summaryrefslogtreecommitdiff
path: root/meta
AgeCommit message (Collapse)AuthorFiles
2016-05-06kernel: fitimage: basic support for fitimage signatureYannick Gicquel1
This is an initial support of fitImage signature to enable U-Boot verified boot. This feature is implemented by adding a signature tag to the configuration section of the generated fit-image.its file. When a UBOOT_SIGN_ENABLE variable is set to "1", the signature procedure is activated and performs a second call to mkimage to sign the fitImage file and to include the public key in the deployed U-Boot device tree blob. (This implementation depends on the use of CONFIG_OF_SEPARATE in U-Boot.) As the U-Boot device tree blob is appended in the deploy dir, a dependency on 'u-boot:do_deploy' is added when the feature is activated. Signed-off-by: Yannick Gicquel <yannick.gicquel@iot.bzh> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-05-06kernel: fitimage: support device tree compiler optionsYannick Gicquel1
This introduces a new variable to set the device tree compiler options while calling mkimage ('-D' option). By default, this variable is not set but it can be defined in a configuration file, as following example: UBOOT_MKIMAGE_DTCOPTS = "-I dts -O dtb -p 2000" Signed-off-by: Yannick Gicquel <yannick.gicquel@iot.bzh> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-05-06u-boot: deploy u-boot-nodtb and dtb filesYannick Gicquel1
This enable the deployment of u-boot-nodtb.bin and u-boot.dtb files. Signed-off-by: Yannick Gicquel <yannick.gicquel@iot.bzh> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-05-06u-boot: basic support of dtb append for verified bootYannick Gicquel2
This introduces a new uboot-sign.class to support U-Boot verified boot. This part delivers the new class file, with related environment variables, and a new task intended to run before do_install task and which performs the concatenation of the u-boot-nodtb.bin and the device tree blob. The 'cat' command used overrides the u-boot.bin in both DEPLOYDIR & build dir to propagate the changes in later tasks (do_install, do_package, etc.) Signed-off-by: Yannick Gicquel <yannick.gicquel@iot.bzh> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-05-06autotools: add default for CACHED_CONFIGUREVARSRoss Burton1
Ensure that this variable has a default value so that we don't get debug messages that the variable couldn't be expanded. Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-05-06packagegroup-core-lsb: fix whitespace in meta-qt* warningsJoshua Lock1
Without these extra space characters the messages are ill-formatted, i.e: 'The meta-qt3 layer should be added, this layer provides Qt 3.xlibraries. Its intended use is for passing LSB tests as Qt3 isa requirement for LSB.' Changes to: 'The meta-qt3 layer should be added, this layer provides Qt 3.x libraries. Its intended use is for passing LSB tests as Qt3 is a requirement for LSB.' Signed-off-by: Joshua Lock <joshua.g.lock@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-05-06security_flags: turn potential string format security issues into an errorJoshua Lock1
Add "-Wformat -Wformat-security -Werror=format-security" to the default SECURITY_CFLAGS to catch potential security vulnerabilities due to the misuse of various string formatting functions. These flags are widely used in distributions such as Fedora and Ubuntu, however we have 15 recipes in OE-Core which fail to build with these flags included and thus the flags are removed for: - busybox - console-tools - cmake - expect - gcc - gettext - kexec-tools - leafpad - libuser - ltp - makedevs - oh-puzzles - stat - unzip - zip [YOCTO #9488] Signed-off-by: Joshua Lock <joshua.g.lock@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-05-06sysvinit-inittab: restrict labels to 4 charsStephano Cetola1
The current recipe creates inittab labels based off the device node name of TTYs used as consoles. If those names exceed the 4 character label limit of inittab, it will break. This change takes the last 4 chars of the device names in order to avoid any errors. [ YOCTO #9529 ] Signed-off-by: Stephano Cetola <stephano.cetola@linux.intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-05-06toolchain-scripts: replace source built-in callStephano Cetola1
