Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Mine buildroot test #7

Open
wants to merge 5,759 commits into
base: master
Choose a base branch
from
Open

Mine buildroot test #7

wants to merge 5,759 commits into from

Conversation

Morgic
Copy link

@Morgic Morgic commented Sep 26, 2024

No description provided.

vfazio and others added 30 commits May 6, 2024 13:47
…OABI

When python performs a cross compile, it uses a host interpreter to run
steps on behalf of the foreign architecture to finalize the build.

When performing these steps, foreign modules may be loaded if the SOABI
matches that of the host. This can lead to issues if the modules are
linked against a libc not available on the host or if the binaries
include instructions unsupported by the host.

For now, patch the foreign libraries out of PYTHONPATH and explicitly
define the path to sysconfigdata so builds can complete without error.

This method currently passes all upstream CI pipelines [0] and should
also work (with some modifications) for the migration to 3.12 [1].

Fixes: http://autobuild.buildroot.net/results/c854080e003e9a7d525325073190b472a8f982aa/
[0]: python/cpython#116294
[1]: https://lists.buildroot.org/pipermail/buildroot/2024-February/685369.html

Signed-off-by: Vincent Fazio <[email protected]>
Tested-by: Yann E. MORIN <[email protected]>
Signed-off-by: Yann E. MORIN <[email protected]>
(cherry picked from commit d01e13c)
Signed-off-by: Peter Korsgaard <[email protected]>
zlib is an optional dependency dependency (enabled by default) since the
addition of the package in commit
8aaa7ec

Signed-off-by: Fabrice Fontaine <[email protected]>
Signed-off-by: Arnout Vandecappelle <[email protected]>
(cherry picked from commit 05f5e5b)
Signed-off-by: Peter Korsgaard <[email protected]>
… linux headers

Add BR2_PACKAGE_HOST_LINUX_HEADERS_CUSTOM_6_6 to prevent error:
Incorrect selection of kernel headers: expected 6.8.x, got 6.6.x

Fixes:
https://gitlab.com/buildroot.org/buildroot/-/jobs/6498278078

Signed-off-by: Giulio Benetti <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>
(cherry picked from commit c245b37)
Signed-off-by: Peter Korsgaard <[email protected]>
--with-xdebug is not recognized since the addition of the package in
commit 7b7dffd:

configure: WARNING: unrecognized options: --disable-gtk-doc, --disable-gtk-doc-html, --disable-doc, --disable-docs, --disable-documentation, --with-xmlto, --with-fop, --disable-dependency-tracking, --enable-ipv6, --disable-nls, --with-xdebug

Fixes: 7b7dffd

Signed-off-by: Fabrice Fontaine <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>
(cherry picked from commit 98ee9f8)
Signed-off-by: Peter Korsgaard <[email protected]>
zlib is an optional dependency (enabled by default) since bump to
version 3.2.0 in commit 8280400 and
xdebug/xdebug@3954e5c

Fixes: 8280400

Signed-off-by: Fabrice Fontaine <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>
(cherry picked from commit 4b7aeee)
Signed-off-by: Peter Korsgaard <[email protected]>
Signed-off-by: Giulio Benetti <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>
(cherry picked from commit dd79b8d)
Signed-off-by: Peter Korsgaard <[email protected]>
Since the toolchain Bootlin update to 2023.11-1 [1], the arm Linux
kernel build is broken with binutils >= 2.41 with:

  arch/arm/mm/proc-v7.S: Assembler messages:
  arch/arm/mm/proc-v7.S:640: Error: junk at end of line, first unrecognized character is `#'

A similar issue has already be fixed for qemu m68k [2].

Bump to the latest kernel 4.19 that already include the backport
of 790756c7e022 ("ARM: 8933/1: replace Sun/Solaris style flag on section directive")

[1] 7e0e6e3
[2] a1ce947

Fixes:
https://gitlab.com/buildroot.org/buildroot/-/jobs/6414160106 (TestFileCapabilities)

Signed-off-by: Romain Naour <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>
(cherry picked from commit 07ef00d)
Signed-off-by: Peter Korsgaard <[email protected]>
The last version bump removed python-setuptools runtime dependency
but doing so also removed the python3-pyexpat and python3-zlib
runtime depdencies [1] that are actually direct runtime
dependencies.

