GNU indent 2.2.13 has a heap-based buffer overflow in search_brace
in indent.c via a crafted file.
Reference:
https://savannah.gnu.org/bugs/index.php?64503
Signed-off-by: Yogita Urade <yogita.urade@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
(cherry picked from commit 7da6cb848bc42b3e6bd5d2b37b52ba75510a6ca0)
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
The project switched to storing their releases on Github, and
the original links stopped working.
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Update to the latest version of the source code in GitHub:
- Use snprintf to replace strncpy without null string at last
Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit c8ef8ccd8d8ea061cf95c56e441bd696750b3598)
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
ChangeLog:
2024-12-19 (bug) [844c0b] Menu entry underline does not consider
activeborderwidth
2025-01-03 (bug) [13ac26] wm iconbitmap does not correctly set the
icon pixmap hint on macOS
2025-01-27 (bug) [080a28] Aqua: tk_getOpenFile crash
2025-01-28 (bug) [c99266] console menu zh_cn translations
2025-03-17 (bug) [159aa5] MS-Win: Incorrect system menu entries for
transient toplevels
2025-03-17 (bug) [91d0e9] MS-Win: Withdrawn Tk transient windows can
reappear in Windows taskbar preview
2025-04-26 (bug) [111f66] Aqua: cannot iconify all windows
2025-05-17 (bug) [7231bf99] Setting ttk state may change the variable
passed by value
2025-05-29 (feature) [17b509] Win: support PNG images in icon files.
2025-06-01 (bug) [5d0bc3] block cursor size on a tab is too large
2025-07-03 (bug) [6b0f77] gcc 14 breaks configure test for bigendian
leading to broken floating point
2025-07-14 (bug) [d25b72] error popup on ttk::scale with invisible
trough
2025-07-16 (bug) [770fa0] loading windows dll's in Cygwin doesn't
work with high-entropy-va
2025-07-25 (bug) [3d13f8,e90e8c] Aqua: dark mode improvements
2025-07-25 (bug) [e94c8b] interop with clipboard managers
2025-08-11 (bug) [dc38c9] Aqua: NSHighResolutionCapable should be a
Boolean value
2025-08-11 (bug) [4e1e10] Aqua: CGRect/NSRect type mismatch on 32-bit
Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 3564ff8f3066b87370be867e285fd17ec4a698a9)
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Use https://download.gnome.org instead.
In SRC_URI where the reference is https://download.gnome.org/sources
${GNOME_MIRROR} can be substituted.
Signed-off-by: Jason Schonberg <schonm@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit a9b7b0113da50cafed11a2c36b57629c5bfee33c)
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
SAE-PK needs base64_decode(), but if no other feature is enabled that
needs base64 support, then it is missing.
Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit c9922073e4fab54b5b743947b68bda75dc72b064)
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
When enabling multilib with lib32, the radiusd will use etc file for lib32 as default
#systemctl status radiusd
......
/usr/sbin/radiusd -d /etc/lib32-raddb
It should be lib64 as default.
Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com>
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Apparently the git repo in the SRC_URI stopped supporting git
protocol. Switch to https to be able to fetch the source successfully.
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
bpftrace need line up with kernel architecture type,
so add it to NON_MULTILIB_RECIPES.
bpftrace must be built with the same architecture (32-bit/64-bit) as the kernel
to ensure compatibility when tracing kernel functions and using eBPF features.
(cherry-picked from f8498f26991fbd8ea996dcf7c63d1c79e9c034a7 in master )
Signed-off-by: Sunil Dora <sunilkumar.dora@windriver.com>
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Add the native and nativesdk to the recipe.
Signed-off-by: Libo Chen <libo.chen.cn@windriver.com>
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
PE bump is needed because previous PV "030" > current PV "0.32"
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Changelog:
============
- Fix bolt exits when opening an empty version file
- Fix failure on integration test due to the change of the latest pygobject
- Several CI improvements and fixes.
- Fixed memory leak in boltctl
- The unused codes were removed from daemon
- Fixed a NULL syspath variable causes SIGSEGV
- A new NHI for REMBRANDT.