Some shells (e.g. dash) do not support the source built-in. This replaces it with the dot operator. [ YOCTO #9535 ] Signed-off-by: Stephano Cetola <stephano.cetola@linux.intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-05-06gstreamer1.0-rtsp-server: upgrade to version 1.8.1Carlos Rafael Giani3
Signed-off-by: Carlos Rafael Giani <dv@pseudoterminal.org> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-05-06gstreamer1.0-libav: upgrade to version 1.8.1Carlos Rafael Giani1
Signed-off-by: Carlos Rafael Giani <dv@pseudoterminal.org> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-05-06gstreamer1.0-plugins-ugly: upgrade to version 1.8.1Carlos Rafael Giani3
Signed-off-by: Carlos Rafael Giani <dv@pseudoterminal.org> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-04-29gstreamer1.0-plugins-good: upgrade to version 1.8.1Carlos Rafael Giani2
Signed-off-by: Carlos Rafael Giani <dv@pseudoterminal.org> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-04-29gstreamer1.0-plugins-base: upgrade to version 1.8.1Carlos Rafael Giani10
Patches still apply and only needed their line numbers updated, with the exception of one backport from 1.7.1, which is no longer needed. Signed-off-by: Carlos Rafael Giani <dv@pseudoterminal.org> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-04-29gstreamer1.0: upgrade to version 1.8.1Carlos Rafael Giani4
The gst-inspect patch no longer applies, and according to upstream, is not needed. Signed-off-by: Carlos Rafael Giani <dv@pseudoterminal.org> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-04-29utils.bbclass: note for deprecated base_containsRobert Yang1
Signed-off-by: Robert Yang <liezhi.yang@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-04-29oeqa/sstatetests: remove temporary DL_DIRs in noop_samesigsRoss Burton1
Signed-off-by: Ross Burton <ross.burton@intel.com>
2016-04-29attr: Remove redundant "+=" after "_append"Robert P. J. Day1
Signed-off-by: Robert P. J. Day <rpjday@crashcourse.ca> Signed-off-by: Ross Burton <ross.burton@intel.com>
2016-04-29oeqa/sstatetests: add http_proxy to no-op hash testRoss Burton1
Add two values for http_proxy to verify that changing it doesn't change any unexpected tasks. As this causes uninative to fail to fetch, ensure that uninative is always disabled. Signed-off-by: Ross Burton <ross.burton@intel.com>
2016-04-29bluez5: enable out-of-tree buildsRoss Burton2
A patch is needed to fix a race in out-of-tree builds, and the install-ptest logic can be simplified. Signed-off-by: Ross Burton <ross.burton@intel.com>
2016-04-29mx: move to autotools instead of autotools-brokensepRoss Burton3
Now that MX inherits gtk-doc we can also remove fix-build-dir.patch. Signed-off-by: Ross Burton <ross.burton@intel.com>
2016-04-29mx-1.0: inherit gtk-docRoss Burton1
2016-04-29meta: add comments to explain autotools-brokensep useRoss Burton3
2016-04-29cups.inc: Fix ldflags warning.Noor Ahsan1
* While building following warning comes up QA Issue: No GNU_HASH in the elf binary: '...libcups.so.2' [ldflags] Fix this warning by settin DSOFLAGS. Signed-off-by: Noor Ahsan <noor_ahsan@mentor.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2016-04-29image.bbclass: don't execute compression commands multiple timesAlexander D. Kanevskiy1
In case of chained conversion methods are used via COMPRESS_CMD_* there is chance that some of steps would be executed multiple times. [YOCTO #9482] Signed-off-by: Alexander D. Kanevskiy <kad@kad.name> Signed-off-by: Ross Burton <ross.burton@intel.com>
2016-04-29grub_git: set COMPATIBLE_HOST_armv7a to nullRobert Yang1
