We need to check for clang in configure so
the warning options can be added surgically
depending upon compiler type
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Without this, thrift will try to use system java to build it's java
bindings, which is both unexpected and may fail depending on the
version of system java.
Signed-off-by: Cody P Schafer <dev@codyps.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Add CVE-2016-4476 patch for avoiding \n and \r characters in passphrase
parameters, which allows remote attackers to cause a denial of service
(daemon outage) via a crafted WPS operation.
patches came from http://w1.fi/security/2016-1/
Signed-off-by: Zhixiong Chi <zhixiong.chi@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* autodetected for smsd as reported in bitbake world status e-mails:
gammu-1.32.0: libgsmsd rdepends on unixodbc, but it isn't a build dependency, missing unixodbc in DEPENDS or PACKAGECONFIG? [build-deps]
* log.do_package:
DEBUG: libgsmsd: Dependency libodbc.so.2 requires package unixodbc (used by files: /OE/build/oe-core/tmp-glibc/work/i586-oe-linux/gammu/1.32.0-r0/packages-split/libgsmsd/usr/lib/libgsmsd.so.7.1.32.0)
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* Put binary "/usr/bin/nm-online" into main package
as the systemd service "NetworkManager-wait-online.service"
is provided by main package and it needs to run
"/usr/bin/nm-online"
* Correct "NetworkManager-wait-online.service.in"
to avoid dependency circle and get right service status
Signed-off-by: Haiqing Bai <Haiqing.Bai@windriver.com>
Signed-off-by: Mingli Yu <Mingli.Yu@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* fix CVEs: CVE-2015-8629, CVE-2015-8630, CVE-2015-8631
* update LIC_FILES_CHKSUM, only Copyright changed in NOTICE file:
-Copyright (C) 1985-2015 by the Massachusetts Institute of Technology.
+Copyright (C) 1985-2016 by the Massachusetts Institute of Technology.
* remove useless functions: krb5_do_unpack(), do_unpack()
* remove patches that included by new release:
- 0001-Work-around-uninitialized-warning-in-cc_kcm.c.patch
- Fix-SPNEGO-context-aliasing-bugs-CVE-2015-2695.patch
- Fix-IAKERB-context-aliasing-bugs-CVE-2015-2696.patch
- Fix-build_principal-memory-bug-CVE-2015-2697.patch
- Fix-IAKERB-context-export-import-CVE-2015-2698.patch
- krb5-CVE-2016-3119.patch
- krb5-CVE-2016-3120.patch
Signed-off-by: Wenzong Fan <wenzong.fan@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
thrift build issues on gcc-6 were essentially 2 issues:
- gcc-6 has stricter overflow checking on array declaration, and
thrift was using `char` when it should have used `signed char`
- gcc-6 is really picky about it's include paths (`-I`), and thrift
had a bad habbit of passing internal ones when it was cross compiled
due to how it was using `include_directories()`
This adds 2 patches (both variations of those submitted upstream, the
ones included here are rebased onto thrift-0.9.3).
https://issues.apache.org/jira/browse/THRIFT-3831https://issues.apache.org/jira/browse/THRIFT-3828
Signed-off-by: Cody P Schafer <dev@codyps.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
libgudev:
* Is not configurable -> DEPENDS
* fixes
| WARNING: libqmi-1.16.0-r0 do_package_qa: QA Issue: libqmi rdepends on libgudev, but it isn't a build dependency, missing libgudev in DEPENDS or PACKAGECONFIG? [build-deps]
| WARNING: libqmi-1.16.0-r0 do_package_qa: QA Issue: libqmi rdepends on libudev, but it isn't a build dependency, missing systemd in DEPENDS or PACKAGECONFIG? [build-deps]
| WARNING: libqmi-1.16.0-r0 do_package_qa: QA Issue: libqmi rdepends on libcap, but it isn't a build dependency, missing libcap in DEPENDS or PACKAGECONFIG? [build-deps]
libmbim:
* tested
PACKAGECONFIG ??= ""
PACKAGECONFIG[libmbim] = "--enable-mbim-qmux, --disable-mbim-qmux, libmbim"
configure reported correct "QMUX over MBIM: no" but still
| WARNING: libqmi-1.16.0-r0 do_package_qa: QA Issue: libqmi rdepends on libmbim, but it isn't a build dependency, missing libmbim in DEPENDS or PACKAGECONFIG? [build-deps]
=> libmbim -> DEPENDS
Signed-off-by: Andreas Müller <schnitzeltony@googlemail.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
1) Upgrade networkmanager from 1.0.10 to 1.0.12.
2) Delete some patches, since they are no use.
0003-core-fix-failure-to-configure-routes-due-to-wrong-de.patch
0004-ppp-manager-clear-ppp_watch_id-upon-pppd-termination.patch
0005-device-update-ip_iface-only-if-IP-interface-exists.patch
Signed-off-by: Wang Xin <wangxin2015.fnst@cn.fujitsu.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
This is CVE-2016-3120
The validate_as_request function in kdc_util.c in the Key Distribution
Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.13.6 and 1.4.x before
1.14.3, when restrict_anonymous_to_tgt is enabled, uses an incorrect
client data structure, which allows remote authenticated users to cause
a denial of service (NULL pointer dereference and daemon crash) via an
S4U2Self request.
