From 82764e782276941e8bed922c65deb65439ff2e04 Mon Sep 17 00:00:00 2001 From: Stefan Agner Date: Fri, 3 Sep 2021 00:20:44 +0200 Subject: [PATCH] Update buildroot to 2021.02.4 (#1522) Signed-off-by: Stefan Agner --- buildroot/CHANGES | 51 ++ buildroot/Config.in | 17 +- buildroot/DEVELOPERS | 23 +- buildroot/Makefile | 5 +- .../stm32f469-disco/extlinux.conf | 4 + .../stm32f469-disco/flash.sh | 4 +- .../stm32f469-disco/genimage.cfg | 27 + .../stm32f469-disco/linux.fragment | 1 + ...sco-don-t-force-init-in-chosen-boota.patch | 33 -- .../stm32f469-disco/post-build.sh | 4 + .../stm32f469-disco/readme.txt | 16 +- buildroot/boot/arm-trusted-firmware/Config.in | 21 + .../arm-trusted-firmware.mk | 11 +- buildroot/boot/grub2/grub2.mk | 8 +- buildroot/boot/uboot/uboot.mk | 7 +- .../microchip_sam9x60ek_mmc_dev_defconfig | 4 + buildroot/configs/stm32f469_disco_defconfig | 22 +- buildroot/docs/manual/manual.html | 26 +- buildroot/docs/manual/manual.pdf | Bin 584482 -> 584364 bytes buildroot/docs/manual/manual.text | 17 +- buildroot/docs/manual/resources.txt | 10 +- buildroot/linux/Config.in | 2 +- buildroot/linux/linux.hash | 12 +- buildroot/package/apache/apache.mk | 1 + buildroot/package/audit/S02auditd | 4 +- ...01-Fix-NULL-pointer-crashes-from-175.patch | 152 ++++++ buildroot/package/avahi/avahi.mk | 4 + buildroot/package/bind/bind.mk | 1 + .../0010-bfd-elf32-or1k-fix-ld-assert.patch | 35 -- ...ith-plt-link-failure-for-local-calls.patch | 59 +++ ...elocation-R_OR1K_GOT_AHI16-for-gotha.patch | 256 +++++++++ ...K_GOT16-overflow-failures-in-presenc.patch | 61 +++ ...ge-plt_relocs-when-generating-plt-en.patch | 500 ++++++++++++++++++ ...or1k-fix-building-with-gcc-version-5.patch | 50 ++ ...tive-relocation-against-dynamic-on-P.patch | 59 +++ .../0003-bfd-elf32-or1k-fix-ld-assert.patch | 35 -- ...ith-plt-link-failure-for-local-calls.patch | 59 +++ ...elocation-R_OR1K_GOT_AHI16-for-gotha.patch | 256 +++++++++ ...K_GOT16-overflow-failures-in-presenc.patch | 61 +++ ...ge-plt_relocs-when-generating-plt-en.patch | 500 ++++++++++++++++++ ...or1k-fix-building-with-gcc-version-5.patch | 50 ++ ...tive-relocation-against-dynamic-on-P.patch | 59 +++ .../0003-bfd-elf32-or1k-fix-ld-assert.patch | 35 -- ...ith-plt-link-failure-for-local-calls.patch | 59 +++ ...elocation-R_OR1K_GOT_AHI16-for-gotha.patch | 256 +++++++++ ...K_GOT16-overflow-failures-in-presenc.patch | 61 +++ ...ge-plt_relocs-when-generating-plt-en.patch | 500 ++++++++++++++++++ ...or1k-fix-building-with-gcc-version-5.patch | 50 ++ ...tive-relocation-against-dynamic-on-P.patch | 59 +++ .../0003-bfd-elf32-or1k-fix-ld-assert.patch | 35 -- ...ith-plt-link-failure-for-local-calls.patch | 59 +++ ...elocation-R_OR1K_GOT_AHI16-for-gotha.patch | 256 +++++++++ ...K_GOT16-overflow-failures-in-presenc.patch | 61 +++ ...ge-plt_relocs-when-generating-plt-en.patch | 500 ++++++++++++++++++ ...or1k-fix-building-with-gcc-version-5.patch | 50 ++ ...tive-relocation-against-dynamic-on-P.patch | 59 +++ buildroot/package/bird/bird.mk | 1 + buildroot/package/bluez5_utils/Config.in | 51 +- buildroot/package/boinc/boinc.mk | 1 + ...3-update_passwd-fix-context-variable.patch | 41 -- ...ss_gunzip-Fix-DoS-if-gzip-is-corrupt.patch | 58 -- buildroot/package/busybox/busybox.hash | 4 +- buildroot/package/busybox/busybox.mk | 5 +- buildroot/package/chrony/chrony.mk | 1 + buildroot/package/chrony/chrony.service | 4 + buildroot/package/clamav/clamav.mk | 1 + buildroot/package/cryptsetup/cryptsetup.mk | 6 + buildroot/package/cwiid/Config.in | 2 +- buildroot/package/dnsmasq/dnsmasq.mk | 1 + buildroot/package/docker-cli/docker-cli.hash | 2 +- buildroot/package/docker-cli/docker-cli.mk | 2 +- ...-port-forwarding-with-ipv6.disable-1.patch | 74 --- .../package/docker-engine/docker-engine.hash | 2 +- .../package/docker-engine/docker-engine.mk | 2 +- .../dovecot-pigeonhole.hash | 2 +- .../dovecot-pigeonhole/dovecot-pigeonhole.mk | 2 +- buildroot/package/dovecot/dovecot.hash | 2 +- buildroot/package/dovecot/dovecot.mk | 6 +- buildroot/package/e2fsprogs/e2fsprogs.mk | 1 + ...dd-BUILD_WITH_STACK_PROTECTOR-option.patch | 54 ++ ...ags.cmake-properly-detect-availabili.patch | 58 -- buildroot/package/exiv2/exiv2.hash | 4 +- buildroot/package/exiv2/exiv2.mk | 9 +- ...-vulnerability-unset-escape-variable.patch | 158 ++++++ buildroot/package/fail2ban/fail2ban.hash | 2 +- buildroot/package/fail2ban/fail2ban.mk | 5 +- buildroot/package/feh/feh.mk | 1 + buildroot/package/fetchmail/fetchmail.hash | 8 +- buildroot/package/fetchmail/fetchmail.mk | 2 +- buildroot/package/flac/flac.mk | 2 +- .../package/fluxbox/0001-fixes-bug-1138.patch | 25 + buildroot/package/gawk/gawk.mk | 6 + .../0001-xtensa-fix-PR-target-91880.patch | 50 -- ...move-SELFTEST_DEPS-before-including-.patch | 81 --- ...issue-with-set_got-clobbering-LR-r9.patch} | 4 +- ...RANT-for-OpenRISC-when-pthread-is-p.patch} | 6 +- ...et-92095-internal-error-with-O1-mcp.patch} | 28 +- buildroot/package/gcc/Config.in.host | 2 +- buildroot/package/gcc/gcc.hash | 4 +- buildroot/package/gcr/gcr.mk | 4 +- ...x-Python3.9-related-runtime-problems.patch | 193 +++++++ ...x-Python3.9-related-runtime-problems.patch | 193 +++++++ ...x-Python3.9-related-runtime-problems.patch | 227 ++++++++ buildroot/package/gdb/Config.in | 1 - buildroot/package/gdb/Config.in.host | 3 +- ...eson.build-link-with-lintl-if-needed.patch | 45 -- ...ixbuf-io.c-fix-build-without-gmodule.patch | 41 -- buildroot/package/gdk-pixbuf/Config.in | 2 +- buildroot/package/gdk-pixbuf/gdk-pixbuf.hash | 5 +- buildroot/package/gdk-pixbuf/gdk-pixbuf.mk | 2 +- .../package/gesftpserver/gesftpserver.mk | 4 + .../glibc.hash | 2 +- buildroot/package/glibc/glibc.mk | 2 +- buildroot/package/go/go.hash | 2 +- buildroot/package/go/go.mk | 2 +- buildroot/package/gptfdisk/gptfdisk.hash | 6 +- buildroot/package/gptfdisk/gptfdisk.mk | 2 +- buildroot/package/gqrx/Config.in | 2 +- buildroot/package/granite/granite.mk | 9 +- ...stem-base-target.scm-support-riscv32.patch | 33 ++ buildroot/package/hdparm/Config.in | 4 +- buildroot/package/hdparm/hdparm.hash | 7 +- buildroot/package/hdparm/hdparm.mk | 4 +- .../package/heirloom-mailx/heirloom-mailx.mk | 2 + buildroot/package/htop/htop.hash | 2 +- buildroot/package/htop/htop.mk | 10 +- buildroot/package/ibrcommon/ibrcommon.mk | 1 + .../package/ibrdtn-tools/ibrdtn-tools.mk | 1 + buildroot/package/ibrdtn/ibrdtn.mk | 1 + buildroot/package/ibrdtnd/ibrdtnd.mk | 4 +- .../intel-microcode/intel-microcode.hash | 2 +- .../intel-microcode/intel-microcode.mk | 2 +- buildroot/package/iodine/iodine.mk | 1 + ...igure.ac-use-pkg-config-to-find-numa.patch | 38 ++ .../0001-core-Fix-compiling-on-RHEL-9.patch | 34 ++ buildroot/package/libass/libass.hash | 2 +- buildroot/package/libass/libass.mk | 2 +- .../0001-Add-disable-doc-option.patch | 54 -- buildroot/package/libconfig/libconfig.hash | 2 +- buildroot/package/libconfig/libconfig.mk | 8 +- ...ncorrect-const-on-variable-that-is-m.patch | 32 -- buildroot/package/libcurl/Config.in | 2 +- buildroot/package/libcurl/libcurl.hash | 4 +- buildroot/package/libcurl/libcurl.mk | 6 +- .../package/libfreeimage/libfreeimage.mk | 2 + buildroot/package/libfuse3/libfuse3.hash | 2 +- buildroot/package/libfuse3/libfuse3.mk | 5 +- buildroot/package/libgcrypt/libgcrypt.hash | 6 +- buildroot/package/libgcrypt/libgcrypt.mk | 2 +- .../package/libgtk3/0001-no-gtk-doc.patch | 2 +- .../0002-fix-introspection-check.patch | 2 +- buildroot/package/libgtk3/libgtk3.hash | 4 +- buildroot/package/libgtk3/libgtk3.mk | 2 +- buildroot/package/libgudev/libgudev.mk | 7 + buildroot/package/libhtp/libhtp.hash | 2 +- buildroot/package/libhtp/libhtp.mk | 2 +- buildroot/package/libjson/libjson.mk | 2 +- buildroot/package/libkrb5/libkrb5.hash | 4 +- buildroot/package/libkrb5/libkrb5.mk | 17 +- buildroot/package/libloki/libloki.mk | 1 + ...