The recipe already rewrote the absolute ${S} path embedded in two
PowerPC VSX3 dispatch stubs (arithm.vsx3.cpp, convert.vsx3.cpp) before
packaging, but OpenCV's cmake ocv_add_dispatched_file() macro generates
one such stub per enabled ISA in every module (avx, avx2, avx512_skx,
sse4_1, sse4_2, ...). On x86-64-v3 that produced 69 more stub files
under ${B}/modules/* whose #include lines still embedded the raw
build-tree path, tripping the buildpaths QA check (TMPDIR and HOME)
once copied verbatim into the opencv-src package.
OEQA_BUILDPATHS_SKIP would only silence the HOME-directory half of the
check; TMPDIR has no skip mechanism in insane.bbclass. Generalize the
existing sed-based rewrite to find and fix every generated dispatch
stub under ${B}/modules, instead of a hardcoded two-file list, so any
ISA/module combination is covered.
AI-Generated: Uses Claude Code
Signed-off-by: Khem Raj <raj.khem@gmail.com>
pocketpy's upstream CMakeLists.txt defaults PK_BUILD_WITH_UNITY to ON
for CMake >= 3.16, which makes CMake generate a synthetic translation
unit (Unity/unity_pocketpy_c.c) that #includes every source file by
its absolute build-tree path. That generated file gets copied
verbatim into the pocketpy-src package's /usr/src/debug tree, so its
embedded paths trip the buildpaths QA check for both TMPDIR and the
build host's HOME directory.
Setting OEQA_BUILDPATHS_SKIP as suggested in the warning text would
only silence the HOME-directory half of the check; TMPDIR has no skip
mechanism in insane.bbclass and would keep firing. Instead, disable
the Unity build via -DPK_BUILD_WITH_UNITY=OFF so CMake emits normal
per-file translation units with no absolute paths in their contents.
AI-Generated: Uses Claude Code
Signed-off-by: Khem Raj <raj.khem@gmail.com>
ExternalWindow unconditionally declares an Xlib "Window xid" struct
member, but GTK4 only exposes the Window typedef (via gdk/x11/gdkx.h)
when it was itself built with the X11 backend. On a Wayland-only GTK4
build (GDK_WINDOWING_X11 undefined), this fails to compile even though
sushi's own X11 handle parsing still needs an integer member to track
x11: handles received over the window handle protocol.
Fall back to gulong, the same underlying type as Xlib's Window, when
GDK_WINDOWING_X11 is not defined.
AI-Generated: Uses Claude Code
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Same conflict as in the 2.66 series; 2.90.0 carries the fix. The API
version stays 2.68, so the pkg-config names are unchanged.
Depends on the glib-2.0 2.90.0 upgrade in oe-core.
AI-Generated: Uses Claude Code (Claude Opus 5)
Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
GEmblem and GDBus::ActionGroup are final types as of GLib 2.89.2, which
makes the generated headers of 2.66.9 conflict with the class structs
GLib declares:
error: conflicting declaration 'using GEmblemClass = struct _GEmblemClass'
2.66.10 stops deriving those types.
Depends on the glib-2.0 2.90.0 upgrade in oe-core.
AI-Generated: Uses Claude Code (Claude Opus 5)
Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
- New API functions:
- oscilloscope_buffer_create()
- oscilloscope_buffer_destroy()
- oscilloscope_buffer_push()
- widget_oscilloscope()
- widget_theme()
- Various bug fixes
- Add new scripts:
- csv.lua to export PCAN TRC trace files to CSV format for analysis in Excel/Calc.
- scope.lua to demonstrate how to use the new oscilloscope widget.
- Update trace.lua and replay.lua to be able to handle basic ISOBUS (ISO 11783)
CAN traffic.
Signed-off-by: Michael Fitzmayer <mail@michael-fitzmayer.de>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Switch to the alternate URI from videolan. Upgrade to release 4.2:
- Threaded Motion Estimation (Experimental feature)-It uses a
dedicated threadpool to precompute Motion Estimation in parallel.
Improves encoding speed upto 1.5x for 1080p & lower resolution on
multi core machines with low frequency setting. On high frequency
systems or on machines with low number of cores, the overhead of
additional Motion estimation work may outweigh parallelism
- Add new Levels 6.3 to 7.2 specified in ITU-T H.265 (V9) (09/2023)
and above
- Improve Slices feature with check zeroMv
- Enable frame parallelism with MCSTF feature
- Updated support to signal AOM FGM params
- Improve quality with SBRC feature 6.Updated DolbyVision P5 VUI
defaults
- API Support to enable Threaded Motion Estimation(-threaded-me)
- RISC V optimizations including SAD, SATD, DCT, IDCT, block copy,
pixel utilities, SAO, loopfilter, transpose kernels resulting in
2x encoding speed.
- ARM SIMD optimizations including the use of NEON and SVE
instruction set extensions. The following algorithms now have
optimized SIMD implementations: DST, IDCT, SSE, SSD,
intra_pred_planar, pelFilterLumaStrong, interpolation, planecopy,
dequant_normal, blockcopy, pixel variance resulting in 8% faster
encoding speed compared to v4.1
- Fix memory leaks (no command line option, SEI buffer, analysis
save/load)
- Fix chroma qp offset for non yuv444 inputs
- Fix max supported input resolution
- Fix bugs with ARM SIMD optimizations
- Fix Alpha and Multiview feature flag support in x265_config
- Fix test harness issues, CMake errors
- Fix inconsistent output with aq-motion
- Fix crash with hist-scenecut on high bit-depth builds
- Fix lookahead concurrency bug
- Fix shared link issue (R_X86_64_PC32), yuv recon output issue,
rd-refine and dynamic-refine issue, inputs for Windows named
pipe, weighted prediction delta_chroma_offset, crf and vbv issue
in abr-ladder, psnr and ssim reported with MCSTF feature,
internally overflowed VBV variables
This work was sponsored by GOVCERT.LU.
Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Drop the three backports, which are part of the release, and rebase the
dbus-launch patch onto the reworked make-dconf-override-db.sh.
libnotify is now checked unconditionally unless disabled, so add a
libnotify PACKAGECONFIG, enabled with x11 since only the X11 panel
uses it. ibus-native needs the generated ibusresources.h. The internal
compose table is generated at build time and reads ./Compose before
the X11 locale dir, so copy it from libx11-native instead of touching
the host's. The wayland GIR needs libibus from the build tree on the
qemu library path.
Tested by building ibus and ibus-native for x86-64.
AI-Generated: Uses Claude Code (Claude Opus 5.5)
Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Upgrade to release 2.13.5:
- Allow reuse of validators when plugins are set
- Fix missing GC traversal on some pydantic-core struct fields
- Fix missing GC traversal in pydantic-core for
GeneralFieldsSerializer
- Count validated model fields once in smart unions
This work was sponsored by GOVCERT.LU.
Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Upgrade to release 2.46.5 and keep all crates encapsulated in file
python3-pydantic-core-crates.inc. Drop the patch that enables
getrandom on all musl platforms because it has been merged in the
upstrea.
Release 2.46.5 brings the following changes:
- Fix missing GC traversal in pydantic-core for
GeneralFieldsSerializer
- Fix missing GC traversal on some pydantic-core struct fields
- Count validated model fields once in smart unions
This work was sponsored by GOVCERT.LU.
Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Upgrade to release 1.8.0:
- Reading of entity groups: entity_groups key in info dictionary,
tells which images form a stereo pair in spatial photos.
- Decoding of embedded thumbnails: HeifImage.get_thumbnail method
and draft in the Pillow plugin, Image.thumbnail() uses them
instead of decoding the full image.
- Minimum required libheif version is 1.23.4.
- libheif was updated from the 1.23.3 to 1.23.4 version.
- libde265 was updated from the 1.1.2 to 1.1.3 version.
- Segmentation fault when opening a file whose metadata item type
is not valid UTF-8.
- Pillow plugin: load() of a multi-frame image reloaded the frame
data on every call, discarding in-place changes and failing after
thumbnail().
- A depth image of an item type that libheif cannot decode made the
whole file unreadable with libheif 1.23.4, such depth images are
now skipped.
- Type checkers treated the names imported from pillow_heif as
private since the py.typed marker was added in 1.7.0:
Pyright/Pylance and mypy --strict reported them as not exported,
Pyright/Pylance autocompletion did not offer them.
This work was sponsored by GOVCERT.LU.
Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Quick previewer for Nautilus, started over D-Bus when a file is
selected and space is pressed. It is a gjs application, so meson is
told where gjs and env live on the target through a cross file, which
also keeps the build host paths out of the two wrapper scripts.
AI-Generated: Uses Claude Code (Claude Fable 5.1)
Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Without -Dlibc set, systemd's in-tree musl support was disabled and the
static libsystemd.a build failed on musl (missing printf.h).
Signed-off-by: Greg Breen <gregbree@amazon.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
From 2ae37918536db0431b0667fc4800a0b15b9e1a80 Mon Sep 17 00:00:00 2001
From: Corey Siltala <csiltala@atcorp.com>
Date: Tue, 22 Sep 2026 19:01:49 -0500
Subject: [PATCH] bmon: upgrade 4.0 -> 5.0
Note: ownership of bmon repo was transferred from Thomas Graf (tgraf)
to Jafar Al-Gharaibeh (Jafaral)
Fixes:
- out_curses: use xcalloc instead of a fixed buffer
- Avoid trying to include <values.h> on Android
- Fix typographical errors
- curses: Fix seperator lines
- Fix build in FreeBSD/DragonflyBSD
- fix segfault on element removal
- fix: Fix memory leaks in module_set()
- fix: Convert usage of strdup/free to xstrdup/xfree
- Fix compile issue in OpenBSD
- Fix spelling and grammar in docs and comments
Features:
- Allow numeric colors in bmonrc
- curses: Add CTRL-N/CTRL-P for next/previous element
- feat: Add IPv4/IPv6 addresses to additional info
- feat: Add configure option to disable IPv6 in netlink module
- feat: Add ability to toggle TC elements
- curses: render graphs with Braille cells
- display filters for TC ingress and egress
- Add support for JSON output
- Remove the 'Really quit' dialog and just exit cleanly
Misc:
- Update to autoconf of the common era
See full release notes at https://github.com/Jafaral/bmon/releases/tag/v5.0
Signed-off-by: Corey Siltala <csiltala@atcorp.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Commit c175507f1c ("classes/vala: remove obsolete logic") in oe-core
dropped the removal of vapigen.m4 bundled with sources.
The copy shipped in the libxfce4util tarball does not prefix the paths
it reads from vapigen.pc with PKG_CONFIG_SYSROOT_DIR, and since it is
found first via AC_CONFIG_MACRO_DIRS([m4]) it takes precedence over the
one from vala. VAPIGEN and VAPIGEN_MAKEFILE then point to the build
host, libxfce4util-1.0.vapi is never generated and do_install fails in
install-vapiDATA.
Remove it so that the one shipped by vala is used instead.
AI-Generated: Uses Claude Code
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Commit c175507f1c ("classes/vala: remove obsolete logic") dropped the
removal of vapigen.m4 bundled with sources
That macro does prefix the paths it reads from vapigen.pc with
PKG_CONFIG_SYSROOT_DIR, but older copies bundled by projects such as
ibus do not, and since these are found first via ACLOCAL_AMFLAGS = -I m4
they take precedence.
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Upgrade to release 1.23.5 with the following security issues:
- CVE-2026-XXXXX (GHSA-v8qw-hwjv-44hw) Memory exhaustion through a
mismatch between the container and the bitstream image size. A
crafted image can declare a small size in its ispe property while
the bitstream declares a much larger coded frame. The
container-level checks used the ispe size, so the oversized
bitstream reached the decoder, which allocated a frame buffer for
the in-band size before libheif rejected the mismatch. The
advisory demonstrated this for AV1 with the libaom backend (a
351-byte AVIF declaring 64x64 but coding up to 27648x27648,
allocating hundreds of MB to more than 10 GB), but the same class
affects every codec whose real frame size lives in the bitstream.
The coded size is now checked against max_image_size_pixels in
the codec-independent decode path, before any bytes reach a
decoder plugin: all AV1 sequence headers, all HEVC/AVC/VVC SPS
NAL units (including those carried in the item data, not only the
ones in the configuration record), the JPEG SOF marker and the
JPEG 2000 SIZ reference grid are scanned for the largest coded
size. (high)
- CVE-2026-XXXXX (GHSA-qwpf-5wf7-r996) Heap use-after-free and
double free when encoding an image that carries a TAI timestamp,
including transcoding a file with an itai property.
ImageDescription shallow-copied its raw heif_tai_timestamp_packet
pointer, and a temporary in ImageItem::encode_to_bitstream_and_boxes()
freed the packet while the item and the source image still held
it. The timestamp is now stored by value. (medium)
- CVE-2026-XXXXX (GHSA-9c75-9g8r-4728) Memory amplification through
a JPEG 2000 pclr box declaring zero palette columns. The
entry-count bound was skipped for zero columns, so an 11-byte box
allocated 65,535 empty palette entries, and nested j2kH containers
could repeat this within the child and nesting limits: a 3 KB file
reached about 330 MB RSS, none of it charged to max_total_memory.
Zero columns are rejected (ISO/IEC 15444-1 requires 1 to 255),
the byte bound is unconditional, and the palette storage is
charged to the memory limits. (medium)
- CVE-2026-XXXXX (GHSA-r7gr-2xm2-23wf) Heap out-of-bounds read in
alpha compositing for uncompressed (unci) images whose colour
planes have different bit depths. Op_flatten_alpha_plane read
every plane through the sample type of the first colour plane, so
an 8-bit blue plane next to 16-bit red and green planes was read
with a halved stride past its end, and the bytes ended up in the
composited output. ColorState now tracks one bit depth per plane,
and the operator declines mixed sample widths at planning time.
(medium)
- CVE-2026-XXXXX (GHSA-q492-cfcm-895h) The OpenJPEG decoder
plugin's pre-decode size check bounded the JPEG 2000 window span
(x1-x0)*(y1-y0) but not the absolute reference-grid coordinates,
so a codestream with a 17-pixel window on a grid near the 32-bit
boundary reached opj_decode(). Against OpenJPEG 2.3.1 this
produced a heap-buffer-overflow write inside OpenJPEG (the class
of CVE-2020-6851); OpenJPEG 2.5.4 rejects the input. The
reference-grid area is now bounded as well. (low)
- (GHSA-qfj5-c4pq-q998) Heap out-of-bounds read in the uncompressed
encoder when an application attached a separate alpha plane to an
image with an interleaved chroma format. The interleaved encoders
took their component list from the chroma format (three entries)
but decided whether to write alpha from the presence of an alpha
plane, and indexed the list at [3]. heif_image_add_plane() now
rejects a separate alpha plane on interleaved images, and the
encoders derive both decisions from the chroma format. Only
reachable through the public API; decoding never produces such an
image. (low)
- (GHSA-7pwf-qh74-p35w) The caller's heif_security_limits were not
applied when parsing a mini box (the MIAF minimized image format)
or the av1C/hvcC blob embedded in it; the built-in defaults were
used instead. An application that tightened the limits got no
enforcement of its max_memory_block_size or max_total_memory on
such files. The allocations are bounded by the bytes present in
the box, so this could not amplify memory use. (low)
This work was sponsored by GOVCERT.LU.
Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Ankur Tyagi
Khem Raj
Markus Volk
Kamil Panek
Michael Fitzmayer
Jason Schonberg
Leon Anavi
Jaipaul Cheernam
Greg Breen
Ayoub Zaki
Alistair Francis
Corey J. Siltala
Gianfranco Costamagna