Commit Graph

108 Commits

Author SHA1 Message Date
Adrian Bunk 5826b0f1dd php: Upgrade 7.3.9 -> 7.3.11
Patch for issue fixed upstream removed.
Also merge the inc into the recipe.

Signed-off-by: Adrian Bunk <bunk@stusta.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-11-01 17:22:52 -07:00
Trevor Gamblin ec48bd3bdf php: fix CVE-2019-6978
Patch for php to sync with the fix for the same issue in
libgd.

CVE: CVE-2019-6978
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-10-04 19:11:55 -07:00
Adrian Bunk c943bc5ea9 php: Move more into php.inc after php5 removal
Signed-off-by: Adrian Bunk <bunk@stusta.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-09-10 06:54:01 -07:00
Adrian Bunk 7c9881e254 php: Remove no longer needed CFLAGS_append_aarch64
Signed-off-by: Adrian Bunk <bunk@stusta.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-09-10 06:54:01 -07:00
Yi Zhao 54983c1351 php: fix module path in mod_php.conf
The apache2 module's path has been changed from ${libdir} to
${libexecdir} in commit 8d4d608b4e. Update
mod_php.conf to adapt it.

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-09-10 06:54:01 -07:00
Khem Raj c31468e37a php: Turn PCRE JIT off for riscv
Its not yet supported

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-09-10 00:45:48 -07:00
Kai Kang 99bb172561 php: sync with apache2's change
It redefines apache2's libexecdir. Update php to sync with that change.

Signed-off-by: Kai Kang <kai.kang@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-09-05 18:13:44 -07:00
Yuan Chao 8f91643496 php: upgrade 7.3.8 -> 7.3.9
Signed-off-by: Yuan Chao <yuanc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-09-03 07:11:04 -07:00
Slater, Joseph 84bf94bfe9 php: zlib and zip support
Add back zlib support.  Define zip support but do not enable it.

Signed-off-by: Joe Slater <joe.slater@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-08-15 22:12:19 -07:00
Zang Ruochen 19661b9056 php: upgrade 7.3.7 -> 7.3.8
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-08-08 10:04:24 -07:00
Slater, Joseph cfcbbdc48b php: remove host specific info from header file
Import patch from Debian.

Signed-off-by: Joe Slater <joe.slater@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-07-21 09:31:09 -07:00
Hongxu Jia ef93dc3396 php: remove 5.6.40
Lets remove it directly, since October would be a year after
EOL so waiting until then would make it quite stale

Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-07-16 09:11:02 -07:00
Zang Ruochen 7e39a2ba47 php: upgrade 7.3.6 -> 7.3.7
-Upgrade from php_7.3.6.bb to php_7.3.7.bb.

Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-07-10 09:24:33 -07:00
Changqing Li 30bdc92f11 php: upgrade 7.3.4 -> 7.3.6
Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-06-15 16:45:33 -07:00
Changqing Li f6706cec17 php-fpm-apache: fix module path
with configuration:
IMAGE_INSTALL_append = " apache2 php-fpm-apache2"

systemctl status apache2.service report error:
httpd: Syntax error on line 509 of /etc/apache2/httpd.conf: Syntax error on line 3 of /etc/apache2/conf.d/php-fpm.conf: Cannot load lib/apache

fix by correct the module path

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-06-15 16:45:32 -07:00
Slater, Joseph 3327944ba5 php-7: mark two tests as expected to fail
The output is reasonable, but not what is expected.

Signed-off-by: Joe Slater <joe.slater@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-05-21 17:52:23 -07:00
Changqing Li e35c64220f php: correct httpd path
Configuration:
IMAGE_INSTALL_append = " modphp apache2 phpmyadmin xdebug"
PACKAGECONFIG_append_pn-php = " apache2"

Apache2 service start up with error:
[php7:crit] [pid 3943:tid 140477147074880] Apache is running a threaded MPM,
but your PHP Module is not compiled to be threadsafe.

Fix:
after apache2 is upgraded from 2.4.34 to 2.4.39, apache2-native
installs httpd into STAGING_SBINDIR_NATIVE, correct it so that
ZTS feature is open, and php is compiled to be threadsafe.

