[ snip of CMakeLists.txt ]
BISON_TARGET(constexp
${CMAKE_CURRENT_LIST_DIR}/constexp.y
${GENERATED_SRC}/ce_parse.cpp
COMPILE_FLAGS "${YACC_FLAGS}")
[ end of snip ]
bison embeds full paths in its generated headers, eg:
bison -o /full/build/path/generated/example.cpp ...
The header will include:
#ifndef YY_FULL_BUILD_PATH_GENERATED_MSCGEN_LANGUAGE_HPP_INCLUDED
#define YY_FULL_BUILD_PATH_GENERATED_MSCGEN_LANGUAGE_HPP_INCLUDED
This make doxygen-src not reproducible, fix by replacing full build path
Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
find, the way it is used will also list c files in
special directories like .pc, which is created by quilt
for managing patches and is the default PATCHTOOL
Ignore this directory during find operation.
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Cc: Ryan Eatmon <reatmon@ti.com>
The --with-smart option behind the feature "smart" relies on the drivedb.h
header, provided by smartmontools package (/usr/share/smartmontools/drivedb.h).
However the dependencies (DEPENDS) miss this package. Furthermore, if the
--with-drivedb option is not used, the configuration step will search for the
file first on the host's rootfs. This may result in the wrong header being picked,
or the --with-smart option being silently disabled due to incomplete dependencies
(causing missing header).
The header is now guaranteed to be present due to an added dependency in the
"smart" feature, and its location is specified by the --with-drivedb option.
Signed-off-by: Corentin Guillevic <corentin.guillevic@smile.fr>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
- Move Eigen BLAS, LAPACK as packageconfig as they requires Fortran compiler
- Disable building TESTING
- Remove patch that has been merged
Signed-off-by: Clément Péron <peron.clem@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Normally CMake uses the build tree for the RPATH when building
executables etc on systems that use RPATH. This will make the buildpath
included in the binaries and not reproducible, so disable RPATHs.
Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Add a fallback mirror for the openocd repository fetch
process, so that if the primary source repo.or.cz is unavailable,
the build system will attempt to download the source code from the gitHub
mirror.
Signed-off-by: Joao Lima <joao.lima@hbkworld.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Platform support patches:
- Add SWD native configuration files for AM64x and J784s4 boards
- Configure DMEM access parameters in ti_k3.cfg for direct memory operations
- Set up DAPBUS debugger and emulated AP descriptions
Signed-off-by: Joao Lima <joao.lima@hbkworld.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Upgrade to release 8.1.4:
Security fixes:
- (CVE-2025-49844) A Lua script may lead to remote code execution
- (CVE-2025-46817) A Lua script may lead to integer overflow and
potential RCE
- (CVE-2025-46818) A Lua script can be executed in the context of
another user
- (CVE-2025-46819) LUA out-of-bound read
Bug fixes:
- Fix accounting for dual channel RDB bytes in replication stats
- Fix EVAL to report unknown error when empty error table is
provided
- Fix use-after-free when active expiration triggers hashtable
to shrink
- Fix MEMORY USAGE to account for embedded keys
- Fix memory leak when shrinking a hashtable without entries
- Prevent potential assertion in active defrag handling large
allocations
- Prevent bad memory access when NOTOUCH client gets unblocked
- Converge divergent shard-id persisted in nodes.conf to primary's
shard id
- Fix client tracking memory overhead calculation
- Fix RDB load per slot memory pre-allocation when loading from RDB
snapshot
- Don't use AVX2 instructions if the CPU doesn't support it
- Fix bug where active defrag may be unable to defrag sparsely
filled pages
Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Sometimes ftp.gnu.org might be slow.
Add UPSTREAM_CHECK_URI while here
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Cc: Gyorgy Sarvari <skandigraun@gmail.com>
This upgrade contains a fix for CVE-2024-47175.
