| /openbmc/openbmc/poky/documentation/dev-manual/ |
| H A D | vulnerabilities.rst | 1 .. SPDX-License-Identifier: CC-BY-SA-2.0-UK
6 Vulnerabilities in Poky and OE-Core
15 <https://autobuilder.yocto.io/pub/non-release/patchmetrics/>`__
16 for packages in Poky and OE-Core, tracking the evolution of the number of
21 issues may be impacting Poky and OE-Core. It is up to the maintainers, users,
24 It is recommended to work with Poky and OE-Core upstream maintainers and submit
25 patches to fix them, see ":doc:`../contributor-guide/submit-changes`" for details.
27 Vulnerability check at build time
30 To enable a check for CVE security vulnerabilities using
31 :ref:`ref-classes-cve-check` in the specific image or target you are building,
[all …]
|
| /openbmc/openbmc/poky/meta/recipes-devtools/patch/patch/ |
| H A D | 0001-Don-t-leak-temporary-file-on-failed-multi-file-ed.patch | 4 Subject: Don't leak temporary file on failed multi-file ed-style patch
6 The previous fix worked fine with single-file ed-style patches, but
7 would still leak temporary files in the case of multi-file ed-style
8 patch. Fix that case as well, and extend the test case to check for
11 * src/patch.c (main): Unlink TMPEDNAME if needed before moving to
12 the next file in a patch.
17 Fixes: 123eaff0d5d1 ("Fix arbitrary command execution in ed-style patches (CVE-2018-1000156)")
18 Fixes: 19599883ffb6 ("Don't leak temporary file on failed ed-style patch")
20 CVE: CVE-2018-1000156
21 Upstream-Status: Backport [http://git.savannah.gnu.org/cgit/patch.git/commit/?id=369dcccdfa6336e5a8…
[all …]
|
| /openbmc/linux/drivers/gpu/drm/ci/ |
| H A D | check-patch.py | 2 # SPDX-License-Identifier: GPL-2.0-or-later
4 # check-patch.py: run checkpatch.pl across all commits in a branch
6 # Based on qemu/.gitlab-ci.d/check-patch.py
22 subprocess.call(["git", "remote", "remove", "check-patch"], stdout=subprocess.DEVNULL, stderr=subpr…
23 subprocess.check_call(["git", "remote", "add", "check-patch", repourl])
24 subprocess.check_call(["git", "fetch", "check-patch", os.environ["CI_MERGE_REQUEST_TARGET_BRANCH_NA…
28 ancestor = subprocess.check_output(["git", "merge-base",
29 … "check-patch/%s" % os.environ["CI_MERGE_REQUEST_TARGET_BRANCH_NAME"], "HEAD"],
34 log = subprocess.check_output(["git", "log", "--format=%H %s",
38 subprocess.check_call(["git", "remote", "rm", "check-patch"])
[all …]
|
| /openbmc/openbmc/poky/documentation/ref-manual/ |
| H A D | qa-checks.rst | 1 .. SPDX-License-Identifier: CC-BY-SA-2.0-UK
7 .. _qa-introduction:
30 - At the end of each message, the name of the associated QA test (as
31 listed in the ":ref:`ref-classes-insane`"
34 - As mentioned, this list of error and warning messages is for QA
38 - Because some QA checks are disabled by default, this list does not
39 include all possible QA check errors and warnings.
