…rkflow

Signed-off-by: Thomas Devoogdt <[email protected]>
Reviewed-by: J. Neuschäfer <[email protected]>
Signed-off-by: Yann E. MORIN <[email protected]>
(cherry picked from commit 32753c6)
Signed-off-by: Peter Korsgaard <[email protected]>

In _imagingcms.c in Pillow before 10.3.0, a buffer overflow exists because
strcpy is used instead of strncpy.

Signed-off-by: Angelo Compagnucci <[email protected]>
Signed-off-by: Peter Korsgaard <[email protected]>
(cherry picked from commit dfaa34d)
Signed-off-by: Peter Korsgaard <[email protected]>

Commit dfaa34d forgot to update hash of
LICENSE file:

ERROR: LICENSE has wrong sha256 hash:
ERROR: expected: e706384c6f299d1b6fa782ae657740b372b4bd7938a1a318bf94ac249114758a
ERROR: got     : cf234c27a3f275f5a050f4df3946f8855704226fe4e7ca8b33928cbcecbced37

LICENSE file has been updated to clean up authors and contributors:
python-pillow/Pillow@4197263

Fixes: dfaa34d
 - http://autobuild.buildroot.org/results/5a35d83c73367e1b20534b1bc7f2f564cf653a38

Signed-off-by: Fabrice Fontaine <[email protected]>
Signed-off-by: Yann E. MORIN <[email protected]>
(cherry picked from commit b8a86f5)
Signed-off-by: Peter Korsgaard <[email protected]>

Fixes CVE-2024-1874, CVE-2024-2756 & CVE-2024-3096.

Changelog: https://www.php.net/ChangeLog-8.php#PHP_8_2
Release notes: https://news-web.php.net/php.announce/423

Signed-off-by: Peter Korsgaard <[email protected]>

To ensure the correct prefix is used in the generated tinycbor.pc instead of
/usr/local:

>>> tinycbor 0.6.0 Building
..
sed > tinycbor.pc < tinycbor.pc.in \
        -e 's,@Prefix@,/usr/local,' \
        -e 's,@exec_prefix@,/usr/local,' \
        -e 's,@libdir@,/usr/local/lib,' \
        -e 's,@includedir@,/usr/local/include,' \
        -e 's,@Version@,0.6.0,'
>>> tinycbor 0.6.0 Installing to staging directory
..
install -m 644 tinycbor.pc /path/to/buildroot/output/host/aarch64-buildroot-linux-gnu/sysroot/usr/lib/pkgconfig/tinycbor.pc

Signed-off-by: Peter Korsgaard <[email protected]>
(cherry picked from commit b059e08)
Signed-off-by: Peter Korsgaard <[email protected]>

Fix the following CVEs:

- CVE-2024-32041 [Low[ OutOfBound Read in zgfx_decompress_segment
- CVE-2024-32039 [Moderate] Integer overflow & OutOfBound Write in
  clear_decompress_residual_data
- CVE-2024-32040 [Low] integer underflow in nsc_rle_decode
- CVE-2024-32458 [Low] OutOfBound Read in planar_skip_plane_rle
- CVE-2024-32459 [Low] OutOfBound Read in ncrush_decompress
- CVE-2024-32460 [Low] OutOfBound Read in interleaved_decompress

https://github.com/FreeRDP/FreeRDP/releases/tag/2.11.6

Signed-off-by: Fabrice Fontaine <[email protected]>
Signed-off-by: Peter Korsgaard <[email protected]>
(cherry picked from commit 1126be7)
Signed-off-by: Peter Korsgaard <[email protected]>

Fixes the following security issues:

CVE-2021-3575: A heap-based buffer overflow was found in openjpeg in
color.c:379:42 in sycc420_to_rgb when decompressing a crafted .j2k file.  An
attacker could use this to execute arbitrary code with the permissions of
the application compiled against openjpeg.

Signed-off-by: Angelo Compagnucci <[email protected]>
Signed-off-by: Peter Korsgaard <[email protected]>
(cherry picked from commit ff36bc6)
Signed-off-by: Peter Korsgaard <[email protected]>

… series

Signed-off-by: Bernd Kuhls <[email protected]>
Signed-off-by: Arnout Vandecappelle <[email protected]>
(cherry picked from commit 9c592ec)
[Peter: drop 6.8.x bump]
Signed-off-by: Peter Korsgaard <[email protected]>

Fixes the following security issues:

CVE-2024-32473: Ensure IPv6 is disabled on interfaces only allocated an IPv4
address by the engine

GHSA-x84c-p2g9-rqv9

Signed-off-by: Peter Korsgaard <[email protected]>
Signed-off-by: Yann E. MORIN <[email protected]>
(cherry picked from commit 8e37a88)
Signed-off-by: Peter Korsgaard <[email protected]>

https://github.com/moby/moby/releases/tag/v26.0.2

Signed-off-by: Peter Korsgaard <[email protected]>
Signed-off-by: Yann E. MORIN <[email protected]>
(cherry picked from commit 49c8154)
Signed-off-by: Peter Korsgaard <[email protected]>

- set CPE_ID_VENDOR to silence mismatched CVE-2001-0956 ([1], [2]) warning
  clearly aiming some other product/version ("speechd 0.54 with Festival or
  rsynth speech synthesis package")

[1] https://security-tracker.debian.org/tracker/CVE-2001-0956
[2] GHSA-67cw-4jhh-3jm7

Signed-off-by: Peter Seiderer <[email protected]>
Signed-off-by: Yann E. MORIN <[email protected]>
(cherry picked from commit 2065273)
Signed-off-by: Peter Korsgaard <[email protected]>

GCC14 now treats implicit int types as error so when check() from
check-lxdialog.sh is called to check whether we can link against ncurses
it will fail silently and the help text indicating to install ncurses is
printed.

However, this is not due to missing ncurses but once the stderr redirect
to /dev/null is removed we can see the root cause:
<stdin>:2:1: error: return type defaults to ‘int’ [-Wimplicit-int]

So, in order for menuconfig to work with GCC14 lets just specify the
return type of main() as int.

Npte that the upstream kconfig in the linux kernel source tree no longer
carries or uses the check-lxdialog.sh script since commit 1c5af5cf9308
(kconfig: refactor ncurses package checks for building mconf and nconf),
so there is no commit we can backport to our kconfig copy.