Changelog:
2.1.1:
-pdftops: Use Poppler for a few old Epson laser printers This
works around documents being printed off-centre, shifted towards
the top right. Affected are printers using epsoneplijs:
EPL-5700L, EPL-5800L, EPL-5900L, EPL-6100L, EPL-6200L.
-Fixed bugs discovered by static analyzer OpenScanHub Possible
buffer overflows, uninitialized memory, format string issues
and resource leaks, ...
-Fix crash bugs in ppdLoadAttributes() When parsing the
"*cupsFilter(2): ..." lines in the PPD file use memmove() instead
of strcpy() as the latter does not support handling overlapping
memory portions and do not move running pointer beyond the end
of the input string.
2.1.0:
-Prevent PPD generation based on invalid IPP response Overtaken
from CUPS 2.x: Validate IPP attributes in PPD generator, refactor
make-and-model code, PPDize preset and template names, quote PPD
localized strings. Fixes CVE-2024-47175.
2.1b:
-Added support for libcups3 (libcups of CUPS 3.x) With these changes
libcupsfilters can be built either with libcups2 (libcups of CUPS 2.x)
or libcups3 (libcups of CUPS 3.x).
-Prefer PDF again in PPDs for driverless printers PDF works better with
finishing, especially combinations of multiple copies, collation, and
stapling/binding.
-Use 0.5mm as tolerance when comparing page sizes For the PWG two page
sizes are considered the same when the dimensions differ no more than
0.5 mm, libppd used too tight tolerances.
-PPD generator: Check for required attributes when choosing input format
Check for PCLm and PWG the minimum of attributes which we require
during PPD generation.
-ppdLoadAttributes(): Improve check whether parameters are integer
-ppdLoadAttributes(): Fix crash when page size could not get determined
-Fix crash if there is no page size for "Custom"
-Fix crash when incoming *ptr is NULL
-libcups2 compatibility: Use proper CUPS array callback function types
Fixed CUPS array function call in libcups2 compatibility layer
-Build system: Fix failure to correctly link to zlib Look up zlib
properly with pkg-config
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
This upgrade contains fixes for the following vulnerabilities:
CVE-2025-43961, CVE-2025-43962, CVE-2025-43963 and CVE-2025-43964
Also drop two old CVE_STATUS entries which are not needed anymore,
because the database has been updated with correct info.
Changelog:
https://github.com/LibRaw/LibRaw/blob/master/Changelog.txt
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
All 3 CVEs are fixed in the currently used revision.
Fixes:
CVE-2024-25176: 343ce0edaf
CVE-2024-25177: 85b4fed0b0
CVE-2024-25178: defe61a567
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
CVE-2022-3734 only affects Windows.
CVE-2022-0543 affects only packages that were packaged for Debian and
Debian-derivative distros.
Neither of these issues is present in upstream Redis.
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
The fix has been backported by upstream, and it is included in the used
version: d0eeee6e31
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
The fix has been backported to both redis versions by upstream, and
both versions contain it already.
For 6.2.20 [1] contains the backported fix.
For 7.2.11 [2] contains the backported fix.
[1]: 5e93f9cb9d
[2]: 42fb340ce4
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changelog:
(CVE-2025-49844) A Lua script may lead to remote code execution
(CVE-2025-46817) A Lua script may lead to integer overflow and potential RCE
(CVE-2025-46818) A Lua script can be executed in the context of another user
(CVE-2025-46819) LUA out-of-bound read
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changelog:
6.2.19:
(CVE-2025-32023) Fix out-of-bounds write in HyperLogLog commands
(CVE-2025-48367) Retry accepting other connections even if the accepted connection reports an error
6.2.20:
(CVE-2025-49844) A Lua script may lead to remote code execution
(CVE-2025-46817) A Lua script may lead to integer overflow and potential RCE
(CVE-2025-46818) A Lua script can be executed in the context of another user
(CVE-2025-46819) LUA out-of-bound read
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
This upgrade includes fixes for the following vulnerabilities:
CVE-2025-31176
CVE-2025-31178
CVE-2025-31179
CVE-2025-31180
CVE-2025-31181
This release supports qt4, qt5 and qt6 (the last one is new in this release).
