From patchwork Wed Nov 6 13:49:31 2024 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Steve Sakoman X-Patchwork-Id: 52103 X-Patchwork-Delegate: steve@sakoman.com Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 1B8DBD44D67 for ; Wed, 6 Nov 2024 13:49:47 +0000 (UTC) Received: from mail-pj1-f46.google.com (mail-pj1-f46.google.com [209.85.216.46]) by mx.groups.io with SMTP id smtpd.web11.45906.1730900985906012565 for ; Wed, 06 Nov 2024 05:49:45 -0800 Authentication-Results: mx.groups.io; dkim=pass header.i=@sakoman-com.20230601.gappssmtp.com header.s=20230601 header.b=bZZ11U9I; spf=softfail (domain: sakoman.com, ip: 209.85.216.46, mailfrom: steve@sakoman.com) Received: by mail-pj1-f46.google.com with SMTP id 98e67ed59e1d1-2e56df894d4so5247145a91.3 for ; Wed, 06 Nov 2024 05:49:45 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sakoman-com.20230601.gappssmtp.com; s=20230601; t=1730900985; x=1731505785; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=t0p05Z0oz5XBWI0EtCO25VLslmULLLv2ZgPzks9fKHE=; b=bZZ11U9IIquCJiqJLUs/GabQxqhz0d+RPOdz5tWQ9mals5m3y4LpiXzNxp8sulUFnh GmuIc+aHRwLVbMBUu+BhV7Zv1krluVnpXOpHAoxNeOF5fB5SnhQx6xw6Xd650YhaToKS N6Nezrmsy0omHUUXsXfoIpVmGhG/dyoN+5NtxzBIv8EU/37v9ZgaK7Mkm1uCUwfaZ6hL CRqcdsvhjpX4AgaMGBQ1i/wqMkp/bNjjiz3ZeL2xvQ9CtoscbPUVz21HUZ7i/UizrU9W +EKC9CMnl6Z6G5YsbX7JQEQ6AxeHdYYIbIYV4e9C+tsnnJRWkUF9rkxkxog1Nrv0l62l gO6Q== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1730900985; x=1731505785; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=t0p05Z0oz5XBWI0EtCO25VLslmULLLv2ZgPzks9fKHE=; b=Sz/LMHNf80qONpikWmO6bXzMaCBgKnAjNQAA+ujSStVOvdJJuyzC6jaS+dSD5pFw+w X7HJdoPxHafBrV8HECNhZMPTeunghUQwD75heVfMn3BXoaZpWNGozcXNj+liqOy2ycDi ShryeZbdBmq5CJVsqjnw/gImPJXrtQgNKvFVH7wSzNAhUvg68/qPANk/F7DdNeMDehP/ 1fF2o6B9/7hD2jZXcscmUI5yc9q17jWkkN5QxV2rH7BLUfz3in80J6JNYKLlklJWBpJv OcVEMFakpEaT6L1njhPE+zpbca1IP2W2l7XGcXQVYpp2wamUEqjjH3k+RDCgqfJNlmro Jf+A== X-Gm-Message-State: AOJu0Yz59D0+zHPgkGyfC9VUNXJXOHPDrUFh746kzXaLiAqQavaILal0 1W0iihvKsR84xnqASB99HCa6ooL+EfSh0h/IA0RT8NZt3PNvu3KnruaCnu/LUhChV5NOdeD2D6e M X-Google-Smtp-Source: AGHT+IHOt4k9MzWbZ01DNQCyqxy3jwMz73g1RwgFX1NIlmi+RZ+bRJ0QexC5kwcM6g1EkqDekhmjcQ== X-Received: by 2002:a17:90b:3849:b0:2e2:be64:488f with SMTP id 98e67ed59e1d1-2e93c12932amr29351774a91.6.1730900985131; Wed, 06 Nov 2024 05:49:45 -0800 (PST) Received: from hexa.. ([98.142.47.158]) by smtp.gmail.com with ESMTPSA id 98e67ed59e1d1-2e99a541e16sm1491795a91.21.2024.11.06.05.49.44 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 06 Nov 2024 05:49:44 -0800 (PST) From: Steve Sakoman To: openembedded-core@lists.openembedded.org Subject: [OE-core][styhead 1/7] vim: Upgrade 9.1.0698 -> 9.1.0764 Date: Wed, 6 Nov 2024 05:49:31 -0800 Message-Id: X-Mailer: git-send-email 2.34.1 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from li982-79.members.linode.com [45.33.32.79] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Wed, 06 Nov 2024 13:49:47 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/206774 From: Rohini Sangam This includes CVE-fix for CVE-2024-45306 and CVE-2024-47814 Changes between 9.1.0698 -> 9.1.0764 ==================================== https://github.com/vim/vim/compare/v9.1.0698...v9.1.0764 Signed-off-by: Rohini Sangam Signed-off-by: Siddharth Doshi Signed-off-by: Mathieu Dubois-Briand Signed-off-by: Richard Purdie (cherry picked from commit 2f0e5e63399e544063c79b0b1f9555c820b0604c) Signed-off-by: Steve Sakoman --- meta/recipes-support/vim/vim.inc | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/meta/recipes-support/vim/vim.inc b/meta/recipes-support/vim/vim.inc index f87f4dcbfa..cf36f4087b 100644 --- a/meta/recipes-support/vim/vim.inc +++ b/meta/recipes-support/vim/vim.inc @@ -18,8 +18,8 @@ SRC_URI = "git://github.com/vim/vim.git;branch=master;protocol=https \ file://no-path-adjust.patch \ " -PV .= ".0698" -SRCREV = "d56c451e1c05310562c5282352d7bb287c16323c" +PV .