Commit Graph

70801 Commits

Author SHA1 Message Date
Wang Mingyu
3ae72c460a python3-hatchling: upgrade 1.17.0 -> 1.18.0
Changed:
--------
  Drop support for Python 3.7

Added:
--------
  Update the list of directories that are always excluded for builds

Fixed:
-------
  Fix dev mode when the project has symlinks and file inclusion is defined with the packages or only-include options
  Change the name of generated PTH files for dev mode so they come first lexicographically and therefore load first

(From OE-Core rev: 3fee779a6083ed39c31f1fb7d6486ab3921246d4)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-06-28 07:56:33 +01:00
Wang Mingyu
0fe65d988e xorgproto: upgrade 2022.2 -> 2023.2
License-Update: remove " All rights reserved." from Copyright

(From OE-Core rev: 00ef3027fc2dd26399f7f018c28a99fde06fe67f)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-06-28 07:56:33 +01:00
Wang Mingyu
055611248e python3-typing-extensions: upgrade 4.6.2 -> 4.6.3
License-Update:Sync LICENSE with CPython

Changelog:
==========
- Fix a regression introduced in v4.6.0 in the implementation of runtime-checkable protocols.
- Sync the repository's LICENSE file with that of CPython. typing_extensions
  is distributed under the same license as CPython itself.
- Skip a problematic test on Python 3.12.0b1. The test fails on 3.12.0b1 due
  to a bug in CPython, which will be fixed in 3.12.0b2. The typing_extensions
  test suite now passes on 3.12.0b1.

(From OE-Core rev: ad3c337bc66b8022f71a9775a8b1b1b234d9c1c3)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-06-28 07:56:33 +01:00
Wang Mingyu
97237356be python3-numpy: upgrade 1.24.3 -> 1.25.0
License-Update: Copyright year updated to 2023.

Changelog:
===========
    Support for MUSL, there are now MUSL wheels.
    Support the Fujitsu C/C++ compiler.
    Object arrays are now supported in einsum
    Support for inplace matrix multiplication (@=).

(From OE-Core rev: bf7f1dbb504c57c756f8c48411aa5ac13ac5a1c3)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-06-28 07:56:33 +01:00
Wang Mingyu
26e3579ccb mesa: upgrade 23.1.1 -> 23.1.3
(From OE-Core rev: 5e720f05d308051d16d7fc6651bd978de47e012b)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-06-28 07:56:33 +01:00
Wang Mingyu
bf5d3edcf0 ccache: upgrade 4.8.1 -> 4.8.2
License-Update:
  BLAKE3 updated to 1.4.0
  cpp-httplib updated to 0.12.6

Changelog:
==========
Fixed parsing of Windows drive letter in file URLs for remote storage.
Fixed a bug affecting depend mode with MSVC.
Ccache no longer passes -v to the preprocessor. This improves preprocessor mode hit rate when -v is on the compiler command line.
Made --trim-max-size accept 0 for no limit.

(From OE-Core rev: 8d78ab10622b6ae9117308051f5721d645000087)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-06-28 07:56:33 +01:00
Wang Mingyu
caa560be7e nghttp2: upgrade 1.53.0 -> 1.54.0
Changelog:
==========
  nghttpx: Consistent error handling and use of high-level API
  h2load: Fix http3 upload stall
  h2load: Use std::chrono::steady_clock for quic timestamp
  Avoid ev_now by @tatsuhiro-t in #1907
  Remove unused macro bswap64
  Bump ngtcp2 and nghttp3
  Bump libbpf to v1.2.0
  Avoid copies

(From OE-Core rev: f3b440805cafa525bed0e8512f5fcaa9e1359bfb)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-06-28 07:56:33 +01:00
Wang Mingyu
e614c7822d nettle: upgrade 3.9 -> 3.9.1
Bug fixes:
==========
* Fix OCB loop for processing messages of size 272 bytes or
  larger.
* Fix alignment bug in the new x86_64 non-pclmul assembly
  implementation of ghash.
* Fix build-time memory leak in eccdata.

