Complete Yocto mirror with license table for TQMa6UL (2038-compliance)
- 264 license table entries with exact download URLs (224/264 resolved) - Complete sources/ directory with all BitBake recipes - Build configuration: tqma6ul-multi-mba6ulx, spaetzle (musl) - Full traceability for Softwarefreigabeantrag - GCC 13.4.0, Linux 6.6.102, U-Boot 2023.04, musl 1.2.4 - License distribution: GPL-2.0 (24), MIT (23), GPL-2.0+ (18), BSD-3 (16)
This commit is contained in:
@@ -0,0 +1,58 @@
|
||||
From 671e0d091b40ef7deb4a9d43e0dbed2a44edbec8 Mon Sep 17 00:00:00 2001
|
||||
From: Matthew Fernandez <matthew.fernandez@gmail.com>
|
||||
Date: Sat, 9 Sep 2023 01:03:04 -0700
|
||||
Subject: [PATCH] Autotools: fix: do not put '$prefix' based paths in
|
||||
compilation flags
|
||||
|
||||
This was causing problems with cross-compilation with a dedicated sysroot,
|
||||
because compilation would incorrectly use headers and libraries from the
|
||||
`--prefix` path. The `--prefix` path is meant to indicate a target path to
|
||||
install to, not a path from which to source dependent libraries.
|
||||
|
||||
Gitlab: fixes #2442
|
||||
Reported-by: Daniel Klauer
|
||||
Suggested-by: Daniel Klauer
|
||||
|
||||
Upstream-Status: Backport [https://gitlab.com/graphviz/graphviz/-/commit/012d250a903e13114bce3ba40995fb957fed7848]
|
||||
Signed-off-by: Daniel Klauer <daniel.klauer@gin.de>
|
||||
---
|
||||
CHANGELOG.md | 3 +++
|
||||
configure.ac | 8 --------
|
||||
2 files changed, 3 insertions(+), 8 deletions(-)
|
||||
|
||||
diff --git a/CHANGELOG.md b/CHANGELOG.md
|
||||
index b9b7e8e08..3a15fd256 100644
|
||||
--- a/CHANGELOG.md
|
||||
+++ b/CHANGELOG.md
|
||||
@@ -39,6 +39,9 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
|
||||
longer fails due to missing PHP files. #2388
|
||||
- Syntax for a loop in `gvmap.sh` has been corrected. This was a regression in
|
||||
Graphviz 2.50.0. #2404
|
||||
+- The Autotools build system no longer uses headers and libraries from the
|
||||
+ `--prefix` path given on the command line. This previously caused
|
||||
+ cross-compilation to incorrectly pick up host headers and libraries. #2442
|
||||
|
||||
## [8.0.5] – 2023-04-30
|
||||
|
||||
diff --git a/configure.ac b/configure.ac
|
||||
index 573a3ee5d..7d53346de 100644
|
||||
--- a/configure.ac
|
||||
+++ b/configure.ac
|
||||
@@ -190,14 +190,6 @@ if test "x${prefix}" = "xNONE"; then
|
||||
AC_SUBST([prefix])
|
||||
fi
|
||||
|
||||
-# automatically check for other dependencies in $prefix first
|
||||
-if test "x${prefix}" != "x/usr"; then
|
||||
- CPPFLAGS="$CPPFLAGS -I${prefix}/include"
|
||||
- LDFLAGS="$LDFLAGS -L${prefix}/lib"
|
||||
- PKG_CONFIG_PATH="$prefix/lib/pkgconfig$PATHSEPARATOR$PKG_CONFIG_PATH"
|
||||
- export PKG_CONFIG_PATH
|
||||
-fi
|
||||
-
|
||||
dnl -----------------------------------
|
||||
# Static/Shared binaries
|
||||
|
||||
