpuart: reduce RX watermark to 0 on LS1028A 17732fed852a tty: serial: fsl_lpuart: make rx_watermark configurable for different platforms 9bcac453890b drm/amd/display: fix the system hang while disable PSR e538342002cb drm/amd/display: Add wrapper to call planes and stream update 8d855bc67630 drm/amd/display: Use dc_update_planes_and_stream
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Bruce Ashfield [Mon, 10 Jul 2023 16:16:27 +0000 (12:16 -0400)]
linux-yocto/ppc: add elfutils-native to DEPENDS
powerpc joins x86 and ARM requiring elfutils-native in some
configurations.
We already have this dependency in the dev kernel and in devsrc, so we
add it to linux-yocto.inc to ensure that all reference kernels pick up
the requirement.
Without this, objtools fails to build as follows:
kernel-source/tools/objtool/include/objtool/elf.h:10:10: fatal error: gelf.h: No such file or directory
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
When building -tiny for qemux86 on 6.4, CONFIG_HID related warnings
were observed.
[NOTE]: 'CONFIG_HID_WACOM' last val (y) and .config val (n) do not match
[NOTE]: 'CONFIG_USB_HID' last val (y) and .config val (n) do not match
[NOTE]: 'CONFIG_USB_HIDDEV' last val (y) and .config val (n) do not match
This is due to our allnoconfig baseline disabling HID, which dependent
drivers require.
Rather than universally enabling CONFIG_HID in the base tiny ktype, we
can create a fragment and include it from the common-pc tiny kernel
entry point.
252c55e236c common-pc/tiny: enable HID by default 849f920aa1b cfg: add CONFIG_HID base fragment
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Bruce Ashfield [Thu, 6 Jul 2023 18:50:19 +0000 (14:50 -0400)]
linux-yocto/6.4: update to v6.4.2
Updating to the latest korg -stable release that comprises
the following commits:
d7defc5b8d42 Linux 6.4.2 ba0f198721f4 arch/arm64/mm/fault: Fix undeclared variable error in do_page_fault() 57db8dc02888 drm/amdgpu: Validate VM ioctl flags. cc39da6c58c4 dm ioctl: Avoid double-fetch of version c27c99d4458f docs: Set minimal gtags / GNU GLOBAL version to 6.6.5 16167ccafbb3 scripts/tags.sh: Resolve gtags empty index generation b1c2d0ded4dc hugetlb: revert use of page_cache_next_miss() a03f2f4bd490 nubus: Partially revert proc_create_single_data() conversion 1c70f4df65ac Revert "cxl/port: Enable the HDM decoder capability for switch ports" 5dda60d23104 nfs: don't report STATX_BTIME in ->getattr 926eae6ede9b execve: always mark stack as growing down during early stack setup dfb27a766896 PCI/ACPI: Call _REG when transitioning D-states f933605c1767 PCI/ACPI: Validate acpi_pci_set_power_state() parameter f23cf6986b87 tools/nolibc: x86_64: disable stack protector for _start 8911865ae284 xtensa: fix lock_mm_and_find_vma in case VMA not found 593776794734 Linux 6.4.1 2aad4f30f4e4 xtensa: fix NOMMU build with lock_mm_and_find_vma() conversion 87d780e048bd csky: fix up lock_mm_and_find_vma() conversion 0d98e5325f1f parisc: fix expand_stack() conversion 23d1e960cd12 sparc32: fix lock_mm_and_find_vma() conversion 7a11f6e08edf Revert "thermal/drivers/mediatek: Use devm_of_iomap to avoid resource leak in mtk_thermal_probe" e6d864166aaf HID: logitech-hidpp: add HIDPP_QUIRK_DELAYED_INIT for the T651. 05b47034e248 HID: hidraw: fix data race on device refcount 14fdcf965dc5 fbdev: fix potential OOB read in fast_imageblit() 00d5932e09d7 mm/khugepaged: fix regression in collapse_file() f450d0307644 gup: add warning if some caller would seem to want stack expansion d0198363f910 HID: wacom: Use ktime_t rather than int when dealing with timestamps fb32951c8903 mm: always expand the stack with the mmap write lock held af099fa739b8 execve: expand new process stack manually ahead of time b2d6752dbfe7 mm: make find_extend_vma() fail if write lock not held accf6d0c5832 powerpc/mm: convert coprocessor fault to lock_mm_and_find_vma() 203cfe05efc8 mm/fault: convert remaining simple cases to lock_mm_and_find_vma() 