-CANONICAL_HOST-cannot-be-determined.patch | 31 -- ...-drop-usage-of-git-at-configure-time.patch | 79 +++ .../0002-modsecurity.pc.in-add-lstdc.patch | 32 ++ ...test-for-uClinux-in-configure-script.patch | 28 - ...Revert-Fix-maxminddb-link-on-FreeBSD.patch | 28 + buildroot/package/libmodsecurity/Config.in | 6 +- .../libmodsecurity/libmodsecurity.hash | 6 +- .../package/libmodsecurity/libmodsecurity.mk | 7 +- .../0001-ndptool.c-Fix-musl-build.patch | 30 -- ...e-needed-for-integer-type-definition.patch | 27 + ...0003-src-Use-stdint-types-everywhere.patch | 489 +++++++++++++++++ ...ude-Sync-with-current-kernel-headers.patch | 112 ++++ ...002-include-Sync-with-kernel-headers.patch | 114 ++++ buildroot/package/libnice/libnice.mk | 7 + .../package/libodb-boost/libodb-boost.mk | 1 + .../package/libodb-mysql/libodb-mysql.mk | 4 +- .../package/libodb-pgsql/libodb-pgsql.mk | 1 + buildroot/package/libodb/libodb.mk | 1 + buildroot/package/libpcap/libpcap.hash | 4 +- buildroot/package/libpcap/libpcap.mk | 2 +- buildroot/package/libqmi/libqmi.mk | 7 + buildroot/package/libressl/libressl.mk | 1 + buildroot/package/librsvg/librsvg.hash | 4 +- buildroot/package/librsvg/librsvg.mk | 2 +- buildroot/package/libtasn1/libtasn1.hash | 6 +- buildroot/package/libtasn1/libtasn1.mk | 4 +- ...erate-XDR-header-files-from-.x-sour.patch} | 0 ...s-needed-to-build-rpcbind-on-top-of.patch} | 0 buildroot/package/libuci/libuci.mk | 4 + buildroot/package/libxmlrpc/libxmlrpc.hash | 2 +- buildroot/package/libxmlrpc/libxmlrpc.mk | 2 +- .../package/linux-firmware/linux-firmware.mk | 6 +- .../package/linux-headers/Config.in.host | 12 +- buildroot/package/linuxptp/linuxptp.hash | 8 +- buildroot/package/linuxptp/linuxptp.mk | 3 +- buildroot/package/lrzsz/lrzsz.mk | 1 + ...sinfo.h-to-fix-build-with-MUSL-libc.patch} | 0 buildroot/package/lvm2/Config.in | 1 + .../0001-add-extra-check-for-librt.patch | 12 +- buildroot/package/mariadb/mariadb.hash | 6 +- buildroot/package/mariadb/mariadb.mk | 10 +- buildroot/package/mbedtls/mbedtls.hash | 4 +- buildroot/package/mbedtls/mbedtls.mk | 2 +- buildroot/package/mesa3d/Config.in | 3 +- buildroot/package/monit/monit.mk | 1 + buildroot/package/mono/mono.mk | 2 +- buildroot/package/mosquitto/mosquitto.hash | 4 +- buildroot/package/mosquitto/mosquitto.mk | 2 +- buildroot/package/mpd/Config.in | 8 +- buildroot/package/mpg123/mpg123.mk | 1 - buildroot/package/mpv/mpv.mk | 4 + ...the-file-descriptor-before-returning.patch | 25 - buildroot/package/nbd/nbd.hash | 10 +- buildroot/package/nbd/nbd.mk | 2 +- buildroot/package/neard/Config.in | 4 +- buildroot/package/netsnmp/netsnmp.hash | 3 + buildroot/package/nettle/nettle.hash | 4 +- buildroot/package/nettle/nettle.mk | 2 +- buildroot/package/nginx-modsecurity/Config.in | 7 +- .../package/nmap/0002-ncat-unix-socket.patch | 30 ++ buildroot/package/nodejs/nodejs.hash | 4 +- buildroot/package/nodejs/nodejs.mk | 2 +- buildroot/package/ntp/ntpd.service | 4 + buildroot/package/openntpd/ntpd.service | 4 + ...hecksum.c-fix-build-with-32-bits-MMX.patch | 41 ++ buildroot/package/openswan/openswan.mk | 2 +- buildroot/package/pango/pango.hash | 4 +- buildroot/package/pango/pango.mk | 2 +- buildroot/package/pcre2/pcre2.mk | 1 + .../package/perl-crypt-openssl-rsa/Config.in | 1 + .../perl-crypt-openssl-rsa.mk | 3 +- buildroot/package/php/php.hash | 2 +- buildroot/package/php/php.mk | 2 +- buildroot/package/pixman/pixman.mk | 10 +- buildroot/package/pkg-generic.mk | 1 + buildroot/package/polkit/S50polkit | 51 ++ buildroot/package/polkit/polkit.mk | 5 + buildroot/package/postgresql/pg_config | 4 + ...configure-fix-check_link_silent-test.patch | 41 ++ .../proxychains-ng/proxychains-ng.hash | 6 +- .../package/proxychains-ng/proxychains-ng.mk | 4 +- ...1-unix-uxutils.h-fix-build-on-uclibc.patch | 41 ++ ...o-reject-trivial-success-of-userauth.patch | 448 ++++++++++++++++ buildroot/package/putty/putty.hash | 12 +- buildroot/package/putty/putty.mk | 7 +- .../package/python-dataproperty/Config.in | 3 +- .../package/python-django/python-django.hash | 4 +- .../package/python-django/python-django.mk | 4 +- buildroot/package/python-pysftp/Config.in | 4 + .../python-urllib3/python-urllib3.hash | 4 +- .../package/python-urllib3/python-urllib3.mk | 4 +- buildroot/package/python/python.mk | 3 +- ...e-the-build-of-pyc-files-conditional.patch | 6 +- ...taddrinfo-configure-test-when-cross-.patch | 2 +- ...re-to-disable-the-build-of-certain-e.patch | 10 +- ...ook-in-usr-lib-termcap-for-libraries.patch | 2 +- .../0006-Don-t-add-multiarch-paths.patch | 2 +- .../0007-Abort-on-failed-module-build.patch | 2 +- ...locale-and-set-to-default-when-addin.patch | 2 +- ...Add-importlib-fix-for-PEP-3147-issue.patch | 6 +- ...-disable-installation-of-test-module.patch | 6 +- .../0014-Add-an-option-to-disable-pydoc.patch | 12 +- ...015-Add-an-option-to-disable-lib2to3.patch | 14 +- ...option-to-disable-the-sqlite3-module.patch | 8 +- ...d-an-option-to-disable-the-tk-module.patch | 8 +- ...-option-to-disable-the-curses-module.patch | 6 +- .../0019-Add-an-option-to-disable-expat.patch | 8 +- ...-Add-an-option-to-disable-CJK-codecs.patch | 2 +- .../0021-Add-an-option-to-disable-NIS.patch | 2 +- ...Add-an-option-to-disable-unicodedata.patch | 2 +- .../0023-Add-an-option-to-disable-IDLE.patch | 10 +- ...024-Add-an-option-to-disable-decimal.patch | 4 +- ...on-to-disable-the-ossaudiodev-module.patch | 2 +- ...an-option-to-disable-openssl-support.patch | 2 +- ...ption-to-disable-the-readline-module.patch | 2 +- ...to-disable-zlib-bzip2-and-xz-modules.patch | 2 +- ...-Fix-cross-compiling-the-uuid-module.patch | 2 +- ...Add-an-option-to-disable-uuid-module.patch | 2 +- ...up-CC-print-multiarch-output-for-mus.patch | 2 +- ...teration-error-in-_ExecutorManagerTh.patch | 29 + buildroot/package/python3/python3.hash | 6 +- buildroot/package/python3/python3.mk | 2 +- ...to-be-safe-if-downstream-write-fails.patch | 86 +++ buildroot/package/qpdf/qpdf.mk | 3 + buildroot/package/redis/redis.hash | 2 +- buildroot/package/redis/redis.mk | 2 +- buildroot/package/ripgrep/ripgrep.mk | 1 + buildroot/package/ruby/ruby.hash | 4 +- buildroot/package/ruby/ruby.mk | 2 +- buildroot/package/samba4/samba4.hash | 4 +- buildroot/package/samba4/samba4.mk | 4 +- ...t_len-before-reading-protocol-header.patch | 60 --- buildroot/package/slirp/slirp.hash | 2 +- buildroot/package/slirp/slirp.mk | 9 +- buildroot/package/spice/spice.hash | 2 +- buildroot/package/spice/spice.mk | 7 +- buildroot/package/suricata/suricata.hash | 2 +- buildroot/package/suricata/suricata.mk | 2 +- buildroot/package/sysdig/Config.in | 2 +- buildroot/package/tcpdump/tcpdump.hash | 4 +- buildroot/package/tcpdump/tcpdump.mk | 2 +- buildroot/package/tftpd/tftpd.hash | 6 +- buildroot/package/tftpd/tftpd.mk | 7 +- buildroot/package/thrift/thrift.hash | 6 +- buildroot/package/thrift/thrift.mk | 5 +- buildroot/package/tor/tor.hash | 2 +- buildroot/package/tor/tor.mk | 3 +- ...port-fix-fixed-AES-key-CVE-2021-3565.patch | 47 ++ buildroot/package/tpm2-tools/tpm2-tools.mk | 1 + buildroot/package/trinity/trinity.mk | 1 + buildroot/package/uboot-tools/uboot-tools.mk | 5 +- buildroot/package/uclibc/uclibc.mk | 1 + buildroot/package/util-linux/util-linux.hash | 2 +- buildroot/package/util-linux/util-linux.mk | 2 +- buildroot/package/vlc/vlc.hash | 8 +- buildroot/package/vlc/vlc.mk | 2 +- .../wireless-regdb/wireless-regdb.hash | 2 +- .../package/wireless-regdb/wireless-regdb.mk | 2 +- buildroot/package/wireshark/wireshark.hash | 6 +- buildroot/package/wireshark/wireshark.mk | 6 +- buildroot/package/wolfssl/wolfssl.hash | 2 +- buildroot/package/wolfssl/wolfssl.mk | 2 +- .../xapp_fonttosfnt/xapp_fonttosfnt.hash | 6 +- .../x11r7/xapp_fonttosfnt/xapp_fonttosfnt.mk | 2 +- .../x11r7/xlib_libX11/xlib_libX11.hash | 6 +- .../package/x11r7/xlib_libX11/xlib_libX11.mk | 2 +- .../package/x11r7/xlib_libxshmfence/Config.in | 3 + .../x11r7/xserver_xorg-server/Config.in | 3 +- .../xserver_xorg-server.hash | 6 +- .../xserver_xorg-server.mk | 4 +- buildroot/support/misc/Vagrantfile | 2 +- .../package/test_uboot_openssl_pkgconfig.py | 19 + buildroot/toolchain/Config.in | 7 + buildroot/utils/scanpypi | 27 +- 334 files changed, 7541 insertions(+), 1389 deletions(-) create mode 100644 buildroot/board/stmicroelectronics/stm32f469-disco/extlinux.conf create mode 100644 buildroot/board/stmicroelectronics/stm32f469-disco/genimage.cfg create mode 100644 buildroot/board/stmicroelectronics/stm32f469-disco/linux.fragment delete mode 100644 buildroot/board/stmicroelectronics/stm32f469-disco/patches/linux/0001-ARM-stm32f249-disco-don-t-force-init-in-chosen-boota.patch create mode 100755 buildroot/board/stmicroelectronics/stm32f469-disco/post-build.sh create mode 100644 buildroot/package/avahi/0001-Fix-NULL-pointer-crashes-from-175.patch delete mode 100644 buildroot/package/binutils/2.32/0010-bfd-elf32-or1k-fix-ld-assert.patch create mode 100644 buildroot/package/binutils/2.32/0010-or1k-Fix-issue-with-plt-link-failure-for-local-calls.patch create mode 100644 buildroot/package/binutils/2.32/0011-or1k-Implement-relocation-R_OR1K_GOT_AHI16-for-gotha.patch create mode 100644 buildroot/package/binutils/2.32/0012-or1k-Avoid-R_OR1K_GOT16-overflow-failures-in-presenc.patch create mode 100644 buildroot/package/binutils/2.32/0013-or1k-Support-large-plt_relocs-when-generating-plt-en.patch create mode 100644 buildroot/package/binutils/2.32/0014-bfd-elf32-or1k-fix-building-with-gcc-version-5.patch create mode 100644 buildroot/package/binutils/2.32/0015-or1k-fix-pc-relative-relocation-against-dynamic-on-P.patch delete mode 100644 buildroot/package/binutils/2.34/0003-bfd-elf32-or1k-fix-ld-assert.patch create mode 100644 buildroot/package/binutils/2.34/0003-or1k-Fix-issue-with-plt-link-failure-for-local-calls.patch create mode 100644 buildroot/package/binutils/2.34/0004-or1k-Implement-relocation-R_OR1K_GOT_AHI16-for-gotha.patch create mode 100644 buildroot/package/binutils/2.34/0005-or1k-Avoid-R_OR1K_GOT16-overflow-failures-in-presenc.patch create mode 100644 buildroot/package/binutils/2.34/0006-or1k-Support-large-plt_relocs-when-generating-plt-en.patch create mode 100644 buildroot/package/binutils/2.34/0007-bfd-elf32-or1k-fix-building-with-gcc-version-5.patch create mode 100644 buildroot/package/binutils/2.34/0008-or1k-fix-pc-relative-relocation-against-dynamic-on-P.patch delete mode 100644 buildroot/package/binutils/2.35.2/0003-bfd-elf32-or1k-fix-ld-assert.patch create mode 100644 buildroot/package/binutils/2.35.2/0003-or1k-Fix-issue-with-plt-link-failure-for-local-calls.patch create mode 100644 buildroot/package/binutils/2.35.2/0004-or1k-Implement-relocation-R_OR1K_GOT_AHI16-for-gotha.patch create mode 100644 buildroot/package/binutils/2.35.2/0005-or1k-Avoid-R_OR1K_GOT16-overflow-failures-in-presenc.patch create mode 100644 buildroot/package/binutils/2.35.2/0006-or1k-Support-large-plt_relocs-when-generating-plt-en.patch create mode 100644 buildroot/package/binutils/2.35.2/0007-bfd-elf32-or1k-fix-building-with-gcc-version-5.patch create mode 100644 buildroot/package/binutils/2.35.2/0008-or1k-fix-pc-relative-relocation-against-dynamic-on-P.patch delete mode 100644 buildroot/package/binutils/2.36.1/0003-bfd-elf32-or1k-fix-ld-assert.patch create mode 100644 buildroot/package/binutils/2.36.1/0003-or1k-Fix-issue-with-plt-link-failure-for-local-calls.patch create mode 100644 buildroot/package/binutils/2.36.1/0004-or1k-Implement-relocation-R_OR1K_GOT_AHI16-for-gotha.patch create mode 100644 buildroot/package/binutils/2.36.1/0005-or1k-Avoid-R_OR1K_GOT16-overflow-failures-in-presenc.patch create mode 100644 buildroot/package/binutils/2.36.1/0006-or1k-Support-large-plt_relocs-when-generating-plt-en.patch create mode 100644 buildroot/package/binutils/2.36.1/0007-bfd-elf32-or1k-fix-building-with-gcc-version-5.patch create mode 100644 buildroot/package/binutils/2.36.1/0008-or1k-fix-pc-relative-relocation-against-dynamic-on-P.patch delete mode 100644 buildroot/package/busybox/0003-update_passwd-fix-context-variable.patch delete mode 100644 buildroot/package/busybox/0004-decompress_gunzip-Fix-DoS-if-gzip-is-corrupt.patch delete mode 100644 buildroot/package/docker-engine/0001-fix-port-forwarding-with-ipv6.disable-1.patch create mode 100644 buildroot/package/exiv2/0001-add-BUILD_WITH_STACK_PROTECTOR-option.patch delete mode 100644 buildroot/package/exiv2/0001-cmake-compilerFlags.cmake-properly-detect-availabili.patch create mode 100644 buildroot/package/fail2ban/0001-fixed-possible-RCE-vulnerability-unset-escape-variable.patch create mode 100644 buildroot/package/fluxbox/0001-fixes-bug-1138.patch delete mode 100644 buildroot/package/gcc/9.3.0/0001-xtensa-fix-PR-target-91880.patch delete mode 100644 buildroot/package/gcc/9.3.0/0004-gcc-Makefile.in-move-SELFTEST_DEPS-before-including-.patch rename buildroot/package/gcc/{9.3.0/0002-or1k-Fix-issue-with-set_got-clobbering-LR-r9.patch => 9.4.0/0001-or1k-Fix-issue-with-set_got-clobbering-LR-r9.patch} (98%) rename buildroot/package/gcc/{9.3.0/0003-gcc-define-_REENTRANT-for-RISC-V-when-pthread-is-pas.patch => 9.4.0/0002-gcc-define-_REENTRANT-for-OpenRISC-when-pthread-is-p.patch} (88%) rename buildroot/package/gcc/{9.3.0/0005-Revert-re-PR-target-92095-internal-error-with-O1-mcp.patch => 9.4.0/0003-Revert-re-PR-target-92095-internal-error-with-O1-mcp.patch} (93%) create mode 100644 buildroot/package/gdb/4ecb98fbc2f94dbe01b69384afbc515107de73df/0001-Fix-Python3.9-related-runtime-problems.patch create mode 100644 buildroot/package/gdb/8.3.1/0007-Fix-Python3.9-related-runtime-problems.patch create mode 100644 buildroot/package/gdb/9.2/0007-Fix-Python3.9-related-runtime-problems.patch delete mode 100644 buildroot/package/gdk-pixbuf/0001-meson.build-link-with-lintl-if-needed.patch delete mode 100644 buildroot/package/gdk-pixbuf/0002-gdk-pixbuf-gdk-pixbuf-io.c-fix-build-without-gmodule.patch rename buildroot/package/glibc/{2.32-37-g760e1d287825fa91d4d5a0cc921340c740d803e2 => 2.32-50-g737efa27fca5c97f566a2005687fda7d6659cd2e}/glibc.hash (70%) create mode 100644 buildroot/package/guile/0004-module-system-base-target.scm-support-riscv32.patch create