- Mar 01, 2016
-
-
Luca Ceresoli authored
Cc: Peter Korsgaard <peter@korsgaard.com> Signed-off-by:Peter Korsgaard <peter@korsgaard.com>
-
niranjan.reddy authored
Fix-CVE-2012-6687 - remote attackers cause a denial of service (crash) via a large number of connections (http://www.cvedetails.com/cve/CVE-2012-6687/). use poll in os_unix.c instead of select to avoid problem with > 1024 connections. The patch libfcgi_2.4.0-8.3.debian.tar.xz is taken from the below link: (https://launchpad.net/ubuntu/+source/libfcgi/2.4.0-8.3 ) The next release of libfcgi is 2.4.1 which may have this fix is yet to be released officially. Signed-off-by:
Niranjan Reddy <niranjan.reddy@rockwellcollins.com> Signed-off-by:
-
Thomas Petazzoni authored
The linux-headers -> linux dependency causes a circular dependency, breaking the source/legal-info/graph-depends/.. targets: make graph-depends Getting targets Getting dependencies for ['toolchain-buildroot', 'toolchain', 'busybox', 'glibc', 'initscripts', 'linux-headers', 'skeleton', 'linux', 'host-fakeroot', 'host-makedevs', 'rootfs-cpio', 'rootfs-initramfs'] Getting dependencies for ['host-kmod', 'host-gcc-final', 'host-gcc-initial', 'host-gawk'] Getting dependencies for ['host-gmp', 'host-binutils', 'host-pkgconf', 'host-mpfr', 'host-mpc'] Getting dependencies for ['host-m4'] Recursion detected for : toolchain which is a dependency of: linux which is a dependency of: linux-headers which is a dependency of: glibc which is a dependency of: host-gcc-final which is a dependency of: toolchain-buildroot which is a dependency of: toolchain Makefile:721: recipe for target 'graph-depends' failed make: *** [graph-depends] Error 1 Fix it by instead duplicating in linux-headers the 10-20 lines of linux.mk logic that infer the _SOURCE/_SITE/_VERSION from the BR2_LINUX_KERNEL_* variables. This does mean that we extract the kernel sources twice though. [Peter: use same git/hg tarball as linux kernel to not clone twice, minor fixes] Signed-off-by:
Thomas Petazzoni <thomas.petazzoni@free-electrons.com> Signed-off-by:
-
- Feb 29, 2016
-
-
Gustavo Zacarias authored
Fixes: SQUID-2016:2 - Multiple Denial of Service issues in HTTP Response processing. Signed-off-by:
Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by:
-
Peter Korsgaard authored
This was added just before -rc1, but was forgotten in CHANGES. Signed-off-by: -
Gustavo Zacarias authored
Fixes: http://autobuild.buildroot.net/results/a12/a1240ed6facb99518d71153c099dbd7d3d847af6/ Signed-off-by:
-
Gustavo Zacarias authored
Fixes: CVE-2016-0729 - Apache Xerces-C XML Parser Crashes on Malformed Input Signed-off-by:
-
- Feb 28, 2016
-
-
John Keeping authored
This patch has been accepted upstream and requires no changes to apply to 5.37. Fixes: http://autobuild.buildroot.org/results/2bf4e5ea9b67b80ba38bfeaf71b747a92be09011/ Signed-off-by:
John Keeping <john@metanate.com> [Thomas: - add reference to upstream commit - add John's SoB to the patch itself - add reference to autobuilder failure.] Signed-off-by:
-
Eric Limpens authored
This patch fixes an autobuild error during a static build: http://autobuild.buildroot.net/results/f61ae46ba4d4fc3af3784d1f612a8c1cc7de3314/ Signed-off-by:
Eric Limpens <limpens@gmail.com> [Arnout: clean up commit message and patch log] Signed-off-by:
Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be> Signed-off-by:
-
Bernd Kuhls authored
Fixes http://autobuild.buildroot.net/results/eea/eea7be8691bad11546fbc9b8d3f1c0528ffd2619/ Signed-off-by:
Bernd Kuhls <bernd.kuhls@t-online.de> Signed-off-by:
-
Bernd Kuhls authored
Fixes http://autobuild.buildroot.net/results/651/651c47c611f0eaa317acb338d609d8851ea7b463/ http://autobuild.buildroot.net/results/63e/63edc869b780e387a8e94334bbe52ffa1c2a5f85/ Signed-off-by:
-
Bernd Kuhls authored
Fixes http://autobuild.buildroot.net/results/dac/dacc3bd00ab2346d7655c0a1fb99f6c50b9da08b/ http://autobuild.buildroot.net/results/a6d/a6d3b510681f54f5625908930b4da73bf9edccf7/ Signed-off-by:
-
Gustavo Zacarias authored
Signed-off-by:
-
- Feb 27, 2016
-
-
Peter Korsgaard authored
