summaryrefslogtreecommitdiffstats
AgeCommit message (Collapse)Author
2019-10-30poky.conf: Bump version for 2.7.2 warrior releaseyocto-2.7.2warrior-21.0.2Richard Purdie
(From meta-yocto rev: a6f2b72a6044dc8c48a331e21afe7a83a113e038) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-10-30qemu: update to 3.1.1.1Armin Kuster
bug fix only update. Drop patches included in update. For full set of changes, see: https://git.qemu.org/?p=qemu.git;a=shortlog;h=refs/tags/v3.1.1.1 (From OE-Core rev: 14f04e6b6c1fa40a1c39cd186627b4b8442f2d5e) Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-10-30go: fix CVE-2019-16276Chen Qi
(From OE-Core rev: 5fc9b154754e67553296a00a39ed16ab6a1d59de) Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit e31f87e289dfd3bbca961e927447a9c7ba816d3f) Signed-off-by: Armin Kuster <akuster808@gmail.com> (cherry picked from commit e02e8fa2e82cceaaa6a433466f52f97b0984762a) Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-10-30sudo: fix CVE-2019-14287Changqing Li
In Sudo before 1.8.28, an attacker with access to a Runas ALL sudoer account can bypass certain policy blacklists and session PAM modules, and can cause incorrect logging, by invoking sudo with a crafted user ID. For example, this allows bypass of !root configuration, and USER= logging, for a "sudo -u \#$((0xffffffff))" command. (From OE-Core rev: 650dd9486d6e5410665d5376be30732c7625396d) Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 4e11cd561f2bdaa6807cf02ee7c9870881826308) Signed-off-by: Armin Kuster <akuster808@gmail.com> (cherry picked from commit b1e0149c41e3c344a0496e64ab3b0c9dd4685ea4) Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-10-30libgcrypt: fix CVE-2019-12904Yi Zhao
In Libgcrypt 1.8.4, the C implementation of AES is vulnerable to a flush-and-reload side-channel attack because physical addresses are available to other processes. (The C implementation is used on platforms where an assembly-language implementation is unavailable.) Reference: https://nvd.nist.gov/vuln/detail/CVE-2019-12904 Patches from: https://github.com/gpg/libgcrypt/commit/1374254c2904ab5b18ba4a890856824a102d4705 https://github.com/gpg/libgcrypt/commit/daedbbb5541cd8ecda1459d3b843ea4d92788762 https://github.com/gpg/libgcrypt/commit/a4c561aab1014c3630bc88faf6f5246fee16b020 (From OE-Core rev: a981d9b753a13e100af1f654fb3384f0bcda0b65) Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Ross Burton <ross.burton@intel.com> (cherry picked from commit 37e390ff05b6a4509019db358ed496731d80cc51) Signed-off-by: Armin Kuster <akuster808@gmail.com> (cherry picked from commit 4c207cb1ad46c0d2005ab3eae70d78c937e084b5) Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-10-30openssl: make OPENSSL_ENGINES match install pathGeorge McCollister
Set OPENSSL_ENGINES to the path where engines are actually installed. (From OE-Core rev: 041fb2743a94d7fb065b073efbe5fe5cf46cde53) Signed-off-by: George McCollister <george.mccollister@gmail.com> Signed-off-by: Ross Burton <ross.burton@intel.com> (cherry picked from commit 59565fec0b3f3e24eb01c03b671913599cd3134d) Signed-off-by: Armin Kuster <akuster808@gmail.com> (cherry picked from commit 578f41124565a7cda738c7fe3d25702ee41b08ed) Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-10-30python: Fix CVE-2019-10160Changqing Li
(From OE-Core rev: 23d48f2bea2d358bd8d7d4efd07792bc1f3666bd) Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Ross Burton <ross.burton@intel.com> (cherry picked from commit b4240b585d7fcac2fdbf33a8e72d48cb732eb696) Signed-off-by: Armin Kuster <akuster808@gmail.com> (cherry picked from commit 10d87a3085665a959a5fda64ae3895cb27ddf343) Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-10-30python: CVE-2019-16056Chen Qi
(From OE-Core rev: 49ff6c7ef1d366007c49083f4e5faaf5a9eb086f) Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Armin Kuster <akuster808@gmail.com> (cherry picked from commit 27be9cf71a6fe906a23e81b56f1cc18a6fc9ef97) Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-10-30python: add tk-lib as runtime dependency for python-tkinterYi Zhao
Fixes: ERROR: python-2.7.16-r0 do_package_qa: QA Issue: /usr/lib/python2.7/lib-dynload/_tkinter.so contained in package python-tkinter requires libtk8.6.so, but no providers found in RDEPENDS_python-tkinter? [file-rdeps] (From OE-Core rev: f83ecbabb911c46de77708ede759a0b768928ea2) Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Ross Burton <ross.burton@intel.com> (cherry picked from commit f78248a2380bbbbf271b5bb02c762f5bc7a3a92e) Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-10-30python: include CVE patches for python-native as wellAnuj Mittal
Also avoids maintaining a different set of patches for both. (From OE-Core rev: e73d5bb4a21497ed645e2a0a4b88c2eeaf65080a) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit b3b1c00cc46b33ddbf7e008267032220e1e298af) Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-10-30libcroco: Fix two CVEsMuminul Islam
CVE: CVE-2017-8834 CVE-2017-8871 (From OE-Core rev: fe2d5b0d56201110323911d206243fdcc7f80115) Signed-off-by: Muminul Islam <muislam@microsoft.com> Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-10-30linux-yocto: add drm-bochs supportAlexander Kanavin
This allows better modesetting support for the '-vga std' emulated hardware provided by Qemu, which we want to standardize on. See here for background: https://bugzilla.yoctoproject.org/show_bug.cgi?id=13466 (From OE-Core rev: 569d3f5d0454ed31f2f6df29f1703246a3dcd715) (From OE-Core rev: 132fb930109f4930acfc8524bcc40faa3ba6d3d9) Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-10-30linux-yocto/4.19: make drm-bochs feature availableBruce Ashfield
The other active kernel versions have this feature available. To consistently enable the same video output for qemu, we can cherry pick the feature to 4.19. (From OE-Core rev: a777e0f34e106455f963bd58fd8728a16c588c4d) (From OE-Core rev: 2b7444e41e47e462a8aae0e3e1e95b04cdbaff22) Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-10-30kernel-yocto: import security fragments from meta-securityBruce Ashfield
