[master,scarthgap] libstd-rs,rust-cross-canadian: set CVE_PRODUCT to rust

From: Peter Marko <peter.marko@siemens.com>

These recipes come from rust sources and CVEs are reported for them
under rust-lang:rust vendor:product touple.
Especially libstd-rs needs correct CVE_PRODUCT as is it installed on
target devices (being statically linked to rust compiled binaries).

before:
cargo: CVE_PRODUCT="cargo"
cargo-c-native: CVE_PRODUCT="cargo-c"
libstd-rs: CVE_PRODUCT="libstd-rs"
rust: CVE_PRODUCT="rust"
rust-cross-canadian: CVE_PRODUCT="rust-cross-canadian-<arch>"
rust-llvm: CVE_PRODUCT="rust-llvm"

after:
cargo: CVE_PRODUCT="cargo"
cargo-c-native: CVE_PRODUCT="cargo-c"
libstd-rs: CVE_PRODUCT="rust"
rust: CVE_PRODUCT="rust"
rust-cross-canadian-x86-64: CVE_PRODUCT="rust"
rust-llvm: CVE_PRODUCT="rust-llvm"

Product for rust-llvm is uncertain and, should be handled in another
commit if it is desired to align it, too.

sqlite> select vendor, product, count(product) from products where vendor="rust-lang" group by product;
rust-lang|async-h1|2
rust-lang|cargo|5
rust-lang|future-utils|2
rust-lang|futures-task|2
rust-lang|mdbook|1
rust-lang|regex|2
rust-lang|rsa|2
rust-lang|rust|45
rust-lang|socket2|1

Signed-off-by: Peter Marko <peter.marko@siemens.com>
---
 meta/recipes-devtools/rust/libstd-rs_1.75.0.bb     | 2 ++
 meta/recipes-devtools/rust/rust-cross-canadian.inc | 1 +
 2 files changed, 3 insertions(+)

Gentle ping for scrathgap

> -----Original Message-----
> From: Marko, Peter (ADV D EU SK BFS1) <Peter.Marko@siemens.com>
> Sent: Sunday, July 14, 2024 11:36
> To: openembedded-core@lists.openembedded.org
> Cc: Marko, Peter (ADV D EU SK BFS1) <Peter.Marko@siemens.com>
> Subject: [OE-core][master][scarthgap][PATCH] libstd-rs,rust-cross-canadian:
> set CVE_PRODUCT to rust
> 
> From: Peter Marko <peter.marko@siemens.com>
> 
> These recipes come from rust sources and CVEs are reported for them under
> rust-lang:rust vendor:product touple.
> Especially libstd-rs needs correct CVE_PRODUCT as is it installed on target
> devices (being statically linked to rust compiled binaries).
> 
> before:
> cargo: CVE_PRODUCT="cargo"
> cargo-c-native: CVE_PRODUCT="cargo-c"
> libstd-rs: CVE_PRODUCT="libstd-rs"
> rust: CVE_PRODUCT="rust"
> rust-cross-canadian: CVE_PRODUCT="rust-cross-canadian-<arch>"
> rust-llvm: CVE_PRODUCT="rust-llvm"
> 
> after:
> cargo: CVE_PRODUCT="cargo"
> cargo-c-native: CVE_PRODUCT="cargo-c"
> libstd-rs: CVE_PRODUCT="rust"
> rust: CVE_PRODUCT="rust"
> rust-cross-canadian-x86-64: CVE_PRODUCT="rust"
> rust-llvm: CVE_PRODUCT="rust-llvm"
> 
> Product for rust-llvm is uncertain and, should be handled in another commit if
> it is desired to align it, too.
> 
> sqlite> select vendor, product, count(product) from products where
> sqlite> vendor="rust-lang" group by product;
> rust-lang|async-h1|2
> rust-lang|cargo|5
> rust-lang|future-utils|2
> rust-lang|futures-task|2
> rust-lang|mdbook|1
> rust-lang|regex|2
> rust-lang|rsa|2
> rust-lang|rust|45
> rust-lang|socket2|1
> 
> Signed-off-by: Peter Marko <peter.marko@siemens.com>
> ---
>  meta/recipes-devtools/rust/libstd-rs_1.75.0.bb     | 2 ++
>  meta/recipes-devtools/rust/rust-cross-canadian.inc | 1 +
>  2 files changed, 3 insertions(+)
> 
> diff --git a/meta/recipes-devtools/rust/libstd-rs_1.75.0.bb b/meta/recipes-
> devtools/rust/libstd-rs_1.75.0.bb
> index 5fc6fb97bb..14161714f2 100644
> --- a/meta/recipes-devtools/rust/libstd-rs_1.75.0.bb
> +++ b/meta/recipes-devtools/rust/libstd-rs_1.75.0.bb
> @@ -15,6 +15,8 @@ S = "${RUSTSRC}/library/sysroot"
>  RUSTLIB_DEP = ""
>  inherit cargo
> 
> +CVE_PRODUCT = "rust"
> +
>  DEPENDS:append:libc-musl = " libunwind"
>  # rv32 does not have libunwind ported yet
>  DEPENDS:remove:riscv32 = "libunwind"
> diff --git a/meta/recipes-devtools/rust/rust-cross-canadian.inc
> b/meta/recipes-devtools/rust/rust-cross-canadian.inc
> index f962437d6b..c34b839d15 100644
> --- a/meta/recipes-devtools/rust/rust-cross-canadian.inc
> +++ b/meta/recipes-devtools/rust/rust-cross-canadian.inc
> @@ -1,5 +1,6 @@
>  SUMMARY = "Rust compiler and runtime libaries (cross-canadian for
> ${TARGET_ARCH} target)"
>  PN = "rust-cross-canadian-${TRANSLATED_TARGET_ARCH}"
> +CVE_PRODUCT = "rust"
> 
>  inherit rust-target-config
>  inherit rust-common
> --
> 2.30.2