Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

CMake: static linking with libpcap #187

Closed
RomainNaour opened this issue Nov 25, 2016 · 4 comments
Closed

CMake: static linking with libpcap #187

RomainNaour opened this issue Nov 25, 2016 · 4 comments
Assignees
Milestone

Comments

@RomainNaour
Copy link
Contributor

Hello,

When linking demo_mn_console statically with pcap, the CMake build system forget to link with other libraries linked with libpcap (-lnl-genl-3 -lnl-3 -ldbus-1 -pthread).

[100%] Linking C executable demo_mn_console
/home/buildroot/build/instance-0/output/host/usr/x86_64-buildroot-linux-musl/sysroot/usr/lib/../lib64/libpcap.a(pcap-linux.o): In function nl80211_init': pcap-linux.c:(.text+0x41e): undefined reference to nl_socket_alloc'

To fix this, the build system could use pcap-config:
pcap-config --libs --static
-L/path/to/sysroot/usr/lib -lpcap -L/path/to/sysroot/usr/lib/.libs -lnl-genl-3 -lnl-3 -L/path/to/sysroot/usr/lib -ldbus-1 -pthread

Full build log:
http://autobuild.buildroot.net/results/385/3859dc0f4de7e3284a96d5841f040f69f71842df/build-end.log

Best regards,
Romain

@banickn
Copy link
Contributor

banickn commented Dec 7, 2016

Hello Romain,

I tried to reproduce the issue you reported with the following steps.
At first I compiled libpcap-1.8.1 from source and then changed the cmake file so it links statically to the 'libpcap.a'. This worked for me without any problems. Anyhow, when I run pcap-config --libs --static it doesn't show "-lpcap -L/path/to/sysroot/usr/lib/.libs -lnl-genl-3 -lnl-3 -L/path/to/sysroot/usr/lib -ldbus-1 -pthread" that part of what you reported. Any idea what you have done differently compared to my approach?

Best regards,
Norman

@RomainNaour
Copy link
Contributor Author

Hello Norman,

Thanks for looking at this issue.

I really recommend you to use Buildroot for this investigation because this kind of issue may be difficult to reproduce on Linux distribution. The pcap library (even the static one) can be compiled with a different set of dependencies than the one used in Buildroot.

For this case the libpcap.a from Buildroot have more dependencies than the one used in your Linux distribution.
I'm using Debian8 and indeed the pcap library is not linked with dbus and netlink Library.
$ pcap-config --libs --static
-L/usr/lib/x86_64-linux-gnu -lpcap
It seems Debian used --disable-dbus and --whithout-libnl while configuring libpcap.

So here is the step to reproduce:

  1. Clone the Buildroot git repository
    $ git clone https://git.buildroot.net/buildroot

  2. Checkout the Buildroot git hash used by the autobuilder
    see http://autobuild.buildroot.net/results/385/3859dc0f4de7e3284a96d5841f040f69f71842df/gitid
    $ git checheckout b14b02698ecb6deb5b2676a0a7747b67ae19d709
    Note: You should be able to reproduce the same issue with the current master branch.

  3. Download the Buildroot configuration used by the autobuilder
    http://autobuild.buildroot.net/results/385/3859dc0f4de7e3284a96d5841f040f69f71842df/config
    rename config to .config in the buildroot directory

  4. Build the Linux system
    make openpowerlink

I hope this help.

Thanks
Romain

@banickn
Copy link
Contributor

banickn commented Dec 12, 2016

Hi Romain,

I see! To be honest, I am not terribly eager to dive into the whole buildroot workflow.
Nevertheless, we'd appreciate it if you create a pull request with a fix that solves this issue.

Maybe something like piping the output of pcap-config --libs --static into cmake or perhaps you have a more elegant solution already in mind.

Best regards,
Norman

RomainNaour added a commit to RomainNaour/openPOWERLINK_V2 that referenced this issue May 27, 2017
When linking demo_mn_console statically with pcap, the CMake build
system forget to link with other libraries linked with libpcap
(-lnl-genl-3 -lnl-3 -ldbus-1 -pthread).

[100%] Linking C executable demo_mn_console
lib64/libpcap.a(pcap-linux.o): In function nl80211_init': pcap-linux.c:(.text+0x41e): undefined reference tonl_socket_alloc'

To fix this, the build system could use pcap-config:
pcap-config --libs --static
-L/path/to/sysroot/usr/lib -lpcap -L/path/to/sysroot/usr/lib/.libs
-lnl-genl-3 -lnl-3 -L/path/to/sysroot/usr/lib -ldbus-1 -pthread

Fixes:
http://autobuild.buildroot.net/results/f43/f437d09ac6c689c911e1885b95da33b692f2cb3c
http://autobuild.buildroot.net/results/385/3859dc0f4de7e3284a96d5841f040f69f71842df
OpenAutomationTechnologies#187

Signed-off-by: Romain Naour <romain.naour@gmail.com>
@RomainNaour
Copy link
Contributor Author

Hi Norman,

I finally had some time to do it, see
#240

Best regards,
Romain

buildroot-auto-update pushed a commit to buildroot/buildroot that referenced this issue May 28, 2017
…pcap

When linking demo_mn_console statically with pcap, the CMake build
system forget to link with other libraries linked with libpcap
(-lnl-genl-3 -lnl-3 -ldbus-1 -pthread).

[100%] Linking C executable demo_mn_console
lib64/libpcap.a(pcap-linux.o): In function nl80211_init': pcap-linux.c:(.text+0x41e): undefined reference tonl_socket_alloc'

To fix this, the build system could use pcap-config:
pcap-config --libs --static
-L/path/to/sysroot/usr/lib -lpcap -L/path/to/sysroot/usr/lib/.libs
-lnl-genl-3 -lnl-3 -L/path/to/sysroot/usr/lib -ldbus-1 -pthread

Also don't use getopt() from contrib directory to avoid a clash with
libc definition.

Fixes:
http://autobuild.buildroot.net/results/f43/f437d09ac6c689c911e1885b95da33b692f2cb3c
http://autobuild.buildroot.net/results/385/3859dc0f4de7e3284a96d5841f040f69f71842df
OpenAutomationTechnologies/openPOWERLINK_V2#187

Signed-off-by: Romain Naour <romain.naour@gmail.com>
Tested-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
@seissw seissw added this to the V2.7.0-rc1 milestone May 30, 2017
fschuett pushed a commit to linuxmuster/linuxmuster-linbo that referenced this issue Jun 6, 2017
commit 8077582a54beacccf151bf277a11e1c9e9aa1fb5
Merge: 71994448b6 dd2020aadf
Author: fschuett <fschuett@gymnasium-himmelsthuer.de>
Date:   Tue Jun 6 18:18:19 2017 +0200

    Add 'buildroot/' from commit '9adfef203e5131a632af48508db14c0125142f6e'

    git-subtree-dir: buildroot
    git-subtree-mainline: 71994448b6d83c1a82df9ade65ac89b816c1fdd5
    git-subtree-split: 9adfef203e5131a632af48508db14c0125142f6e

commit 71994448b6d83c1a82df9ade65ac89b816c1fdd5
Author: fschuett <fschuett@gymnasium-himmelsthuer.de>
Date:   Tue Jun 6 18:17:15 2017 +0200

    remove buildroot-2017.02.1

commit dd2020aadf0bf9b157a6f42ec189318edc560d3b
Author: Peter Korsgaard <peter@korsgaard.com>
Date:   Wed May 31 23:55:40 2017 +0200

    Update for 2017.05

    Signed-off-by: Peter Korsgaard <peter@korsgaard.com>

commit 43552504c8aacda2a163c933203a3b77146409c1
Author: Daniel Sabogal <dsabogalcc@gmail.com>
Date:   Tue May 23 13:19:31 2017 -0400

    bash: disable bash malloc by default

    Bash's malloc relies on sbrk which is implemented as a fail-only stub in
    musl. Presently, it is disabled when configured for static
    libs. Instead, default to using libc malloc.

    Fixes:

      # bash
      bash: xmalloc: locale.c:81: cannot allocate 18 bytes (0 bytes allocated)

    Signed-off-by: Daniel Sabogal <dsabogalcc@gmail.com>
    Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>

commit 17aa47fa2cf1cd60809aa70500e8611b6f3abebf
Author: Romain Naour <romain.naour@gmail.com>
Date:   Wed May 31 21:12:49 2017 +0200

    package/hans: fix build failures with high 'make -j' values

    The top-level doesn't handle correctly the build dependencies
    between .o files.

    Since hans doesn't take too many time to build, just use MAKE1.

