64-bit time was turned off for all of libcamera because v4l2-compat.
libcamera fixed this upstream in v0.3.0 by also
undefining _TIME_BITS for v4l2-compat (commit 705601 "v4l2:
Unset _TIME_BITS in addition to _FILE_OFFSET_BITS"), so the
workaround is no longer needed.
v4l2-compat.so still uses 32-bit APIs on purpose, so keep the
32bit-time QA skip for it.
Signed-off-by: Prasanth R <prasanth.r@lineo.co.jp>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
The GPU software ISP renders with GLES 2 through EGL and never uses
desktop GL, so depend on virtual/libgles2 instead of virtual/libgl.
Requiring virtual/libgl breaks machines whose GPU stack only provides
EGL and GLES, e.g. StarFive JH7110 with the PowerVR mesa-pvr.
Also carry a patch so libcamera doesn't redefine EGL_NO_X11 when an
older Mesa's egl.pc already passes -DEGL_NO_X11, which fails the build
with -Werror.
Signed-off-by: Joel Winarske <joel.winarske@linux.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
dvd_filesystem.h unconditionally uses the glibc LFS64 off64_t name.
musl's off_t is already 64-bit, so typedef it the same way the other
non-glibc branches already do. This also fixes libdvdnav, which
consumes this staged header.
AI-Generated: Uses Claude Code
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
sofprobeclient uses the bare 'uint' typedef, which is a glibc/BSD
extension musl doesn't provide. Use 'unsigned int' instead.
AI-Generated: Uses Claude Code
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Switch to the alternate URI from videolan. Upgrade to release 4.2:
- Threaded Motion Estimation (Experimental feature)-It uses a
dedicated threadpool to precompute Motion Estimation in parallel.
Improves encoding speed upto 1.5x for 1080p & lower resolution on
multi core machines with low frequency setting. On high frequency
systems or on machines with low number of cores, the overhead of
additional Motion estimation work may outweigh parallelism
- Add new Levels 6.3 to 7.2 specified in ITU-T H.265 (V9) (09/2023)
and above
- Improve Slices feature with check zeroMv
- Enable frame parallelism with MCSTF feature
- Updated support to signal AOM FGM params
- Improve quality with SBRC feature 6.Updated DolbyVision P5 VUI
defaults
- API Support to enable Threaded Motion Estimation(-threaded-me)
- RISC V optimizations including SAD, SATD, DCT, IDCT, block copy,
pixel utilities, SAO, loopfilter, transpose kernels resulting in
2x encoding speed.
- ARM SIMD optimizations including the use of NEON and SVE
instruction set extensions. The following algorithms now have
optimized SIMD implementations: DST, IDCT, SSE, SSD,
intra_pred_planar, pelFilterLumaStrong, interpolation, planecopy,
dequant_normal, blockcopy, pixel variance resulting in 8% faster
encoding speed compared to v4.1
- Fix memory leaks (no command line option, SEI buffer, analysis
save/load)
- Fix chroma qp offset for non yuv444 inputs
- Fix max supported input resolution
- Fix bugs with ARM SIMD optimizations
- Fix Alpha and Multiview feature flag support in x265_config
- Fix test harness issues, CMake errors
- Fix inconsistent output with aq-motion
- Fix crash with hist-scenecut on high bit-depth builds
- Fix lookahead concurrency bug
- Fix shared link issue (R_X86_64_PC32), yuv recon output issue,
rd-refine and dynamic-refine issue, inputs for Windows named
pipe, weighted prediction delta_chroma_offset, crf and vbv issue
in abr-ladder, psnr and ssim reported with MCSTF feature,
internally overflowed VBV variables
This work was sponsored by GOVCERT.LU.
Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Upgrade to release 1.23.5 with the following security issues:
- CVE-2026-XXXXX (GHSA-v8qw-hwjv-44hw) Memory exhaustion through a
mismatch between the container and the bitstream image size. A
crafted image can declare a small size in its ispe property while
the bitstream declares a much larger coded frame. The
container-level checks used the ispe size, so the oversized
bitstream reached the decoder, which allocated a frame buffer for
the in-band size before libheif rejected the mismatch. The
advisory demonstrated this for AV1 with the libaom backend (a
351-byte AVIF declaring 64x64 but coding up to 27648x27648,
allocating hundreds of MB to more than 10 GB), but the same class
affects every codec whose real frame size lives in the bitstream.