--
|
||||
2.34.1
|
||||
|
||||
@@ -0,0 +1,37 @@
|
||||
From 361f274ca901c3c476697a6404662d95f4dd43cb Mon Sep 17 00:00:00 2001
|
||||
From: Matthew Fernandez <matthew.fernandez@gmail.com>
|
||||
Date: Wed, 24 Jul 2024 13:19:03 +0800
|
||||
Subject: [PATCH] gvc gvconfig_plugin_install_from_config: more tightly scope
|
||||
'gv_api'
|
||||
|
||||
CVE: CVE-2023-46045
|
||||
Upstream-Status: Backport [https://gitlab.com/graphviz/graphviz/-/commit/361f274ca901c3c476697a6404662d95f4dd43cb]
|
||||
|
||||
Signed-off-by: Yogita Urade <yogita.urade@windriver.com>
|
||||
---
|
||||
lib/gvc/gvconfig.c | 3 +--
|
||||
1 file changed, 1 insertion(+), 2 deletions(-)
|
||||
|
||||
diff --git a/lib/gvc/gvconfig.c b/lib/gvc/gvconfig.c
|
||||
index d03de09..2f31b98 100644
|
||||
--- a/lib/gvc/gvconfig.c
|
||||
+++ b/lib/gvc/gvconfig.c
|
||||
@@ -174,7 +174,6 @@ static int gvconfig_plugin_install_from_config(GVC_t * gvc, char *s)
|
||||
{
|
||||
char *package_path, *name, *api;
|
||||
const char *type;
|
||||
- api_t gv_api;
|
||||
int quality;
|
||||
int nest = 0;
|
||||
gvplugin_package_t *package;
|
||||
@@ -189,7 +188,7 @@ static int gvconfig_plugin_install_from_config(GVC_t * gvc, char *s)
|
||||
package = gvplugin_package_record(gvc, package_path, name);
|
||||
do {
|
||||
api = token(&nest, &s);
|
||||
- gv_api = gvplugin_api(api);
|
||||
+ const api_t gv_api = gvplugin_api(api);
|
||||
do {
|
||||
if (nest == 2) {
|
||||
type = token(&nest, &s);
|
||||
--
|
||||
2.25.1
|
||||
@@ -0,0 +1,38 @@
|
||||
From 3f31704cafd7da3e86bb2861accf5e90c973e62a Mon Sep 17 00:00:00 2001
|
||||
From: Matthew Fernandez <matthew.fernandez@gmail.com>
|
||||
Date: Wed, 24 Jul 2024 13:39:39 +0800
|
||||
Subject: [PATCH] gvc gvconfig_plugin_install_from_config: more tightly scope
|
||||
'api'
|
||||
|
||||
CVE: CVE-2023-46045
|
||||
Upstream-Status: Backport [https://gitlab.com/graphviz/graphviz/-/commit/3f31704cafd7da3e86bb2861accf5e90c973e62a]
|
||||
|
||||
Signed-off-by: Yogita Urade <yogita.urade@windriver.com>
|
||||
---
|
||||
lib/gvc/gvconfig.c | 4 ++--
|
||||
1 file changed, 2 insertions(+), 2 deletions(-)
|
||||
|
||||
diff --git a/lib/gvc/gvconfig.c b/lib/gvc/gvconfig.c
|
||||
index 2f31b98..ea0d81b 100644
|
||||
--- a/lib/gvc/gvconfig.c
|
||||
+++ b/lib/gvc/gvconfig.c
|
||||
@@ -172,7 +172,7 @@ static char *token(int *nest, char **tokens)
|
||||
|
||||
static int gvconfig_plugin_install_from_config(GVC_t * gvc, char *s)
|
||||
{
|
||||
- char *package_path, *name, *api;
|
||||
+ char *package_path, *name;
|
||||
const char *type;
|
||||
int quality;
|
||||
int nest = 0;
|
||||
@@ -187,7 +187,7 @@ static int gvconfig_plugin_install_from_config(GVC_t * gvc, char *s)
|
||||
name = "x";
|
||||
package = gvplugin_package_record(gvc, package_path, name);
|
||||
do {
|
||||
- api = token(&nest, &s);
|
||||
+ const char *api = token(&nest, &s);
|
||||
const api_t gv_api = gvplugin_api(api);
|
||||
do {
|
||||
if (nest == 2) {
|
||||
--
|
||||
2.25.1
|
||||
@@ -0,0 +1,33 @@
|
||||
From a95f977f5d809915ec4b14836d2b5b7f5e74881e Mon Sep 17 00:00:00 2001
|
||||
From: Matthew Fernandez <matthew.fernandez@gmail.com>
|
||||
Date: Wed, 24 Jul 2024 15:02:06 +0800
|
||||
Subject: [PATCH] gvc: detect plugin installation failure and display an error
|
||||
|
||||
Gitlab: fixes #2441
|
||||
Reported-by: GJDuck
|
||||
|
||||
CVE: CVE-2023-46045
|
||||
Upstream-Status: Backport [https://gitlab.com/graphviz/graphviz/-/commit/a95f977f5d809915ec4b14836d2b5b7f5e74881e]
|
||||
|
||||
Signed-off-by: Yogita Urade <yogita.urade@windriver.com>
|
||||
---
|
||||
lib/gvc/gvconfig.c | 4 ++++
|
||||
1 file changed, 4 insertions(+)
|
||||
|
||||
diff --git a/lib/gvc/gvconfig.c b/lib/gvc/gvconfig.c
|
||||
index ea0d81b..1eccc70 100644
|
||||
--- a/lib/gvc/gvconfig.c
|
||||
+++ b/lib/gvc/gvconfig.c
|
||||
@@ -189,6 +189,10 @@ static int gvconfig_plugin_install_from_config(GVC_t * gvc, char *s)
|
||||
do {
|
||||
const char *api = token(&nest, &s);
|
||||
const api_t gv_api = gvplugin_api(api);
|
||||
+ if (gv_api == (api_t)-1) {
|
||||
+ agerr(AGERR, "config error: %s %s not found\n", package_path, api);
|
||||
+ return 0;
|
||||
+ }
|
||||
do {
|
||||
if (nest == 2) {
|
||||
type = token(&nest, &s);
|
||||
--
|
||||
2.25.1
|
||||
@@ -0,0 +1,6 @@
|
||||
#!/bin/sh
|
||||
|
||||
echo "Setting up graphviz..."
|
||||
|
||||
# Create /usr/lib/graphviz/config6
|
||||
$OECORE_NATIVE_SYSROOT/usr/bin/dot -c
|
||||
@@ -0,0 +1,120 @@
|
||||
SUMMARY = "Graph Visualization Tools"
|
||||
HOMEPAGE = "http://www.graphviz.org"
|
||||
LICENSE = "EPL-1.0"
|
||||
LIC_FILES_CHKSUM = "file://COPYING;md5=9109f5fc16cf963fb3cdd32781b3ce04"
|
||||
|
||||
DEPENDS = " \
|
||||
bison-native \
|
||||
groff-native \
|
||||
libtool \
|
||||
gdk-pixbuf \
|
||||
cairo \
|
||||
pango \
|
||||
expat \
|
||||
freetype \
|
||||
"
|
||||
DEPENDS:append:class-target = " ${BPN}-native"
|
||||
DEPENDS:append:class-nativesdk = " ${BPN}-native"
|
||||
|
||||
inherit autotools-brokensep pkgconfig gettext qemu
|
||||
|
||||
SRC_URI = "https://gitlab.com/api/v4/projects/4207231/packages/generic/${BPN}-releases/${PV}/${BP}.tar.xz \
|
||||
file://0001-Autotools-fix-do-not-put-prefix-based-paths-in-compi.patch \
|
||||
file://CVE-2023-46045-0001.patch \
|
||||
file://CVE-2023-46045-0002.patch \
|
||||
file://CVE-2023-46045-0003.patch \
|
||||
"
|
||||
SRC_URI:append:class-nativesdk = "\
|
||||
file://graphviz-setup.sh \
|
||||
"
|
||||
SRC_URI[sha256sum] = "d593695fdaa8a19297523b679ad13d3ef2027b0b7f14cc2bc23e77969ed81565"
|
||||
|
||||
PACKAGECONFIG ??= "librsvg"
|
||||
PACKAGECONFIG[librsvg] = "--with-librsvg,--without-librsvg,librsvg"
|
||||
|
||||
EXTRA_OECONF:append = " PS2PDF=/bin/echo --disable-man-pdfs"
|
||||
|
||||
EXTRA_OECONF:class-target = "\