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-05-05 23:22:39 -07:00
Changqing Li ebfe36cdc9 php: upgrade 7.3.2 -> 7.3.4
Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-04-30 12:18:30 -07:00
Khem Raj 8cbd403fce php_7.3.2.bb: Switch to mysqlnd
With mariadb 10.x it fails to find headers in right location during
builds

https://bugs.php.net/bug.php?id=75612

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-03-07 09:33:45 -08:00
Changqing Li 4c2c33de56 php: upgrade 7.2.10 -> 7.3.2 / 5.3.39 -> 5.6.40
License-Update: 7.x version trim trailing whitespace

7.x:
* drop CVE-2017-9120.patch since it cannot resolve the CVE
* use recommand option --with-libzip, bundled libzip is deprecated
* update patches

5.x:
* use recommand option --with-libzip, bundled libzip is deprecated
* update patches

* Fix php 7.x cross build on hosts which have libxml2 installed

libxml2 is not detected properly, it pokes at host and takes the
libraries and header files added to build which links in libraries like
libicu which may not be available in sysroot causing configure failures
like

checking for sqlite3 files in default path... found in TOPDIR/build/tmp/work/aarch64-yoe-linux/php/7.3.2-r0/recipe-sysroot/usr/lib/..
checking for SQLite 3.3.9+... checking for sqlite3_prepare_v2 in -lsqlite3... no
not found
configure: error: Please install SQLite 3.3.9 first or check libsqlite3 is present

the reason is configure test fails to find icu libraries since they were
added based on build host's libxml2.pc

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-02-15 06:58:55 -08:00
Hong Liu 055da2bcec php: upgrade to 5.6.39
1.Upgrade php from 5.6.38 to 5.6.39.

Signed-off-by: Hong Liu <hongl.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-01-30 13:34:49 -08:00
André Draszik e219649594 meta-oe: remove True option to getVar calls (again)
A couple have still been missed in the past despite multiple
attempts at doing so (or simply have re-appeared?).

Search & replace made using the following command:
    sed -e 's|\(d\.getVar \?\)( \?\([^,()]*\), \?True)|\1(\2)|g' \
        -i $(git grep -E 'getVar ?\( ?([^,()]*), ?True\)' \
             | cut -d':' -f1 \
             | sort -u)

Signed-off-by: André Draszik <andre.draszik@jci.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-01-13 10:28:01 -08:00
Max Kellermann 797c1f11bb php: fix linker errors by setting ac_cv_func_dlopen=no
The autoconf variable `ac_cv_func_dlopen` controls whether `dlopen()`
is available without linking `libdl.so`.  But that doesn't work:

 tmp-glibc/work/aarch64-oe-linux/php/7.2.10-r0/recipe-sysroot-native/usr/bin/aarch64-oe-linux/../../libexec/aarch64-oe-linux/gcc/aarch64-oe-linux/8.2.0/ld: ext/sqlite3/libsqlite/sqlite3.o: undefined reference to symbol 'dlsym@@GLIBC_2.17'
 tmp-glibc/work/aarch64-oe-linux/php/7.2.10-r0/recipe-sysroot-native/usr/bin/aarch64-oe-linux/../../libexec/aarch64-oe-linux/gcc/aarch64-oe-linux/8.2.0/ld: tmp-glibc/work/aarch64-oe-linux/php/7.2.10-r0/recipe-sysroot/lib/libdl.so.2: error adding symbols: DSO missing from command line

Leave `ac_cv_lib_dl_dlopen=yes`, because that's the one which controls
whether `-ldl` is needed.

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-09-27 08:58:18 -07:00
Max Kellermann eaf93e8c67 php: add "--without-sqlite3 --without-pdo-sqlite"
Removing "sqlite3" from `PACKAGECONFIG` doesn't actually disable
SQLite, because those options default to "yes".  It just switches from
the system SQLite to PHP's internal SQLite copy.

