Commit Graph

1187 Commits

Author SHA1 Message Date
Leon Anavi
45224eeec9 php: Upgrade 7.4.4 -> 7.4.9
Upgrade to release 7.4.9:

- Fixed: Upgrade apache2handler's php_apache_sapi_get_request_time
  to return usec
- Fixed: BSTR to PHP string conversion not binary safe
- Fixed: DCOM does not work with Username, Password parameter
- Fixed: serialize() and unserialize() methods can not be called
  statically
- Fixed: Segfault in php_str_replace_common
- Fixed: Assertion failure if dumping closure with unresolved
  static variable
- Fixed: Assertion failure when assigning property of string
  offset by reference
- Fixed: HT iterators not removed if empty array is destroyed
- Fixed: Changing array during undef index RW error segfaults
- Fixed: Use after free if changing array during undef var during
  array write fetch
- Fixed: Use after free if string used in undefined index warning
  is changed
- Fixed: Public non-static property in child should take priority
  over private static
- Fixed: getimagesize function silently truncates after a null
  byte
- Fixed: finfo_file crash (FILEINFO_MIME)
- Fixed: ftp_size on large files
- Fixed: mb_strimwidth does not trim string
- Fixed: Use of freed hash key in the phar_parse_zipfile function
- Fixed: ::getStaticProperties() ignores property modifications
- Fixed: ::getStaticPropertyValue() throws on protected props
- Fixed: Use after free when type duplicated into
  ReflectionProperty gets resolved
- Fixed: Can't copy() large 'data://' with open_basedir
- Fixed: dns_check_record() always return true on Alpine
- Fixed: array_walk() does not respect property types

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit f46931abf0)
[Bug fix on update. lts version]
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-01-10 19:41:39 -08:00
Zang Ruochen
aaaf03ada1 mcpp: Normalize the patch format of CVE
Because CVE-2019-14274.patch is included in ice-mcpp.patch, the cve-check-tool fails to correctly judge the CVE of the OSS. CVE-2019-14274.patch is separated from ice-mcpp.patch to fix the problem.

Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 9301b77e32)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
(cherry picked from commit 81874b2392)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-01-10 19:24:24 -08:00
Yue Tao
fae2b90261 lua: Security Advisory - lua - CVE-2020-15888
Backport fix from https://github.com/lua/lua.git.

Signed-off-by: Yue Tao <Yue.Tao@windriver.com>
Signed-off-by: Joe Slater <joe.slater@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 698748c153)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-07-30 21:29:08 -07:00
Armin Kuster
654ad8bea4 jsoncpp: add PE do to revert to older PV
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-07-18 07:24:39 -07:00
Armin Kuster
0e0b4892f5 Revert "jsoncpp: upgrade 1.9.2 -> 1.9.3"
This reverts commit 2b384c5973.

It appears that there was a change in soname not noted in the changelog.

8b7ea09b80

ABI change appears to have occured.
https://abi-laboratory.pro/index.php?view=timeline&l=jsoncpp

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-07-13 20:45:23 -07:00
Paul Eggleton
28941dde0b protobuf-c: disable parallelism to avoid race condition
Unfortunately 489d3b4b93 did not completely
fix the problem - if you try cleaning and rebuilding protobuf-c-native it
doesn't take long to reproduce the issue on a 32-core machine. I spent
some time trying to debug this but failed, there is still a race between
generating t.test-full.pb.h and compiling cxx_generate_packed_data.c
despite BUILT_SOURCES and explicit dependencies. I even tried converting
the multiple target rules to use grouped targets (&:), that didn't fix it
either. Disabling parallelism as a workaround only costs ~20s and it
turns out that upstream is switching to Meson soon anyway:

  https://github.com/protobuf-c/protobuf-c/pull/340

Signed-off-by: Paul Eggleton <paul.eggleton@linux.microsoft.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 3251fe210a)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-07-01 08:01:41 -07:00
Pierre-Jean Texier
2b384c5973 jsoncpp: upgrade 1.9.2 -> 1.9.3
See full changelog https://github.com/open-source-parsers/jsoncpp/releases/tag/1.9.3

Signed-off-by: Pierre-Jean Texier <pjtexier@koncepto.io>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 65e124eef3)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-07-01 08:00:22 -07:00
Andrew Geissler
3575cb4e60 nlohmann-json: backport gcc10 fix
The following issue and PR describe an issue with nlohmann-json and
GCC10.

https://github.com/nlohmann/json/issues/1920
https://github.com/nlohmann/json/pull/2034

Confirmed that this fixed the issue seen in OpenBMC when pulling in the
latest upstream meta-openembedded.

Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 12b707c52d)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-05-28 21:23:56 -07:00
Claude Bing
a6c9ad397b php: update fix for opcache link issue in 7.4.4
The source of the issue is the update for PHP 7.4 support in
0001-opcache-config.m4-enable-opcache.patch (commit 7cc7a9ec).  Instead
of working around the issue in the recipe file, update the patch to
restore the call to PHP_ADD_LIBRARY().

Signed-off-by: Claude Bing <cbing@cybernetics.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 3cfd16be4e)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-05-17 14:38:21 -07:00
Claude Bing
a009197ef4 php: fix opcache link error in 7.4
Explicitly specifying -lrt is required for opcache to be linked against
the proper dependencies.  Additionally, PHP disables libdl when it
detects a cross-compilation environment for some reason.  In order to
load any type of extension, re-enabling libdl is required.

Signed-off-by: Claude Bing <cbing@cybernetics.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 0145cb4645)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-05-17 14:36:56 -07:00
Claude Bing
ecce4fe695 php: fix PACKAGECONFIG for soap
PHP 7.4 enables libxml by default and removed it as a configurable
option.

Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 7aeef522ff)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-05-17 14:32:08 -07:00
Konrad Weihmann
99f2050d08 php: fix zip package config
--enable-zip and --with-libzip were removed in PHP 7.x.
These are replaced by --with-zip --with-zlib-dir.

Signed-off-by: Konrad Weihmann <kweihmann@outlook.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 6690afa59e)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-05-17 14:26:22 -07:00
Honggyu Kim
5098155437 uftrace: update commit hash to more robust version
Since uftrace-0.9.4 was released, there has been some important bug
fixes.  It would be better to include such bug fix commits so this patch
updates the commit hash to more stable one.

The bug fix patches are as follows:

[1] a0fbee404b
[2] 251ba74a72
[3] 19e6f0d4b3
[4] d648bbffed

Signed-off-by: Honggyu Kim <honggyu.kp@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-04-30 07:36:08 -07:00
Khem Raj
ec058689d8 abseil-cpp: Fix build on riscv32
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-04-29 22:32:17 -07:00
Khem Raj
81cb6e232a luajit: Disable on rv32
Not ported to rv32 yet

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-04-29 22:32:17 -07:00
Changqing Li
7cc7a9ec88 php: upgrade 7.3.16 -> 7.4.4
License-Update: License updated (year updated)

note: for 7.4, pear is disabled by default,
and it will be deprecated in future.

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-04-27 07:48:47 -07:00
Ting Liu
13174e92a9 cjson: add recipe for v1.7.13
cJSON aims to be the dumbest possible parser that you can get your
job done with. It's a single file of C, and a single header file.

Homepage: https://github.com/DaveGamble/cJSON

Signed-off-by: Ting Liu <ting.liu@nxp.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-04-26 23:10:57 -07:00
Khem Raj
d7b31f2bf4 ltrace: Do not build on riscv
Does not have riscv port yet

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-04-25 08:32:41 -07:00
Khem Raj
74a3ff28f5 breakpad: Disable build on riscv
Unsupported arch as of now

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-04-25 08:32:41 -07:00
Chenxi Mao
794d0cc12e Android-tools: Support Risc-V ISA
Risc-V ADB implementation is based on ARM64 implemtentation.
The core change is leverage fence command to implement memroy barrier
featrue.

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-04-20 21:45:13 -07:00
Haseeb Ashraf
334ce5ab37 luaposix: add 33.4.0 version recipe which is compatible with lua5.3
Signed-off-by: Haseeb Ashraf <Haseeb_Ashraf@mentor.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-04-17 19:05:58 -07:00
Haseeb Ashraf
7c37f90893 modify LUA_CPATH_DEFAULT for 64-bit architectures
LUA_CPATH_DEFAULT for *.so files should include
LUA_ROOT/lib64/lua/LUA_VDIR not LUA_ROOT/lib/lua/LUA_VDIR

Signed-off-by: Haseeb Ashraf <Haseeb_Ashraf@mentor.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-04-16 11:40:40 -07:00
Changqing Li
60c1d2eb9a php: upgrade 7.3.11 -> 7.3.16
* upgrade to 7.3.16
* remove unuseful patches

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-04-16 08:43:06 -07:00
Martin Jansa
3bd2833065 lapack: use git fetcher
* fixes:
  ERROR: lapack-3.9.0-r0 do_package_qa: QA Issue: lapack: SRC_URI uses unstable GitHub archives [src-uri-bad]

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-04-15 23:10:02 -07:00
Khem Raj
db0075f503 nodejs: Fix -Wc++11-narrowing on mips
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-04-15 23:10:02 -07:00
Wang Mingyu
184e38775c cpuid: upgrade 20200203 -> 20200211
Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-04-14 21:26:57 -07:00
Pierre-Jean Texier
b069fb8442 nlohmann-fifo: use UPSTREAM_CHECK_COMMITS
Fixes:

