openembedded-core.git/meta/recipes-extended/bash, branch 2015-4

bash 3.2.48: disable parallel build

2015-03-09T16:00:22+00:00

It's Makefile has the two rules:
$(BUILTINS_LIBRARY): $(BUILTIN_DEFS) $(BUILTIN_C_SRC) config.h ${BASHINCDIR}/memalloc.h version.h
    @(cd $(DEFDIR) && $(MAKE) $(MFLAGS) DEBUG=${DEBUG} libbuiltins.a ) || exit 1

${DEFDIR}/builtext.h: $(BUILTIN_DEFS)
    @(cd $(DEFDIR) && $(MAKE) $(MFLAGS) builtext.h ) || exit 1

which causes parallel issues:
mkbuiltins.o: file not recognized: File truncated
collect2: ld returned 1 exit status

I don't have any good ideas to fix the problem, so disable parallel
build for it.

Signed-off-by: Robert Yang 
Signed-off-by: Ross Burton

meta: enable parallel build for several recipes

2015-02-14T22:26:10+00:00

I used a for loop to build these packages more than 520 times, these
recipes never failed.

Signed-off-by: Robert Yang

bash: separate B and S

2015-01-16T23:06:44+00:00

It works well now, and bump the PR to avoid:
x86_64-poky-linux-ar: shmatch.o: No such file or directory

Signed-off-by: Robert Yang

bash: use EXTRA_AUTORECONF to disable autoheader

2014-12-03T12:22:42+00:00

Disable autoheader by setting EXTRA_AUTORECONF to --exclude=autoheader instead
of setting AUTOHEADER to true.

Signed-off-by: Ross Burton

bash: clean host path in bashbug

2014-11-25T12:58:18+00:00

* /usr/bin/bashbug

Signed-off-by: Shiqun Lin 
Signed-off-by: Wenzong Fan

bash: update and CVE-2014-6278 fix

2014-10-06T15:02:46+00:00

Update both bash 3.2.48 (to 57), and bash 4.3 (to 30) to fix the remaining
'shellshock' security issues, CVE-2014-6278.

Signed-off-by: Mark Hatle 
Signed-off-by: Richard Purdie

bash: Upgrade bash to latest patch level to fix CVEs

2014-10-06T14:07:59+00:00

We upgrade bash_4.3 to patch revision 29, and bash_3.2.48 to 56.

There are numerous community bug fixes included with this set, but the key
items are:

bash32-052      CVE-2014-6271                           9/24/2014
bash32-053      CVE-2014-7169                           9/26/2014
bash32-054      exported function namespace change      9/27/2014
bash32-055      CVE-2014-7186/CVE-2014-7187             10/1/2014
bash32-056      CVE-2014-6277                           10/2/2014

bash43-025      CVE-2014-6271                           9/24/2014
bash43-026      CVE-2014-7169                           9/26/2014
bash43-027      exported function namespace change      9/27/2014
bash43-028      CVE-2014-7186/CVE-2014-7187             10/1/2014
bash43-029      CVE-2014-6277                           10/2/2014

Signed-off-by: Mark Hatle 
Signed-off-by: Richard Purdie

bash: Fix CVE-2014-7169

2014-09-29T11:13:30+00:00

This is a followup patch to incomplete CVE-2014-6271 fix
code execution via specially-crafted environment

Change-Id: Ibb0a587ee6e09b8174e92d005356e822ad40d4ed
Signed-off-by: Khem Raj 
Signed-off-by: Richard Purdie

bash: fix CVE-2014-6271

2014-09-29T11:12:35+00:00

CVE-2014-6271 aka ShellShock.

"GNU Bash through 4.3 processes trailing strings after function definitions in
the values of environment variables, which allows remote attackers to execute
arbitrary code via a crafted environment."

Signed-off-by: Ross Burton

Add texinfo.bbclass; recipes that use texinfo utils at build-time inherit it.

2014-05-01T22:17:50+00:00

The class itself currently does nothing. The idea is to mark all recipes that
make use of the texinfo utilities. In the future, this class could be used to
suppress the generation/formatting of documentation for performance,
explicitly track dependencies on these utilities, and eliminate Yocto's
current dependency on the host system's texinfo utilities.

Signed-off-by: Max Eliaser 
Signed-off-by: Richard Purdie