    Fixes:
    http://autobuild.buildroot.net/results/d14/d142f4a439d4d5fcc89865abde3e593c45ad5d96
    http://autobuild.buildroot.net/results/28e/28ed230e40cc154db9274f9765085cd7f0eee85a
    http://autobuild.buildroot.net/results/900/9008c3be3bcf46f0fc21a34f48e3cf9da1397d9a

    Signed-off-by: Romain Naour <romain.naour@gmail.com>
    Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>

commit fddb760946a4f4ca366528a673989793be65a678
Author: Peter Korsgaard <peter@korsgaard.com>
Date:   Wed May 31 08:47:18 2017 +0200

    sudo: add upstream security patch for CVE-2017-1000367

    CVE-2017-1000367 - Potential overwrite of arbitrary files on Linux

    On Linux systems, sudo parses the /proc/[pid]/stat file to determine the
    device number of the process's tty (field 7).  The fields in the file are
    space-delimited, but it is possible for the command name (field 2) to
    include spaces, which sudo does not account for.  A user with sudo
    privileges can cause sudo to use a device number of the user's choosing by
    creating a symbolic link from the sudo binary to a name that contains a
    space, followed by a number.

    If SELinux is enabled on the system and sudo was built with SELinux support,
    a user with sudo privileges may be able to to overwrite an arbitrary file.
    This can be escalated to full root access by rewriting a trusted file such
    as /etc/shadow or even /etc/sudoers.

    For more details, see: https://www.sudo.ws/alerts/linux_tty.html

    Signed-off-by: Peter Korsgaard <peter@korsgaard.com>

commit 8e0cb0c12dcbb0625b42481d7057b17d7bf4ad3d
Author: Bernd Kuhls <bernd.kuhls@t-online.de>
Date:   Wed May 31 07:52:08 2017 +0200

    linux-headers: bump 4.1.x series

    Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
    Signed-off-by: Peter Korsgaard <peter@korsgaard.com>

commit e43efb9b654ae19e9e47ae5828d9e99b044f37c9
Author: Peter Korsgaard <peter@korsgaard.com>
Date:   Tue May 30 15:03:24 2017 +0200

    strongswan: add upstream security patches

    Fixes:

    CVE-2017-9022 - RSA public keys passed to the gmp plugin aren't
    validated sufficiently before attempting signature verification, so that
    invalid input might lead to a floating point exception and crash of the
    process.  A certificate with an appropriately prepared public key sent by a
    peer could be used for a denial-of-service attack.

    https://www.strongswan.org/blog/2017/05/30/strongswan-vulnerability-%28cve-2017-9022%29.html

    CVE-2017-9023 - ASN.1 CHOICE types are not correctly handled by the ASN.1
    parser when parsing X.509 certificates with extensions that use such types.
    This could lead to infinite looping of the thread parsing a specifically
    crafted certificate.

    https://www.strongswan.org/blog/2017/05/30/strongswan-vulnerability-%28cve-2017-9023%29.html

    Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
    Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>

commit e1c2c432a914e1da9022f370906c06d139e41aee
Author: Alistair Francis <alistair.francis@xilinx.com>
Date:   Tue May 30 10:26:13 2017 -0700

    package/xen: Backport a header include fix for makedev

    maekdev() is available from sys/types.h but only due to a bug in glibc. This
    is being fixed by printing an error when using makedev() from sys/types.h.
    To fix the issue we should include sys/sysmacros.h for makedev(). As this
    has already been fixed in upstream Xen we can backport the patch.

    Fixes:
        http://autobuild.buildroot.net/results/552/552e66d764885341b2fe208a0e4382b5fe05ea9d/

    Signed-off-by: Alistair Francis <alistair.francis@xilinx.com>
    Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>

commit 2fcb07fbe3c2a861cd6c988d6d13d11be22a3683
Author: Romain Naour <romain.naour@gmail.com>
Date:   Tue May 30 16:53:17 2017 +0200

    package/madplay: add custom libtool patch

    madplay use a libtool script in version 1.5.2 but the libtool patch
    "buildroot-libtool-v1.5.patch.patch" doesn't apply.

    From [1]:
    "It's libtool dropping -static. That's because madplay has a
    weird version of libtool, on which our libtool patch doesn't apply so
    we have MADPLAY_LIBTOOL_PATCH = NO. Therefore, the hack we have that
    makes libtool -static behave like -all-static isn't applied, causing
    this build failure."

    Fixes:
    http://autobuild.buildroot.net/results/60def1b15ea61d3cb5f50e9de3f354dd2e17d270

    [1] http://lists.busybox.net/pipermail/buildroot/2017-May/192959.html

    Signed-off-by: Romain Naour <romain.naour@gmail.com>
    Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>

commit 6ff4293c94790e7f6bdb1a2c1263dc2a3998c3a6
Author: Luca Ceresoli <luca@lucaceresoli.net>
Date:   Tue May 30 19:01:28 2017 +0200

    stm32flash: fix help text format

    Warning reported by check-package.

    Signed-off-by: Luca Ceresoli <luca@lucaceresoli.net>
    Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>

commit ae8704c7529e7c293f7f040412f199507939f61b
Author: Luca Ceresoli <luca@lucaceresoli.net>
Date:   Tue May 30 19:01:27 2017 +0200

    snmppp: fix help text format

    Warning reported by check-package.

    Signed-off-by: Luca Ceresoli <luca@lucaceresoli.net>
    Cc: Gustavo Zacarias <gustavo@zacarias.com.ar>
    Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>

commit 5bd7415e244ef9469d4b54b8d41d4a8b54e58e5f
Author: Luca Ceresoli <luca@lucaceresoli.net>
Date:   Tue May 30 19:01:26 2017 +0200

    rtl8188eu: fix help text format

    Warning reported by check-package.

    Signed-off-by: Luca Ceresoli <luca@lucaceresoli.net>
    Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>

commit cbd29d0ad454328bcdb450d6ada423e7f5cb3b10
Author: Luca Ceresoli <luca@lucaceresoli.net>
Date:   Tue May 30 19:01:25 2017 +0200

    qpid-proton: fix help text format

    Warning reported by check-package.

    Signed-off-by: Luca Ceresoli <luca@lucaceresoli.net>
    Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>

commit 54fd9482e9125822b4ec2f355c8ceb787794c2ba
Author: Luca Ceresoli <luca@lucaceresoli.net>
Date:   Tue May 30 19:01:24 2017 +0200

    exim: fix help text format

    Warning reported by check-package.

    Signed-off-by: Luca Ceresoli <luca@lucaceresoli.net>
    Cc: Bernd Kuhls <bernd.kuhls@t-online.de>
    Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>

commit 2c112fecb1860bb8597a418f208568673b87f68b
Author: Luca Ceresoli <luca@lucaceresoli.net>
Date:   Tue May 30 19:01:23 2017 +0200

    agentpp: fix help text format

    Warning reported by check-package.

    Signed-off-by: Luca Ceresoli <luca@lucaceresoli.net>
    Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>

commit a6a4a8b2ef1fa747fdc79bc7bae0518417910f5d
Author: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Date:   Tue May 30 11:34:17 2017 +0200

    toolchain-external: adjust musl dynamic linker symlink for mips-sf

    The external toolchain code has some logic to calculate the correct name
    for the dynamic linker symbolic link that needs to be created when the
    musl C library is being used. There was already some handling for the
    mipsel+soft-float case, but not for the mips+soft-float case. Due to
    this, the symbolic link was incorrectly named, and programs were
    referencing an non-existing file.

    Reported-by: Florent Jacquet <florent.jacquet@free-electrons.com>
    Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>

commit 91a418c373ac8566c4c778dcb2aa7ecfc506ee56
Author: Peter Korsgaard <peter@korsgaard.com>
Date:   Tue May 30 10:28:45 2017 +0200

    Update for 2017.05-rc3

    Signed-off-by: Peter Korsgaard <peter@korsgaard.com>

commit 93c757133496f54168ddcf21452bb92b54242d9c
Author: Christian Stewart <christian@paral.in>
Date:   Mon May 29 20:50:04 2017 -0700

    docker-engine: fix journald logging driver

    The Docker engine can optionally log to systemd-journald. For this
    driver to work correctly, Docker needs to build against
    systemd-journald's client library.

    This patch conditionally adds a build-time dependency on systemd and
    enables compiling the journald driver in docker-engine if systemd is
    used as the Buildroot init process.

    Signed-off-by: Christian Stewart <christian@paral.in>
    Signed-off-by: Peter Korsgaard <peter@korsgaard.com>

commit 2fb7cbeb743e343fcc4aa37d6015b0a523c8b16f
Author: Peter Korsgaard <peter@korsgaard.com>
Date:   Mon May 29 23:54:48 2017 +0200

    libtasn1: security bump to version 4.12

    Fixes CVE-2017-7650: Two errors in the "asn1_find_node()" function
    (lib/parser_aux.c) within GnuTLS libtasn1 version 4.10 can be exploited to
    cause a stacked-based buffer overflow by tricking a user into processing a
    specially crafted assignments file via the e.g.  asn1Coding utility.

