]> git.ipfire.org Git - thirdparty/openembedded/openembedded-core-contrib.git/log
thirdparty/openembedded/openembedded-core-contrib.git
7 years agodevtool: implement conditional patch handling paule/devtool31-oe
Paul Eggleton [Tue, 31 Oct 2017 03:48:05 +0000 (16:48 +1300)] 
devtool: implement conditional patch handling

If you have a recipe that uses overrides to conditionally extend
SRC_URI to add additional patches, then you will often need to update
those patches if you're making other changes to the source tree (for
example if you're upgrading the underlying source). Make this possible
with devtool by creating devtool-override-* branches for each override
that conditionally appends/prepends SRC_URI, and have devtool
update-recipe / finish check each branch out in turn and update the
corresponding patches.

A current example of a recipe that does this is the quota recipe - it
applies an additional patch if musl is the selected C library (i.e.
libc-musl is in OVERRIDES).

Note that use of this functionality does require some care - in
particular, updates to patches that appear on the main branch (named
"devtool" by default) should be made there and not only on one of the
specific devtool-override-* branches that are created for each override.
The recommended procedure is to make the changes you want to make to the
main branch first, then check out and rebase each devtool-override-*
branch, testing each one by activating the corresponding configuration,
and then finally run devtool finish.

Fixes [YOCTO #11516].

Signed-off-by: Paul Eggleton <paul.eggleton@linux.intel.com>
7 years agodevtool: finish: add dry-run option
Paul Eggleton [Tue, 31 Oct 2017 22:56:18 +0000 (11:56 +1300)] 
devtool: finish: add dry-run option

If you're not sure what changes devtool finish is going to make, or
you're not sure you're finished with your modifications, it is useful to
be able to see what devtool finish is going to do beforehand, so add
a -N/--dry-run option to make that possible.

(It's also very useful for debugging devtool finish itself.)

Signed-off-by: Paul Eggleton <paul.eggleton@linux.intel.com>
7 years agodevtool: finish: improve reporting for removed files
Paul Eggleton [Tue, 7 Nov 2017 21:52:15 +0000 (10:52 +1300)] 
devtool: finish: improve reporting for removed files

If a file is going to be effectively removed from the destination by
devtool finish, we should report that rather than just reporting that
we're removing files from the workspace. This is a little tricky because
the way we actually operate when finishing is to:
 (1) remove all original files (as recorded by devtool upgrade, if that
     was used)
 (2) as part of updating the recipe file, remove the files from next to
     the new recipe (i.e. in the workspace for an upgrade, real recipe
     otherwise) corresponding to commits not in the git tree
 (3) copy over remaining files from the workspace to the destination

To report the files removed with respect to what was originally there,
we need to swap steps 1 and 2 so we can see what no longer exists after
the deletion, and suppress the reporting currently done in step 2 -
however, we still want to report removal in step 2 for the non-upgrade
case, so the latter is conditional.

Signed-off-by: Paul Eggleton <paul.eggleton@linux.intel.com>
7 years agodevtool: show a better error message if meta-files aren't found
Paul Eggleton [Tue, 31 Oct 2017 01:24:42 +0000 (14:24 +1300)] 
devtool: show a better error message if meta-files aren't found

If the files that the devtool-source class is supposed to create in the
source tree aren't found in the temporary directory then we know that
the class hasn't worked properly - say that explicitly.

Signed-off-by: Paul Eggleton <paul.eggleton@linux.intel.com>
7 years agodevtool: upgrade: reformat --no-patch warning message
Paul Eggleton [Mon, 30 Oct 2017 22:30:49 +0000 (11:30 +1300)] 
devtool: upgrade: reformat --no-patch warning message

* Only log one warning message instead of one per line
* Be a bit more verbose
* "if list" is more pythonic than "if len(list)"

Signed-off-by: Paul Eggleton <paul.eggleton@linux.intel.com>
7 years agodevtool: upgrade: automatically handle changes to source subdirectory
Paul Eggleton [Mon, 30 Oct 2017 04:16:56 +0000 (17:16 +1300)] 
devtool: upgrade: automatically handle changes to source subdirectory

If the directory where the source code extracts to changes (for
example, when upgrading iucode-tool from 1.5 to 2.1.1, the subdirectory
in the tarball changed from "iucode_tool-${PV}" to "iucode-tool-${PV}")
then handle this automatically. Also handle when it changes to match the
default S value (i.e. "${WORKDIR}/${BP}") in which case we just drop
setting S in the recipe.

Fixes [YOCTO #10939].

Signed-off-by: Paul Eggleton <paul.eggleton@linux.intel.com>
7 years agodevtool: upgrade: show messages before source extraction steps
Paul Eggleton [Mon, 30 Oct 2017 03:35:29 +0000 (16:35 +1300)] 
devtool: upgrade: show messages before source extraction steps

Give the user a little more insight into what's being done.

Signed-off-by: Paul Eggleton <paul.eggleton@linux.intel.com>
7 years agorecipetool: create: show a warning for github archive URLs
Paul Eggleton [Thu, 26 Oct 2017 21:12:47 +0000 (10:12 +1300)] 
recipetool: create: show a warning for github archive URLs

github archive URLs are not guaranteed to be stable [1] and thus we
should show a warning if a user specifies one to recipetool create (or
devtool add).

[1] http://lists.openembedded.org/pipermail/openembedded-core/2017-September/142519.html

Signed-off-by: Paul Eggleton <paul.eggleton@linux.intel.com>
7 years agodevtool: stop always moving workspace to end of BBLAYERS
Paul Eggleton [Fri, 13 Oct 2017 03:49:34 +0000 (16:49 +1300)] 
devtool: stop always moving workspace to end of BBLAYERS

I noticed that using bitbake-layers add-layer followed by a devtool
command resulted in bitbake re-parsing all of the recipes, which is
annoying. Upon closer inspection I could see that devtool was moving the
workspace layer path to the end of BBLAYERS if it happened to be
somewhere in the middle - there's no need for it to be doing this. This
occurred because we were passing the current workspace path to remove
and the "new" path to add even if the path is not being changed, and I
think earlier versions of bb.utils.edit_bblayers_conf() didn't move the
existing entry under these circumstances as it clearly does now. Fix it
so we only pass the path to be removed if we're actually changing the
path.

Signed-off-by: Paul Eggleton <paul.eggleton@linux.intel.com>
7 years agorecipetool: create: drop debug print
Paul Eggleton [Tue, 3 Oct 2017 22:40:39 +0000 (11:40 +1300)] 
recipetool: create: drop debug print

This looks like some debug printing that was left in by accident.

Signed-off-by: Paul Eggleton <paul.eggleton@linux.intel.com>
7 years agodevtool: upgrade: handle recipes that use named SRC_URI checksums
Paul Eggleton [Tue, 3 Oct 2017 03:36:19 +0000 (16:36 +1300)] 
devtool: upgrade: handle recipes that use named SRC_URI checksums

devtool upgrade did not properly handle setting SRC_URI checksums for
recipes that use named SRC_URI entries and also use those names in the
SRC_URI checksums. A further complication was where the name contained
an expression that changed with the version e.g. ${PV} (probably quite
rare, but the dnsmasq recipe in meta-networking is currently one such
recipe.) All of these are now handled properly.

Additionally, drop the _get_checksums() function that wasn't being
called from anywhere in the code.

Note that this now turns nowrap_vars in recipeutils.py to be a list of
regexes, hence things such as [ and ] need to be appropriately escaped.

Signed-off-by: Paul Eggleton <paul.eggleton@linux.intel.com>
7 years agodevtool: finish: fix "layer not in bblayers.conf" warning when path specified
Paul Eggleton [Mon, 2 Oct 2017 02:45:49 +0000 (15:45 +1300)] 
devtool: finish: fix "layer not in bblayers.conf" warning when path specified

devtool finish will check if the destination layer is part of
bblayers.conf so that we avoid the user getting confused about the
recipe vanishing from their configuration if it isn't. devtool finish
also accepts a path underneath a layer so that you have a bit
more control over where it ends up. However if you used a path
underneath a layer then it wasn't converting this to the base of the
layer before checking it against BBLAYERS, thus the warning was being
shown erroneously in that case.