41 .. _qa-errors-and-warnings:
46 .. _qa-check-libexec:
48 - ``<packagename>: <path> is using libexec please relocate to <libexecdir> [libexec]``
[all …]
|
| /openbmc/openbmc/meta-openembedded/meta-oe/recipes-multimedia/audiofile/ |
| H A D | audiofile_0.3.6.bb | 2 API for accessing a variety of audio file formats, such as AIFF/AIFF-C, \
7 LICENSE = "LGPL-2.0-only & GPL-2.0-only"
13 file://0001-fix-negative-shift-constants.patch \
14 file://0002-fix-build-on-gcc6.patch \
15 file://0003-fix-CVE-2015-7747.patch \
16 file://0004-Always-check-the-number-of-coefficients.patch \
17 file://0005-clamp-index-values-to-fix-index-overflow-in-IMA.cpp.patch \
18 file://0006-Check-for-multiplication-overflow-in-sfconvert.patch \
19 file://0007-Actually-fail-when-error-occurs-in-parseFormat.patch \
20 file://0008-Check-for-multiplication-overflow-in-MSADPCM-decodeS.patch \
[all …]
|
| /openbmc/qemu/.gitlab-ci.d/ |
| H A D | check-patch.py | 3 # check-patch.py: run checkpatch.pl across all commits in a branch
7 # SPDX-License-Identifier: GPL-2.0-or-later
14 namespace = "qemu-project"
26 subprocess.check_call(["git", "remote", "add", "check-patch", repourl])
27 subprocess.check_call(["git", "fetch", "check-patch", "master"])
29 ancestor = subprocess.check_output(["git", "merge-base",
30 "check-patch/master", "HEAD"],
35 log = subprocess.check_output(["git", "log", "--format=%H %s",
39 subprocess.check_call(["git", "remote", "rm", "check-patch"])
49 ret = subprocess.run(["scripts/checkpatch.pl", "--terse", ancestor + "..."])
|
| H A D | static_checks.yml | 1 check-patch:
4 image: python:3.10-alpine
7 - .gitlab-ci.d/check-patch.py
12 - apk -U add git perl
15 check-dco:
18 image: python:3.10-alpine
20 script: .gitlab-ci.d/check-dco.py
24 - apk -U add git
26 check-python-minreqs:
31 - make -C python check-minreqs
[all …]
|
| /openbmc/openbmc/poky/meta/lib/patchtest/ |
| H A D | repo.py | 2 # -*- tab-width: 4; c-basic-offset: 4; indent-tabs-mode: nil -*-
8 # SPDX-License-Identifier: GPL-2.0-only
20 def __init__(self, patch, repodir, commit=None, branch=None): argument
23 self.patch = mbox.PatchSeries(patch)
26 # targeted branch defined on the patch may be invalid, so make sure there
29 if self.patch.branch in self.repo.branches:
30 valid_patch_branch = self.patch.branch
36 # 3. branch given at the patch
45 # create working branch. Use the '-B' flag so that we just
46 # check out the existing one if it's there
[all …]
|
| /openbmc/openbmc/meta-openembedded/meta-oe/recipes-connectivity/wvdial/ |
| H A D | wvstreams_4.6.1.bb | 4 LICENSE = "LGPL-2.0-only"
8 DEPENDS:append:libc-musl = " argp-standalone libexecinfo"
10 SRC_URI = "https://storage.googleapis.com/google-code-archive-downloads/v2/code.google.com/${BPN}/$…
13 file://06_gcc-4.7.diff \
15 file://gcc-6.patch \
16 file://argp.patch \
17 file://0001-Check-for-limits.h-during-configure.patch \
18 file://0003-wvtask-Check-for-HAVE_LIBC_STACK_END-only-on-glibc-s.patch \
19 file://0004-wvcrash-Replace-use-of-basename-API.patch \
20 file://0005-check-for-libexecinfo-during-configure.patch \
[all …]
|
| /openbmc/openbmc/meta-openembedded/meta-oe/recipes-dbs/postgresql/ |
| H A D | postgresql_16.5.bb | 6 file://not-check-libperl.patch \
7 file://0001-Add-support-for-RISC-V.patch \
8 file://0002-Improve-reproducibility.patch \
9 file://0003-configure.ac-bypass-autoconf-2.69-version-check.patch \
10 file://0004-config_info.c-not-expose-build-info.patch \
11 file://0005-postgresql-fix-ptest-failure-of-sysviews.patch \
12 file://0001-tcl.m4-Recognize-tclsh9.patch \
17 CVE_STATUS[CVE-2017-8806] = "not-applicable-config: Ddoesn't apply to out configuration of postgres…
|
| /openbmc/openbmc/poky/meta/lib/oeqa/selftest/cases/ |
| H A D | devtool.py | 4 # SPDX-License-Identifier: MIT
29 corecopydir = os.path.join(templayerdir, 'core-copy')
33 result = runCmd('bitbake-layers show-layers')
52 runCmd('git rev-parse --is-inside-work-tree', cwd=canonical_layerpath)
56 result = runCmd('git rev-parse --show-toplevel', cwd=canonical_layerpath)
62 # cloning and doing this?" - well, the problem with that is
66 result = runCmd('git status --porcelain', cwd=oldreporoot)
113 """Check srctree git repository"""
116 result = runCmd('git status --porcelain', cwd=repo_dir)
119 result = runCmd('git symbolic-ref HEAD', cwd=repo_dir)
[all …]
|
| /openbmc/linux/scripts/ |
| H A D | patch-kernel | 2 # SPDX-License-Identifier: GPL-2.0
4 # usage: patch-kernel [ sourcedir [ patchdir [ stopversion ] [ -acxx ] ] ]
5 # The source directory defaults to /usr/src/linux, and the patch
8 # scripts/patch-kernel . ..