(From OE-Core rev: 7595367022b2a0226a3996bf2e6152a452e92715)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-06-28 07:56:33 +01:00
Wang Mingyu
96d1cfca0c lttng-ust: upgrade 2.13.5 -> 2.13.6
Changelog:
===========
* Fix: segmentation fault on filter interpretation in "switch" mode
* Fix: `ip` context is expressed as a base-10 field
* Fix: c99: use __asm__ __volatile__
* Fix: c99: static assert: clang build fails due to multiple typedef
* Fix: Reevaluate LTTNG_UST_TRACEPOINT_DEFINE each time tracepoint.h is included
* Fix: trace events in C++ constructors/destructors
* Fix: trace events in C constructors/destructors
* Fix: use unaligned pointer accesses for lttng_inline_memcpy

(From OE-Core rev: 656470b4b0db579308d218d1ece77bdacd168d14)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-06-28 07:56:33 +01:00
Wang Mingyu
8c0d28fd1f libx11: upgrade 1.8.5 -> 1.8.6
Changelog:
==========
InitExt.c: Add bounds checks for extension request, event, & error codes
Fixes CVE-2023-3138

(From OE-Core rev: 49b74259b196454d22fcca8b8ecc1c0d41487285)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-06-28 07:56:33 +01:00
Wang Mingyu
ab410170ec libtraceevent: upgrade 1.7.2 -> 1.7.3
(From OE-Core rev: cc1b69a102d0fa42b062d7b08ff2684f7dc1f701)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-06-28 07:56:33 +01:00
Wang Mingyu
1740da35a2 libsdl2: upgrade 2.26.5 -> 2.28.0
(From OE-Core rev: acba05b62049b4c82cc2871771117c6b2f1241c4)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-06-28 07:56:33 +01:00
Wang Mingyu
48bfad9595 libmd: upgrade 1.0.4 -> 1.1.0
(From OE-Core rev: a907f4b704367e85456616de060d30fb023589dd)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-06-28 07:56:33 +01:00
Wang Mingyu
b17eee0241 libksba: upgrade 1.6.3 -> 1.6.4
Changelog:
Correctly detect CMS write errors.

(From OE-Core rev: 0296cf63007542c1cb209a4288be1c82aa2ba843)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-06-28 07:56:33 +01:00
Wang Mingyu
d79211c866 libassuan: upgrade 2.5.5 -> 2.5.6
Changelog:
===========
 * Fix logging of confidential data.  [rA0fc31770fa]
 * Fix memory wiping.  [T5977]
 * Fix macOS build problem.  [T5440,T5610]
 * Upgrade autoconf stuff.

(From OE-Core rev: 90126be6dc32170c08eb90223b6a6cc06c2133ce)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-06-28 07:56:33 +01:00
Wang Mingyu
157267f875 kbd: upgrade 2.5.1 -> 2.6.0
(From OE-Core rev: d0137189d7c38e63c57e313b1de341a49edf20dc)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-06-28 07:56:33 +01:00
Wang Mingyu
9d7b581b33 gstreamer1.0: upgrade 1.22.3 -> 1.22.4
Bugfixes:
==========
-   Security fixes for flacparse, dvdspu, and subparse
-   d3d11videosink: Fix error on pause and play
-   decklink: Correctly handle SDK strings on macOS and free strings
    after usage on Linux
-   filesink: Fix buffered mode writing of buffer lists and buffers with
    multiple memories
-   gldownload: handle passthrough without a critical
-   h265parse: Fix framerate handling regression
-   oggdemux: vp8 fixes
-   mp4mux, qtmux, qtdemux: Opus audio mapping fixes
-   pngdec: Fix wrong colours output from 16bit RGB images
-   ptp clock: Work around ptpd bug in default configuration
-   srtpdec: fix critical warnings on shutdown
-   v4l2src: fix support for bayer format
-   v4l2videoenc: support force-keyframe event in v4l2 encoder
-   vtenc: apply DTS offset to ensure DTS <= PTS
-   gst-python: allow more functions to be called before gst_init()
-   cerbero: fix vaapi variant; add qt6 build on windows; ensure errors
    on unguarded use of new APIs, require macOS 10.13
-   packages: ship codecalpha, rtponvif, dvbsubenc, switchbin,
    videosignal plugins; fix pango crash on 32-bit windows
-   various bug fixes, memory leak fixes, and other stability and
    reliability improvements