Signed-off-by: Paul Eggleton <paul.eggleton@linux.intel.com>
7 years agodevtool: finish: ensure repository is clean before proceeding
Paul Eggleton [Fri, 29 Sep 2017 03:56:20 +0000 (16:56 +1300)] 
devtool: finish: ensure repository is clean before proceeding

If the git repository for a recipe in the workspace has uncommitted
changes in it then it's possible that the user has forgotten to commit
something, so check and exit if there are any. Provide a -f/--force
option to continue in the case where the uncommitted changes aren't
needed.

Separately, if the repository is in the middle of a rebase or git am /
apply then error out (without the opportunity to force) since the user
really needs to sort this out before finishing.

Signed-off-by: Paul Eggleton <paul.eggleton@linux.intel.com>
7 years agodevtool: reset: print source tree base path
Paul Eggleton [Fri, 29 Sep 2017 03:19:28 +0000 (16:19 +1300)] 
devtool: reset: print source tree base path

If S points to a subdirectory of the source rather than the "base" of
the source tree then print that rather than the subdirectory path when
telling the user they need to remove the source tree, since that is the
directory that they will need to remove.

Signed-off-by: Paul Eggleton <paul.eggleton@linux.intel.com>
7 years agodevtool: make find-recipe and edit-recipe always work with any recipe
Paul Eggleton [Fri, 29 Sep 2017 01:22:17 +0000 (14:22 +1300)] 
devtool: make find-recipe and edit-recipe always work with any recipe

After some reconsideration I think it's a bit annoying for users to be
forced to use an option to work with recipes where the file isn't in the
workspace, so let's just have these commands check the workspace first
for the recipe, and if it isn't there then load the cache and get it
that way.

Signed-off-by: Paul Eggleton <paul.eggleton@linux.intel.com>
7 years agodevtool: show some warnings for upgrade versions
Paul Eggleton [Thu, 28 Sep 2017 02:51:40 +0000 (15:51 +1300)] 
devtool: show some warnings for upgrade versions

* Show a warning in devtool upgrade if the version is less than the
  current version suggesting that the user may need to bump PE in the
  recipe
* Show a warning in devtool add and devtool upgrade if the version looks
  like a pre-release version suggesting using a version number that
  won't mess up the progression when you come to upgrade to the final
  release version.

Signed-off-by: Paul Eggleton <paul.eggleton@linux.intel.com>
7 years agodevtool: fix handling of oe-local-files when source is in a subdirectory
Paul Eggleton [Fri, 29 Sep 2017 02:26:22 +0000 (15:26 +1300)] 
devtool: fix handling of oe-local-files when source is in a subdirectory

If S points to a subdirectory of the source rather than the "base" of
the source tree then we weren't handling the oe-local-files directory
properly - it got extracted to the base of the tree but devtool
update-recipe and devtool finish assumed it would be under S which would
be the subdirectory, thus it would be missing and devtool would assume
the files had been deleted and remove them from the recipe. Record the
base of the source tree in the bbappend and read it into the in-memory
workspace so we can use that to find out where oe-local-files should be
found.

Signed-off-by: Paul Eggleton <paul.eggleton@linux.intel.com>
7 years agodevtool: upgrade: improve performance and show progress when adding files
Paul Eggleton [Thu, 28 Sep 2017 03:46:14 +0000 (16:46 +1300)] 
devtool: upgrade: improve performance and show progress when adding files

When devtool upgrade is upgrading to a new version where the source is
fetched as an archive (e.g. a tarball), we create a single commit in the
git repository that is the upgrade from the old version to the new. We
do this by extracting the old source, committing it, deleting all files,
copying in the new files, running git add on each new/changed/deleted
file, and then committing the result. When a lot of files have changed
in an upgrade (such as QEMU 2.8.1.1 -> 2.10.0) the penultimate step of
running git add it can take quite a long time; in order to reduce this
and show some feedback to the user, run git add with batches of 100
files at once and also show a progress bar. In a local test with the
aforementioned QEMU upgrade it took the time down from over 7 minutes
down to about 13 seconds.

Fixes [YOCTO #11948].

Signed-off-by: Paul Eggleton <paul.eggleton@linux.intel.com>
7 years agodevtool: upgrade: fix not committing deleted files with older git versions
Paul Eggleton [Wed, 8 Nov 2017 22:07:15 +0000 (11:07 +1300)] 
devtool: upgrade: fix not committing deleted files with older git versions

With versions of git older than 2.0, "git add" on a deleted file (i.e.
in this case a file that was removed between versions) will not add the
delete to be committed by default, with the result that the rebase of
patches on top of the new branch will fail. We need to use the -A
option in order to force that for older git versions.

Signed-off-by: Paul Eggleton <paul.eggleton@linux.intel.com>
7 years agodevtool: upgrade: fix accidentally swapped parameters
Paul Eggleton [Mon, 30 Oct 2017 22:35:17 +0000 (11:35 +1300)] 
devtool: upgrade: fix accidentally swapped parameters

It appears that when fixing the signature unlocking in OE-Core commit
4e9a0be32fc30fb87d65da7cd1a4015c99533aff I swapped the parameters here
and did not test it within the eSDK (it does nothing outside of the
eSDK) resulting in a TypeError when devtool upgrade was used in the
eSDK. Swap the parameters around to the correct ordering.

Fixes [YOCTO #12285].

Signed-off-by: Paul Eggleton <paul.eggleton@linux.intel.com>
7 years agolib/oe/recipeutils: fix line splitting in patch_recipe_*
Paul Eggleton [Wed, 1 Nov 2017 00:49:44 +0000 (13:49 +1300)] 
lib/oe/recipeutils: fix line splitting in patch_recipe_*

If a value was split over multiple lines (e.g. as SRC_URI usually is)
then we were inserting the value as one item in the lines list with
newlines between each line. There's nothing wrong with this if you're
writing the list out to a file, but if you want to generate a patch (as
patch_recipe_file() will do if the patch parameter is set to True) then
the diff output looks a bit odd. Split the value before adding it to the
lines list to resolve this.

Signed-off-by: Paul Eggleton <paul.eggleton@linux.intel.com>
7 years agolib/oe/recipeutils: fix find_layerdir() to return absolute paths
Paul Eggleton [Tue, 7 Nov 2017 20:45:06 +0000 (09:45 +1300)] 
lib/oe/recipeutils: fix find_layerdir() to return absolute paths

find_layerdir() should really return absolute paths, so make it do so.
This fixes devtool finish not deleting files it should do after devtool
upgrade if the specified path is relative, since the devtool finish code
was assuming that find_layerdir() was returning an absolute path.

Fixes [YOCTO #12318].

Signed-off-by: Paul Eggleton <paul.eggleton@linux.intel.com>
7 years agorecipetool: ignore incidental kernel module source
Paul Eggleton [Wed, 20 Sep 2017 04:43:33 +0000 (16:43 +1200)] 
recipetool: ignore incidental kernel module source

If the source tree happens to contain a kernel module as an example, a
test or under a "contrib" directory then we shouldn't be picking it up
and making the determination that the entire thing is a kernel module.

An example that triggered this is zstd, which ships a kernel module
under contrib/linux-kernel:

  https://github.com/facebook/zstd

Signed-off-by: Paul Eggleton <paul.eggleton@linux.intel.com>
7 years agorecipetool: pass absolute source tree path to plugins
Paul Eggleton [Wed, 20 Sep 2017 00:03:39 +0000 (12:03 +1200)] 
recipetool: pass absolute source tree path to plugins

We shouldn't be passing a relative path to the plugins if that's what's
been specified on the recipetool command line.

Signed-off-by: Paul Eggleton <paul.eggleton@linux.intel.com>
7 years agogcc: fix miscompilation on mips64
Chen Qi [Fri, 27 Oct 2017 09:43:51 +0000 (17:43 +0800)] 
gcc: fix miscompilation on mips64

We've observed strange behaviour of `systemctl status <xxx> on qemumips64.
The output of the command is like `systemctl show <xxx>', which is incorrect.