The coded size is now checked against max_image_size_pixels in
the codec-independent decode path, before any bytes reach a
decoder plugin: all AV1 sequence headers, all HEVC/AVC/VVC SPS
NAL units (including those carried in the item data, not only the
ones in the configuration record), the JPEG SOF marker and the
JPEG 2000 SIZ reference grid are scanned for the largest coded
size. (high)
- CVE-2026-XXXXX (GHSA-qwpf-5wf7-r996) Heap use-after-free and
double free when encoding an image that carries a TAI timestamp,
including transcoding a file with an itai property.
ImageDescription shallow-copied its raw heif_tai_timestamp_packet
pointer, and a temporary in ImageItem::encode_to_bitstream_and_boxes()
freed the packet while the item and the source image still held
it. The timestamp is now stored by value. (medium)
- CVE-2026-XXXXX (GHSA-9c75-9g8r-4728) Memory amplification through
a JPEG 2000 pclr box declaring zero palette columns. The
entry-count bound was skipped for zero columns, so an 11-byte box
allocated 65,535 empty palette entries, and nested j2kH containers
could repeat this within the child and nesting limits: a 3 KB file
reached about 330 MB RSS, none of it charged to max_total_memory.
Zero columns are rejected (ISO/IEC 15444-1 requires 1 to 255),
the byte bound is unconditional, and the palette storage is
charged to the memory limits. (medium)
- CVE-2026-XXXXX (GHSA-r7gr-2xm2-23wf) Heap out-of-bounds read in
alpha compositing for uncompressed (unci) images whose colour
planes have different bit depths. Op_flatten_alpha_plane read
every plane through the sample type of the first colour plane, so
an 8-bit blue plane next to 16-bit red and green planes was read
with a halved stride past its end, and the bytes ended up in the
composited output. ColorState now tracks one bit depth per plane,
and the operator declines mixed sample widths at planning time.
(medium)
- CVE-2026-XXXXX (GHSA-q492-cfcm-895h) The OpenJPEG decoder
plugin's pre-decode size check bounded the JPEG 2000 window span
(x1-x0)*(y1-y0) but not the absolute reference-grid coordinates,
so a codestream with a 17-pixel window on a grid near the 32-bit
boundary reached opj_decode(). Against OpenJPEG 2.3.1 this
produced a heap-buffer-overflow write inside OpenJPEG (the class
of CVE-2020-6851); OpenJPEG 2.5.4 rejects the input. The
reference-grid area is now bounded as well. (low)
- (GHSA-qfj5-c4pq-q998) Heap out-of-bounds read in the uncompressed
encoder when an application attached a separate alpha plane to an
image with an interleaved chroma format. The interleaved encoders
took their component list from the chroma format (three entries)
but decided whether to write alpha from the presence of an alpha
plane, and indexed the list at [3]. heif_image_add_plane() now
rejects a separate alpha plane on interleaved images, and the
encoders derive both decisions from the chroma format. Only
reachable through the public API; decoding never produces such an
image. (low)
- (GHSA-7pwf-qh74-p35w) The caller's heif_security_limits were not
applied when parsing a mini box (the MIAF minimized image format)
or the av1C/hvcC blob embedded in it; the built-in defaults were
used instead. An application that tightened the limits got no
enforcement of its max_memory_block_size or max_total_memory on
such files. The allocations are bounded by the bytes present in
the box, so this could not amplify memory use. (low)
This work was sponsored by GOVCERT.LU.
Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
test-dbus-connection and test-reserve-device spawn a private bus through
GLib's GTestDBus, which executes dbus-daemon. When VIRTUAL-RUNTIME_dbus
is dbus-broker, dbus-daemon is not installable (dbus-broker RCONFLICTS
dbus) and both tests abort with:
GLib-GIO-FATAL-ERROR: Error spawning dbus-daemon: Failed to spawn
child process "dbus-daemon" (No such file or directory)
Enable the dbus-tests meson option only when dbus provides the message
bus, and make the ptest package depend on dbus in that case instead of
relying on it being pulled in indirectly.