Adding the following fragments from meta-security to make them centrally available and easier to maintain: 283939d5c9e kernel-cache: add yama security fragments 0b86f3fa241 kernel-cache: add ima fragments 731b466654d kernel-cache: add smack 813afe8ff47 kernel-cache: add apparmor fragments (From OE-Core rev: 3063d64984e993d3e7dc2f4c80fb74005f5d6d7e) (From OE-Core rev: f5ae4010dd29484627a169b8ab02b1012d1dd1d4) Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-10-30linux-yocto: arch/x86/boot: use prefix map to avoid embedded pathsBruce Ashfield
>From the kernel patch: [ It was observed that the kernel embeds the path in the x86 boot artifacts. From https://bugzilla.yoctoproject.org/show_bug.cgi?id=13458: [ If you turn on the buildpaths QA test, or try a reproducible build, you discover that the kernel image contains build paths. $ strings bzImage-5.0.19-yocto-standard |grep tmp/ out of pgt_buf in /data/poky-tmp/reproducible/tmp/work-shared/qemux86-64/kernel-source/arch/x86/boot/compressed/kaslr_64.c!? But what's this in the top-level Makefile: $ git grep prefix-map Makefile:KBUILD_CFLAGS += $(call cc-option,-fmacro-prefix-map=$(srctree)/=) So the __FILE__ shouldn't be using the full path. However arch/x86/boot/compressed/Makefile has this: KBUILD_CFLAGS := -m$(BITS) -O2 So that clears KBUILD_FLAGS, removing the -fmacro-prefix-map option. ] Other architectures do not clear the flags, but instead prune before adding boot or specific options. There's no obvious reason why x86 isn't doing the same thing (pruning vs clearing) and no build or boot issues have been observed. So we make x86 can do the same thing, and we no longer have embedded paths. ] This issue has been reported upstream, and a patch submission is pending, but for now, we'll soak the proposed patch in linux-yocto to see if any issues are found [YOCTO: #13458] (From OE-Core rev: 78b0ff5960814af935a8089ec49c51d76f148149) (From OE-Core rev: a45a6e12d6ce3a531ad924d3e548de8a95055866) Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-10-30linux-yocto: bsp/beaglebone: support qemu -machine virtBruce Ashfield
While we don't normally do a dual h/w and virt BSP (since they tend to have conflicting requirements over time). A minimal overhead option to do this was submitted to linux-yocto. Since it has no impact on the h/w reference, has SDK testing value and can serve as a template on how to do this for other arm boards, it is worth making the configuration available. The original commit log follows: [ If the kernel supports Qemu's virt machine, runqemu works almost for free. The device tree for machine virt is included in Qemu, which simplifies everything quite a bit. This change adds ARCH_VIRT=y and some drivers to the beaglebone kernel configuration which allows to: export MACHINE="beaglebone-yocto" bitbake core-image-minimale runqemu This also works out of an eSDK. Whithout this feature usually two different SDKs need to be compiled and maintained. One SDK is used for development in Qemu, another one is used to develop for the real target hardware. Signed-off-by: Adrian Freihofer <adrian.freihofer@siemens.com> ] (From OE-Core rev: cc1fca6d464775daa15032f11c02d16b99759407) (From OE-Core rev: 61eed761a51fcb5ac293b76b4dc6edbd6dbbb32f) Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-10-30linux-yocto/5.0: make scsi-debug include scsi core configsBruce Ashfield
Updating the scsi-debug fragment to include the core scsi config options. This allows standalone use of the fragment, since all supporting options will be enabled simply by including the top level config in a BSP. This also removes a configuration warning on qemuarm, since we will no longer have missing / unavailable options during the config audit. (From OE-Core rev: c65826e96a77928938fef69fc0cbc65ec7431cb2) (From OE-Core rev: 6c2c6bed0bd5f0a303b9aacfab7db6daec3ee878) Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-10-30linux-yocto/5.0: bsp: add basic xilinx zynqmp supportBruce Ashfield
Zumeng Chen has added core/basic support for the zynqmp that is bootable using the 5.0 and 5.2-rcX kernels. This makes the fragments available for future refinement and factoring. A bootlog follows: ZynqMP> setenv bootargs console=ttyPS0,115200 root=/dev/mmcblk0p3 rw rootwait earlycon=cdns,mmio,0xFF000000 clk_ignore_unused ip=dhcp ZynqMP> tftpboot 0x10000000 Image; tftpboot 0x11800000 dtb; booti 0x10000000 - 0x11800000 Using ethernet@ff0e0000 device Filename 'Image'. Load address: 0x10000000 Loading: ########### 11.3 MiB/s done Bytes transferred = 16378368 (f9ea00 hex) Using ethernet@ff0e0000 device TFTP from server 128.224.162.211; our IP address is 128.224.162.99 Filename 'dtb'. Load address: 0x11800000 Loading: ## 4.7 MiB/s done Bytes transferred = 19746 (4d22 hex) Booting using the fdt blob at 0x11800000 Loading Device Tree to 0000000007ff8000, end 0000000007fffd21 ... OK Starting kernel ... Booting Linux on physical CPU 0x0000000000 [0x410fd034] Linux version 5.2.0-rc3-yoctodev-standard (oe-user@oe-host) (gcc version 9.1.0 (GCC)) #1 SMP PREEMPT Thu Jun 6 00:53:26 UTC 2019 Machine model: ZynqMP ZCU102 Rev1.0 earlycon: cdns0 at MMIO 0x00000000ff000000 (options '') printk: bootconsole [cdns0] enabled efi: Getting EFI parameters from FDT: efi: UEFI not found. cma: Reserved 16 MiB at 0x000000007ec00000 psci: probing for conduit method from DT. psci: PSCIv1.1 detected in firmware. psci: Using standard PSCI v0.2 function IDs psci: MIGRATE_INFO_TYPE not supported. psci: SMC Calling Convention v1.1 percpu: Embedded 30 pages/cpu s83416 r8192 d31272 u122880 Detected VIPT I-cache on CPU0 CPU features: detected: ARM erratum 845719 Speculative Store Bypass Disable mitigation not required Built 1 zonelists, mobility grouping on. Total pages: 1031940 Kernel command line: console=ttyPS0,115200 root=/dev/mmcblk0p3 rw rootwait earlycon=cdns,mmio,0xFF000000 clk_ignore_unused ip=dhcp Dentry cache hash table entries: 524288 (order: 10, 4194304 bytes) Inode-cache hash table entries: 262144 (order: 9, 2097152 bytes) software IO TLB: mapped [mem 0x7ac00000-0x7ec00000] (64MB) Memory: 4013572K/4193280K available (10748K kernel code, 1210K rwdata, 2764K rodata, 1216K init, 757K bss, 163324K reserved, 16384K cma-reserved) SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=4, Nodes=1 ftrace: allocating 36121 entries in 142 pages rcu: Preemptible hierarchical RCU implementation. rcu: RCU restricting CPUs from NR_CPUS=256 to nr_cpu_ids=4. Tasks RCU enabled. rcu: RCU calculated value of scheduler-enlistment delay is 25 jiffies. rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=4 NR_IRQS: 64, nr_irqs: 64, preallocated irqs: 0 GIC: Adjusting CPU interface base to 0x00000000f902f000 GIC: Using split EOI/Deactivate mode random: get_random_bytes called from start_kernel+0x328/0x4c4 with crng_init=0 arch_timer: cp15 timer(s) running at 99.99MHz (phys). clocksource: arch_sys_counter: mask: 0xffffffffffffff max_cycles: 0x170f8de2d3, max_idle_ns: 440795206112 ns sched_clock: 56 bits at 99MHz, resolution 10ns, wraps every 4398046511101ns Console: colour dummy device 80x25 Calibrating delay loop (skipped), value calculated using timer frequency.. 