The CVE_PRODUCT variable is assigned automatically to BPN.
Unset it for this recipe so the CVEs can be checked
against the correct recipe.
Signed-off-by: Beniamin Sandu <beniaminsandu@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
- Try to add convert and apply statuses for old CVEs
- Drop some obsolete ignores, while they are not relevant for current
version
Signed-off-by: Andrej Valek <andrej.valek@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Drop cross compile patch as we do not need it anymore since we now
use --enable-aligned
License-Update: Correctly mark the license as GPL-2.0+
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Some old CVEs don't have a vulnerable version range in the NVD database,
this causes come mismatch with cve-check. Ignore many CVEs that are
picked up by the class but are patched in our products.
Signed-off-by: Davide Gardenal <davide.gardenal@huawei.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
This patch updates SRC_URIs using git to include branch=master if no branch is set
and also to use protocol=https for github urls as generated by the conversion script
in OE-Core.
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
This is the result of automated script (0.9.1) conversion:
oe-core/scripts/contrib/convert-overrides.py .
converting the metadata to use ":" as the override character instead of "_".
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
instrumentation code uses atomic ops on 64bit variables, which leads to build
failures on 32bit targets using libtorrent because of missing builtins on
riscv32/gcc
/usr/lib/libtorrent.so: undefined reference to `__sync_add_and_fetch_8'
/usr/lib/libtorrent.so: undefined reference to `__sync_fetch_and_and_8'
The developer added a "--disable-instrumentation" switch which skips the build
of the offending codepaths in libtorrent.
Signed-off-by: Khem Raj <raj.khem@gmail.com>
From https://github.com/rakshasa/rtorrent/issues/156
all atomics (__sync_fetch_and_and_8) are not avaliable on
mips/ppc, this patch helps workaround the build error
Fixes
ld: libtorrent.so: undefined reference to `__sync_add_and_fetch_8'
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Beniamin Sandu
Khem Raj
Peter Kjellerstedt
Andrej Valek
Davide Gardenal
Richard Purdie
Martin Jansa
Zheng Ruoqin