Signed-off-by: Robert Marko <[email protected]>
Reviewed-by: Petr Vorel <[email protected]>
Tested-by: Petr Vorel <[email protected]>
[[email protected]: add note about upstream kernel]
Signed-off-by: Yann E. MORIN <[email protected]>
(cherry picked from commit a6210d2)
Signed-off-by: Peter Korsgaard <[email protected]>

The commit [1] updated the u-boot version with the one used by
orangepi_zero_plus2_defconfig but the dependency on openssl
was forgotten.

Fixes:
https://gitlab.com/buildroot.org/buildroot/-/jobs/6703221868

[1] eb16148

Signed-off-by: Romain Naour <[email protected]>
(cherry picked from commit bc75b09)
Signed-off-by: Peter Korsgaard <[email protected]>

Since the toolchain Bootlin update to 2023.11-1 [1], the arm Linux
kernel build is broken with binutils >= 2.41 with:

  arch/arm/mm/proc-v7.S: Assembler messages:
  arch/arm/mm/proc-v7.S:640: Error: junk at end of line, first unrecognized character is `#'

A similar issue has already be fixed for qemu m68k [2].

Bump to the latest kernel 4.19 that already include the backport
of 790756c7e022 ("ARM: 8933/1: replace Sun/Solaris style flag on section directive")

[1] 7e0e6e3
[2] a1ce947

Fixes:
https://gitlab.com/buildroot.org/buildroot/-/jobs/6703222383

Signed-off-by: Romain Naour <[email protected]>
(cherry picked from commit 7e126bd)
Signed-off-by: Peter Korsgaard <[email protected]>

Fixes:
https://gitlab.com/buildroot.org/buildroot/-/jobs/6609466641

Signed-off-by: Julien Olivain <[email protected]>
Reviewed-by: Fabio Estevam <[email protected]>
Signed-off-by: Romain Naour <[email protected]>
(cherry picked from commit ffe920b)
Signed-off-by: Peter Korsgaard <[email protected]>

The build failed with:

  Incorrect selection of kernel headers: expected 6.8.x, got 6.5.x

Fixes: https://gitlab.com/buildroot.org/buildroot/-/jobs/6498278078

Signed-off-by: Gero Schwäricke <[email protected]>
Signed-off-by: Romain Naour <[email protected]>
(cherry picked from commit f5aac04)
Signed-off-by: Peter Korsgaard <[email protected]>

The build for this defconfig fails with:

  Incorrect selection of kernel headers: expected 6.8.x, got 6.1.x

Found with the following command while trying to find boards that have
missing custom headers series:

  grep --null --recursive --files-without-match "BR2_TOOLCHAIN_EXTERNAL=y" ./configs \
    | xargs --null grep --null --files-with-matches "BR2_LINUX_KERNEL_CUSTOM_.*=y" \
    | xargs --null grep --null --files-without-match "BR2_KERNEL_HEADERS_[0-9]\+_[0-9]\+=y"\
    | xargs --null grep --files-without-match "BR2_PACKAGE_HOST_LINUX_HEADERS_CUSTOM_[0-9]\+_[0-9]\+=y"
  ./configs/mangopi_mq1rdw2_defconfig  # patch pending
  ./configs/raspberrypizero2w_defconfig
  ./configs/sipeed_licheepi_nano_defconfig  # patch pending

Fixes:
https://gitlab.com/buildroot.org/buildroot/-/jobs/6712162631

Signed-off-by: Gero Schwäricke <[email protected]>
[Romain: add gitlab-ci link]
Signed-off-by: Romain Naour <[email protected]>
(cherry picked from commit dc18b63)
Signed-off-by: Peter Korsgaard <[email protected]>

Wireless regulatory database lists the allowed radio frequencies for
each local jurisdiction. Since linux-4.15 the kernel supports loading
the files regulatory.db/regulatory.db.p7s directly from the
/lib/firmware directory. Currently this package is not enabled and
kernel complains with the following message on every boot:
"""
platform regulatory.0: Direct firmware load for regulatory.db failed
with error -2
cfg80211: failed to load regulatory.db
"""
Add wireless regulatory database package to fix the issue.

Signed-off-by: Konstantin Aladyshev <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>
(cherry picked from commit 16e9f51)
Signed-off-by: Peter Korsgaard <[email protected]>

For change log since v2.3.4, see:
- https://github.com/FluidSynth/fluidsynth/releases/tag/v2.3.5

Signed-off-by: Julien Olivain <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>
(cherry picked from commit 0215a6d)
Signed-off-by: Peter Korsgaard <[email protected]>

Set ac_cv_path_SHUTDOWN to /sbin/shutdown to avoid the following build
failure when shutdown is not available on host raised since the addition
of the package in commit d12b63b:

configure: error: Missing required tool; need any one of: shutdown shutdown.bsd

Fixes: d12b63b
 - http://autobuild.buildroot.org/results/a8bbb5ced8343e08070361f260050de422144710

Signed-off-by: Fabrice Fontaine <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>
(cherry picked from commit 640a790)
Signed-off-by: Peter Korsgaard <[email protected]>

libgmp is included in coreutils (through bootstrap.conf) since bump to
version 9.0 in commit 2ee43ba and
https://git.savannah.gnu.org/cgit/coreutils.git/commit/?id=13046444888a7e96f48d28fdd5a6ffe03d4ab036:

configure: WARNING: unrecognized options: --disable-gtk-doc, --disable-gtk-doc-html, --disable-doc, --disable-docs, --disable-documentation, --with-xmlto, --with-fop, --enable-ipv6, --enable-static, --enable-shared, --without-gmp

Fixes: 2ee43ba

Signed-off-by: Fabrice Fontaine <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>
(cherry picked from commit 16463a0)
Signed-off-by: Peter Korsgaard <[email protected]>

Signed-off-by: Julien Olivain <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>
(cherry picked from commit 6317f6c)
Signed-off-by: Peter Korsgaard <[email protected]>

Signed-off-by: Julien Olivain <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>
(cherry picked from commit 7c1faf9)
Signed-off-by: Peter Korsgaard <[email protected]>

The http URL redirects to https. This commit updates this URL to
directly use https.