$: devtool check-upgrade-status nlohmann-fifo
<...>

INFO: nlohmann-fifo             1.0.0           UNKNOWN_BROKEN  None

Signed-off-by: Pierre-Jean Texier <pjtexier@koncepto.io>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-04-12 22:57:22 -07:00
Khem Raj
f47c88c4cd abseil-cpp: Fix build on musl/mips
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-04-09 13:29:11 -07:00
Wang Mingyu
be3f961493 lapack: upgrade 3.8.0 -> 3.9.0
Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-03-25 06:52:29 -07:00
Adrian Bunk
6eecab74e3 octave: Fix QA issues
WARNING: octave-4.4.1-r0 do_package_qa: QA Issue: package contains desktop file with key 'MimeType' but does not inhert mime-xdg [mime-xdg]
WARNING: octave-4.4.1-r0 do_package_qa: QA Issue: octave: SRC_URI uses PN not BPN [src-uri-bad]

Signed-off-by: Adrian Bunk <bunk@stusta.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-03-21 13:40:57 -07:00
Khem Raj
1f457c22c8 node: Enable cross-compiling options and disable dtrace and etw
dtrace and etw are hardly used for embedded usecase

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-03-20 07:44:29 -07:00
Wang Mingyu
539119d170 php: CVE-2019-11045.patch CVE-2019-11046.patch CVE-2019-11047.patch CVE-2019-11050.patch
Security Advisory

References:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11045
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11046
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11047
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11050

Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-03-18 19:29:01 -07:00
Kai Kang
a12ce6d446 doxygen-native: fix compile error
It fails to compile doxygen-native when /usr/bin/python is a link to
python3 on build host:

| Failed to import the site module
| Traceback (most recent call last):
|   File "/usr/lib64/python3.6/site.py", line 564, in <module>
|     main()
|   File "/usr/lib64/python3.6/site.py", line 550, in main
|     known_paths = addusersitepackages(known_paths)
|   File "/usr/lib64/python3.6/site.py", line 282, in addusersitepackages
|     user_site = getusersitepackages()
|   File "/usr/lib64/python3.6/site.py", line 258, in getusersitepackages
|     user_base = getuserbase() # this will also set USER_BASE
|   File "/usr/lib64/python3.6/site.py", line 248, in getuserbase
|     USER_BASE = get_config_var('userbase')
|   File "/usr/lib64/python3.6/sysconfig.py", line 604, in get_config_var
|     return get_config_vars().get(name)
|   File "/usr/lib64/python3.6/sysconfig.py", line 553, in get_config_vars
|     _init_posix(_CONFIG_VARS)
|   File "/usr/lib64/python3.6/sysconfig.py", line 424, in _init_posix
|     _temp = __import__(name, globals(), locals(), ['build_time_vars'], 0)
| ModuleNotFoundError: No module named '_sysconfigdata'

Replace find_package PythonInterp with Python3 to fix this issue that
it uses python3 from python3-native. And it also replaces the result
variable PYTHON_EXECUTABLE with Python3_EXECUTABLE.

This patch is only needded by doxygen-native.

Signed-off-by: Kai Kang <kai.kang@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-03-18 15:33:49 -07:00
Wang Mingyu
28dd862c92 flatbuffers: upgrade 1.11.0 -> 1.12.0
0001-Add-detection-of-strtoull_l-function.patch
removed since it is included in 1.12.0

Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-03-17 19:46:35 -07:00
Zang Ruochen
866c0c40d5 glade: upgrade 3.22.1 -> 3.22.2
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-03-17 19:46:35 -07:00
Jaga
e331ce08e4 nodejs: install gen-regexp-special-case only when icu is enabled
Fixes install errors when icu packageconfig is disabled

Signed-off-by: Jaga <jagadheesan_duraisamy@comcast.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-03-12 09:58:05 -07:00
Khem Raj
70f464892b abseil-cpp: Depend on libexecinfo on musl
Needed for execinfo to work
Fixes
absl/debugging/internal/stacktrace_generic-inl.inc:14:10: fatal error: 'execinfo.h' file not found
         ^~~~~~~~~~~~
1 error generated.

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-03-09 12:37:28 -07:00
Zheng Ruoqin
3173648279 dnf-plugin-tui: upgrade 1.0 -> 1.1
Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-03-08 22:23:12 -07:00
Pierre-Jean Texier
19f08efb42 abseil-cpp: set PV in the recipe
Fixes:

INFO: Skip package abseil-cpp (status = UNKNOWN_BROKEN, current version = git, next version = 20200225.1)

Signed-off-by: Pierre-Jean Texier <pjtexier@koncepto.io>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-03-06 17:23:54 -08:00
Changqing Li
311f98fd03 python3-pygobject: remove this recipe
python3-pygobject already in oe-core, previously,
we have python-pygobject in meta-oe, but recently, in order
to drop python2, we transfer python-pygobject to
python3-pygobject, so duplicated with oe-core, meantime,
this will cause test_signature failure when do yocto-check-layer
for layer meta-oe.