[1] 0811625

Fixes:
https://gitlab.com/buildroot.org/buildroot/-/jobs/6477656982 (TestPythonPy3Segno)

Cc: James Hilliard <[email protected]>
Signed-off-by: Romain Naour <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>
(cherry picked from commit d4833cc)
Signed-off-by: Peter Korsgaard <[email protected]>
…ndency

The last version bump removed python-pyopenssl runtime dependency but
doing so also removed the python-cryptography runtime depdency [1] that
is actually a direct runtime dependency.

While at it, update BR2_PACKAGE_HOST_RUSTC_TARGET_ARCH_SUPPORTS
dependency comment.

[1] 6008f2b

Fixes:
https://gitlab.com/buildroot.org/buildroot/-/jobs/6477656983 (TestPythonPy3ServiceIdentity)

Cc: James Hilliard <[email protected]>
Signed-off-by: Romain Naour <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>
(cherry picked from commit ee074dd)
Signed-off-by: Peter Korsgaard <[email protected]>
Signed-off-by: Laurent Vivier <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>
(cherry picked from commit 5652306)
Signed-off-by: Peter Korsgaard <[email protected]>
…nfig

u-boot-2021.04 seems to be broken when pylibfdt support is enabled
and the latest python3/setuptools are used.

Since the TestATFAllwinner is using bananapi_m64 as u-boot defconfig
but the Buildroot defconfig of this board was removed in 2022.11 [1]
update TestATFAllwinner to use a newer BSP. Use the one provided
by orangepi_zero_plus2_defconfig.

[1] daf3c66

Fixes:
https://gitlab.com/buildroot.org/buildroot/-/jobs/6477656317 (TestATFAllwinner)

Signed-off-by: Romain Naour <[email protected]>
Signed-off-by: Yann E. MORIN <[email protected]>
(cherry picked from commit eb16148)
Signed-off-by: Peter Korsgaard <[email protected]>
TestATFVexpress is using vexpress_aemv8a_juno as as u-boot defconfig
but the Buildroot defconfig of this board was removed in 2022.11 [1]

Since both TestATFVexpress and TestATFAllwinner are now using mainline
ATF, we don't really need several ATF test anymore. Initially [2],
several runtime test were added to test ATF/U-Boot combinations when
ATF was provided by a vendor: vexpress (mainline), Allwinner and
Marvell.

Keep TestATFAllwinner as ATF mainline test.

[1] 347c108
[2] 8cf3ce0

Signed-off-by: Romain Naour <[email protected]>
Signed-off-by: Yann E. MORIN <[email protected]>
(cherry picked from commit 107bcd5)
Signed-off-by: Peter Korsgaard <[email protected]>
png.py import zlib [1] so python3-zlib needs to be installed at
runtime.

[1] https://gitlab.com/drj11/pypng/-/blob/pypng-0.20220715.0/code/png.py?ref_type=tags#L185

Fixes:
https://gitlab.com/buildroot.org/buildroot/-/jobs/6477656971 (TestPythonPy3Qrcode)

Cc: James Hilliard <[email protected]>
Signed-off-by: Romain Naour <[email protected]>
Signed-off-by: Yann E. MORIN <[email protected]>
(cherry picked from commit 15381b5)
Signed-off-by: Peter Korsgaard <[email protected]>
/dev/shm is a world-writable directory, like /tmp, and should also
have the sticky bit set.  Without this, any user can delete and
replace another user's files in /dev/shm.

This bug has been present since /dev/shm was added to the skeleton
/etc/fstab, but appears to have been fixed for systems using systemd
by commit 76fc927 "system: separate sysv and systemd parts of the
skeleton" which went into Buildroot 2017.08.