Signed-off-by: -
Romain Naour authored
mraa build system is looking for a python interpreter >= 2.7 on the host due to a typo in MRAA_CONF_OPTS. We must use -DBUILDTESTS=OFF instead of -DTESTS=OFF. Fixes: http://autobuild.buildroot.net/results/5f0/5f047c4c28b34f6b1bf2306a2b00bcc6a7481c01 Signed-off-by:
Romain Naour <romain.naour@gmail.com> Signed-off-by:
-
Arnout Vandecappelle authored
Previous attempts to fix it failed [1], so disable it instead. [1] http://patchwork.ozlabs.org/patch/509731/ Signed-off-by:
-
Romain Naour authored
pax-utils require a toolchain with kernel headers >= 3.5 to provide PR_SET_NO_NEW_PRIVS. Fixes: http://autobuild.buildroot.net/results/a9e/a9e0287e67c03e5e385bf54578aa6c5c85206ec2 Signed-off-by:
-
Yann E. MORIN authored
The way we use it, gzip will store the current time in the header, which leads to unreproducible archives. Fix that by telling gzip to not store the name and date of the file it compresses, with the -n option. Since it compresses its stdin, there was already no filename stored; now there's even no date stored. Note: gzip has had -n since at least 1.2.4, released in 1993, so virtually every gzip out there nowadays has it. Signed-off-by:
"Yann E. MORIN" <yann.morin.1998@free.fr> Signed-off-by:
-
Vicente Olivert Riera authored
We need to pass an argument to ld for setting the endianness when building it for MIPS architecture, otherwise the default one will always be used (which is big endian) and the compilation for little endian will always fail showing an error like this one: LD foo.o mips-linux-gnu-ld: foo.o: compiled for a little endian system and target is big endian Signed-off-by:
Vicente Olivert Riera <Vincent.Riera@imgtec.com> Reviewed-by:
-
Gustavo Zacarias authored
Fixes: CVE-2016-2521 - DLL hijacking vulnerability. CVE-2016-2522 - ASN.1 BER dissector crash. CVE-2016-2523 - DNP dissector infinite loop. CVE-2016-2524 - X.509AF dissector crash. CVE-2016-2525 - HTTP/2 dissector crash. CVE-2016-2526 - HiQnet dissector crash. CVE-2016-2527 - 3GPP TS 32.423 Trace file parser crash. CVE-2016-2528 - LBMC dissector crash. CVE-2016-2529 - iSeries file parser crash. CVE-2016-2530 - RSL dissector crash. CVE-2016-2531 - RSL dissector crash. CVE-2016-2532 - LLRP dissector crash. wnpa-sec-2016-12 - Ixia IxVeriWave file parser crash. wnpa-sec-2016-13 - IEEE 802.11 dissector crash. wnpa-sec-2016-14 - GSM A-bis OML dissector crash. wnpa-sec-2016-15 - ASN.1 BER dissector crash. wnpa-sec-2016-16 - SPICE dissector large loop. wnpa-sec-2016-17 - NFS dissector crash. wnpa-sec-2016-18 - ASN.1 BER dissector crash. Signed-off-by:
-
Ignacy Gawędzki authored
Signed-off-by:
Ignacy Gawędzki <ignacy.gawedzki@green-communications.fr> Acked-by:
-
Romain Naour authored
A variadic template template parameters [1] is used in QhullSet.h, this require a toolchain with (at least) gcc 4.4 [2][3]. Fixes (bfin toolchain with gcc 4.3): http://autobuild.buildroot.net/results/32f/32f324c7920ac46d393954de13b8a98a77a0c392 [1] http://www.open-std.org/jtc1/sc22/wg21/docs/papers/2008/n2555.pdf [2] https://gcc.gnu.org/gcc-4.3/cxx0x_status.html [3] https://gcc.gnu.org/gcc-4.4/cxx0x_status.html Signed-off-by:
-
Romain Naour authored
The comment must be displayed with toolchain without C++ compiler support when BR2_STATIC_LIBS is not set. Signed-off-by:
-
Angelo Compagnucci authored
This patch fixes a leak in host compiler path for monodoc. This bug is solved upstream but the fix is not included in the latest stable release. Signed-off-by:
Angelo Compagnucci <angelo.compagnucci@gmail.com> Acked-by:
-
Peter Seiderer authored
With this implementation, the different licenses will be separated with <space><comma>. This is not nice, but to avoid it a pretty ugly construct is needed: QT_LICENSE = $(shell echo $(QT_LICENSE_BITS) | sed 's% , %, %g') Since the <space><comma> is just a minor nuisance, we're not going to that kind of complexity. Signed-off-by:
Peter Seiderer <ps.report@gmx.net> Acked-by:
-
- Feb 26, 2016
-
-
Luca Ceresoli authored