(From OE-Core rev: d7bf88db7f2f55540bf7891474a3a28f5681ddbb)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-06-28 07:56:33 +01:00
Wang Mingyu
31f99698b5 freetype: upgrade 2.13.0 -> 2.13.1
Changelog:
===========
* docs/VERSION.TXT: Add entry for version 2.13.1.
* docs/CHANGES: Updated.
* docs/release, docs/README, builds/macs/README: Updated.
* README, src/base/ftver.rc, builds/windows/vc2010/index.html,
builds/windows/visualc/index.html, builds/windows/visualce/index.html,
builds/wince/vc2005-ce/index.html, builds/wince/vc2008-ce/index.html,
docs/freetype-config.1: s/2.13.0/2.13/1/, s/2130/2131/.
* include/freetype/freetype.h (FREETYPE_PATCH): Set to 1.
* builds/unix/configure.raw (version_info): Set to 26:0:20.
* CMakeLists.txt (VERSION_PATCH): Set to 1.
* subprojects/libpng.wrap, subprojects/zlib.wrap, subprojects/dlg: Updated.

(From OE-Core rev: 4447b2db3166bd8c76271f0293931392572c6977)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-06-28 07:56:33 +01:00
Alexander Kanavin
681b43a6a7 libssh2: update 1.10.0 -> 1.11.0
License-update: copyright years

Enable static libs as some tests need them.

Fix up ptests; the set being run is the same.
test_simple is statically linked, hence DISABLE_STATIC is overriden.

(From OE-Core rev: c3c5b74e428a13335f8c09bf4cc74dd009c8bc06)

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-06-27 16:23:40 +01:00
Alexander Kanavin
2475c80201 libproxy: update 0.4.18 -> 0.5.2
License-update: formatting, years

Upstream has completely overhauled the build system
(cmake -> meson) and available options. Add the most
important ones that require external dependencies;
there's plenty more if someone finds them useful.

(From OE-Core rev: bbcfef76c3d412f1a79c77f8712aff36190bf7fa)

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-06-27 16:23:40 +01:00
Alexander Kanavin
fec3664012 libproxy: fetch from git
Upstream no longer provides tarballs for newer versions.

(From OE-Core rev: e971f27cb4ad78b4df3c3bca2948f3cb60d0d5cf)

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-06-27 16:23:40 +01:00
Alexander Kanavin
0eeda887d8 xtrans: update 1.4.0 -> 1.5.0
License-update: removal of 'all rights reserved' sentences.

MIT & MIT was an outcome of mass-cleanup of licenses, so it can
be just MIT.

tar.bz2 has been replaced with .tar.xz which is the default.

(From OE-Core rev: a69f1403092cf7f857e8eb0a24a2173420072100)

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-06-27 16:23:40 +01:00
Alexander Kanavin
1406bd514b libdmx: update 1.1.4 -> 1.1.5
Upstream has migrated to tar.xz from tar.bz2, so default works now.

(From OE-Core rev: aea59e0daba5320b55aa62671e60b67bb5e3602f)

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-06-27 16:23:40 +01:00
Alexander Kanavin
d32219dc05 weston: update 11.0.1 -> 12.0.1
Default to launcher-seatd always, as launcher-logind option has been deprecated.

xcb-util-cursor is an additional dependency of xwayland support.

(From OE-Core rev: be7da75827b4ffee3a243f977faad429dd9fa21c)

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-06-27 16:23:40 +01:00
Alexander Kanavin
bbe2fd33e9 xcb-util-cursor: add a recipe from meta-oe
This is a requirement of weston 12.x when xwayland is enabled.

(From OE-Core rev: 4f6a7d77dd0fed8b13883f30a58ff6e0abe5601d)

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-06-27 16:23:40 +01:00
Alexander Kanavin
e2c2ce47f7 vulkan-validation-layers: update 1.3.243 -> 1.3.250
Backport a patch to unbreak cross-builds.

(From OE-Core rev: aa9c8b31f681f4a97fd1bdaf4f43d05aef5a403d)

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-06-27 16:23:40 +01:00
Alexander Kanavin
cd0b19d626 librsvg: update 2.56.0 -> 2.56.1
Drop 0001-system-deps-src-lib.rs-do-not-probe-into-harcoded-li.patch
as upstream fixed the issue.

(From OE-Core rev: f4d9dc2fb3ff0370917c37f61a46d47503d94420)

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-06-27 16:23:40 +01:00
Alexander Kanavin
084ef1d41a libpam: update 1.5.2 -> 1.5.3
(From OE-Core rev: ddb5e0f8a2cc7c48e1fb53b665e2fd5ed263bb19)

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-06-27 16:23:40 +01:00
Alexander Kanavin
45ff515d34 shadow: remove dependency on pam-plugin-lastlog
This item has been deprecated in pam 1.5.3 and is no longer
built by default:
https://github.com/linux-pam/linux-pam/blob/master/NEWS

(From OE-Core rev: 04f3c3e335bf5e7c3a12ccc97fda9a8c214135d0)

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-06-27 16:23:40 +01:00
Alexander Kanavin
f965880f7f diffutils: update 3.9 -> 3.10
Remove the comment addition from the patch body, as it
increases likelyhood of rebase conflicts, and repeats what
the commit says.

