Commit Graph

48 Commits

Author SHA1 Message Date
Peter Marko 0ef4a2ecee grpc: set status for CVE-2026-33186
CPE per NVD report is for "go", while this is C++ component:
* cpe:2.3:a:grpc:grpc:*:*:*:*:*:go:*:*
Also the link to adisory within NVD report says "grpc-go":
* https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
2026-04-15 14:12:18 +05:30
Peter Marko 6e917b832d grpc: patch CVE-2024-11407
Cherry-pick commit [1] mentioned in [2].

[1] https://github.com/grpc/grpc/commit/e9046b2bbebc0cb7f5dc42008f807f6c7e98e791
[2] https://nvd.nist.gov/vuln/detail/CVE-2024-11407

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2025-01-20 19:45:30 -05:00
Libo Chen 85d783a457 grpc: Fix CVE-2024-7246
Backport patches [1] to fix CVE-2024-7246.

[1] https://github.com/grpc/grpc/pull/37361/files

Signed-off-by: Libo Chen <libo.chen.cn@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2024-12-15 14:05:17 -05:00
Xiangyu Chen b189404251 grpc: upgrade 1.60.0 -> 1.60.1
Changelog:
==========
[Python Misc] Revert change to print backtrace in server
[PSM Interop] Use the Kokoro shared install lib from the new repo

Signed-off-by: Xiangyu Chen <xiangyu.chen@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-02-29 18:47:47 -08:00
Peter Marko 5e8a4a6dd0 grpc: correct dependencies
GRPC depends on protobuf, not protobuf-c
Additionally zlib is missing in dependencies

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-01-14 10:54:09 -08:00
alperak 6fd9eacd7b grpc: upgrade 1.59.2 -> 1.60.0
0001-cmake-Link-with-libatomic-on-rv32-rv64.patch refreshed

Changelog:

Core

    Implemented dualstack IPv4 and IPv6 backend support, as per draft gRFC A61. xDS support currently guarded by GRPC_EXPERIMENTAL_XDS_DUALSTACK_ENDPOINTS env var.
    Dropped Bazel 5 support. (#34813)
    [deps] Upgrade protobuf version to v25.0. (#34513)
    [Security - Revocation] Crl Directory Watcher Implementation. (#34749)
    [server] Cap size of pending request queue with RealRequestMatcher. (#34782)
    [chttp2] Fix outgoing data stats. (#34693)
    [EventEngine] Enable Posix EventEngine Listener on all builds. (#34748)
    [EventEngine] Enable Windows EventEngine Listener on all builds. (#34436)
    [chttp2] Alternative protection for too many streams in the system. (#34697)
    [Proxy] Support for setting proxy for addresses. (#34617)
    [client idleness] client channels go idle after 30 minutes by default. (#34653)
    [chttp2] Add an experiment to separate liveness checks from ping timeouts. (#34647)
    [chttp2] Tarpit invalid requests. (#34641)
    [chttp2] Enforce settings acks. (#34640)
    [chttp2] Limit work per read cycle. (#34639)
    [chttp2] Limit request count before receiving settings ack. (#34638)
    [chttp2] Randomly ping on RST_STREAM. (#34637)

C++

    [xds] C++ XdsServerBuilder Remove src/... header dependency from public header. (#34790)
    [reflection] Add v1 reflection. (#34535)

C#

    [csharp] Grpc.Tools documentation for sharing proto files between projects and nuget packages. (#34521)

Ruby

    [ruby] create debug symbol packages. (#34632)

Python

    [Bug Fix] Change return of grpc.aio.ServicerContext.code() from integer to grpc.StatusCode. (#34292)

Signed-off-by: alperak <alperyasinak1@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-01-11 12:11:36 -08:00
Peter Marko d8688486c8 grpc: Upgrade 1.56.2 -> 1.59.2
CVE: CVE-2023-44487

Patch updated by devtool to resolve patch fuzz.

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-11-06 08:49:52 -08:00
Clément Péron 8b3cc547b7 devtools: grpc: bump to 1.56.2
Remove merged patch that export plugin to a separate targets

Remove no more applicatable patch

Remove CVE patch already present

Signed-off-by: Clément Péron <peron.clem@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-09-27 14:22:09 -07:00
Chen Qi 491b7592f4 grpc: fix CVE-2023-32732
Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-08-09 09:29:10 -07:00
Martin Jansa be8c765c7c *.patch: add Upstream-Status to all patches
There is new patch-status QA check in oe-core:
https://git.openembedded.org/openembedded-core/commit/?id=76a685bfcf927593eac67157762a53259089ea8a

This is temporary work around just to hide _many_ warnings from
optional patch-status (if you add it to WARN_QA).