11 # scripts/patch-kernel . .. -ac
12 # Get the latest Linux kernel and patch it with the latest ac patch
13 # scripts/patch-kernel . .. 2.4.9
15 # scripts/patch-kernel . .. 2.4.9 -ac
17 # scripts/patch-kernel . .. 2.4.9 -ac11
18 # Gets 2.4.9 with ac patch ac11
[all …]
|
| H A D | coccicheck | 2 # SPDX-License-Identifier: GPL-2.0
5 # Read Documentation/dev-tools/coccinelle.rst
8 # version 1.0.0-rc11.
10 DIR="$(dirname $(readlink -f $0))/.."
13 if [ ! -x "$SPATCH" ]; then
18 SPATCH_VERSION=$($SPATCH --version | head -1 | awk '{print $3}')
21 $SPATCH --help | grep -e "--jobs" > /dev/null && USE_JOBS="yes"
26 if [ -n "$V" -a "$V" != "0" ]; then
32 FLAGS="--very-quiet"
42 …occicheck MODE=report DEBUG_FILE="all.err" SPFLAGS="--profile --show-trying" M=./drivers/mfd/arizo…
[all …]
|
| /openbmc/linux/kernel/livepatch/ |
| H A D | state.c | 1 // SPDX-License-Identifier: GPL-2.0-or-later
3 * system_state.c - State of the system modified by livepatches
15 #define klp_for_each_state(patch, state) \ argument
16 for (state = patch->states; state && state->id; state++)
19 * klp_get_state() - get information about system state modified by
20 * the given patch
21 * @patch: livepatch that modifies the given system state
24 * Checks whether the given patch modifies the given system state.
26 * The function can be called either from pre/post (un)patch
31 struct klp_state *klp_get_state(struct klp_patch *patch, unsigned long id) in klp_get_state() argument
[all …]
|
| /openbmc/openbmc/poky/meta/recipes-devtools/binutils/ |
| H A D | binutils-2.43.1.inc | 14 # that upstream version check can work correctly.
17 SRCBRANCH ?= "binutils-2_43-branch"
19 UPSTREAM_CHECK_GITTAGREGEX = "binutils-(?P<pver>\d+_(\d_?)*)"
21 CVE_STATUS[CVE-2023-25584] = "cpe-incorrect: Applies only for version 2.40 and earlier"
24 BINUTILS_GIT_URI ?= "git://sourceware.org/git/binutils-gdb.git;branch=${SRCBRANCH};protocol=https"
27 file://0004-Point-scripts-location-to-libdir.patch \
28 file://0005-don-t-let-the-distro-compiler-point-to-the-wrong-ins.patch \
29 file://0006-warn-for-uses-of-system-directories-when-cross-linki.patch \
30 file://0007-fix-the-incorrect-assembling-for-ppc-wait-mnemonic.patch \
31 file://0008-Use-libtool-2.4.patch \
[all …]
|
| /openbmc/openbmc/poky/meta/lib/patchtest/tests/ |
| H A D | test_mbox.py | 1 # Checks related to the patch's author
5 # SPDX-License-Identifier: GPL-2.0-only
17 "cd %s; git log --pretty='%%h#%%aN#%%cD:#%%s' -1" % PatchtestParser.repodir,
25 # base paths of main yocto project sub-projects
27 'oe-core': ['meta-selftest', 'meta-skeleton', 'meta', 'scripts'],
30 'poky': ['meta-poky','meta-yocto-bsp'],
31 …-gpe', 'meta-gnome', 'meta-efl', 'meta-networking', 'meta-multimedia','meta-initramfs', 'meta-ruby…
34 # scripts folder is a mix of oe-core and poky, most is oe-core code except:
35 …poky_scripts = ['scripts/yocto-bsp', 'scripts/yocto-kernel', 'scripts/yocto-layer', 'scripts/lib/b…
39 …bitbake = Project(name='Bitbake', listemail='bitbake-devel@lists.openembedded.org', gitrepo='http:…
[all …]
|
| /openbmc/linux/Documentation/dev-tools/ |
| H A D | coccinelle.rst | 14 tree-wide patches and detection of problematic programming patterns.
