gcc 12 is expected to be released this month or early next month.
Update so we're prepared.
This keeps/ports all patches currently applied to 11.2 that haven't
landed upstream yet.
[v2: Back out the zephyr DWARF-4 workaround]
Signed-off-by: Bernhard Rosenkränzer <bernhard.rosenkraenzer.ext@huawei.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Implement debian package repository signature.
For each Release file created in repository subdirectory, a signature
Release.gpg is created.
Signature is performed using gpg backend when the following variables
are set in local.conf:
PACKAGE_CLASSES += "sign_package_feed"
PACKAGE_FEED_GPG_NAME = "<Id of GPG key>"
PACKAGE_FEED_GPG_PASSPHRASE_FILE="<path to password file>"
And without libunwind-native, libsdl2-native config fails errors like:
| -- Checking for one of the modules 'libunwind'
| CMake Error at [...]/build/tmp/work/x86_64-linux/libsdl2-native/2.0.20-r0/recipe-sysroot-native/usr/share/cmake-3.22/Modules/FindPkgConfig.cmake:890 (message):
| None of the required 'libunwind' found
| Call Stack (most recent call first):
| CMakeLists.txt:1367 (pkg_search_module)
Ideally, the libunwind issue would be fixed, and then this could be added
to the libsdl2 recipe:
DEPENDS:append:class-native = " libunwind-native"
However, the libunwind problem is not trivial to fix, and requires a
specific setup to reproduce. As an alternative workaround, turn off
libunwind support in the native SDL2 build by disabling the unwind.h
check in the CMake script (this subsequently turns off all the other
libunwind checks). The main user of libsdl2-native is qemu-native, which
does not need libunwind support in SDL2.
Signed-off-by: Carlos Rafael Giani <crg7475@mailbox.org> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Sean Anderson [Tue, 5 Apr 2022 15:00:13 +0000 (11:00 -0400)]
u-boot: Fix condition for install_spl_helper
The condition for calling install_spl_helper when compiling multiple
configs does not match the condition for a single config. This causes
compilation failures when ${UBOOT_FITIMAGE_ENABLE} is 1 but
${SPL_SIGN_ENABLE} is not.
Fixes: 5af4dfe83c2 ("u-boot: Add infrastructure to SPL verified boot") Signed-off-by: Sean Anderson <sean.anderson@seco.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
oe-init-build-env: add quotes around variables to prevent word splitting
Used shellcheck to add quotes to the variables. This is to make sure that
directories with names that have space between, such as
"Desktop/projects/test repo/poky" will not be considered as 2 separate
words. With this modification, running the command "source
oe-init-build-env" will not give the error "bash: oe-init-build-env: No
such file or directory"
meta: scripts - relocation script adapted to support big-endian machines
relocate_sdk.py was developed for little-endian architures and when tries
to install SDK for big-endian machines errors like below will be shown.
Error: struct.error: unpack requires a string argument of length 32. SDK could
not be set up. Relocate script failed. Abort!
Error: IOError: [Errno 22] Invalid argument. SDK could not be set up. Relocate
script failed. Abort!
To fix this, script is modified to support big-endian architecture.
Claudius Heine [Tue, 5 Apr 2022 10:13:26 +0000 (12:13 +0200)]
os-release: add os-release-initrd package
When systemd is used inside an initramfs, it uses the presence of
`/etc/initrd-release` to detect when the system is in the initrd phase.
Otherwise `/etc/initrd-release` has the same format as
`/etc/os-release`.
Add `os-release-initrd` package to provide `/etc/initrd-release` as a
symlink to the os-release file. To avoid adding this file to the
`os-release` package, explicitly only add `/etc/os-release` to the
`os-release` package.
Signed-off-by: Claudius Heine <ch@denx.de> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
meta: rust: Bug fix for target definitions returning 'NoneType'
The build shows below error while building for arm machines.
Exception: TypeError: int() argument must be a string, a bytes-like object or a number, not 'NoneType'
Detailed error info : https://lists.openembedded.org/g/openembedded-core/message/164004
All the target definitions within tspec dictionary are generted as
NoneType. The changes will fix this issue.