= ".0764" +SRCREV = "51b62387be93c65fa56bbabe1c3c1ea5df187641" # Do not consider .z in x.y.z, as that is updated with every commit UPSTREAM_CHECK_GITTAGREGEX = "(?P\d+\.\d+)\.0" From patchwork Wed Nov 6 13:49:32 2024 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Steve Sakoman X-Patchwork-Id: 52106 X-Patchwork-Delegate: steve@sakoman.com Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 0225CD44D6A for ; Wed, 6 Nov 2024 13:49:57 +0000 (UTC) Received: from mail-pg1-f182.google.com (mail-pg1-f182.google.com [209.85.215.182]) by mx.groups.io with SMTP id smtpd.web11.45907.1730900987445835326 for ; Wed, 06 Nov 2024 05:49:47 -0800 Authentication-Results: mx.groups.io; dkim=pass header.i=@sakoman-com.20230601.gappssmtp.com header.s=20230601 header.b=mkQitzmG; spf=softfail (domain: sakoman.com, ip: 209.85.215.182, mailfrom: steve@sakoman.com) Received: by mail-pg1-f182.google.com with SMTP id 41be03b00d2f7-7eae96e6624so4872333a12.2 for ; Wed, 06 Nov 2024 05:49:47 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sakoman-com.20230601.gappssmtp.com; s=20230601; t=1730900987; x=1731505787; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=1xz+r4bSp8QpgHxQ+StkRLRrzq4zLF8AWZWqTL5kWTI=; b=mkQitzmGsnJtxx4HMP+1gKWNRPI17tbtg1wq6GDtGXkJjdwBqSPqC6k+wb820HgYGg q6S+yhqOl6MWUUKKNIrTakcnYbTsji7pfxwXJDqZIbPfxW4wkmUnqnXXihsTnnu/E+FT K1a1vASFWIDXD7myuOkwhI1XZaVJ99bJQ2F/ebvVQbRe5AwpqgYnh0sAq/nzJ5RVoAF2 xJlHYh+y2fSlobiDt4OIvR3zbHRMkS3Hzel+cw0izlgG3qTXQNMlUjRzUvKtQ13VPRM0 /G8yShq4GW970eCP2FvdMBhhUc7Wdd24oNcJ9KtXO91/VNI28/iW1lYcb0jjhAqp01gT DMUA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1730900987; x=1731505787; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=1xz+r4bSp8QpgHxQ+StkRLRrzq4zLF8AWZWqTL5kWTI=; b=q9Sph+vC5JqJ09FxyzEU+5rMnvahgtkL862dz6381DGFKyjQI7hpw8qeejLbQoNI4C 1o9fVzXd7k0xT4TQDwZAo8DCgIZfMte37t1CCch52ltCZdTKPnBzG3K3TvdkL11XXVRh hPwF0KTPyQhcQqspHujifyEs2VdXsbXlVnsK8Tod23kPrpRGDJqDZEw5x8FUZhdNIG19 q1reQU9iFLXZzXkLbw7+Kp8q9t/UpatEtTPnnhguTLnX/PoB+giFiDWHTwleaLBJR446 EDYZTVlG6JeYR+YzYHWUKLjuTeFeItOD5LwLWt/k8Ltmm/y8RPoBer+pEWY0GHechi+o mIKw== X-Gm-Message-State: AOJu0Yx+CR5G4pw+kJEJeSsterFYG3kBkQNgoRaqjpYhvEskxfjODpdY ioc1cscaF2yNffJrxlv/UZL3UQO5hV07CD2uQSbUd1B7YxdTw4eJjE66ugC/0x39EBrVBHNVWyQ 7 X-Google-Smtp-Source: AGHT+IEBzmQgDTqeyJakTfJeIuuNK+p3EJSuHs5NBTz5KD0QejLROR7ARphrbrrZWntraw+QjuzcbA== X-Received: by 2002:a05:6a21:6d9e:b0:1db:f519:1a7e with SMTP id adf61e73a8af0-1dbf5191abamr6411986637.42.1730900986650; Wed, 06 Nov 2024 05:49:46 -0800 (PST) Received: from hexa.. ([98.142.47.158]) by smtp.gmail.com with ESMTPSA id 98e67ed59e1d1-2e99a541e16sm1491795a91.21.2024.11.06.05.49.46 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 06 Nov 2024 05:49:46 -0800 (PST) From: Steve Sakoman To: openembedded-core@lists.openembedded.org Subject: [OE-core][styhead 2/7] orc: upgrade 0.4.39 -> 0.4.40 Date: Wed, 6 Nov 2024 05:49:32 -0800 Message-Id: X-Mailer: git-send-email 2.34.1 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from li982-79.members.linode.com [45.33.32.79] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Wed, 06 Nov 2024 13:49:57 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/206775 From: Wang Mingyu Changelog: =========== - Security: Minor follow-up fixes for CVE-2024-40897 - powerpc: fix div255w which still used the inexact substitution - x86: work around old GCC versions (pre 9.0) having broken xgetbv implementations - x86: consider MSYS2/Cygwin as Windows for ABI purposes only - x86: handle unnatural and misaligned array pointers - orccodemem: Assorted memory mapping fixes - Fix include header use from C++ - Some compatibility fixes for Musl - ppc: Disable VSX and ISA 2.07 for Apple targets - ppc: Allow detection of ppc64 in Mac OS - x86: Fix non-C11 typedefs - meson: Fix detecting XSAVE on older AppleClang - x86: try fixing AVX detection again by adding check for XSAVE - Check return values of malloc() and realloc() Signed-off-by: Wang Mingyu Signed-off-by: Richard Purdie (cherry picked from commit ed7e4eb12491968c5f962b7e89d557c2c6d86a33) Signed-off-by: Steve Sakoman --- meta/recipes-devtools/orc/{orc_0.4.39.bb => orc_0.4.40.