17 ------------------
20 which are provided by Coccinelle version 1.0.0-rc11 and above.
27 - Debian
28 - Fedora
29 - Ubuntu
30 - OpenSUSE
31 - Arch Linux
32 - NetBSD
33 - FreeBSD
[all …]
|
| /openbmc/linux/Documentation/process/ |
| H A D | submit-checklist.rst | 3 Linux Kernel patch submission checklist
7 kernel patch submissions accepted more quickly.
10 :ref:`Documentation/process/submitting-patches.rst <submittingpatches>`
28 Use ``make htmldocs`` or ``make pdfdocs`` to check the build and
31 3) Builds on multiple CPU architectures by using local cross-compile tools
34 4) ppc64 is a good architecture for cross-compilation checking because it
35 tends to use ``unsigned long`` for 64-bit quantities.
37 5) Check your patch for general style as detailed in
38 :ref:`Documentation/process/coding-style.rst <codingstyle>`.
39 Check for trivial violations with the patch style checker prior to
[all …]
|
| /openbmc/openbmc-test-automation/security/ |
| H A D | test_bmc_connections.robot | 39 Test Patch Without Auth Token Fails
40 [Documentation] Send patch method without auth token and verify it throws an error.
46 Redfish.Patch ${REDFISH_NW_ETH_IFACE}${ethernet_interface} body={'HostName': '${hostname}'}
50 Flood Patch Without Auth Token And Check Stability Of BMC
51 [Documentation] Flood patch method without auth token and check BMC stability.
60 Log To Console ${iter}th iteration Patch Request without valid session token
62 … Redfish.Patch ${REDFISH_NW_ETH_IFACE}${ethernet_interface} body={'HostName': '${hostname}'}
65 # Every 100th iteration, check BMC allows patch with auth token.
74 …... msg=Patch operation failed ${fail_count} times in ${verify_count} attempts; fails at iteratio…
77 Verify User Cannot Login After 5 Non-Logged In Sessions
[all …]
|
| /openbmc/openbmc/poky/documentation/migration-guides/ |
| H A D | release-notes-4.0.2.rst | 1 .. SPDX-License-Identifier: CC-BY-SA-2.0-UK
3 Release notes for Yocto-4.0.2 (Kirkstone)
4 -----------------------------------------
6 Security Fixes in Yocto-4.0.2
9 - libxslt: Mark :cve_nist:`2022-29824` as not applying
10 - tiff: Add jbig :term:`PACKAGECONFIG` and clarify IGNORE :cve_nist:`2022-1210`
11 - tiff: mark :cve_nist:`2022-1622` and :cve_nist:`2022-1623` as invalid
12 - pcre2:fix :cve_nist:`2022-1586` Out-of-bounds read
13 - curl: fix :cve_nist:`2022-22576`, :cve_nist:`2022-27775`, :cve_nist:`2022-27776`, :cve_nist:`202…
14 - qemu: fix :cve_nist:`2021-4206` and :cve_nist:`2021-4207`
[all …]
|
| /openbmc/linux/arch/powerpc/lib/ |
| H A D | feature-fixups.c | 1 // SPDX-License-Identifier: GPL-2.0-or-later
19 #include <asm/code-patching.h>
75 start = calc_addr(fcur, fcur->start_off); in patch_feature_section_mask()
76 end = calc_addr(fcur, fcur->end_off); in patch_feature_section_mask()
77 alt_start = calc_addr(fcur, fcur->alt_start_off); in patch_feature_section_mask()
78 alt_end = calc_addr(fcur, fcur->alt_end_off); in patch_feature_section_mask()