    For more details, see:

    https://secuniaresearch.flexerasoftware.com/secunia_research/2017-11/

    Or the 1.4.11 release mail (no mail about 1.4.12, but identical to 1.4.11 +
    a soname fix):

    https://lists.gnu.org/archive/html/help-libtasn1/2017-05/msg00003.html

    Remove 0001-configure-don-t-add-Werror-to-build-flags.patch and autoreconf
    as that patch is now upstream.

    Signed-off-by: Peter Korsgaard <peter@korsgaard.com>

commit eddaf1f00eb0b54b21f2e450fc66f0db8b7dbdca
Author: Gonçalo Salazar <glbsalazar@gmail.com>
Date:   Mon May 29 22:53:41 2017 +0100

    mosh: add notes to clarify runtime issues

    Added notes to the mosh package help to clarify some runtime
    issues related with it to ensure mosh will work properly after adding it.
    This includes adding a proper LOCALE and an extra flag when using
    mosh with dropbear.

    Signed-off-by: Gonçalo Salazar <glbsalazar@gmail.com>
    Signed-off-by: Peter Korsgaard <peter@korsgaard.com>

commit 9e9dee25346f861f3276a4c2ab21c98b8caf88a7
Author: Peter Korsgaard <peter@korsgaard.com>
Date:   Mon May 29 23:19:59 2017 +0200

    mosquitto: security bump to version 1.4.12

    Fixes CVE-2017-7650: Pattern based ACLs can be bypassed by clients that set
    their username/client id to ‘#’ or ‘+’.  This allows locally or remotely
    connected clients to access MQTT topics that they do have the rights to.
    The same issue may be present in third party authentication/access control
    plugins for Mosquitto.

    For more details, see:
    https://mosquitto.org/2017/05/security-advisory-cve-2017-7650/

    Remove 0001-Remove-lanl-when-WITH_ADNS-is-unset.patch as that patch is now
    upstream.

    Signed-off-by: Peter Korsgaard <peter@korsgaard.com>

commit 27e0626e99e79655b949e13a16ebdda28c0faca2
Author: Baruch Siach <baruch@tkos.co.il>
Date:   Mon May 29 23:53:23 2017 +0300

    elfutils: security bump to version 0.169

    Fixes a number of security issues: CVE-2017-7607, CVE-2017-7608,
    CVE-2017-7609, CVE-2017-7610, CVE-2017-7611, CVE-2017-7612, CVE-2017-7613.

    Rebase patches, and convert to git format.

    Remove --disable-werror; unrecognized configure option.

    Use upstream provided hash.

    Cc: Stefan Fröberg <stefan.froberg@petroprogram.com>
    Signed-off-by: Baruch Siach <baruch@tkos.co.il>
    Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>

commit 92c1b8132dd298dbbd35bfff8cc07f326924d92d
Author: Alistair Francis <alistair.francis@xilinx.com>
Date:   Wed May 24 13:30:30 2017 -0700

    package/xen: add dependency on host-acpica

    This commit adds a dependency on the host ACPICA package as Xen tools
    require iasl to build.

    Fixes:

      http://autobuild.buildroot.net/results/afa199864d6b546fe759bb582a9c10702ea7fa78/

    Signed-off-by: Alistair Francis <alistair.francis@xilinx.com>
    Acked-by: Erico Nunes <nunes.erico@gmail.com>
    [Thomas: tweak commit log, add autobuilder reference.]
    Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>

commit bd6ec23ed350abdf4a9fa208398bc79c510104c9
Author: Alistair Francis <alistair.francis@xilinx.com>
Date:   Wed May 24 13:30:29 2017 -0700

    package/acpica: add host package

    Add support to build the ACPICA package for the host. This is useful
    for the iasl command which is required to build some packages,
    including Xen tools.

    This is a necessary requirement before changing the Xen package to
    address:

      http://autobuild.buildroot.net/results/afa199864d6b546fe759bb582a9c10702ea7fa78/

    Signed-off-by: Alistair Francis <alistair.francis@xilinx.com>
    Acked-by: Erico Nunes <nunes.erico@gmail.com>
    [Thomas: use PREFIX= and not DESTDIR= for host installation, tweak
    commit log.]
    Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>

commit 2d9f199061fa0629847b63e6b6317a7b12a9d99f
Author: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Date:   Mon May 29 23:31:51 2017 +0200

    ffmpeg: do not build on m68k coldfire

    m68k coldfire causes ffmpeg to think atomic intrinsics are available,
    so ffmpeg doesn't use its fallback on pthreads based atomic
    operations. However, m68k coldfire doesn't provide properly working
    sync 4 atomics, causing a build failure.

    Since fixing ffmpeg on m68k coldfire is not really important (who
    wants to use ffmpeg on such platform?), we simply disallow the
    selection of ffmpeg on this platform.

    Alternate approaches have been proposed in the past:

     - Bernd Kuhls proposed in http://patchwork.ozlabs.org/patch/766909/
       to add a dependency on BR2_TOOLCHAIN_HAS_SYNC_4, but this is wrong
       because other architectures that lack sync 4 atomics, such as
       Sparc, can build ffmpeg perfectly fine thanks to the pthreads based
       fallback code.

     - Waldemar Brodkorb proposed in
       https://patchwork.ozlabs.org/patch/756664/ to add an explicit
       option in ffmpeg configure to force the use of pthreads based
       atomics. However, we believe that running ffmpeg on m68k coldfire
       is such an unlikely use case that it isn't worth carrying a patch
       for this.

    Fixes:

      http://autobuild.buildroot.net/results/b3e/b3eaaf6d73cd49f5919143aeaa5cbb4d15a7ccc3/

    Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>

commit 12687c5c76f8f82da0815b6ff1607494ee7180b8
Author: Bernd Kuhls <bernd.kuhls@t-online.de>
Date:   Wed May 24 23:06:11 2017 +0200

    package/samba4: security bump to version 4.5.10

    Fixes CVE-2017-7494:
    https://www.samba.org/samba/history/samba-4.5.10.html

    Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
    Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>

commit 30ed9de2fd8a572ffce26f7a9c8187335c567668
Author: Bernd Kuhls <bernd.kuhls@t-online.de>
Date:   Thu May 25 18:34:43 2017 +0200

    package/gnutls: disable for static build

    The gnutils code uses __attribute__((constructor)) and
    __attribute__((destructor)) to call constructor/desctructor when a
    shared library is loaded.
    Constructor/desctructor are not used when a static library is used
    (except when if -Wl,--whole-archive -lgnutls -Wno-whole-archive is
    used, not tested).

    Even if gnutls initialization (_gnutls_global_init()) may be
    called manually, the gnutls maintainer said it's not supported [1].

    "Note that static linking applications with gnutls is not something
     supported. gnutls relies on library constructors and destructors
     which are not loaded when linking statically."

    Now the gnutls script warns about static linking [2].

    So disable gnutls statically by adding "depends on !BR2_STATIC_LIBS"
    at Kconfig level and --disable-static in GNUTLS_CONF_OPTS.

    Fixes:
    [taskd] http://autobuild.buildroot.net/results/c2d/c2dd5c1c9dc87d2943c15e58ee56e67d7375368c
    [ffmpeg] http://autobuild.buildroot.net/results/892/8926d319d6d1cd1ee72239ad7d9ca869d2355628
    [sngrep] http://autobuild.buildroot.net/results/f7f/f7fb42d3742f6f01000a0d181e0c785640284405

    [1] https://gitlab.com/gnutls/gnutls/issues/203
    [2] https://gitlab.com/gnutls/gnutls/commit/6b748886799f88ddee9721dba4fc4d52854832ae

    Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
    [Romain: merge our two patches together
        add some option comment
        disable static libgnutls.a
        add sngrep autobuilder reference]
    Signed-off-by: Romain Naour <romain.naour@gmail.com>
    Tested-by: Bernd Kuhls <bernd.kuhls@t-online.de>
    [Thomas: do not disable libgnutls.a]
    Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>

commit 557f8d649d9a959e810a3c92774020a434d567a8
Author: Romain Naour <romain.naour@gmail.com>
Date:   Mon May 29 22:13:29 2017 +0200

    package/google-breakpad: use PRE_CONFIGURE hooks to copy linux_syscall_support.h

    As reported by Bernd [1], using POST_EXTRACT to copy
    linux_syscall_support.h break the legal-info target when
    google-breakpad package is selected:

    /usr/bin/install: cannot stat '/home/bernd/buildroot/buildroot/output/ost/usr/i586-buildroot-linux-uclibc/sysroot/usr/include/linux_syscall_support.h': No such file or directory

    This is because linux_syscall_support.h is installed by a dependency
    of google-breakpad, and dependencies are only guaranteed to be
    available for the configure step of a package. To fix this, we use a
    PRE_CONFIGURE hook instead of POST_EXTRACT hook.