Signed-off-by: Ben Hutchings <[email protected]>
Fixes: 22fde22
Signed-off-by: Yann E. MORIN <[email protected]>
(cherry picked from commit 0b2967e)
Signed-off-by: Peter Korsgaard <[email protected]>
Signed-off-by: Peter Korsgaard <[email protected]>
cpe:2.3:a:ttyd_project:ttyd is a valid CPE identifier for this package:

    https://nvd.nist.gov/products/cpe/detail/DBEDA75E-4E19-48C1-92D7-43E4035BC048

Signed-off-by: TIAN Yuanhao <[email protected]>
[[email protected]: Move to its own patch]
Signed-off-by: Yann E. MORIN <[email protected]>
(cherry picked from commit 7d4ba7e)
Signed-off-by: Peter Korsgaard <[email protected]>
Fixes:
https://gitlab.com/buildroot.org/buildroot/-/jobs/6655119961

Signed-off-by: Waldemar Brodkorb <[email protected]>
Signed-off-by: Romain Naour <[email protected]>
(cherry picked from commit 8d366db)
Signed-off-by: Peter Korsgaard <[email protected]>
…rkflow

Signed-off-by: Thomas Devoogdt <[email protected]>
Reviewed-by: J. Neuschäfer <[email protected]>
Signed-off-by: Yann E. MORIN <[email protected]>
(cherry picked from commit 32753c6)
Signed-off-by: Peter Korsgaard <[email protected]>
In _imagingcms.c in Pillow before 10.3.0, a buffer overflow exists because
strcpy is used instead of strncpy.

Signed-off-by: Angelo Compagnucci <[email protected]>
Signed-off-by: Peter Korsgaard <[email protected]>
(cherry picked from commit dfaa34d)
Signed-off-by: Peter Korsgaard <[email protected]>
Commit dfaa34d forgot to update hash of
LICENSE file:

ERROR: LICENSE has wrong sha256 hash:
ERROR: expected: e706384c6f299d1b6fa782ae657740b372b4bd7938a1a318bf94ac249114758a
ERROR: got     : cf234c27a3f275f5a050f4df3946f8855704226fe4e7ca8b33928cbcecbced37

LICENSE file has been updated to clean up authors and contributors:
python-pillow/Pillow@4197263

Fixes: dfaa34d
 - http://autobuild.buildroot.org/results/5a35d83c73367e1b20534b1bc7f2f564cf653a38

Signed-off-by: Fabrice Fontaine <[email protected]>
Signed-off-by: Yann E. MORIN <[email protected]>
(cherry picked from commit b8a86f5)
Signed-off-by: Peter Korsgaard <[email protected]>
Fixes CVE-2024-1874, CVE-2024-2756 & CVE-2024-3096.

Changelog: https://www.php.net/ChangeLog-8.php#PHP_8_2
Release notes: https://news-web.php.net/php.announce/423

Signed-off-by: Peter Korsgaard <[email protected]>
To ensure the correct prefix is used in the generated tinycbor.pc instead of
/usr/local:

>>> tinycbor 0.6.0 Building
..
sed > tinycbor.pc < tinycbor.pc.in \
        -e 's,@Prefix@,/usr/local,' \
        -e 's,@exec_prefix@,/usr/local,' \
        -e 's,@libdir@,/usr/local/lib,' \
        -e 's,@includedir@,/usr/local/include,' \
        -e 's,@Version@,0.6.0,'
>>> tinycbor 0.6.0 Installing to staging directory
..
install -m 644 tinycbor.pc /path/to/buildroot/output/host/aarch64-buildroot-linux-gnu/sysroot/usr/lib/pkgconfig/tinycbor.pc

Signed-off-by: Peter Korsgaard <[email protected]>
(cherry picked from commit b059e08)
Signed-off-by: Peter Korsgaard <[email protected]>
Fix the following CVEs:

- CVE-2024-32041 [Low[ OutOfBound Read in zgfx_decompress_segment
- CVE-2024-32039 [Moderate] Integer overflow & OutOfBound Write in
  clear_decompress_residual_data
- CVE-2024-32040 [Low] integer underflow in nsc_rle_decode
- CVE-2024-32458 [Low] OutOfBound Read in planar_skip_plane_rle
- CVE-2024-32459 [Low] OutOfBound Read in ncrush_decompress
- CVE-2024-32460 [Low] OutOfBound Read in interleaved_decompress

https://github.com/FreeRDP/FreeRDP/releases/tag/2.11.6

Signed-off-by: Fabrice Fontaine <[email protected]>
Signed-off-by: Peter Korsgaard <[email protected]>
(cherry picked from commit 1126be7)
Signed-off-by: Peter Korsgaard <[email protected]>
Fixes the following security issues:

CVE-2021-3575: A heap-based buffer overflow was found in openjpeg in
color.c:379:42 in sycc420_to_rgb when decompressing a crafted .j2k file.  An
attacker could use this to execute arbitrary code with the permissions of
the application compiled against openjpeg.