199.98 BogoMIPS (lpj=399960) pid_max: default: 32768 minimum: 301 LSM: Security Framework initializing Mount-cache hash table entries: 8192 (order: 4, 65536 bytes) Mountpoint-cache hash table entries: 8192 (order: 4, 65536 bytes) *** VALIDATE proc *** *** VALIDATE cgroup1 *** *** VALIDATE cgroup2 *** ASID allocator initialised with 32768 entries rcu: Hierarchical SRCU implementation. EFI services will not be available. smp: Bringing up secondary CPUs ... Detected VIPT I-cache on CPU1 CPU1: Booted secondary processor 0x0000000001 [0x410fd034] Detected VIPT I-cache on CPU2 CPU2: Booted secondary processor 0x0000000002 [0x410fd034] Detected VIPT I-cache on CPU3 CPU3: Booted secondary processor 0x0000000003 [0x410fd034] smp: Brought up 1 node, 4 CPUs SMP: Total of 4 processors activated. CPU features: detected: 32-bit EL0 Support CPU features: detected: CRC32 instructions CPU: All CPU(s) started at EL2 alternatives: patching kernel code devtmpfs: initialized clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 7645041785100000 ns futex hash table entries: 1024 (order: 4, 65536 bytes) xor: measuring software checksum speed 8regs : 2360.000 MB/sec 32regs : 2706.000 MB/sec arm64_neon: 2018.000 MB/sec xor: using function: 32regs (2706.000 MB/sec) DMI not present or invalid. NET: Registered protocol family 16 cpuidle: using governor ladder hw-breakpoint: found 6 breakpoint and 4 watchpoint registers. DMA: preallocated 256 KiB pool for atomic allocations ��ɥ��ѭ console [ttyPS0] enabled 0xff000000 (irq = 33, base_baud = 6250000) is a xuartps printk: console [ttyPS0] enabled printk: bootconsole [cdns0] disabled printk: bootconsole [cdns0] disabled ff010000.serial: ttyPS1 at MMIO 0xff010000 (irq = 34, base_baud = 6250000) is a xuartps HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages HugeTLB registered 32.0 MiB page size, pre-allocated 0 pages HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages HugeTLB registered 64.0 KiB page size, pre-allocated 0 pages raid6: neonx8 gen() 1518 MB/s raid6: neonx8 xor() 1442 MB/s raid6: neonx4 gen() 1471 MB/s raid6: neonx4 xor() 1409 MB/s raid6: neonx2 gen() 1128 MB/s raid6: neonx2 xor() 1175 MB/s raid6: neonx1 gen() 737 MB/s raid6: neonx1 xor() 887 MB/s raid6: int64x8 gen() 1166 MB/s raid6: int64x8 xor() 763 MB/s raid6: int64x4 gen() 983 MB/s raid6: int64x4 xor() 739 MB/s raid6: int64x2 gen() 683 MB/s raid6: int64x2 xor() 601 MB/s raid6: int64x1 gen() 452 MB/s raid6: int64x1 xor() 462 MB/s raid6: using algorithm neonx8 gen() 1518 MB/s raid6: .... xor() 1442 MB/s, rmw enabled raid6: using neon recovery algorithm vgaarb: loaded SCSI subsystem initialized usbcore: registered new interface driver usbfs usbcore: registered new interface driver hub usbcore: registered new device driver usb media: Linux media interface: v0.10 videodev: Linux video capture interface: v2.00 pps_core: LinuxPPS API ver. 1 registered pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti <giometti@linux.it> PTP clock support registered EDAC MC: Ver: 3.0.0 FPGA manager framework clocksource: Switched to clocksource arch_sys_counter *** VALIDATE hugetlbfs *** NET: Registered protocol family 2 tcp_listen_portaddr_hash hash table entries: 2048 (order: 3, 32768 bytes) TCP established hash table entries: 32768 (order: 6, 262144 bytes) TCP bind hash table entries: 32768 (order: 7, 524288 bytes) TCP: Hash tables configured (established 32768 bind 32768) UDP hash table entries: 2048 (order: 4, 65536 bytes) UDP-Lite hash table entries: 2048 (order: 4, 65536 bytes) NET: Registered protocol family 1 RPC: Registered named UNIX socket transport module. RPC: Registered udp transport module. RPC: Registered tcp transport module. RPC: Registered tcp NFSv4.1 backchannel transport module. PCI: CLS 0 bytes, default 64 hw perfevents: no interrupt-affinity property for /pmu, guessing. hw perfevents: enabled with armv8_pmuv3 PMU driver, 7 counters available kprobes: failed to populate blacklist: -22 Please take care of using kprobes. workingset: timestamp_bits=46 max_order=20 bucket_order=0 NFS: Registering the id_resolver key type Key type id_resolver registered Key type id_legacy registered jffs2: version 2.2. �© 2001-2006 Red Hat, Inc. Block layer SCSI generic (bsg) driver version 0.4 loaded (major 246) io scheduler mq-deadline registered io scheduler kyber registered nwl-pcie fd0e0000.pcie: Link is DOWN nwl-pcie fd0e0000.pcie: host bridge /amba/pcie@fd0e0000 ranges: nwl-pcie fd0e0000.pcie: MEM 0xe0000000..0xefffffff -> 0xe0000000 nwl-pcie fd0e0000.pcie: MEM 0x600000000..0x7ffffffff -> 0x600000000 nwl-pcie fd0e0000.pcie: PCI host bridge to bus 0000:00 pci_bus 0000:00: root bus resource [bus 00-ff] pci_bus 0000:00: root bus resource [mem 0xe0000000-0xefffffff] pci_bus 0000:00: root bus resource [mem 0x600000000-0x7ffffffff pref] pci 0000:00:00.0: [10ee:d021] type 01 class 0x060400 pci 0000:00:00.0: PME# supported from D0 D1 D2 D3hot pci 0000:00:00.0: PCI bridge to [bus 01-0c] pcieport 0000:00:00.0: PME: Signaling with IRQ 37 xilinx-zynqmp-dma fd500000.dma: ZynqMP DMA driver Probe success xilinx-zynqmp-dma fd510000.dma: ZynqMP DMA driver Probe success xilinx-zynqmp-dma fd520000.dma: ZynqMP DMA driver Probe success xilinx-zynqmp-dma fd530000.dma: ZynqMP DMA driver Probe success xilinx-zynqmp-dma fd540000.dma: ZynqMP DMA driver Probe success xilinx-zynqmp-dma fd550000.dma: ZynqMP DMA driver Probe success xilinx-zynqmp-dma fd560000.dma: ZynqMP DMA driver Probe success xilinx-zynqmp-dma