This just added
Upstream-Status: Pending
everywhere without actually investigating what's the proper status.

This is just to hide current QA warnings and to catch new .patch files being
added without Upstream-Status, but the number of Pending patches is now terrible:

5 (26%) 	meta-xfce
6 (50%) 	meta-perl
15 (42%)        meta-webserver
21 (36%)        meta-gnome
25 (57%)        meta-filesystems
26 (43%)        meta-initramfs
45 (45%)        meta-python
47 (55%)        meta-multimedia
312 (63%)       meta-networking
756 (61%)       meta-oe

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-06-21 09:15:20 -07:00
Denys Dmytriyenko 54885a5af2 grpc: point to the native protobuf compiler binary
Latest version of grpc fails to build nativesdk variant since it finds
and tries to execute protoc binary from nativesdk-protobuf instead of
protobuf-native. Shortcut the detection logic by pointing to the correct
version of protoc binary in native sysroot.

Signed-off-by: Denys Dmytriyenko <denys@konsulko.com>
Signed-off-by: Denys Dmytriyenko <denis@denix.org>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-06-08 19:50:00 -07:00
Wang Mingyu 5bff9c4298 grpc: upgrade 1.50.0 -> 1.50.1
Changelog:
Fix Bazel 4 support and objc bazel tests on python3.9 (#31410)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-11-01 10:13:47 -07:00
Khem Raj 923635099d grpc: Update to 1.50.x release
License-update: Include MPL-2.0 [1]

Add missing BSD 3-clause and MPL-2.0 to license field

Switch to git submodules since its using locked versions of some
components like opencensus-proto

[1] https://github.com/grpc/grpc/commit/05fcd826f477ef1a024a2defa5e4b3d78f5e6eb4
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-10-18 11:48:35 -07:00
Khem Raj 1d7385bba5 grpc: Fix build with rv32/rv64
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-04-20 10:58:01 -07:00
wangmy 1888971b1f grpc: upgrade 1.45.1 -> 1.45.2
Changelog:
=========
Various fixes related to XDS (#29314, #29340, #29339)
HTTP2: Should not run cancelling logic on servers when receiving GOAWAY (#29307)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-04-11 08:52:55 -07:00
Clément Péron a3dab74a89 grpc: remove unused patches
These patches are not used by the grpc recipe so remove them.

Signed-off-by: Clément Péron <peron.clem@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-04-10 10:05:35 -07:00
Stefan Herbrechtsmeier b04696ddf8 grpc: remove useless link with libatomic append
The sed commands to link with libatomic don't match and is therefore
useless. If they are really needed the problem should be fixed in the
code for example with CHECK_LIBRARY_EXISTS.

Signed-off-by: Stefan Herbrechtsmeier <stefan.herbrechtsmeier@weidmueller.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-04-10 10:05:35 -07:00
Stefan Herbrechtsmeier 1a91a9cb27 grpc: add cmake support for target
The CMake gRPC config checks for binaries and fails if a binary (plugin)
is missing. Fix the problem in the code and add the CMake gRPC config
back to the target package.

Signed-off-by: Stefan Herbrechtsmeier <stefan.herbrechtsmeier@weidmueller.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-04-10 10:05:35 -07:00
wangmy 4c50d31a56 grpc: upgrade 1.45.0 -> 1.45.1
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-04-06 20:25:34 -04:00
Stefan Herbrechtsmeier d9a5af5583 grpc: Remove runtime dependency between grpc and protobuf-compiler
Remove the runtime dependency between grpc and protobuf-compiler package
by moving the grpc_plugin_support library to grpc-compiler package.