    [1] http://lists.busybox.net/pipermail/buildroot/2017-May/192844.html

    Reported-by: Bernd Kuhls <bernd.kuhls@t-online.de>
    Signed-off-by: Romain Naour <romain.naour@gmail.com>
    Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>

commit 80ebba2b5ad8017440b3ad84dd44261f7865dfc4
Author: Romain Naour <romain.naour@gmail.com>
Date:   Mon May 29 21:58:11 2017 +0200

    package/firejail: remove broken package

    firejail has been marked as broken since 3ad100fdcbf6e2bf850b4b2f528c87c74f7c93ff

    Signed-off-by: Romain Naour <romain.naour@gmail.com>
    Cc: Chris Frederick <chrisf@cdf123.net>
    Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>

commit d35b447f09b5bd766a7627b596869b8f8b3f91ba
Author: Bernd Kuhls <bernd.kuhls@t-online.de>
Date:   Sun May 28 16:31:35 2017 +0200

    package/ftop: Fix broken download URL

    Also use bz2 tarball and provide md5 & sha256 hashes.

    Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
    Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>

commit 96f3ae6c24e5517014666a0e22b050773188392e
Author: Bernd Kuhls <bernd.kuhls@t-online.de>
Date:   Sun May 28 22:35:52 2017 +0200

    package/armadillo: fix download URL

    Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
    Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>

commit 3f0cdaad8b0b797f5727a35737a0badd97cb3ddc
Author: Bernd Kuhls <bernd.kuhls@t-online.de>
Date:   Sun May 28 22:40:57 2017 +0200

    package/libev: fix download URL

    Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
    Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>

commit eca61c93d5e6061a0749c94f7a4b5da73e332777
Author: Bernd Kuhls <bernd.kuhls@t-online.de>
Date:   Sun May 28 23:37:38 2017 +0200

    package/mxml: fix download URL

    The project moved to github, the current download URL is broken:

    $ wget -q  http://www.msweet.org/files/project3/mxml-2.10.tar.gz
    $ file mxml-2.10.tar.gz
    mxml-2.10.tar.gz: HTML document, UTF-8 Unicode text, with very long lines

    Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
    Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>

commit 01ad3a38d25af99ae29a7ffa65d8e838bfdbec03
Author: Frank Hunleth <fhunleth@troodon-software.com>
Date:   Mon May 29 11:39:01 2017 -0400

    erlang: fix check-package help text warnings

    Signed-off-by: Frank Hunleth <fhunleth@troodon-software.com>
    Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>

commit e692e1f2b2285c18057e2c70cc1d9d0cfdb15d5e
Author: Baruch Siach <baruch@tkos.co.il>
Date:   Mon May 29 21:02:35 2017 +0300

    ola: remove package

    ola does not build with current protobuf. Upstream bug report is still open.

    https://github.com/OpenLightingProject/ola/issues/1192

    Cc: Dave Skok <blanco.ether@gmail.com>
    Signed-off-by: Baruch Siach <baruch@tkos.co.il>
    Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>

commit 8225042e0e8add24d698cba7232484481016f0a0
Author: Bernd Kuhls <bernd.kuhls@t-online.de>
Date:   Mon May 29 18:59:45 2017 +0200

    package/libmicrohttpd: security bump version to 0.9.55

    For details refer to release notes:
    http://lists.gnu.org/archive/html/info-gnu/2017-05/msg00014.html

    Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
    Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>

commit 621408e59559058aa448c740119e467d5c168b68
Author: Bernd Kuhls <bernd.kuhls@t-online.de>
Date:   Mon May 29 21:07:36 2017 +0200

    package/stella: fix project URLs

    The project moved to github: http://stella.sourceforge.net/

    Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
    Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>

commit 27d7ef126bc7f4eb1a757128466befa11245bbfd
Author: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Date:   Mon May 29 09:04:29 2017 +0200

    DEVELOPERS: remove Andrew Ruder

    His e-mail address is bouncing:

    <andrew.ruder@elecsyscorp.com>: host mx1-us1.ppe-hosted.com[67.231.154.162]
        said: 550 5.7.1 <andrew.ruder@elecsyscorp.com>: Recipient address rejected:
        User email address is marked as invalid. (in reply to RCPT TO command)

    Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>

commit 019ad605670670a51055fb5d27a2a1f374a33289
Author: Bernd Kuhls <bernd.kuhls@t-online.de>
Date:   Thu May 25 09:19:34 2017 +0200

    package/redis: fix static linking with libatomic

    Fixes
    http://autobuild.buildroot.net/results/7f1/7f1ecccbfdb6bd95824d9c884f1577e71e0e1e09/
    http://autobuild.buildroot.net/results/c0b/c0b1bdcc5fbddf8b996b923015184d753882d4b8/

    Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
    [Thomas:
     - improve comment to explain the fix
     - remove useless LDFLAGS related code]
    Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>

commit db55de2b42a54ca715a7aa3ed6e388ea6f557092
Author: Bernd Kuhls <bernd.kuhls@t-online.de>
Date:   Sun May 28 15:56:11 2017 +0200

    package/flashrom: security bump to version 0.9.9

    Fixes buffer overflow:
    https://mail.coreboot.org/pipermail/flashrom/2016-March/014523.html

    Removed patch 0002-sys-io.h.patch, not needed anymore, hwaccess.h now
    contains a similar fix:

      elif defined(__linux__) || defined(__GLIBC__)

    Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
    Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>

commit 4f9190f14e821a90cae690b1741eee4efd9b661b
Author: Bernd Kuhls <bernd.kuhls@t-online.de>
Date:   Thu May 25 23:26:20 2017 +0200

    package/kodi: security bump to version 17.3

    Release notes:
    https://kodi.tv/article/kodi-v173-minor-bug-fix-and-security-release

    "Fix possible security flaw which could abused .zip files which try to
     traverse to a parent directory"

    For details about the security bug refer to
    http://blog.checkpoint.com/2017/05/23/hacked-in-translation/

    Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
    Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>

commit 0e422730722fe92e79883b5fdb9f2e95a241afd7
Author: Romain Naour <romain.naour@gmail.com>
Date:   Sun May 28 00:51:19 2017 +0200

    package/openpowerlink: use pcap-config to fix static linking with libpcap

    When linking demo_mn_console statically with pcap, the CMake build
    system forget to link with other libraries linked with libpcap
    (-lnl-genl-3 -lnl-3 -ldbus-1 -pthread).

    [100%] Linking C executable demo_mn_console
    lib64/libpcap.a(pcap-linux.o): In function nl80211_init': pcap-linux.c:(.text+0x41e): undefined reference tonl_socket_alloc'

    To fix this, the build system could use pcap-config:
    pcap-config --libs --static
    -L/path/to/sysroot/usr/lib -lpcap -L/path/to/sysroot/usr/lib/.libs
    -lnl-genl-3 -lnl-3 -L/path/to/sysroot/usr/lib -ldbus-1 -pthread

    Also don't use getopt() from contrib directory to avoid a clash with
    libc definition.

    Fixes:
    http://autobuild.buildroot.net/results/f43/f437d09ac6c689c911e1885b95da33b692f2cb3c
    http://autobuild.buildroot.net/results/385/3859dc0f4de7e3284a96d5841f040f69f71842df
    https://github.com/OpenAutomationTechnologies/openPOWERLINK_V2/issues/187

    Signed-off-by: Romain Naour <romain.naour@gmail.com>
    Tested-by: Bernd Kuhls <bernd.kuhls@t-online.de>
    Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>

commit a7777eecd4eaebd65b28e26fb1075b8609ac8f7c
Author: Bernd Kuhls <bernd.kuhls@t-online.de>
Date:   Sat May 27 18:04:46 2017 +0200

    package/audiofile: Fix static linking with libsndfile

    Fixes mpd:
    http://autobuild.buildroot.net/results/799/7997ccd698f03885f98d00bd150dc3a578e4b161/

    Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
    Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>

commit a2ad9cf71da39efc4ab942578cdbceb5c30a4025
Author: Bernd Kuhls <bernd.kuhls@t-online.de>
Date:   Sat May 27 17:44:26 2017 +0200

    package/audiofile: add security fix

    Fixes CVE-2015-7747

    Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
    Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>

commit ad79bb50858aebd5296fbac981abd8b50b682ddf
Author: Luca Ceresoli <luca@lucaceresoli.net>
Date:   Sat May 27 23:58:46 2017 +0200

    support/testing: rename variables for readability

    The 'lines' variable is overwritten with its own fields. Thus it
    contains a line first, and then a list of fields -- it never contains
    'lines'.