fd570000.dma: ZynqMP DMA driver Probe success cacheinfo: Unable to detect cache hierarchy for CPU 0 brd: module loaded loop: module loaded ahci-ceva fd0c0000.ahci: AHCI 0001.0301 32 slots 2 ports 6 Gbps 0x3 impl platform mode ahci-ceva fd0c0000.ahci: flags: 64bit ncq sntf pm clo only pmp fbs pio slum part ccc sds apst scsi host0: ahci-ceva scsi host1: ahci-ceva ata1: SATA max UDMA/133 mmio [mem 0xfd0c0000-0xfd0c1fff] port 0x100 irq 31 ata2: SATA max UDMA/133 mmio [mem 0xfd0c0000-0xfd0c1fff] port 0x180 irq 31 libphy: Fixed MDIO Bus: probed CAN device driver interface libphy: MACB_mii_bus: probed Generic PHY ff0e0000.ethernet-ffffffff:0c: attached PHY driver [Generic PHY] (mii_bus:phy_addr=ff0e0000.ethernet-ffffffff:0c, irq=POLL) macb ff0e0000.ethernet eth0: Cadence GEM rev 0x50070106 at 0xff0e0000 irq 20 (00:0a:35:04:9a:86) dwc3 fe200000.usb: Failed to get clk 'ref': -2 dwc3 fe200000.usb: Configuration mismatch. dr_mode forced to host xhci-hcd xhci-hcd.0.auto: xHCI Host Controller xhci-hcd xhci-hcd.0.auto: new USB bus registered, assigned bus number 1 xhci-hcd xhci-hcd.0.auto: hcc params 0x0238f625 hci version 0x100 quirks 0x0000000002010010 xhci-hcd xhci-hcd.0.auto: irq 35, io mem 0xfe200000 hub 1-0:1.0: USB hub found hub 1-0:1.0: 1 port detected xhci-hcd xhci-hcd.0.auto: xHCI Host Controller xhci-hcd xhci-hcd.0.auto: new USB bus registered, assigned bus number 2 xhci-hcd xhci-hcd.0.auto: Host supports USB 3.0 SuperSpeed usb usb2: We don't know the algorithms for LPM for this host, disabling LPM. hub 2-0:1.0: USB hub found hub 2-0:1.0: 1 port detected usbcore: registered new interface driver usb-storage rtc_zynqmp ffa60000.rtc: registered as rtc0 pca953x 0-0020: 0-0020 supply vcc not found, using dummy regulator GPIO line 322 (sel0) hogged as output/low GPIO line 323 (sel1) hogged as output/high GPIO line 324 (sel2) hogged as output/high GPIO line 325 (sel3) hogged as output/high pca953x 0-0021: 0-0021 supply vcc not found, using dummy regulator cdns-i2c ff020000.i2c: 400 kHz mmio ff020000 irq 22 cdns-i2c ff030000.i2c: 400 kHz mmio ff030000 irq 23 i2c i2c-0: Added multiplexed i2c bus 2 i2c i2c-0: Added multiplexed i2c bus 3 i2c i2c-0: Added multiplexed i2c bus 4 i2c i2c-0: Added multiplexed i2c bus 5 pca954x 0-0075: registered 4 multiplexed busses for I2C mux pca9544 at24 6-0054: 1024 byte 24c08 EEPROM, writable, 1 bytes/write i2c i2c-1: Added multiplexed i2c bus 6 i2c i2c-7: of_i2c: modalias failure on /amba/i2c@ff030000/i2c-mux@74/i2c@1/clock-generator@36 i2c i2c-7: Failed to create I2C device for /amba/i2c@ff030000/i2c-mux@74/i2c@1/clock-generator@36 i2c i2c-1: Added multiplexed i2c bus 7 si570 8-005d: registered, current frequency 300000000 Hz i2c i2c-1: Added multiplexed i2c bus 8 si570 9-005d: clock registration failed si570: probe of 9-005d failed with error -17 i2c i2c-1: Added multiplexed i2c bus 9 i2c i2c-10: of_i2c: modalias failure on /amba/i2c@ff030000/i2c-mux@74/i2c@4/clock-generator@69 i2c i2c-10: Failed to create I2C device for /amba/i2c@ff030000/i2c-mux@74/i2c@4/clock-generator@69 i2c i2c-1: Added multiplexed i2c bus 10 i2c i2c-1: Added multiplexed i2c bus 11 i2c i2c-1: Added multiplexed i2c bus 12 i2c i2c-1: Added multiplexed i2c bus 13 pca954x 1-0074: registered 8 multiplexed busses for I2C switch pca9548 i2c i2c-1: Added multiplexed i2c bus 14 i2c i2c-1: Added multiplexed i2c bus 15 i2c i2c-1: Added multiplexed i2c bus 16 i2c i2c-1: Added multiplexed i2c bus 17 i2c i2c-1: Added multiplexed i2c bus 18 i2c i2c-1: Added multiplexed i2c bus 19 i2c i2c-1: Added multiplexed i2c bus 20 i2c i2c-1: Added multiplexed i2c bus 21 pca954x 1-0075: registered 8 multiplexed busses for I2C switch pca9548 ina2xx 2-0040: power monitor ina226 (Rshunt = 5000 uOhm) ina2xx 2-0041: power monitor ina226 (Rshunt = 5000 uOhm) ina2xx 2-0042: power monitor ina226 (Rshunt = 5000 uOhm) ata1: SATA link down (SStatus 0 SControl 330) ina2xx 2-0043: power monitor ina226 (Rshunt = 5000 uOhm) ata2: SATA link down (SStatus 0 SControl 330) ina2xx 2-0044: power monitor ina226 (Rshunt = 5000 uOhm) ina2xx 2-0045: power monitor ina226 (Rshunt = 5000 uOhm) ina2xx 2-0046: power monitor ina226 (Rshunt = 5000 uOhm) ina2xx 2-0047: power monitor ina226 (Rshunt = 5000 uOhm) ina2xx 2-004a: power monitor ina226 (Rshunt = 5000 uOhm) ina2xx 2-004b: power monitor ina226 (Rshunt = 5000 uOhm) ina2xx 3-0040: power monitor ina226 (Rshunt = 2000 uOhm) ina2xx 3-0041: power monitor ina226 (Rshunt = 5000 uOhm) ina2xx 3-0042: power monitor ina226 (Rshunt = 5000 uOhm) ina2xx 3-0043: power monitor ina226 (Rshunt = 5000 uOhm) ina2xx 3-0044: power monitor ina226 (Rshunt = 5000 uOhm) ina2xx 3-0045: power monitor ina226 (Rshunt = 5000 uOhm) ina2xx 3-0046: power monitor ina226 (Rshunt = 5000 uOhm) ina2xx 3-0047: power monitor ina226 (Rshunt = 5000 uOhm) cdns-wdt fd4d0000.watchdog: Xilinx Watchdog Timer at (____ptrval____) with timeout 10s device-mapper: ioctl: 4.40.0-ioctl (2019-01-18) initialised: dm-devel@redhat.com EDAC MC: ECC not enabled cpu cpu0: failed to get clock: -2 cpufreq-dt: probe of cpufreq-dt failed with error -2 sdhci: Secure Digital Host Controller Interface driver sdhci: Copyright(c) Pierre Ossman sdhci-pltfm: SDHCI platform and OF driver helper mmc0: SDHCI controller on ff170000.mmc [ff170000.mmc] using ADMA 64-bit usbcore: registered new interface driver usbhid usbhid: USB HID core driver u32 classifier Actions configured NET: Registered protocol family 10 Segment Routing with IPv6 sit: IPv6, IPv4 and MPLS over IPv4 tunneling driver NET: Registered protocol family 17 can: controller area network core (rev 20170425 abi 9) NET: Registered protocol family 29 can: raw protocol (rev 20170425) can: broadcast manager protocol (rev 20170425 t) can: netlink gateway (rev 20170425) max_hops=1 Key type dns_resolver registered registered taskstats version 1 Btrfs loaded, crc32c=crc32c-generic Key type encrypted registered printk: console [netcon0] enabled netconsole: network logging started rtc_zynqmp ffa60000.rtc: setting system clock to 2019-06-06T03:39:58 UTC (1559792398) macb ff0e0000.ethernet eth0: link up (1000/Full) pps pps0: new PPS source ptp0 macb ff0e0000.ethernet: gem-ptp-timer ptp clock registered. IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready mmc0: Problem switching card into high-speed mode! mmc0: new SDHC card at address 0001 mmcblk0: mmc0:0001 SD16G 14.5 GiB Sending DHCP requests . mmcblk0: p1 p2 p3 , OK IP-Config: Complete: device=eth0, hwaddr=00:0a:35:04:9a:86, ipaddr=xxxxx, mask=255.255.254.0 host=xxx, domain=corp.ad.wrs.com, nis-domain=swamp bootserver=0.0.0.0, rootserver=0.0.0.0, rootpath= clk: Not disabling unused clocks md: Waiting for all devices to be available before autodetect md: If you don't use raid, use raid=noautodetect md: Autodetecting RAID arrays. md: autorun ... md: ... autorun DONE. EXT4-fs (mmcblk0p3): mounted filesystem with ordered data mode. Opts: (null) VFS: Mounted root (ext4 filesystem) on device 179:3. devtmpfs: mounted Freeing unused kernel memory: 1216K Run /sbin/init as init process random: fast init done systemd[1]: systemd 242-19-gdb2e367+ running in system mode. (+PAM -AUDIT -SELINUX +IMA -APPARMOR +SMACK +SYSVINIT +UTMP -LIBCRYPTSETUP -GCRYPT -GNUTLS +ACL +XZ -LZ4 -SECCOMP +BLKID -ELFUTILS +KMOD -IDN2 -IDN -) systemd[1]: Detected architecture arm64. Welcome to Wind River Linux development 19.23 Update 0! systemd[1]: Set hostname to <xilinx-zynqmp>. random: systemd: uninitialized urandom read (16 bytes read) systemd[1]: Initializing machine ID from random generator. systemd[1]: Failed to bump fs.file-max, ignoring: Invalid argument systemd[1]: /lib/systemd/system/dbus.socket:4: ListenStream= references a path below legacy directory /var/run/, updating /var/run/dbus/system_bus_socket �→ /run/dbus/system_bus_socket; please update the unit f. systemd[1]: /lib/systemd/system/rpcbind.socket:4: ListenStream= references a path below legacy directory /var/run/, updating /var/run/rpcbind.sock �→ /run/rpcbind.sock; please update the unit file accordingly. random: systemd: uninitialized urandom read (16 bytes read) systemd[1]: Listening on Journal Socket (/dev/log). [ OK ] Listening on Journal Socket (/dev/log). random: systemd: uninitialized urandom read (16 bytes read) systemd[1]: Listening on Syslog Socket. [ OK ] Listening on Syslog Socket. systemd[1]: Listening on udev Kernel Socket. [ OK ] Listening on udev Kernel Socket. [ OK ] Listening on udev Control Socket. [ OK ] Created slice User and Session Slice. [ OK ] Listening on initctl Compatibility Named Pipe. [ OK ] Reached target Swap. [ OK ] Created slice system-serial\x2dgetty.slice. [ OK ] Reached target Slices. [ OK ] Listening on Journal Socket. Starting udev Coldplug all Devices... Mounting POSIX Message Queue File System... Mounting Temporary Directory (/tmp)... Starting Journal Service... Starting Remount Root and Kernel File Systems... Mounting Kernel Debug File System... EXT4-fs (mmcblk0p3): re-mounted. Opts: (null) Starting Create list of re�…odes for the current kernel... [ OK ] Started Forward Password R�…uests to Wall Directory Watch. [ OK ] Reached target Remote File Systems. [ OK ] Listening on Network Service Netlink Socket. Starting Apply Kernel Variables... [ OK ] Started Dispatch Password �…ts to Console Directory Watch. [ OK ] Reached target Paths. [ OK ] Created slice system-getty.slice. Mounting Huge Pages File System... [ OK ] Started Journal Service. [ OK ] Mounted POSIX Message Queue File System. [ OK ] Mounted Temporary Directory (/tmp). [ OK ] Started Remount Root and Kernel File Systems. [ OK ] Mounted Kernel Debug File System. [ OK ] Started Create list of req�… nodes for the current kernel. [ OK ] Started Apply Kernel Variables. [ OK ] Mounted Huge Pages File System. Starting Create System Users... Starting Rebuild Hardware Database... Starting Flush Journal to Persistent Storage... [ OK ] Started udev Coldplug all Devices. systemd-journald[148]: Received request to flush runtime journal from PID 1 [ OK ] Started Flush Journal to Persistent Storage. [ OK ] Started Create System Users. Starting Create Static Device Nodes in /dev... [ OK ] Started Create Static Device Nodes in /dev. [ OK ] Reached target Local File Systems (Pre). Mounting /var/volatile... [ OK ] Mounted /var/volatile. [ OK ] Reached target Local File Systems. Starting Create Volatile Files and Directories... Starting Load/Save Random Seed... [ OK ] Started Load/Save Random Seed. [ OK ] Started Create Volatile Files and Directories. Starting Network Time Synchronization... Starting Rebuild Journal Catalog... Starting Update UTMP about System Boot/Shutdown... Starting Run pending postinsts... [ OK ] Started Update UTMP about System Boot/Shutdown. [ OK ] Started Network Time Synchronization. [ OK ] Reached target System Time Set. [ OK ] Reached target System Time Synchronized. [ OK ] Started Rebuild Journal Catalog. [ OK ] Started Run pending postinsts. [ OK ] Started Rebuild Hardware Database. Starting udev Kernel Device Manager... Starting Update is Completed... [ OK ] Started Update is Completed. [ OK ] Started udev Kernel Device Manager. [ OK ] Reached target System Initialization. Starting Console System Startup Logging... [ OK ] Listening on RPCbind Server Activation Socket. [ OK ] Listening on D-Bus System Message Bus Socket. [ OK ] Listening on Avahi mDNS/DNS-SD Stack Activation Socket. [ OK ] Listening on dropbear.socket. [ OK ] Reached target Sockets. [ OK ] Reached target Basic System. [ OK ] Started System Logging Service. [ OK ] Started Dynamic Host Configuration Protocol (DHCP). [ OK ] Started Kernel Logging Service. Starting Login Service... [ OK ] Started D-Bus System Message Bus. [ OK ] Started Xserver startup without a display manager. [ OK ] Started Daily Cleanup of Temporary Directories. [ OK ] Reached target Timers. Starting Telephony service... Starting Network Service... [ OK ] Started Console System Startup Logging. [ OK ] Found device /dev/ttyPS0. [ OK ] Listening on Load/Save RF �…itch Status /dev/rfkill Watch. [ OK ] Started Network Service. Starting Network Name Resolution... [ OK ] Started Login Service. [ OK ] Started Network Name Resolution. [ OK ] Started Telephony service. [ OK ] Reached target Network. Starting Berkeley Internet Name Domain (DNS)... Starting /etc/rc.local Compatibility... Starting Permit User Sessions... Starting Avahi mDNS/DNS-SD Stack... [ OK ] Started /etc/rc.local Compatibility. [ OK ] Started Permit User Sessions. [ OK ] Started Getty on tty1. [ OK ] Started Serial Getty on ttyPS0. [ OK ] Started Avahi mDNS/DNS-SD Stack. [ OK ] Started Berkeley Internet Name Domain (DNS). [ OK ] Reached target Host and Network Name Lookups. Wind River Linux development 19.23 Update 0 xilinx-zynqmp ttyPS0 xilinx-zynqmp login: root root@xilinx-zynqmp:~# uname 0a uname: extra operand '0a' Try 'uname --help' for more information. root@xilinx-zynqmp:~# uname -a Linux xilinx-zynqmp 5.2.0-rc3-yoctodev-standard #1 SMP PREEMPT Thu Jun 6 00:53:26 UTC 2019 aarch64 aarch64 aarch64 GNU/Linux (From OE-Core rev: b0dc58f535a27be6c649dcf336c7dc0cdb23d96b) (From OE-Core rev: 47196abf511d96d9d6c6b561430dc1827484c742) Signed-off-by: Zumeng Chen <zchen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-10-30gnutls:upgrade 3.6.7 -> 3.6.8Zang Ruochen