mode 100644 buildroot/package/irqbalance/0002-configure.ac-use-pkg-config-to-find-numa.patch create mode 100644 buildroot/package/keepalived/0001-core-Fix-compiling-on-RHEL-9.patch delete mode 100644 buildroot/package/libconfig/0001-Add-disable-doc-option.patch delete mode 100644 buildroot/package/libcurl/0001-bearssl-remove-incorrect-const-on-variable-that-is-m.patch delete mode 100644 buildroot/package/libmodsecurity/0001-Fail-when-CANONICAL_HOST-cannot-be-determined.patch create mode 100644 buildroot/package/libmodsecurity/0001-configure.ac-drop-usage-of-git-at-configure-time.patch create mode 100644 buildroot/package/libmodsecurity/0002-modsecurity.pc.in-add-lstdc.patch delete mode 100644 buildroot/package/libmodsecurity/0002-test-for-uClinux-in-configure-script.patch create mode 100644 buildroot/package/libmodsecurity/0003-Revert-Fix-maxminddb-link-on-FreeBSD.patch delete mode 100644 buildroot/package/libndp/0001-ndptool.c-Fix-musl-build.patch create mode 100644 buildroot/package/libnetfilter_log/0002-Add-include-needed-for-integer-type-definition.patch create mode 100644 buildroot/package/libnetfilter_log/0003-src-Use-stdint-types-everywhere.patch create mode 100644 buildroot/package/libnetfilter_log/0004-include-Sync-with-current-kernel-headers.patch create mode 100644 buildroot/package/libnfnetlink/0002-include-Sync-with-kernel-headers.patch rename buildroot/package/libtirpc/{0003-Automatically-generate-XDR-header-files-from-.x-sour.patch => 0001-Automatically-generate-XDR-header-files-from-.x-sour.patch} (100%) rename buildroot/package/libtirpc/{0004-Add-more-XDR-files-needed-to-build-rpcbind-on-top-of.patch => 0002-Add-more-XDR-files-needed-to-build-rpcbind-on-top-of.patch} (100%) rename buildroot/package/ltp-testsuite/{0002-lapi-Add-sysinfo.h-to-fix-build-with-MUSL-libc.patch => 0001-lapi-Add-sysinfo.h-to-fix-build-with-MUSL-libc.patch} (100%) delete mode 100644 buildroot/package/nbd/0001-Also-close-the-file-descriptor-before-returning.patch create mode 100644 buildroot/package/nmap/0002-ncat-unix-socket.patch create mode 100644 buildroot/package/openpgm/0002-openpgm-pgm-checksum.c-fix-build-with-32-bits-MMX.patch create mode 100755 buildroot/package/polkit/S50polkit create mode 100644 buildroot/package/proxychains-ng/0001-configure-fix-check_link_silent-test.patch create mode 100644 buildroot/package/putty/0001-unix-uxutils.h-fix-build-on-uclibc.patch create mode 100644 buildroot/package/putty/0002-New-option-to-reject-trivial-success-of-userauth.patch create mode 100644 buildroot/package/python3/0036-Fix-dictionary-iteration-error-in-_ExecutorManagerTh.patch create mode 100644 buildroot/package/qpdf/0002-Fix-some-pipelines-to-be-safe-if-downstream-write-fails.patch delete mode 100644 buildroot/package/slirp/0001-slirp-check-pkt_len-before-reading-protocol-header.patch create mode 100644 buildroot/package/tpm2-tools/0001-tpm2_import-fix-fixed-AES-key-CVE-2021-3565.patch create mode 100644 buildroot/support/testing/tests/package/test_uboot_openssl_pkgconfig.py diff --git a/buildroot/CHANGES b/buildroot/CHANGES index 80c0125b8..a692ed7ba 100644 --- a/buildroot/CHANGES +++ b/buildroot/CHANGES @@ -1,3 +1,54 @@ +2021.02.4, released August 10th, 2021 + + Important / security related fixes. + + Toolchain: Disable PIC/PIE for Microblaze (like for NIOS II) + as it is not currently working. + + binutils: fix linker assert failure on OpenRisc, or1k build + issue with gcc < 5 + + gdb: Enable on NIOS II + + utils/scanpypi: Various improvements + + Defconfigs: stm32f469_disco: Fix kernel boot issue, Microchip + sam9x60ek mmc_dev: Add missing toolchain/system options + + Updated/fixed packages: apache, arm-trusted-firmware, audit, + avahi, bind, binutils, bird, bluez5_utils, boinc, busybox, + chrony, clamav, cryptsetup, cwiid, dnsmasq, docker-cli, + docker-engine, dovecot, dovecot-pigeonhole, e2fsprogs, exiv2, + fail2ban, fb-test-app, feh, fetchmail, flac, fluxbox, gawk, + gcc, gcr, gdb, gdk-pixbuf, gesftpserver, glibc, go, gptfdisk, + granite, grub2, gqrx, guile, hdparm, heirloom-mailx, + ibrcommon, ibrdtn, ibrdtn-tools, ibrdtnd, intel-microcode, + iodine, irqbalance, keepalived, libass, libconfig, libcurl, + libfreeimage, libfuse3, libgcrypt, libgtk3, libgudev, libhtp, + libjson, libkrb5, libloki, libmodsecurity, libndp, + libnetfilter-log, libnfnetlink, libnice, libodb, libodb-boost, + libodb-mysql, libodb-pgsql, libpcap, libqmi, libressl, + librsvg, libtasn1, libtirpc, libuci, libxmlrpc, + linux-firmware, linuxptp, lrzsz, ltp-testsuite, lvm2, mariadb, + mbedtls, monit, mono, mosquitto, mpd, mpg123, mpv, nbd, neard, + netsnmp, nettle, nginx-modsecurity, nmap, nodejs, ntp, + openntpd, openpgm, openswan, pango, pcre2, + perl-crypt-openssl-rsa, php, pixman, polkit, postgresql, + proxychains-ng, putty, python, python-django, + python-dataproperty, python-pysftp, python-urllib3, python3, + qpdf, redis, ripgrep, ruby, samba4, spice, slirp, suricata, + sysdig, tcpdump, tftpd, thrift, tor, tpm2-tools, trinity, + uboot, uboot-tools, uclibc, util-linux, vlc, wireless-regdb, + wireshark, wolfssl, xapp_fonttosfnt, xlib_libX11, + xlib_libxshmfence, xserver_xorg-server + + Issues resolved (http://bugs.uclibc.org): + + #13586: grub failure with BR2_OPTIMIZE_3 + #13661: host-python2 build fails on aarch64 + #13836: package build failure when target install set to no.. + #13846: BR2_PACKAGE_LVM2_STANDARD_INSTALL should be default to.. + 2021.02.3, released June 12th, 2021 Important / security related fixes. diff --git a/buildroot/Config.in b/buildroot/Config.in index 18a90b3f6..48c373af9 100644 --- a/buildroot/Config.in +++ b/buildroot/Config.in @@ -713,10 +713,17 @@ endmenu comment "Security Hardening Options" -config BR2_PIC_PIE - bool "Build code with PIC/PIE" +config BR2_PIC_PIE_ARCH_SUPPORTS + bool + default y + # Microblaze glibc toolchains don't work with PIC/PIE enabled + depends on !BR2_microblaze # Nios2 toolchains produce non working binaries with -fPIC depends on !BR2_nios2 + +config BR2_PIC_PIE + bool "Build code with PIC/PIE" + depends on BR2_PIC_PIE_ARCH_SUPPORTS depends on BR2_SHARED_LIBS depends on BR2_TOOLCHAIN_SUPPORTS_PIE help @@ -724,7 +731,7 @@ config BR2_PIC_PIE Position-Independent Executables (PIE). comment "PIC/PIE needs a toolchain w/ PIE" - depends on !BR2_nios2 + depends on BR2_PIC_PIE_ARCH_SUPPORTS depends on BR2_SHARED_LIBS depends on !BR2_TOOLCHAIN_SUPPORTS_PIE @@ -811,7 +818,7 @@ config BR2_RELRO_PARTIAL config BR2_RELRO_FULL bool "Full" - depends on !BR2_nios2 # BR2_PIC_PIE + depends on BR2_PIC_PIE_ARCH_SUPPORTS depends on BR2_TOOLCHAIN_SUPPORTS_PIE select BR2_PIC_PIE help @@ -820,7 +827,7 @@ config BR2_RELRO_FULL program loading, i.e every time an executable is started. comment "RELRO Full needs a toolchain w/ PIE" - depends on !BR2_nios2 + depends on BR2_PIC_PIE_ARCH_SUPPORTS depends on !BR2_TOOLCHAIN_SUPPORTS_PIE endchoice diff --git a/buildroot/DEVELOPERS b/buildroot/DEVELOPERS index a5b325626..3b18c5683 100644 --- a/buildroot/DEVELOPERS +++ b/buildroot/DEVELOPERS @@ -122,10 +122,7 @@ F: package/python-docopt/ N: Anders Darander F: package/ktap/ -N: André Hentschel -F: board/freescale/imx8qxpmek/ -F: configs/freescale_imx8qxpmek_defconfig -F: package/freescale-imx/imx-sc-firmware/ +N: André Zwing F: package/libkrb5/ F: package/openal/ F: package/p7zip/ @@ -180,6 +177,9 @@ F: package/sshguard/ F: package/sunwait/ F: package/sysdig/ +N: Andy Shevchenko +F: package/fb-test-app/ + N: Anisse Astier F: package/go/ F: package/nghttp2/ @@ -519,7 +519,7 @@ F: package/rtl8821au/ F: package/runc/ F: package/tini/ -N: Christophe Priouzeau +N: Christophe Priouzeau F: board/stmicroelectronics/stm32f429-disco/ F: board/stmicroelectronics/stm32f469-disco/ F: configs/stm32f429_disco_defconfig @@ -1024,12 +1024,14 @@ F: package/xapian/ N: Giulio Benetti F: package/at/ +F: package/libfuse3/ F: package/libnspr/ F: package/libnss/ F: package/minicom/ F: package/nfs-utils/ F: package/sunxi-mali-mainline/ F: package/sunxi-mali-mainline-driver/ +F: package/udisks/ N: Gregory Dymarek F: package/ding-libs/ @@ -1238,11 +1240,6 @@ F: package/sysrepo/ N: Jan Pedersen F: package/zip/ -N: Jan Viktorin -F: package/python-pexpect/ -F: package/python-ptyprocess/ -F: package/zynq-boot-bin/ - N: Jarkko Sakkinen F: package/quota/ @@ -2134,6 +2131,7 @@ F: package/libtirpc/ F: package/linux-backports/ F: package/ltp-testsuite/ F: package/nfs-utils/ +F: package/rpcbind/ F: support/kconfig/ N: Phil Eichinger @@ -2211,7 +2209,7 @@ F: package/nanomsg/ N: Ramon Fried F: package/bitwise/ -N: Raphaël Mélotte +N: Raphaël Mélotte F: package/jbig2dec/ F: package/python-boto3/ F: package/python-botocore/ @@ -2726,9 +2724,6 @@ F: package/casync/ F: package/gloox/ F: package/tpm2-pkcs11/ -N: Yann CARDAILLAC -F: package/open62541/ - N: Yann E. MORIN F: board/friendlyarm/nanopi-neo/ F: configs/friendlyarm_nanopi_neo_defconfig diff --git a/buildroot/Makefile b/buildroot/Makefile index 7e896e907..c6be0ca7d 100644 --- a/buildroot/Makefile +++ b/buildroot/Makefile @@ -92,9 +92,9 @@ all: .PHONY: all # Set and export the version string -export BR2_VERSION := 2021.02.3 +export BR2_VERSION := 2021.02.4 # Actual time the release is cut (for reproducible builds) -BR2_VERSION_EPOCH = 1623509900 +BR2_VERSION_EPOCH = 1628627000 # Save running make version since it's clobbered by the make package RUNNING_MAKE_VERSION := $(MAKE_VERSION) @@ -1140,6 +1140,7 @@ help: @echo ' -dirclean - Remove build directory' @echo ' -reconfigure - Restart the build from the configure step' @echo ' -rebuild - Restart the build from the build step' + @echo ' -reinstall - Restart the build from the install step' $(foreach p,$(HELP_PACKAGES), \ @echo $(sep) \ @echo '$($(p)_NAME):' $(sep) \ diff --git a/buildroot/board/stmicroelectronics/stm32f469-disco/extlinux.conf b/buildroot/board/stmicroelectronics/stm32f469-disco/extlinux.conf new file mode 100644 index 000000000..1c2db4383 --- /dev/null +++ b/buildroot/board/stmicroelectronics/stm32f469-disco/extlinux.conf @@ -0,0 +1,4 @@ +label stm32f469-disco-buildroot + kernel /zImage + devicetree /stm32f469-disco.dtb + append console=ttySTM0,115200 root=/dev/mmcblk0p2 rw rootfstype=ext2 rootwait earlyprintk consoleblank=0 ignore_loglevel diff --git a/buildroot/board/stmicroelectronics/stm32f469-disco/flash.sh b/buildroot/board/stmicroelectronics/stm32f469-disco/flash.sh index 0ec0beb2d..984d2b259 100755 --- a/buildroot/board/stmicroelectronics/stm32f469-disco/flash.sh +++ b/buildroot/board/stmicroelectronics/stm32f469-disco/flash.sh @@ -13,8 +13,6 @@ ${OUTPUT_DIR}/host/bin/openocd -f board/stm32f469discovery.cfg \ -c "reset init" \ -c "flash probe 0" \ -c "flash info 0" \ - -c "flash write_image erase ${OUTPUT_DIR}/images/stm32f469i-disco.bin 0x08000000" \ - -c "flash write_image erase ${OUTPUT_DIR}/images/stm32f469-disco.dtb 0x08004000" \ - -c "flash write_image erase ${OUTPUT_DIR}/images/xipImage 0x08008000" \ + -c "flash write_image erase ${OUTPUT_DIR}/images/u-boot.bin 0x08000000" \ -c "reset run" \ -c "shutdown" diff --git a/buildroot/board/stmicroelectronics/stm32f469-disco/genimage.cfg b/buildroot/board/stmicroelectronics/stm32f469-disco/genimage.cfg new file mode 100644 index 000000000..bc945955f --- /dev/null +++ b/buildroot/board/stmicroelectronics/stm32f469-disco/genimage.cfg @@ -0,0 +1,27 @@ +image boot.vfat { + vfat { + files = { + "zImage", + "stm32f469-disco.dtb", + "extlinux" + } + } + size = 16M +} + +image sdcard.img { + hdimage { + } + + partition u-boot { + partition-type = 0xC + image = "boot.vfat" + } + + partition rootfs { + partition-type = 0x83 + image = "rootfs.ext2" + size = 32M + } +} + diff --git a/buildroot/board/stmicroelectronics/stm32f469-disco/linux.fragment b/buildroot/board/stmicroelectronics/stm32f469-disco/linux.fragment new file mode 100644 index 000000000..90f5e8a8f --- /dev/null +++ b/buildroot/board/stmicroelectronics/stm32f469-disco/linux.fragment @@ -0,0 +1 @@ +# CONFIG_XIP_KERNEL is not set \ No newline at end of file diff --git a/buildroot/board/stmicroelectronics/stm32f469-disco/patches/linux/0001-ARM-stm32f249-disco-don-t-force-init-in-chosen-boota.patch b/buildroot/board/stmicroelectronics/stm32f469-disco/patches/linux/0001-ARM-stm32f249-disco-don-t-force-init-in-chosen-boota.patch deleted file mode 100644 index 750e477df..000000000 --- a/buildroot/board/stmicroelectronics/stm32f469-disco/patches/linux/0001-ARM-stm32f249-disco-don-t-force-init-in-chosen-boota.patch +++ /dev/null @@ -1,33 +0,0 @@ -From c8f8f33c2f0460a34c9545b01a7972a7ed2df0e9 Mon Sep 17 00:00:00 2001 -From: Christophe Priouzeau -Date: Mon, 29 May 2017 13:38:16 +0200 -Subject: [PATCH] ARM: stm32f249-disco: don't force init= in /chosen/bootargs - -There is no reason to override the kernel's default init= value, as -this breaks userspace that assumes the kernel default of /init is -used. Since stm32 is often used with a minimal bootloader -(afboot-stm32) that doesn't provide any mechanism to override the DTB, -we need to adjust the kernel command line in the Device Tree source. - -Signed-off-by: Thomas Petazzoni -Signed-off-by: Christophe Priouzeau ---- - arch/arm/boot/dts/stm32f469-disco.dts | 2 +- - 1 file changed, 1 insertion(+), 1 deletion(-) - -diff --git a/arch/arm/boot/dts/stm32f469-disco.dts b/arch/arm/boot/dts/stm32f469-disco.dts -index 0dd56ef..93ee1b2 100644 ---- a/arch/arm/boot/dts/stm32f469-disco.dts -+++ b/arch/arm/boot/dts/stm32f469-disco.dts -@@ -53,7 +53,7 @@ - compatible = "st,stm32f469i-disco", "st,stm32f469"; - - chosen { -- bootargs = "root=/dev/ram rdinit=/linuxrc"; -+ bootargs = "root=/dev/ram"; - stdout-path = "serial0:115200n8"; - }; - --- -2.7.4 - diff --git a/buildroot/board/stmicroelectronics/stm32f469-disco/post-build.sh b/buildroot/board/stmicroelectronics/stm32f469-disco/post-build.sh new file mode 100755 index 000000000..ec20fca7d --- /dev/null +++ b/buildroot/board/stmicroelectronics/stm32f469-disco/post-build.sh @@ -0,0 +1,4 @@ +#!