Signed-off-by: Julien Olivain <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>
(cherry picked from commit 2aa3a23)
Signed-off-by: Peter Korsgaard <[email protected]>

Bump to latest version, fixing couple of bugs. Remove patch already
included in this release.

https://github.com/linux-pam/linux-pam/releases/tag/v1.6.1

Signed-off-by: Jan Čermák <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>
(cherry picked from commit 0d394c3)
Signed-off-by: Peter Korsgaard <[email protected]>

Signed-off-by: Sébastien Szymanski <[email protected]>
Signed-off-by: Romain Naour <[email protected]>
(cherry picked from commit 74c0cf2)
Signed-off-by: Peter Korsgaard <[email protected]>

Sebastian email address at Smile is bouncing, so drop it
from the DEVELOPERS file.

Signed-off-by: Romain Naour <[email protected]>
Signed-off-by: Yann E. MORIN <[email protected]>
(cherry picked from commit 7b973da)
Signed-off-by: Peter Korsgaard <[email protected]>

Signed-off-by: Francois Perrad <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>
(cherry picked from commit 566eb38)
Signed-off-by: Peter Korsgaard <[email protected]>

Release notes:
https://gitlab.torproject.org/tpo/core/tor/-/raw/release-0.4.8/ReleaseNotes
https://forum.torproject.org/t/stable-release-0-4-8-11/12265

Signed-off-by: Bernd Kuhls <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>
(cherry picked from commit f1723c9)
Signed-off-by: Peter Korsgaard <[email protected]>

Signed-off-by: Bernd Kuhls <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>
(cherry picked from commit d476d2e)
Signed-off-by: Peter Korsgaard <[email protected]>

Buildroot commit 38d0734 forgot to
add the corresponding BR2_HOST_CMAKE_AT_LEAST_X_Y option.

Signed-off-by: Bernd Kuhls <[email protected]>
Signed-off-by: Romain Naour <[email protected]>
(cherry picked from commit 81d7103)
Signed-off-by: Peter Korsgaard <[email protected]>

Signed-off-by: Michael Nosthoff <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>
(cherry picked from commit 30a88f4)
Signed-off-by: Peter Korsgaard <[email protected]>

Release notes:
https://sourceforge.net/p/png-mng/mailman/message/58741099/

Signed-off-by: Bernd Kuhls <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>
(cherry picked from commit ce3ce43)
Signed-off-by: Peter Korsgaard <[email protected]>

Correctly fix atomic handling to avoid the following build failure with
all users of libglib2 (e.g. gdk-pixbuf) raised since bump to version
2.76.1 in commit 3f9622f:

/usr/lib/libglib-2.0.a(gthread-posix.c.o): in function `g_mutex_trylock':
gthread-posix.c:(.text+0xda8): undefined reference to `__atomic_compare_exchange_4'

Fixes:
 - http://autobuild.buildroot.org/results/24a358869b98d83ab374c7c3a185ced450064d35

Signed-off-by: Fabrice Fontaine <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>
(cherry picked from commit 929bffb)
Signed-off-by: Peter Korsgaard <[email protected]>

Commit 929bffb forgot to update patch
number
Moreover, replace it with a new iteration to follow upstream request [1]
and avoid the following build host build failure with br-autobuild-1:

/usr/bin/ld: cannot find /usr/lib64/libatomic.so.1.2.0: No such file or directory

Fixes: 929bffb
 - http://autobuild.buildroot.org/results/a12b9c4436594818f4ce128595b429adf7d90e31

[1]: https://gitlab.gnome.org/GNOME/glib/-/merge_requests/3606

Signed-off-by: Fabrice Fontaine <[email protected]>
[[email protected]: mention upstream commit now it's merged]
Signed-off-by: Yann E. MORIN <[email protected]>
(cherry picked from commit f525778)
Signed-off-by: Peter Korsgaard <[email protected]>

NPTL is mandatory since bump to version 9.3.0 in commit
57aba03 and
OSGeo/PROJ@ce08025:

/home/buildroot/instance-0/output-1/build/proj-9.3.0/src/iso19111/factory.cpp: In member function 'std::shared_ptr<osgeo::proj::io::SQLiteHandle> osgeo::proj::io::SQLiteHandleCache::getHandle(const std::string&, PJ_CONTEXT*)':
/home/buildroot/instance-0/output-1/build/proj-9.3.0/src/iso19111/factory.cpp:622:9: error: 'pthread_atfork' was not declared in this scope; did you mean 'pthread_attr_t'?
  622 |         pthread_atfork(nullptr, nullptr,
      |         ^~~~~~~~~~~~~~
      |         pthread_attr_t

Fixes: 57aba03
 - http://autobuild.buildroot.org/results/392664375c5bc5f047d39bff31534a226e8ea526

Signed-off-by: Fabrice Fontaine <[email protected]>
Reviewed-by: Maxim Kochetkov <[email protected]>
Signed-off-by: Yann E. MORIN <[email protected]>
(cherry picked from commit 4eeb69c)
Signed-off-by: Peter Korsgaard <[email protected]>

Signed-off-by: Brandon Maier <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>
(cherry picked from commit a8c7a53)
Signed-off-by: Peter Korsgaard <[email protected]>

ti-sgx-km raises the following build failure without BR2_ARM_EABIHF:

eurasiacon/build/linux2/toplevel.mk:230: eurasiacon/build/linux2/moduledefs/target_armel.mk: No such file or directory

Fixes:
 - http://autobuild.buildroot.org/results/17e4da346d062570b9a84ab8eb1ce93c6d7384be
 - http://autobuild.buildroot.org/results/04fd659472f1928c2621354bb0ea3b60c5dfadec

Signed-off-by: Fabrice Fontaine <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>
(cherry picked from commit 5924a5c)
Signed-off-by: Peter Korsgaard <[email protected]>

Fixes CVE-2024-32002, CVE-2024-32004, CVE-2024-32020 and CVE-2024-32021
(for details see [1]).

[1] https://lore.kernel.org/lkml/[email protected]/

Signed-off-by: Peter Seiderer <[email protected]>
Signed-off-by: Peter Korsgaard <[email protected]>

Fix the following x86_64 build failure with binutils 2.41:

purgatory/arch/i386/entry32-16.S:23: Error: 64bit mode not supported on `i386'.