|
||||
--with-expatincludedir=${STAGING_INCDIR} \
|
||||
--with-expatlibdir=${STAGING_LIBDIR} \
|
||||
--without-included-ltdl \
|
||||
--disable-java \
|
||||
--disable-tcl \
|
||||
--disable-r \
|
||||
--disable-sharp \
|
||||
"
|
||||
EXTRA_OECONF:class-nativesdk = "\
|
||||
--with-expatincludedir=${STAGING_INCDIR} \
|
||||
--with-expatlibdir=${STAGING_LIBDIR} \
|
||||
--without-included-ltdl \
|
||||
--disable-java \
|
||||
--disable-tcl \
|
||||
--disable-r \
|
||||
--disable-sharp \
|
||||
"
|
||||
EXTRA_OECONF:class-native = "\
|
||||
--disable-tcl \
|
||||
"
|
||||
CFLAGS:append:class-target = " -D_typ_ssize_t=1 -D_long_double=1"
|
||||
CFLAGS:append:class-nativesdk = " -D_typ_ssize_t=1 -D_long_double=1"
|
||||
do_configure:prepend() {
|
||||
cd ${S}
|
||||
# create version.m4 and ignore libtoolize errors
|
||||
./autogen.sh NOCONFIG || true
|
||||
}
|
||||
|
||||
do_install:append:class-nativesdk() {
|
||||
# graphviz-setup.sh must be executed at SDK installation
|
||||
install -d ${D}${SDKPATHNATIVE}/post-relocate-setup.d
|
||||
install -m 0755 ${WORKDIR}/graphviz-setup.sh ${D}${SDKPATHNATIVE}/post-relocate-setup.d
|
||||
}
|
||||
FILES:${PN}:class-nativesdk += "${SDKPATHNATIVE}"
|
||||
|
||||
# create /usr/lib/graphviz/config6
|
||||
graphviz_sstate_postinst() {
|
||||
mkdir -p ${SYSROOT_DESTDIR}${bindir}
|
||||
dest=${SYSROOT_DESTDIR}${bindir}/postinst-${PN}
|
||||
echo '#!/bin/sh' > $dest
|
||||
echo '' >> $dest
|
||||
echo 'dot -c' >> $dest
|
||||
chmod 0755 $dest
|
||||
}
|
||||
SYSROOT_PREPROCESS_FUNCS:append:class-native = " graphviz_sstate_postinst"
|
||||
|
||||
pkg_postinst:${PN} () {
|
||||
if [ -n "$D" ]; then
|
||||
if ${@bb.utils.contains('MACHINE_FEATURES', 'qemu-usermode', 'true', 'false', d)}; then
|
||||
${@qemu_run_binary(d, '$D', '${bindir}/dot')} -c
|
||||
fi
|
||||
else
|
||||
dot -c
|
||||
fi
|
||||
}
|
||||
|
||||
pkg_postrm:${PN} () {
|
||||
rm -f $D${libdir}/graphviz/config*
|
||||
rmdir --ignore-fail-on-non-empty $D${libdir}/graphviz
|
||||
}
|
||||
|
||||
PACKAGE_WRITE_DEPS += "qemu-native"
|
||||
|
||||
PACKAGES =+ "${PN}-python ${PN}-perl ${PN}-demo"
|
||||
|
||||
FILES:${PN}-python += "${PYTHON_SITEPACKAGES_DIR}/ ${libdir}/graphviz/python/"
|
||||
FILES:${PN}-perl += "${libdir}/perl5/*/vendor_perl/ ${libdir}/graphviz/perl/"
|
||||
FILES:${PN}-demo += "${datadir}/graphviz/demo/"
|
||||
|
||||
RDEPENDS:${PN}-perl += "perl"
|
||||
RDEPENDS:${PN}-python += "python3"
|
||||
RDEPENDS:${PN}-demo += "python3 perl"
|
||||
|
||||
RRECOMMENDS:${PN} = "liberation-fonts"
|
||||
|
||||
INSANE_SKIP:${PN}-perl = "dev-so"
|
||||
INSANE_SKIP:${PN}-python = "dev-so"
|
||||
|
||||
FILES_SOLIBSDEV:append = " ${libdir}/graphviz/lib*${SOLIBSDEV}"
|
||||
|
||||
RRECOMMENDS:${PN} = "liberation-fonts"
|
||||
|
||||
BBCLASSEXTEND = "native nativesdk"
|
||||
Reference in New Issue
Block a user