-Upgrade from gnutls_3.6.7.bb to gnutls_3.6.8.bb. (From OE-Core rev: c5d2ca323a255f09c7b3378af5956671205867f4) Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit b34486a616ab4d4b30247a5dff58a18ef26ed709) [Bug fix only update. Including: CVE-2019-3836 CVE-2019-3829 https://lists.gnupg.org/pipermail/gnutls-help/2019-May/004527.html] Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-10-30kernel.bbclass: fix installation of modules signing certificatesDmitry Eremin-Solenikov
If one has provided external key/certificate for modules signing, Kbuild will skip creating signing_key.pem and will write only signing_key.x509 certificate. Thus we have to check for .x509 file existence rather than .pem one. (From OE-Core rev: 6ab0206b8252755367f2357f49007dd78336fec0) Signed-off-by: Dmitry Eremin-Solenikov <dmitry_eremin-solenikov@mentor.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 2527e731eba43bd36d0ea268aca6b03155376134) Signed-off-by: Nicolas Dechesne <nicolas.dechesne@linaro.org> Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-10-23Documenation: Prepared for the 2.7.2 releaseScott Rifenbark
Entails all the cover pages for the release date. Used November 2019 for now. Updated poky.ent and the mega-manual.sed file. Good to go. (From yocto-docs rev: f7bf30b96ba7feaf33df544162a713204520b389) Signed-off-by: Scott Rifenbark <srifenbark@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-10-23ref-manual, dev-manual: Added CMake toolchain files.Scott Rifenbark
Fixes [YOCTO #12760] Updated the cmake.bbclass description to tell what directory to insall custom CMake toolchain files into. Also, updated the two areas in the "Writing a New Recipe" section that mention CMake. Placed a couple notes there concerning the same directory stuff. (From yocto-docs rev: cacdedf4e1186a96ce00f94e0f42817dfb724ac7) Signed-off-by: Scott Rifenbark <srifenbark@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-10-23ref-manual: Updated the BUSYBOX_SPLIT_SUID variable.Scott Rifenbark
Fixes [YOCTO #13596] (From yocto-docs rev: e6c9e9511221d47397e97e26d9f7002d4b918dce) Signed-off-by: Scott Rifenbark <srifenbark@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-10-23ref-manual: Removed deprecated link to ref-classes-bluetoothScott Rifenbark
This was in a moving to YP version 1.8 migration section. (From yocto-docs rev: 76e63455276aff8a03c00e2fd12c728c5aeb6e2c) Signed-off-by: Scott Rifenbark <srifenbark@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-10-23dev-manual: Added info to "Selecting an Initialization Manager"Scott Rifenbark
(From yocto-docs rev: 4d5c70b394cfd7d7f189d719b4391f784bd57733) Signed-off-by: Scott Rifenbark <srifenbark@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-10-23kernel-dev: don't use _append +=Ross Burton
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-10-14conf/poky: add Fedora 30 and Opensuse Leap 15.1 to supported distributionsRoss Burton
(From meta-yocto rev: 2fd2aea930253ec6d3bcdde25d02484c89586f79) Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-10-14conf/poky: add debian-10 to the supported distribution listRoss Burton
Debian 10 is the new stable release and is being tested on the autobuilder, so add this to the supported distribution list. [ YOCTO #13432 ] (From meta-yocto rev: 71bc73ae48188ee52a40b4f69044f1fd281b4d72) Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-10-14meta-yocto-bsp: Bump to the latest stable kernel for all the BSPKevin Hao
Boot test for all these boards. (From meta-yocto rev: 126f95e7702370c3c5803afbe99a6a86878ed12a) Signed-off-by: Kevin Hao <kexin.hao@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-10-10bitbake: cookerdata: Add mc conffiles hashes to cache hashJoshua Watt
The variable values that result from parsing multiconfig should be included in the cooker data hash, otherwise changes to these files won't be detected, which will allow the parsing cache to be loaded with the old values for the multiconfigs. This can either manifest as the variable values simply not updating, or getting basehash changed errors when building. This bug was previously undetected because all of the multiconfig base files were a direct file dependency in all parsed recipes. This was fixed in 34137a00f60 ("bitbake: bitbake: cooker: Rename __depends in all multiconfigs"), exposing this bug. [YOCTO #13541] (Bitbake rev: 75d6648f232a06b99c54a1e33324a7fc1cd15b38) Signed-off-by: Joshua Watt <JPEWhacker@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-10-08uninative: Update to 2.7 releaseMichael Halstead
The 2.7 release updates glibc to version 2.30. Recently added to openSUSE Tumbleweed and needed for Fedora Core 31. (From OE-Core rev: b6e17afc06d7a44dc9774ee98de7f186580ddf0d) Signed-off-by: Michael Halstead <mhalstead@linuxfoundation.org> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-10-08meson: Fix native patch to python3Ricardo Ribalda Delgado
Fixes: File "/workdir/build/tmp/work/dbfp4-poky-linux/qv4l2/1.17.0+gitAUTOINC+95f39aae48-r0/recipe-sysroot-native/usr/lib/python3.7/site-packages/mesonbuild/dependencies/base.py", line 574, in _call_pkgbin cache[(self.pkgbin, targs, fenv)] = self._call_pkgbin_real(args, env, use_native) File "/workdir/build/tmp/work/dbfp4-poky-linux/qv4l2/1.17.0+gitAUTOINC+95f39aae48-r0/recipe-sysroot-native/usr/lib/python3.7/site-packages/mesonbuild/dependencies/base.py", line 556, in _call_pkgbin_real cmd = self.pkgbin.get_command() + "-native" + args TypeError: can only concatenate list (not "str") to list (From OE-Core rev: 9051c10e46960a357f0339e347618f5d83923fe4) Signed-off-by: Ricardo Ribalda Delgado <ricardo@ribalda.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-10-08qemu: fix build issue on new hosts with glibc 2.30Armin Kuster