Fixes:
 - http://autobuild.buildroot.org/results/60f2f163b491879a8ea7f2d56a6b0d38b3cf439c

Signed-off-by: Fabrice Fontaine <[email protected]>
Signed-off-by: Yann E. MORIN <[email protected]>
(cherry picked from commit a2be156)
Signed-off-by: Peter Korsgaard <[email protected]>

With the bump to version 8.1.1, the patch that disabled the compilation
of the fp-bench test is no longer applicable, even though the package
compilation process does not report any errors in applying the patch
itself. The new patch does not disable the test by default but only if
the file fenv.h is not missing, with the hope that this approach will be
considered acceptable by the maintainer and merged upstream.

The patch is an adaptation of the one sent upstream.

Link: https://lists.nongnu.org/archive/html/qemu-devel/2021-03/msg00492.html
Signed-off-by: Dario Binacchi <[email protected]>
Signed-off-by: Yann E. MORIN <[email protected]>
(cherry picked from commit 2bb0c57)
Signed-off-by: Peter Korsgaard <[email protected]>

Commit 3fa1ae0 ("package/qemu: add option to enable tracing")
added a patch with a wrong number.

Signed-off-by: Dario Binacchi <[email protected]>
Signed-off-by: Yann E. MORIN <[email protected]>
(cherry picked from commit bf8e4c2)
Signed-off-by: Peter Korsgaard <[email protected]>

And enable BR2_DOWNLOAD_FORCE_CHECK_HASHES.

Signed-off-by: Edgar Bonet <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>
(cherry picked from commit 7f5cd99)
Signed-off-by: Peter Korsgaard <[email protected]>

Signed-off-by: Edgar Bonet <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>
(cherry picked from commit 74787fd)
Signed-off-by: Peter Korsgaard <[email protected]>

Fixes the following error/warnings with kconfig from linux-6.9-rc5:

  boot/barebox/Config.in:79: syntax error
  boot/barebox/Config.in:79:warning: ignoring unsupported character '/'
  boot/barebox/Config.in:79:warning: ignoring unsupported character '/'
  boot/barebox/Config.in:79:warning: ignoring unsupported character '/'
  boot/barebox/Config.in:79:warning: ignoring unsupported character '.'
  boot/barebox/Config.in:79: invalid statement
  boot/barebox/Config.in:93: syntax error
  boot/barebox/Config.in:93:warning: ignoring unsupported character '/'
  boot/barebox/Config.in:93:warning: ignoring unsupported character '/'
  boot/barebox/Config.in:93:warning: ignoring unsupported character '/'
  boot/barebox/Config.in:93:warning: ignoring unsupported character '.'
  boot/barebox/Config.in:93: invalid statement

Signed-off-by: Peter Seiderer <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>
(cherry picked from commit e86aec1)
Signed-off-by: Peter Korsgaard <[email protected]>

Fixes the following error/warnings with kconfig from linux-6.9-rc5:

  package/cmocka/Config.in:2: syntax error
  package/cmocka/Config.in:2: invalid statement
  package/cmocka/Config.in:3: invalid statement
  package/cmocka/Config.in:4: invalid statement
  [...]

Signed-off-by: Peter Seiderer <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>
(cherry picked from commit 4abda65)
Signed-off-by: Peter Korsgaard <[email protected]>

Fixes the following error/warnings with kconfig from linux-6.9-rc5:

  package/dovecot/Config.in:36: syntax error
  package/dovecot/Config.in:36:warning: ignoring unsupported character '/'
  package/dovecot/Config.in:36:warning: ignoring unsupported character '/'
  package/dovecot/Config.in:36:warning: ignoring unsupported character '.'
  package/dovecot/Config.in:36: invalid statement

Signed-off-by: Peter Seiderer <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>
(cherry picked from commit ff70f9e)
Signed-off-by: Peter Korsgaard <[email protected]>

Fixes the following error/warnings with kconfig from linux-6.9-rc5:

  package/python-pydal/Config.in:2: syntax error
  package/python-pydal/Config.in:2: invalid statement
  package/python-pydal/Config.in:3: invalid statement
  [...]

Signed-off-by: Peter Seiderer <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>
(cherry picked from commit 9f8d3f4)
Signed-off-by: Peter Korsgaard <[email protected]>

Fixes the following error/warnings with kconfig from linux-6.9-rc5:

  package/x11r7/Config.in:14: syntax error
  package/x11r7/Config.in:14:warning: ignoring unsupported character '/'
  package/x11r7/Config.in:14:warning: ignoring unsupported character '/'
  package/x11r7/Config.in:14:warning: ignoring unsupported character '/'
  package/x11r7/Config.in:14:warning: ignoring unsupported character '.'
  package/x11r7/Config.in:14: invalid statement
  [...]

Signed-off-by: Peter Seiderer <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>
(cherry picked from commit a214c45)
Signed-off-by: Peter Korsgaard <[email protected]>

NLS is an optional dependency since the addition of the package in
commit f78c5cb:

/home/autobuild/autobuild/instance-0/output-1/host/lib/gcc/arm-buildroot-linux-musleabi/12.3.0/../../../../arm-buildroot-linux-musleabi/bin/ld: ../lib/.libs/libshadow.a(libshadow_la-alloc.o): in function `xcalloc':
alloc.c:(.text+0x7c): undefined reference to `libintl_gettext'

Fixes: f78c5cb
 - http://autobuild.buildroot.org/results/9f604d09745ffa1f4db3bdcfe0326c236effac0c

Signed-off-by: Fabrice Fontaine <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>
(cherry picked from commit f823846)
Signed-off-by: Peter Korsgaard <[email protected]>

Fix the following build failure with kernel < 4.7 raised since bump to
version 2.5.0 in commit 0c15169 and
ppp-project/ppp@81ad945:

sys-linux.c: In function 'get_ppp_stats_rtnetlink':
sys-linux.c:1783:29: error: field 'ifsm' has incomplete type
 1783 |         struct if_stats_msg ifsm;
      |                             ^~~~

Fixes:
 - http://autobuild.buildroot.org/results/82392df447f650f241f23e59e65131fb4a930010

Signed-off-by: Fabrice Fontaine <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>
(cherry picked from commit 45c1def)
Signed-off-by: Peter Korsgaard <[email protected]>

Fixes:
https://gitlab.com/buildroot.org/buildroot/-/jobs/6761770801

The Linux kernel fails to build since commit e88225e (package/binutils:
make 2.41 the default version):

arch/arm/mm/proc-feroceon.S: Assembler messages:
arch/arm/mm/proc-feroceon.S:587: Error: junk at end of line, first unrecognized character is `#'
make[3]: *** [scripts/Makefile.build:430: arch/arm/mm/proc-feroceon.o] Error 1
make[3]: *** Waiting for unfinished jobs....