(From OE-Core rev: 925155acc6922f7e9df2afa45e79ad1b2c57ba24)

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-06-27 16:23:40 +01:00
Alexander Kanavin
a9c96819fb python3: update 3.11.3 -> 3.11.4
(From OE-Core rev: f7f163ebe8c53de4314d04595c1fbcc7af2deccc)

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-06-27 16:23:40 +01:00
Alexander Kanavin
cc76ed0ea7 python3-cryptography-vectors: update 39.0.2 -> 41.0.1
Convert to python_setuptools_build_meta.

(From OE-Core rev: f1e607a870e31e345355876b4f4d386456f53d01)

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-06-27 16:23:40 +01:00
Alexander Kanavin
3ecfadb08a python3-cryptography: update 39.0.2 -> 41.0.1
Drop 0002-Cargo.toml-edition-2018-2021.patch
(issue fixed upstream)

License-Update: PSF licensed code removed as of
5e6476a4c6

(From OE-Core rev: 5c7ea0531bd099006c258b50c7b1747182123ae0)

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-06-27 16:23:40 +01:00
Alexander Kanavin
f01cd7aeaf rust-common.bbclass: move musl-specific linking fix from rust-source.inc
This needs to be done for any item that is linked under rustc,
and not just rust itself. Latest python-cryptography exposes the issue.

(From OE-Core rev: d3811228747590ea06e8d68be4785d45ec9c478f)

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-06-27 16:23:40 +01:00
Alexander Kanavin
fa8b714d7a cargo.bbclass: set up cargo environment in common do_compile
cargo_do_compile runs only if the recipe is built using cargo
as the top level tool. Some recipes hide usage of cargo inside setuptools
(or autoconf) and use do_compile definitions specific to those,
and so the environment isn't properly set up.

This was exposed by latest versions of python3-cryptography.

(From OE-Core rev: 9f4ff643a028d7f5670d80861f2ce19ca2d90faa)

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-06-27 16:23:40 +01:00
Alexander Kanavin
a16a8a1cfa lua: update 5.4.4 -> 5.4.6
License-Update: formatting

(From OE-Core rev: ae3cfdce20a88748c5ce1fcd46b34e2b88d4de9c)

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-06-27 16:23:40 +01:00
Alexander Kanavin
f3c0c3a35c ovmf: update 202302 -> 202305
(From OE-Core rev: 175927cedffbd9fe5815219984d8b3c4be56ad98)

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-06-27 16:23:40 +01:00
Alexander Kanavin
4bd6fb3488 libxml2: update 2.10.4 -> 2.11.4
Drop backports.

Drop libxml-64bit.patch
(no longer necessary).

(From OE-Core rev: 24860598ba8557ea3a145f249938ea411f1ef1d8)

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-06-27 16:23:40 +01:00
Alexander Kanavin
5401b2ea79 libxcrypt: upgrade 4.4.34 -> 4.4.35
(From OE-Core rev: 0f008ba868266eb4b8b4ca0f4e82fa1e72112995)

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-06-27 16:23:40 +01:00
Alejandro Hernandez Samaniego
2e28e1682e baremetal-helloworld: Fix race condition
There was a race condition during the Makefile execution in
between the assemble and compile targets, only the assemble
target had a dependency on creating the build directory.
If the compile target was executed first, an error was thrown
by bitbake since the build directory did not exist yet:

| Assembler messages:
| Fatal error: can't create build/hello_baremetal_aarch64.o:
  No such file or directory

Update the SRCREV to reflect the latest changes serializing
the makefile targets to avoid such race condition from happening.

[YOCTO #15146]

(From OE-Core rev: 9a999af292c7b3dd3bb7c0722cc31624c425f432)

Signed-off-by: Alejandro Enedino Hernandez Samaniego <alejandro@enedino.org>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-06-27 16:23:40 +01:00
Natasha Bailey
a4bd1f7282 tiff: backport a fix for CVE-2023-26965
Fixes a bug where a buffer was used after a potential reallocation.