Signed-off-by: Stefan Herbrechtsmeier <stefan.herbrechtsmeier@weidmueller.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-03-29 08:33:41 -07:00
Trevor Gamblin df5b764f99 grpc: upgrade 1.41.1 -> 1.45.0
The changes between these versions are too numerous to list here, but
can be found at https://github.com/grpc/grpc/releases/tag/v1.45.0

Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-03-24 09:45:25 -07:00
Khem Raj 7dd4e34759 grpc: Enable cpp plugin for target version too
This is needed by packages like sysdig

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-03-24 09:45:25 -07:00
Khem Raj 14c7d8a0d7 recipes: Update LICENSE variable to use SPDX license identifiers
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-03-04 17:41:45 -08:00
Khem Raj 21394ebc68 meta-oe: Use new variable SYSROOT_DIRS_IGNORE
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-02-21 18:12:04 -08:00
wangmy 189ffc2d17 grpc: upgrade 1.41.0 -> 1.41.1
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-11-03 06:57:48 -07:00
Martin Jansa 3d7ccbbc03 grpc: revert GRPCPP_ABSEIL_SYNC change from 1.40.0 to fix undefined references to absl::lts_20210324::Mutex::~Mutex()
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-10-19 09:23:08 -07:00
Vyacheslav Yurkov c5e89108ee grpc: upgrade 1.38.1 -> 1.41.0
Drop the patch that fixes cross compilation, because it's already in
1.41.0. Add the patch for regression fix [1], which should be dropped on
the recipe upgrade.

[1] https://github.com/grpc/grpc/issues/26857

Signed-off-by: Vyacheslav Yurkov <uvv.mail@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-10-14 07:16:58 -07:00
Vyacheslav Yurkov 6696d7ef59 grpc: fix cross-compilation of grpc applications
Backport a patch from grpc/master to be able to build c++ applications
when gRPC_BUILD_GRPC_CPP_PLUGIN=OFF. The patch should be dropped on the
recipe upgrade

Signed-off-by: Vyacheslav Yurkov <uvv.mail@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-10-04 14:13:52 -07:00
Vyacheslav Yurkov 17af9e0501 grpc: fix cross-compilation of grpc applications
When we build an application that uses grpc for the target, following
error occurs

CMake Error at <application work dir>/recipe-sysroot/usr/lib/cmake/grpc/gRPCTargets.cmake:179 (message):
|   The imported target "gRPC::grpc_cpp_plugin" references the file
|
|      "<application work dir>/recipe-sysroot/usr/bin/grpc_cpp_plugin"
|
|   but this file does not exist.  Possible reasons include:
|
|   * The file was deleted, renamed, or moved to another location.
|
|   * An install or uninstall procedure did not complete successfully.
|
|   * The installation package was faulty and contained
|
|      "<application work dir>/recipe-sysroot/usr/lib/cmake/grpc/gRPCTargets.cmake"
|
|   but not all the files it references.
|
| Call Stack (most recent call first):
|   <application work dir>/recipe-sysroot/usr/lib/cmake/grpc/gRPCConfig.cmake:25 (include)
|   	CMakeLists.txt:4 (find_package)

That's because target grpc was built with CPP plugin support and
referenes it from CMake config file. This commit disables CPP plugin
build for the target, and sets dependency on compiler for native and SDK
builds

Signed-off-by: Vyacheslav Yurkov <uvv.mail@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-10-04 14:13:52 -07:00
Sinan Kaya 736eae4899 grpc: make SHARED library build optional
Shared library build is known to not work on win32
platforms. Make it configurable.

Signed-off-by: Sinan Kaya <okaya@kernel.org>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-08-23 22:00:39 -07:00
Martin Jansa c61dc077bb Convert to new override syntax
This is the result of automated script (0.9.1) conversion:

oe-core/scripts/contrib/convert-overrides.py .

converting the metadata to use ":" as the override character instead of "_".

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2021-08-03 10:21:25 -07:00
zhengruoqin c0150c1397 grpc: upgrade 1.38.0 -> 1.38.1
Signed-off-by: Zheng Ruoqin <zhengrq.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-06-23 23:20:36 -07:00
Khem Raj 949d9616cb grpc: Upgrade to 1.38.0
Fix build with musl by checking for iovec redefinition

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-05-31 07:48:02 -07:00
Khem Raj 61bf4cdf50 grpc: Upgrade to 1.37.1
Changes are here [1]

[1] https://github.com/grpc/grpc/releases/tag/v1.37.1

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-05-11 08:27:27 -07:00
zhengruoqin d99ced4cb7 grpc: upgrade 1.36.3 -> 1.36.4
Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-03-28 12:12:57 -07:00
zhengruoqin 90ed7a41c2 grpc: upgrade 1.36.2 -> 1.36.3
Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-03-19 01:19:14 -07:00
Sakib Sajal b356af07fb grpc: upgrade 1.36.1 -> 1.36.2
Changelog:
https://github.com/grpc/grpc/releases/tag/v1.36.2

Signed-off-by: Sakib Sajal <sakib.sajal@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-03-11 10:06:02 -08:00
Clément Péron 9232086c26 grpc: move grpc plugins to a new grpc-compiler package
Like it's done for protobuf and flatbuffers move the binaries produce
by gRPC to a grpc-compiler package.