- CI fixes.
- Don't install an empty DB directory.
- Fixed: Determine the string length before writing file.
- Fixed: Free on error to prevent resource leak.
- Add a 'nopcie' security level since some devices report 'nopcie' when Thunderbolt
is disabled through BIOS setting.
- Markdown lint styling is used for documents.
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 98969e3b441183ae8bb0c30258cbe5377c18d979)
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
A flaw was found in polkit. When processing an XML policy with 32 or
more nested elements in depth, an out-of-bounds write can be triggered.
This issue can lead to a crash or other unexpected behavior, and
arbitrary code execution is not discarded. To exploit this flaw, a
high-privilege account is needed as it's required to place the
malicious policy file properly.
Reference:
https://nvd.nist.gov/vuln/detail/CVE-2025-7519
Upstream-patch:
107d380136
Signed-off-by: Praveen Kumar <praveen.kumar@windriver.com>
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Gutenprint install hooks run in parallel but depend on each other. This
is a race condition and might trigger a build failure (e.g on AB [0]):
| chmod 700 $WORKDIR/image/usr/libexec/cups/backend/backend_gutenprint
| chmod: cannot access '$WORKDIR/image/usr/libexec/cups/backend/backend_gutenprint': Not a directory
| make[5]: *** [Makefile:2166: install-exec-hook] Error 1
Fixes this by adding an explicit dependency between the dependent
targets.
[0]: https://autobuilder.yoctoproject.org/valkyrie/#/builders/87/builds/46/steps/33/logs/stdio
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
* According to latest comment [1] and the mentioned pull request [2],
build an ENABLE(WEBASSEMBLY) && !ENABLE(JIT) configuration is
supported, so original issue already fixed in current version, the
EXTRA_OECMAKE setting is not needed anymore.
* This EXTRA_OECMAKE setting causes following configure error on
beaglebone-yocto, remove the setting to let the configure process
decide the configuration:
CMake Error at Source/cmake/WebKitFeatures.cmake:312 (message):
ENABLE_JIT conflicts with ENABLE_C_LOOP.You must disable one or the
other.
[YOCTO #15254]
[1] https://github.com/WebKit/WebKit/pull/17447
[2] https://github.com/WebKit/WebKit/pull/17688
Signed-off-by: Jiaying Song <jiaying.song.cn@windriver.com>
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
It fails to compile webkitgtk when debug build enabled:
| /path_to//tmp/work/core2-64-poky-linux/webkitgtk3/2.48.1/webkitgtk-2.48.1/Source/bmalloc/libpas/src/libpas/bmalloc_heap_config.h:82:36:
error: inlining failed in call to 'always_inline' 'pas_page_base* bmalloc_heap_config_page_header(uintptr_t)':
function not considered for inlining
| 82 | PAS_BASIC_HEAP_CONFIG_DECLARATIONS(bmalloc, BMALLOC);
| |
Add a cmake variable WEBKIT_NO_INLINE_HINTS to disable gcc function attribute `always_inline` when debug build is enabled.
And adjust indent as well.
Signed-off-by: Jiaying Song <jiaying.song.cn@windriver.com>
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
OpenCV is an Open Source Computer Vision Library. Versions prior to
4.12.0 have an uninitialized pointer variable on stack that may lead
to arbitrary heap buffer write when reading crafted JPEG images.
Version 4.12.0 fixes the vulnerability.
Reference:
https://nvd.nist.gov/vuln/detail/CVE-2025-53644
Upstream-patch:
a39db41390
Signed-off-by: Praveen Kumar <praveen.kumar@windriver.com>
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Building the recipe on x86 platform fails with the following error:
| ../../git/src/utils.c: In function 'get_uint64':
| ../../git/src/utils.c:105:18: error: passing argument 1 of 'str_toul' from incompatible pointer type [-Wincompatible-pointer-types]
| 105 | str_toul(&defval, p, NULL, 16);
Upstream has already changed this function to avoid overflow due to the
size difference in the pointer - this change backports that patch.
