openembedded-core.git/meta/recipes-devtools/squashfs-tools, branch 2015-4

squashfs-tools_4.3: modify SPDX_S variable

2014-09-29T16:49:12+00:00

Modify SPDX_S to the source tree of squashfs instead of ${S}.

Signed-off-by: leimaohui

squashfs-tools: Add support for LZO and LZ4 compression

2014-08-15T17:19:54+00:00

For systems that want to optimize for speed rather than size, LZO is
usually a better choice than gzip or XZ. Kernel support for LZO has
been available since 2.6.29.

LZ4 support isn't in the mainline kernel yet, but we might as well add
it now for those who want to experiment with it.

Signed-off-by: Mike Looijmans 
Signed-off-by: Richard Purdie

squashfs-tools: Add nativesdk in BBCLASSEXTEND

2014-07-23T20:47:36+00:00

Necessary for including it in meta-toolchain.

Signed-off-by: Richard Tollerton 
Signed-off-by: Ben Shelton 
Signed-off-by: Richard Purdie

squashfs-tools: Upgrade to 4.3

2014-07-17T11:28:08+00:00

Remove patches that are now implemented upstream
COPYING file has formating change no change to licence itself

Signed-off-by: Saul Wold

squashfs-tools: set SUMMARY instead of DESCRIPTION

2013-12-03T17:08:46+00:00

Also tidy up value a little bit.

Signed-off-by: Paul Eggleton 
Signed-off-by: Saul Wold 
Signed-off-by: Richard Purdie

squashfs-tools: drop FILESPATHPKG

2013-12-03T17:08:33+00:00

Drop FILESPATHPKG setting since it seems to be superfluous.

Signed-off-by: Paul Eggleton 
Signed-off-by: Saul Wold 
Signed-off-by: Richard Purdie

squashfs-tools: remove FILESEXTRAPATH and move patches directory

2013-11-20T14:02:54+00:00

Signed-off-by: Saul Wold

squashfs: fix CVE-2012-4025

2012-12-14T23:17:20+00:00

CQID:WIND00366813

Reference: http://squashfs.git.sourceforge.net/git/gitweb.cgi?
p=squashfs/squashfs;a=patch;h=8515b3d420f502c5c0236b86e2d6d7e3b23c190e

Integer overflow in the queue_init function in unsquashfs.c in
unsquashfs in Squashfs 4.2 and earlier allows remote attackers
to execute arbitrary code via a crafted block_log field in the
superblock of a .sqsh file, leading to a heap-based buffer overflow.

http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2012-4025

Signed-off-by: yanjun.zhu 

[YOCTO #3564]
Signed-off-by: Saul Wold

squashfs: fix for CVE-2012-4024

2012-12-03T15:20:34+00:00

Reference:http://squashfs.git.sourceforge.net/git/gitweb.cgi?p=
squashfs/squashfs;a=commit;h=19c38fba0be1ce949ab44310d7f49887576cc123

Fix potential stack overflow in get_component() where an individual
pathname component in an extract file (specified on the command line
or in an extract file) could exceed the 1024 byte sized targname
allocated on the stack.

Fix by dynamically allocating targname rather than storing it as
a fixed size on the stack.

[YOCTO #3513]

Signed-off-by: yanjun.zhu 
Signed-off-by: Richard Purdie

OECore license fixes: meta/*

2011-12-08T15:23:49+00:00

This is a quick audit of only the most obviously wrong licenses
found within OECore. These fixes fall into four areas:

- LICENSE field had incorrect format so that the parser choked
- LICENSE field has a license with no version
- LICENSE field was actually incorrect
- LICENSE field has an imaginary license that didn't exist

This fixes most of the LICENSE warnings thrown, along with my prior
commit adding additional licenses to common-licenses and additional
SPDXLICENSEMAP entries.

HOWEVER..... there is much to be done on the license front.
For a list of recipes with licenses that need obvious fixing see:

https://wiki.yoctoproject.org/wiki/License_Audit

That said, I would suggest another license audit as I've found
enough inconsistencies. A good suggestion is when in doubt, look at
how openSuse or Gentoo or Debian license the package.

Signed-off-by: Elizabeth Flanagan