This patch is from gcc bugzilla's attachment.
https://gcc.gnu.org/bugzilla/show_bug.cgi?id=81803

The patch hasn't been merged into gcc. But it does solve the above problem.

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
7 years agosystemd: Fix build on musl
Khem Raj [Fri, 27 Oct 2017 05:10:42 +0000 (22:10 -0700)] 
systemd: Fix build on musl

Add needed patches for portability across glibc/musl
enable systemd on musl too

Disable utmp,ldconfig,nss,resolved,localed for musl
which is not supported on musl

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
7 years agoe2fsprogs-ptest: improve reproducibility
Juro Bystricky [Wed, 25 Oct 2017 23:00:26 +0000 (16:00 -0700)] 
e2fsprogs-ptest: improve reproducibility

Remove several Makefiles containing build host references.
While at it, also remove some additional files not needed for
testing.

Signed-off-by: Juro Bystricky <juro.bystricky@intel.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
7 years agooe-build-perf-report-email.py: add images as MIME objects
Markus Lehtonen [Wed, 25 Oct 2017 11:39:38 +0000 (14:39 +0300)] 
oe-build-perf-report-email.py: add images as MIME objects

Add images as separate MIME objects instead of directly embedding images
in the html (as base64 encoded pngs). This makes the emails better
suited for certain email servers/clients.

Signed-off-by: Markus Lehtonen <markus.lehtonen@linux.intel.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
7 years agogobject-introspection: improve reproducibility
Juro Bystricky [Tue, 24 Oct 2017 21:04:09 +0000 (14:04 -0700)] 
gobject-introspection: improve reproducibility

Remove cross-compiler wrappers from the package, these contain numerous
build host references.
The wrappers are only needed for cross-compiling.

[YOCTO #11705]

Signed-off-by: Juro Bystricky <juro.bystricky@intel.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
7 years agowayland-protocols: upgrade to 1.11
Denys Dmytriyenko [Tue, 17 Oct 2017 23:51:30 +0000 (19:51 -0400)] 
wayland-protocols: upgrade to 1.11

usesysrootprefixforpkgdatadirvariable.patch was a backport from 1.11,
no longer needed.

Signed-off-by: Denys Dmytriyenko <denys@ti.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
7 years agoqemu: upgrade to 2.10.1
Leonardo Sandoval [Thu, 19 Oct 2017 20:10:46 +0000 (13:10 -0700)] 
qemu: upgrade to 2.10.1

All CVE patches removed because these are already integrated in 2.10.1.

Signed-off-by: Leonardo Sandoval <leonardo.sandoval.gonzalez@linux.intel.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
7 years agowic: Update canned-wks for systemd to use UUID everywhere
Tom Rini [Thu, 21 Sep 2017 17:46:17 +0000 (13:46 -0400)] 
wic: Update canned-wks for systemd to use UUID everywhere

With systemd, the mounting of the swap partition is handled via systemd
and will mount it, regardless of if PARTUUID is parsed or not.  systemd
has a runtime dependency on util-linux-mount so PARTUUID for regular
mount points will be handled correctly.  Make all partitions that we add
to the image make use of UUIDs for maximum portability.

Signed-off-by: Tom Rini <trini@konsulko.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
7 years agowic: When using --use-uuid make sure that we update the fstab with PARTUUID
Tom Rini [Thu, 21 Sep 2017 17:46:16 +0000 (13:46 -0400)] 
wic: When using --use-uuid make sure that we update the fstab with PARTUUID

When we have been told to use the UUID we should also update the fstab
to make use of PARTUUID instead of hard-coding the device in question.
This will make the resulting image much more portable.

Signed-off-by: Tom Rini <trini@konsulko.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
7 years agosystemctl-native: add target.wants to target regex
Martin Kelly [Mon, 16 Oct 2017 16:31:42 +0000 (09:31 -0700)] 
systemctl-native: add target.wants to target regex

The regex for acceptable systemd WantedBy/RequiredBy targets does not include
target.wants, so a line like this:

WantedBy=multi-user.target.wants

gets silently ignored, even though it works fine on a real system.

Signed-off-by: Martin Kelly <mkelly@xevo.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
7 years agodpkg: use snapshot.debian.org
Ross Burton [Tue, 7 Nov 2017 13:18:18 +0000 (13:18 +0000)] 
dpkg: use snapshot.debian.org

7 years agoexpat: upgrade to 2.2.5
Dengke Du [Fri, 3 Nov 2017 07:26:42 +0000 (15:26 +0800)] 
expat: upgrade to 2.2.5

Signed-off-by: Dengke Du <dengke.du@windriver.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
7 years agowget: Upgrade 1.19.1 -> 1.19.2
Zhixiong Chi [Tue, 31 Oct 2017 09:52:29 +0000 (17:52 +0800)] 
wget: Upgrade 1.19.1 -> 1.19.2

Among other things, fix CVE-2017-13089 CVE-2017-13090 CVE-2017-6508
External References:
https://nvd.nist.gov/vuln/detail/CVE-2017-13089
https://nvd.nist.gov/vuln/detail/CVE-2017-13090
https://nvd.nist.gov/vuln/detail/CVE-2017-6508

Signed-off-by: Zhixiong Chi <zhixiong.chi@windriver.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
7 years agoscripts/contrib/bbvars.py: Rewrite to use tinfoil
Amanda Brindle [Mon, 30 Oct 2017 21:57:04 +0000 (14:57 -0700)] 
scripts/contrib/bbvars.py: Rewrite to use tinfoil

Use tinfoil to collect all variable names globally and in each recipe.

No longer show the count of variables if they are undocumented.

Fixes [YOCTO #2086]

Signed-off-by: Amanda Brindle <amanda.r.brindle@intel.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
7 years agocurl_7.54.1.bb: improve reproducibility
Juro Bystricky [Mon, 30 Oct 2017 17:49:46 +0000 (10:49 -0700)] 
curl_7.54.1.bb: improve reproducibility

Improve reproducible build of curl-dev and curl-dbg packages.

curl-dev: Correctly remove build host references from curl-config
curl-dbg: Do not generate time stamps in files generated by mkhelp.pl

Signed-off-by: Juro Bystricky <juro.bystricky@intel.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
7 years agosystemd: remove useless options for mips4
Chen Qi [Fri, 27 Oct 2017 09:43:50 +0000 (17:43 +0800)] 
systemd: remove useless options for mips4

Looking back the history, we had problem with systemd on qemumips64
which is also related to compilation flags. We solved that by using
tweaking FULL_OPTIMIZATION for mips64 to have "-fno-tree-switch-conversion
-fno-tree-tail-merge".

Now systemd has been upgraded to 234, and we don't have the above problem
any more, thus removing these flags.

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
7 years agomusl: Update to latest
Khem Raj [Sat, 14 Oct 2017 15:48:54 +0000 (08:48 -0700)] 
musl: Update to latest

* fix use of memset without declaration in sched.h cpu set macros
* powerpc{64}: fix MAP_NORESERVE and MAP_LOCKED in mman.h

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
7 years agorpm: remove --sysroot from macros on target
Joe Slater [Fri, 13 Oct 2017 22:40:25 +0000 (15:40 -0700)] 
rpm: remove --sysroot from macros on target

We do not want to specify --sysroot when defining __cc
used on a target.

Signed-off-by: Joe Slater <jslater@windriver.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
7 years agolibsolv: fix a kernel-devsrc installation issue
Ming Liu [Mon, 2 Oct 2017 05:25:42 +0000 (07:25 +0200)] 
libsolv: fix a kernel-devsrc installation issue

We encountered a problem when installing kernel-devsrc package on a
intel-x86 target, as follows:
$ dnf install kernel-devsrc
| Installing : kernel-devsrc-1.0-r0.0.intel_corei7_64 1/1
| failed loading RPMDB
| The downloaded packages were saved in cache until the next successful transaction.
| You can remove cached packages by executing 'dnf clean packages'.