    Use two different variables named 'line' and 'fields' to make the code
    more readable.

    Signed-off-by: Luca Ceresoli <luca@lucaceresoli.net>
    Acked-by: Ricardo Martincoski <ricardo.martincoski@gmail.com>
    Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>

commit cfecdfadc1c980e3bb6dc86101b3b932a0969017
Author: Luca Ceresoli <luca@lucaceresoli.net>
Date:   Sat May 27 23:58:47 2017 +0200

    support/testing: fs/ext: add a negative test for the "extent" feature

    We only have a positive test for it, in ext4. Let's have a negative
    one as well.

    Signed-off-by: Luca Ceresoli <luca@lucaceresoli.net>
    Reviewed-by: Ricardo Martincoski <ricardo.martincoski@gmail.com>
    Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>

commit e0a787669124d0ae1da81739f3fb7eabba272fb4
Author: Adam Duskett <Aduskett@gmail.com>
Date:   Fri May 26 10:46:28 2017 -0400

    DEVELOPERS: add selinux packages under Adam Duskett

    Signed-off-by: Adam Duskett <aduskett@codeblue.com>
    Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>

commit 6ddab6c28ec1cae2718928505f96705cf8e08e83
Author: Romain Naour <romain.naour@gmail.com>
Date:   Sat May 27 00:13:47 2017 +0200

    package/dhcp: create tmpfiles.d directory

    dhcp.mk tries to create dhcp.conf in a non-existant directory.

    Fixes:
    http://autobuild.buildroot.net/results/40e/40e48f74b586ce380766cf31473932e43090671e

    Signed-off-by: Romain Naour <romain.naour@gmail.com>
    Tested-by: Bernd Kuhls <bernd.kuhls@t-online.de>
    Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>

commit da5816561b4a660e1562a7cea5b079d776e206a3
Author: Bernd Kuhls <bernd.kuhls@t-online.de>
Date:   Sat May 27 10:19:52 2017 +0200

    package/popt: fix libiconv dependency

    Make sure that libiconv is built before popt when needed.

    Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
    Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>

commit cbf2b6e3db65500f7bb29aa029a620570026373c
Author: Bernd Kuhls <bernd.kuhls@t-online.de>
Date:   Sat May 27 13:52:37 2017 +0200

    package/opencv: fix build with old glibc versions

    Prior to glibc 2.18, definitions like SIZE_MAX or INT_FAST32_MAX from
    <stdint.h> were only made available for C code, or in C++ if
    __STDC_LIMIT_MACROS was defined.

    The code from jasper uses such definitions, without defining
    __STDC_LIMIT_MACROS. Unfortunately, defining __STDC_LIMIT_MACROS in
    the jasper headers doesn't work, since <stdint.h> has already been
    included before, at a point where __STDC_LIMIT_MACROS was not defined.

    So to solve this problem, we simply pass -D__STDC_LIMIT_MACROS in
    CXXFLAGS when building opencv with jasper support.

    This patch uses the same solution used for libraw:
    https://git.buildroot.net/buildroot/commit/package/libraw?id=d246cf5fd01bb0d20a0e64194ffed514ea8dd0aa

    Fixes:
    http://autobuild.buildroot.net/results/095/095f7574afdb633c59a625cd063de03644b6d3a7/

    Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
    Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>

commit e1404d5b4eaed845223b409a6673230c64128115
Author: Bernd Kuhls <bernd.kuhls@t-online.de>
Date:   Sat May 27 14:57:08 2017 +0200

    package/libv4l: fix udev configure options

    AC_ARG_WITH([libudev] was removed in version 1.12.0:
    https://git.linuxtv.org/v4l-utils.git/commit/configure.ac?id=3aba7817cd1994e6da00651114368db8171eabcc

    Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
    Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>

commit d01b0bbad04b97a5e8e1dd3ac3c1026555f793fb
Author: Ilias Apalodimas <apalos@gmail.com>
Date:   Sat May 27 15:47:47 2017 +0300

    keepalived: needs headers >= 3.4

    keepalived fails to build on toolchains with headers older than 3.4,
    because of a namespace clash between the xt_set.h header from the
    kernel and the linux_ip_set.h header installed by ipset.

    Even though keepalived does check for pre-3.4 headers, the check
    somehow fails to work correctly.

    We fix that by making keepalived depend on headers 3.4 or later.

    Fixes:
    http://autobuild.buildroot.org/results/770/770d8fd2f3bacbdbe233da1b4d6e64e20a84d5a5/
    http://autobuild.buildroot.org/results/1ad/1adb710b915427f681eae37452a0942833ce533e/
    http://autobuild.buildroot.org/results/70b/70b31547e51ec7213372d2ef07bec34c5df77560/
    [...]

    Signed-off-by: Ilias Apalodimas <apalos@gmail.com>
    Reviewed-by: "Yann E. MORIN" <yann.morin.1998@free.fr>
    Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>

commit 9b853b784452d7a701cc3c823b92a825d962647a
Author: Bernd Kuhls <bernd.kuhls@t-online.de>
Date:   Thu May 25 19:44:12 2017 +0200

    linux: bump default version to 4.11.3

    Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
    Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>

commit f19a4433d4560b087b4890b17e2baaa21b3e6871
Author: Bernd Kuhls <bernd.kuhls@t-online.de>
Date:   Thu May 25 19:44:11 2017 +0200

    linux-headers: bump 4.{4, 9, 11}.x series

    Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
    Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>

commit 2c1d080c2dc75fb021ace02472c8db0f2538e481
Author: Alexey Brodkin <Alexey.Brodkin@synopsys.com>
Date:   Tue May 16 10:32:13 2017 +0300

    Revert "libcdio: disable on ARC, triggers a toolchain bug"

    This reverts commit 459f7302df8cdc45aa0f7f2581ebb6f05fb6432a.

    libcdio building is fixed for ARC in
    2b360bd547f1 "gcc: arc-2017.03-rc2: Fix "unrecognized supposed constant" error"

    Signed-off-by: Alexey Brodkin <abrodkin@synopsys.com>
    Tested-by: Bernd Kuhls <bernd.kuhls@t-online.de>
    Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>

commit a71fb422bae5141d8605650e5ce12b2b244ed8fb
Author: Alexey Brodkin <Alexey.Brodkin@synopsys.com>
Date:   Wed May 24 18:39:19 2017 +0300

    gcc: arc: add patch to fix tst_movb pattern

    Fixes building of quagga [1]:

    ------------------------------>8---------------------------
    839:1: error: unrecognizable insn:
     }
     ^
    (insn 183 24 26 4 (set (reg:CC_ZN 61 cc)
            (and:SI (reg:SI 0 r0 [orig:192 _12->id.s_addr ] [192])
                (const_int -256 [0xffffffffffffff00]))) ospf_ri.c:790 -1
         (nil))
    ospf_ri.c:839:1: internal compiler error: in extract_insn, at recog.c:2287
    ------------------------------>8---------------------------

    [1] http://autobuild.buildroot.net/results/3c1/3c12c4609d4a77ab8ccd3ea94840884d70520efai

    Signed-off-by: Alexey Brodkin <abrodkin@synopsys.com>
    Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>

commit 0ade154f235560e9cc14bbfe7508fc5601735a11
Author: Alexey Brodkin <Alexey.Brodkin@synopsys.com>
Date:   Tue May 23 21:41:37 2017 +0300

    toolchain: Bump ARC tools to arc-2017.03 release

    This commit finally bumps ARC toolchain to arc-2017.03 release.
    More info on this release could be found here:
    https://github.com/foss-for-synopsys-dwc-arc-processors/toolchain/releases/tag/arc-2017.03

    Note mentioned above web-page is not yet populated but should be very soon.
    As a safe fall-back interested could refer to RC2 page here:
    https://github.com/foss-for-synopsys-dwc-arc-processors/toolchain/releases/tag/arc-2017.03-rc2

    Signed-off-by: Alexey Brodkin <abrodkin@synopsys.com>
    Cc: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
    Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>

commit 6bc8de6f9d5856213cb45f4a86556b55321e3575
Author: Matt Weber <matt@thewebers.ws>
Date:   Tue May 23 21:01:41 2017 -0500

    DEVELOPERS: Remove Niranjan Reddy from cgroupfs-mount

    He can re-add with a new email if he wants, but his
    current Rockwell email will bounce.