(From OE-Core rev: 48b8945fa570edcdf1e19ed4a4ca81c4416f1a6a)

Signed-off-by: Natasha Bailey <nat.bailey@windriver.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-06-27 16:23:40 +01:00
Ross Burton
49eddee652 cve-update-nvd2-native: use exact times, don't truncate
When requesting updates in a specific range, use the actual current time
and database mtime instead of truncating to midnight, and explicitly set
the timezone to UTC so that NIST don't treat the timestamps as _their_ local
time when they're _our_ local time.

(From OE-Core rev: 9aa0ec37f5f74252588d2494a71c71a7d8e68df9)

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-06-27 16:23:40 +01:00
Ross Burton
9eadf45934 cve-update-nvd2-native: handle all configuration nodes, not just first
Some CVEs, such as CVE-2013-6629, list multiple configurations which are
vulnerable. The current JSON parser only considers the first
configuration.

Instead, consider every configuration. We don't yet handle the AND/OR
logical operators, but this is a step in the right direction.

(From OE-Core rev: e1bf4f6dd686055fe9a8bdcc3f739eac2807bae0)

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-06-27 16:23:40 +01:00
Ross Burton
cc28393285 cve-update-db-native: remove
The replacement cve-update-nvd2-native is working, so we can remove the
old recipe now.

(From OE-Core rev: 17eb07885147a06bf7bdd43f7869fe4411be80a0)

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-06-27 16:23:40 +01:00
Peter Hoyes
e08025fe4c bitbake: bitbake: Bootstrap pytest for self-tests
To support running the bitbake self-tests using pytest, add a
pytest.ini This enables these tests to be run using the following
command from the bitbake directory.

  pytest

For now, testpaths only includes the bitbake selftests.

Add a note to the README.

(Bitbake rev: 79bc14003000ab439262272dae6a99961f7c14c7)

Signed-off-by: Peter Hoyes <Peter.Hoyes@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-06-27 15:28:56 +01:00
Peter Hoyes
fd1d2c6dc7 bitbake: bitbake: tests: Use assertLogs to test logging output
By default, pytest captures all stdout and exposes it using its built-in
fixtures (capsys, caplog etc), so stdout does not support getvalue().

To support running tests using both unittest and pytest, use assertLogs
to capture logging and assert on the log output instead.

(Bitbake rev: 2d28caa01bab9540d2bbaf713ae3e5c563d003f5)

Signed-off-by: Peter Hoyes <Peter.Hoyes@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-06-27 15:28:56 +01:00
Peter Hoyes
8b0fc4850d bitbake: bitbake: tests/fetch: Set git config if not already set
git config returns an error code if user.email or user.name are not set,
so bb.process.run raises an ExecutionError, failing the test.

Improve the logic by catching the ExectionError and using this to set a
default value.

Change a direct invocation of 'git init' to use self.git_init so that
it follows the code path above.

Remove the related comment from the README now that git sets up the user
details automatically.

(Bitbake rev: 0c7079d0609a13713b890a9675abd9fba032f199)

Signed-off-by: Peter Hoyes <Peter.Hoyes@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-06-27 15:28:56 +01:00
Peter Hoyes
baf345598d bitbake: bitbake: tests/fetch: Rename assertRaisesRegexp to assertRaisesRegex
TestCase.assertRaisesRegexp was renamed to assertRaisesRegex in Python
3.2, so rename to fix a warning during test execution.

(Bitbake rev: 9bc2ca3197bff7a5ef6e0ece6bfef0cda68b808e)

Signed-off-by: Peter Hoyes <Peter.Hoyes@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-06-27 15:28:56 +01:00
Peter Hoyes
a7b74c0b73 bitbake: bitbake: tests/fetch: Mark TestTimeout as not a test suite
pytest test collection attempts to collect all classes containing
"Test". TestTimeout is not a test class so add the __test__ = False
attribute to indicate this.

(Bitbake rev: b5455b98093a3eaf122ebe3d29c3bef949fd2440)

Signed-off-by: Peter Hoyes <Peter.Hoyes@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-06-27 15:28:56 +01:00
Richard Purdie
bf65b87432 time64: Disable CFLAGS for strace
Until strace can handle the interface with glibc correctly with those flags,
disable there for now.

(From OE-Core rev: 5235ae1a14b71d42c1effff51e0289654bc7122a)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-06-27 15:26:31 +01:00