mirror of
https://git.yoctoproject.org/meta-arm
synced 2026-05-30 12:30:14 +00:00
arm-toolchain: set CVE_VERSION to fix cve-check warnings
Yocto cve-check currently produces numerous warnings like:
WARNING: gcc-cross-arm-arm-8.3-r2019.03 do_cve_check: gcc:
Failed to compare arm-8.3 < 10.0 for CVE-2019-15847
In turn this means that some potential CVEs are not reported.
This occurs because PV has been prefixed with "arm-", to allow for
multiple gcc implementations.
Fix this by setting CVE_VERSION to the non-prefixed version.
Signed-off-by: Ralph Siemsen <ralph.siemsen@linaro.org>
Reviewed-by: Sumit Garg <sumit.garg@linaro.org>
Signed-off-by: Jon Mason <jon.mason@arm.com>
This commit is contained in:
@@ -2,6 +2,7 @@ require recipes-devtools/gcc/gcc-common.inc
|
|||||||
|
|
||||||
BASEPV = "8.2"
|
BASEPV = "8.2"
|
||||||
PV = "arm-${BASEPV}"
|
PV = "arm-${BASEPV}"
|
||||||
|
CVE_VERSION = "${BASEPV}"
|
||||||
|
|
||||||
MMYY = "19.01"
|
MMYY = "19.01"
|
||||||
RELEASE = "20${MMYY}"
|
RELEASE = "20${MMYY}"
|
||||||
|
|||||||
@@ -2,6 +2,7 @@ require recipes-devtools/gcc/gcc-common.inc
|
|||||||
|
|
||||||
BASEPV = "8.3"
|
BASEPV = "8.3"
|
||||||
PV = "arm-${BASEPV}"
|
PV = "arm-${BASEPV}"
|
||||||
|
CVE_VERSION = "${BASEPV}"
|
||||||
|
|
||||||
MMYY = "19.03"
|
MMYY = "19.03"
|
||||||
RELEASE = "20${MMYY}"
|
RELEASE = "20${MMYY}"
|
||||||
|
|||||||
@@ -3,6 +3,7 @@ require recipes-devtools/gcc/gcc-common.inc
|
|||||||
# Third digit in PV should be incremented after a minor release
|
# Third digit in PV should be incremented after a minor release
|
||||||
|
|
||||||
PV = "arm-9.2"
|
PV = "arm-9.2"
|
||||||
|
CVE_VERSION = "9.2"
|
||||||
|
|
||||||
# BINV should be incremented to a revision after a minor gcc release
|
# BINV should be incremented to a revision after a minor gcc release
|
||||||
|
|
||||||
|
|||||||
Reference in New Issue
Block a user