Fix the build by bumping the kernel to 4.14.336, which includes commit
3ab03df64f77 (ARM: 8933/1: replace Sun/Solaris style flag on section
directive):

https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?h=linux-4.14.y&id=3ab03df64f7754728a2257c47775a70a88428331

Signed-off-by: Peter Korsgaard <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>
(cherry picked from commit c0dc1b3)
Signed-off-by: Peter Korsgaard <[email protected]>

And enable BR2_DOWNLOAD_FORCE_CHECK_HASHES.

Generated by utils/add-custom-hashes, with the (redundant)
linux-headers.hash replaced by a symlink.

Signed-off-by: Peter Korsgaard <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>
(cherry picked from commit 56ce35d)
Signed-off-by: Peter Korsgaard <[email protected]>

Fix CVE-2024-23837 and CVE-2024-28871

GHSA-f9wf-rrjj-qx8m
GHSA-ffr2-45w9-7wmg
https://github.com/OISF/libhtp/blob/0.5.48/ChangeLog

Signed-off-by: Fabrice Fontaine <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>
(cherry picked from commit babb39c)
Signed-off-by: Peter Korsgaard <[email protected]>

Fixes:
 - CVE-2024-23839 - Critical severity
 - CVE-2024-23836 - Critical severity
 - CVE-2024-23835 - High severity
 - CVE-2024-24568 - Moderate severity
 - CVE-2024-28870 - HIGH
 - CVE-2024-32663 CRITICAL (HIGH for 6.0.x)
 - CVE-2024-32664 CRITICAL (HIGH for 7.0.x)
 - CVE-2024-32867 MODERATE

https://forum.suricata.io/t/suricata-7-0-3-and-6-0-16-released/4468
https://forum.suricata.io/t/suricata-7-0-4-and-6-0-17-released/4534
https://forum.suricata.io/t/suricata-6-0-18-released/4539
https://forum.suricata.io/t/suricata-7-0-5-and-6-0-19-released/4617

Signed-off-by: Fabrice Fontaine <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>
(cherry picked from commit a8e60c4)
Signed-off-by: Peter Korsgaard <[email protected]>

sframe library was added by binutils 2.40 and
bminor/binutils-gdb@19e559f
resulting in the following static build failure:

/home/buildroot/autobuild/run/instance-1/output-1/build/binutils-2.41/bfd/elf-sframe.c:220: undefined reference to `sframe_decode'

[...]

configure: error: bfd library not found

Fixes:
 - http://autobuild.buildroot.org/results/a9f3e09e6543b3773440c011e93bd41e357691e4

Signed-off-by: Fabrice Fontaine <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>
(cherry picked from commit 5272c6b)
Signed-off-by: Peter Korsgaard <[email protected]>

- Fixed: [CVE-2024-34402]
    Protect against integer overflow in ComposeQueryEngine
- Fixed: [CVE-2024-34403]
    Protect against integer overflow in ComposeQueryMallocExMm

https://github.com/uriparser/uriparser/blob/uriparser-0.9.8/ChangeLog

Signed-off-by: Fabrice Fontaine <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>
(cherry picked from commit 6fe29e4)
Signed-off-by: Peter Korsgaard <[email protected]>

PIE will be set by buildroot if the user wants it so set
{COMPILE,LINK}_PIE to an empty value to fix the following build failure
raised since the addition of the package in commit
02c818b:

/home/buildroot/autobuild/run/instance-3/output-1/host/bin/m68k-linux-gcc -W -Wall -Waggregate-return -Wcast-align -Wconversion -Wdisabled-optimization -Wmissing-declarations -Wmissing-format-attribute -Wmissing-noreturn -Wmissing-prototypes -Wpointer-arith -Wredundant-decls -Wshadow -Wstrict-prototypes -Wwrite-strings -D_LARGEFILE_SOURCE -D_LARGEFILE64_SOURCE -D_FILE_OFFSET_BITS=64  -O2 -g0   -std=gnu99  -DLIBEXECDIR=\"/usr/lib\" -D_LARGEFILE_SOURCE -D_LARGEFILE64_SOURCE -D_FILE_OFFSET_BITS=64 -Wl,-z,relro -Wl,-stats   -fPIE -pie -Wl,-z,now  utempter.c -o utempter

[...]

/home/buildroot/autobuild/run/instance-3/output-1/host/opt/ext-toolchain/bin/../lib/gcc/m68k-buildroot-linux-uclibc/12.3.0/../../../../m68k-buildroot-linux-uclibc/bin/ld: /home/buildroot/autobuild/run/instance-3/output-1/host/m68k-buildroot-linux-uclibc/sysroot/usr/lib/Scrt1.o: in function `lib_main':
(.text+0x4): undefined reference to `__shared_flat_add_library'

Fixes: 02c818b
 - http://autobuild.buildroot.org/results/3a5581fd4edf56bbdc48ab111a2351fc70f1c703

Signed-off-by: Fabrice Fontaine <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>
(cherry picked from commit 36b0692)
Signed-off-by: Peter Korsgaard <[email protected]>

linux-pam is an optional dependency which is enbled by default since
bump to version 2.5.0 in commit 0c15169
and
ppp-project/ppp@2883dd0

Signed-off-by: Fabrice Fontaine <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>
(cherry picked from commit bbcf02c)
Signed-off-by: Peter Korsgaard <[email protected]>

The CPIO filesystem generated by TestPerlDBDmysql is too large, and
doesn't fit as an initramfs in the 256MB of RAM available in the
versatilepb machine. This causes a failure while running a basic
test "perl -MDBI -e '1'" since "/usr/lib/perl5", and many files
being missing from the root filesystem, ultimately causing the test
to fail.

Can't locate DBI.pm in @inc (you may need to install the DBI module)
(@inc entries checked: /usr/lib/perl5/site_perl/5.38.2/arm-linux
/usr/lib/perl5/site_perl/5.38.2 /usr/lib/perl5/5.38.2/arm-linux
/usr/lib/perl5/5.38.2).

It would make sense to switch all test cases to use ext2 + a
hard-drive, but for now, let's fix the few test cases that are causing
problems.