Signed-off-by: Alexandru Moise <alexandru.moise@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Remove superfluous "+=", then manually add necessary leading space.
Signed-off-by: Robert P. J. Day <rpjday@crashcourse.ca>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* fixes:
| checking for ar... arm-starfish-linux-gnueabi-ar
| ../gnokii-0.6.31/configure: line 5688: syntax error near unexpected token `0.35.0'
| ../gnokii-0.6.31/configure: line 5688: `IT_PROG_INTLTOOL(0.35.0)'
| WARNING: exit code 1 from a shell command.
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Added PACKAGECONFIG to use libsodium instead of builtin tweetnacl.
Compiling with current master led to:
| ../zeromq-4.1.5/src/ctx.cpp:50:28: fatal error: randombytes.h: No such file or directory
| # include "randombytes.h"
| ^
| compilation terminated.
| Makefile:2573: recipe for target 'src/libzmq_la-ctx.lo' failed
| make[1]: *** [src/libzmq_la-ctx.lo] Error 1
| make[1]: *** Waiting for unfinished jobs....
| In file included from ../zeromq-4.1.5/src/curve_client.cpp:41:0:
| ../zeromq-4.1.5/src/curve_client.hpp:39:31: fatal error: tweetnacl_base.h: No such file or directory
| # include "tweetnacl_base.h"
| ^
| compilation terminated.
Using external libsodium works around this. The default for PACKAGECONFIG is
set to use external libsodium so the recipe builds.
Signed-off-by: Philip Balister <philip@balister.org>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* when native python 2.7 is used, do_configure fails with:
checking whether sysroots/x86_64-linux/usr/bin/python-native/python version is >= 3.1... no
configure: error: Python interpreter is too old
WARNING: exit code 1 from a shell command.
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
The networkmanager build runs dbus-binding-tool, which only exists if
dbus-glib-native has been built, and will fail otherwise.
Signed-off-by: Christopher Larson <chris_larson@mentor.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Fix opie-image:
ERROR: Nothing PROVIDES 'obexftp'
ERROR: obexftp was skipped: Recipe is blacklisted: bluez5 conflicts with
bluez4 and bluez5 is selected in DISTRO_FEATURES
Somehow on 2015-05-11 obex* had been blacklisted and on the same day Dmitry
sent the patches #93471 and #93473.
Openobex was then fixed (bluez 4 vs. 5 ) with commit id
3d6d36d24b.
Originally
Signed-off-by: Dmitry Eremin-Solenikov <dmitry_eremin@mentor.com>
Signed-off-by: Andrea Adami <andrea.adami@gmail.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
On some targets clang erroniously detects an uninitialized variable.
Backport the fix from upstream.
Signed-off-by: Daniel McGregor <daniel.mcgregor@vecima.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* Run tested cpp bindings with GNU Radio Control Port.
* The patch forcible removes Qt5 from configure. The disable is correct,
but doesn't prevent a cmake error looking for qmake during configure.
We do not need Qt5, so remove check. I suspect the issue might be in
Qt5 cmake files.
Signed-off-by: Philip Balister <philip@balister.org>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Backport <commit 08c642c09c38a9c6454ab43a9b53b2a89b9eef99> from krb5
upstream <https://github.com/krb5/krb5> to fix CVE-2016-3119
avoid remote authenticated users to cause a denial of service (NULL pointer
dereference and daemon crash) via a crafted request to modify a principal.
Signed-off-by: Zhixiong Chi <Zhixiong.Chi@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
base_contains() is a compatibility wrapper and may warn in the future, so
replace all instances with bb.utils.contains().
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
The SRC_URI is up again, no need to blacklist the recipe if we disable parallel make
The following error can ocurr in a race condition:
scan.l:38:18: fatal error: gram.h: No such file or directory
http://errors.yoctoproject.org/Errors/Details/56158/
That is, the scan.l file is parsed before the gram.h file is generated.
To avoid this, we clear the PARALLEL_MAKE variable.
Signed-off-by: Adrian Dudau <adrian.dudau@enea.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
add native and nativesdk extend, curl-native/nativesdk need them.
replace the hardcode /etc with ${sysconfdir}, /var with ${localstatedir}
Signed-off-by: Roy Li <rongqing.li@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
No further updates were required, aside from changing the
checksums and renaming the file.
Signed-off-by: Ruben De Smet <ruben.de.smet@rubdos.be>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* SRC_URI seems to be down:
fatal: unable to connect to git.umip.org:
git.umip.org[0: 77.133.223.36]: errno=Connection timed out
git.umip.org[1: 2a02:8428:26f:b200:221:70ff:fe55:8f78]: errno=Network is unreachable
* and build fails with:
scan.l:38:18: fatal error: gram.h: No such file or directory
http://errors.yoctoproject.org/Errors/Details/56158/
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Now that the real introspection is available, and legacy pygobject is not,
the patch to use the latter should be removed.
Signed-off-by: Alexander Kanavin <alexander.kanavin@linux.intel.com>