It doesn't work with armv7a: | build-grub-module-verifier: error: unsupported relocation 0x2b. | make[3]: *** [reboot.mod] Error 1 | make[3]: *** Waiting for unfinished jobs.... | build-grub-module-verifier: error: unsupported relocation 0x2b. | build-grub-module-verifier: error: unsupported relocation 0x2b. | make[3]: *** [halt.mod] Error 1 | make[3]: *** [cat.mod] Error 1 | build-grub-module-verifier: error: unsupported relocation 0x2b. | build-grub-module-verifier: error: unsupported relocation 0x2b. | build-grub-module-verifier: error: unsupported relocation 0x2b. | make[3]: *** [disk.mod] Error 1 | make[3]: *** [gptsync.mod] Error 1 | make[3]: *** [eval.mod] Error 1 | build-grub-module-verifier: error:build-grub-module-verifier: error: unsupported relocation 0x2bunsupported relocation 0x2b. Signed-off-by: Robert Yang <liezhi.yang@windriver.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2016-04-29busybox: don't build arRoss Burton1
As it's not 1978 anymore, nobody is using ar for anything apart from static archives. If people are using static archives, then binutils provides a far more capable ar. Signed-off-by: Ross Burton <ross.burton@intel.com>
2016-04-29autotools: warn when running intltoolize if intltool isn't a dependemcyRoss Burton1
Signed-off-by: Ross Burton <ross.burton@intel.com>
2016-04-29bash: fixed ptest run-builtins failedDengke Du2
1. redirect the stderr output of the command exec with -l option to /dev/null. Because when we run command exec with -l option in builtins.tests, it is a login shell, so it would read the file /etc/profile, that file executes the /usr/bin/resize which added by commit: cc6360f4c4d97e0000f9d3545f381224ee99ce7d The /usr/bin/resize is produced by busybox that source code resize.c contains: fprintf(stderr, ESC"7" ESC"[r" ESC"[999;999H" ESC"[6n"); In the end, it outputs an escape sequence to the stderr, so when we compare the test output file /tmp/xx with builtins.right, it failed. we need to redirect the stderr output to the /dev/null to solve the problem. 2. ensure the target system contains the locales "en_US.UTF-8". Because when run the run-builtins, it executes the source5.sub file that contain: LC_ALL=en_US.UTF-8 such as add the following to the local.conf: IMAGE_LINGUAS_append = " en-us" Signed-off-by: Dengke Du <dengke.du@windriver.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2016-04-29libunwind: backport aarch64_be supportRuslan Bilovol3
Backport 2 patches from v1.2-rc1 tag of libunwind git repo. These patches add aarch64_be support to this package. Signed-off-by: Ruslan Bilovol <rbilovol@cisco.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2016-04-29image.bbclass: don't emit redundant IMAGE_CMD_xxx functionsAndre McCurdy1
IMAGE_CMD_xxx commands are always inlined within do_image_xxx. When IMAGE_CMD_xxx is defined as a function (e.g. IMAGE_CMD_btrfs, IMAGE_CMD_cpio, etc), a redundant copy of the function will be emitted by default. Remove IMAGE_CMD_xxx 'func' flags to prevent that. Signed-off-by: Andre McCurdy <armccurdy@gmail.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2016-04-29linux-firmware: break out bnx2 mips firmware and WHENCE licenseChristopher Clark1
commit a19cfee10c1f1762da601125c17035cf7701ce91 Author: Christopher Clark <christopher.clark6@baesystems.com> Date: Thu Apr 14 17:00:20 2016 -0700 linux-firmware: break out bnx2 mips firmware and WHENCE license Break out the bnx2 mips firmware into an independent subpackage. Since the bnx2 firmware license is contained in the common WHENCE file also package that separately so that other firmware that is licensed within that file may depend upon a standalone package containing it. Signed-off-by: Christopher Clark <christopher.clark6@baesystems.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2016-04-29package: ensure do_split_packages doesn't return duplicatesRoss Burton1
do_split_package() constructs a list of packages that were created as it iterates through the files, so if multiple files go into the same package then the package will be repeated in the output. Solve this by using a set() to store the created packages so that duplicates are ignored. Signed-off-by: Ross Burton <ross.burton@intel.com>
2016-04-29kernel-uimage: change target image to vmlinuxRuslan Bilovol1
