- Jul 20, 2018
-
-
Peter Korsgaard authored
Signed-off-by:Peter Korsgaard <peter@korsgaard.com>
-
Bernd Kuhls authored
Added license hash, updated project URL, old site is dead. Signed-off-by:
Bernd Kuhls <bernd.kuhls@t-online.de> Signed-off-by:
Thomas Petazzoni <thomas.petazzoni@bootlin.com> (cherry picked from commit 54917abd) Signed-off-by:
-
Peter Korsgaard authored
Fixes: http://autobuild.buildroot.net/results/d1a/d1a7a97ba4d95276d34234757ef51c2b25373104/ Similar to commit 3c695842 (qt5: bump latest version to 5.10.1), the 5.9.x (and 5.8.x) versions of qt5serialport doesn't have the 'v' in the license file names, as slightly different formatting/content, so adjust the _LICENSE_FILES and hashes to match. Signed-off-by:
-
Laurent Hartanerot authored
[Peter: add semicolon and || exit 1 to catch failures] Signed-off-by:
Laurent Hartanerot <laurent.hartanerot@atos.net> Signed-off-by:
-
- Jul 19, 2018
-
-
Fabio Estevam authored
[Peter: drop 4.17.x change] Signed-off-by:
Fabio Estevam <festevam@gmail.com> Signed-off-by:
-
David Owens authored
When the output directory is nested under a long path name, calling the gdbus-codegen, glib-genmarshal, or glib-mkenums scripts throws the error: > '/usr/bin/env: /...: No such file or directory' This is because libglib2 uses the absolute path to the python interpreter for its shebang statements, and shebangs have a max length of 127 chars[1]. A long absolute path will be cut off and appear as a missing file. Since the host Python is present in the $PATH passed to all packages, we can copy the workaround from Yocto and just use the python interpreter in $PATH[2]. However, 'python' is used instead of 'python3' as the scripts are compatible with both. [1] https://linux.die.net/man/2/execve [2] http://cgit.openembedded.org/openembedded-core/commit/?id=eef7883587acc933d6f34b559ec03ff84d18573b Signed-off-by:
Brandon Maier <brandon.maier@rockwellcollins.com> Signed-off-by:
David Owens <david.owens@rockwellcollins.com> Signed-off-by:
-
Christoph Engelbert authored
Starting from kernel version 4.15, Linux supports loading regulatory.db and regulatory.db.p7s files directly from /lib/firmware, without the need of crda. If the kernel can't load those files it'll fallback to using crda, but the direct way is preferred. This patch copies those those files under /lib/firmware. The use of crda shouldn't be necessary with kernels of 4.15 or later. Signed-off-by:
Christoph Engelbert <me@noctarius.com> Signed-off-by:
-
Fabio Estevam authored
[Peter: drop 4.17.x change] Signed-off-by:
-
Baruch Siach authored
The bind configure.in now checks for "${with_zlib}/include/zlib.h". Remove the redundant "include/". Signed-off-by:Baruch Siach <baruch@tkos.co.il> Signed-off-by:
-
Baruch Siach authored
The bind configure.in uses AC_TRY_RUN that is not compatible with cross compile. Disable eddsa unconditionally since it requires a newer OpenSSL version than we currently have. Enable aes; this is always supported in current OpenSSL versions. Fixes: http://autobuild.buildroot.net/results/3ed/3edb1659954b00401b68ffc7e1c8b3c29581c0e4/ http://autobuild.buildroot.net/results/025/025e377b51b39ba34647636ad0d0661a3cb95572/ http://autobuild.buildroot.net/results/725/7250564e780e43e793ae6c8c526985e5519681f4/ Signed-off-by:
-
Baruch Siach authored
Fixes CVE-2018-5738: When recursion is enabled but the allow-recursion and allow-query-cache ACLs are not specified, they should be limited to local networks, but they were inadvertently set to match the default allow-query, thus allowing remote queries. Update license file hash; copyright year update. Add reference to tarball signature key. Signed-off-by:
-
Hollis Blanchard authored
Host GDB suffers a serious problem: pressing backspace (or ^W ^U or any other "delete" key) results in a plain space being printed instead, making the command prompt almost completely unusable. That's because it's using host-ncurses, which embeds a path for the terminfo database into the library itself. That path ends up being something like /home/hollisb/buildroot.git/output/host/share/terminfo, which obviously doesn't generally exist other hosts. ('relocate-sdk.sh' cannot and does not edit binaries like libncurses.so.6, so doesn't resolve this problem.) /usr/share/terminfo is a far better path to use, since it almost certainly exists on the host. Theoretically, it could be from a different ncurses version with incompatible terminfo database format, but this doesn't seem to be a problem in practice. (Future patches could address the theoretical problem if it actually appears in real life.) This change allows buildroot's host gdb, which uses ncurses 6.x, to work on RHEL5, RHEL6, and RHEL7, which all provide terminfo from ncurses 5.x. Signed-off-by:Hollis Blanchard <hollis_blanchard@mentor.com> Reviewed-by:
Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be> Signed-off-by:
-
Pierre-Louis Bossart authored
The 2017 MinnowBoard Turbot skews no longer use the Realtek 8169 Ethernet chip. The Turbot D0 uses The Intel I211, the Turbot Dual Ethernet has an I210 (quad-core) or I211 (dual-core). Add CONFIG_IGB to the Linux config but keep the Realtek 8169 support to avoid breaking older boards Tested on Turbot D0, lspci -k shows the igb driver is used: 03:00.0 Class 0200: 8086:1539 igb Signed-off-by:
Pierre-Louis Bossart <pierre-louis.bossart@linux.intel.com> Signed-off-by:
-
Baruch Siach authored
Fixes CVE-2018-0500: curl might overflow a heap based memory buffer when sending data over SMTP and using a reduced read buffer. Drop upstream patch. Add reference to tarball signature key. Drop CRYPTO_lock seed. Removed from configure script since 7.45. Cc: Matt Weber <matthew.weber@rockwellcollins.com> Signed-off-by:
-
Fabio Estevam authored
[Peter: drop 4.17.x change] Signed-off-by:
-
Yann E. MORIN authored
Currently, the stdout is consigned to oblivion, while the stderr is not redirected at all. So, when the configuration under test redefines a symbol, like is the case when testing busybox for example, there is an ugly warning. So, just redirect both stdout and stderr to the logfile. Signed-off-by:
"Yann E. MORIN" <yann.morin.1998@free.fr> Tested-by:
Matt Weber <matthew.weber@rockwellcollins.com> Signed-off-by:
-
Jason A. Donenfeld authored
* chacha20poly1305: use slow crypto on -rt kernels on arm too Leftover from the last commit of the previous snapshot that we forgot to handle. * tools: getentropy requires macOS 10.12 Small build time fixup for old versions of macOS. * queueing: remove useless spinlocks on sc * queueing: re-enable preemption periodically to lower latency * simd: encapsulate fpu amortization into nice functions * simd: no need to restore fpu state when no preemption This will improve general system latency on preempt-enabled systems, like desktops. * dns-hatchet: apply resolv.conf's selinux context to new resolv.conf Fixes wg-quick's dns hatchet on CentOS. * qemu: bump default kernel By bumping to 4.17.2, we actually uncovered a bug in the SLUB allocator, which upstream is now fixing: https://lkml.org/lkml/2018/6/18/1407 * noise: take locks for ss precomputation * netlink: maintain static_identity lock over entire private key update Minor locking correctness fixes and optimizations. * noise: wait for crng before taking locks We now make sure that an outgoing packet which needs a potentially unseeded rng won't block a call to wg(8), which takes similar locks for retrieving data. * receive: drop handshake packets if rng is not initialized If the rng is unseeded, we drop incoming handshake packets, so that it's not possible for an attacker to fill the handshake queue thereby provoking cookies. * ratelimiter: mitigate reference underflow * ratelimiter: do not allow concurrent init and uninit Minor correctness and hardening fixes, which don't fix anything particular in WireGuard, but might be useful if our ratelimiter is ever used elsewhere. * compat: use stabler lkml links * poly1305: add missing string.h header Minor fixups. * receive: don't toggle bh The last snapshot caused a big performance regression, which we partially revert here. This general matter, though, will be revisited in the future, perhaps by switching to NAPI. * main: test poly1305 before chacha20poly1305 * poly1305: give linker the correct constant data section size While the default bfd linker did the right thing, gold would sometimes merge section incorrectly because of an incorrect section length field, resulting in wrong calculations. * simd: add missing header Fixes a compile error on a few odd kernels. * global: fix a few typos * manpages: eliminate whitespace at the end of the line * tools: fix misspelling of strchrnul in comment Cosmetic fixups. * global: use ktime boottime instead of jiffies * global: use fast boottime instead of normal boottime * compat: more robust ktime backport We now use the equivalent of clock_gettime(CLOCK_BOOTTIME) for doing age checks on time-limited objects, such as ephemeral keys, so that on systems where we don't clear before sleep (like Android), we make sure to invalidate the objects after the proper amount of time, taking into account time spent asleep. * wg-quick: android: prevent outgoing handshake packets from being dropped Recent android phones block outgoing packets using iptables while the system is asleep. This makes sense for most services, but not for a tunnel device itself, so we work around this by inserting our own iptables rule. * device: print daddr not saddr in missing peer error * receive: style Debug messages now make sense again. * wg-quick: android: support excluding applications Android now supports excluding certain apps (uids) from the tunnel. * selftest: ratelimiter: improve chance of success via retry * qemu: bump default kernel version * qemu: decide debug kernel based on KERNEL_VERSION Some improvements to our testing infrastructure. * receive: use NAPI on the receive path This is a big change that should both improve preemption latency (by not disabling it unconditionally) and vastly improve rx performance on most systems by using NAPI. The main purpose of this snapshot is to test out this technique. Signed-off-by:
Jason A. Donenfeld <Jason@zx2c4.com> Signed-off-by:
-
Bernd Kuhls authored
Fixes CVE-2017-16932, CVE-2018-0360 & CVE-2018-0361: http://lists.clamav.net/pipermail/clamav-announce/2018/000032.html Signed-off-by:
-
Thomas Petazzoni authored
When json-c is enabled but libcurl is disabled, clamav tries to build the clamsubmit program, which fails with: CC clamsubmit.o clamsubmit.c:6:23: fatal error: curl/curl.h: No such file or directory #include <curl/curl.h> This is due to an incorrect curl-config detection logic, leading to /bin/curl-config being present making the configure script believe that curl is available, even when --without-libcurl is explicitly passed. This commit adds a patch, submitted upstream, which fixes this problem. Fixes: http://autobuild.buildroot.net/results/c43d2ebd8ab30016969d642dbd71c297dc5f6bab/ Signed-off-by:
-
Thomas Petazzoni authored
ClamAV is using Git upstream (https://github.com/Cisco-Talos/clamav-devel ), so it makes sense to use Git-formatted patches. Signed-off-by:
-
Bernd Kuhls authored
Release notes: http://lists.clamav.net/pipermail/clamav-announce/2018/000031.html Signed-off-by:
-
Fabio Estevam authored
[Peter: drop 4.17.x change] Signed-off-by:
-
Leon Anavi authored
Increase the filesystem size for raspberrypi3 by setting BR2_TARGET_ROOTFS_EXT2_SIZE to "120M". The filesystem for raspberrypi3_64 has the same size. The size is so large because the kernel config enables many many modules. Fixes: Copying files into the device: __populate_fs: Could not allocate block in ext2 filesystem while writing file "services" mkfs.ext4: Could not allocate block in ext2 filesystem while populating file system This error is not reproducible, it seems to depend on e.g. directory ordering. Signed-off-by:
Leon Anavi <leon.anavi@konsulko.com> Reviewed-by:
-
Asgeir Bjarni Ingvarsson authored
We need to install polkit before systemd if we want to enable polkit integration, because systemd will not install polkit policy files unless it finds polkit-gobject-1. Signed-off-by:
Asgeir Bjarni Ingvarsson <asgeir@appdynamic.com> Acked-by:
-
Carlos Santos authored
The original site www.liblogging.org has been taken down because of the new European data protection regulation (GDPR), to which it was not compliant. Signed-off-by:
Carlos Santos <casantos@datacom.com.br> Signed-off-by:
-
Baruch Siach authored
Add -static to the link command line to have libgcc resolve libc symbols. This overrides the default -Wl,-rpath,/usr/lib, which is useless for static build anyway. Fixes: http://autobuild.buildroot.net/results/25d580bee6f609f6b28ebd6cc96d180179901b0e/ Signed-off-by:
-
Jan Heylen authored