Fixes:
https://gitlab.com/buildroot.org/buildroot/-/jobs/6735654506

Signed-off-by: Romain Naour <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>
(cherry picked from commit 8937cd0)
Signed-off-by: Peter Korsgaard <[email protected]>

Now that the TestPerlDBDmysql can be run normally, a new runtime issue
appear due to switch from oracle-mysql to MariaDB:

  # perl -MDBI -e '1'
  # echo $?
  0

  # perl -MDBD::mysql -e '1'
  Can't load '/usr/lib/perl5/site_perl/5.38.2/arm-linux/auto/DBD/mysql/mysql.so'
  for module DBD::mysql: /usr/lib/perl5/site_perl/5.38.2/arm-linux/auto/DBD/mysql/mysql.so:
  undefined symbol: net_buffer_length at /usr/lib/perl5/5.38.2/arm-linux/DynaLoader.pm line 206.

This is fixed by an upstream commit [1] from 4.046_01 release.

[1] perl5-dbi/DBD-mysql@0f0cebe

Fixes:
https://gitlab.com/buildroot.org/buildroot/-/jobs/6735654506

Signed-off-by: Romain Naour <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>
(cherry picked from commit cefcd5b)
Signed-off-by: Peter Korsgaard <[email protected]>

cpe:2.3:a:bencollins:jwt_c_library is a valid CPE identifier for this
package:

  https://nvd.nist.gov/products/cpe/detail/6335E595-6F38-4837-83BB-C78B687BB75B

Signed-off-by: Fabrice Fontaine <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>
(cherry picked from commit 1a2564e)
Signed-off-by: Peter Korsgaard <[email protected]>

Fix the following static build failure raised since bump to version
version 6.0.14 in commit ce17f93 and
OISF/suricata@31ba4fd:

configure:22378: checking for pcap_open_dead in -lpcap
configure:22407: /home/buildroot/autobuild/run/instance-3/output-1/host/bin/x86_64-linux-gcc -o conftest -D_LARGEFILE_SOURCE -D_LARGEFILE64_SOURCE -D_FILE_OFFSET_BITS=64  -O2 -g0  -static -std=c11 -march=native -D_LARGEFILE_SOURCE -D_LARGEFILE64_SOURCE -D_FILE_OFFSET_BITS=64  -static -rdynamic conftest.c -lpcap  -ljansson -lpthread -lyaml -lpcre -latomic -lz >&5
/home/buildroot/autobuild/run/instance-3/output-1/host/opt/ext-toolchain/bin/../lib/gcc/x86_64-buildroot-linux-musl/12.3.0/../../../../x86_64-buildroot-linux-musl/bin/ld: /home/buildroot/autobuild/run/instance-3/output-1/host/x86_64-buildroot-linux-musl/sysroot/usr/lib/../lib64/libpcap.a(pcap-linux.o): in function `nl80211_init':
pcap-linux.c:(.text+0xc34): undefined reference to `nl_socket_alloc'

[...]

checking for pcap_open_dead in -lpcap... no

Fixes: ce17f93
 - http://autobuild.buildroot.org/results/9e25c2508bd4100d2d1d3180e79060d762361213

Signed-off-by: Fabrice Fontaine <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>
(cherry picked from commit a3ee47e)
Signed-off-by: Peter Korsgaard <[email protected]>

openocd is not compatible with libgpiod2 resulting in the following
build failure since the addition of libgpiod2 in commit
57391fa:

src/jtag/drivers/linuxgpiod.c: In function 'helper_get_line':
src/jtag/drivers/linuxgpiod.c:283:19: error: 'GPIOD_LINE_REQUEST_DIRECTION_INPUT' undeclared (first use in this function); did you mean 'GPIOD_LINE_DIRECTION_INPUT'?
  283 |         int dir = GPIOD_LINE_REQUEST_DIRECTION_INPUT, flags = 0, val = 0, retval;
      |                   ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
      |                   GPIOD_LINE_DIRECTION_INPUT

Fixes: 57391fa
 - http://autobuild.buildroot.org/results/7195e8b76350f26ab3b963702d88b254512e6928

Signed-off-by: Fabrice Fontaine <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>
(cherry picked from commit be3252f)
Signed-off-by: Peter Korsgaard <[email protected]>

As reported by Antoine Coutant on the Buildroot mailing list [1]:

rpds depends on the crate pyo3. This crate uses

  "std::sync::atomic::AtomicI64"

which doesn't exist for 32 bits targets.
That leads to an error as reported by Buildroot Gitlab-ci.

An issue have been opened on pyo3's github [2].
A fix have been accepted by pyo3 [3] and merged in pyo3 0.20.3 release
[4]. This pyo3 0.20.3 uses crate portable-atomic [5] to provide atomic
types and compare and swap operations for all targets that can use std.

python-rpds-py 0.18.1 is the first release that use pyo3 0.20.3.

Before python-rpds-py 0.18.1 release fixing this issue would require
that we be able to patch a package during the Cargo vendoring step [6].

[1] http://lists.busybox.net/pipermail/buildroot/2024-February/684867.html
[2]: PyO3/pyo3#3614
[3]: PyO3/pyo3#3619
[4]: https://github.com/PyO3/pyo3/blob/v0.20.3/CHANGELOG.md
[5]: https://github.com/taiki-e/portable-atomic
[6]: http://lists.busybox.net/pipermail/buildroot/2024-February/684886.html

Fixes:
https://gitlab.com/buildroot.org/buildroot/-/jobs/6783811842 (TestPythonPy3Dtschema)
https://gitlab.com/buildroot.org/buildroot/-/jobs/6783811860 (TestPythonPy3FlaskExpectsJson)

Reported-by: Antoine Coutant <[email protected]>
Cc: James Hilliard <[email protected]>
Signed-off-by: Romain Naour <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>
(cherry picked from commit 26b0540)
Signed-off-by: Peter Korsgaard <[email protected]>

Disable performance measurement tools which are enabled by default since
bump to version 4.2.5 in commit d3a8177

Signed-off-by: Fabrice Fontaine <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>
(cherry picked from commit 8b1b438)
Signed-off-by: Peter Korsgaard <[email protected]>

This is irrelevant as of 402ad9f (package/network-manager: bump
to version 1.22.10).