It can be fixed by increasing MAX_HDR_CNT and MAX_HDR_DSIZE in libsolv
per test.

Signed-off-by: Ming Liu <liu.ming50@gmail.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
7 years agoexpect: Fix segfaults when Expect clib is used directly from C program
Li Zhou [Fri, 29 Sep 2017 02:00:21 +0000 (10:00 +0800)] 
expect: Fix segfaults when Expect clib is used directly from C program

Fix segfaults if Tcl is built with stubs and Expect clib function is used
directly from C program.

Signed-off-by: Li Zhou <li.zhou@windriver.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
7 years agobind: move libraries to own package
andreas.kling@peiker-cee.de [Mon, 25 Sep 2017 09:01:30 +0000 (11:01 +0200)] 
bind: move libraries to own package

Signed-off-by: Andy Kling <andreas.kling@peiker-cee.de>
Signed-off-by: Ross Burton <ross.burton@intel.com>
7 years agogrub_2.02.bb: improve reproducibility
Juro Bystricky [Mon, 25 Sep 2017 23:36:08 +0000 (16:36 -0700)] 
grub_2.02.bb: improve reproducibility

Remove several build host references from modinfo.sh files.

Signed-off-by: Juro Bystricky <juro.bystricky@intel.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
7 years agoffmpeg: upgrade to 3.3.4
Chen Qi [Sat, 30 Sep 2017 03:21:01 +0000 (11:21 +0800)] 
ffmpeg: upgrade to 3.3.4

Upgrade ffmpeg to version 3.3.4. Version 3.3.4 is a bug fix version, and
there's no new feature added.

Compared to version 3.3.3, there are 57 new commits. These 57 commits are
either bug fix or small tweaks.

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
7 years agopython: add PACKAGECONFIG for Berkeley DB module
Ross Burton [Wed, 1 Nov 2017 00:28:34 +0000 (00:28 +0000)] 
python: add PACKAGECONFIG for Berkeley DB module

The bsddb module is deprecated and requires an old version of Berkeley DB that
some may be unhappy with even shipping, so expose a way to disable the module.

Signed-off-by: Ross Burton <ross.burton@intel.com>
7 years agodb: change types to avoid headers changing between architectures
Ross Burton [Wed, 1 Nov 2017 13:52:19 +0000 (13:52 +0000)] 
db: change types to avoid headers changing between architectures

Triggered by looking at why Python doesn't find db.h (because it greps db.h for
a regex, and db.h is actually a oe_multilib_header wrapper) I realised that the
only reason we have to oe_multilib_header db.h is because one typedef is
different between 32-bit and 64-bit architectures.

However, the typedef is for a 64-bit integer so instead of using long (64-bit)
or long long (32-bit), just use int64_t.  Some of the overly complicated
configure tests need to be deleted after this change but that is safe as we're
building in a controlled environment and can assume int64_t exists.

With this done the header doesn't change between architectures, and it doesn't
need to be wrapped by oe_multilib_header.

Signed-off-by: Ross Burton <ross.burton@intel.com>
7 years agolibxml2: 2.9.5 -> 2.9.7
Andrej Valek [Mon, 6 Nov 2017 07:29:57 +0000 (08:29 +0100)] 
libxml2: 2.9.5 -> 2.9.7

Signed-off-by: Andrej Valek <andrej.valek@siemens.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
7 years agobash-completion: remove rfkill file that util-linux provides
Chen Qi [Mon, 6 Nov 2017 06:10:17 +0000 (14:10 +0800)] 
bash-completion: remove rfkill file that util-linux provides

Remove the rfkill bash completion file that util-linux provides
to avoid conflicts.

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
7 years agoutil-linux: upgrade to 2.31
Chen Qi [Mon, 6 Nov 2017 06:10:16 +0000 (14:10 +0800)] 
util-linux: upgrade to 2.31

The utility 'reset' is removed in this new version.
A new utility 'rfkill' is added in this new version.

Recipe is modified to remove reset and add rfkill according to the
above changes in new version.

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
7 years agosshcontrol.py: in copy_to() always use scp
Erik Botö [Mon, 6 Nov 2017 18:13:06 +0000 (10:13 -0800)] 
sshcontrol.py: in copy_to() always use scp

The current implementation is broken when the localpath is a link.
Then only a symlink would be created on the target, instead of copying
the actual file.

[YOCTO #11524]

Signed-off-by: Erik Botö <erik.boto@pelagicore.com>
Signed-off-by: Stephano Cetola <stephano.cetola@linux.intel.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
7 years agomasterimage.py: rename parameter "params" in start() to "extra_bootparams"
Erik Botö [Mon, 6 Nov 2017 18:13:05 +0000 (10:13 -0800)] 
masterimage.py: rename parameter "params" in start() to "extra_bootparams"

This matches how it is called, and how it is named in qmeu target.

[YOCTO #11524]

Signed-off-by: Erik Botö <erik.boto@pelagicore.com>
Signed-off-by: Stephano Cetola <stephano.cetola@linux.intel.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
7 years agomasterimage.py: fix stop()
Erik Botö [Mon, 6 Nov 2017 18:13:04 +0000 (10:13 -0800)] 
masterimage.py: fix stop()

The stop() function is called in the context of the masterimage,
so self.master should be used instead of self.connection which is
undefined at that time.

[YOCTO #11524]

Signed-off-by: Erik Botö <erik.boto@pelagicore.com>
Signed-off-by: Stephano Cetola <stephano.cetola@linux.intel.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
7 years agomasterimage.py: fix issue with calling reboot on masterimage/DUT
Erik Botö [Mon, 6 Nov 2017 18:13:03 +0000 (10:13 -0800)] 
masterimage.py: fix issue with calling reboot on masterimage/DUT

On systemd systems calling reboot over an ssh connection doesn't
return as expected causing an exception, therefore wrap the call
to reboot in order to avoid this issue.

Also sync the filesystems before rebooting cause otherwise, it will be
done as part of the reboot and could take a very long time and testimage
will fail to access the machine. This issue was observed consistently with
one of our rootfs at Pelagicore.

[YOCTO #11524]

Signed-off-by: Erik Botö <erik.boto@pelagicore.com>
Signed-off-by: Stephano Cetola <stephano.cetola@linux.intel.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
7 years agoselftest/imagefeatures: add basic test for useradd-staticids
Ross Burton [Fri, 29 Sep 2017 16:10:16 +0000 (17:10 +0100)] 
selftest/imagefeatures: add basic test for useradd-staticids

Signed-off-by: Ross Burton <ross.burton@intel.com>
7 years agolib/oeqa/selftest/cases/gotoolchain: add selftest for the Go toolchain
Joshua Lock [Wed, 4 Oct 2017 16:22:48 +0000 (17:22 +0100)] 
lib/oeqa/selftest/cases/gotoolchain: add selftest for the Go toolchain

Add a simple test case to being testing of the Go toolchain:
1) build meta-go-toolchain
2) create a temp directory and install the generated Go toolchain within
3) fetch an archive of the Go Dep tool
4) create an appropriately laid out GOROOT and inflate the dep archive there
5) build the dep command with the SDK's Go toolchain and check it returned
   successfully.

[YOCTO #12152]

Signed-off-by: Joshua Lock <joshua.g.lock@intel.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
7 years agooeqa/core/loader: Make _built_modules_dict() support packages correctly
Peter Kjellerstedt [Fri, 29 Sep 2017 16:06:11 +0000 (18:06 +0200)] 
oeqa/core/loader: Make _built_modules_dict() support packages correctly

For test modules in a package, e.g., oelib.license, running
`oe-selftest -r oelib.license` or `oe-selftest -r
oelib.license.TestSimpleCombinations` would fail with a message that
the specified test cases could not be found. This was due to the
parsing in _built_modules_dict(), which failed to distinguish between
<package>.<module>.<class> and <module>.<class>.<testcase> and treated
both cases as the latter.

Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
7 years agooeqa/selftest/runtime_test: use console in postinst_rootfs_and_boot
Ross Burton [Mon, 6 Nov 2017 17:54:48 +0000 (17:54 +0000)] 
oeqa/selftest/runtime_test: use console in postinst_rootfs_and_boot

Use a console login not SSH for simplicity.

Signed-off-by: Ross Burton <ross.burton@intel.com>
7 years agoimage.bbclass: let do_image depend on do_populate_lic of EXTRA_IMAGEDEPENDS
Ming Liu [Tue, 26 Sep 2017 12:31:16 +0000 (14:31 +0200)] 
image.bbclass: let do_image depend on do_populate_lic of EXTRA_IMAGEDEPENDS

The licenses of EXTRA_IMAGEDEPENDS recipes are being referenced in
image postcommand write_deploy_manifest, but a dependency is missing
between do_image and do_populate_lic of EXTRA_IMAGEDEPENDS recipes,
this leads some license files not present when write_deploy_manifest
runs, hence will cause build errors.

Fixed by letting do_image depend on do_populate_lic of
EXTRA_IMAGEDEPENDS recipes.

Signed-off-by: Ming Liu <liu.ming50@gmail.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
7 years agoexternalsrc: fix ExpansionError if the source dir does not exist yet
Luca Ceresoli [Fri, 29 Sep 2017 08:39:24 +0000 (10:39 +0200)] 
externalsrc: fix ExpansionError if the source dir does not exist yet

The externalsrc class code assumes that the source directory
(EXTERNALSRC) exists before bitbake is called. Otherwise do_configure
will fail obviously since externalsrc does not fetch anything.

Commit 3ca6085729d9 ("externalsrc: Handle .git not being a directory")
changed this behaviour. Now on a missing EXTERNALSRC directory we get
a bb.data_smart.ExpansionError during _parsing_, way before
do_configure can be run.

This new behaviour creates two problems:

 * First, there error message is very cryptic (and it's hard to
   provide a better message since no task is ever run):

     ERROR: ExpansionError during parsing /<...>/<...>.bb
     Traceback (most recent call last):
     bb.data_smart.ExpansionError: Failure expanding variable do_compile[file-checksums], expression was ${@srctree_hash_files(d)} which triggered exception FileNotFoundError: [Errno 2] No such file or directory: '<...>'

 * Second, this prevents creating a class based on externalsrc that
   automatically fetches the code in EXTERNALSRC before do_compile
   runs.

Fix both problems by simply calling git with '-C ${EXTERNALSRC}'
instead of calling git inside the non-existing directory. This changes
from a bb.data_smart.ExpansionError to a
subprocess.CalledProcessError, which is in line with what's actually
going on: git is telling us it can't find the git dir.

Also remove a comment that does not apply anymore.

Signed-off-by: Luca Ceresoli <luca@lucaceresoli.net>
Cc: Joshua Watt <jpewhacker@gmail.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
7 years agoimage.bbclass: Fix 'vardepsexclude' mechanism for image_cmd_${FSTYPE}
Igor Romanov [Thu, 28 Sep 2017 18:08:31 +0000 (21:08 +0300)] 
image.bbclass: Fix 'vardepsexclude' mechanism for image_cmd_${FSTYPE}

Current mechanism doesn't allow to use any non-determenistic variable, except 'DATE' and 'DATETIME', inside IMAGE_CMD_${FSTYPE} prototype.

Passing 'vardepsexclude' values from IMAGE_CMD_${FSTYPE}, so users will be able to avoid taskhash mismatch problems.

Signed-off-by: Igor Romanov <i.romanov@inango-systems.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
7 years agobase.bbclass: use d instead on e.data
Leonardo Sandoval [Wed, 5 Jul 2017 16:02:11 +0000 (09:02 -0700)] 
base.bbclass: use d instead on e.data

According to the bitbake documentation, the "d" global datastore should be
used instead of "e.data" because the latter is deprecated.

Signed-off-by: Leonardo Sandoval <leonardo.sandoval.gonzalez@linux.intel.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
7 years agouseradd-staticids: explain how to fix the the problem
Patrick Ohly [Thu, 19 Oct 2017 07:13:26 +0000 (09:13 +0200)] 
useradd-staticids: explain how to fix the the problem

When a distro uses useradd-staticids.bbclass and some developer
unfamiliar with the static ID mechanism tries to add a recipe which
needs new IDs, the resulting error or warning is typically not
something that the developer will understand.

Even experienced developers do not get enough information. They first
must find out whether the missing ID is for a system user or group,
then locate the file(s) in which the ID could be added. Both of this
is now part of the message:

ERROR: .../meta/recipes-extended/cronie/cronie_1.5.1.bb: cronie -
cronie: system groupname crontab does not have a static ID defined.
Add crontab to one of these files: /.../conf/distro/include/my-distro-group

The case that no file was found is also handled:

ERROR: .../meta/recipes-extended/cronie/cronie_1.5.1.bb: cronie -
cronie: system groupname crontab does not have a static ID defined.
USERADD_GID_TABLES file(s) not found in BBPATH: files/group

It would be nice if the error message could also list the range in
which a new ID needs to be allocated, but /etc/login.defs isn't
available at the time of creating the message, so that part is still
something that a developer needs to know.

Signed-off-by: Patrick Ohly <patrick.ohly@intel.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
7 years agouseradd-staticids: skip recipes without static IDs
Patrick Ohly [Tue, 26 Sep 2017 07:29:47 +0000 (09:29 +0200)] 
useradd-staticids: skip recipes without static IDs

When enabling useradd-staticids.bbclass, one has to define static IDs
for all recipes in a world build, otherwise those without static IDs
generate parse errors or warnings, depending on USERADD_ERROR_DYNAMIC.

Defining unused IDs is a lot of work and clutters the passwd/group
file of a distro.

Distros which want to avoid this can now set USERADD_ERROR_DYNAMIC =
"skip" and recipes which would have triggered a message then silently
get disabled. Only trying to build them shows the error message:

$ bitbake apt
...
ERROR: Nothing PROVIDES 'apt'
ERROR: apt was skipped: apt - apt: username _apt does not have a static ID defined.

Signed-off-by: Patrick Ohly <patrick.ohly@intel.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
7 years agofeature-arm-vfp.inc: drop unnecessary extra space from TUNE_CCARGS
Andre McCurdy [Mon, 16 Oct 2017 17:37:34 +0000 (10:37 -0700)] 
feature-arm-vfp.inc: drop unnecessary extra space from TUNE_CCARGS

The trailing space added to TUNE_CCARGS when appending -mfpu=XXX is
unnecessary and leads to a double space in the final value.

Signed-off-by: Andre McCurdy <armccurdy@gmail.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
7 years agomaintainers.inc: update maintainership
Yi Zhao [Tue, 7 Nov 2017 06:12:05 +0000 (14:12 +0800)] 
maintainers.inc: update maintainership

Reassign Dengke's recipes to Yi Zhao.

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
7 years agolib/oe/terminal.py: use an absolute path to execute oe-gnome-terminal-phonehome
Ming Liu [Fri, 13 Oct 2017 11:26:16 +0000 (13:26 +0200)] 
lib/oe/terminal.py: use an absolute path to execute oe-gnome-terminal-phonehome

A flaw was found on my Ubuntu 14.04.5 LTS, on which that gnome-terminal is
the default terminal, when I run any of the tasks:
bitbake busybox -c menuconfig/devshell/devpyshell
bitbake virtual/kernel -c menuconfig/devshell/devpyshell

I got a error as follows:
"Failed to execute child process "oe-gnome-terminal-phonehome" (No such file or directory)"

Seems the environment of the process calling Popen is not passed to the
child process, this behaviour is a known issue in Python bug tracker:
http://bugs.python.org/issue8557

It could be fixed by using an absolute path instead per test.