AI-Generated: Uses Claude Code
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Mycroft made its last release in 2021 and was formally abandoned in 2024:
Mycroft core is no longer maintaiend and probably likely not work on
your computer anymore. Open Voice OS and Neon-core are both spiritual
successors to Mycroft. (And some of the old code may live on there.)
The version we packaged was from 2019 and nobody cared enought to upgrade
it to any of the sixteen later releases, so I don't believe anyone is
using it.
Signed-off-by: Ross Burton <ross.burton@arm.com>
Reviewed-by: Alistair Francis <alistair.francis@wdc.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
0.5.16 is skipped because it contains a regression that broke object
destruction in the monitor scripts; upstream recommends to avoid it.
WirePlumber 0.5.17
~~~~~~~~~~~~~~~~~~
Fixes:
- Fixed factory-created device, node and link objects to stop sharing
ownership with their registry global, fixing a regression from the
``WpClientContext`` introduced in 0.5.16 that broke proper object
destruction in the monitor scripts (#999; !890, !891)
- Improved ``default-nodes`` to also rank on the object.serial of a node's
device and on the node's own object.serial, so that route priorities are
only compared between nodes of the same card, and the election no longer
changes for no apparent reason when all other keys are equal (!893)
- Fixed ``m-lua-scripting`` to include the offending Lua type name in POD
build errors (!889)
WirePlumber 0.5.16
~~~~~~~~~~~~~~~~~~
Additions & Enhancements:
- Added ``WpClientContext``, a second PipeWire connection running on its own
thread that hosts WirePlumber's in-process media objects (loopback and
filter-chain modules, ``LocalNode()``, ``SpaDevice()``), so that slow Lua
event hooks on the main thread no longer stall their control path; the
export core is retired in favor of this new client context (!873)
- Added new ``WpDynamicRules`` class for matching rules with conditions, and
updated ``filter-graph.lua`` to use it, allowing filter-graphs to be loaded
and unloaded dynamically depending on whether other objects exist or not
(!872)
- Added ``wp_impl_module_unload()`` and ``LocalModule:unload()``, giving
scripts control to unload implemented modules at any time (!881)
- Added a ``volume-set`` action to ``module-mpris`` to allow adjusting the
volume of a remote MPRIS2 player from Lua (!860)
- Added ``--yes`` flag to ``wpctl reset`` to skip the confirmation prompt
(!850)
- Added ``device.form-factor`` ALSA node property for use in ALSA rules, and
made HDMI node descriptions include the name of the connected display when
available (!862, !874)
- Refactored the Bluetooth monitor to use event hooks for handling devices
and nodes, matching the design already used by the v4l2 and libcamera
monitors (#916; !803)
- Overhauled the documentation: filled in every stub and missing Lua API and
C API page, added a getting started guide, new ``wireplumber(1)`` and
``wpexec(1)`` man pages, and removed stale pages describing features
renamed or removed in the 0.4 to 0.5 transition (!877)
Fixes:
- Fixed monitors to always activate all device and node features, and made
monitors wait for successful device activation before storing the devices
and nodes as a managed objects (#986, #996; !883, !886, !876)
- Fixed ``find-preferred-profile`` to skip a configured preferred profile
that is not available, instead of leaving no profile selected (#993; !884)
- Fixed ``permission-manager`` to not include destroyed globals when
rebuilding the permissions array on ``objects-changed``, fixing some
pipewire warnings in the log (!882, !888)
- Fixed a memory leak in ``WpSpaDevice`` by only collecting params from our
own requests (#988; !879)
- Fixed ``filter-graph`` to correctly apply graphs defined for the same node
across multiple configuration files (!870)
- Fixed several nil-related crashes and correctness issues in Lua scripts
(#972; !861, !864, !866, !869)
- Improved ``apply-access`` to directly attach an already-active permission
manager to the client instead of wastefully re-running activation on it
(#973; !868)
- Improved ``state-stream`` change detection to avoid spurious state writes
from volume rounding and from unset or empty properties (#974; !867)
- Fixed ``default-nodes`` to ignore smart filters when selecting the best
default node (!857)
- Removed the ``node.filter.forward-format`` setting and its script, which
only worked with 0.4 and never really worked with 0.5 (!878)
AI-Generated: Uses Claude Code (Claude Opus 5)
Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
clang 23 enables -Wunused-template as part of -Wall (via -Wmost ->
-Wunused), where previously neither -Wall nor -Wextra turned it on.