There are 2 qt PACKAGECONFIGs now: qt5 and qt6 - they are mutually exclusive.
Since it is being touched, also fix lua PACKAGECONFIG, which requires lua-native
at build time.
Changelog:
http://gnuplot.info/ReleaseNotes_6_0_3.html
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
The upgrade contains fixes for the following vulenrabilities:
CVE-2025-8835, CVE-2025-8836, CVE-2025-8837
Changelog:
4.2.8:
Fixed a bug in the JPC decoder that could cause bad memory accesses
if the debug level is set sufficiently high.
4.2.7:
Added some missing range checking on several coding parameters in the
JPC encoder.
4.2.6:
Added a check for a missing color component in the jas_image_chclrspc
function.
Fixed a minor build problem related to the use of -Wstrict-prototypes
with Clang.
4.2.5:
Made a change to a configuration header file in order to avoid
undesirable compiler warnings when JasPer is used in C++ code
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
These CVEs are for iperf3 - which is a similar application in its goals (and name),
but an independent project from this, and the projects are independent implementations
also, they share no common code.
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
This release contains fixes for the following vulnerabilities:
CVE-2025-53014, CVE-2025-53015, CVE-2025-53019, CVE-2025-53101,
CVE-2025-55004, CVE-2025-55005, CVE-2025-55154, CVE-2025-55160,
CVE-2025-55212, CVE-2025-55298, CVE-2025-57803, CVE-2025-57807
Also remove jp2 PACKAGECONFIG: it was superseded by openjpeg
PACKAGECONFIG, which also provides jpeg 2000 support.
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Add recipe to build a small OpenCL benchmark program to measure peak
GPU/CPU performance.
Signed-off-by: Dmitry Baryshkov <dmitry.baryshkov@oss.qualcomm.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
This upgrade includes fixes for CVE-2025-26623, CVE-2025-54080
and CVE-2025-55304.
Changelog:
https://github.com/Exiv2/exiv2/blob/v0.28.7/doc/ChangeLog
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Added a new patch to avoid unexporting some environment variables that are set
by the recipe explicitly, to avoid the following build error:
| Loading env...
| 'bootstrap-emacs' -batch --no-site-file --no-site-lisp -batch -l ja-dic-cnv \
| -f batch-skkdic-convert -dir "../../sources/emacs-29.2/leim/../lisp/leim/ja-dic" --no-reduction "../../sources/emacs-29.2/leim/SKK-DIC/SKK-JISYO.L"
<...>
| Error: <RECIP_SYSROOT_NATIVE>/usr/share/emacs/29.2/etc/charsets: No such file or directory
Changelogs:
29.2 - 29.4: https://github.com/emacs-mirror/emacs/blob/master/etc/NEWS.29
30.1 - 30.2: https://github.com/emacs-mirror/emacs/blob/master/etc/NEWS.30
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
meson's rtti detection logic fails especially with
clang which disables rtti by default. The test is
triggerred in one of taisei's submodules especially
this commit [1], I think it should be something in
meson to fix in its rtti detection logic
Similarily LTO is only enabled when it is in distro
features, clang disables support for LTO in toolchain
when its not in distro features and linking fails since
it can not find linker plugin.
[1] 851bfc63fd
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Stable release with fixes
Fixed the macOS build crashing on startup.
Fixed audio distortion when the audio device uses a sample rate other than 48 kHz.
Fixed the internal mixer_chunksize setting being ignored. This resulted in a larger audio buffer than intended, increasing latency.
Fixed some minor SDL3 migration issues, particularly in handling of IO errors.
Fixed mimalloc being built incorrectly as a subproject.
Debugging symbols for the official builds are now available as a separate download.
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Prebuilts shipped with sources is a x86_64 binary which works ok
on x86_64 build hosts, but we do have arm64 hosts quite commonly
used to build OE these days, where this fails miserably. Therefore
use the gn from gn-native, so we can get it targtted correctly for
build host architecture.