Signed-off-by: Ming Liu <liu.ming50@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
7 years agooeqa/selftest/runtime_test: fix postinst_rootfs_and_boot
Ross Burton [Mon, 6 Nov 2017 17:54:48 +0000 (17:54 +0000)] 
oeqa/selftest/runtime_test: fix postinst_rootfs_and_boot

This test overrides IMAGE_FEATURES but failed to include package-management,
which is essential for postinsts to work under dpkg.

Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
7 years agouseradd.bbclass: print a warn when useradd not found
Robert Yang [Mon, 23 Oct 2017 02:56:35 +0000 (10:56 +0800)] 
useradd.bbclass: print a warn when useradd not found

Exit quietly makes it very hard for debugging when user is not added as
expected, print a warning helps a lot.

Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
7 years agobind: Convert from ftp to https urls
Richard Purdie [Sun, 5 Nov 2017 23:52:59 +0000 (23:52 +0000)] 
bind: Convert from ftp to https urls

The ftp protocol is dated and problematic. Since https is available, lets
use that instead, making new users chances of successful builds higher.

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
7 years agowic: add 'part-name' argument for naming GPT partitions
Artur MÄ…drzak [Thu, 2 Nov 2017 14:01:32 +0000 (15:01 +0100)] 
wic: add 'part-name' argument for naming GPT partitions

The WIC's 'part' can now give a name for GPT partition in WKS file.
It's similar to '--label', but is naming partintions instead file systems.
It's required by some bootloaders to partitions have specified names.

Signed-off-by: Artur MÄ…drzak <artur@madrzak.eu>
Signed-off-by: Nicolas Dechesne <nicolas.dechesne@linaro.org>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
7 years agoweston: Bump version to 3.0.0
Fabien Lahoudere [Wed, 1 Nov 2017 23:22:55 +0000 (00:22 +0100)] 
weston: Bump version to 3.0.0

Update weston release to 3.0.0.
Two patches added:
- fix-missing-header.patch:
        fix a build issue when musl is used as libc.
- weston-gl-renderer-Set-pitch-correctly-for-subsampled-textures.patch:
        fix display issue with YUV420/I420 format, that could result in a crash.

Signed-off-by: Fabien Lahoudere <fabien.lahoudere@collabora.co.uk>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
7 years agowayland: Fix installation patch issue
Fabien Lahoudere [Wed, 1 Nov 2017 23:22:54 +0000 (00:22 +0100)] 
wayland: Fix installation patch issue

This patch modify the way we manage wayland path issues.
Instead of patching each recipe to make it work with wayland and its protocols,
it is better to patch wayland to fix its path issues.

So wayland-scanner.pc, wayland-client.pc and wayland-protocols.pc are patched to change paths.

Then we can drop the following workaround:

WAYLAND_PROTOCOLS_SYSROOT_DIR=${RECIPE_SYSROOT}

in:

- gtk+3
- libsdl2
- xserver-xorg
- gstreamer1.0-plugins-bad
- weston-2.0.0

We also dropped libsdl2 patches which fix wayland paths.

Signed-off-by: Fabien Lahoudere <fabien.lahoudere@collabora.co.uk>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
7 years agowayland : Bump to version 1.14.0
Fabien Lahoudere [Wed, 1 Nov 2017 23:22:53 +0000 (00:22 +0100)] 
wayland : Bump to version 1.14.0

Signed-off-by: Fabien Lahoudere <fabien.lahoudere@collabora.co.uk>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
7 years agorunqemu: correct rootfs setup to boot an ide hddimg
Thomas Perrot [Sun, 5 Nov 2017 22:43:29 +0000 (23:43 +0100)] 
runqemu: correct rootfs setup to boot an ide hddimg

vm_drive variable is malformed when the drive type is an ide device.

Signed-off-by: Thomas Perrot <thomas.perrot@tupi.fr>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
7 years agoopenssh: update to 7.6
Armin Kuster [Fri, 3 Nov 2017 19:54:49 +0000 (12:54 -0700)] 
openssh: update to 7.6

LICENSE changed do to name being added

removed patches included in some form

Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
7 years agobind: update to 9.10.6
Armin Kuster [Fri, 3 Nov 2017 19:54:48 +0000 (12:54 -0700)] 
bind: update to 9.10.6

Security Fixes

     * An error in TSIG handling could permit unauthorized zone transfers
       or zone updates. These flaws are disclosed in CVE-2017-3142 and
       CVE-2017-3143. [RT #45383]
     * The BIND installer on Windows used an unquoted service path, which
       can enable privilege escalation. This flaw is disclosed in
       CVE-2017-3141. [RT #45229]
     * With certain RPZ configurations, a response with TTL 0 could cause
       named to go into an infinite query loop. This flaw is disclosed in
       CVE-2017-3140. [RT #45181]

End of Life

   The end of life for BIND 9.10 is yet to be determined but will not be
   before BIND 9.12.0 has been released for 6 months.
   https://www.isc.org/downloads/software-support-policy/

more info see https://lists.isc.org/pipermail/bind-announce/2017-July/001063.html

Signed-off-by: Armin Kuster <akuster@mvista.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
7 years agognutls: update to 3.5.16
Armin Kuster [Fri, 3 Nov 2017 19:54:47 +0000 (12:54 -0700)] 
gnutls: update to 3.5.16

This is a bug fix release on the
current stable branch. Note that, I've also switched the release
cadence to bi-monthly as less and less bug fixes/updates accumulate
each month on this branch.

** API and ABI modifications:
No changes since last version.

Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
7 years agolibpcre2: update to 10.30
Armin Kuster [Fri, 3 Nov 2017 19:54:46 +0000 (12:54 -0700)] 
libpcre2: update to 10.30

LICENSE files changed:
Amend licence to relax its conditions for chains of binary distributions.

removed included patches

includes CVE-2017-8399

Signed-off-by: Armin Kuster <akuster@mvista.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
7 years agonss: update to 3.33.0
Armin Kuster [Fri, 3 Nov 2017 19:54:45 +0000 (12:54 -0700)] 
nss: update to 3.33.0

https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.33_release_notes

* TLS compression is no longer supported. API calls that attempt to enable compression are accepted without failure. However, TLS compression will remain disabled.
* This version of NSS uses a formally verified implementation of Curve25519 on 64-bit systems.
* The compile time flag DISABLE_ECC has been removed.
* When NSS is compiled without NSS_FORCE_FIPS=1 startup checks are not performed anymore.
* Fixes CVE-2017-7805, a potential use-after-free in TLS 1.2 server when verifying client authentication

https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.32_release_notes
The Websites (TLS/SSL) trust bit was turned off for the following root certificates.

*    CN = AddTrust Class 1 CA Root
        SHA-256 Fingerprint: 8C:72:09:27:9A:C0:4E:27:5E:16:D0:7F:D3:B7:75:E8:01:54:B5:96:80:46:E3:1F:52:DD:25:76:63:24:E9:A7
*    CN = Swisscom Root CA 2
        SHA-256 Fingerprint: F0:9B:12:2C:71:14:F4:A0:9B:D4:EA:4F:4A:99:D5:58:B4:6E:4C:25:CD:81:14:0D:29:C0:56:13:91:4C:38:41

The following CA certificates were Removed:

