Commit Graph

83 Commits

Author SHA1 Message Date
Changqing Li c467c5d609 php: Upgrade 7.2.9 -< 7.2.10
1. Upgrade 7.2.9 -> 7.2.10
2. php 5.x not support valgrind config, so move it to php_7.x.bb

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-09-24 11:49:45 -07:00
Khem Raj 2e07aa7804 Revert "php: actually enable openssl"
This reverts commit ff33f477c7.

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-09-05 13:59:15 -07:00
Slater, Joseph 840850e834 php: define PACKAGECONFIG[] for valgrind
configure will look by default for valgrind.h in some host directories.
We override this by setting --with-valgrind even if we do not want it.

The default value of PACKAGECONFIG does not enable valgrind support.

Signed-off-by: Joe Slater <joe.slater@windriver.com>
Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-08-28 18:35:11 -07:00
Hong Liu d3619177fc php: 7.2.8 -> 7.2.9
Upgrade php from 7.2.8 to 7.2.9

Signed-off-by: Hong Liu <hongl.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-08-28 09:36:28 -07:00
Changqing Li 0d59551c95 php: fix CVE-2017-9120
Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-08-21 00:22:12 -07:00
Changqing Li 422fbb7527 php: upgrade 7.2.7 -> 7.2.8
Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-08-11 20:16:53 -07:00
Ross Burton ff33f477c7 php: actually enable openssl
The PHP recipe depends on OpenSSL but support is disabled unless you pass
--with-openssl.

Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-07-22 00:06:05 -07:00
Ross Burton 40716b97d8 php: actually enable openssl
The PHP recipe depends on OpenSSL but support is disabled unless you pass
--with-openssl.  Add a PACKAGECONFIG for openssl and enable it by default.

Also for clarity pass --enable-opcache when the opcache is enabled.

Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-07-12 07:19:43 -07:00
Changqing Li 7226544396 php: upgrade 5.6.35 -> 5.6.36
Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-07-12 07:19:43 -07:00
changqing.li@windriver.com 188097b4e9 php: upgrade 7.2.4 -> 7.2.7
Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-06-29 07:00:52 -07:00
Hongxu Jia 75a84a920a php 7.2.4: fix do_compile failure on qemumips
It caused by a new variable is declared after the label

There is a build failure on mips:
...
|sljitNativeMIPS_common.c: In function 'sljit_has_cpu_feature':
|sljitNativeMIPS_common.c:506:3: error: a label can only be part
of a statement and a declaration is not a statement
|   sljit_sw fir;
|   ^~~~~~~~
...

Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-05-01 18:12:50 -07:00
Anuj Mittal 42a1737960 php: enable opcache by default
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-04-08 17:00:06 -07:00
Anuj Mittal 0d052a48c9 php: add opcache extension to PACKAGECONFIG
OPcache improves PHP performance by storing precompiled script bytecode
in shared memory, thereby removing the need for PHP to load and parse
scripts on each request [1].

Add an option to enable opcache in php. AC_CHECK_FUNC isn't suitable for a
cross-compile environment, so pass the configure options instead to force
dlopen detection that is necessary to have extension support enabled.

On a standard phpbench test, I see a performance improvement of > 40%.

[1] http://php.net/manual/en/book.opcache.php

Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-04-08 17:00:06 -07:00
Anuj Mittal 1816eb7779 php5: upgrade to 5.6.35
For changes, see:
http://php.net/ChangeLog-5.php#5.6.35

Split patches between php5 and php7 to ensure there are no
fuzz warnings for both the versions.

Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-04-08 17:00:06 -07:00
Anuj Mittal 2768c1deb3 php7: upgrade to 7.2.4
* For changes, see:
http://www.php.net/ChangeLog-7.php#7.2.4

* Remove patches as they've been upstreamed:
- 0001-Specify-tag-with-libtool.patch
- CVE-2017-16642.patch
- CVE-2018-5711.patch

* mcrypt module has been deprecated and as such dependency has been moved
from php.inc to php5 recipe.

* Refresh patches to avoid fuzz warnings.

* New patches to:
- Make sure libxml is detected using pkg-config instead of binconfig.
- Fix link time warnings (backport, see patch for details)

* Move the following patches to php5 from inc as they were getting applied
out of context:
- acinclude-xml2-config.patch
- 0001-acinclude-use-pkgconfig-for-libxml2-config.patch

License-Update: License is same, just a change in copyright year to 2018.

Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-04-08 17:00:06 -07:00
Anuj Mittal 08c5797ccb php: move patches to a single directory
Having two directories with version numbers just leads to unnecessary
churn everytime there's a version update.

We can have all patches in one single directory and differentiate b/w
specific version by prefix php5-/php7-

Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-04-08 17:00:06 -07:00
Li Zhou 83e474f369 php: Security Advisory - php - CVE-2018-5711
Porting the patch from <http://git.php.net/?p=php-src.git;a=commit;
h=8d6e9588671136837533fe3785657c31c5b52767> to solve CVE-2018-5711.

Signed-off-by: Li Zhou <li.zhou@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-03-16 19:12:26 -07:00
Andre McCurdy 5abacb2751 php: update stable version 5.6.31 -> 5.6.33
04 Jan 2017, PHP 5.6.33

 - GD:
   . Fixed bug #75571 (Potential infinite loop in gdImageCreateFromGifCtx). (cmb)

 - Phar:
   . Fixed bug #74782 (Reflected XSS in .phar 404 page). (Stas)

 26 Sep 2017, PHP 5.6.32

 - Date:
   . Fixed bug #75055 (Out-Of-Bounds Read in timelib_meridian()). (Derick)

 - mcrypt:
   . Fixed bug #72535 (arcfour encryption stream filter crashes php). (Leigh)

 - PCRE:
   . Fixed bug #75207 (applied upstream patch for CVE-2016-1283). (Anatol)

Signed-off-by: Andre McCurdy <armccurdy@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-02-23 20:28:55 -08:00
Martin Jansa 99aa19ff53 recipes: use oe.utils.conditional instead of deprecated base_conditional
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2018-02-01 13:48:27 +00:00
Joe Slater 1c15f75b34 php-native: eliminate SSTATEPOSTINSTFUNCS use
The use of SSTATEPOSTINSTFUNCS has been deprecated and is not
needed for php-native.  The current function always fails, forcing
a re-build of php-native.

Signed-off-by: Joe Slater <jslater@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-01-16 21:41:26 -08:00
Li Zhou 90f4b75fe7 php: Security Advisory - php - CVE-2017-16642
Porting the patch from <https://github.com/php/php-src/commit/
5c0455bf2c8cd3c25401407f158e820aa3b239e1> to solve CVE-2017-16642.

Signed-off-by: Li Zhou <li.zhou@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-11-30 09:13:32 -08:00
Derek Straka 0707846a98 php: add libgcc to the runtime depends
Avoids issues with 'libgcc_s.so.1 must be installed for pthread_cancel to work'

Signed-off-by: Derek Straka <derek@asterius.io>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2017-09-22 22:50:47 +00:00
Derek Straka 94888f1f77 php: update stable version to 5.6.31
Signed-off-by: Derek Straka <derek@asterius.io>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2017-09-22 22:50:47 +00:00
Derek Straka 6896f588b6 php: update version to 7.1.9
Signed-off-by: Derek Straka <derek@asterius.io>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2017-09-22 22:50:47 +00:00
Joe Slater 3cf117715f php: disable this version by default
There are many unaddressed CVEs which are fixed in 7.1.7
and later versions.  Allow the user to define php_5.6.26
to enable building the recipe.

Signed-off-by: Joe Slater <jslater@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2017-08-28 11:04:13 +02:00
Joe Slater e64c1a5de1 php: move to version 7.1.8 from 7.1.7
Only change is source version.

Signed-off-by: Joe Slater <jslater@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2017-08-28 11:04:12 +02:00
Khem Raj ad9df2b36a php7: upgrade to 7.1.7
License checksum changed due to opyright year changed to 2017
Fix build with clang/hardening

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2017-08-13 13:21:01 +02:00
dengke.du@windriver.com 6cd249225e php: fix install error for libphp*.so
Changed in V4:
	Add the tag: meta-oe

1. Different version php have different libphp*.so, so we need to install its
   corresponding libphp*.so, for example:

    php-7.1.0  libphp7.so
    php-5.6.26 libphp5.so

2. Fix php-5.6.26 compiling errors:

    ld: TSRM/.libs/TSRM.o: undefined reference to symbol
    'pthread_sigmask@@GLIBC_2.2.5'
    error adding symbols: DSO missing from command line

3. Create a configure script like 70_mod_php5, we name it 70_mod_php7, this
   file connect the php7 and the apache2, so they work together to let the
   LAMP works correctly.

Signed-off-by: Dengke Du <dengke.du@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2017-05-23 15:49:36 +02:00
Robert Yang 444e1fb198 php: remove PNBLACKLIST
It has been fixed since:
commit b5bb611637
Author: dengke.du@windriver.com <dengke.du@windriver.com>
Date:   Tue Mar 28 04:13:36 2017 -0400

    php: fix install failure

Also remove it for xdebug since php works now.

Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2017-04-18 14:21:53 +02:00
Martin Jansa cdb428e7c4 recipes: add removal date to PNBLACKLIST messages
* based on discussion in pndeprecated thread:
  https://patchwork.openembedded.org/patch/137573/
  update the messages to warn possible users that the
  recipe will be removed before the end of the next development
  cycle (before Yocto 2.4 is released).

* updated with:
  sed -i 's/^\(PNBLACKLIST.*".*\)"/\1 - the recipe will be removed on 2017-09-01 unless the issue is fixed"/g' `git grep PNBLACKLIST | sed 's/:.*//g' | sort -u | xargs`
* then noticed couple recipes being blacklisted only based on
  DISTRO_FEATURES, so removed those:
  meta-networking/recipes-support/lksctp-tools/lksctp-tools_1.0.17.bb
  meta-oe/recipes-connectivity/bluez/bluez-hcidump_2.5.bb
  meta-oe/recipes-connectivity/bluez/bluez4_4.101.bb
  meta-oe/recipes-connectivity/bluez/gst-plugin-bluetooth_4.101.bb
  meta-oe/recipes-navigation/foxtrotgps/foxtrotgps_1.1.1.bb
  meta-oe/recipes-navigation/gypsy/gypsy.inc
  meta-oe/recipes-navigation/navit/navit.inc
  meta-oe/recipes-support/opensync/libsyncml_0.5.4.bb

* if it isn't fixed by this date, it's fair game to be removed
  whenever someone gets around to i

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2017-04-05 19:36:45 +02:00
dengke.du@windriver.com b5bb611637 php: fix install failure
After switch to RSS(recipe specific sysroot), the php package failed when
installing.

This is because the build system can't find the file: pear.conf, that file
stay in "${D}/${STAGING_DIR_NATIVE}" directory before the switch, now stay
in "${RECIPE_SYSROOT_NATIVE}" directory, so we need to place it in correct
place.

Signed-off-by: Dengke Du <dengke.du@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2017-03-31 13:26:03 +02:00
Peter Kjellerstedt 0c31f55bcf Make use of the new bb.utils.filter() function
Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2017-03-07 13:30:26 +01:00
Martin Jansa b7f480cc4c python-edbus exquisite elementary libeweather unionfs-fuse xfsprogs gmtk devilspie2 gnome-backgrounds gnome-desktop gnome-mime-data gtk-engines gtksourceview2 libgnomekbd libidl-native onboard libgpewidget ubi-utils-klibc kexec-tools-klibc gupnp-igd gupnp-tools dvb-apps gstreamer mpd crda netcat-openbsd wireshark gnokii libmbim mosh networkmanager-openvpn libtelepathy dbus-daemon-proxy libdbus-c++ php vala-dbus-binding-tool collectd libgxim pywbem gtkhtml2 fbida fontforge libsexy wayland-fits xstdcmap xf86-video-glamo font-adobe-100dpi font-adobe-utopia-100dpi font-bh-100dpi font-bh-lucidatypewriter-100dpi font-misc-misc crash a2jmidid libsdl2-mixer libsdl-mixer minidlna sylpheed libsdl2-ttf libsdl-ttf ode pidgin postgresql syslog-ng usb-modeswitch xdg-user-dirs gateone python3-cryptography-vectors python3-ndg-httpsclient python-cryptography-vectors python-pbr bundler netdata menulibre openzone xfce4-verve-plugin iperf terminus-font xf86-video-nouveau ipmiutil klibc-utils pmbw multipath-tools gparted, gnome-system-monitor, php, vala-dbus-binding-tool, gtkmathview, lmsensors, postgresql: Blacklist
* fails repeatedly as reported in:
  http://lists.openembedded.org/pipermail/openembedded-devel/2017-February/111112.html

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2017-02-13 18:44:34 +01:00
Huang Qiyu c1ad61096e php: Add 7.1.0
1)Add php_7.1.0.bb
2)Delete php_5.5.38.bb,since it is replaced by php_5.6.26.bb.
3)Move pthread-check-threads-m4.patch out of 7.1.0, since it is integrated upstream.

Signed-off-by: Huang Qiyu <huangqy.fnst@cn.fujitsu.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2017-01-10 13:12:54 +01:00
Armin Kuster bf02c16be0 php: update 5.6.25
This update includes the following security fixes:
CVE-2016-7411 CVE-2016-7412 CVE-2016-7413
CVE-2016-7414 CVE-2016-7416 CVE-2016-7417
CVE-2016-7418

plus other bug fixes.
http://www.php.net/ChangeLog-5.php#5.6.26

Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2016-10-03 19:19:55 +02:00
Jackie Huang 99d4505d89 php: update to 5.5.38 and 5.6.25
These are security releases, several security
bugs are included:
http://php.net/ChangeLog-5.php#5.5.38
http://php.net/ChangeLog-5.php#5.6.25

Signed-off-by: Jackie Huang <jackie.huang@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2016-09-05 13:30:53 +02:00
Jackie Huang a37ad37a61 php: control ipv6 support based on DISTRO_FEATURES
Add PACKAGECONFIG for ipv6 and control it based
on DISTRO_FEATURES.

Signed-off-by: Jackie Huang <jackie.huang@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2016-09-05 13:30:49 +02:00
Robert P. J. Day 107689a133 meta-oe: Standardize use of "_append" versus use of "+="
Remove superfluous "+=", then manually add necessary leading space.

Signed-off-by: Robert P. J. Day <rpjday@crashcourse.ca>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2016-08-22 15:49:29 +02:00
Robert Yang 46248dca3c php: fix aclocal-copy aclocal-copy
Fixed do_install error:
| DEBUG: Executing shell function do_install
| cat: aclocal-copy/libtool.m4: No such file or directory
| cat: aclocal-copy/lt~obsolete.m4: No such file or directory
| cat: aclocal-copy/ltoptions.m4: No such file or directory
| cat: aclocal-copy/ltsugar.m4: No such file or directory
| cat: aclocal-copy/ltversion.m4: No such file or directory

Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2016-08-22 15:49:23 +02:00
Jackie Huang aa01ab95a3 php: update to 5.5.37 and 5.6.23
Includes many CVE fixes and other bug fixes:
http://php.net/ChangeLog-5.php#5.5.37
http://php.net/ChangeLog-5.php#5.6.23

Signed-off-by: Jackie Huang <jackie.huang@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2016-07-29 11:00:57 +02:00
Armin Kuster 9d18babf72 php: update to 5.6.18 and 6.6.32
Moved LIC_FILES_CHKSUM from .inc to .bb

5.6.18 changed do to yr update.