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Cc: Ross Burton <ross.burton@arm.com>
In some cases (most notably when running mysqldump),
the server crashes in the my_convert() function, in
a code protected by
#if defined(__i386__) || defined(__x86_64__)
...
#endif
The crash does not happen with the generic code.
Remove the x86[-64] specific optimization.
This change was endorsed in
https://jira.mariadb.org/browse/MDEV-37786
Signed-off-by: Zoltán Böszörményi <zboszor@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changes in release 0.34.2 (neon-0.34.2.tar.gz), 15th April 2025
Fix regression in NTLM auth in 0.34.0 (issue #190).
Add docs for ne_ssl_proto_name, ne_ssl_protovers, ne_get_request_target.
Changes in release 0.34.1 (neon-0.34.1.tar.gz), 14th April 2025
Fix regression in 207 parsing of elements which omit a reason-phrase (issue #188).
Fix ne_move() to submit lock tokens for the parent collection of a source resource locked with depth: 0.
Changes in release 0.34.0 (neon-0.34.0.tar.gz), 23rd November 2024
Interface changes:
API and ABI backwards-compatible with 0.27.x and later
NE_SESSFLAG_SSLv2 is now ignored
New interfaces and features:
ne_request.h: add ne_get_response_location(), add ne_get_request_target()
ne_redirect.h: adds relative URI resolution per RFC 9110
ne_socket.h: add ne_iaddr_set_scope(), ne_iaddr_get_scope(), ne_sock_getproto()
ne_session.h: add NE_SESSFLAG_STRICT session flag
ne_session.h: ne_session_create() now accepts scoped IPv6 link-local literal addresses following the RFC 6874 syntax;
ne_session.h: add ne_ssl_set_protovers() to configure TLS protocol version ranges
ne_utils.h: add NE_FEATURE_GSSAPI, NE_FEATURE_LIBPXY feature flags
ne_ssl.h: add ne_ssl_proto_name()
HTTP strictness/compliance updated for RFC 9110/9112; notably stricter in parsing header field line, chunked transfer-coding, status-line.
Bug fixes:
auth: the ‘realm’ string passed to credentials callback is now cleaned of non-printable characters.
Documentation & header updates for RFC 9110/9112.
New NE_MINIMUM_VERSION() autoconf macro for better version handling.
Signed-off-by: Jason Schonberg <schonm@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
The patch here is backported from webkitgtk 2.50 and allows
32 bit arm to successfully build (qemuarm)
Signed-off-by: Jason Schonberg <schonm@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Pull in spirv-tools-native package in order to build SPIR-V files for
the spirv-new test.
Signed-off-by: Dmitry Baryshkov <dmitry.baryshkov@oss.qualcomm.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Update Vulkan CTS to 1.4.3.3, fixing several issues in the tests.
Signed-off-by: Dmitry Baryshkov <dmitry.baryshkov@oss.qualcomm.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
WebKitGTK 2.48.7 release:
Fix a number of GStreamer memory leaks.
Fix several crashes and rendering issues.
WebKitGTK 2.48.6 release:
Fix emojis incorrectly rendered in their text variant.
Add support for font collection / fragment identifiers.
Fix web process deadlock on exit.
Fix stuttering when playing WebP animations.
Fix CSS animations with cubic-bezier timing function.
Do not start the MemoryPressureMonitor if it’s disabled.
Fix several crashes and rendering issues.
WebKitGTK 2.48.5 release:
Fix several crashes.
WebKitGTK 2.48.4 release:
Improve emoji font selection with USE_SKIA=ON.
Improve playback of multimedia streams from blob URLs.
Fix the build with USE_SKIA_OPENTYPE_SVG=ON and USE_SYSPROF_CAPTURE=ON.
Fix the build on LoongArch with USE_SKIA=ON.
Fix crash when using a WebKitWebView widget in an offscreen window.
Fix several crashes and rendering issues.
Signed-off-by: Jason Schonberg <schonm@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