This fixes the following error: TOPDIR/tmp/work/x86_64-linux/qemu-native/3.1.0-r0/qemu-3.1.0/linux-user/syscall.c:254:16: error: static declaration of ‘gettid’ follows non-static declaration 254 | _syscall0(int, gettid) | ^~~~~~ TOPDIR/tmp/work/x86_64-linux/qemu-native/3.1.0-r0/qemu-3.1.0/linux-user/syscall.c:185:13: note: in definition of macro ‘_syscall0’ 185 | static type name (void) \ | ^~~~ In file included from /usr/include/unistd.h:1170, from TOPDIR/tmp/work/x86_64-linux/qemu-native/3.1.0-r0/qemu-3.1.0/include/qemu/osdep.h:90, from TOPDIR/tmp/work/x86_64-linux/qemu-native/3.1.0-r0/qemu-3.1.0/linux-user/syscall.c:20: /usr/include/bits/unistd_ext.h:34:16: note: previous declaration of ‘gettid’ was here 34 | extern __pid_t gettid (void) __THROW; | ^~~~~~ (From OE-Core rev: fbedc2d73ff472c89ba273a890408f93015e8f17) Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-10-08systemd: update SRCREV for systemd v241-stableJan Klare
Currently systemd 241 does break for kernels 5.2+ with the error described here: * https://github.com/systemd/systemd/issues/12784 The issue has been fixed in master and will be fixed in the release 243. The necessary patches have been backported to systemd/systemd-stable in the branch v241-stable, but currently in warrior an old version of that branch is pulled in. This patch updates the SRCREV to the latest commit from that branch and therefore pulls in the needed fix to run systemd 241 on 5.2+ kernels. (From OE-Core rev: 8b9703454cb2a8a0aa6b7942498f191935d547ea) Signed-off-by: Jan Klare <jan.klare@bisdn.de> Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-10-08classes/image-live.bbclass: Don't hardcode cpio.gzAndrii Bordunov via Openembedded-core
There's INITRAMFS_FSTYPES that can be set differently. (From OE-Core rev: 66c05bb2ca6ecdb621ae1e5bdf28e7aa768d9aba) Signed-off-by: Böszörményi Zoltán <zboszor@pr.hu> Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-10-08unzip: Fix CVE-2019-13232Dan Tran
(From OE-Core rev: 8bc35e7b23ca0f10f4a2f3c4f7137d3dedc051fb) Signed-off-by: Dan Tran <dantran@microsoft.com> Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-10-08qemu: Fix CVE-2019-8934Dan Tran
(From OE-Core rev: 7f13e4e9ef51bf62729a9a955967aa4752d0d2e8) Signed-off-by: Dan Tran <dantran@microsoft.com> [Fix up against lastest warrior] Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-10-08json-c: Don't --enable-rdrandAdrian Bunk
In recent years AMD CPUs have had various problems with RDRAND giving either non-random data or no result at all, which is problematic if either build or target machine has a CPU with this problem. The fallback is /dev/urandom, and I'd trust the kernel here. --enable-rdrand was added in an upgrade to a new upstream version without mentioning any reason. [YOCTO #13534] (From OE-Core rev: 07b19cd9ef127ec87f727e154eda62272a828275) Signed-off-by: Adrian Bunk <bunk@stusta.de> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-10-08python3: upgrade 3.7.3 -> 3.7.4Anuj Mittal
Also fixes CVE-2019-9740, CVE-2019-9948. For details, see: https://docs.python.org/3.7/whatsnew/changelog.html#python-3-7-4-final (From OE-Core rev: 6b7604c536a7a2da99490a7550f997a8e35ca043) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> [ Backported patch removed. ] Signed-off-by: Adrian Bunk <bunk@stusta.de> [Bug fix only update] Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-10-08python: update to 3.7.3Alexander Kanavin
License-update: copyright years (From OE-Core rev: 845b9a4ed2b83d716688a7b0d8bf13f37e79a025) Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> [ Backported patches removed. ] Signed-off-by: Adrian Bunk <bunk@stusta.de> [Bug fix only update] Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-10-01runqemu: Add support for kvm on aarch64Richard Purdie
The main issue is to make the x86 checks apply to x86 targets only. We may end up with better checks on other architectures but this adapts the code to allow for that and its still controlled by whether QB_CPU_KVM is set. The code needed minor refactoring so the qemu-system-XXX name is set earlier so the kvm code can use it. (From OE-Core rev: acc0f4a6a99fe9367e57a5c2a4f995b6f4db4a9f) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-10-01qemuarm64: Add QB_CPU_KVM to allow kvm accelerationRichard Purdie
This allows kvm acceleration on arm systems that support it. "host" is the best option I can find right now to attempt to use the acceleration. It potentially might not be correct but arm systems are sensitive to the correct values and I don't want to encode the autobuilders CPU type here. (From OE-Core rev: 20a61476a45d5116dc7081e802b2aaa0bab7e77f) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit f13788541f64774a586971ed57699e4397b38b32) Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-09-30cve-check: backport rewrite from masterRoss Burton
As detailed at [1] the XML feeds provided by NIST are being discontinued on October 9th 2019. As cve-check-tool uses these feeds, cve-check.bbclass will be inoperable after this date. To ensure that cve-check continues working, backport the following commits from master to move away from the unmaintained cve-check-tool to our own Python code that fetches the JSON: 546d14135c5 cve-update-db: New recipe to update CVE database bc144b028f6 cve-check: Remove dependency to cve-check-tool-native 7f62a20b32a cve-check: Manage CVE_PRODUCT with more than one name 3bf63bc6084 cve-check: Consider CVE that affects versions with less than operator c0eabd30d7b cve-update-db: Use std library instead of urllib3 27eb839ee65 cve-check: be idiomatic 09be21f4d17 cve-update-db: Manage proxy if needed. 975793e3825 cve-update-db: do_populate_cve_db depends on do_fetch 0325dd72714 cve-update-db: Catch request.urlopen errors. 