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-09-27 08:58:18 -07:00
Hongxu Jia d26bf9ae0c php5: 5.6.36 -> 5.6.38
1. Support openssl 1.1.x

2. 5.6.38 ChangeLog (http://php.net/ChangeLog-5.php#5.6.38)
- Fixed bug #76582 (XSS due to the header Transfer-Encoding: chunked).

- Fixed bug #76423 (Int Overflow lead to Heap OverFlow in
  exif_thumbnail_extract of exif.c). (CVE-2018-14883)

- Fixed bug #76557 (heap-buffer-overflow (READ of size 48) while
  reading exif data). (CVE-2018-14851)

Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-09-26 09:46:42 -07:00
Changqing Li c467c5d609 php: Upgrade 7.2.9 -< 7.2.10
1. Upgrade 7.2.9 -> 7.2.10
2. php 5.x not support valgrind config, so move it to php_7.x.bb

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-09-24 11:49:45 -07:00
Khem Raj 2e07aa7804 Revert "php: actually enable openssl"
This reverts commit ff33f477c7.

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-09-05 13:59:15 -07:00
Slater, Joseph 840850e834 php: define PACKAGECONFIG[] for valgrind
configure will look by default for valgrind.h in some host directories.
We override this by setting --with-valgrind even if we do not want it.

The default value of PACKAGECONFIG does not enable valgrind support.

Signed-off-by: Joe Slater <joe.slater@windriver.com>
Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-08-28 18:35:11 -07:00
Hong Liu d3619177fc php: 7.2.8 -> 7.2.9
Upgrade php from 7.2.8 to 7.2.9

Signed-off-by: Hong Liu <hongl.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-08-28 09:36:28 -07:00
Changqing Li 0d59551c95 php: fix CVE-2017-9120
Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-08-21 00:22:12 -07:00
Changqing Li 422fbb7527 php: upgrade 7.2.7 -> 7.2.8
Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-08-11 20:16:53 -07:00
Ross Burton ff33f477c7 php: actually enable openssl
The PHP recipe depends on OpenSSL but support is disabled unless you pass
--with-openssl.

Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-07-22 00:06:05 -07:00
Ross Burton 40716b97d8 php: actually enable openssl
The PHP recipe depends on OpenSSL but support is disabled unless you pass
--with-openssl.  Add a PACKAGECONFIG for openssl and enable it by default.

Also for clarity pass --enable-opcache when the opcache is enabled.

Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-07-12 07:19:43 -07:00
Changqing Li 7226544396 php: upgrade 5.6.35 -> 5.6.36
Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-07-12 07:19:43 -07:00
changqing.li@windriver.com 188097b4e9 php: upgrade 7.2.4 -> 7.2.7
Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-06-29 07:00:52 -07:00
Hongxu Jia 75a84a920a php 7.2.4: fix do_compile failure on qemumips
It caused by a new variable is declared after the label

There is a build failure on mips:
...
|sljitNativeMIPS_common.c: In function 'sljit_has_cpu_feature':
|sljitNativeMIPS_common.c:506:3: error: a label can only be part
of a statement and a declaration is not a statement
|   sljit_sw fir;
|   ^~~~~~~~
...

Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-05-01 18:12:50 -07:00
Anuj Mittal 42a1737960 php: enable opcache by default
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-04-08 17:00:06 -07:00
Anuj Mittal 0d052a48c9 php: add opcache extension to PACKAGECONFIG
OPcache improves PHP performance by storing precompiled script bytecode
in shared memory, thereby removing the need for PHP to load and parse
scripts on each request [1].

Add an option to enable opcache in php. AC_CHECK_FUNC isn't suitable for a
cross-compile environment, so pass the configure options instead to force
dlopen detection that is necessary to have extension support enabled.

On a standard phpbench test, I see a performance improvement of > 40%.

[1] http://php.net/manual/en/book.opcache.php

Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-04-08 17:00:06 -07:00
Anuj Mittal 1816eb7779 php5: upgrade to 5.6.35
For changes, see:
http://php.net/ChangeLog-5.php#5.6.35

Split patches between php5 and php7 to ensure there are no
fuzz warnings for both the versions.

Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-04-08 17:00:06 -07:00
Anuj Mittal 2768c1deb3 php7: upgrade to 7.2.4
* For changes, see:
http://www.php.net/ChangeLog-7.php#7.2.4

* Remove patches as they've been upstreamed:
- 0001-Specify-tag-with-libtool.patch
- CVE-2017-16642.patch
- CVE-2018-5711.patch

* mcrypt module has been deprecated and as such dependency has been moved
from php.inc to php5 recipe.

* Refresh patches to avoid fuzz warnings.

* New patches to:
- Make sure libxml is detected using pkg-config instead of binconfig.
- Fix link time warnings (backport, see patch for details)

* Move the following patches to php5 from inc as they were getting applied
out of context:
- acinclude-xml2-config.patch
- 0001-acinclude-use-pkgconfig-for-libxml2-config.patch

License-Update: License is same, just a change in copyright year to 2018.

Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-04-08 17:00:06 -07:00
Anuj Mittal 08c5797ccb php: move patches to a single directory
Having two directories with version numbers just leads to unnecessary
churn everytime there's a version update.

We can have all patches in one single directory and differentiate b/w
specific version by prefix php5-/php7-

Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-04-08 17:00:06 -07:00
Li Zhou 83e474f369 php: Security Advisory - php - CVE-2018-5711
Porting the patch from <http://git.php.net/?p=php-src.git;a=commit;
h=8d6e9588671136837533fe3785657c31c5b52767> to solve CVE-2018-5711.

Signed-off-by: Li Zhou <li.zhou@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-03-16 19:12:26 -07:00
Andre McCurdy 5abacb2751 php: update stable version 5.6.31 -> 5.6.33
04 Jan 2017, PHP 5.6.33

 - GD:
   . Fixed bug #75571 (Potential infinite loop in gdImageCreateFromGifCtx). (cmb)

 - Phar:
   . Fixed bug #74782 (Reflected XSS in .phar 404 page). (Stas)

 26 Sep 2017, PHP 5.6.32

 - Date:
   . Fixed bug #75055 (Out-Of-Bounds Read in timelib_meridian()). (Derick)

 - mcrypt:
   . Fixed bug #72535 (arcfour encryption stream filter crashes php). (Leigh)

 - PCRE:
   . Fixed bug #75207 (applied upstream patch for CVE-2016-1283). (Anatol)

Signed-off-by: Andre McCurdy <armccurdy@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-02-23 20:28:55 -08:00
Martin Jansa 99aa19ff53 recipes: use oe.utils.conditional instead of deprecated base_conditional
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2018-02-01 13:48:27 +00:00
Joe Slater 1c15f75b34 php-native: eliminate SSTATEPOSTINSTFUNCS use
The use of SSTATEPOSTINSTFUNCS has been deprecated and is not
needed for php-native.  The current function always fails, forcing
a re-build of php-native.

Signed-off-by: Joe Slater <jslater@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-01-16 21:41:26 -08:00
Li Zhou 90f4b75fe7 php: Security Advisory - php - CVE-2017-16642
Porting the patch from <https://github.com/php/php-src/commit/
5c0455bf2c8cd3c25401407f158e820aa3b239e1> to solve CVE-2017-16642.

Signed-off-by: Li Zhou <li.zhou@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-11-30 09:13:32 -08:00
Derek Straka 0707846a98 php: add libgcc to the runtime depends
Avoids issues with 'libgcc_s.so.1 must be installed for pthread_cancel to work'

Signed-off-by: Derek Straka <derek@asterius.io>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2017-09-22 22:50:47 +00:00
Derek Straka 94888f1f77 php: update stable version to 5.6.31
Signed-off-by: Derek Straka <derek@asterius.io>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2017-09-22 22:50:47 +00:00
Derek Straka 6896f588b6 php: update version to 7.1.9
Signed-off-by: Derek Straka <derek@asterius.io>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2017-09-22 22:50:47 +00:00
Joe Slater 3cf117715f php: disable this version by default
There are many unaddressed CVEs which are fixed in 7.1.7
and later versions.  Allow the user to define php_5.6.26
to enable building the recipe.

Signed-off-by: Joe Slater <jslater@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2017-08-28 11:04:13 +02:00