]> git.ipfire.org Git - thirdparty/openembedded/openembedded-core-contrib.git/commitdiff
clang: set CVE_PRODUCT
authorRoss Burton <ross.burton@arm.com>
Tue, 15 Jul 2025 14:46:46 +0000 (15:46 +0100)
committerRichard Purdie <richard.purdie@linuxfoundation.org>
Thu, 17 Jul 2025 09:21:46 +0000 (10:21 +0100)
There are a number of recipes that are part of the LLVM Project, so set
CVE_PRODUCT to llvm:llvm in common.inc to ensure that all of the recipes
are covered.

Also add llvm:clang in the clang recipe, as there are a number of CVEs
with that product name.

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
meta/recipes-devtools/clang/clang_git.bb
meta/recipes-devtools/clang/common.inc

index 1daac48edafc56344be2c1c47af0e5c28b5f5090..aa4aec1cd1fbe450b3b4dd00710e078091537764 100644 (file)
@@ -19,6 +19,8 @@ require common-source.inc
 
 BPN = "clang"
 
+CVE_PRODUCT += "llvm:clang"
+
 INHIBIT_DEFAULT_DEPS:class-native = "1"
 
 LDFLAGS:append:class-target:riscv32 = " -Wl,--no-as-needed -latomic -Wl,--as-needed"
index a9d6f899c03d0041ee0308a1f522cc6fd51a387b..a49aa64f79ee968b192bb73e6f74ba7adedd7ce0 100644 (file)
@@ -71,3 +71,5 @@ B ?= "${WORKDIR}/llvm-project-source-${PV}/build.${HOST_SYS}.${TARGET_SYS}"
 # The real WORKDIR location isn't a dependency for the shared workdir.
 src_patches[vardepsexclude] = "WORKDIR"
 should_apply[vardepsexclude] += "PN"
+
+CVE_PRODUCT = "llvm:llvm"