    Signed-off-by: Matt Weber <matt@thewebers.ws>
    Acked-by: Bernd Kuhls <bernd.kuhls@t-online.de>
    Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>

commit 675101b0fe3e751b447818d8ce8d0d009bd39b25
Author: Dustin Johnson <dustin.r.johnson@gmail.com>
Date:   Tue Mar 14 22:24:58 2017 -0400

    mono: remove copy of host etc files on install

    When the mono package is installed, the autotools installer installs
    the /etc/mono files to the target. A post_install hook then copies
    over the mono libraries to the target as well as the host /etc/mono
    files which overrides the target files. The target specific mono
    configuration file (/etc/mono/config) is overridden with the host
    settings. This causes mono on the target to be unable to locate target
    specific .so files as it overrides the changes enacted by the patches
    for the package.

    Signed-off-by: Dustin Johnson <dustin.r.johnson@gmail.com>
    Tested-by: Angelo Compagnucci <angelo.compagnucci@gmail.com>
    Reviewed-by: Angelo Compagnucci <angelo.compagnucci@gmail.com>
    Acked-by: Angelo Compagnucci <angelo.compagnucci@gmail.com>
    Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>

commit 556434fb833f054da7bbabc531083951b1f28075
Author: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Date:   Fri May 19 21:22:40 2017 +0200

    libepoxy: make EGL support optional

    This commit adds a patch to the libepoxy package to make the EGL
    support optional, which allows libepoxy to build with a pure OpenGL
    Mesa3D configuration (i.e without EGL/OpenGLES).

    Fixes:

      http://autobuild.buildroot.net/results/88774af2845e17cab021a72c8f3171fe30b3a1ff/

    Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>

commit fa397537bb64536bb58663df886b1a2c8886961c
Author: Baruch Siach <baruch@tkos.co.il>
Date:   Tue May 23 01:07:09 2017 +0300

    toolchain: disable PIE for static build with musl

    As mentioned in commit 3c93901bcd2 (toolchain: add hidden symbol for PIE
    support), support for static PIE using musl requires a gcc patch[1]. Buildroot
    doesn't carry this patch. Don't enable BR2_TOOLCHAIN_SUPPORTS_PIE in static
    build with musl.

    Fixes:
    http://autobuild.buildroot.net/results/d19/d19bcfcfb33cc5f5b082b97bbd5852d479823b97/
    http://autobuild.buildroot.net/results/91f/91f7c6954c337b03f5ac141050d9b1bee1623376/
    http://autobuild.buildroot.net/results/996/996116da9241686110b9525eed08cc5acfd379a6/

    [1] https://github.com/richfelker/musl-cross-make/blob/b854a42fc1ea19b8c4ec7104848f9d1a6d7995f0/patches/gcc-6.3.0/0010-static-pie-support.diff

    Acked-by: Waldemar Brodkorb <wbx@openadk.org>
    Signed-off-by: Baruch Siach <baruch@tkos.co.il>
    Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>

commit a396b3ab1ecc0dff00be9e04f36494d0d68569f7
Author: Bernd Kuhls <bernd.kuhls@t-online.de>
Date:   Sun May 21 23:41:17 2017 +0200

    package/c-icap: fix bzip2 configure option

    The configure option controlling bzip2 support got its current name in
    2012 with its initial commit:

    https://sourceforge.net/p/c-icap/code/890/#diff-2

    This patch fixes the configure warning:

    configure: WARNING: unrecognized options: [...] --without-bzip2

    Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
    Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>

commit 3d1234dab8ae714ebb52fd78d075f084a410b338
Author: Bernd Kuhls <bernd.kuhls@t-online.de>
Date:   Sun May 21 23:41:16 2017 +0200

    package/c-icap: fix berkeleydb configure option

    The configure option controlling berkeleydb support got its current
    name in 2009: https://sourceforge.net/p/c-icap/code/322/

    This patch fixes a configure warning:

    configure: WARNING: unrecognized options: [...] --without-berkeleydb, [...]

    Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
    Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>

commit 3c54b7086fc0eaddb7f04560f30bb8cc99860b25
Author: Bernd Kuhls <bernd.kuhls@t-online.de>
Date:   Sun May 21 13:46:25 2017 +0200

    package/python-enum34: change setup type to setuptools

    With version 1.1.3 the project switched to setuptools:
    https://bitbucket.org/stoneleaf/enum34/commits/589b4f9d2e733a32c6e67a1e7aa50f476920d121

    Fixes
    http://autobuild.buildroot.net/results/cb6/cb678ca9e57382a876f3f6034a47a4e2c59bc8d0/

    Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
    Signed-off-by: Peter Korsgaard <peter@korsgaard.com>

commit a0c4cf0f9698ed109b97cb1e33f4070f505e3988
Author: Peter Korsgaard <peter@korsgaard.com>
Date:   Fri May 19 15:48:02 2017 +0200

    libminiupnpc: add upstream security fix for CVE-2017-8798

    CVE-2017-8798: Integer signedness error in MiniUPnP MiniUPnPc v1.4.20101221
    through v2.0 allows remote attackers to cause a denial of service or
    possibly have unspecified other impact.

    For more details including a PoC, see:
    https://github.com/tintinweb/pub/tree/master/pocs/cve-2017-8798

    Signed-off-by: Peter Korsgaard <peter@korsgaard.com>

commit e6213e8ee68cbb637997ff02abe7945ec1cc168c
Author: Ryan Coe <bluemrp9@gmail.com>
Date:   Mon May 8 08:37:16 2017 -0700

    mariadb: security bump to version 10.1.23

    Fixes:

    CVE-2017-3302 - Crash in libmysqlclient.so in Oracle MySQL before 5.6.21 and
    5.7.x before 5.7.5 and MariaDB through 5.5.54, 10.0.x through 10.0.29,
    10.1.x through 10.1.21, and 10.2.x through 10.2.3.

    CVE-2017-3313 - Vulnerability in the MySQL Server component of Oracle MySQL
    (subcomponent: Server: MyISAM). Supported versions that are affected are
    5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Difficult to
    exploit vulnerability allows low privileged attacker with logon to the
    infrastructure where MySQL Server executes to compromise MySQL Server.
    Successful attacks of this vulnerability can result in unauthorized access
    to critical data or complete access to all MySQL Server accessible data.

    CVE-2017-3308 - Vulnerability in the MySQL Server component of Oracle MySQL
    (subcomponent: Server: DML). Supported versions that are affected are 5.5.54
    and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily "exploitable"
    vulnerability allows low privileged attacker with network access via
    multiple protocols to compromise MySQL Server. While the vulnerability is
    in MySQL Server, attacks may significantly impact additional products.
    Successful attacks of this vulnerability can result in unauthorized
    ability to cause a hang or frequently repeatable crash (complete DOS) of
    MySQL Server.

    CVE-2017-3309 - Vulnerability in the MySQL Server component of Oracle MySQL
    (subcomponent: Server: Optimizer). Supported versions that are affected are
    5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily
    "exploitable" vulnerability allows low privileged attacker with network
    access via multiple protocols to compromise MySQL Server. While the
    vulnerability is in MySQL Server, attacks may significantly impact
    additional products. Successful attacks of this vulnerability can result
    in unauthorized ability to cause a hang or frequently repeatable crash
    (complete DOS) of MySQL Server.

    CVE-2017-3453 - Vulnerability in the MySQL Server component of Oracle MySQL
    (subcomponent: Server: Optimizer). Supported versions that are affected are
    5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily
    "exploitable" vulnerability allows low privileged attacker with network
    access via multiple protocols to compromise MySQL Server. Successful attacks
    of this vulnerability can result in unauthorized ability to cause a hang or
    frequently repeatable crash (complete DOS) of MySQL Server.

    CVE-2017-3456 - Vulnerability in the MySQL Server component of Oracle MySQL
    (subcomponent: Server: DML). Supported versions that are affected are 5.5.54
    and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily "exploitable"
    vulnerability allows high privileged attacker with network access via
    multiple protocols to compromise MySQL Server. Successful attacks of this
    vulnerability can result in unauthorized ability to cause a hang or
    frequently repeatable crash (complete DOS) of MySQL Server.

    CVE-2017-3464 - Vulnerability in the MySQL Server component of Oracle MySQL
    (subcomponent: Server: DDL). Supported versions that are affected are 5.5.54
    and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily "exploitable"
    vulnerability allows low privileged attacker with network access via
    multiple protocols to compromise MySQL Server. Successful attacks of this
    vulnerability can result in unauthorized update, insert or delete access to
    some of MySQL Server accessible data.