Several people have been asking what is the license of the patches provided by Buildroot. COPYING is the authoritative place to state it. Signed-off-by:
Luca Ceresoli <luca@lucaceresoli.net> Cc: "Yann E. MORIN" <yann.morin.1998@free.fr> Cc: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be> Cc: Peter Korsgaard <peter@korsgaard.com> Cc: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> Cc: Steve Calfee <stevecalfee@gmail.com> Acked-by:
-
Gustavo Zacarias authored
Signed-off-by:
-
Gustavo Zacarias authored
Signed-off-by:
-
- Feb 25, 2016
-
-
Romain Naour authored
As reported by Thomas Petazzoni [1], the libsmartcols library can't be used on no-MMU platform since fork() is used. [1] http://lists.busybox.net/pipermail/buildroot/2016-February/153414.html Signed-off-by:
-
Bernd Kuhls authored
When libcap was compiled before, avahi daemon will use it as optional dependency: $ output/host/usr/bin/x86_64-linux-readelf -a output/target/usr/sbin/avahi-daemon | grep NEEDED | sort 0x0000000000000001 (NEEDED) Shared library: [libavahi-common.so.3] 0x0000000000000001 (NEEDED) Shared library: [libavahi-core.so.7] 0x0000000000000001 (NEEDED) Shared library: [libcap.so.2] [...] The build system offers no option to en-/disable libcap support: http://git.0pointer.net/avahi.git/tree/configure.ac#n382 Signed-off-by:
-
Maxime Hadjinlian authored
This patch fixes http://autobuild.buildroot.net/results/948/948f81d7ed2c080a675ee9fec754f6fda1fd905f/ The patches has been sent upstream: http://article.gmane.org/gmane.linux.nfs/76139 Signed-off-by:
Maxime Hadjinlian <maxime.hadjinlian@gmail.com> [Thomas: slightly tweak commit title.] Signed-off-by:
-
Gustavo Zacarias authored
Some egl/gles binary-only implementations need some extra help in the form of additional include directories, like rpi-userland. Fixes: http://autobuild.buildroot.net/results/083/083ce94b1ac61a60aa16906336612af59e32b18b/ Signed-off-by:
-
Rahul Bedarkar authored
wpa_supplicant is licensed under BSD-3c only and not dual licensed. Quoting from COPYING file This software was previously distributed under BSD/GPL v2 dual license terms that allowed either of those license alternatives to be selected. As of February 11, 2012, the project has chosen to use only the BSD license option for future distribution. As such, the GPL v2 license option is no longer used. Reviewed-by:
Abhimanyu Vishwakarma <Abhimanyu.Vishwakarma@imgtec.com> Signed-off-by:
Rahul Bedarkar <rahul.bedarkar@imgtec.com> Signed-off-by:
-
Rahul Bedarkar authored
hostapd is licensed under BSD-3c only and not dual licensed. Quoting from COPYING file This software was previously distributed under BSD/GPL v2 dual license terms that allowed either of those license alternatives to be selected. As of February 11, 2012, the project has chosen to use only the BSD license option for future distribution. As such, the GPL v2 license option is no longer used. Reviewed-by:
-
Rahul Bedarkar authored
dnsmasq is dual licensed so separate licenses with 'or' keyword. Reviewed-by:
Marcin Nowakowski <marcin.nowakowski@imgtec.com> Signed-off-by:
-
Angelo Compagnucci authored
This patch solves an host path leaking in /etc/mono/config that leads to searching libmonoposixhelper into the wrong path. This bug is fixed upstream, but not included in the current stable release. Fixes bug #8651. Signed-off-by:
-
Gustavo Zacarias authored
It uses __sync_fetch_and_add_4() and other 32-bit atomics, fixes: http://autobuild.buildroot.net/results/7ec/7ec4142d0f41234309a226a21a7da7acbece90e9/ Signed-off-by:
-
Gustavo Zacarias authored
It uses __sync_fetch_and_add_4() and other 32-bit atomics, fixes: http://autobuild.buildroot.net/results/610/610ef13ee1d62597f51b061cd1216e7a4e96abff/ Signed-off-by:
-
Luca Ceresoli authored
Adding a patch is a modification to Buildroot. Thus this sentence might be interpreted as "Patches are released under the Buildroot license". Being a legal matter, the last thing we want is to be ambiguous. Reword the sentence to avoid any misunderstandings. Signed-off-by:
-
- Feb 24, 2016
-
-
Gustavo Zacarias authored
It's BR2_aarch64, not aarch64 alone. Signed-off-by:
-
