1
0
mirror of https://git.yoctoproject.org/meta-arm synced 2026-05-30 00:21:17 +00:00

arm-toolchain: set CVE_VERSION to fix cve-check warnings

Yocto cve-check currently produces numerous warnings like:
    WARNING: gcc-cross-arm-arm-8.3-r2019.03 do_cve_check: gcc:
    Failed to compare arm-8.3 < 10.0 for CVE-2019-15847
In turn this means that some potential CVEs are not reported.

This occurs because PV has been prefixed with "arm-", to allow for
multiple gcc implementations.

Fix this by setting CVE_VERSION to the non-prefixed version.

Signed-off-by: Ralph Siemsen <ralph.siemsen@linaro.org>
Reviewed-by: Sumit Garg <sumit.garg@linaro.org>
Signed-off-by: Jon Mason <jon.mason@arm.com>
This commit is contained in:
Ralph Siemsen
2020-05-28 10:07:37 -04:00
committed by Jon Mason
parent fa9abd9a6e
commit f8ea9ac3a0
3 changed files with 3 additions and 0 deletions
@@ -2,6 +2,7 @@ require recipes-devtools/gcc/gcc-common.inc
BASEPV = "8.2"
PV = "arm-${BASEPV}"
CVE_VERSION = "${BASEPV}"
MMYY = "19.01"
RELEASE = "20${MMYY}"
@@ -2,6 +2,7 @@ require recipes-devtools/gcc/gcc-common.inc
BASEPV = "8.3"
PV = "arm-${BASEPV}"
CVE_VERSION = "${BASEPV}"
MMYY = "19.03"
RELEASE = "20${MMYY}"
@@ -3,6 +3,7 @@ require recipes-devtools/gcc/gcc-common.inc
# Third digit in PV should be incremented after a minor release
PV = "arm-9.2"
CVE_VERSION = "9.2"
# BINV should be incremented to a revision after a minor gcc release