libcamera builds with -Werror, so this now breaks the build:
In file included from include/libcamera/ipa/core_ipa_serializer.h:18:
include/libcamera/internal/ipa_data_serializer.h:57:3: error: unused
function template 'readPOD' [-Werror,-Wunused-template]
57 | T readPOD(std::vector<uint8_t> &vec, size_t pos)
| ^~~~~~~
The POD helpers sit in an anonymous namespace, so they have internal
linkage and clang diagnoses them per translation unit. appendPOD() and
the iterator overload of readPOD() are referenced by the
IPADataSerializer specialisations in the header itself, so they count as
used everywhere. The std::vector overload of readPOD() is not: nothing
in libcamera calls it, its only callers are the IPA proxies and proxy
workers generated at build time from the mojom templates. So it is
genuinely unused in every translation unit that is not generated proxy
code, which is what [[maybe_unused]] exists for.
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Add the pw-voiceui tool, a CLI for controlling and monitoring the SVA
(Sound Trigger / Voice Activation) voice-UI PipeWire node exposed by
the pw-pal-plugin (media.role=VoiceUI). Supports list/info/listen,
setting SVA parameters, and sending commands.
Add 0003-tools-add-pw-voiceui-SVA-voice-UI-control-listen-cl.patch,
reference it from SRC_URI, and list pw-voiceui in FILES:${PN}-tools.
Signed-off-by: Kiruthika Vijayasekar <kvijayas@qti.qualcomm.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
pcm_ioctl() previously had a FIXME and always issued the ioctl
directly on pcm->fd, bypassing any loaded plugin (e.g. AGM's tinyalsa
plugin). Dispatch through pcm->ops->ioctl when a plugin is loaded,
falling back to the direct ioctl() otherwise.
Add 0002-pcm-fix-pcm_ioctl-to-dispatch-through-plugin-ops.patch and
reference it from SRC_URI.
Signed-off-by: Kiruthika Vijayasekar <kvijayas@qti.qualcomm.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
rav1e's default features include git_version, which pulls built/git2 and thus
libgit2-sys into build.rs -- a *build-dependency*, so it is probed and linked
for the build host. cargo_common exports LIBGIT2_NO_VENDOR, so libgit2-sys
probes pkg-config, which points at the target sysroot, and the host link then
picks up the target's libm.so linker script. That script names absolute
target paths (/usr/lib/libm.so.6), which only resolve on the build host when
host and target architectures differ enough for ld to skip the script as
incompatible, so this breaks on aarch64 hosts building aarch64 targets.
git_version only embeds a git hash in the version string, which is
meaningless here, so drop it and keep the rest of the default feature set.
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Not sure why an AV1 encoder needs libgit2 but that's rust's dependency
tree for you. Needed since our cargo class now stops the git2-sys crate
from using a bundled copy of libgit2.
Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Upstream changes (release notes):
* 3.1.0/3.1.1: assorted fixes and code improvements (docker startup
under the default user, dependency maximum-version bumps).
* 3.2.0: resolve a long-standing transcoding/error-return issue with
libpupnp after dropping the old MediaTomb UPnP hack; allow splitting
config.xml at any section; export/reimport web-UI entries around a
database clear; many new import/runtime configuration entries.
* 3.2.1: fix MySQL/PostgreSQL database migration and init with
ffmpegthumbnailer disabled; raise supported pupnp (1.18.3) and
jsoncpp (1.9.7) maximums.
New build dependencies in 3.2.x:
* cxxopts is now required (find_package(cxxopts 3.2.0 REQUIRED)); add it
to DEPENDS (provided by meta-oe).
* A new WITH_ZIP option (default ON) pulls in libzippp and libzip for
"package download". Neither is packaged here, so add a PACKAGECONFIG
[zip] knob left disabled by default (-DWITH_ZIP=FALSE), matching 3.0.0
behaviour.
The two local build patches (fmt 12 include fix, <cstring> include) still
apply and are retained.
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Upstream changes (git log v1.2.13..v1.2.16):
* 64-bit timestamp/hpointer support: compress_get_hpointer64,
get_tstamp64 via SNDRV_COMPRESS_AVAIL64, clamp samples to UINT_MAX and
return -ERANGE on overflow; update sound header to v0.4.0.