4e3fb74f6050 arm/mm: Convert to using lock_mm_and_find_vma() 7e99b9821acc riscv/mm: Convert to using lock_mm_and_find_vma() 929eb6b2a690 mips/mm: Convert to using lock_mm_and_find_vma() b6f36565369c powerpc/mm: Convert to using lock_mm_and_find_vma() 7a1383601b7c arm64/mm: Convert to using lock_mm_and_find_vma() d939d8c154f1 mm: make the page fault mmap locking killable b11fa3d22ac0 mm: introduce new 'lock_mm_and_find_vma()' page fault helper f5fcf6555a2a maple_tree: fix potential out-of-bounds access in mas_wr_end_piv() b6e1ef3cd6d8 can: isotp: isotp_sendmsg(): fix return error fix on TX path 3f2719a1c382 cpufreq: amd-pstate: Make amd-pstate EPP driver name hyphenated 9e97e46e3210 x86/smp: Cure kexec() vs. mwait_play_dead() breakage cc37b1184236 x86/smp: Use dedicated cache-line for mwait_play_dead() 4726d74f697f x86/smp: Remove pointless wmb()s from native_stop_other_cpus() 8b1b43c42100 x86/smp: Dont access non-existing CPUID leaf f9abe01d5d68 x86/smp: Make stop_other_cpus() more robust 9a500542a1dc x86/microcode/AMD: Load late on both threads too
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Bruce Ashfield [Thu, 6 Jul 2023 17:43:17 +0000 (13:43 -0400)]
linux-yocto-rt/6.4: integrate -rt6
Integrating the following commit(s) to linux-yocto-rt/6.4:
369f3a1d2f39 Add localversion for -RT release c26c6f8a7def sysfs: Add /sys/kernel/realtime entry 1026252efc14 POWERPC: Allow to enable RT 2be128571d55 powerpc/stackprotector: work around stack-guard init from atomic 55bea7bc53a3 powerpc/kvm: Disable in-kernel MPIC emulation for PREEMPT_RT 6d7729893293 powerpc/pseries: Select the generic memory allocator. 4f94b99ce5fa powerpc/imc-pmu: Use the correct spinlock initializer. 4842eac5df59 powerpc/pseries/iommu: Use a locallock instead local_irq_save() 20217d6be82e powerpc: traps: Use PREEMPT_RT caa81a9e214f ARM64: Allow to enable RT e6d8eecd9250 ARM: Allow to enable RT ed8eef71c579 tty/serial/pl011: Make the locking work on RT 579a01d01422 tty/serial/omap: Make the locking RT aware 82c5c842e1a3 ARM: enable irq in translation/section permission fault handlers 40b10f168ff6 arm: Disable jump-label on PREEMPT_RT. a7a1bfa3b88b arch/arm64: Add lazy preempt support be59db8f177b powerpc: Add support for lazy preemption 0143f7261d2e arm: Add support for lazy preemption 27dd55360d61 entry: Fix the preempt lazy fallout 59012496af29 x86: Support for lazy preemption d25ecd17ccbe x86/entry: Use should_resched() in idtentry_exit_cond_resched() beb2483d6b9f sched: Add support for lazy preemption c78e3d4fd185 Revert "drm/i915: Depend on !PREEMPT_RT." bdac43aa952c drm/i915: Drop the irqs_disabled() check 954bab1b75e9 drm/i915/gt: Use spin_lock_irq() instead of local_irq_disable() + spin_lock() afcb80571a37 drm/i915/gt: Queue and wait for the irq_work item. 5f8008dab040 drm/i915: skip DRM_I915_LOW_LEVEL_TRACEPOINTS with NOTRACE da5622b92296 drm/i915: Disable tracing points on PREEMPT_RT 51532f62a857 drm/i915: Don't check for atomic context on PREEMPT_RT 4b1c4c7b4e6c drm/i915: Don't disable interrupts on PREEMPT_RT during atomic updates 459be7df2c2a drm/i915: Use preempt_disable/enable_rt() where recommended 628d1b08d421 printk: Check only for migration in printk_deferred_*(). dfd2770048a6 serial: 8250: implement non-BKL console 9fc96a5c3a19 printk: replace local_irq_save with local_lock for safe mode 061a418efaef printk: Add threaded printing support for BKL consoles. 