Signed-off-by: Angelo Compagnucci <[email protected]>
Signed-off-by: Peter Korsgaard <[email protected]>
(cherry picked from commit ff36bc6)
Signed-off-by: Peter Korsgaard <[email protected]>
… series

Signed-off-by: Bernd Kuhls <[email protected]>
Signed-off-by: Arnout Vandecappelle <[email protected]>
(cherry picked from commit 9c592ec)
[Peter: drop 6.8.x bump]
Signed-off-by: Peter Korsgaard <[email protected]>
Fixes the following security issues:

CVE-2024-32473: Ensure IPv6 is disabled on interfaces only allocated an IPv4
address by the engine

GHSA-x84c-p2g9-rqv9

Signed-off-by: Peter Korsgaard <[email protected]>
Signed-off-by: Yann E. MORIN <[email protected]>
(cherry picked from commit 8e37a88)
Signed-off-by: Peter Korsgaard <[email protected]>
https://github.com/moby/moby/releases/tag/v26.0.2

Signed-off-by: Peter Korsgaard <[email protected]>
Signed-off-by: Yann E. MORIN <[email protected]>
(cherry picked from commit 49c8154)
Signed-off-by: Peter Korsgaard <[email protected]>
- set CPE_ID_VENDOR to silence mismatched CVE-2001-0956 ([1], [2]) warning
  clearly aiming some other product/version ("speechd 0.54 with Festival or
  rsynth speech synthesis package")

[1] https://security-tracker.debian.org/tracker/CVE-2001-0956
[2] GHSA-67cw-4jhh-3jm7

Signed-off-by: Peter Seiderer <[email protected]>
Signed-off-by: Yann E. MORIN <[email protected]>
(cherry picked from commit 2065273)
Signed-off-by: Peter Korsgaard <[email protected]>
GCC14 now treats implicit int types as error so when check() from
check-lxdialog.sh is called to check whether we can link against ncurses
it will fail silently and the help text indicating to install ncurses is
printed.

However, this is not due to missing ncurses but once the stderr redirect
to /dev/null is removed we can see the root cause:
<stdin>:2:1: error: return type defaults to ‘int’ [-Wimplicit-int]

So, in order for menuconfig to work with GCC14 lets just specify the
return type of main() as int.

Npte that the upstream kconfig in the linux kernel source tree no longer
carries or uses the check-lxdialog.sh script since commit 1c5af5cf9308
(kconfig: refactor ncurses package checks for building mconf and nconf),
so there is no commit we can backport to our kconfig copy.

Signed-off-by: Robert Marko <[email protected]>
Reviewed-by: Petr Vorel <[email protected]>
Tested-by: Petr Vorel <[email protected]>
[[email protected]: add note about upstream kernel]
Signed-off-by: Yann E. MORIN <[email protected]>
(cherry picked from commit a6210d2)
Signed-off-by: Peter Korsgaard <[email protected]>
The commit [1] updated the u-boot version with the one used by
orangepi_zero_plus2_defconfig but the dependency on openssl
was forgotten.

Fixes:
https://gitlab.com/buildroot.org/buildroot/-/jobs/6703221868

[1] eb16148

Signed-off-by: Romain Naour <[email protected]>
(cherry picked from commit bc75b09)
Signed-off-by: Peter Korsgaard <[email protected]>
jacmet and others added 30 commits June 8, 2024 20:09
The tarball (with .tar.gz extension but same content) is also available over
https from sourceforge, so use that instead.

Signed-off-by: Peter Korsgaard <[email protected]>
Signed-off-by: Yann E. MORIN <[email protected]>
(cherry picked from commit e5993e6)
Signed-off-by: Peter Korsgaard <[email protected]>
The tarball is also available over https from github, so use that instead.