    And a number of important, but non-security related fixes:

    MDEV-12602: Fixed some race conditions in InnoDB encryption

    MariaDB Backup alpha introduced

    Galera wsrep library updated to 25.3.20

    For details, see the release notes:
    https://mariadb.com/kb/en/mariadb/mariadb-10123-release-notes/

    [Peter: drop COPYING.LESSER and add a reference to the bugtracker issue
    	explaining why]
    Signed-off-by: Ryan Coe <bluemrp9@gmail.com>
    Signed-off-by: Peter Korsgaard <peter@korsgaard.com>

commit 8644a83bd806d1e6efdfd972908798e8e00f7006
Author: Peter Korsgaard <peter@korsgaard.com>
Date:   Sat May 20 17:15:48 2017 +0200

    dropbear: security bump to version 2017.75

    Fixes:

    - CVE-2017-9078: A double-free in the server could be triggered by an
      authenticated user if dropbear is running with -a (Allow connections to
      forwarded ports from any host) This could potentially allow arbitrary code
      execution as root by an authenticated user.  Affects versions 2013.56 to
      2016.74.  Thanks to Mark Shepard for reporting the crash.

    - CVE-2017-9079: Dropbear parsed authorized_keys as root, even if it were a
      symlink.  The fix is to switch to user permissions when opening
      authorized_keys.
      A user could symlink their ~/.ssh/authorized_keys to a root-owned file
      they couldn't normally read.  If they managed to get that file to contain
      valid authorized_keys with command= options it might be possible to read
      other contents of that file.  This information disclosure is to an already
      authenticated user.  Thanks to Jann Horn of Google Project Zero for
      reporting this.

    Signed-off-by: Peter Korsgaard <peter@korsgaard.com>

commit 8213190bfa88d0d222b24c81515bd201f25efb7c
Author: Peter Korsgaard <peter@korsgaard.com>
Date:   Sat May 20 17:10:07 2017 +0200

    linux: bump default version to 4.11.2

    Signed-off-by: Peter Korsgaard <peter@korsgaard.com>

commit daf1c350251ac1872ee3849a6b79476d1d026c2f
Author: Peter Korsgaard <peter@korsgaard.com>
Date:   Sat May 20 17:10:06 2017 +0200

    linux-headers: bump 4.{4, 9, 10, 11}.x series

    Signed-off-by: Peter Korsgaard <peter@korsgaard.com>

commit 509eb191918ede1214a0adee36887172048b88d9
Author: Bernd Kuhls <bernd.kuhls@t-online.de>
Date:   Sun May 21 17:01:06 2017 +0200

    DEVELOPERS: add myself to alsa-{lib, utils}

    Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
    Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>

commit 4d1c2c82e8945a5847d636458f3825c55529835b
Author: Baruch Siach <baruch@tkos.co.il>
Date:   Fri May 19 07:20:37 2017 +0300

    toolchain: limit musl workaround to kernel headers 3.12+

    The libc-compat.h first appeared in kernel version 3.12. Trying to build a
    musl toolchain using earlier headers leads to the following failure:

    /bin/sed: can't read .../output/host/usr/arm-buildroot-linux-musleabi/sysroot/usr/include/linux/libc-compat.h: No such file or directory
    package/pkg-generic.mk:266: recipe for target '.../output/build/toolchain/.stamp_staging_installed' failed

    Don't apply the sed patch to older headers.

    Reported-by: Florent Jacquet <florent.jacquet@free-electrons.com>
    Signed-off-by: Baruch Siach <baruch@tkos.co.il>
    Signed-off-by: Peter Korsgaard <peter@korsgaard.com>

commit 15423bd46e925b1aed12aac8eddeaf249b4bd999
Author: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Date:   Wed May 17 23:53:21 2017 +0200

    cppcms: fix build on machines with libgpg-error installed

    In configuration where target architecture == host architecture, and
    libgpg-error is installed system-wide with development files, the build
    of cppcms fails with:

    /home/test/buildroot/output/host/usr/bin/x86_64-amd-linux-gnu-g++  --sysroot=/home/test/buildroot/output/host/usr/x86_64-buildroot-linux-gnu/sysroot  -D_LARGEFILE_SOURCE -D_LARGEFILE64_SOURCE -D_FILE_OFFSET_BITS=64 -Os -Wall -Wextra  -DNDEBUG   CMakeFiles/base64_test.dir/tests/base64_test.cpp.o  -o base64_test  -L/home/test/buildroot/output/host/usr/x86_64-buildroot-linux-gnu/sysroot/usr/lib -Wl,-rpath,/home/test/buildroot/output/build/cppcms-1.0.5:/home/test/buildroot/output/build/cppcms-1.0.5/booster:/usr/lib -rdynamic libcppcms.so.1.0.5 booster/libbooster.so.0.0.3 -lpthread /home/test/buildroot/output/host/usr/x86_64-buildroot-linux-gnu/sysroot/usr/lib/libpcre.so /home/test/buildroot/output/host/usr/x86_64-buildroot-linux-gnu/sysroot/usr/lib/libgcrypt.so /home/test/buildroot/output/host/usr/x86_64-buildroot-linux-gnu/sysroot/usr/lib/libdl.so /home/test/buildroot/output/host/usr/x86_64-buildroot-linux-gnu/sysroot/usr/lib/libz.so
    /home/test/buildroot/output/host/usr/x86_64-buildroot-linux-gnu/sysroot/usr/lib/libgcrypt.so: undefined reference to `gpg_err_set_errno@GPG_ERROR_1.0'
    /home/test/buildroot/output/host/usr/x86_64-buildroot-linux-gnu/sysroot/usr/lib/libgcrypt.so: undefined reference to `gpgrt_lock_init@GPG_ERROR_1.0'
    /home/test/buildroot/output/host/usr/x86_64-buildroot-linux-gnu/sysroot/usr/lib/libgcrypt.so: undefined reference to `gpgrt_lock_destroy@GPG_ERROR_1.0'
    /home/test/buildroot/output/host/usr/x86_64-buildroot-linux-gnu/sysroot/usr/lib/libgcrypt.so: undefined reference to `gpg_err_code_from_syserror@GPG_ERROR_1.0'
    /home/test/buildroot/output/host/usr/x86_64-buildroot-linux-gnu/sysroot/usr/lib/libgcrypt.so: undefined reference to `gpg_err_code_from_errno@GPG_ERROR_1.0'
    /home/test/buildroot/output/host/usr/x86_64-buildroot-linux-gnu/sysroot/usr/lib/libgcrypt.so: undefined reference to `gpgrt_lock_unlock@GPG_ERROR_1.0'
    /home/test/buildroot/output/host/usr/x86_64-buildroot-linux-gnu/sysroot/usr/lib/libgcrypt.so: undefined reference to `gpg_strerror@GPG_ERROR_1.0'
    /home/test/buildroot/output/host/usr/x86_64-buildroot-linux-gnu/sysroot/usr/lib/libgcrypt.so: undefined reference to `gpg_strsource@GPG_ERROR_1.0'
    /home/test/buildroot/output/host/usr/x86_64-buildroot-linux-gnu/sysroot/usr/lib/libgcrypt.so: undefined reference to `gpgrt_lock_lock@GPG_ERROR_1.0'

    The problem comes from the
    "-Wl,-rpath,/home/test/buildroot/output/build/cppcms-1.0.5:/home/test/buildroot/output/build/cppcms-1.0.5/booster:/usr/lib"
    option, which tells the linker to search for libraries in /usr/lib.

    This commit fixes that by asking CMake to not add any rpath when
    building cppcms.

    Fixes:

      http://autobuild.buildroot.net/results/a7eb1ede552ae14f409cfd7bd877bcf25ca69a74/

    Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
    Reviewed-by: Romain Naour <romain.naour@gmail.com>
    Signed-off-by: Peter Korsgaard <peter@korsgaard.com>

commit 19e78e509e5e729437d2188b28aee7655340c67d
Author: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Date:   Wed May 17 22:24:14 2017 +0200

    oracle-mysql: add patch to fix gcc 6.x build issue

    Fixes:

     http://autobuild.buildroot.net/results/61074b69b81cd5c17a7f74dc1f7b31f3fc35fd8a/

    Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>

commit d332f2c52192144d6205b68a1a2888eb63e9efb1
Author: Luca Ceresoli <luca@lucaceresoli.net>
Date:   Wed May 10 23:33:46 2017 +0200

    support/testing: simplify logging by keeping the log file open

    We currently call infra.smart_open() to open log files each time we
    need to write to them.

    Opening the file once in the constructor of Builder and Emulator and
    writing to it whenever needed is simpler and slightly more efficient.

    Remove smart_open and instead create a new open_log_file() function
    which just opens the logfile. Also let it compute the filename, in
    order to simplify even further the Builder and Emulator code.

