poky/scripts/lib/recipetool
Tim Orling 78ef0313ee recipetool: pypi: do not clobber SRC_URI checksums
The pypi change:
"85a2a6f68af recipetool: create_buildsys_python: add pypi support"
deleted all the SRC_URI variables, including the SRC_URI checksums.
These are not generated by the pypi.bbclass (how could they be trusted?)

Without the checksum(s), we are vulnerable to a man-in-the-middle attack
and zero checks on the validity of the downloaded tarball from pypi.org.

Fix by only setting S and SRC_URI to None.

(From OE-Core rev: 560181a52111569f7bc57b09139b42510e0d0325)

Signed-off-by: Tim Orling <tim.orling@konsulko.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-12-09 19:17:11 +00:00
..
__init__.py scripts/recipetool: Add a recipe auto-creation script 2014-12-23 10:18:15 +00:00
append.py recipetool: appendsrcfile(s): add a mode to update the recipe itself 2023-12-06 22:55:50 +00:00
create_buildsys_python.py recipetool: pypi: do not clobber SRC_URI checksums 2023-12-09 19:17:11 +00:00
create_buildsys.py recipetool: extend curl detection when creating recipes 2021-12-03 23:37:16 +00:00
create_go.py recipetool: Add handler to create go recipes 2023-11-06 16:41:11 +00:00
create_kernel.py meta/lib+scripts: Convert to SPDX license headers 2019-05-09 16:31:55 +01:00
create_kmod.py Convert to new override syntax 2021-08-02 15:44:10 +01:00
create_npm.py recipetool: create: npm: Add support to handle peer dependencies 2023-06-29 11:10:39 +01:00
create.py recipetool: create: Only include the expected SRC_URI checksums 2023-12-08 16:58:34 +00:00
edit.py recipetool: Fix list concatenation when using edit 2020-06-15 14:53:45 +01:00
licenses.csv recipetool/devtool: Further SPDX identifier cleanups 2022-03-02 18:43:24 +00:00
newappend.py meta/lib+scripts: Convert to SPDX license headers 2019-05-09 16:31:55 +01:00
setvar.py recipetool/devtool: Ensure server knows about changed files 2023-09-18 11:35:38 +01:00