80 if ((alt_end - alt_start) > (end - start)) in patch_feature_section_mask()
83 if ((value & fcur->mask & mask) == (fcur->value & mask)) in patch_feature_section_mask()
112 printk("Unable to patch feature section at %p - %p" \ in do_feature_fixups_mask()
113 " with %p - %p\n", in do_feature_fixups_mask()
[all …]
|
| /openbmc/openbmc/meta-arm/meta-arm-bsp/recipes-bsp/u-boot/ |
| H A D | u-boot-corstone1000.inc | 1 # Corstone1000 specific U-boot support
3 DEPENDS:append = " openssl-native efitools-native"
4 CORSTONE1000_DEVICE_TREE:corstone1000-mps3 = "corstone1000-mps3"
5 CORSTONE1000_DEVICE_TREE:corstone1000-fvp = "corstone1000-fvp"
19 file://0001-FF-A-v15-arm64-smccc-add-support-for-SMCCCv1.2-x0-x1.patch \
20 file://0002-FF-A-v15-lib-uuid-introduce-uuid_str_to_le_bin-funct.patch \
21 file://0003-FF-A-v15-lib-uuid-introduce-testcase-for-uuid_str_to.patch \
22 file://0004-FF-A-v15-arm_ffa-introduce-Arm-FF-A-support.patch \
23 file://0005-FF-A-v15-arm_ffa-introduce-armffa-command.patch \
24 file://0006-FF-A-v15-arm_ffa-introduce-sandbox-FF-A-support.patch \
[all …]
|
| /openbmc/u-boot/tools/patman/ |
| H A D | patman | 2 # SPDX-License-Identifier: GPL-2.0+
31 parser.add_option('-H', '--full-help', action='store_true', dest='full_help',
33 parser.add_option('-c', '--count', dest='count', type='int',
34 default=-1, help='Automatically create patches from top n commits')
35 parser.add_option('-i', '--ignore-errors', action='store_true',
37 help='Send patches email even if patch errors are found')
38 parser.add_option('-m', '--no-maintainers', action='store_false',
41 parser.add_option('-l', '--limit-cc', dest='limit', type='int',
43 parser.add_option('-n', '--dry-run', action='store_true', dest='dry_run',
45 parser.add_option('-p', '--project', default=project.DetectProject(),
[all …]
|
| H A D | patman.py | 2 # SPDX-License-Identifier: GPL-2.0+
31 parser.add_option('-H', '--full-help', action='store_true', dest='full_help',
33 parser.add_option('-c', '--count', dest='count', type='int',
34 default=-1, help='Automatically create patches from top n commits')
35 parser.add_option('-i', '--ignore-errors', action='store_true',
37 help='Send patches email even if patch errors are found')
38 parser.add_option('-m', '--no-maintainers', action='store_false',
41 parser.add_option('-l', '--limit-cc', dest='limit', type='int',
43 parser.add_option('-n', '--dry-run', action='store_true', dest='dry_run',
45 parser.add_option('-p', '--project', default=project.DetectProject(),
[all …]
|
| /openbmc/linux/Documentation/driver-api/media/ |
| H A D | maintainer-entry-profile.rst | 5 --------
13 - drivers/media
14 - drivers/staging/media
15 - Documentation/admin-guide/media
16 - Documentation/driver-api/media
17 - Documentation/userspace-api/media
18 - Documentation/devicetree/bindings/media/\ [1]_
19 - include/media
33 maintainership model is to have sub-maintainers that have a broad
34 knowledge of a specific aspect of the subsystem. It is the sub-maintainers'
[all …]
|