Signed-off-by: Peter Korsgaard <[email protected]>
Signed-off-by: Yann E. MORIN <[email protected]>
(cherry picked from commit eca3ea8)
Signed-off-by: Peter Korsgaard <[email protected]>
Fedora has recently migrated to wget2, which has dropped ftp support and the
--passive-ftp command line option:

https://fedoraproject.org/wiki/Changes/Wget2asWget

It turns out that the command line option also doesn't do anything for wget1
as it was made the default in wget 1.10:

https://git.savannah.gnu.org/cgit/wget.git/tree/NEWS?h=v1.13#n292

wget 1.10 is from 2005, so it is safe to assume that all supported
distributions use >= 1.10.

Signed-off-by: Peter Korsgaard <[email protected]>
Signed-off-by: Yann E. MORIN <[email protected]>
(cherry picked from commit 1a61c1d)
Signed-off-by: Peter Korsgaard <[email protected]>
Signed-off-by: Yegor Yefremov <[email protected]>
Signed-off-by: Peter Korsgaard <[email protected]>
(cherry picked from commit 9703351)
Signed-off-by: Peter Korsgaard <[email protected]>
When systemd and tpm2-tss with fapi support are enabled, the fakeroot
script fail with:

    <stdin>:35: Failed to resolve user 'tss': No such process.

When fapi support is enabled, tpm2-tss package install additional
configuration files that are expecting tss user and group exist [1].

  /etc/sysusers.d/tpm2-tss.conf
  /etc/tmpfiles.d/tpm2-tss-fapi.conf

The build fail in the fakeroot environment while handling tmpfiles
installed by tpm2-tss with fapi by host-systemd.

tss user and group is currently created by the tpm2-abrmd package but
tpm2-tss package also provide a udev rule file tpm-udev.rules [2] that
set the ownership of dev nodes /dev/tpmX and /dev/tpmrmX to tss
user/group. So tpm2-tss package must define TPM2_TSS_USERS to create
tss user and group, not tpm2-abrmd package.

So, move TPM2_ABRMD_USERS to TPM2_TSS_USERS.

Note: tpm2-abrmd is nowadays deprecated since the in-kernel Resource
      Manager (available since kernel 4.12) is preferred [3].

[1] https://github.com/tpm2-software/tpm2-tss/blob/4.1.3/INSTALL.md?plain=1#L184
[2] https://github.com/tpm2-software/tpm2-tss/blob/4.1.3/dist/tpm-udev.rules
[3] https://github.com/tpm2-software/tpm2-abrmd/blob/3.0.0/README.md?plain=1#L39

Signed-off-by: Romain Naour <[email protected]>
Signed-off-by: Peter Korsgaard <[email protected]>
(cherry picked from commit 2cdd3d1)
Signed-off-by: Peter Korsgaard <[email protected]>
When tpm2-tss package is selected, systemd can enable its TPM2 support
[1] used by systemd-boot, systemd-cryptenroll (when cryptsetup package
is also enabled) [2] and other tool systemd-pcr{extend,lock,machine}.

[1] https://github.com/systemd/systemd/blob/db11bab38ccf1ed257f310d29070843d4c58ea01/meson.build#L1341
[2] https://www.freedesktop.org/software/systemd/man/latest/systemd-cryptenroll.html

Signed-off-by: Romain Naour <[email protected]>
Signed-off-by: Peter Korsgaard <[email protected]>
(cherry picked from commit 0e567a1)
Signed-off-by: Peter Korsgaard <[email protected]>
It has been well over 10 years since glibc 2.14 was released; the last
Debian version that had an earlier glibc was Wheezy, which Freexian
stopped to maintain as an ELTS in June 2020, 4 years ago, while the
oldest still maintained Ubuntu has glibc 2.21. It is now safe to assume
glibc 2.14 on all major, relevant distributions nowadays.

The distutils module is no longer bundled with python 3.12 so this
eliminates the need to install additional python modules under python
3.12.

Signed-off-by: James Hilliard <[email protected]>
[[email protected]: add Debian and Ubuntu references]
Signed-off-by: Yann E. MORIN <[email protected]>
(cherry picked from commit 929a491)
Signed-off-by: Peter Korsgaard <[email protected]>
Fixes:
http://autobuild.buildroot.net/results/f08/f087b879167252690ed198de771292142c6249f8/

Set GI_GIRDIR env variable which is now required for configure
to function.