/bin/sh +BOARD_DIR="$(dirname $0)" + +install -m 0644 -D $BOARD_DIR/extlinux.conf $BINARIES_DIR/extlinux/extlinux.conf diff --git a/buildroot/board/stmicroelectronics/stm32f469-disco/readme.txt b/buildroot/board/stmicroelectronics/stm32f469-disco/readme.txt index 888bff08a..c1e1d30e6 100644 --- a/buildroot/board/stmicroelectronics/stm32f469-disco/readme.txt +++ b/buildroot/board/stmicroelectronics/stm32f469-disco/readme.txt @@ -15,5 +15,17 @@ Flashing ./board/stmicroelectronics/stm32f469-disco/flash.sh output/ -It will flash the minimal bootloader, the Device Tree Blob, and the -kernel image which includes the root filesystem as initramfs. +It will flash the U-boot bootloader. + +Creating SD card +---------------- + +Buildroot prepares an"sdcard.img" image in the output/images/ directory, +ready to be dumped on a SD card. Launch the following command as root: + + dd if=output/images/sdcard.img of=/dev/ + +*** WARNING! This will destroy all the card content. Use with care! *** + +For details about the medium image layout and its content, see the +definition in board/stmicroelectronics/stm32f469-disco/genimage.cfg. diff --git a/buildroot/boot/arm-trusted-firmware/Config.in b/buildroot/boot/arm-trusted-firmware/Config.in index c06294040..26c12670d 100644 --- a/buildroot/boot/arm-trusted-firmware/Config.in +++ b/buildroot/boot/arm-trusted-firmware/Config.in @@ -175,4 +175,25 @@ config BR2_TARGET_ARM_TRUSTED_FIRMWARE_NEEDS_ARM32_TOOLCHAIN Select this option if your ATF board configuration requires an ARM32 bare metal toolchain to be available. +config BR2_TARGET_ARM_TRUSTED_FIRMWARE_SSP + bool "Build with SSP" + default y + depends on BR2_TOOLCHAIN_HAS_SSP + depends on !BR2_SSP_NONE + help + Say 'y' here if you want to build ATF with SSP. + + Your board must have SSP support in ATF: it must have an + implementation for plat_get_stack_protector_canary(). + + If you say 'y', the SSP level will be the level selected + by the global SSP setting. + +config BR2_TARGET_ARM_TRUSTED_FIRMWARE_SSP_LEVEL + string + default "none" if !BR2_TARGET_ARM_TRUSTED_FIRMWARE_SSP + default "default" if BR2_SSP_REGULAR + default "strong" if BR2_SSP_STRONG + default "all" if BR2_SSP_ALL + endif diff --git a/buildroot/boot/arm-trusted-firmware/arm-trusted-firmware.mk b/buildroot/boot/arm-trusted-firmware/arm-trusted-firmware.mk index 0597cecf7..d06bc336e 100644 --- a/buildroot/boot/arm-trusted-firmware/arm-trusted-firmware.mk +++ b/buildroot/boot/arm-trusted-firmware/arm-trusted-firmware.mk @@ -51,7 +51,8 @@ endif ARM_TRUSTED_FIRMWARE_MAKE_OPTS += \ CROSS_COMPILE="$(TARGET_CROSS)" \ $(call qstrip,$(BR2_TARGET_ARM_TRUSTED_FIRMWARE_ADDITIONAL_VARIABLES)) \ - PLAT=$(ARM_TRUSTED_FIRMWARE_PLATFORM) + PLAT=$(ARM_TRUSTED_FIRMWARE_PLATFORM) \ + ENABLE_STACK_PROTECTOR=$(call qstrip,$(BR2_TARGET_ARM_TRUSTED_FIRMWARE_SSP_LEVEL)) ifeq ($(BR2_ARM_CPU_ARMV7A),y) ARM_TRUSTED_FIRMWARE_MAKE_OPTS += ARM_ARCH_MAJOR=7 @@ -100,14 +101,6 @@ ARM_TRUSTED_FIRMWARE_MAKE_OPTS += MV_DDR_PATH=$(MV_DDR_MARVELL_DIR) ARM_TRUSTED_FIRMWARE_DEPENDENCIES += mv-ddr-marvell endif -ifeq ($(BR2_SSP_REGULAR),y) -ARM_TRUSTED_FIRMWARE_MAKE_OPTS += ENABLE_STACK_PROTECTOR=default -else ifeq ($(BR2_SSP_STRONG),y) -ARM_TRUSTED_FIRMWARE_MAKE_OPTS += ENABLE_STACK_PROTECTOR=strong -else ifeq ($(BR2_SSP_ALL),y) -ARM_TRUSTED_FIRMWARE_MAKE_OPTS += ENABLE_STACK_PROTECTOR=all -endif - ARM_TRUSTED_FIRMWARE_MAKE_TARGETS = all ifeq ($(BR2_TARGET_ARM_TRUSTED_FIRMWARE_FIP),y) diff --git a/buildroot/boot/grub2/grub2.mk b/buildroot/boot/grub2/grub2.mk index af16ee91e..52e9199ae 100644 --- a/buildroot/boot/grub2/grub2.mk +++ b/buildroot/boot/grub2/grub2.mk @@ -118,9 +118,11 @@ HOST_GRUB2_CONF_ENV = \ GRUB2_CONF_ENV = \ CPP="$(TARGET_CC) -E" \ TARGET_CC="$(TARGET_CC)" \ - TARGET_CFLAGS="$(TARGET_CFLAGS)" \ - TARGET_CPPFLAGS="$(TARGET_CPPFLAGS) -fno-stack-protector" \ - TARGET_LDFLAGS="$(TARGET_LDFLAGS)" \ + CFLAGS="$(TARGET_CFLAGS) -Os" \ + TARGET_CFLAGS="$(TARGET_CFLAGS) -Os" \ + CPPFLAGS="$(TARGET_CPPFLAGS) -Os -fno-stack-protector" \ + TARGET_CPPFLAGS="$(TARGET_CPPFLAGS) -Os -fno-stack-protector" \ + TARGET_LDFLAGS="$(TARGET_LDFLAGS) -Os" \ TARGET_NM="$(TARGET_NM)" \ TARGET_OBJCOPY="$(TARGET_OBJCOPY)" \ TARGET_STRIP="$(TARGET_CROSS)strip" diff --git a/buildroot/boot/uboot/uboot.mk b/buildroot/boot/uboot/uboot.mk index dbe82e65b..a8a8bedc0 100644 --- a/buildroot/boot/uboot/uboot.mk +++ b/buildroot/boot/uboot/uboot.mk @@ -17,7 +17,7 @@ UBOOT_CPE_ID_PRODUCT = u-boot UBOOT_INSTALL_IMAGES = YES # u-boot 2020.01+ needs make 4.0+ -UBOOT_DEPENDENCIES = $(BR2_MAKE_HOST_DEPENDENCY) +UBOOT_DEPENDENCIES = host-pkgconf $(BR2_MAKE_HOST_DEPENDENCY) UBOOT_MAKE = $(BR2_MAKE) ifeq ($(UBOOT_VERSION),custom) @@ -307,6 +307,11 @@ define UBOOT_BUILD_CMDS cp -f $(UBOOT_CUSTOM_DTS_PATH) $(@D)/arch/$(UBOOT_ARCH)/dts/ ) $(TARGET_CONFIGURE_OPTS) \ + PKG_CONFIG="$(PKG_CONFIG_HOST_BINARY)" \ + PKG_CONFIG_SYSROOT_DIR="/" \ + PKG_CONFIG_ALLOW_SYSTEM_CFLAGS=1 \ + PKG_CONFIG_ALLOW_SYSTEM_LIBS=1 \ + PKG_CONFIG_LIBDIR="$(HOST_DIR)/lib/pkgconfig:$(HOST_DIR)/share/pkgconfig" \ $(UBOOT_MAKE) -C $(@D) $(UBOOT_MAKE_OPTS) \ $(UBOOT_MAKE_TARGET) $(if $(BR2_TARGET_UBOOT_FORMAT_SD), diff --git a/buildroot/configs/microchip_sam9x60ek_mmc_dev_defconfig b/buildroot/configs/microchip_sam9x60ek_mmc_dev_defconfig index 6c3fcc6b3..8b6ecfb7e 100644 --- a/buildroot/configs/microchip_sam9x60ek_mmc_dev_defconfig +++ b/buildroot/configs/microchip_sam9x60ek_mmc_dev_defconfig @@ -1,6 +1,10 @@ BR2_arm=y BR2_PACKAGE_HOST_LINUX_HEADERS_CUSTOM_5_4=y +BR2_TOOLCHAIN_BUILDROOT_WCHAR=y +BR2_PTHREAD_DEBUG=y +BR2_TOOLCHAIN_BUILDROOT_CXX=y BR2_TARGET_GENERIC_HOSTNAME="sam9x60ek" +BR2_ROOTFS_DEVICE_CREATION_DYNAMIC_EUDEV=y BR2_ROOTFS_POST_IMAGE_SCRIPT="support/scripts/genimage.sh" BR2_ROOTFS_POST_SCRIPT_ARGS="-c board/microchip/sam9x60ek_mmc/genimage.cfg" BR2_LINUX_KERNEL=y diff --git a/buildroot/configs/stm32f469_disco_defconfig b/buildroot/configs/stm32f469_disco_defconfig index 9760d5187..e538a664e 100644 --- a/buildroot/configs/stm32f469_disco_defconfig +++ b/buildroot/configs/stm32f469_disco_defconfig @@ -1,19 +1,25 @@ BR2_arm=y BR2_cortex_m4=y -BR2_GLOBAL_PATCH_DIR="board/stmicroelectronics/stm32f469-disco/patches" -BR2_PACKAGE_HOST_LINUX_HEADERS_CUSTOM_4_11=y -BR2_ROOTFS_POST_BUILD_SCRIPT="board/stmicroelectronics/common/stm32f4xx/stm32-post-build.sh" +BR2_PACKAGE_HOST_LINUX_HEADERS_CUSTOM_5_12=y +BR2_ROOTFS_POST_BUILD_SCRIPT="board/stmicroelectronics/common/stm32f4xx/stm32-post-build.sh board/stmicroelectronics/stm32f469-disco/post-build.sh" +BR2_ROOTFS_POST_IMAGE_SCRIPT="support/scripts/genimage.sh" +BR2_ROOTFS_POST_SCRIPT_ARGS="-c board/stmicroelectronics/stm32f469-disco/genimage.cfg" BR2_LINUX_KERNEL=y BR2_LINUX_KERNEL_CUSTOM_VERSION=y -BR2_LINUX_KERNEL_CUSTOM_VERSION_VALUE="4.11" +BR2_LINUX_KERNEL_CUSTOM_VERSION_VALUE="5.12.11" BR2_LINUX_KERNEL_DEFCONFIG="stm32" -BR2_LINUX_KERNEL_CONFIG_FRAGMENT_FILES="$(LINUX_DIR)/arch/arm/configs/dram_0x00000000.config" +BR2_LINUX_KERNEL_CONFIG_FRAGMENT_FILES="$(LINUX_DIR)/arch/arm/configs/dram_0x00000000.config board/stmicroelectronics/stm32f469-disco/linux.fragment" BR2_LINUX_KERNEL_IMAGE_TARGET_CUSTOM=y -BR2_LINUX_KERNEL_IMAGE_TARGET_NAME="xipImage" +BR2_LINUX_KERNEL_IMAGE_TARGET_NAME="zImage" BR2_LINUX_KERNEL_DTS_SUPPORT=y BR2_LINUX_KERNEL_INTREE_DTS_NAME="stm32f469-disco" BR2_PACKAGE_BUSYBOX_CONFIG="package/busybox/busybox-minimal.config" -BR2_TARGET_ROOTFS_INITRAMFS=y +BR2_TARGET_ROOTFS_EXT2=y +BR2_TARGET_ROOTFS_EXT2_SIZE="32M" # BR2_TARGET_ROOTFS_TAR is not set -BR2_TARGET_AFBOOT_STM32=y +BR2_TARGET_UBOOT=y +BR2_TARGET_UBOOT_BOARD_DEFCONFIG="stm32f469-discovery" +BR2_PACKAGE_HOST_DOSFSTOOLS=y +BR2_PACKAGE_HOST_GENIMAGE=y +BR2_PACKAGE_HOST_MTOOLS=y BR2_PACKAGE_HOST_OPENOCD=y diff --git a/buildroot/docs/manual/manual.html b/buildroot/docs/manual/manual.html index bf02256cb..8919f2d5a 100644 --- a/buildroot/docs/manual/manual.html +++ b/buildroot/docs/manual/manual.html @@ -1,8 +1,8 @@ -The Buildroot user manual