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename meta/recipes-devtools/orc/{orc_0.4.39.bb => orc_0.4.40.bb} (92%) diff --git a/meta/recipes-devtools/orc/orc_0.4.39.bb b/meta/recipes-devtools/orc/orc_0.4.40.bb similarity index 92% rename from meta/recipes-devtools/orc/orc_0.4.39.bb rename to meta/recipes-devtools/orc/orc_0.4.40.bb index 320abf536a..e437831cd7 100644 --- a/meta/recipes-devtools/orc/orc_0.4.39.bb +++ b/meta/recipes-devtools/orc/orc_0.4.40.bb @@ -5,7 +5,7 @@ LICENSE = "BSD-2-Clause & BSD-3-Clause" LIC_FILES_CHKSUM = "file://COPYING;md5=1400bd9d09e8af56b9ec982b3d85797e" SRC_URI = "http://gstreamer.freedesktop.org/src/orc/orc-${PV}.tar.xz" -SRC_URI[sha256sum] = "33ed2387f49b825fa1b9c3b0072e05f259141b895474ad085ae51143d3040cc0" +SRC_URI[sha256sum] = "3fc2bee78dfb7c41fd9605061fc69138db7df007eae2f669a1f56e8bacef74ab" inherit meson pkgconfig gtk-doc From patchwork Wed Nov 6 13:49:33 2024 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Steve Sakoman X-Patchwork-Id: 52105 X-Patchwork-Delegate: steve@sakoman.com Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 02236D44D69 for ; Wed, 6 Nov 2024 13:49:57 +0000 (UTC) Received: from mail-pg1-f169.google.com (mail-pg1-f169.google.com [209.85.215.169]) by mx.groups.io with SMTP id smtpd.web10.46136.1730900988812096965 for ; Wed, 06 Nov 2024 05:49:48 -0800 Authentication-Results: mx.groups.io; dkim=pass header.i=@sakoman-com.20230601.gappssmtp.com header.s=20230601 header.b=o6MuqHov; spf=softfail (domain: sakoman.com, ip: 209.85.215.169, mailfrom: steve@sakoman.com) Received: by mail-pg1-f169.google.com with SMTP id 41be03b00d2f7-7ed9c16f687so4646993a12.0 for ; Wed, 06 Nov 2024 05:49:48 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sakoman-com.20230601.gappssmtp.com; s=20230601; t=1730900988; x=1731505788; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=4Z4CtALvulEZyWfGyzqCbNqKJy26vV2AjNROxY3Iyqo=; b=o6MuqHovMs6Q8h95+yhS/Q+uW7TkQdekZudSPgVEevOAPbZCNngTpgDzTg5+RAC4T/ egTpSzpYjNTrzQ7r1k1g+9zf+IL4QvJ//UPDdfsiDkj2PVj+bW/EGwUl8KN+NPkdmFQM TmLNVrNPgViuVe+CFlwPgIwzs6fw7Np4i7zkojDveG2KehmG8CYcWL1wDLlk4agnWPDR 2Ks66hT1u9Vdws+eC0r1MsGyUNjI15xrONuWpC48v1AEQlNzEXE+xU1YWHpT/URixbUq jhS5hbmlCOb+u72spaR2iR7m7YE6nqOvK47DfZAlda6WwiZ5wwNZzrgUcy1jnZdTP0MP Pbog== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1730900988; x=1731505788; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=4Z4CtALvulEZyWfGyzqCbNqKJy26vV2AjNROxY3Iyqo=; b=m+PBRuZJXDju3xCMSs7LG2zsHAlh6PhrFNvOExsM0E1zwHTwiTaLJbaf5+XUeyaQ5z i7IL5sEDHqL02X+AnINA7LsGinIUNku3PXtPE3nohgN3qKv4LdG9j/sMxAhVNuehghG1 C8bBmDtIQOh3PB2JyZ3m9TfCcKZxlgOYe0pBZUZPjqrtsbqREf/l5l6AqLZuc2H88WbE Q3f4rGxB4nsIu73Z5Tc+9mRDXSR2Fgzxae8Pfc/ztRo24/aBIRcKbobtDlYPuMUhpIWx LRy3Z9ufd9zcadABQK8fb0KPX9ph14BYXB2vRU6TaIDsPWsX4DU76WJkWXrJ5bLhZwOe b0NA== X-Gm-Message-State: AOJu0YxnmFyY1T+/Snvc+8thSK6MDhbObb3PB1L4xcSLCHchHnDV3PqG AO1RUnDpnbpQSMWsaHCBWoOcmTKmoYmMnZ9vXs0peVKUt4iY4jI8hMrxKVxgBuDCfyUIUK84ZDL G X-Google-Smtp-Source: AGHT+IGiT6iNDaVVQv4ghqhoBi3qYfyxbi+1lAkFgUYjYrCgMuDDQB4iIF+EP269J40Cw1zXAXUa7A== X-Received: by 2002:a17:90b:3886:b0:2e2:d821:1b78 with SMTP id 98e67ed59e1d1-2e93beeed65mr29786359a91.0.1730900988104; Wed, 06 Nov 2024 05:49:48 -0800 (PST) Received: from hexa.. ([98.142.47.158]) by smtp.gmail.com with ESMTPSA id 98e67ed59e1d1-2e99a541e16sm1491795a91.21.2024.11.06.05.49.47 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 06 Nov 2024 05:49:47 -0800 (PST) From: Steve Sakoman To: openembedded-core@lists.openembedded.org Subject: [OE-core][styhead 3/7] ffmpeg: nasm is x86 only, so only DEPEND if x86 Date: Wed, 6 Nov 2024 05:49:33 -0800 Message-Id: <0830e65afc2e7d828ae1667addb6f7499ea8ddd0.1730900782.git.steve@sakoman.com> X-Mailer: git-send-email 2.34.1 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from li982-79.members.linode.com [45.33.32.79] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Wed, 06 Nov 2024 13:49:57 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/206776 From: Ross Burton No need to depend on nasm if we're not going to use it. Signed-off-by: Ross Burton Signed-off-by: Richard Purdie (cherry picked from commit b99ea7f130c3f945af9a09a6ecf85b6ff8f4b710) Signed-off-by: Steve Sakoman --- meta/recipes-multimedia/ffmpeg/ffmpeg_7.0.2.bb | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/meta/recipes-multimedia/ffmpeg/ffmpeg_7.0.2.bb b/meta/recipes-multimedia/ffmpeg/ffmpeg_7.0.2.bb index 9e60b5cd23..b16bd51dbd 100644 --- a/meta/recipes-multimedia/ffmpeg/ffmpeg_7.0.2.bb +++ b/meta/recipes-multimedia/ffmpeg/ffmpeg_7.0.2.bb @@ -46,7 +46,8 @@ ARM_INSTRUCTION_SET:armv6 = "arm" # libpostproc was previously packaged from a separate recipe PROVIDES = "libav libpostproc" -DEPENDS = "nasm-native" +DEPENDS:append:x86 = " nasm-native" +DEPENDS:append:x86-64 = " nasm-native" inherit autotools pkgconfig From patchwork Wed Nov 6 13:49:34 2024 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Steve Sakoman X-Patchwork-Id: 52109 X-Patchwork-Delegate: steve@sakoman.com Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 0A08DD44D5C for ; Wed, 6 Nov 2024 13:49:57 +0000 (UTC) Received: from mail-pj1-f53.google.com (mail-pj1-f53.google.com [209.85.216.53]) by mx.groups.io with SMTP id smtpd.web11.45909.1730900990928201472 for ; Wed, 06 Nov 2024 05:49:50 -0800 Authentication-Results: mx.groups.io; dkim=pass header.i=@sakoman-com.20230601.gappssmtp.com header.s=20230601 header.b=u8hsyABo; spf=softfail (domain: sakoman.com, ip: 209.85.216.53, mailfrom: steve@sakoman.com) Received: by mail-pj1-f53.google.com with SMTP id 98e67ed59e1d1-2e2d1858cdfso4887968a91.1 for ; Wed, 06 Nov 2024 05:49:50 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sakoman-com.20230601.gappssmtp.com; s=20230601; t=1730900990; x=1731505790; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=foTnNWMVrnGNUv6SqQfxugV2exD6QF/KL3RutRwZviA=; b=u8hsyABooHEmCudMYfqUuOj4/sIyuqxpQy8eLtlm/966DQ21bAlLMRdwdnlIFhWFbW ltJrv+JQEC6Y8XXM4VvPesrr/KQ/DZ5QTILsFneU89CgZfulwdphuWaQXb5rphnVXKeW a2kspR9YiTLMwu5+eqtbrUD5tPWik/cGav1Z0vCUJLaeCZT5DP8Uhh5jYBxuccL42WcP Y4LySi5c/o2HthBPfIcOoPafZJCx675TW0jOQhu5bUj/N1tWdCNIJJFusIL447bJzwMC IqECBLvyYyYNIzbY/HRjURaMHOQbGILxSzWy9glN6ScfHEG4T2twoSFu9mzqHwG1EWqf fTrw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1730900990; x=1731505790; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=foTnNWMVrnGNUv6SqQfxugV2exD6QF/KL3RutRwZviA=; b=mbfN836qVIRXSgL7mrCZ52ez5SUWVmsaGPTEaG1RcSUIV1kw8O8nC20CzBiJ9X0HwN FLWOujFrqE77upVC6looprRRMGtzRogUIK7NL/UFUMvwGvMomlNX0z98mFR47oGQjxQF Kjq8/eaX9KiBgKzKNvwQym4+ic7taNhCi+GV3WiiGklsOXHbrcZGHVZkRNc4RCzkJV2b kjXOpKVT7Greg67muokTbZgVw3sqjbet49QzTGBCkAYh4Z0WjUbV+ICkLD0yK8xTKBOI GYnyuBVTq9UsHwbQboqllJe26plpgbqqLTmn6qZuNFp6rX0mB3ezz8fifSR1efMje0z9 4F2Q== X-Gm-Message-State: AOJu0Yx4gmlKQ6lenhYl3Y1kX7ONdnJDb8LVxkZUGoC4whcx+B8q0o92 pDTXYfkGyTjcuv77UpBTK76Aylm8+m9QO9d/DCiZ6dXkHiVfD/Zc094I56AN2Ooz/7cSfPyBnzX A X-Google-Smtp-Source: AGHT+IH1d5DbEPPGRQuNwwtX5nShAj02fjf3P0kRhpUUL/gVKfn1xo8TKRj+wtbhQF96c6y67+lkpw== X-Received: by 2002:a17:90b:1e4f:b0:2e9:5f95:54c1 with SMTP id 98e67ed59e1d1-2e95f9557c0mr14869318a91.17.1730900990183; Wed, 06 Nov 2024 05:49:50 -0800 (PST) Received: from hexa.. ([98.142.47.158]) by smtp.gmail.com with ESMTPSA id 98e67ed59e1d1-2e99a541e16sm1491795a91.21.2024.11.06.05.49.49 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 06 Nov 2024 05:49:49 -0800 (PST) From: Steve Sakoman To: openembedded-core@lists.openembedded.org Subject: [OE-core][styhead 4/7] ffmpeg: no need for textrel INSANE_SKIP Date: Wed, 6 Nov 2024 05:49:34 -0800 Message-Id: <6eebf4c2a9b5d30cf5145df61f1713ec1a6ce91a.1730900782.git.steve@sakoman.com> X-Mailer: git-send-email 2.34.1 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from li982-79.members.linode.com [45.33.32.79] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Wed, 06 Nov 2024 13:49:57 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/206777 From: Ross Burton It appears in testing that modern ffmpeg no longer needs to disable PIC, so there's no need to ignore textrel warnings. Signed-off-by: Ross Burton Signed-off-by: Richard Purdie (cherry picked from commit 98d577fef75d54a59eeacaabb4a45e44b2f6832e) Signed-off-by: Steve Sakoman --- meta/recipes-multimedia/ffmpeg/ffmpeg_7.0.2.bb | 10 ---------- 1 file changed, 10 deletions(-) diff --git a/meta/recipes-multimedia/ffmpeg/ffmpeg_7.0.2.bb b/meta/recipes-multimedia/ffmpeg/ffmpeg_7.0.2.bb index b16bd51dbd..af66104ebf 100644 --- a/meta/recipes-multimedia/ffmpeg/ffmpeg_7.0.2.bb +++ b/meta/recipes-multimedia/ffmpeg/ffmpeg_7.0.2.bb @@ -181,13 +181,3 @@ FILES:libpostproc = "${libdir}/libpostproc${SOLIBS}" FILES:libswresample = "${libdir}/libswresample${SOLIBS}" FILES:libswscale = "${libdir}/libswscale${SOLIBS}" FILES:${PN}-examples = "${datadir}/${PN}/examples" - -# ffmpeg disables PIC on some platforms (e.g. x86-32) -INSANE_SKIP:${MLPREFIX}libavcodec = "textrel" -INSANE_SKIP:${MLPREFIX}libavdevice = "textrel" -INSANE_SKIP:${MLPREFIX}libavfilter = "textrel" -INSANE_SKIP:${MLPREFIX}libavformat = "textrel" -INSANE_SKIP:${MLPREFIX}libavutil = "textrel" -INSANE_SKIP:${MLPREFIX}libswscale = "textrel" -INSANE_SKIP:${MLPREFIX}libswresample = "textrel" -INSANE_SKIP:${MLPREFIX}libpostproc = "textrel" From patchwork Wed Nov 6 13:49:35 2024 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Steve Sakoman X-Patchwork-Id: 52107 X-Patchwork-Delegate: steve@sakoman.com Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 10008D44D6D for ; Wed, 6 Nov 2024 13:49:57 +0000 (UTC) Received: from mail-pf1-f180.google.com (mail-pf1-f180.google.com [209.85.210.180]) by mx.groups.io with SMTP id smtpd.web11.45911.1730900992739659800 for ; Wed, 06 Nov 2024 05:49:52 -0800 Authentication-Results: mx.groups.io; dkim=pass header.i=@sakoman-com.20230601.gappssmtp.com header.s=20230601 header.b=pHaLi6G3; spf=softfail (domain: sakoman.com, ip: 209.85.210.180, mailfrom: steve@sakoman.com) Received: by mail-pf1-f180.google.com with SMTP id d2e1a72fcca58-71e5130832aso5474941b3a.0 for ; Wed, 06 Nov 2024 05:49:52 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sakoman-com.20230601.gappssmtp.com; s=20230601; t=1730900992; x=1731505792; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=GtNhVfWPd+czOHWHr/WAKFNMuU31DEUD1izz9AZ/q8Y=; b=pHaLi6G3ACND5gF9jMRclvM1TE8I578XuJDSUNxzQlFcjJVAKtV5owgeUXgGnIAI8w I9g1G8boNOCTQB3FI9l+XqqIJVKZiW59CtJPLY6lqBQuN1/ap+tQBNX4QsmNfWYq5rlO RqLNFJujcdvn0hTSCUViOx0gMXMp0AkRIFxAWFxlqkF9UVzMgQ+xtVTAnRfKif4MKwCG 3HuIMChZOdjfgK997irL92fQUJGWHPhUlhXnllwkFt4piAWzpWwqV2bUekY3z2kZ1FH1 pAYU2vgoZFp2vdarE/ugG/yWtLr55xGAYat1Zz2LrPuITcDPLCbZ8uxU/7tN9Vk4oZ3i /0Rw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1730900992; x=1731505792; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=GtNhVfWPd+czOHWHr/WAKFNMuU31DEUD1izz9AZ/q8Y=; b=JLriiYSzcgnGhvEWcu0FJu4g8Fkb3MteHdhB9O2p/bR5aI7/KxOd28y+qH8UE6E6Hi REqxnKuiaCwQUhYseqqMIdJA+Sbbm6N21djFjbXwxJwRwqYSpuZrI03rMKsELq8oLMz2 04ZWvGBfP72EceaGQ7+PoCJOkoeUS/z6FtxKbdofJ0cr89ZJqVBVQcwQA6ZbVCBieU76 jfGb6XPbeuUe+YEt3SgcXF/3WF27hNJFAFCDxBykqjYn1cXUqNxg23gI5pkJ4jAq0g0W On22E4z2rv8W297CZCm481wk+3J4wJcoZqrL0WyGyYbfedZJ6d42K5rwtG7sJe2rFcyq aKxw== X-Gm-Message-State: AOJu0YwiSQgR+IWM4NByiA6Og3LIZieEdjfFrvUglob6npxR/5GtUycW pVweh1xpH4yGVReBRfhE9PfE/i2aY4udqINz0XC5awaMBmY28XIwTfX+Mr4a4R23D5PTLEgxhGp 7 X-Google-Smtp-Source: AGHT+IFinN8Y0yP4c3X1Ab+lbJuds3WMdv9DO6I5rQMRU7FAAigRgH/ErvZexLbNNtXDik6qXu5OEA== X-Received: by 2002:a05:6a21:328c:b0:1db:e1ce:8eaf with SMTP id adf61e73a8af0-1dbe1ce9763mr12354264637.6.1730900991854; Wed, 06 Nov 2024 05:49:51 -0800 (PST) Received: from hexa.. ([98.142.47.158]) by smtp.gmail.com with ESMTPSA id 98e67ed59e1d1-2e99a541e16sm1491795a91.21.2024.11.06.05.49.51 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 06 Nov 2024 05:49:51 -0800 (PST) From: Steve Sakoman To: openembedded-core@lists.openembedded.org Subject: [OE-core][styhead 5/7] ffmpeg: Disable asm optimizations on x86 Date: Wed, 6 Nov 2024 05:49:35 -0800 Message-Id: <03c20ece58f4368ff95241e90063269f75e1b81d.1730900782.git.steve@sakoman.com> X-Mailer: git-send-email 2.34.1 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from li982-79.members.linode.com [45.33.32.79] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Wed, 06 Nov 2024 13:49:57 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/206778 From: Khem Raj disable asm code if PIC is required, as the provided asm decidedly is not PIC for x86. Signed-off-by: Khem Raj Cc: Ross Burton Signed-off-by: Richard Purdie (cherry picked from commit 941fc40ca971f87e61c19e5a0703caa304ec7547) Signed-off-by: Steve Sakoman --- meta/recipes-multimedia/ffmpeg/ffmpeg_7.0.2.bb | 2 ++ 1 file changed, 2 insertions(+) diff --git a/meta/recipes-multimedia/ffmpeg/ffmpeg_7.0.2.bb b/meta/recipes-multimedia/ffmpeg/ffmpeg_7.0.2.bb index af66104ebf..3c66851b8d 100644 --- a/meta/recipes-multimedia/ffmpeg/ffmpeg_7.0.2.bb +++ b/meta/recipes-multimedia/ffmpeg/ffmpeg_7.0.2.bb @@ -129,6 +129,8 @@ EXTRA_OECONF = " \ " EXTRA_OECONF:append:linux-gnux32 = " --disable-asm" +# --enable-pic is used and x86 assembly is not PIC on x86 +EXTRA_OECONF:append:x86 = " --disable-asm" EXTRA_OECONF += "${@bb.utils.contains('TUNE_FEATURES', 'mipsisa64r6', '--disable-mips64r2 --disable-mips32r2', '', d)}" EXTRA_OECONF += "${@bb.utils.contains('TUNE_FEATURES', 'mipsisa64r2', '--disable-mips64r6 --disable-mips32r6', '', d)}" From patchwork Wed Nov 6 13:49:36 2024 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Steve Sakoman X-Patchwork-Id: 52108 X-Patchwork-Delegate: steve@sakoman.com Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 2368CD44D6E for ; Wed, 6 Nov 2024 13:49:57 +0000 (UTC) Received: from mail-pj1-f45.google.com (mail-pj1-f45.google.com [209.85.216.45]) by mx.groups.io with SMTP id smtpd.web11.45912.1730900994289316892 for ; Wed, 06 Nov 2024 05:49:54 -0800 Authentication-Results: mx.groups.io; dkim=pass header.i=@sakoman-com.20230601.gappssmtp.com header.s=20230601 header.b=d4+LayMg; spf=softfail (domain: sakoman.com, ip: 209.85.216.45, mailfrom: steve@sakoman.com) Received: by mail-pj1-f45.google.com with SMTP id 98e67ed59e1d1-2e2dc61bc41so4671045a91.1 for ; Wed, 06 Nov 2024 05:49:54 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sakoman-com.20230601.gappssmtp.com; s=20230601; t=1730900993; x=1731505793; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=2ccFKSBF3cAQeMF81oiQfZRHg4eLKlzIK4AITwof/u0=; b=d4+LayMgpWRn/Ge1K/NMmelYw2Q6O1Wq1fe99TDRRrnRL8WYP6COLXSXiLjrVjamV2 QhQwiJh+c0YmYVx5na7P36tLdaEf/kOf4/+joB5NsuO81fPtkp4Vk1TaMIS1T/p1xeFG bO18AQE4i05Q1AtF65lb3CVr/NcMPjcfySHaIGzLvMRLd8b5CYNoiZQTW1xwACdK1zIv 4iilW3uFqmjlAYyphuXBReYEQM/6JMG5J0Th3JKku8Qw4vpN4DUz8w6qQ9Y3d0Ex116J 2LmnAJo+NoPImf3952lkfApTWQsbcJQ9TIkh41pwJUl8lMPBN2abp4e8GAZhXoq5EDnR VS9Q== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1730900993; x=1731505793; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=2ccFKSBF3cAQeMF81oiQfZRHg4eLKlzIK4AITwof/u0=; b=MB5K2NIMn9q34dW7QA1YL3Yam9qEqzSCItrfJ+S8Ud4ui1WU3tVvjbiZiuJjh1eUJI VhKq1xdsZdVfwGeajow3OUsuX/kwGSvSx0lGQW841mebWcA767waDOGNhsNeOW+JXY47 4/5cmINaoS2M5m4ZmU2y4O01CK7uaj6TmKkIACZsnZMrKpzTfDQKNptioXo18shhz022 e23Q0dUqAmg8ptVyvd0BHsPTbO7As6shhxNQf2QBcpqzIVp5eVIggRizqPHGbwb7XiIa QTd9XS03JGDTb3kXPYQIIlB1V79jVxeelbnFSQ9bgF5S6MmwSSsqYRB5mEmzn8OchzuS zyMQ== X-Gm-Message-State: AOJu0Yw+zuP4dN5Yty54g4mwWpBUSvw4OfLe5GFXJoRSjtStGzrJrMIF jaSPju46jIeSih8Pz9BlyTLZjhRrB6lW3miBnC4wlVBDhqGpDlnWIdZvYnOuTlX1tScgGafGl+0 E X-Google-Smtp-Source: AGHT+IHOqtPe2gFXFeED9ayQHmkt4nTtWx1flLE7qqaHhoc2PAgxT3WdtvOIXhGXnKcvNrL8VdEuYQ== X-Received: by 2002:a17:90b:4a86:b0:2e1:ce7b:6069 with SMTP id 98e67ed59e1d1-2e94c529acamr29382188a91.33.1730900993500; Wed, 06 Nov 2024 05:49:53 -0800 (PST) Received: from hexa.. ([98.142.47.158]) by smtp.gmail.com with ESMTPSA id 98e67ed59e1d1-2e99a541e16sm1491795a91.21.2024.11.06.05.49.53 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 06 Nov 2024 05:49:53 -0800 (PST) From: Steve Sakoman To: openembedded-core@lists.openembedded.org Subject: [OE-core][styhead 6/7] ffmpeg: Add "libswresample libavcodec" to CVE_PRODUCT Date: Wed, 6 Nov 2024 05:49:36 -0800 Message-Id: <0b0299415ec719bb4c3764dfa0740e4ff6cc0362.1730900782.git.steve@sakoman.com> X-Mailer: git-send-email 2.34.1 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from li982-79.members.linode.com [45.33.32.79] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Wed, 06 Nov 2024 13:49:57 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/206779 From: aszh07 Currently, CVE_PRODUCT only detects vulnerabilities where the product is "ffmpeg". However, there are also vulnerabilities where the product is "libswresample", and "libavcodec" as shown below. https://app.opencve.io/vendors/?vendor=ffmpeg Therefore, add "libswresample libavcodec" to CVE_PRODUCT to detect vulnerabilities where the product is "libswresample libavcodec" as well. Signed-off-by: aszh07 Signed-off-by: Mathieu Dubois-Briand Signed-off-by: Richard Purdie (cherry picked from commit 9684eba5c543de229108008e29afd1dd021a9799) Signed-off-by: Steve Sakoman --- meta/recipes-multimedia/ffmpeg/ffmpeg_7.0.2.bb | 2 ++ 1 file changed, 2 insertions(+) diff --git a/meta/recipes-multimedia/ffmpeg/ffmpeg_7.0.2.bb b/meta/recipes-multimedia/ffmpeg/ffmpeg_7.0.2.bb index 3c66851b8d..bb6b71735c 100644 --- a/meta/recipes-multimedia/ffmpeg/ffmpeg_7.0.2.bb +++ b/meta/recipes-multimedia/ffmpeg/ffmpeg_7.0.2.bb @@ -183,3 +183,5 @@ FILES:libpostproc = "${libdir}/libpostproc${SOLIBS}" FILES:libswresample = "${libdir}/libswresample${SOLIBS}" FILES:libswscale = "${libdir}/libswscale${SOLIBS}" FILES:${PN}-examples = "${datadir}/${PN}/examples" + +CVE_PRODUCT = "ffmpeg libswresample libavcodec" From patchwork Wed Nov 6 13:49:37 2024 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Steve Sakoman X-Patchwork-Id: 52110 X-Patchwork-Delegate: steve@sakoman.com Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 1D858D44D6A for ; Wed, 6 Nov 2024 13:50:07 +0000 (UTC) Received: from mail-pj1-f43.google.com (mail-pj1-f43.google.com [209.85.216.43]) by mx.groups.io with SMTP id smtpd.web11.45914.1730900998065482061 for ; Wed, 06 Nov 2024 05:49:58 -0800 Authentication-Results: mx.groups.io; dkim=pass header.i=@sakoman-com.20230601.gappssmtp.com header.s=20230601 header.b=WfaZXIUG; spf=softfail (domain: sakoman.com, ip: 209.85.216.43, mailfrom: steve@sakoman.com) Received: by mail-pj1-f43.google.com with SMTP id 98e67ed59e1d1-2e3d523a24dso5131076a91.0 for ; Wed, 06 Nov 2024 05:49:58 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sakoman-com.20230601.gappssmtp.com; s=20230601; t=1730900997; x=1731505797; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=MjSVLGz3qZ7dLV97m10InE1Bc2dWhIjDbGTpkNvTc84=; b=WfaZXIUGOv8zn9bdC84cloEhZpMO6b6A0Eq8yjkKFlRR2MIPBmaYMg3ORj6DEaFSEQ C/mY/VUMTTXjd0oQORNlMhLxd/B9lwGqZtKITPSob5UQqqS6kqSsbhSynrcUqhsMBd4K EXK013RoXfA4JvHJ0vtLn0MzkAcyL/gKkb/FXZ1fQ8TuwFN7zsPwlybpx9wT+DgfV0nC VE6dMt2lmQsLNIVGQAlC0V/vyxO29L4w0/KuT12kP7D1/E6V0rez5b2YmQR4S9DW2j80 2/L34H9HfUO0JikrbcQR1mho2DSiOyKqPWd/RB8Lh95zJWA2iRcq60je4qClaIRbwE6o BAgA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1730900997; x=1731505797; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=MjSVLGz3qZ7dLV97m10InE1Bc2dWhIjDbGTpkNvTc84=; b=Il0BGIbKuLnaY7+OKzC0Z2y4f3Wxk71Jp7vr/oZ9gqbpn+fEy6x28gZDMpa0W0ALIA GbfVp63ze/P2coSJKAykf/ILJtfMPSmr/2O1pu8MxZ4pUYOn6PAroYCCDVj45S9cLnWv p1PwC54sbuftBvJg+MPJfAZXUCThXnshyHuxA1cQN0tljwBeMwGq+LfCpJpn25XC6Nl4 