Commit graph

17 commits

Author SHA1 Message Date
Andre McCurdy
d00f88b8eb bash_3.2.48: dont include target CFLAGS in host LDFLAGS
Building the host tool 'mkbuiltins' will fail if the target CFLAGS
contains an option which isn't supported by the host's gcc. To prevent
the issue, define LDFLAGS_FOR_BUILD based on CFLAGS_FOR_BUILD instead
of CFLAGS.

(From OE-Core rev: 7a8ec63f38f7a387e01343fbb971b75a66e0f851)

Signed-off-by: Andre McCurdy <armccurdy@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-08-10 12:40:28 -07:00
Robert Yang
7c504b44ef bash 3.2.48: disable parallel build
It's Makefile has the two rules:
$(BUILTINS_LIBRARY): $(BUILTIN_DEFS) $(BUILTIN_C_SRC) config.h ${BASHINCDIR}/memalloc.h version.h
    @(cd $(DEFDIR) && $(MAKE) $(MFLAGS) DEBUG=${DEBUG} libbuiltins.a ) || exit 1

${DEFDIR}/builtext.h: $(BUILTIN_DEFS)
    @(cd $(DEFDIR) && $(MAKE) $(MFLAGS) builtext.h ) || exit 1

which causes parallel issues:
mkbuiltins.o: file not recognized: File truncated
collect2: ld returned 1 exit status

I don't have any good ideas to fix the problem, so disable parallel
build for it.

(From OE-Core rev: efbee563af4ab56f93ac0a6238426d1d3eb80b98)

Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-03-10 10:47:46 +00:00
Mark Hatle
fc37a44a01 bash: update and CVE-2014-6278 fix
Update both bash 3.2.48 (to 57), and bash 4.3 (to 30) to fix the remaining
'shellshock' security issues, CVE-2014-6278.

(From OE-Core rev: a2709547644ae417fbd5435e1372068c7cd5db4c)

Signed-off-by: Mark Hatle <mark.hatle@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2014-10-06 16:03:13 +01:00
Mark Hatle
94d2fea672 bash: Upgrade bash to latest patch level to fix CVEs
We upgrade bash_4.3 to patch revision 29, and bash_3.2.48 to 56.

There are numerous community bug fixes included with this set, but the key
items are:

bash32-052      CVE-2014-6271                           9/24/2014
bash32-053      CVE-2014-7169                           9/26/2014
bash32-054      exported function namespace change      9/27/2014
bash32-055      CVE-2014-7186/CVE-2014-7187             10/1/2014
bash32-056      CVE-2014-6277                           10/2/2014

bash43-025      CVE-2014-6271                           9/24/2014
bash43-026      CVE-2014-7169                           9/26/2014
bash43-027      exported function namespace change      9/27/2014
bash43-028      CVE-2014-7186/CVE-2014-7187             10/1/2014
bash43-029      CVE-2014-6277                           10/2/2014

(From OE-Core rev: 43deeff0c6b0ea7729d3e5f1887dfd1647dea1da)

Signed-off-by: Mark Hatle <mark.hatle@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2014-10-06 15:15:51 +01:00
Khem Raj
d6709b0133 bash: Fix CVE-2014-7169
This is a followup patch to incomplete CVE-2014-6271 fix
code execution via specially-crafted environment

Change-Id: Ibb0a587ee6e09b8174e92d005356e822ad40d4ed
(From OE-Core rev: 76a2d6b83472995edbe967aed80f0fcbb784b3fc)

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2014-09-29 12:13:35 +01:00
Ross Burton
215e7b98ae bash: fix CVE-2014-6271
CVE-2014-6271 aka ShellShock.

"GNU Bash through 4.3 processes trailing strings after function definitions in
the values of environment variables, which allows remote attackers to execute
arbitrary code via a crafted environment."

(From OE-Core rev: 798d833c9d4bd9ab287fa86b85b4d5f128170ed3)

Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2014-09-29 12:12:46 +01:00
Muhammad Shakeel
3f7e8ad53e bash: Add ptest
ptest support was already added for v4.2 but for the distros
using GPLv2 version of bash (3.2.48) this update is required.