The Buildroot user manual

Table of Contents

I. Getting started
1. About Buildroot
2. System requirements
2.1. Mandatory packages
2.2. Optional packages
3. Getting Buildroot
4. Buildroot quick start
5. Community resources
II. User guide
6. Buildroot configuration
6.1. Cross-compilation toolchain
6.2. /dev management
6.3. init system
7. Configuration of other components
8. General Buildroot usage
8.1. make tips
8.2. Understanding when a full rebuild is necessary
8.3. Understanding how to rebuild packages
8.4. Offline builds
8.5. Building out-of-tree
8.6. Environment variables
8.7. Dealing efficiently with filesystem images
8.8. Details about packages
8.9. Graphing the dependencies between packages
8.10. Graphing the build duration
8.11. Graphing the filesystem size contribution of packages
8.12. Top-level parallel build
8.13. Integration with Eclipse
8.14. Advanced usage
9. Project-specific customization
9.1. Recommended directory structure
9.2. Keeping customizations outside of Buildroot
9.3. Storing the Buildroot configuration
9.4. Storing the configuration of other components
9.5. Customizing the generated target filesystem
9.6. Adding custom user accounts
9.7. Customization after the images have been created
9.8. Adding project-specific patches
9.9. Adding project-specific packages
9.10. Quick guide to storing your project-specific customizations
10. Using SELinux in Buildroot
10.1. Enabling SELinux support
10.2. SELinux policy tweaking
11. Frequently Asked Questions & Troubleshooting
11.1. The boot hangs after Starting network…
11.2. Why is there no compiler on the target?
11.3. Why are there no development files on the target?
11.4. Why is there no documentation on the target?
11.5. Why are some packages not visible in the Buildroot config menu?
11.6. Why not use the target directory as a chroot directory?
11.7. Why doesn’t Buildroot generate binary packages (.deb, .ipkg…)?
11.8. How to speed-up the build process?
12. Known issues
13. Legal notice and licensing
13.1. Complying with open source licenses
13.2. Complying with the Buildroot license
14. Beyond Buildroot
14.1. Boot the generated images
14.2. Chroot
III. Developer guide
15. How Buildroot works
16. Coding style
16.1. Config.in file
16.2. The .mk file
16.3. The documentation
16.4. Support scripts
17. Adding support for a particular board
18. Adding new packages to Buildroot
18.1. Package directory
18.2. Config files
18.3. The .mk file
18.4. The .hash file
18.5. Infrastructure for packages with specific build systems
18.6. Infrastructure for autotools-based packages
18.7. Infrastructure for CMake-based packages
18.8. Infrastructure for Python packages
18.9. Infrastructure for LuaRocks-based packages
18.10. Infrastructure for Perl/CPAN packages
18.11. Infrastructure for virtual packages
18.12. Infrastructure for packages using kconfig for configuration files
18.13. Infrastructure for rebar-based packages
18.14. Infrastructure for Waf-based packages
18.15. Infrastructure for Meson-based packages
18.16. Integration of Cargo-based packages
18.17. Infrastructure for Go packages
18.18. Infrastructure for QMake-based packages
18.19. Infrastructure for packages building kernel modules
18.20. Infrastructure for asciidoc documents
18.21. Infrastructure specific to the Linux kernel package
18.22. Hooks available in the various build steps
18.23. Gettext integration and interaction with packages
18.24. Tips and tricks
18.25. Conclusion
19. Patching a package
19.1. Providing patches
19.2. How patches are applied
19.3. Format and licensing of the package patches
19.4. Integrating patches found on the Web
20. Download infrastructure
21. Debugging Buildroot
22. Contributing to Buildroot
22.1. Reproducing, analyzing and fixing bugs
22.2. Analyzing and fixing autobuild failures
22.3. Reviewing and testing patches
22.4. Work on items from the TODO list
22.5. Submitting patches
22.6. Reporting issues/bugs or getting help
22.7. Using the run-tests framework
23. DEVELOPERS file and get-developers
24. Release Engineering
24.1. Releases
24.2. Development
IV. Appendix
25. Makedev syntax documentation
26. Makeusers syntax documentation
27. Migrating from older Buildroot versions
27.1. Migrating to 2016.11
27.2. Migrating to 2017.08

List of Examples

18.1. Config script: divine package
18.2. Config script: imagemagick package:

Buildroot 2021.02.3 manual generated on 2021-06-12 -15:00:38 UTC from git revision 5293208a57

The Buildroot manual is written by the Buildroot developers. +The Buildroot user manual