Commit e69525: "kernel: Build uImage only when really needed" hardcoded target kernel image to zImage for case if uImage is generated by OpenEmbedded buildsystem. However not all kernel architectures support zImage target, for example AArch64 doesn't, so building of kernel is failing on this step. So instead of building zImage target that may not exist for many architectures, build vmlinux target that exists for all architectures. Since kernel-uboot.bbclass uses vmlinux anyway for creating image, there is no side effect on this change. Signed-off-by: Ruslan Bilovol <rbilovol@cisco.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2016-04-29packagegroup-core-tools-profile: Enable valgrind on ARMv7a and aboveFelipe F. Tonello1
Fixes: e5f41c221356 ("task-core-tools-profile: fix valgrind for arm and systemtap for mips") Valgrind works on ARMv7a and above. Signed-off-by: Felipe F. Tonello <eu@felipetonello.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2016-04-29directfb/pango/webkit: base_contains -> bb.utils.containsRobert Yang3
Signed-off-by: Robert Yang <liezhi.yang@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-04-29gcc-sanitizers: Depend on target gccJussi Kukkonen1
Without this the target gcc might not be in the sysroot leading to configure failure. Signed-off-by: Jussi Kukkonen <jussi.kukkonen@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-04-29babeltrace: Let autotools.bbclass run autoreconfJussi Kukkonen1
When bootstrap calls autoreconf, it won't have AC_LOCAL set properly so shared scripts may not be found: glib-2.0.m4 in this case. Remove custom bootstrap code so autotools class handles this. Signed-off-by: Jussi Kukkonen <jussi.kukkonen@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-04-29build-appliance: Switch to master branch post releaseRichard Purdie1
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-04-29qemu: Security fix CVE-2016-2858Armin Kuster5
Signed-off-by: Armin Kuster <akuster@mvista.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-04-29qemu: Security fix CVE-2016-2857Armin Kuster2
Signed-off-by: Armin Kuster <akuster@mvista.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-04-29busybox: musl mips64 ip fixArmin Kuster2
Signed-off-by: Armin Kuster <akuster@mvista.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-04-29busybox: Security fix CVE-2016-2147Armin Kuster3
busybox <= 1.24.2 Signed-off-by: Armin Kuster <akuster@mvista.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-04-29busybox: Security Fix CVE-2016-2148Armin Kuster2
busybox <= 1.24.2 Signed-off-by: Armin Kuster <akuster@mvista.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-04-29openssh: Security Fix CVE-2016-3115Armin Kuster2
opehssh <= 7.2 Signed-off-by: Armin Kuster <akuster@mvista.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-04-29tiff: Security fixes CVE-2015-8665 and CVE-2015-8683Armin Kuster2
same fix for both CVE's tiff <= 4.0.6 Signed-off-by: Armin Kuster <akuster@mvista.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-04-29rpm: explicitly disable tomcryptAndreas Oberritter1
Configure autodetects libtomcrypt, but then it adds libtommath to $LIBS and fails to link subsequent tests if it's unavailable. | checking for pcre.h... yes | checking for pcre_compile in -lpcre... no | checking whether to build with PCRE library... no | ++ executing failure action | configure: error: unable to find usable PCRE library Signed-off-by: Andreas Oberritter <obi@opendreambox.org> Signed-off-by: Ross Burton <ross.burton@intel.com>
2016-04-29matchbox-panel-2: Depend on dbus-glib-nativeJussi Kukkonen1
This is required for dbus-binding-tool. Signed-off-by: Jussi Kukkonen <jussi.kukkonen@intel.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2016-04-29connman-gnome: Depend on dbus-glib-nativeJussi Kukkonen1
This is required for dbus-binding-tool. Signed-off-by: Jussi Kukkonen <jussi.kukkonen@intel.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2016-04-29gobject-introspection: Depend on native flex and bisonJussi Kukkonen1
Signed-off-by: Jussi Kukkonen <jussi.kukkonen@intel.com> Signed-off-by: Ross Burton <ross.burton@intel.com>