Bruce Ashfield [Mon, 4 Apr 2022 15:19:11 +0000 (11:19 -0400)]
linux-yocto/5.15: update to v5.15.32
Updating linux-yocto/5.15 to the latest korg -stable release that comprises
the following commits:
e29be6724adb Linux 5.15.32 60981bb5ce18 llc: only change llc->dev when bind() succeeds 22ac37c53065 nds32: fix access_ok() checks in get/put_user 110dea31d48f m68k: fix access_ok for coldfire cdb96445297b wcn36xx: Differentiate wcn3660 from wcn3620 476ddd23f818 tpm: use try_get_ops() in tpm-space.c 12e407a8ef17 mac80211: fix potential double free on mesh join e65d28d4e9bf uaccess: fix integer overflow on access_ok() 058d62a03e7d rcu: Don't deboost before reporting expedited quiescent state b094fece3810 drm/virtio: Ensure that objs is not NULL in virtio_gpu_array_put_free() 5023652cc6e4 Revert "ath: add support for special 0x0 regulatory domain" 4b6a48f87d03 Bluetooth: btusb: Add one more Bluetooth part for the Realtek RTL8852AE cb807cb52a8e crypto: qat - disable registration of algorithms 57a2b3f8bf1c ACPI: video: Force backlight native for Clevo NL5xRU and NL5xNU a01ac2411489 ACPI: battery: Add device HID and quirk for Microsoft Surface Go 3 8942aac69016 ACPI / x86: Work around broken XSDT on Advantech DAC-BJ01 board 1bd57dea4561 netfilter: nf_tables: validate registers coming from userspace. fafb904156fb netfilter: nf_tables: initialize registers in nft_do_chain() 3e27eafac659 drivers: net: xgene: Fix regression in CRC stripping c2052ad0c74f ALSA: pci: fix reading of swapped values from pcmreg in AC97 codec 9abaacd6491e ALSA: cmipci: Restore aux vol on suspend/resume 099a1cc21b16 ALSA: usb-audio: Add mute TLV for playback volumes on RODE NT-USB f4827c62b649 ALSA: pcm: Add stream lock during PCM reset ioctl operations 51fce708ab89 ALSA: pcm: Fix races among concurrent prealloc proc writes cb6a39c5ebd0 ALSA: pcm: Fix races among concurrent prepare and hw_params/hw_free calls 47711ff10c7e ALSA: pcm: Fix races among concurrent read/write and buffer changes 33061d0fba51 ALSA: pcm: Fix races among concurrent hw_params and hw_free calls 3b1bacd00ac3 ALSA: hda/realtek: Add quirk for ASUS GA402 0e7cdc8059a0 ALSA: hda/realtek - Fix headset mic problem for a HP machine with alc671 8e6ea2176222 ALSA: hda/realtek: Add quirk for Clevo NP50PNJ 85060f4868db ALSA: hda/realtek: Add quirk for Clevo NP70PNJ 10cdffd4854a ALSA: usb-audio: add mapping for new Corsair Virtuoso SE 7a40cbf3579a ALSA: oss: Fix PCM OSS buffer allocation overflow 5e431799c35b ASoC: sti: Fix deadlock via snd_pcm_stop_xrun() call e90729961083 llc: fix netdevice reference leaks in llc_ui_bind() 5b2ca3b8213a Bluetooth: btusb: Add another Realtek 8761BU 42b9f6d19faa tpm: Fix error handling in async work 2317fd3b126c net: ipv6: fix skb_over_panic in __ip6_append_data a34c47b1ab07 nfc: st21nfca: Fix potential buffer overflows in EVT_TRANSACTION 96e48ac9a685 Linux 5.15.31 4c5d94990fa2 btrfs: skip reserved bytes warning on unmount after log cleanup failure 23775775b9a6 perf symbols: Fix symbol size calculation condition e762f57ff255 Input: aiptek - properly check endpoint type 0cd2dd4bcf4a scsi: mpt3sas: Page fault in reply q processing c69aef9db878 usb: usbtmc: Fix bug in pipe direction for control transfers 2015c23610cd usb: gadget: Fix use-after-free bug by not setting udc->dev.driver 56b38e3ca406 usb: gadget: rndis: prevent integer overflow in rndis_set_response() 222f5e2d7f20 arm64: fix clang warning about TRAMP_VALIAS 80974bb73027 iavf: Fix hang during reboot/shutdown 800a17adb531 net: mscc: ocelot: fix backwards compatibility with single-chain tc-flower offload 2d7cff7e1fee net: bcmgenet: skip invalid partial checksums 6840fdeab423 bnx2x: fix built-in kernel driver load failure f07e0b020f7a net: phy: mscc: Add MODULE_FIRMWARE macros e396fda10ddf net: dsa: Add missing of_node_put() in dsa_port_parse_of 11dab4a800a4 drm: Don't make DRM_PANEL_BRIDGE dependent on DRM_KMS_HELPERS a1adf00e1728 net: handle ARPHRD_PIMREG in dev_is_mac_header_xmit() 8ee52c302191 drm/panel: simple: Fix Innolux G070Y2-L01 BPP settings 43dcd410809e drm/imx: parallel-display: Remove bus flags check in imx_pd_bridge_atomic_check() ab0ab1761831 hv_netvsc: Add check for kvmalloc_array 735f918cc2c8 iavf: Fix double free in iavf_reset_task b2bc45327e8c atm: eni: Add check for dma_map_single a055f5f2841f net/packet: fix slab-out-of-bounds access in packet_recvmsg() a296f3ae8009 net: phy: marvell: Fix invalid comparison in the resume and suspend functions b9820bf09f59 esp6: fix check on ipv6_skip_exthdr's return value 093f11b49609 vsock: each transport cycles only on its own sockets 1dcc1b888223 alx: acquire mutex for alx_reinit in alx_change_mtu 4b49ba22a253 efi: fix return value of __setup handlers 16ac5dca1e13 drm/mgag200: Fix PLL setup for g200wb and g200ew d4ad8736ac98 block: release rq qos structures for queue without disk 6829aa17ca55 mm: swap: get rid of livelock in swapin readahead b786b64dcb31 ocfs2: fix crash when initialize filecheck kobj fails ab9337c7cb6f crypto: qcom-rng - ensure buffer for generate is completely filled
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Richard Purdie [Mon, 4 Apr 2022 11:53:04 +0000 (12:53 +0100)]
bitbake.conf: Drop unexports from a different era
A long time ago, we used to pass our parent execution environment into our task
environments during build. We stopped doing that for reproducibility and consistency
of builds. The variables TARGET_ARCH, DISTRO and MACHINE are not exported into
tasks and hence we don't need to unexport them. The resasons these exist is
therefore no longer relavent and they can be removed. This happens to improve
bitbake -e output from a user commandline perspective.
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Robert Yang [Sat, 2 Apr 2022 03:22:22 +0000 (20:22 -0700)]
waffle: The surfaceless-egl and gbm requires opengl
Fixed when opengl is not in DISTRO_FEATURES:
ERROR: Nothing PROVIDES 'virtual/libgbm' (but /path/to/waffle/waffle_1.7.0.bb DEPENDS on or otherwise requires it)
Signed-off-by: Robert Yang <liezhi.yang@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
insane.bbclass: Make do_qa_patch() depend on if patch-fuzz is in ERROR_QA
Adding "patch-fuzz" to ERROR_QA should trigger the patch tasks to
rerun to make sure any already existing fuzz is caught. This is
achieved by using bb.utils.filter() to see if "patch-fuzz" is in
ERROR_QA/WARN_QA as it adds whether the filtered strings are set or
not to the task hash.
Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Richard Purdie [Wed, 30 Mar 2022 12:23:04 +0000 (13:23 +0100)]
mirrors: Switch glibc and binutils to use shallow mirror tarballs
These two repositories are large and overload our downloads server as a
premirror but the recipes are easier to maintain as git urls. Compromise
and use shallow clones for them.
In order to be effective, we need premirror entries on where to find
the shallow mirror tarballs.
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Sundeep KOKKONDA [Tue, 15 Mar 2022 15:55:07 +0000 (21:25 +0530)]
gcc: sanitizer: Fix tsan against glibc 2.34
The patch is needed in order to support recent glibc (2.34).
libsanitizer/ChangeLog:
PR sanitizer/101749
* sanitizer_common/sanitizer_posix_libcdep.cpp: Prevent
generation of dependency on _cxa_guard for static
initialization.
Signed-off-by: Sundeep KOKKONDA <sundeep.kokkonda@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Add a ptest for popt to core-image-ptest-all. Provide a patch to popt to
adopt the test format to "simple test" and a script for running the test.
All tests passed on a trial run.
Signed-off-by: Simone Weiss <simone.weiss@elektrobit.com> Signed-off-by: David Niederpruem <david.niederpruem@elektrobit.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Saul Wold [Thu, 31 Mar 2022 22:21:53 +0000 (15:21 -0700)]
depmodwrapper: Use nonarch_base_libdir for depmod.d
This ensure that when depmod-native runs we can find the correct
exclude.conf information, in this case adding .debug to ignore
the .debug kernell modules. The kmod utilities like depmod can use
either /etc/depmod.d or /lib/depmod.d. The kmod recipe is installing
the existing search.conf to /lib/depmod.d (nonarch_base_lib)
When the busybox modutils are used, /lib/depmod.d is not used, so
it's safe add the exclude.conf file to /lib/depmod.d.
Saul Wold [Thu, 31 Mar 2022 22:21:52 +0000 (15:21 -0700)]
kmod: Add an exclude directive to depmod
This adds a new configuration directive to depmod that causes
depmod to exclude a give path entry like .debug.
kernel-dbg provides the modules .debug/<module>.ko files and
when installed either directly or when dbg-pkgs are selected
this can cause depmod to fail.
Saul Wold [Thu, 31 Mar 2022 22:21:51 +0000 (15:21 -0700)]
busybox: Exclude .debug from depmod
As with the kmod version of depmod, exclude .debug from being
searched. Since busybox does not use the depmod.d and any
configuration file option is ignored we just hardcode it.
Khem Raj [Thu, 31 Mar 2022 22:29:00 +0000 (15:29 -0700)]
meson: Robustify compiler detection logic
meson would fail to detect compiler type in some rare care where
specific substring '-xt' is detected in compiler --version output and
it so happens that this string can be generated by clang --version if
clang is installed into a directory containing 'xt-' in its name. with
recipe specific sysroots, this is quite likely to happen in OE build
system as we are seeing the issue with newly proposed gnome-text-editor
recipe
Generalise this test so that it works on more than qemux86-64:
- Don't edit a file in arch/x86 to cause a rebuild, instead use init/
- Look for the edits in the build tree, as the deployed kernel could be
of any type (zImage/bzImage/etc) and edits may be in the compressed
part.
Also remove redundant checks on the result of runCmd(), as this will
raise AssertionError exceptions itself so the explicit asserts will
never trigger.
Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Ross Burton [Thu, 31 Mar 2022 18:29:14 +0000 (19:29 +0100)]
oeqa/selftest/wic: use self.td instead of get_bb_var to save on bitbake calls
When a test case starts, self.td is populated with all the variables in
the data store. Typically this can be used instead of get_bb_var(),
which saves a bitbake call per variable lookup.
The only catch is that in parallel runs the build directory is moved
after td is populated, so paths in the build directory are wrong: these
still need to be fetched in the test.
Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Ross Burton [Thu, 31 Mar 2022 18:29:12 +0000 (19:29 +0100)]
oeqa/selftest/wic: rearrange tests
Split the tests into further classes: one which exercises the CLI and
doesn't need to build images at all, and another which is just the
tests that manipulate existing images.
Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Ross Burton [Thu, 31 Mar 2022 18:29:10 +0000 (19:29 +0100)]
oeqa/selftest/oescripts: refactor skipping logic
OEScriptTests currently skips if cairo isn't present, and does a build
of core-image-minimal. This is only required for the
OEPybootchartguyTests tests, so move that logic there so that the
OEListPackageconfigTests run even if cairo isn't available.
This leaves OEScriptTests as a simple class containing the scripts_dir
assignment, which can then be reused by other tests to avoid code
duplication.
Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Ross Burton [Thu, 31 Mar 2022 18:29:00 +0000 (19:29 +0100)]
oeqa/selftest/wic: add more arch-specific annotations
Some tests which are marked as x86-specific will actually work on
aarch64 (e.g. use EFI), whilst some other tests really are x86-specific
(e.g. use syslinux).
Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Ross Burton [Thu, 31 Mar 2022 18:28:58 +0000 (19:28 +0100)]
oeqa/selftest/wic: clean up only_for_arch decorator
There's no need to pass a recipe name when determining the target
architecture, there's no need to cap the size of the lru_cache as it
will only have one entry, and __name__ is set by @wraps.
Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Ross Burton [Thu, 31 Mar 2022 18:28:53 +0000 (19:28 +0100)]
buildtools-tarball: include nativesdk-python3-pyyaml
BitBake can optionally 'import yaml' if BB_LOGCONFIG specifies a yaml
file. This is a 3rd party module, so that this works out of the box
when buildtools is used -- either explicitly via buildtools-tarball or
implicitly via eSDK -- we can add pyyaml to the buildtools.
Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Richard Purdie [Thu, 31 Mar 2022 11:51:29 +0000 (12:51 +0100)]
modutils-initscripts: Change license PD -> MIT
The file was originally added to OE here:
https://git.openembedded.org/openembedded/commit/modutils/files/modutils.sh?id=3b3989442075d0a4c6c32cb187de17d87bf65fbd
and the license added here as "PD":
https://git.openembedded.org/openembedded/commit/modutils/modutils-initscripts.oe?id=4f7d2b1b63d166e5de146d71e5c942419424446e
As "Public Domain", we can re-license it to MIT, which fits in with the rest of
our metadata and has an SPDX identifier, so lets do that and try and keep our
licenses simpler.
This also them removes the need for a weird license patch in SRC_URI.
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Richard Purdie [Thu, 31 Mar 2022 11:01:50 +0000 (12:01 +0100)]
base: Don't add duplicates to sys.path
We can re-trigger this code and there is little point in stacking a ton of duplicate
paths which just waste time during searches for modules. This could in theory alter
layer module search order but that seems unlikely in common use.
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
cmake: support to create per-toolchain cmake file in SDK
The patch creates ${MULTIMACH_TARGET_SYS}-toolchain.cmake file
at ${SDK_INSTALL_DIR}/sysroots/${SDK_SYS}/usr/share/cmake/, which is
per-toolchain CMake toolchain file containing arch-specific values
and independent of OE environment variables.
The file gets created after installing SDK toolchain installer
ined by running "bitbake -c populate_sdk <image>".
The changes are similar to meson-setup.py which is used to
create arch-specific
${SDK_INSTALL_DIR}/sysroots/${SDK_SYS}/usr/share/meson/*-meson.cross
Khem Raj [Wed, 30 Mar 2022 18:00:45 +0000 (11:00 -0700)]
weston: Add a knob to control simple clients
Some graphics driver implementations ( e.g sgx ) do not yet support APIs from mesa
21.x, and some portions of weston simple clients depend on these APIs,
therefore introduce a way to specify all or a selection fo clients to
build
Fixes
clients/weston-simple-dmabuf-feedback.p/simple-dmabuf-
feedback.c.o: in function `create_dmabuf_buffer':
| simple-dmabuf-feedback.c:(.text+0x1076): undefined reference to `gbm_bo_get_fd_for_plane'
Rasmus Villemoes [Wed, 30 Mar 2022 10:46:15 +0000 (12:46 +0200)]
git: make expat and curl into PACKAGECONFIG items
It can be useful to use git on target (e.g. with some wrapper like
etckeeper for keeping track of changes to /etc), and for such cases,
it is likely one has no need for pulling from/pushing to http[s]
repositories. From the INSTALL file:
- "libcurl" library ... If you do not use http:// or https://
repositories, and do not want to put patches into an IMAP
mailbox, you do not have to have them (use NO_CURL).
- "expat" library; git-http-push uses it for remote lock
management over DAV. Similar to "curl" above, this is
optional (with NO_EXPAT).
Setting --without-expat and --without-curl reduces the size of the
installed "git" package from 18M to 12M, in addition to avoiding
pulling those libraries into the rootfs.
Signed-off-by: Rasmus Villemoes <rasmus.villemoes@prevas.dk> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
This is because g-ir-tool-template.in is not setting girdir correctly.
It's using the prefix instead of the actual girdir.
Note that we don't get such error at do_rootfs time because the extra
directories are speicified. But we will get such error at runtime when
multilib is enabled.
Marta Rybczynska [Tue, 29 Mar 2022 12:54:32 +0000 (14:54 +0200)]
cve-check: add coverage statistics on recipes with/without CVEs
Until now the CVE checker was giving information about CVEs found for
a product (or more products) contained in a recipe. However, there was
no easy way to find out which products or recipes have no CVEs. Having
no reported CVEs might mean there are simply none, but can also mean
a product name (CPE) mismatch.
This patch adds CVE_CHECK_COVERAGE option enabling a new type of
statistics. Then we use the new JSON format to report the information.
The legacy text mode report does not contain it.
This option is expected to help with an identification of recipes with
mismatched CPEs, issues in the database and more.
This work is based on [1], but adding the JSON format makes it easier
to implement, without additional result files.
Marta Rybczynska [Tue, 29 Mar 2022 12:54:31 +0000 (14:54 +0200)]
cve-check: add json format
Add an option to output the CVE check in a JSON-based format.
This format is easier to parse in software than the original
text-based one and allows post-processing by other tools.
Output formats are now handed by CVE_CHECK_FORMAT_TEXT and
CVE_CHECK_FORMAT_JSON. Both of them are enabled by default.
The JSON output format gets generated in a similar way to the
text format with the exception of the manifest: appending to
JSON arrays requires parsing the file. Because of that we
first write JSON fragments and then assemble them in one pass
at the end.
Signed-off-by: Marta Rybczynska <marta.rybczynska@huawei.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
wangmy [Tue, 29 Mar 2022 01:46:27 +0000 (09:46 +0800)]
python3-urllib3: upgrade 1.26.8 -> 1.26.9
Changelog:
==========
- Changed urllib3[brotli] extra to favor installing Brotli libraries that are
still receiving updates like brotli and brotlicffi instead of brotlipy.
This change does not impact behavior of urllib3, only which dependencies are
installed.
- Fixed a socket leaking when HTTPSConnection.connect() raises an exception.
- Fixed server_hostname being forwarded from PoolManager to HTTPConnectionPool
when requesting an HTTP URL. Should only be forwarded when requesting an HTTPS URL.
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
wangmy [Tue, 29 Mar 2022 00:39:40 +0000 (08:39 +0800)]
python3-hypothesis: upgrade 6.39.2 -> 6.39.5
Changelog:
=========
Improve error detection and message when Hypothesis is
run on a Python implementation without support for "-0.0", which is
required for the "floats()" strategy but can be disabled by unsafe
compiler options (issue #3265).
If the "shrink" phase is disabled, stop the "generate" phase as
soon as an error is found regardless of the value of the
"report_multiple_examples" setting, since that's probably what you
wanted (issue #3244).
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
wangmy [Tue, 29 Mar 2022 00:23:49 +0000 (08:23 +0800)]
python3-asn1crypto: upgrade 1.4.0 -> 1.5.1
License-Update: year updated to 2022
Changelog:
=========
- Handle RSASSA-PSS in keys.PrivateKeyInfo.bit_size and
keys.PublicKeyInfo.bit_size
- Handle RSASSA-PSS in keys.PrivateKeyInfo.wrap and keys.PublicKeyInfo.wrap
- Updated docs for keys.PrivateKeyInfo.algorithm and
keys.PublicKeyInfo.algorithm to reflect that they can return "rsassa_pss"
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Luca Boccassi [Mon, 28 Mar 2022 15:26:54 +0000 (16:26 +0100)]
volatile-binds: add recipe variable to allow disabling OverlayFS
Use the new MOUNT_COPYBIND_AVOID_OVERLAYFS flag provided by mount-copybind.
When SELinux is enabled, processes accessing OverlayFS mounts will get a denial
if the process setting up the mount doesn't have all the permissions that
the accessor has.
It was found when a end user wants to build a squashfs type initramfs
into fitimage, it just fails without printing out any error or warning
messages, which is not right.
Introduce a FIT_SUPPORTED_INITRAMFS_FSTYPES variable to avoid
hard-coding the supported initramfs types, and it could be overridden
in config files. Also break the build when none of a supported
initramfs type is found.
Signed-off-by: Ming Liu <liu.ming50@gmail.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Ming Liu [Mon, 28 Mar 2022 14:15:50 +0000 (16:15 +0200)]
kernel-fitimage.bbclass: change 'echo' to 'bbnote'
Change 'echo' usages to 'bbnote' for better logging.
Signed-off-by: Ming Liu <liu.ming50@gmail.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>