The Buildroot user manual

Table of Contents

I. Getting started
1. About Buildroot
2. System requirements
2.1. Mandatory packages
2.2. Optional packages
3. Getting Buildroot
4. Buildroot quick start
5. Community resources
II. User guide
6. Buildroot configuration
6.1. Cross-compilation toolchain
6.2. /dev management
6.3. init system
7. Configuration of other components
8. General Buildroot usage
8.1. make tips
8.2. Understanding when a full rebuild is necessary
8.3. Understanding how to rebuild packages
8.4. Offline builds
8.5. Building out-of-tree
8.6. Environment variables
8.7. Dealing efficiently with filesystem images
8.8. Details about packages
8.9. Graphing the dependencies between packages
8.10. Graphing the build duration
8.11. Graphing the filesystem size contribution of packages
8.12. Top-level parallel build
8.13. Integration with Eclipse
8.14. Advanced usage
9. Project-specific customization
9.1. Recommended directory structure
9.2. Keeping customizations outside of Buildroot
9.3. Storing the Buildroot configuration
9.4. Storing the configuration of other components
9.5. Customizing the generated target filesystem
9.6. Adding custom user accounts
9.7. Customization after the images have been created
9.8. Adding project-specific patches
9.9. Adding project-specific packages
9.10. Quick guide to storing your project-specific customizations
10. Using SELinux in Buildroot
10.1. Enabling SELinux support
10.2. SELinux policy tweaking
11. Frequently Asked Questions & Troubleshooting
11.1. The boot hangs after Starting network…
11.2. Why is there no compiler on the target?
11.3. Why are there no development files on the target?
11.4. Why is there no documentation on the target?
11.5. Why are some packages not visible in the Buildroot config menu?
11.6. Why not use the target directory as a chroot directory?
11.7. Why doesn’t Buildroot generate binary packages (.deb, .ipkg…)?
11.8. How to speed-up the build process?
12. Known issues
13. Legal notice and licensing
13.1. Complying with open source licenses
13.2. Complying with the Buildroot license
14. Beyond Buildroot
14.1. Boot the generated images
14.2. Chroot
III. Developer guide
15. How Buildroot works
16. Coding style
16.1. Config.in file
16.2. The .mk file
16.3. The documentation
16.4. Support scripts
17. Adding support for a particular board
18. Adding new packages to Buildroot
18.1. Package directory
18.2. Config files
18.3. The .mk file
18.4. The .hash file
18.5. Infrastructure for packages with specific build systems
18.6. Infrastructure for autotools-based packages
18.7. Infrastructure for CMake-based packages
18.8. Infrastructure for Python packages
18.9. Infrastructure for LuaRocks-based packages
18.10. Infrastructure for Perl/CPAN packages
18.11. Infrastructure for virtual packages
18.12. Infrastructure for packages using kconfig for configuration files
18.13. Infrastructure for rebar-based packages
18.14. Infrastructure for Waf-based packages
18.15. Infrastructure for Meson-based packages
18.16. Integration of Cargo-based packages
18.17. Infrastructure for Go packages
18.18. Infrastructure for QMake-based packages
18.19. Infrastructure for packages building kernel modules
18.20. Infrastructure for asciidoc documents
18.21. Infrastructure specific to the Linux kernel package
18.22. Hooks available in the various build steps
18.23. Gettext integration and interaction with packages
18.24. Tips and tricks
18.25. Conclusion
19. Patching a package
19.1. Providing patches
19.2. How patches are applied
19.3. Format and licensing of the package patches
19.4. Integrating patches found on the Web
20. Download infrastructure
21. Debugging Buildroot
22. Contributing to Buildroot
22.1. Reproducing, analyzing and fixing bugs
22.2. Analyzing and fixing autobuild failures
22.3. Reviewing and testing patches
22.4. Work on items from the TODO list
22.5. Submitting patches
22.6. Reporting issues/bugs or getting help
22.7. Using the run-tests framework
23. DEVELOPERS file and get-developers
24. Release Engineering
24.1. Releases
24.2. Development
IV. Appendix
25. Makedev syntax documentation
26. Makeusers syntax documentation
27. Migrating from older Buildroot versions
27.1. Migrating to 2016.11
27.2. Migrating to 2017.08

List of Examples

18.1. Config script: divine package
18.2. Config script: imagemagick package:

Buildroot 2021.02.4 manual generated on 2021-08-10 +20:33:48 UTC from git revision 004a792dcf

The Buildroot manual is written by the Buildroot developers. It is licensed under the GNU General Public License, version 2. Refer to the -COPYING +COPYING file in the Buildroot sources for the full text of this license.

Copyright © 2004-2020 The Buildroot developers

logo.png

Part I. Getting started

Chapter 1. About Buildroot

Buildroot is a tool that simplifies and automates the process of building a complete Linux system for an embedded system, using cross-compilation.

In order to achieve this, Buildroot is able to generate a @@ -218,16 +218,14 @@ main method of interaction for Buildroot users and developers.

Mails that are sent to the mailing list are also available in the -mailing list archives and -via Gmane, at -gmane.comp.lib.uclibc.buildroot. -Please search the mailing list archives before asking questions, since -there is a good chance someone else has asked the same question before.

+mailing list archives, available through +Mailman or at +lore.kernel.org.

IRC

The Buildroot IRC channel #buildroot is hosted on OFTC. It is a useful place to ask quick questions or discuss on certain topics.

When asking for help on IRC, share relevant logs or pieces of code -using a code sharing website, such as http://code.bulix.org.

Note that for certain questions, posting to the mailing list may be +using a code sharing website, such as https://paste.ack.tf/.

Note that for certain questions, posting to the mailing list may be better as it will reach more people, both developers and users.

Bug tracker
Bugs in Buildroot can be reported via the mailing list or alternatively @@ -277,7 +275,7 @@ processor. Under most Linux systems, the compilation toolchain uses the GNU libc (glibc) as the C standard library. This compilation toolchain is called the "host compilation toolchain". The machine on which it is running, and on which you’re working, is called the "host -system" [3].

The compilation toolchain is provided by your distribution, and +system" [3].

The compilation toolchain is provided by your distribution, and Buildroot has nothing to do with it (other than using it to build a cross-compilation toolchain and other tools that are run on the development host).

As said above, the compilation toolchain that comes with your system @@ -581,7 +579,7 @@ The third solution is systemd. http://www.freedesktop.org/wiki/Software/systemd.

The solution recommended by Buildroot developers is to use the BusyBox init as it is sufficient for most embedded -systems. systemd can be used for more complex situations.


[3] This terminology differs from what is used by GNU +systems. systemd can be used for more complex situations.


[3] This terminology differs from what is used by GNU configure, where the host is the machine on which the application will run (which is usually the same as target)

Chapter 7. Configuration of other components

Before attempting to modify any of the components below, make sure you have already configured Buildroot itself, and have enabled the @@ -2967,7 +2965,7 @@ flags. The argument to be given to LIBFOO_CONFIG_SCRIPTS is the file name(s) of the shell script(s) needing fixing. All these names are relative to $(STAGING_DIR)/usr/bin and if needed multiple names can be given.

In addition, the scripts listed in LIBFOO_CONFIG_SCRIPTS are removed -from $(TARGET_DIR)/usr/bin, since they are not needed on the target.

Example 18.1. Config script: divine package

Package divine installs shell script $(STAGING_DIR)/usr/bin/divine-config.

So its fixup would be:

DIVINE_CONFIG_SCRIPTS = divine-config

Example 18.2. Config script: imagemagick package:

Package imagemagick installs the following scripts: +from $(TARGET_DIR)/usr/bin, since they are not needed on the target.

Example 18.1. Config script: divine package

Package divine installs shell script $(STAGING_DIR)/usr/bin/divine-config.

So its fixup would be:

DIVINE_CONFIG_SCRIPTS = divine-config

Example 18.2. Config script: imagemagick package:

Package imagemagick installs the following scripts: $(STAGING_DIR)/usr/bin/{Magick,Magick++,MagickCore,MagickWand,Wand}-config

So it’s fixup would be:

IMAGEMAGICK_CONFIG_SCRIPTS = \
    Magick-config Magick++-config \
    MagickCore-config MagickWand-config Wand-config

On line 14, we specify the list of dependencies this package relies @@ -5443,7 +5441,7 @@ large number of commits in the series;

  • deep impact of the changes in the rest of the project;
  • -RFC [4]; +RFC [4];
  • whenever you feel it will help presenting your work, your choices, the review process, etc. @@ -5657,7 +5655,7 @@ to trigger all run-test test case jobs: 
    •  $ git push gitlab HEAD:<name>-runtime-tests
    • to trigger one test case job, a specific branch naming string is used that includes the full test case name. -
     $ git push gitlab HEAD:<name>-<test case name>

    [4] RFC: (Request for comments) change proposal

    Chapter 23. DEVELOPERS file and get-developers

    The main Buildroot directory contains a file named DEVELOPERS that +

     $ git push gitlab HEAD:<name>-<test case name>

    [4] RFC: (Request for comments) change proposal

    Chapter 23. DEVELOPERS file and get-developers

    The main Buildroot directory contains a file named DEVELOPERS that lists the developers involved with various areas of Buildroot. Thanks to this file, the get-developers tool allows to: