openembedded-core.git/meta/recipes-devtools, branch denzil

bison: move remove-gets.patch to BASE_SRC_URI, it's needed for bison-native too if host has (e)glibc-2.16

2013-01-28T12:42:51+00:00

Signed-off-by: Martin Jansa 
Signed-off-by: Richard Purdie

squashfs: fix CVE-2012-4025

2012-12-27T23:42:39+00:00

CQID:WIND00366813

Reference: http://squashfs.git.sourceforge.net/git/gitweb.cgi?
p=squashfs/squashfs;a=patch;h=8515b3d420f502c5c0236b86e2d6d7e3b23c190e

Integer overflow in the queue_init function in unsquashfs.c in
unsquashfs in Squashfs 4.2 and earlier allows remote attackers
to execute arbitrary code via a crafted block_log field in the
superblock of a .sqsh file, leading to a heap-based buffer overflow.

http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2012-4025

Signed-off-by: yanjun.zhu 

[YOCTO #3564]
Signed-off-by: Saul Wold

grub,guile,cpio,tar,wget: Fix gnulib for absense of gets in eglibc

2012-12-14T23:45:29+00:00

eglibc 2.16 does not export gets anymore

Signed-off-by: Khem Raj 
Signed-off-by: Saul Wold 
Signed-off-by: Richard Purdie 

Resolved merge conflicts with denzil branch and backported guile
patch.

Signed-off-by: Scott Garman

bison: Fix for gets being removed from eglibc 2.16

2012-12-13T04:40:46+00:00

Signed-off-by: Khem Raj 
Signed-off-by: Saul Wold 
Signed-off-by: Richard Purdie

gettext,m4,augeas,gnutls: Account for removal of gets in eglibc 2.16

2012-12-13T04:39:33+00:00

These recipes use gnulib which needs this change to use gets
when its defined and not otherwise. Until that change goes into
gnulib and then all these package upgrade gnulib in their sourcebase
we patch them

Signed-off-by: Khem Raj 
Signed-off-by: Saul Wold 
Signed-off-by: Richard Purdie 

Resolved merge conflicts with denzil branch and backported gnutls
patch.

Signed-off-by: Scott Garman

squashfs: fix for CVE-2012-4024

2012-11-30T22:51:10+00:00

Reference:http://squashfs.git.sourceforge.net/git/gitweb.cgi?p=
squashfs/squashfs;a=commit;h=19c38fba0be1ce949ab44310d7f49887576cc123

Fix potential stack overflow in get_component() where an individual
pathname component in an extract file (specified on the command line
or in an extract file) could exceed the 1024 byte sized targname
allocated on the stack.

Fix by dynamically allocating targname rather than storing it as
a fixed size on the stack.

[YOCTO #3513]

Fixes denzil [YOCTO #3520]

Signed-off-by: yanjun.zhu

opkg-utils: bump SRCREV to latest

2012-11-30T02:50:05+00:00

Signed-off-by: Martin Jansa 
Signed-off-by: Richard Purdie

opkg-utils: Add needed python modules as RDEPENDS

2012-11-30T02:49:58+00:00

Signed-off-by: Andrei Gherzan 
Signed-off-by: Saul Wold

openjade-native: fix undefined Getopts error, use std namespace

2012-10-04T16:08:16+00:00

Using Gentoo Linux as the build host, it fails without this patch
Use Getopt::Std in place of getopts.pl.

https://bugs.gentoo.org/show_bug.cgi?id=420083

which following error:
/usr/bin/perl -w ./../msggen.pl -l jstyleModule InterpreterMessages.msg
/usr/bin/perl -w ./../msggen.pl -l jstyleModule DssslAppMessages.msg
Undefined subroutine &main::Getopts called at ./../msggen.pl line 22.
make[2]: *** [InterpreterMessages.h] Error 2
make[2]: *** Waiting for unfinished jobs....
Undefined subroutine &main::Getopts called at ./../msggen.pl line 22.
make[2]: *** [DssslAppMessages.h] Error 2

(from OE-Core rev 169a89b10817b742c063fcd76721e4dbbcca6199)

Signed-off-by: Dennis Lan 
Signed-off-by: Richard Purdie

valgrind_3.7.0.bb: fix missing leading space on _append

2012-09-24T16:51:12+00:00

Signed-off-by: Matthew McClintock