Details:
https://gitlab.gnome.org/GNOME/vala/-/commit/a9d38070ce86d7994b949f7cb426fbf670a953d8

Signed-off-by: James Hilliard <[email protected]>
[[email protected]: drop spurious reflow of _DEPENDENCIES]
Signed-off-by: Yann E. MORIN <[email protected]>
(cherry picked from commit 3d4896c)
Signed-off-by: Peter Korsgaard <[email protected]>
…al position

When using imx-mkimage 6.1.36_2.1.0 or later, an additional data structure
is inserted in the generated image. The FIT external data position passed
to the uboot mkimage program needs to be adjusted accordingly.

Fixes: https://bugs.busybox.net/show_bug.cgi?id=15973
Fixes: 72de789 ("package/imx-mkimage: bump version to lf-6.1.36-2.1.0")
Tested-by: Sébastien Szymanski <[email protected]>
[Sébastien: Tested on i.MX8MM EVK and i.MX8MP EVK]
[Sébastien:
 - fix subject
 - add Tested-by tag
 - fix Fixes tags
]
Signed-off-by: Sébastien Szymanski <[email protected]>
Signed-off-by: Peter Korsgaard <[email protected]>
(cherry picked from commit baaf7f7)
Signed-off-by: Peter Korsgaard <[email protected]>
Signed-off-by: Raphaël Mélotte <[email protected]>
Signed-off-by: Peter Korsgaard <[email protected]>
(cherry picked from commit 095bd20)
Signed-off-by: Peter Korsgaard <[email protected]>
Patch from upstream PR still being discussed:
kmod-project/kmod#32

Fixes: #16093

Signed-off-by: Fiona Klute <[email protected]>
[[email protected]:
  - add upstream tag to the patch
  - reference #16093
]
Signed-off-by: Yann E. MORIN <[email protected]>
(cherry picked from commit 0561772)
Signed-off-by: Peter Korsgaard <[email protected]>
Fixes the following CVEs:

CVE-2024-24789: archive/zip: mishandling of corrupt central directory record
CVE-2024-24790: net/netip: unexpected behavior from Is methods for IPv4-mapped IPv6 addresses

Signed-off-by: Peter Korsgaard <[email protected]>
Signed-off-by: Julien Olivain <[email protected]>
Signed-off-by: Yann E. MORIN <[email protected]>
(cherry picked from commit 9f39676)
Signed-off-by: Peter Korsgaard <[email protected]>
Host build fails on updated Arch Linux desktop.

My current /usr/bin/gcc version is 14.1.1 20240522, where
implicit-function-declaration cause build to fail:

2024-06-05T07:03:20 libtool: compile:  /home/roy/hymatek/connexi-touchpanel-firmware/mxxf1/output/host/bin/ccache /usr/bin/gcc -DHAVE_CONFIG_H -I. -I.. -I. -I../include -Iinclude -I../src -I/home/roy/hymatek/connexi-touchpanel-firmware/mxxf1/output/host/include -Wall -O2 -I/home/roy/hymatek/connexi-touchpanel-firmware/mxxf1/output/host/include -fexceptions -c ../src/tramp.c  -fPIC -DPIC -o src/.libs/tramp.o
2024-06-05T07:03:20 ../src/tramp.c: In function ‘ffi_tramp_get_temp_file’:
2024-06-05T07:03:20 ../src/tramp.c:262:22: error: implicit declaration of function ‘open_temp_exec_file’ [-Wimplicit-function-declaration]
2024-06-05T07:03:20 262 |   tramp_globals.fd = open_temp_exec_file ();
2024-06-05T07:03:20 |                      ^~~~~~~~~~~~~~~~~~~

Patch from master was added to fix build.

Signed-off-by: Roy Kollen Svendsen <[email protected]>
Signed-off-by: Peter Korsgaard <[email protected]>
Fixes "git lfs" and "git annex" breakage/regressions (for details see [1]).

[1] https://lore.kernel.org/git/[email protected]/

Signed-off-by: Peter Seiderer <[email protected]>
Signed-off-by: Peter Korsgaard <[email protected]>
Fixes CVE-2024-4741 (for details see [1]).