Perf profiling cannot be used if CONFIG_PERF_EVENTS is not enabled in the kernel configuration. Similar to other tools, like ktap, we can enable the right options automatically. Signed-off-by:
Jan Heylen <jan.heylen@nokia.com> Signed-off-by:
Thomas De Schampheleire <thomas.de_schampheleire@nokia.com> Signed-off-by:
-
Fabio Estevam authored
[Peter: drop 4.17.x change] Signed-off-by:
-
Baruch Siach authored
Cc: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by:
-
Sébastien Szymanski authored
qt5charts-2.1.3 (build with Qt 5.6) doesn't contain any license files so remove LICENSE.GPL3 from QT5CHARTS_LICENSE_FILES when building Qt 5.6. Fixes: http://autobuild.buildroot.net/results/c95d34129902a0511b8d64c9d50f1ffa293b33fd http://autobuild.buildroot.net/results/b9c14ce7c2fdaa412eb6416ae12a0376aaf05770 http://autobuild.buildroot.net/results/1bde69c515d9140ef0f9a5571475c2850c7b8dee Signed-off-by:
Sébastien Szymanski <sebastien.szymanski@armadeus.com> Signed-off-by:
-
David De Grave (Essensium/Mind) authored
Add the i686 package list to install when using pre-built 32 bits binaries with a redhat/fedora host distribution (glibc.i686 and zlib.i686). Signed-off-by:
David De Grave (Essensium/Mind) <david.degrave@mind.be> Signed-off-by:
-
Jérémy Rosen authored
The special 65534 group is named nogroup (not nobody) in buildroot tell systemd about that Signed-off-by:
Jérémy Rosen <jeremy.rosen@smile.fr> Reviewed-by:
-
Thomas Petazzoni authored
In commit 52282828 ("package/network-manager: add patches to build with kernel headers 3.2"), network-manager was changed to build with kernel headers as old as 3.2, instead of 3.7 before. The dependency was changed accordingly, but the Config.in comment was not. This commit fixes this inconsistency. Signed-off-by:
-
Baruch Siach authored
Fixes CVE-2018-9918: mishandle certain "expected dictionary key but found non-name object" cases, allowing remote attackers to cause a denial of service (stack exhaustion) https://github.com/qpdf/qpdf/issues/202 Drop local SHA256 hash since we use upstream provided SHA512. Signed-off-by:
-
Marcus Folkesson authored
The option used by configure script is actually --with-soup/--without-soup. Fixes: http://autobuild.buildroot.net/results/cf8ab76b8ea1a555d42f0625df1d58543e88efb1/ Signed-off-by:
Marcus Folkesson <marcus.folkesson@gmail.com> Signed-off-by:
-
Joseph Kogut authored
mktemp is included in GNU Coreutils, and its usage is preferred over tempfile. http://lists.gnu.org/archive/html/bug-coreutils/2007-10/msg00134.html Additionally, some distributions no longer package tempfile, causing the try-run macro to not work as expected. For example, due to try-run not behaving as expected, testing for the -no-pie option in the aespipe package doesn't work, and we build without -no-pie, causing a build failure. See also commit 91a08ecc (package/Makefile.in: add host-cc-option macro) which introduced that initial code, explicitly to add -no-pie when needed. Fixes: http://autobuild.buildroot.net/results/db50f4415d18441f94b641ef6dc5a3672678b8b9/ http://autobuild.buildroot.net/results/76d73f767d3aab3c97d61188f5666899d72ed82d/ http://autobuild.buildroot.net/results/6aa9031962603354086b49bc49add92fde496ec2/ http://autobuild.buildroot.net/results/33d22f4d96fb439be8551355290896ef6d3649df/ http://autobuild.buildroot.net/results/eeec2ed80e147c172ec2d50958b12cfa38b2cc8d/ Signed-off-by:
Joseph Kogut <joseph.kogut@gmail.com> Reviewed-by:
-
Gaël PORTAY authored
Since commit 81fb33af (qt5base: correct eglfs support in qmake.conf.in) the definition QT5BASE_CONFIGURE_QMAKE_CONFIG is left unused. Remove it since it is not used anymore. Signed-off-by:
Gaël PORTAY <gael.portay@savoirfairelinux.com> Acked-by:
-
Fabrice Fontaine authored
sdlcam test includes jpeglib.h so add a patch to disable it if jpeg is disabled Fixes: - http://autobuild.buildroot.net/results/1eded8b44cc369550566c6ce0b3c042f1aec8d44 Signed-off-by:
Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by:
-
Fabrice Fontaine authored
The configure.ac script simply uses PKG_CHECK_MODULES(), so there is not --enable/--disable option. Signed-off-by:
-
Yann E. MORIN authored
When the host has a DB library installed, namely LMDB, host-heimdal will detect it and try to use, resulting in a build failure due to missing symbols. Really disable all the DB backends, we don't need them. Signed-off-by:
-