Details: https://lore.kernel.org/all/ZgXKrtfSjahxswtP@landeda/

Signed-off-by: James Hilliard <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>
(cherry picked from commit dc21afe)
Signed-off-by: Peter Korsgaard <[email protected]>

Fixes the following security issue:

CVE-2024-24787: cmd/go: arbitrary code execution during build on darwin

Signed-off-by: Peter Korsgaard <[email protected]>

- Use official tarball and so drop autoreconf
- Update hash of LICENSE file, verbatim copy of the current MPL 2.0 with
  benmcollins/libjwt@ebebb50
- Fix CVE-2024-25189: libjwt 1.15.3 uses strcmp (which is not constant
  time) to verify authentication, which makes it easier to bypass
  authentication via a timing side channel.

benmcollins/libjwt@v1.15.3...v1.17.0

Signed-off-by: Fabrice Fontaine <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>
(cherry picked from commit c65639e)
Signed-off-by: Peter Korsgaard <[email protected]>

Signed-off-by: Julien Olivain <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>
(cherry picked from commit 0623c53)
Signed-off-by: Peter Korsgaard <[email protected]>

Signed-off-by: Julien Olivain <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>
(cherry picked from commit 639f507)
Signed-off-by: Peter Korsgaard <[email protected]>

pppd fails to start on a systems with buildroot 2024.02.x because of
missing pppd directory in /var/run. There are some logs hinting at this
issue:
Warning: couldn't open ppp database /var/run/pppd/pppd2.tdb
Can't create lock file /var/run/pppd/lock/LCK..ppp-tty-fifo1: No such file or directory
Can't create lock file /var/run/pppd/lock/LCK..ppp-tty-fifo1: No such file or directory
Can't create lock file /var/run/pppd/lock/LCK..ppp-tty-fifo1: No such file or directory
Can't create lock file /var/run/pppd/lock/LCK..ppp-tty-fifo1: No such file or directory
Can't create lock file /var/run/pppd/lock/LCK..ppp-tty-fifo1: No such file or directory
Can't create lock file /var/run/pppd/lock/LCK..ppp-tty-fifo1: No such file or directory
Can't create lock file /var/run/pppd/lock/LCK..ppp-tty-fifo1: No such file or directory

The issue has already been detected and fixed upstream (see [1]) and is
expected to be released on a v2.5.1, but this release seems to be stalled
for now (see [2]). Bump on current master, which currently reflects what
will likely be the 2.5.1.

[1] ppp-project/ppp#419
[2] ppp-project/ppp#460

Signed-off-by: Alexis Lothoré <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>
(cherry picked from commit c1b04a3)
Signed-off-by: Peter Korsgaard <[email protected]>

When building on hosts with libstdc++ without demangle support this error
shows up:
checking for __cxa_demangle in -lstdc++... no
configure: error: __cxa_demangle not found in libstdc++, use --disable-demangler to disable demangler support.
make[1]: *** [package/pkg-generic.mk:273: /home/giuliobenetti/br_reproduce/c2524c7580d97f7387ec22da62be71d77f2ed8ec/output/build/host-elfutils-0.189/.stamp_configured] Error 1
make: *** [Makefile:23: _all] Error 2

So let's disable demangler for host by default.

Fixes: still not showed by autobuilders. Reproduced on Ubuntu 22.04 with
Ubuntu APT g++ 11.4.0

Signed-off-by: Giulio Benetti <[email protected]>
Reviewed-by: Christian Stewart <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>
(cherry picked from commit 5f2c9f8)
Signed-off-by: Peter Korsgaard <[email protected]>

Release notes: https://www.samba.org/samba/history/samba-4.19.6.html

Signed-off-by: Bernd Kuhls <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>
(cherry picked from commit e19eb8c)
Signed-off-by: Peter Korsgaard <[email protected]>

Signed-off-by: Julien Olivain <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>
(cherry picked from commit 449ae81)
Signed-off-by: Peter Korsgaard <[email protected]>

LVM2 has a hard dependency on the device-mapper presence in the Kernel.
This commit enables those mandatory Kernel configuration by defining
the _LINUX_CONFIG_FIXUPS macro. This will make sure the final system
image will end up in a working configuration.

This was suggested by Arnout in [1].

[1] https://lists.buildroot.org/pipermail/buildroot/2024-April/688776.html

Suggested-by: Arnout Vandecappelle <[email protected]>
Signed-off-by: Julien Olivain <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>
(cherry picked from commit 419d39b)
Signed-off-by: Peter Korsgaard <[email protected]>

The lvm2 package now enables the required Kernel configuration. The
Kernel config fragment included in this test is no longer needed.

This commit removes it.

Signed-off-by: Julien Olivain <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>
(cherry picked from commit 9339343)
Signed-off-by: Peter Korsgaard <[email protected]>

The following defconfig:

 BR2_aarch64=y
 BR2_cortex_a72=y
 BR2_TOOLCHAIN_EXTERNAL=y
 BR2_INIT_NONE=y
 BR2_SYSTEM_BIN_SH_NONE=y
 # BR2_PACKAGE_BUSYBOX is not set
 BR2_PACKAGE_GSTREAMER1=y
 BR2_PACKAGE_GST1_PLUGINS_BASE_LIB_OPENGL=y
 BR2_PACKAGE_GST1_PLUGINS_GOOD=y
 # BR2_PACKAGE_GST1_PLUGINS_GOOD_PLUGIN_AVI is not set
 # BR2_PACKAGE_GST1_PLUGINS_GOOD_PLUGIN_ISOMP4 is not set
 # BR2_PACKAGE_GST1_PLUGINS_GOOD_PLUGIN_WAVPARSE is not set
 BR2_PACKAGE_GST1_PLUGINS_GOOD_PLUGIN_QMLGL=y
 BR2_PACKAGE_MESA3D=y
 BR2_PACKAGE_MESA3D_GALLIUM_DRIVER_SWRAST=y
 BR2_PACKAGE_MESA3D_OPENGL_EGL=y
 BR2_PACKAGE_MESA3D_OPENGL_ES=y
 BR2_PACKAGE_QT5=y
 BR2_PACKAGE_WAYLAND=y
 # BR2_TARGET_ROOTFS_TAR is not set

fails to build in gst1-plugins-good, with:

    build/gst1-plugins-good-1.22.9/ext/qt/meson.build:48:4: ERROR: Problem encountered: qt5 qmlglsink plugin is enabled, but qt specific tools were not found

This is due to qt5tools being missing. This commit adds this missing
dependency.