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-03-06 17:23:54 -08:00
Pierre-Jean Texier
4211ff4855 cloc: fix upstream version check
Fixes:

INFO: Skip package cloc (status = UNKNOWN_BROKEN, current version = 1.84, next version = N/A)

After this commit:

INFO: Skip package cloc (status = MATCH, current version = 1.84, next version = 1.84)

Signed-off-by: Pierre-Jean Texier <pjtexier@koncepto.io>
2020-03-05 07:11:50 -08:00
Pierre-Jean Texier
07196b6a8c pugixml: fix upstream version check
Fixes:

INFO: Skip package pugixml (status = UNKNOWN_BROKEN, current version = 1.10, next version = N/A)

After this commit:

INFO: Skip package pugixml (status = MATCH, current version = 1.10, next version = 1.10)

Signed-off-by: Pierre-Jean Texier <pjtexier@koncepto.io>
2020-03-05 07:11:50 -08:00
Pierre-Jean Texier
c4fa664720 jq: fix upstream version check
Fixes:

INFO: Skip package jq (status = UNKNOWN_BROKEN, current version = 1.6, next version = N/A)

After this commit:

INFO: Skip package jq (status = MATCH, current version = 1.6, next version = 1.6)

Signed-off-by: Pierre-Jean Texier <pjtexier@koncepto.io>
2020-03-05 07:11:50 -08:00
André Draszik
b3b81507b7 nodejs: allow use of system brotli (and make default)
Use system brotli via PACKAGECONFIG by default. So far,
nodejs had been built using its embedded copy of brotli,
which we generally try to avoid, for the known reasons
(independent updates, cve & license checks, etc).

The nodejs patches to enable this have been submitted.
brotli is in meta-oe, so enabling this by default should
not be a problem.

Signed-off-by: André Draszik <andre.draszik@jci.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-03-03 11:40:40 -08:00
André Draszik
754b54699b nodejs: drop 'gyp' PACKAGECONFIG
During the python3 / nodejs update, the dependencies weren't updated, so
using system-gyp ends up trying to use the python2 version of system-
gyp, which will of course fail.
Fixing this to depend on the python3 version of gyp still doesn't
doesn't make things work, though:
    ERROR: nodejs-native-12.14.1-r0 do_configure: Execution of '.../nodejs-native/12.14.1-r0/temp/run.do_configure.26054' failed with exit code 1:
    gyp: Error importing pymod_do_mainmodule (ForEachFormat): No module named 'ForEachFormat' while loading dependencies of .../nodejs-native/12.14.1-r0/node-v12.14.1/node.gyp while trying to load .../nodejs-native/12.14.1-r0/node-v12.14.1/node.gyp
    Error running GYP

The reason is commit fff922afee6e ("deps,build: compute torque_outputs in v8.gyp")
in NodeJS v12, where they modified their bundled version of gyp to
become incompatible with the upstream version of gyp by adding extra /
unusual search paths to gyp.

Since I'm not sure how to deal with that when using system-gyp, and because
the original intention for using system-gyp was to make the previous nodejs
version compatible with python3 by ultimately switching to the python3 version
of system-gyp which isn't necessary anymore, and given nobody else seems to
be using this PACKAGECONFIG, just drop it.

Signed-off-by: André Draszik <andre.draszik@jci.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-03-03 11:40:40 -08:00
Martin Jansa
5abf5531c2 grpc: move from meta-networking to meta-oe
* because sysdig from meta-oe depends on it now, since:
  commit ed798c7643
  Author: Khem Raj <raj.khem@gmail.com>
  Date:   Wed Jan 2 17:59:20 2019 -0800

    sysdig: Upgrade to 0.26.5

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-03-03 09:23:08 -08:00
Wang Mingyu
d603f0d532 protobuf: upgrade 3.11.3 -> 3.11.4
Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-03-02 22:46:06 -08:00
Wang Mingyu
80b4a81b94 protobuf-c: upgrade 1.3.2 -> 1.3.3
Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-03-02 22:46:06 -08:00
Wang Mingyu
2fe19e3048 libio-pty-perl: upgrade 1.12 -> 1.14
Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-03-02 22:46:06 -08:00
Wang Mingyu
efe61e9377 jsonrpc: upgrade 1.2.0 -> 1.3.0
Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-03-02 22:46:06 -08:00