4078da92b49 cve-check: Depends on cve-update-db-native f7676e9a38d cve-update-db: Use NVD CPE data to populate PRODUCTS table bc0195be1b1 cve-check: Update unpatched CVE matching c807c2a6409 cve-update-db-native: Skip recipe when cve-check class is not loaded. 07bb8b25e17 cve-check: remove redundant readline CVE whitelisting 5388ed6d137 cve-check-tool: remove 270ac00cb43 cve-check.bbclass: initialize to_append e6bf9000987 cve-check: allow comparison of Vendor as well as Product 91770338f76 cve-update-db-native: use SQL placeholders instead of format strings 7069302a4cc cve-check: Replace CVE_CHECK_CVE_WHITELIST by CVE_CHECK_WHITELIST 78de2cb39d7 cve-update-db-native: Remove hash column from database. 4b301030cf9 cve-update-db-native: use os.path.join instead of + f0d822fad2a cve-update-db: actually inherit native b309840b6aa cve-update-db-native: use executemany() to optimise CPE insertion bb4e53af33d cve-update-db-native: improve metadata parsing 94227459792 cve-update-db-native: clean up JSON fetching 95438d52b73 cve-update-db-native: fix https proxy issues 1f9a963b9ff glibc: exclude child recipes from CVE scanning [1] https://nvd.nist.gov/General/News/XML-Vulnerability-Feed-Retirement (From OE-Core rev: 8c87e78547c598cada1bce92e7b25d85b994e2eb) Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-09-30kernel-uboot: compress arm64 kernelsBedel, Alban
AArch64 images are not self-decompressing, thus usually much larger. Boot times can be reduced by compressing them in FIT and uImages. This commit is a backport of commit a725d188b5 (kernel-uboot: compress arm64 kernels) and commit 60bc7e180e (kernel-uboot: remove useless special casing of arm64 Image) from master. Both commit were melted into one to avoid some useless churn. (From OE-Core rev: 91c42f92cd978a922fff87cb1d0f358c7d9747ea) Signed-off-by: Alban Bedel <alban.bedel@aerq.com> Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-09-30uboot: fixes to uboot-extlinux-config attribute valuesWill Page
The way this class uses overrides to support generation of multiple sections is subject to two different issues: 1) labels that conflict with existing override names causing the value for the conflicting label to be set for all labels, and 2) reusing the override list through each iteration, prepending each new label to the list of overrides makes earlier labels' value take precedence over later labels, making later labels virtually impossible to customize. The first issue is resolved by removing all label names from overrides before iterating over labels. The second issue is resolved by generating a fresh list of overrides with only the current label added. The current label is also appended to the list of overrides instead of prepended, which makes it the highest priority override. This is matches the behavior of devtool-source.bbclass, which similarly monkey-patches overrides. Closes https://bugzilla.yoctoproject.org/show_bug.cgi?id=13469 . (From OE-Core rev: 933a85e45c3edd65cdcc00cb18e17524e0411a09) Signed-off-by: Will Page <wpage@polysync.io> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-09-30useradd: Ensure do_populate_sysroot has dependency on useradd variablesRichard Purdie
The do_populate_sysroot task doesn't rerun if you change any of the USERADD_PARAM or GROUPADD_PARAM variables, only do_package will. If another task depends on the recipe, this means it won't see any updated changes. This patch adds in the missing vardeps ensuring the code is deterministic. [YOCTO #13232] (From OE-Core rev: 7f98309c856e0a54dc9dafda91c9db0a33e57425) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 37d0382a3c67f47f8cfdd977a041069bf912b8c3) Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-09-30useradd: Fix build architecture corruption of sstate artefactsRichard Purdie
When mixing aarch64 and x86_64 host builds with common sstate, useradd failures were found. This was due to references to: /home/pokybuild/yocto-worker/qemuarm/build/build/tmp/sysroots-components/aarch64/pseudo-native/usr/bin/pseudo or /home/pokybuild/yocto-worker/qemuarm/build/build/tmp/sysroots-components/x86_64/pseudo-native/usr/bin/pseudo on the wrong architecture within the useradd postinst files. Instead of using COMPONENTS_DIR as the FIXME, use PSEUDO_SYSROOT which contains the arch component as well to avoid this. Add extra comments to cause the relavent sstate to be rebuilt. (From OE-Core rev: 441a2b8979e69c20e7ed0178cdb210eecdec91e1) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 0384622f72a6c0bd8225cf06f692340fdef67d4a) Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-09-30multilib.bbclass: Reduce ALTERNATIVE_PRIORITY for extended recipesRobert Yang
Fixed: MACHINE = "qemux86-64" require conf/multilib.conf MULTILIBS = "multilib:lib32" DEFAULTTUNE_virtclass-multilib-lib32 = "x86" $ bitbake core-image-minimal update-alternatives: libtool has multiple providers with the same priority, please check /path/to/rootfs/usr/lib/opkg/alternatives/libtool for details Both libtool and lib32-libtool have the same priority (as they're the same recipe), so update-alternatives won't deterministically pick a provider. This means you could end up with an image using a 32-bit pkgconfig and 64-bit libtool, for example. Make extended recipes reduce priority by 1 (or 2, 3 ... when there are multiple variants in MULTILIB_VARIANTS) to fix the problem. [YOCTO #13418] (From OE-Core rev: 51730928df4dbecac72b56e9f843885674b4d18a) Signed-off-by: Robert Yang <liezhi.yang@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-09-30gcc: Security fix for CVE-2019-15847Armin Kuster
Affects <= 9.2.0 Dropped Changelog changes (From OE-Core rev: a579b111349fd9ad91b2d40a51f194fd25af723a) Signed-off-by: Armin Kuster <akuster@mvista.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-09-30Curl: Security fix for CVE-2019-5482Armin Kuster
Source: curl.org MR: 99905 Type: Security Fix Disposition: Backport from https://github.com/curl/curl/commit/facb0e4662415b5f28163e853dc6742ac5fafb3d ChangeID: e0c807da8937f687a4b2e28eaa6b4b5a51845bc5 Description: Fixes CVE-2019-5482 - Affected versions: libcurl >= 7.19.4 to and including 7.65.3 - Not affected versions: libcurl < 7.19.4 (From OE-Core rev: d2e5558133f970a8a196c545dd00af9315c1a06a) Signed-off-by: Armin Kuster <akuster@mvista.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>