This is more explicit and keep coherency with protobuf and flatbuffers.

Signed-off-by: Clément Péron <peron.clem@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-03-05 07:28:07 -08:00
Clément Péron 0265b235fa grpc: remove gflags dependency
gFlags has been removed since:
1f670397ce7f8a12dfb1fb32d8857b2233022856 Remove gflags.

With the move to abseil's flags, this removed the now-unnecessary submodule and installation commands.

Signed-off-by: Clément Péron <peron.clem@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-03-04 09:04:24 -08:00
Clément Péron 7ed67b8963 grpc: Add PackageConfig to build only required plugins
Signed-off-by: Clément Péron <peron.clem@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-03-04 09:04:24 -08:00
Khem Raj c3b91945d6 grpc: Upgrade to 1.36.1
Changelog
https://github.com/grpc/grpc/releases/tag/v1.36.0-pre1
https://github.com/grpc/grpc/releases/tag/v1.36.0
https://github.com/grpc/grpc/releases/tag/v1.36.1

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-03-03 12:42:17 -08:00
zhengruoqin e8deb92b7b Fix do_package error when enable multilib.
ERROR: grpc-1.35.0-r0 do_package: QA Issue: grpc: Files/directories were installed but not shipped in any package:
  /usr/lib
  /usr/lib/pkgconfig
  /usr/lib/pkgconfig/grpc.pc
  /usr/lib/pkgconfig/grpc_unsecure.pc
  /usr/lib/pkgconfig/grpc++.pc
  /usr/lib/pkgconfig/gpr.pc
  /usr/lib/pkgconfig/grpc++_unsecure.pc
Please set FILES such that these items are packaged. Alternatively if they are unneeded, avoid installing them or delete them within do_install.
grpc: 7 installed and not shipped files. [installed-vs-shipped]
ERROR: grpc-1.35.0-r0 do_package: Fatal QA errors found, failing task.

Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-03-02 10:25:19 -08:00
Anatol Belski 15cff67fd6 grpc: Upgrade 1.24.3 -> 1.35.0
This is a really huge jump in versions, but this package has been not
upgraded for quite some time. The previous patches are not necessary
anymore, they're integrated upstream.

Signed-off-by: Anatol Belski <anbelski@linux.microsoft.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-02-20 10:40:53 -08:00
Khem Raj 92441f9d6a meta-oe: Add leading whitespace for append operator
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-15 12:25:53 -08:00
Martin Jansa 5abf5531c2 grpc: move from meta-networking to meta-oe
* because sysdig from meta-oe depends on it now, since:
  commit ed798c7643
  Author: Khem Raj <raj.khem@gmail.com>
  Date:   Wed Jan 2 17:59:20 2019 -0800

    sysdig: Upgrade to 0.26.5

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-03-03 09:23:08 -08:00
Armin Kuster 251878e8b6 grpc: move it from oe to networking layer
grpc has dependancy on meta-networking packages.

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-05-17 08:32:26 -07:00
Khem Raj 38f6ef9b14 grpc: Update to 1.8.5
Drop upstream patches which are not needed

update version in the patch to 1.8.5 as well

add a new patch to stop looking into native
sysroot for libcares

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-02-11 11:53:41 -08:00
Alexey Firago 07f015f7e4 grpc: Add recipe for grpc v1.6.6
Add recipe to build the C based gRPC libraries.

Regular gRPC build process uses git sub-modules for dependcies on external
libraries/tools (c-ares, protobuf, etc). This recipe add patches and configs
to use libraries provided by Yocto/bitbake/OE.

grpc-native is required to build grpc for target - it uses some grpc plugins
built for host.

Signed-off-by: Alexey Firago <alexey_firago@mentor.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-11-15 16:34:05 -08:00