Signed-off-by: Charles Hardin <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>
(cherry picked from commit c107dd3)
Signed-off-by: Peter Korsgaard <[email protected]>

Signed-off-by: Julien Olivain <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>
(cherry picked from commit dd45ac1)
Signed-off-by: Peter Korsgaard <[email protected]>

Signed-off-by: Julien Olivain <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>
(cherry picked from commit b1bbc7a)
Signed-off-by: Peter Korsgaard <[email protected]>

For change log, see [1].

License hash file changed, due to the addition of an URL. See [2].

Fixes: [3]

Some 32 bit architectures were failing at runtime with the message:

    FATAL: time limit exceeded 'file.png' @ fatal/cache.c/GetImagePixelCache/1702

The fix is included in 7.1.1-23.

[1] https://github.com/ImageMagick/Website/blob/main/ChangeLog.md
[2] ImageMagick/ImageMagick@2c87d7d
[3] ImageMagick/ImageMagick#6891

Signed-off-by: Julien Olivain <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>
(cherry picked from commit 0c9ea82)
Signed-off-by: Peter Korsgaard <[email protected]>

Replace br-i386-pentium-mmx-musl by bootlin-x86-i686-musl to avoid the
following build failure with efivar and musl < 1.2.3 as suggested in
https://patchwork.ozlabs.org/project/buildroot/patch/[email protected]:

/home/buildroot/instance-0/output-1/host/opt/ext-toolchain/bin/../lib/gcc/i586-buildroot-linux-musl/9.3.0/../../../../i586-buildroot-linux-musl/bin/ld: ./libefisec.so: undefined reference to `qsort_r'

Fixes:
 - http://autobuild.buildroot.org/results/a0ed3970da8a84d884b26c081b49b8d2b7208829

Signed-off-by: Fabrice Fontaine <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>
(cherry picked from commit a8be4a0)
Signed-off-by: Peter Korsgaard <[email protected]>

Commit a8be4a0 "support/config-fragments: replace
br-i386-pentium-mmx-musl" replaced this old toolchain by
bootlin-x86-i686-musl.

When using test-pkg with all toolchains, bootlin-x86-i686-musl is always
failing. The issue can be reproduced with for example:

    utils/test-pkg -a -p busybox

The issue can also be reproduced with a simple config like:

    cat > .config <<EOF
    BR2_i386=y
    BR2_TOOLCHAIN_EXTERNAL=y
    BR2_TOOLCHAIN_EXTERNAL_BOOTLIN=y
    BR2_TOOLCHAIN_EXTERNAL_BOOTLIN_X86_I686_MUSL_STABLE=y
    BR2_PACKAGE_BUSYBOX=y
    EOF
    make olddefconfig
    make

Compilation fail with output:

    Cannot execute cross-compiler '/i586-linux-gcc'

This issue happen is because the toolchain can never be selected.

The config fragment [1] selects BR2_i386 alone.

The target architecture variant default to i586 if target
architecture is i386. See [2].

Finally, the generated toolchain options includes a depends on
BR2_i386 and !BR2_x86_i586, making the toolchain always ignored.
See [3].

This commit fixes the issue by adding BR2_x86_i686=y to the
bootlin-x86-i686-musl.config fragment as suggested by the
Bootlin toolchain fragment [4].

[1] https://gitlab.com/buildroot.org/buildroot/-/blob/a8be4a04ade8e695c5c4d4a825253d69e80693f9/support/config-fragments/autobuild/bootlin-x86-i686-musl.config
[2] https://gitlab.com/buildroot.org/buildroot/-/blob/2024.02.2/arch/Config.in.x86?ref_type=tags#L38
[3] https://gitlab.com/buildroot.org/buildroot/-/blob/345ccb523e/toolchain/toolchain-external/toolchain-external-bootlin/Config.in.options#L5768-5770
[4] https://toolchains.bootlin.com/downloads/releases/toolchains/x86-i686/fragments/x86-i686--musl--stable-2024.02-1.frag

Signed-off-by: Julien Olivain <[email protected]>
[Romain: add the link to the Bootlin toolchain fragment]
Signed-off-by: Romain Naour <[email protected]>
(cherry picked from commit 1263adf)
Signed-off-by: Peter Korsgaard <[email protected]>

bpftool supports RISC-V, including rv64 and rv32, so let's enable the
bpftool package on RISC-V.

Signed-off-by: Chen Pei <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>
(cherry picked from commit a91a245)
Signed-off-by: Peter Korsgaard <[email protected]>

To make the evdev library available for other packages, install it to the
staging directory.

Signed-off-by: Ludovic Desroches <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>
(cherry picked from commit a9e54f2)
Signed-off-by: Peter Korsgaard <[email protected]>

Release notes:
https://lists.gnu.org/archive/html/lightning/2024-02/msg00000.html

Signed-off-by: Paul Cercueil <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>
(cherry picked from commit c89bec2)
Signed-off-by: Peter Korsgaard <[email protected]>

As part of the review process of the ivi-homescreen package, which
landed in commit 9d8497e, it was
deemed that the dependency on BR2_TOOLCHBAIN_HAS_THREAD_NPTL was not
needed, as it was implied by glibc. According to the commit log:

    [[email protected]:
      - propagate BR2_PACKAGE_HOST_FLUTTER_SDK_BIN_ARCH_SUPPORTS to comments
      - drop NPTL, implied by glibc
      - reorder dependencies in a more logical way
      - reorder comments
      - drop undefined BR2_PACKAGE_IVI_HOMESCREEN_HAS_CLIENT
      - grammar ("for to change")
    ]
    Signed-off-by: Yann E. MORIN <[email protected]>

However, while the BR2_TOOLCHBAIN_HAS_THREAD_NPTL dependency was
removed from the BR2_PACKAGE_IVI_HOMESCREEN option definition, the
corresponding dependency in the Config.in comment was not
dropped. Let's bring things back in sync.

Signed-off-by: Thomas Petazzoni <[email protected]>
(cherry picked from commit b9b072f)
Signed-off-by: Peter Korsgaard <[email protected]>

When ImageMagick is selected, the "zbarimg" program is compiled and
installed on target. It allows to decode a QR code from an image file.

Signed-off-by: Julien Olivain <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>
(cherry picked from commit 84ad5c2)
Signed-off-by: Peter Korsgaard <[email protected]>

Signed-off-by: Julien Olivain <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>
(cherry picked from commit 85f0941)
Signed-off-by: Peter Korsgaard <[email protected]>