Includes: CVE-2016-2554

and

PCRE:
    Upgraded bundled PCRE library to 8.38. (CVE-2015-8383, CVE-2015-8386, CVE-2015-8387, CVE-2015-8389, CVE-2015-8390, CVE-2015-8391, CVE-2015-8393, CVE-2015-8394)

see http://php.net/ChangeLog-5.php#5.6.18 for more info.
http://php.net/ChangeLog-5.php#5.5.32

Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2016-03-02 00:03:18 +01:00
Derek Straka 3a43f6897c php: update to 5.6.17 and 5.5.31
Fixes CVE-2016-1903 and other bugs
https://secure.php.net/ChangeLog-5.php
https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-1903

Signed-off-by: Derek Straka <derek@asterius.io>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2016-02-01 15:58:06 +01:00
Derek Straka 7744e5992c php: check for existance of directory before 'rmdir' in do_install_append_class-target
Signed-off-by: Derek Straka <derek@asterius.io>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2016-02-01 15:58:06 +01:00
fan.xin c29091fa51 php: Upgrade 5.5.26 -> 5.5.30
Fix CVE-2015-7803, CVE-2015-7804 and other bugs
http://php.net/ChangeLog-5.php

Signed-off-by: Fan Xin <fan.xin@jp.fujitsu.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2015-12-18 12:36:56 +01:00
fan.xin ecaad588c7 php: Upgrade 5.6.12 -> 5.6.16
Fix CVE-2015-7803, CVE-2015-7804 and other bugs
http://php.net/ChangeLog-5.php

Signed-off-by: Fan Xin <fan.xin@jp.fujitsu.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2015-12-18 12:36:56 +01:00
Roy Li 7f478ed5cb php: create recipe for 5.6.12
The difference between 5.6.x and 5.5.x is in http://php.net/migration56
Most improvements in PHP 5.6.x have no impact on existing code.
There are a few incompatibilities and new features that should be
considered, and code should be tested before switching PHP versions
in production environments.

Signed-off-by: Roy Li <rongqing.li@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2015-08-31 20:07:59 +02:00
Roy Li 110d71ac10 php: fix a building failure on aarch64
When -O0 of gcc is used to compile the macro ZEND_SIGNED_MULTIPLY_LONG
in Zend/zend_multiply.h, the compiling will fail with the below error:
  : Assembler messages:
  :3113: Error: operand 2 should be an integer register -- `mul x1,[x29,200],[x29,192]'
  :3114: Error: operand 2 should be an integer register -- `smulh x0,[x29,200],[x29,192]'

Signed-off-by: Roy Li <rongqing.li@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2015-07-16 21:09:08 +02:00
Martin Jansa e836f8f936 gegl, crash, libsecret, mpg123, tinymembench, gammu, mosh, llvm3.3, breakpad, php, mozjs, libopus: disable thumb where it fails for qemuarm
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2015-07-16 21:09:05 +02:00
Kang Kai ee4e79caf9 php: upgrade from 5.5.24 to 5.5.26
Upgrade php from 5.5.24 to 5.5.26. Remove part 2 of phar-makefile.patch
which is useless.

Signed-off-by: Kai Kang <kai.kang@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2015-06-23 12:41:53 +02:00
Roy Li 622c960ea6 php: fix native php when it is from sstate
the native php is used to install the target pear, and native php
has hard-code path, so make wrapper to override the hard-code path

the configuration format of pear.conf for native php is like:
"type:path length:path", path will be replaced when populate sysroot
setscene, but the path length is not changed, and make php unable to
work, add a task to SSTATEPOSTINSTFUNCS to fix the path length

Signed-off-by: Roy Li <rongqing.li@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2015-06-23 12:41:52 +02:00