RUjYnxxaR3LK66+piajxbGzAzTq6I2G2RkyeZ9HspKLSHasZRQCbgcR1oTnTuUybnVhq RnPxtjs0Boz3Sc4//ixxxxqUIL2VjO7nWq8Jm3KiCvN4ZqY6Ntk4R4x1DaPhF+1/xJA7 5pJw== X-Gm-Message-State: AOJu0Yy3TYWKQIqer40irPn7U7dBySKwStqGYHQL6jUAwgQQo6fPEZK3 dn5BfkBWfXRClPWEiD6PxPDKbQr61EP6mULyEcrNzpr3d0UNoKV3UV1yTp3PEmjmgMyaFRZWsh/ I X-Google-Smtp-Source: AGHT+IE6Mwx4HEo9HT7XMNO7Lda45rbVNJXXaH8Y3agKrdTl0QWMEYBE1KModx/iecNuKXLn+NzNCg== X-Received: by 2002:a17:90b:3755:b0:2e2:de27:db09 with SMTP id 98e67ed59e1d1-2e8f1078c4dmr41116296a91.19.1730900997217; Wed, 06 Nov 2024 05:49:57 -0800 (PST) Received: from hexa.. ([98.142.47.158]) by smtp.gmail.com with ESMTPSA id 98e67ed59e1d1-2e99a541e16sm1491795a91.21.2024.11.06.05.49.56 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 06 Nov 2024 05:49:56 -0800 (PST) From: Steve Sakoman To: openembedded-core@lists.openembedded.org Subject: [OE-core][styhead 7/7] glibc: Fix missing randomness in __gen_tempname Date: Wed, 6 Nov 2024 05:49:37 -0800 Message-Id: <92cc48d51c763249b2eb8b4181bc20056fc72264.1730900782.git.steve@sakoman.com> X-Mailer: git-send-email 2.34.1 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from li982-79.members.linode.com [45.33.32.79] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Wed, 06 Nov 2024 13:50:07 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/206780 From: Ola x Nilsson Backport the fix for glibc bug 32214. The missing randomness in early boot may cause some systemd services to fail when they occasionally try to create tempdirs like /run/systemd/namespace-aaaaaa at the same time. The error messages can contain things like "Failed to set up mount namespacing". Signed-off-by: Ola x Nilsson Signed-off-by: Steve Sakoman --- ...ndomness-in-__gen_tempname-bug-32214.patch | 29 +++++++++++++++++++ meta/recipes-core/glibc/glibc_2.40.bb | 1 + 2 files changed, 30 insertions(+) create mode 100644 meta/recipes-core/glibc/glibc/0024-Fix-missing-randomness-in-__gen_tempname-bug-32214.patch diff --git a/meta/recipes-core/glibc/glibc/0024-Fix-missing-randomness-in-__gen_tempname-bug-32214.patch b/meta/recipes-core/glibc/glibc/0024-Fix-missing-randomness-in-__gen_tempname-bug-32214.patch new file mode 100644 index 0000000000..c9f3e32f58 --- /dev/null +++ b/meta/recipes-core/glibc/glibc/0024-Fix-missing-randomness-in-__gen_tempname-bug-32214.patch @@ -0,0 +1,29 @@ +From 9d30d58c32fe9d5f8ec6cda79fb11159e6789bcf Mon Sep 17 00:00:00 2001 +From: Andreas Schwab +Date: Wed, 25 Sep 2024 11:49:30 +0200 +Subject: [PATCH] Fix missing randomness in __gen_tempname (bug 32214) + +Make sure to update the random value also if getrandom fails. + +Fixes: 686d542025 ("posix: Sync tempname with gnulib") + +Upstream-Status: Backport [https://sourceware.org/git/?p=glibc.git;a=commit;h=5f62cf88c4530c11904482775b7582bd7f6d80d2] + +Signed-off-by: Ola x Nilsson +--- + sysdeps/posix/tempname.c | 2 ++ + 1 file changed, 2 insertions(+) + +diff --git a/sysdeps/posix/tempname.c b/sysdeps/posix/tempname.c +index c00fe0c181..fc30958a0c 100644 +--- a/sysdeps/posix/tempname.c ++++ b/sysdeps/posix/tempname.c +@@ -117,6 +117,8 @@ random_bits (random_value *r, random_value s) + succeed. */ + #if !_LIBC + *r = mix_random_values (v, clock ()); ++#else ++ *r = v; + #endif + return false; + } diff --git a/meta/recipes-core/glibc/glibc_2.40.bb b/meta/recipes-core/glibc/glibc_2.40.bb index 71b89ac9ff..3e855b19d8 100644 --- a/meta/recipes-core/glibc/glibc_2.40.bb +++ b/meta/recipes-core/glibc/glibc_2.40.bb @@ -53,6 +53,7 @@ SRC_URI = "${GLIBC_GIT_URI};branch=${SRCBRANCH};name=glibc \ file://0021-fix-create-thread-failed-in-unprivileged-process-BZ-.patch \ file://0022-Avoid-hardcoded-build-time-paths-in-the-output-binar.patch \ file://0023-tests-Skip-2-qemu-tests-that-can-hang-in-oe-selftest.patch \ + file://0024-Fix-missing-randomness-in-__gen_tempname-bug-32214.patch \ " S = "${WORKDIR}/git" B = "${WORKDIR}/build-${TARGET_SYS}"