[1] https://www.openssl.org/news/secadv/20240528.txt

Signed-off-by: Peter Seiderer <[email protected]>
Signed-off-by: Peter Korsgaard <[email protected]>
Signed-off-by: J. Neuschäfer <[email protected]>
Signed-off-by: Yann E. MORIN <[email protected]>
(cherry picked from commit cc08d6f)
Signed-off-by: Peter Korsgaard <[email protected]>
Signed-off-by: Peter Korsgaard <[email protected]>
Add initial support for STM32MP257 GPU drivers.

gcnano-binaries will be configured for STM32MP1 platforms on ARM 32-bits
and STM32MP2 on ARM 64-bits.

Signed-off-by: Romain Gantois <[email protected]>
Signed-off-by: Kory Maincent <[email protected]>
Add support for the host package to enable future support for
TrustedFirmware-M, which depends on it.

Signed-off-by: Kory Maincent <[email protected]>
Add support for the host package to enable future support for
TrustedFirmware-M, which depends on it.

Signed-off-by: Kory Maincent <[email protected]>
Add support for the host package to enable future support for
TrustedFirmware-M, which depends on it.

Signed-off-by: Kory Maincent <[email protected]>
Add support for TrustedFirmware-M:
https://trustedfirmware-m.readthedocs.io
https://git.trustedfirmware.org/TF-M/trusted-firmware-m.git

Trusted Firmware-M (TF-M) implements the Secure Processing Environment
(SPE) for Armv8-M, Armv8.1-M architectures (e.g. the Cortex-M33,
Cortex-M23, Cortex-M55, Cortex-M85 processors) or dual-core platforms.

Use subpackages to download the third-party project sources to be able to
apply patches located in the TF-M sources. This approach is also necessary
because the tfm-tests git host produces non-reproducible tarballs.

Signed-off-by: Kory Maincent <[email protected]>
OP-TEE OS supports custom tarballs. If the OP-TEE OS custom tarball version
does not match the latest optee-client version supported by Buildroot,
optee-client might not build or run properly. This patch adds support for
an optee-client custom tarball URL to address this potential issue.

Signed-off-by: Kory Maincent <[email protected]>
OP-TEE OS supports custom tarballs. If the OP-TEE OS custom tarball version
does not match the latest optee-test version supported by Buildroot,
optee-test might not build or run properly. This patch adds support for
an optee-test custom tarball URL to address this potential issue.

Signed-off-by: Kory Maincent <[email protected]>
OP-TEE OS supports custom tarballs. If the OP-TEE OS custom tarball version
does not match the latest optee-examples version supported by Buildroot,
optee-examples might not build or run properly. This patch adds support for
an optee-examples custom tarball URL to address this potential issue.

Signed-off-by: Kory Maincent <[email protected]>
Some specific versions of OP-TEE need cmake on the host to build the scmi
firmware.

To allow building such OP-TEE OS versions, this commit adds the option
BR2_TARGET_OPTEE_OS_NEEDS_CMAKE which when enabled ensures that host-cmake
is built before OP-TEE OS.

Signed-off-by: Kory Maincent <[email protected]>
…_DTS_PATH

Linux organizes devicetree files under vendor subdirectories for arm and
arm64 architectures, such as arch/<arch>/boot/dts/<vendor>/. The
BR2_LINUX_KERNEL_CUSTOM_DTS_PATH was only copying devicetree files to
arch/<arch>/boot/dts/, which is incompatible with the vendor
subdirectory structure.

This patch adds support for using a directory in
BR2_LINUX_KERNEL_CUSTOM_DTS_PATH that matches the vendor subdirectory name.

Signed-off-by: Kory Maincent <[email protected]>
The arm-gnu-toolchain is used by TI's K3 generation of devices to
compile the first stage bootloader (tiboot3.bin) which will run on the
32bit R5 MCU.

The 10.3-2021.10 version of this toolchain is no longer publicized as
being downloadable (and it's fairly old) on ARM's website. Let's upgrade
to the latest version of the toolchain ARM (13.2-rel1)

Signed-off-by: Bryan Brattlof <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.