*    CN = AddTrust Public CA Root
        SHA-256 Fingerprint: 07:91:CA:07:49:B2:07:82:AA:D3:C7:D7:BD:0C:DF:C9:48:58:35:84:3E:B2:D7:99:60:09:CE:43:AB:6C:69:27
*    CN = AddTrust Qualified CA Root
        SHA-256 Fingerprint: 80:95:21:08:05:DB:4B:BC:35:5E:44:28:D8:FD:6E:C2:CD:E3:AB:5F:B9:7A:99:42:98:8E:B8:F4:DC:D0:60:16
*    CN = China Internet Network Information Center EV Certificates Root
        SHA-256 Fingerprint: 1C:01:C6:F4:DB:B2:FE:FC:22:55:8B:2B:CA:32:56:3F:49:84:4A:CF:C3:2B:7B:E4:B0:FF:59:9F:9E:8C:7A:F7
*    CN = CNNIC ROOT
        SHA-256 Fingerprint: E2:83:93:77:3D:A8:45:A6:79:F2:08:0C:C7:FB:44:A3:B7:A1:C3:79:2C:B7:EB:77:29:FD:CB:6A:8D:99:AE:A7
*    CN = ComSign Secured CA
        SHA-256 Fingerprint: 50:79:41:C7:44:60:A0:B4:70:86:22:0D:4E:99:32:57:2A:B5:D1:B5:BB:CB:89:80:AB:1C:B1:76:51:A8:44:D2
*    CN = GeoTrust Global CA 2
        SHA-256 Fingerprint: CA:2D:82:A0:86:77:07:2F:8A:B6:76:4F:F0:35:67:6C:FE:3E:5E:32:5E:01:21:72:DF:3F:92:09:6D:B7:9B:85
*    CN = Secure Certificate Services
        SHA-256 Fingerprint: BD:81:CE:3B:4F:65:91:D1:1A:67:B5:FC:7A:47:FD:EF:25:52:1B:F9:AA:4E:18:B9:E3:DF:2E:34:A7:80:3B:E8
*    CN = Swisscom Root CA 1
        SHA-256 Fingerprint: 21:DB:20:12:36:60:BB:2E:D4:18:20:5D:A1:1E:E7:A8:5A:65:E2:BC:6E:55:B5:AF:7E:78:99:C8:A2:66:D9:2E
*    CN = Swisscom Root EV CA 2
        SHA-256 Fingerprint: D9:5F:EA:3C:A4:EE:DC:E7:4C:D7:6E:75:FC:6D:1F:F6:2C:44:1F:0F:A8:BC:77:F0:34:B1:9E:5D:B2:58:01:5D
*    CN = Trusted Certificate Services
        SHA-256 Fingerprint: 3F:06:E5:56:81:D4:96:F5:BE:16:9E:B5:38:9F:9F:2B:8F:F6:1E:17:08:DF:68:81:72:48:49:CD:5D:27:CB:69
*    CN = UTN-USERFirst-Hardware
        SHA-256 Fingerprint: 6E:A5:47:41:D0:04:66:7E:ED:1B:48:16:63:4A:A3:A7:9E:6E:4B:96:95:0F:82:79:DA:FC:8D:9B:D8:81:21:37
*    CN = UTN-USERFirst-Object
        SHA-256 Fingerprint: 6F:FF:78:E4:00:A7:0C:11:01:1C:D8:59:77:C4:59:FB:5A:F9:6A:3D:F0:54:08:20:D0:F4:B8:60:78:75:E5:8F

Signed-off-by: Armin Kuster <akuster@mvista.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
7 years agoxf86-input-libinput: update to 0.26.0
Armin Kuster [Fri, 3 Nov 2017 19:54:44 +0000 (12:54 -0700)] 
xf86-input-libinput: update to 0.26.0

Signed-off-by: Armin Kuster <akuster@mvista.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
7 years agolibxfont2: update to 2.0.2
Armin Kuster [Fri, 3 Nov 2017 19:54:43 +0000 (12:54 -0700)] 
libxfont2: update to 2.0.2

A collection of minor fixes since 2.0.1, including CVEs 2017-13720
and 2017-13722.

Signed-off-by: Armin Kuster <akuster@mvista.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
7 years agoxorg-xserver: update to 1.19.5
Armin Kuster [Fri, 3 Nov 2017 19:54:42 +0000 (12:54 -0700)] 
xorg-xserver: update to 1.19.5

Remove patches that are included in 1.19.4

[ANNOUNCE] xorg-server 1.19.4
https://lists.x.org/archives/xorg-devel/2017-October/054839.html

xkb: Handle xkb formated string output safely (CVE-2017-13723)
Xext/shm: Validate shmseg resource id (CVE-2017-13721)

[ANNOUNCE] xorg-server 1.19.5
https://lists.x.org/archives/xorg-announce/2017-October/002814.html
One regression fix since 1.19.4 (mea culpa), and fixes for CVEs 2017-
12176 through 2017-12187. C is a terrible language, please stop writing
code in it.

Signed-off-by: Armin Kuster <akuster@mvista.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
7 years agolibxfont: update to 1.5.3
Armin Kuster [Fri, 3 Nov 2017 19:54:41 +0000 (12:54 -0700)] 
libxfont: update to 1.5.3

Check for end of string in PatternMatch (CVE-2017-13720)
pcfGetProperties: Check string boundaries (CVE-2017-13722)

https://lists.x.org/archives/xorg-announce/2017-October/002816.html

Signed-off-by: Armin Kuster <akuster@mvista.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
7 years agonspr: update to 4.17
Armin Kuster [Fri, 3 Nov 2017 19:54:40 +0000 (12:54 -0700)] 
nspr: update to 4.17

Signed-off-by: Armin Kuster <akuster@mvista.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
7 years agolibxkbcommon: update to 0.7.2
Armin Kuster [Fri, 3 Nov 2017 19:54:39 +0000 (12:54 -0700)] 
libxkbcommon: update to 0.7.2

Signed-off-by: Armin Kuster <akuster@mvista.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
7 years agoxkeyboard-config: upgrade to 2.22
Armin Kuster [Fri, 3 Nov 2017 19:54:38 +0000 (12:54 -0700)] 
xkeyboard-config: upgrade to 2.22

Signed-off-by: Armin Kuster <akuster@mvista.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
7 years agolibxres: upgrading to 1.2.0
Armin Kuster [Fri, 3 Nov 2017 19:54:37 +0000 (12:54 -0700)] 
libxres: upgrading to 1.2.0

https://lists.x.org/archives/xorg-announce/2017-October/002812.html
integer overflow in XResQueryClients() [CVE-2013-1988 1/2]
integer overflow in XResQueryClientResources() [CVE-2013-1988 2/2]

Signed-off-by: Armin Kuster <akuster@mvista.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
7 years agotzdata: update 2017c
Armin Kuster [Fri, 3 Nov 2017 19:54:36 +0000 (12:54 -0700)] 
tzdata: update 2017c

LICENSE changed do to rewording
https://github.com/eggert/tz/commit/7097a652778d35acf747d14f8bf7b3ced479bbc0#diff-9879d6db96fd29134fc802214163b95a

  Briefly:
  Northern Cyprus switches from +03 to +02/+03 on 2017-10-29.
  Fiji ends DST 2018-01-14, not 2018-01-21.
  Namibia switches from +01/+02 to +02 on 2018-04-01.
  Sudan switches from +03 to +02 on 2017-11-01.
  Tonga likely switches from +13/+14 to +13 on 2017-11-05.
  Turks & Caicos switches from -04 to -05/-04 on 2018-11-04.
  A new file tzdata.zi now holds a small text copy of all data.
  The zic input format has been regularized slightly.

  Changes to future time stamps

    Northern Cyprus has decided to resume EU rules starting
    2017-10-29, thus reinstituting winter time.

    Fiji ends DST 2018-01-14 instead of the 2018-01-21 previously
    predicted.  (Thanks to Dominic Fok.)  Adjust future predictions
    accordingly.

    Namibia will switch from +01 with DST to +02 all year on
    2017-09-03 at 02:00.  This affects UT offsets starting 2018-04-01
    at 02:00.  (Thanks to Steffen Thorsen.)

    Sudan will switch from +03 to +02 on 2017-11-01.  (Thanks to Ahmed
    Atyya and Yahia Abdalla.)  South Sudan is not switching, so
    Africa/Juba is no longer a link to Africa/Khartoum.

    Tonga has likely ended its experiment with DST, and will not
    adjust its clocks on 2017-11-05.  Although Tonga has not announced
    whether it will continue to observe DST, the IATA is assuming that
    it will not.  (Thanks to David Wade.)

    Turks & Caicos will switch from -04 all year to -05 with US DST on
    2018-03-11 at 03:00.  This affects UT offsets starting 2018-11-04
    at 02:00.  (Thanks to Steffen Thorsen.)

  Changes to past time stamps

    Namibia switched from +02 to +01 on 1994-03-21, not 1994-04-03.
    (Thanks to Arthur David Olson.)