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
A fix was sent in:
https://lists.openembedded.org/g/openembedded-devel/message/116537
but it causes issues with clang as well as older gcc as reported on
ML and also in upstream PR:
https://github.com/openlink/iODBC/pull/111
Use gnu17 until this is properly resolved to avoid:
http://errors.yoctoproject.org/Errors/Details/852861/
In file included from ../../libiodbc-3.52.16/iodbc/execute.c:94:
../../libiodbc-3.52.16/iodbc/execute.c: In function '_ReBindParam':
../../libiodbc-3.52.16/iodbc/execute.c:643:49: error: too many arguments to function 'hproc3'; expected 0, have 8
643 | CALL_DRIVER (pstmt->hdbc, pstmt, retcode, hproc3,
| ^~~~~~
http://errors.yoctoproject.org/Errors/Details/853276/
../../libiodbc-3.52.16/iodbcinst/unicode.c: In function 'dm_AtoUW':
../../libiodbc-3.52.16/iodbcinst/unicode.c:1565:16: error: initialization of 'ucs4_t *' {aka 'unsigned int *'} from incompatible pointer type 'wchar_t *' {aka 'long int *'} [-Wincompatible-pointer-types]
1565 | ucs4_t *us = dest;
| ^~~~
Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
The recipe can't be compiled for 32-bit targets currently, due to
GTimeVal usage - see bug report in the project[1].
Remove the 32-bit targets from the compatibility list until it is
fixed.
[1]: https://gitlab.gnome.org/GNOME/libchamplain/-/issues/61
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
When compiling for 32-bit targets, compilation fails with the following error:
| ../libgdata-0.18.1/demos/calendar/calendar-cli.c:47:22: error: passing argument 1 of 'gmtime' from incompatible pointer type [-Wincompatible-pointer-types]
| 47 | tm = gmtime (&tv->tv_sec);
Upstream meanwhile has refactored the failing part in an untagged commit:
they have removed the usage of GTimeVal, since it has been deprecated.
Since it also solves the compilation issue, backport that patch.
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
When compiling for 32-bit targets, two issues came to surface:
1. gcc was complaining that math.h is not included in snprintf, and some
calls were implicitly defined. Added a patch that includes the required
headers in snprintf.c file:
| snprintf.c: In function 'fmtfloat':
| snprintf.c:1232:13: error: implicit declaration of function 'isnan' [-Wimplicit-function-declaration]
| 1232 | if (isnan(value))
| | ^~~~~
| snprintf.c:50:1: note: include '<math.h>' or provide a declaration of 'isnan'
2. The code passes a time_t argument to a function that expects a long. This works for
64-bit targets, because on those usually time_t is long.
However on 32-bit systems time_t is usually long long, which makes compilation fail
with the following error:
| wd_json_data.c:540:66: error: passing argument 3 of 'json_get_long_value_for_key' from incompatible pointer type [-Wincompatible-pointer-types]
| 540 | if (json_get_long_value_for_key(root, "StartupTimeSecs", &wdNode->startup_time.tv_sec))
| | ^~~~~~~~~~~~~~~~~~~~~~~~~~~~
To account for this, add a new helper method in a patch that returns the required json value
as a time_t value.
The patches are in pending state, because the mailing list of the project is sufferring from
technical problems - when the site loads, sign up attempts throw internal server errors.
It is planned to submit the patches and to update the status once their infrastructure is back.
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
This version brings a fix for CVE-2024-45624
Changlog: https://www.pgpool.net/docs/latest/en/html/release-4-5-4.html
Signed-off-by: Jason Schonberg <schonm@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
On 32-bit targets the compilation fails with the following error:
| ../../metacity-3.52.0/src/core/screen.c:2431:55: error: passing argument 2 of 'sn_startup_sequence_get_last_active_time' from incompatible pointer type [-Wincompatible-pointer-types]
| 2431 | sn_startup_sequence_get_last_active_time (sequence, &tv_sec, &tv_usec);
| | ^~~~~~~
| | |
| | long int *
Backport patch from upstream to address this problem.
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