(From OE-Core rev: d054da760deda0c965619372209b50f8db964e1c)

Signed-off-by: Muhammad Shakeel <muhammad_shakeel@mentor.com>
Signed-off-by: Saul Wold <sgw@linux.intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2013-07-29 13:08:59 +01:00
Saul Wold
181e76c4b9 bash: fix mkbuiltins build failure
Same patch for non-gplv3 version:

http://git.yoctoproject.org/cgit/cgit.cgi/poky/commit/?id=1fd9a16d2a4594a4e9179dc7353ac51ce32eb712

[YOCTO #3646]

(From OE-Core rev: d00acdbfa7d10804ff832009888c441fda51e412)

Signed-off-by: Saul Wold <sgw@linux.intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2013-01-09 15:05:25 +00:00
Martin Ertsaas
22a4046ab3 bash: Make it possible to run bash 3.2.48 instead of 4.2.
bash-3.2.48 did not provide the linking from sh to bash, making it unusable.
Moving the license part out of the bash.inc file, and into bash_4.2.bb file makes
us able to use that file also for bash_3.2.48.bb, which makes maintaining both
at the same time a lot easier.

(From OE-Core rev: e7b82cb4d107bfbfa5c939d406dd6ce6615b24e1)

Signed-off-by: Martin Ertsaas <mertsas@cisco.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2012-09-24 11:30:30 +01:00
Scott Garman
1eac51a76c PR bump for all recipes that DEPEND on ncurses
The packaging changes to ncurses could break package feeds,
so bump the PR on everythong that DEPENDS on ncurses.

(From OE-Core rev: be92256917c157284ef8370bb93bbf443849b2e1)

Signed-off-by: Scott Garman <scott.a.garman@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2012-03-15 00:11:40 +00:00
Saul Wold
985a5e72ba bash: Add SRC_URI Checksums for GPLv2
(From OE-Core rev: c1a9304eb8e40c6b34b190d82dad1d6d3499713a)

Signed-off-by: Saul Wold <sgw@linux.intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2011-12-22 13:13:47 +00:00
Saul Wold
779d07db63 bash: Add SRC_URI Checksums for GPLv2
(From OE-Core rev: ae8c1f2aacd0ed2625757f57b575962db1386e4c)

Signed-off-by: Saul Wold <sgw@linux.intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2011-12-13 12:28:09 +00:00
Richard Purdie
3b856e1cdf bash: Ensure we fully reautoconf the recipes so site data is used
This ensures bug 487 (missing job control functionality) really gets fixed.

[YOCTO #487]

(From OE-Core rev: 08b78066bd5a9ff2819a42eb4263ee0a78cddb97)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2011-11-04 17:05:31 +00:00
Tom Rini
bc7967f041 Various: Switch to using GNU_MIRROR
(From OE-Core rev: bd9e899d1b07813c78f2dc2e5c46a67937839065)

Signed-off-by: Tom Rini <tom_rini@mentor.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2011-03-23 15:44:02 +00:00
Mark Hatle
92a9d59fcc recipes: pre/post actions
A number of the recipes did not properly label their pre and post
actions, causing the actions to occur in all split packages.  This
was corrected by defaulting to _${PN} in most cases.

Signed-off-by: Mark Hatle <mark.hatle@windriver.com>
2011-02-12 00:31:43 +00:00
Kevin Tian
ce9d6ebf34 bash: use /bin/bash as default shell when bash is included
though bash is included in LSB profile, it doesn't use update-alternative
to take effect and thus it's still busybox behaving as /bin/sh.

Signed-off-by: Kevin Tian <kevin.tian@intel.com>
2011-01-28 16:49:12 +00:00
Richard Purdie
29d6678fd5 Major layout change to the packages directory
Having one monolithic packages directory makes it hard to find things
and is generally overwhelming. This commit splits it into several
logical sections roughly based on function, recipes.txt gives more
information about the classifications used.

The opportunity is also used to switch from "packages" to "recipes"
as used in OpenEmbedded as the term "packages" can be confusing to
people and has many different meanings.

Not all recipes have been classified yet, this is just a first pass
at separating things out. Some packages are moved to meta-extras as
they're no longer actively used or maintained.

Signed-off-by: Richard Purdie <rpurdie@linux.intel.com>
2010-08-27 15:29:45 +01:00
Renamed from meta/packages/bash/bash_3.2.48.bb (Browse further)