36ac8599626a printk: only disable if actually unregistered 71669eb2c2da printk: Perform atomic flush in console_flush_on_panic() b0634d6c06d9 rcu: Add atomic write enforcement for rcu stalls 95fdf7b134ab kernel/panic: Add atomic write enforcement to warn/panic c39e30092722 proc: consoles: Add support for non-BKL consoles 70be25f26762 tty: tty_io: Show non-BKL consoles as active c980fcfd9dcb printk: nobkl: Stop threads on shutdown/reboot e372fdfa42c3 printk: nobkl: Provide functions for atomic write enforcement 7c779a16b20c printk: nobkl: Add write context storage for atomic writes 042485b8fa7a printk: nobkl: Add printer thread wakeups a0d1569185ed printk: nobkl: Introduce printer threads 68aa6402e396 printk: nobkl: Add emit function and callback functions for atomic printing ccf51a3743a4 printk: nobkl: Add print state functions e33dfd268d79 printk: nobkl: Add sequence handling 2f0f99a7a004 printk: nobkl: Add buffer management f6cd5cdad5cf printk: nobkl: Add acquire/release logic 6754f4c0d6ee printk: Add non-BKL console basic infrastructure b4568c7fbbfc printk: Add per-console suspended state 1e952ed4d35b printk: Consolidate console deferred printing b12fabcfa9be printk: Add NMI check to console_flush_on_panic() and console_unblank() 9c1bfc2a6f3c kdb: do not assume write() callback available 244f2785c026 preempt: Put preempt_enable() within an instrumentation*() section. 1b61e0ba79ae zram: Replace bit spinlocks with spinlock_t for PREEMPT_RT. 62bf62e9fd6c softirq: Wake ktimers thread also in softirq. a546af0d74af tick: Fix timer storm since introduction of timersd bfd12d9a9dfc rcutorture: Also force sched priority to timersd on boosting test. 8898939cf3b1 softirq: Use a dedicated thread for timer wakeups. 2c8cccade3f1 x86: Enable RT also on 32bit 75a40b356238 x86: Allow to enable RT 126193d32d0c net: Avoid the IPI to free the 931d538b5c85 mm/page_alloc: Use write_seqlock_irqsave() instead write_seqlock() + local_irq_save(). dd90b50f7be9 seqlock: Do the lockdep annotation before locking in do_write_seqcount_begin_nested() 0874a8832dc7 ARM: vfp: Use vfp_lock() in vfp_entry(). 3c69696bd766 ARM: vfp: Use vfp_lock() in vfp_sync_hwstate(). 0fcd7c2cc385 ARM: vfp: Provide vfp_lock() for VFP locking. 67cdd3607ac5 posix-timers: Ensure timer ID search-loop limit is valid d18adb7ffef3 posix-timers: Prevent RT livelock in itimer_delete() 53c35a763a78 signal: Don't disable preemption in ptrace_stop() on PREEMPT_RT. 0acdc7e2e082 signal: Add proper comment about the preempt-disable in ptrace_stop(). ec0ce135acf0 locking/rtmutex: Add a lockdep assert to catch potential nested blocking 5898c4215b40 locking/rtmutex: Avoid pointless blk_flush_plug() invocations 8fbc724cb1c6 locking/rtmutex: Submit/resume work explicitly before/after blocking 3e1028d6c3cc sched/core: Provide sched_rtmutex() and expose sched work helpers 2c4691baa875 bpf: Remove in_atomic() from bpf_link_put(). eb0a0f759f25 revert: "softirq: Let ksoftirqd do its job" 3c160415c46a tracing/timer: Add missing hrtimer modes to decode_hrtimer_mode(). c4d99ee1238f sched: Consider task_struct::saved_state in wait_task_inactive() 587e9609ccd5 sched: Unconditionally use full-fat wait_task_inactive()
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Bruce Ashfield [Thu, 6 Jul 2023 16:03:05 +0000 (12:03 -0400)]
linux-yocto/6.4: aufs6 integration
We still offer aufs support for some container / virtualization
workloads. The project is still up to date with 6.3+, so we grab
the patches and make them available on v6.4/standard/*
As usual, v6.4/base is pure k.org + -stable if you don't want
things such as aufs.
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Bruce Ashfield [Wed, 5 Jul 2023 14:44:39 +0000 (14:44 +0000)]
kernel: fix localversion in v6.3+
During testing of the v6.4 reference kernel, it was noticed that
on-target modules no longer matched the magic value of the running
kernel.
This was due to a different localversion in the cross built kernel
and the scripts / resources created on target.
This was due to changes in the setlocalversion script introduced
in the v6.3 series.
The .scmversion file is no longer used (or packaged) to inhibit
the addition of a "+" (through querying of the git status of the
kernel) or the setting of a local version.
We recently introduced the KERNEL_LOCALVERSION variable to allow
recipes to place a value in .scmversion, so we extend the use of
that variable to kernel-arch.bbclass and use it to set the
exported variable LOCALVERSION.
