Changelog:
============
- Fixed a 'TypeError' on PHP 8 when 'Security::$static_classes' was set to a
non-array value (e.g. the string ''none'') to disable static class access;
any non-array value now cleanly denies access. Use 'Security::$static_classes =
null' to disable access to all static classes.
- Security: the built-in 'stream:' resource type now validates the nested
stream wrapper against the security policy, so a template such as
'stream:php://filter/...' can no longer bypass 'Security::$streams' (including
'Security::$streams = null') to read local files
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Please see
https://git.yoctoproject.org/poky/commit/?id=4dd321f8b83afecd962393101b2a6861275b5265
for what changes are needed, and sed commands that can be used to make them en masse.
I've verified that bitbake -c patch world works with these, but did not run a world
build; the majority of recipes shouldn't need further fixups, but if there are
some that still fall out, they can be fixed in followups.
Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
allarch is causing issues when running yocto-layer-check for
test_machine_signatures on a BSP layer that depends on meta-oe:
bitbake-diffsigs -t smarty do_package_qa -s 416787047ca76d43b094860cf617234f957d11895e7b7be20cbe9203289f27e1 1e482ffc1ead26bcd1f89d4dcf92e497dd6223933941b3ec6e483cb0072c9f5d
Hash for task dependency php:do_packagedata changed from 6bfffcbbcd4507bd0be6cf3138583b92d82e75099c13dcf58363aaa938ed6f9a to 24c5373ca06af905e35fa48b7ca3477283add52fc54348fee9dd5a28efd1bc05
Hash for task dependency php:do_package changed from cc9a8c60aeb862dd19eda30bd6ed137beb2ddd8b5b730a8b996fc58681a2ccdd to e8d7465054669b47fcf933f060e1fb69a3871d1d1e3d5b9a9610644edd17d2a8
Hash for task dependency bzip2:do_packagedata changed from c00269772615a22d528f4205b4a1ce88a2325c9acd08de20445d20e22e255b1c to c3629ef771a2b92ed5eb9c36cffd96557537542e2bae0568e191225af0c5f4fc
Hash for task dependency bzip2:do_package changed from bf71dc096cc85a6f6cdddebb908709f47b55ed8401a7f56fc7810484f8d0a226 to 3326e837bd452b74e32ab6b4f96fca7ed69e4d5cbbdd57acc6c9325201638cc4
Hash for task dependency bzip2:do_install changed from 9e253b0c997975295046712d52a305e50d73148a00b6970aa39d5e548d66dc91 to a78a2933308498a16e713a934c1cc59480d5fd4c8bedf6b055c2ef6608836f78
Hash for task dependency bzip2:do_compile changed from b515ce5b36cc71307ce02f27a4b5187482acfeeddc74e6679c60ebef46ab6e1d to fe7f086dbf72dc1924bf9b4f7ddd54e519627fd7782434b50f67b245ce72073f
Hash for task dependency bzip2:do_configure changed from 52680e9abaad7c7ec1ba6098f965bfd991924a5ce1a57db73725eb8917cfda31 to 3395d5acb3b7d42a4ff2cfd010d4d05c0595f91d36f8d9cd9888a367987ddb4f
Hash for task dependency bzip2:do_deploy_source_date_epoch changed from b3cb06d6eb2fcd84f94c4f66c8e68dcb4f277622e1e3e5809fe2ea02ab589b31 to a6eade80d249c35f50b8b4d7ba5d72ccaed07068dde6529a5f219b918a7c5294
basehash changed from f275277525924e477f47fb1b0bd4eb782ef2818fa2bd930159cd5ae5960f1e91 to 7aaec6b4c1f6b5ce5726d99f3a040678c1e49a5aa6f2f22d28503563b8e6fb32
Variable TUNE_CCARGS value changed:
" [--mcpu=cortex-a57.cortex-a53+crc-] {+-mcpu=cortex-a57+crc+} -mbranch-protection=standard"
allarch was introduced to smarty in
0f33416ad0 ("smarty: update 4.5.5 -> 5.4.2") which was first introduced
for Walnascar hence the issue wasn't caught until now.
Removing the allarch inheritance fixes the issue.
Also remove extra whitespace after comment.
Link: https://lists.openembedded.org/g/openembedded-devel/topic/issue_meta_oe_walnascar/113168928
Signed-off-by: Chris Paterson <chris.paterson2@renesas.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changelog:
===========
- replace/qualify call_user_func_array
- Restore special handling of isset and empty as it was in v4
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changelog:
===========
- Add PHP 8.4 support to Smarty
- Fixed that using count() would trigger a deprecation notice.
- Fixed argument must be passed by reference error introduced in v4.5.1
- Using PHP functions and static class methods in expressions now also triggers a deprecation notice
Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changelog:
===========
- Fixed internal release-tooling
- Using the '|implode', '|json_encode' and '|substr' modifiers does not generate
a deprecation warning anymore as they will continue to be supported in v5
- PHP8.3 support
- Incorrect compilation of expressions when escape_html=true
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changelog:
==========
clean output buffer for Throwable instead of just Exception
Fix wrong indentation in libs/plugins/modifier.capitalize.php
fix compilation for caching templates
Fix Variable Expression
Silence deprecation errors for strtime in PHP8.1 or higher
Fixed PHP8.1 deprecation errors passing null to parameter in trim
Re-organize all testrunners to use the same script(s).
Fixed PHP8.1 deprecation errors in strip_tags
#155 Adapt Smarty upper/lower functions to be codesafe (e.g. for Turkish locale)
Bug fix for underscore in template name
Using PHP functions as modifiers now triggers a deprecation notice.
Use 'DIR' instead of 'dirname(FILE)'
Fixed several typos and grammar errors
PHP8.2 compatibility
Make SmartyCompilerException play nicer with error handler libraries
Change file permissions for directories and respect umask for files
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changelog:
=========
Security
---------
Applied appropriate javascript and html escaping in mailto plugin to counter injection attacks #454
Fixed
--------
Fixed PHP8.1 deprecation errors in modifiers (upper, explode, number_format and replace) #755 and #788
Fixed PHP8.1 deprecation errors in capitalize modifier #789
Fixed use of rand() without a parameter in math function #794
Fixed unselected year/month/day not working in html_select_date #395
Signed-off-by: Zheng Ruoqin <zhengrq.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changelog:
==========
add local testrunners for all supported PHP versions using docker.
Fix PHP 8.1 htmlspecialchars deprecation
Do not use obsolete smarty properties '_dir_perms', '_file_perms', 'p…
Update to HTML5-syntax in debug template
Merge branch 'fix-issue-549-v3' of github.com:AnrDaemon/smarty into A…
Fixed second param of unescape modifier
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
This patch updates SRC_URIs using git to include branch=master if no branch is set
and also to use protocol=https for github urls as generated by the conversion script
in OE-Core.
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Smarty is a template engine for PHP, facilitating the separation of presentation (HTML/CSS) from application logic.
Signed-off-by: Zang Ruochen <zangrc.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Wang Mingyu
Gyorgy Sarvari
Ankur Tyagi
Alexander Kanavin
Chris Paterson
Wang Mingyu
Ninette Adhikari
Khem Raj
zhengruoqin
Richard Purdie
zangrc