mirror of
git://git.openembedded.org/meta-openembedded
synced 2026-09-05 08:36:45 +00:00
1216d76bec
Changelog for 22.13.0 : https://github.com/nodejs/node/blob/main/doc/changelogs/CHANGELOG_V22.md#22.13.0 Changelog for 22.13.1 : https://github.com/nodejs/node/blob/main/doc/changelogs/CHANGELOG_V22.md#22.13.1 The 22.13.1 release is a security fix addressing four CVEs. CVE-2025-23083 - src,loader,permission: throw on InternalWorker use when permission model is enabled (High) CVE-2025-23085 - src: fix HTTP2 mem leak on premature close and ERR_PROTO (Medium) CVE-2025-23084 - path: fix path traversal in normalize() on Windows (Medium) CVE-2025-22150 - Use of Insufficiently Random Values in undici fetch() (Medium) I introduce a new patch with this recipe 0001-Do-not-use-glob-in-deps.patch to revert https://github.com/nodejs/node/commit/77e2869ca6 I restored 0001-deps-disable-io_uring-support-in-libuv.patch as suggested here : https://lore.kernel.org/all/20241207140642.181134-1-martin.jansa@gmail.com/ Signed-off-by: Jason Schonberg <schonm@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
61 lines
2.0 KiB
Diff
61 lines
2.0 KiB
Diff
From 79af9bd6ac1040f1fe3c6cab26b2d040ad907870 Mon Sep 17 00:00:00 2001
|
|
From: Changqing Li <changqing.li@windriver.com>
|
|
Date: Fri, 1 Mar 2024 15:46:11 +0800
|
|
Subject: [PATCH] deps: disable io_uring support in libuv
|
|
|
|
Refer [1], Pseudo fails to intercept some of the syscalls when io_uring
|
|
enabled. Refer [2], always disable io_uring support in libuv to fix
|
|
issue in [1].
|
|
|
|
[1] https://git.openembedded.org/meta-openembedded/commit/?id=d08453978c31ee41d28206c6ff198d7d9d701d88
|
|
[2] https://github.com/nodejs/node/commit/686da19abb
|
|
|
|
Upstream-Status: Inappropriate [oe specific]
|
|
|
|
Signed-off-by: Changqing Li <changqing.li@windriver.com>
|
|
Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
|
|
---
|
|
deps/uv/src/unix/linux.c | 29 +----------------------------
|
|
1 file changed, 1 insertion(+), 28 deletions(-)
|
|
|
|
diff --git a/deps/uv/src/unix/linux.c b/deps/uv/src/unix/linux.c
|
|
index 803a9a9d3f0..a4735f56cf0 100644
|
|
--- a/deps/uv/src/unix/linux.c
|
|
+++ b/deps/uv/src/unix/linux.c
|
|
@@ -465,34 +465,7 @@ static int uv__use_io_uring(void) {
|
|
/* See https://github.com/libuv/libuv/issues/4283. */
|
|
return 0; /* Random SIGSEGV in signal handler. */
|
|
#else
|
|
- /* Ternary: unknown=0, yes=1, no=-1 */
|
|
- static _Atomic int use_io_uring;
|
|
- char* val;
|
|
- int use;
|
|
-
|
|
- use = atomic_load_explicit(&use_io_uring, memory_order_relaxed);
|
|
-
|
|
- if (use == 0) {
|
|
- use = uv__kernel_version() >=
|
|
-#if defined(__hppa__)
|
|
- /* io_uring first supported on parisc in 6.1, functional in .51 */
|
|
- /* https://lore.kernel.org/all/cb912694-b1fe-dbb0-4d8c-d608f3526905@gmx.de/ */
|
|
- /* 6.1.51 */ 0x060133
|
|
-#else
|
|
- /* Older kernels have a bug where the sqpoll thread uses 100% CPU. */
|
|
- /* 5.10.186 */ 0x050ABA
|
|
-#endif
|
|
- ? 1 : -1;
|
|
-
|
|
- /* But users can still enable it if they so desire. */
|
|
- val = getenv("UV_USE_IO_URING");
|
|
- if (val != NULL)
|
|
- use = atoi(val) ? 1 : -1;
|
|
-
|
|
- atomic_store_explicit(&use_io_uring, use, memory_order_relaxed);
|
|
- }
|
|
-
|
|
- return use > 0;
|
|
+ return 0; /* pseudo doesn't support io_uring https://bugzilla.yoctoproject.org/show_bug.cgi?id=15244 */
|
|
#endif
|
|
}
|
|
|