* compress plugin ("mops") support: magic + compress_plugin_mops symbol
lookup, improved hw-plugin protocol version check.
* fcplay: decode the AAC header to set the correct codec format and fix
next_track sequencing for gapless playback; misc fixes (include
errno.h, avoid NULL string to printf).
* include: install compress_ops.h as a public header.
Drop 0001-include-install-compress_ops.h-as-public-header.patch: that
change (moving compress_ops.h to nobase_include_HEADERS) was merged
upstream and is present in 1.2.16.
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Upstream changes:
* 1.25.x modernizes the mixer, bundles fmt 11.2.0 (was 11.1.1), and
annotates realtime-critical functions with [[clang::nonblocking]].
Drop 0001-Add-missing-include-for-malloc-free.patch: it backported a
<cstdlib> include into the bundled fmt-11.1.1 copy, which is already
present in the fmt-11.2.0 now bundled by 1.25.2.
openal-soft hardcodes -Werror=function-effects for C++ even with
ALSOFT_WERROR=OFF. clang-22's function-effects analysis then fails the
build on calls from nonblocking mixer code into non-nonblocking
std::variant::emplace. Pre-seed HAVE_WFUNCTION_EFFECTS=OFF (clang only)
so neither -Wfunction-effects nor its -Werror promotion is added.
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Upstream changes (git log):
* Update headers for NVIDIA Video Codec SDK 13.1.
* Add the full set of cuMemsetAsync-family functions and other missing
CUDA functions for Video Codec SDK 13.1 interaction.
* Load nvEncodeAPI.dll for native Windows ARM64.
Version-only bump (git tag n13.1.15.0); the local clean-target patch
still applies.
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Upstream changes (git log 7.0.1..7.1.1):
* Large DVD-Audio feature addition: Audio Still Video Set (ASVS) IFO
structures/reads, still-frame structures in ATS, ifoOpen for ASVS and
SAMG, simultaneous CSS and CPPM decryption, stream-type logic, and
audio_sv.vob menu exposure in DVDOpenFile.
* DVD-VR: add and integrate IFO structures and reads.
* Prevent library log messages from writing to stdout; add symbol
visibility attributes for OS/2.
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Upstream changes (NEWS):
* 0.24.10: fix input cache deadlock; sidplay millisecond timestamps and
libsidplayfp 3 support; allow building the upnp database plugin with
libupnp 1.14.30 (API breakage fixed upstream).
* 0.24.11: fix a path-traversal bug and disallow newlines in song URIs;
curl input requires >= 7.85.0; fix a PCM decoder stack buffer overflow.
* 0.24.12: allow empty URI in "lsinfo"/"add" (0.24.11 regression).
* 0.24.13: number-parser range checks; curl storage drops auth probe
requests; Opus decoder no longer adds 5 dB to header playback gain;
limit ID3 tags to 4 MB; pipewire fd-leak fix and "media.album" tag;
allow AF_NETLINK under systemd when UPnP is enabled.
Drop 0001-libfmt-12.2.0-support-use-fmt-format.h-not-fmt-core.h.patch:
0.24.13 already migrated the affected sources off <fmt/core.h>, and this
distro's fmt 12.2.0 still ships the <fmt/core.h> compat header, so the
patch no longer applies cleanly and is unnecessary.
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Upstream changes (git log v0.49..v0.53):
* New Interface / PageContainer abstraction; screens migrated to
Interface::Alert() and ScreenManager::Alert(); removed the obsolete
global "screen" and the old screen_status library.
* FileBrowserPage now formats its prompt with libfmt; charset cleanups
(drop Utf8ToLocaleZ).
* TextInputDialog reworked (options struct, KEY_RETURN/LINEFEED
forwarding in "fragile" mode, history handling).
* Bundled fmt subproject updated (11.0.2); translation updates.
ncmpc 0.53 now formats strings with libfmt and its meson build pulls fmt
as a subproject; with wrap downloads disabled the build failed with
"Subproject fmt is buildable: NO". Add fmt to DEPENDS so the system
libfmt is used instead of the meson wrap.
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Ankur Tyagi
prasanth
Joel Winarske
Khem Raj
Leon Anavi
Ross Burton
Markus Volk
Jaipaul Cheernam
Kiruthika Vijayasekar