We must do it at the kernel-arch level, as the variable must be
exported in any kernel build to ensure that setlocalversion always
correctly sets the localversion.
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Ross Burton [Thu, 11 May 2023 17:20:52 +0000 (18:20 +0100)]
rootfs_rpm: don't depend on opkg-native for update-alternatives
opkg-native hasn't provided update-alternatives since 2014[1] so this is
the wrong dependency, and image.bbclass depends on the virtual provider
virtual/update-alternatives-native already.
Ross Burton [Thu, 12 May 2022 14:11:17 +0000 (15:11 +0100)]
cml1: add showconfig task to easily find the generated .config file
It's not that unusual to want to manually review the generated .config file
after do_configure has ran. Add a new 'showconfig' task that simply
prints the full path to the .config file, so the user can open it in an
editor.
Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Changqing Li [Fri, 30 Jun 2023 09:14:50 +0000 (17:14 +0800)]
dnf: only write the log lock to root for native dnf
From commit 742a1b7124, log_lock.pid is writen to root, but following
file is not changed, which will make it never deleted, and an unexpected
file exist in root dir after boot target.
$ tail -n 1 etc/tmpfiles.d/dnf.conf
r /var/log/log_lock.pid
Besides, root dir may be read-only, so it is better still
keep the log_lock.pid under /var/log, only write the log lock to root
for native dnf for fixing issue mentioned in 742a1b7124
Bruce Ashfield [Tue, 4 Jul 2023 17:05:46 +0000 (17:05 +0000)]
perf: fix buildpaths QA warning in 6.4+
kernel version 6.4 introduces a new file that need to have
absolute paths removed, so we can avoid the buildpaths QA
warning and have relocatable packages.
We add pmu-flex.h to the processing, and the issue is resolved.
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
meson.bbclass: Point to llvm-config from native sysroot
Default search in meson would grok /usr/bin for llvm-config and if found
will use it, which might add wrong paths into cflags/ldflags, since we
depend on llvm-native when building gallium support ( thats when
llvm-config is effective), its better to point llvm-config into native
sysroot so it can add correct paths into compiler/linker cmdline
Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Peter Marko [Thu, 29 Jun 2023 21:12:52 +0000 (23:12 +0200)]
cve-update-nvd2-native: fix cvssV3 metrics
After upgrade to soon-to-be-released kirkstone 4.0.11 CVE annotations got broken.
Anything which has only cvssV3 does not resolve properly.
Fix the API fields used to extract it.
i0.0 score is now at level of NVD DB 1.1.
All CVEs with UNKNOWN vector are not present in NVD DB 1.1.
NVD API 1.1:
sqlite> select vector, count(vector) from nvd group by vector;
ADJACENT_NETWORK|4776
LOCAL|32146
NETWORK|167746
PHYSICAL|185
sqlite> select scorev3, count(scorev3) from nvd group by scorev3;
0.0|73331
1.8|7
1.9|3
...
NVD API 2.0 (broken):
sqlite> select vector, count(vector) from nvd group by vector;
ADJACENT_NETWORK|4587
LOCAL|26273
NETWORK|150421
UNKNOWN|24644
sqlite> select scorev3, count(scorev3) from nvd group by scorev3;
0.0|205925
NVD API 2.0 (fixed):
sqlite> select vector, count(vector) from nvd group by vector;
ADJACENT_NETWORK|5090
LOCAL|32322
NETWORK|168004
PHYSICAL|213
UNKNOWN|511
sqlite> select scorev3, count(scorev3) from nvd group by scorev3;
0.0|73841
1.8|7
1.9|3
...
Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Tim Orling [Wed, 5 Jul 2023 08:53:01 +0000 (01:53 -0700)]
python3-pygments: upgrade 2.14.0 -> 2.15.1
* Upstream has dropped setup.py
* Inherit python_setuptools_build_meta instead of setuptools3
* Add self as maintainer, as this is a dependency for python3-sphinx
Adds some new lexers, updates a few others. A handful of bug fixes.
Ross Burton [Tue, 4 Jul 2023 13:42:40 +0000 (14:42 +0100)]
linux-yocto/cve-exclusion: move entries from cve-extra-exclusions
We've a slew of CVE_CHECK_IGNOREs in cve-extra-exclusions which are to
mark a CVE as not valid with the current default kernel. However, this
file is kernel agnostic so if someone decides to build a 6.0 kernel then
these ignores are no longer valid.
Move the ignores which are to simply reflect backports to
cve-exclusions_6.1.inc so that they're version-specific. As the kernel
is upgraded these exclusions should be made redundant and removed from
the file.
Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
The ptest problems reported in e21021dc00ec ("mdadm: drop from PTESTS_SLOW")
should now be fixed, so mdadm can be added back to PTESTS_SLOW (a qemux86-64
test run takes about ~12 minutes to execute with kvm).
For the testcases to run correctly, there must be enough rootfs space to create
13 loop devices. Similar to strace and lttng-tools, add a new
IMAGE_ROOTFS_EXTRA_SPACE entry for mdadm-ptest.
Signed-off-by: Ovidiu Panait <ovidiu.panait@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Upstream marked some testcases as "KNOWN BROKEN" and introduced the
"--skip-broken" flag to ignore them when running the testsuite (commits [1]
and [2]). Backport these two commits to get rid of the last remaining ptest
failures.
Also, add the "--skip-broken" option to the run-ptest script.
Currently, some segfaults are reported when running ptest:
mdadm[12333]: segfault at 0 ip 00007fe855924060 sp 00007ffc4d6caf88 error 4 in libc.so.6[7f)
Code: d2 0f 84 b7 0f 00 00 48 83 fa 01 0f 84 b9 0f 00 00 49 89 d3 89 f1 89 f8 48 83 e1 3f 4f
Backport the following upstream commits to fix them: 679bd9508a30 ("DDF: Cleanup validate_geometry_ddf_container()") 2b93288a5650 ("DDF: Fix NULL pointer dereference in validate_geometry_ddf()") 548e9b916f86 ("mdadm/Grow: Fix use after close bug by closing after fork") 9ae62977b51d ("monitor: Avoid segfault when calling NULL get_bad_blocks")
The fixes are part of the "Bug fixes and testing improvments" patchset [1].
Testcase 07revert-inplace fails if strace is not installed:
...
strace -o /tmp/str ./mdadm -A /dev/md0 --update=revert-reshape /dev/<...>
tests/07revert-inplace: line 40: strace: command not found
Add strace to mdadm-ptest RDEPENDS to make sure the testcase passes even with
a core-image-minimal build.
Signed-off-by: Ovidiu Panait <ovidiu.panait@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Trying to run mdadm-ptest in a core-image-minimal build will result in:
root@qemux86-64:~# ptest-runner mdadm
START: ptest-runner
BEGIN: /usr/lib/mdadm/ptest
which: no lsblk in (/usr/local/bin:/usr/bin:/bin:/usr/local/sbin:/usr/sbin:/sbin)
lsblk command not found!
DURATION: 0
END: /usr/lib/mdadm/ptest
2023-06-28T10:14
STOP: ptest-runner
TOTAL: 1 FAIL: 0
Remove util-linux from RRECOMMENDS and only add util-linux-lsblk and
util-linux-losetup to RDEPENDS.
Signed-off-by: Ovidiu Panait <ovidiu.panait@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Martin Jansa [Sat, 1 Jul 2023 23:56:05 +0000 (01:56 +0200)]
cpio: respect MLPREFIX for PACKAGE_WRITE_DEPS
* unlike DEPENDS/RDEPENDS the PACKAGE_WRITE_DEPS dependency isn't automatically
extended with MLPREFIX, causing lib32-cpio to depend on 64bit ptest-runner (and
all its deps)
* append it only for class-target to avoid nativesdk-cpio depending
on target ptest-runner (before this patch) and depending on non-existent
nativesdk-ptest-runner with this patch (as nativesdk.bbclass sets MLPREFIX to
"nativesdk-")
stdio: WARNING: Nothing PROVIDES 'nativesdk-ptest-runner'. Close matches:
stdio: WARNING: Nothing RPROVIDES 'nativesdk-cpio' (but virtual:nativesdk:/home/pokybuild/yocto-worker/a-full/build/meta/recipes-extended/cpio/cpio_2.14.bb RDEPENDS on or otherwise requires it)
stdio: WARNING: Nothing RPROVIDES 'nativesdk-cpio-dev' (but virtual:nativesdk:/home/pokybuild/yocto-worker/a-full/build/meta/recipes-extended/cpio/cpio_2.14.bb RDEPENDS on or otherwise requires it)
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
scripts/oe-setup-builddir: copy conf-notes.txt to build dir
Since commit 569d4cd325, if one is using a custom template directory
containing a conf-notes.txt, this file is only displayed when creating
a new environment. When entering an already existing environment, only
the default poky conf-notes.txt is displayed.
This patch copies the conf-notes.txt to display to the build directory,
so that the good file is shown, even when templateconf.cfg is not used.
Signed-off-by: Stéphane Veyret <sveyret@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>