    Detroit did not observe DST in 1967.

    Use railway time for Asia/Kolkata before 1941, by switching to
    Madras local time (UT +052110) in 1870, then to IST (UT +0530) in
    1906.  Also, treat 1941-2's +0630 as DST, like 1942-5.

    Europe/Dublin's 1946 and 1947 fallback transitions occurred at
    02:00 standard time, not 02:00 DST.  (Thanks to Michael Deckers.)

    Pacific/Apia and Pacific/Pago_Pago switched from Antipodean to
    American time in 1892, not 1879.  (Thanks to Michael Deckers.)

    Adjust the 1867 transition in Alaska to better reflect the
    historical record, by changing it to occur on 1867-10-18 at 15:30
    Sitka time rather than at the start of 1867-10-17 local time.
    Although strictly speaking this is accurate only for Sitka,
    the rest of Alaska's blanks need to be filled in somehow.

    Fix off-by-one errors in UT offsets for Adak and Nome before 1867.
    (Thanks to Michael Deckers.)

    Add 7 s to the UT offset in Asia/Yangon before 1920.

  Changes to zone names

    Remove Canada/East-Saskatchewan from the 'backward' file, as it
    exceeded the 14-character limit and was an unused misnomer anyway.

Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
7 years agotzcode-native: update to 2017c
Armin Kuster [Fri, 3 Nov 2017 19:54:35 +0000 (12:54 -0700)] 
tzcode-native: update to 2017c

LICENSE changes do to rewording
https://github.com/eggert/tz/commit/7097a652778d35acf747d14f8bf7b3ced479bbc0#diff-9879d6db96fd29134fc802214163b95a

Backported to fixes from upstream too.

Changes to code

    zic and the reference runtime now reject multiple leap seconds
    within 28 days of each other, or leap seconds before the Epoch.
    As a result, support for double leap seconds, which was
    obsolescent and undocumented, has been removed.  Double leap
    seconds were an error in the C89 standard; they have never existed
    in civil timekeeping.  (Thanks to Robert Elz and Bradley White for
    noticing glitches in the code that uncovered this problem.)

    zic now warns about use of the obsolescent and undocumented -y
    option, and about use of the obsolescent TYPE field of Rule lines.

    zic now allows unambiguous abbreviations like "Sa" and "Su" for
    weekdays; formerly it rejected them due to a bug.  Conversely, zic
    no longer considers non-prefixes to be abbreviations; for example,
    it no longer accepts "lF" as an abbreviation for "lastFriday".
    Also, zic warns about the undocumented usage with a "last-"
    prefix, e.g., "last-Fri".

    Similarly, zic now accepts the unambiguous abbreviation "L" for
    "Link" in ordinary context and for "Leap" in leap-second context.
    Conversely, zic no longer accepts non-prefixes such as "La" as
    abbreviations for words like "Leap".

    zic no longer accepts leap second lines in ordinary input, or
    ordinary lines in leap second input.  Formerly, zic sometimes
    warned about this undocumented usage and handled it incorrectly.

    The new macro HAVE_TZNAME governs whether the tzname external
    variable is exported, instead of USG_COMPAT.  USG_COMPAT now
    governs only the external variables "timezone" and "daylight".
    This change is needed because the three variables are not in the
    same category: although POSIX requires tzname, it specifies the
    other two variables as optional.  Also, USG_COMPAT is now 1 or 0:
    if not defined, the code attempts to guess it from other macros.

    localtime.c and difftime.c no longer require stdio.h, and .c files
    other than zic.c no longer require sys/wait.h.

    zdump.c no longer assumes snprintf.  (Reported by Jonathan Leffler.)

    Calculation of time_t extrema works around a bug in GCC 4.8.4
    (Reported by Stan Shebs and Joseph Myers.)

    zic.c no longer mistranslates formats of line numbers in non-English
    locales.  (Problem reported by Benno Schulenberg.)

    Several minor changes have been made to the code to make it a
    bit easier to port to MS-Windows and Solaris.  (Thanks to Kees
    Dekker for reporting the problems.)

  Changes to documentation and commentary

    The two new files 'theory.html' and 'calendars' contain the
    contents of the removed file 'Theory'.  The goal is to document
    tzdb theory more accessibly.

    The zic man page now documents abbreviation rules.

    tz-link.htm now covers how to apply tzdata changes to clients.
    (Thanks to Jorge Fábregas for the AIX link.)  It also mentions MySQL.

    The leap-seconds.list URL has been updated to something that is
    more reliable for tzdb.  (Thanks to Tim Parenti and Brian Inglis.)

Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
7 years agolib/oe/sstatesig: fix wildcard matching wrong task signature files
Paul Eggleton [Fri, 3 Nov 2017 03:16:10 +0000 (16:16 +1300)] 
lib/oe/sstatesig: fix wildcard matching wrong task signature files

With a '*' as a wildcard for the signature here we can also match a
portion of the task name with the result that we may match a sigdata
file for the wrong task. Luckily the signature is always the same
length - 32 characters - so we can simply use 32 '?' characters instead.
(A regex would have been another alternative, but the wildcard should be
effective and I felt like a regex would complicate the code more than
this solution).

Fixes [YOCTO #11763].

Signed-off-by: Paul Eggleton <paul.eggleton@linux.intel.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
7 years agobuildhistory: enable committing history by default
Paul Eggleton [Fri, 3 Nov 2017 03:16:11 +0000 (16:16 +1300)] 
buildhistory: enable committing history by default

The most common usage for buildhistory is with commits enabled so that
you actually collect history, rather than just keeping a snapshot of the
most recent build state, therefore default BUILDHISTORY_COMMIT to "1".
This really ought to have been the default in the beginning, I can't
really explain why it wasn't.

Signed-off-by: Paul Eggleton <paul.eggleton@linux.intel.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
7 years agonativesdk-packagegroup-sdk-host: remove redundant LICENSE
Robert Berger [Mon, 30 Oct 2017 17:46:21 +0000 (19:46 +0200)] 
nativesdk-packagegroup-sdk-host: remove redundant LICENSE

*) packagegroup class sets a default value for LICENSE
*) usually packagegroups don't contain a LICENSE
   and if they do it's many times a copy/paste and doesn't
   reflect the license of the packages included in the
   packagegroup

Signed-off-by: Robert Berger <robert.berger@ReliableEmbeddedSystems.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
7 years agoruby: remove spurious db build dependency
Ross Burton [Wed, 1 Nov 2017 09:57:53 +0000 (09:57 +0000)] 
ruby: remove spurious db build dependency

The dbm module uses gdbm by default which is also a build dependency.

Signed-off-by: Ross Burton <ross.burton@intel.com>
7 years agopython3: remove obsolete db dependency
Ross Burton [Tue, 31 Oct 2017 23:32:41 +0000 (23:32 +0000)] 
python3: remove obsolete db dependency

The bsddb module was removed in Python 3 and the dbm module doesn't support
Berkeley DB as an option, so this build dependency can be removed.

Signed-off-by: Ross Burton <ross.burton@intel.com>
7 years agooeqa/selftest/runtime: force empty root password, use helpers to access qemu
Ross Burton [Tue, 31 Oct 2017 20:59:09 +0000 (20:59 +0000)] 
oeqa/selftest/runtime: force empty root password, use helpers to access qemu

7 years agoqemurunner: fix bad indentation in serial login
Ross Burton [Fri, 20 Oct 2017 16:24:04 +0000 (17:24 +0100)] 
qemurunner: fix bad indentation in serial login

7 years agocmake: Upgrade to 3.9.3 release
Otavio Salvador [Wed, 18 Oct 2017 11:17:07 +0000 (09:17 -0200)] 
cmake: Upgrade to 3.9.3 release

This upgrades CMake from 3.8.2 to 3.9.3 release. The Copyright.txt
file checksum change was due the addition of a new contributor on the
contributors list.

Signed-off-by: Otavio Salvador <otavio@ossystems.com.br>
Signed-off-by: Ross Burton <ross.burton@intel.com>