    Signed-off-by: Luca Ceresoli <luca@lucaceresoli.net>
    Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>

commit fa3c5cad44b245833612705a88101f3737d02b38
Author: Luca Ceresoli <luca@lucaceresoli.net>
Date:   Tue May 16 22:45:31 2017 +0200

    support/testing/run-tests: help: put the one-letter form before the long form

    This is what the manpages usually do, and what Python does with the
    automatically-added -h/--help parameter:

    Before the change:
      $ ./support/testing/run-tests
        [...]
      optional arguments:
        -h, --help            show this help message and exit
        --list, -l            list of available test cases
        --all, -a             execute all test cases

    After the change:
      $ ./support/testing/run-tests
        [...]
      optional arguments:
        -h, --help            show this help message and exit
        -l, --list            list of available test cases
        -a, --all             execute all test cases

    Signed-off-by: Luca Ceresoli <luca@lucaceresoli.net>
    Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>

commit ee72dbe576e0c8e11a0bd61028950b2f8de29642
Author: Luca Ceresoli <luca@lucaceresoli.net>
Date:   Tue May 16 22:45:30 2017 +0200

    support/testing: document get_elf_prog_interpreter

    Signed-off-by: Luca Ceresoli <luca@lucaceresoli.net>
    Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>

commit 52258901eccb72eeafab61f855f4b8ce34bf4159
Author: Luca Ceresoli <luca@lucaceresoli.net>
Date:   Tue May 16 22:45:29 2017 +0200

    support/testing: rename check_broken_links to has_broken_links

    has_broken_links makes it self-explanatory that this is a predicate
    function, and that the return value tells whether there _are_ broken
    links, not the opposite.

    Signed-off-by: Luca Ceresoli <luca@lucaceresoli.net>
    Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>

commit f8e1fdbe972b5b82b35b118e2fd7fce5e31d0de9
Author: Peter Korsgaard <peter@korsgaard.com>
Date:   Wed May 17 15:03:11 2017 +0200

    gnutls: bump version to 3.5.12

    For details, see the release notes:

    https://lists.gnupg.org/pipermail/gnutls-devel/2017-May/008427.html
    https://lists.gnupg.org/pipermail/gnutls-devel/2017-April/008393.html

    Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
    Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>

commit be8d1efd1e5b8c4ceed34e8144d2cac075ab364e
Author: Peter Korsgaard <peter@korsgaard.com>
Date:   Wed May 17 16:52:51 2017 +0200

    fbgrab: explicitly build fbgrab target to workaround gzip issue

    Fixes #9871

    gzip reads default command line options from the environment variable GZIP.
    The fbgrab Makefile internally also uses a GZIP make variable to know what
    command to use to compress the manpage. Unfortunaly make will export the
    value of this make variable to the environment if GZIP is already present in
    the enviroment, confusing gzip (as 'gzip' isn't a valid command line argument).

    This can either be triggered by users having GZIP set in their environment
    (E.G.  for custom options), or by enabling BR2_REPRODUCIBLE, where we use
    this feature to force the -n option (to not store name/timestamp) to gzip.

    We don't really need to compress the manpage as it isn't installed anyway,
    so work around the issue by only building the fbgrab application.

    Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
    Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>

commit 7fde83cdf0da338937dae13144eea2923e5c2730
Author: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Date:   Wed May 17 21:45:04 2017 +0200

    ntp: add patch to fix -fPIC issue

    This commit adds a patch that fixes the build on AArch64 and MIPS of the
    ntp package, which was caused by some parts of ntp being built without
    -fPIC.

    Fixes:

      [aarch64] http://autobuild.buildroot.net/results/866b1d28595efd8b6becf83d0a64b596538d58b0
      [mips]    http://autobuild.buildroot.net/results/c2a945855172970736a8ffea9c564f029a023344

    Thanks to Romain Naour for the initial analysis.

    Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>

commit 2677210f545c3f3e8c52c973e08c3a460c521e5b
Author: Matt Weber <matthew.weber@rockwellcollins.com>
Date:   Sun May 14 21:26:00 2017 -0500

    libqmi: move canonicalize_file_name()

    Previously was defined in qmi-util.h to fix musl
    compatibility.  It was missed that this is a shared
    header which causes other dependent package builds
    to fail, so the static definition was moved into the
    implementation where it was used.

    Upstream bug report has been updated and this resolves
    the following autobuilder related failures.

     http://autobuild.buildroot.net/results/fe9b6b1b1399a4e8aafc6a326c81ec97c2480025
     http://autobuild.buildroot.net/results/40eef797b4d8d53fc6e10f2048316d63549caf6d

    test-pkg testing was performed against 10 random toolchains

    ++ Config snippet ++
    BR2_ROOTFS_DEVICE_CREATION_DYNAMIC_EUDEV=y
    BR2_PACKAGE_MODEM_MANAGER_LIBQMI=y
    BR2_PACKAGE_MODEM_MANAGER=y
    BR2_PACKAGE_LIBQMI=y

    ++ Tested Toolchains ++ (Verified I hit all libc variants)
    br-arm-cortex-a9-musl
    br-arm-full-static
    br-m68k-68040-full    (uclibc)
    br-mips32r6-el-hf-glibc
    br-mips64-n64-full
    br-mips64r6-el-hf-glibc
    br-mipsel-o32-full
    br-sparc64-glibc
    linaro-arm
    sourcery-arm

    Signed-off-by: Matthew Weber <matthew.weber@rockwellcollins.com>
    Tested-by: Vicente Olivert Riera <Vincent.Riera@imgtec.com>
    Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>

commit f884abe4de72b942406ca16c4f54e02a0c57cce4
Author: Bartosz Golaszewski <brgl@bgdev.pl>
Date:   Wed May 17 12:10:00 2017 +0200

    package/pulseview: fix a build issue

    Backport an upstream patch fixing the build issue related to boost
    math definitions.

    Fixes:
    http://autobuild.buildroot.net/results/e9f/e9f3f175e203529c44ecf92a34b82a0b3a473e34/

    Signed-off-by: Bartosz Golaszewski <brgl@bgdev.pl>
    Signed-off-by: Peter Korsgaard <peter@korsgaard.com>

commit beb6524225f12549a216183abc07745f8d36e764
Author: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Date:   Sun May 14 23:22:42 2017 +0200

    rabbitmq-c: openssl/popt sub-options don't work in static linking

    rabbitmq-c currently fails to build in a number of static linking
    situations, due to two issues:

     - CMake FindOpenSSL module is buggy. Even though it uses pkg-config,
       it doesn't use the information returned by pkg-config, and
       therefore doesn't know about second order libraries that need be
       part of the link for static linking to succeed. Due to this, -lz is
       not passed, and therefore rabbitmq-c fails when linking against
       libssl/libcrypto. This issue has been reported to upstream CMake at
       https://gitlab.kitware.com/cmake/cmake/issues/16885.

     - popt might use libintl, but CMake doesn't know about that. For
       autotools based packages, we typically work around this by passing
       LIBS=, but CMake apparently has no equivalent to LIBS=.

    To workaround this, we only use the OpenSSL and Popt optional
    dependencies in dynamic linking situations.

    Fixes:

      http://autobuild.buildroot.net/results/798dbe5e5fd0463bb2066cb115656795144c327f/

    Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
    Signed-off-by: Peter Korsgaard <peter@korsgaard.com>

commit 8ab8f10afaa7579c04d6705eb30c325409e599f9
Author: Peter Korsgaard <peter@korsgaard.com>
Date:   Wed May 17 10:27:16 2017 +0200

    Update for 2017.05-rc2

    Signed-off-by: Peter Korsgaard <peter@korsgaard.com>

commit 4b4fc27e1a719d1fa0688e81760531979fb4cb73
Author: Peter Seiderer <ps.report@gmx.net>
Date:   Tue May 16 20:52:01 2017 +0200

    qt5declarative: fix examples compile without OpenGL support

    Fixes [1]:

       main.cpp:(.text._ZN11QQmlPrivate10createIntoI6FbItemEEvPv[_ZN11QQmlPrivate10createIntoI6FbItemEEvPv]+0x18): undefined reference to `QQuickFramebufferObject::QQuickFramebufferObject(QQuickItem*)'
       .obj/main.o: In function `QQmlPrivate::QQmlElement<FbItem>::~QQmlElement()':
       main.cpp:(.text._ZN11QQmlPrivate11QQmlElementI6FbItemED2Ev[_ZN11QQmlPrivate11QQmlElementI6FbItemED5Ev]+0x5c): undefined reference to `vtable for QQuickFramebufferObject'
       .obj/main.o: In function `QQmlPrivate::QQmlElement<FbItem>::~QQmlElement()':
       main.cpp:(.text._ZN11QQmlPrivate11QQmlElementI6FbItemED0Ev[_ZN11QQmlPrivate11QQmlElementI6FbItemED0Ev]+0x64): undefined reference to `vtable for QQuickFramebufferObject'
       .obj/main.o:(.data.rel.ro._ZTVN11QQmlPrivate11QQmlElementI6FbItemEE[_ZTVN11QQmlPrivate11QQmlElementI6FbItemEE]+0x48): undefined reference to `QQuickFramebufferObject::isTextureProvider() const'
       .obj/main.o:(.data.rel.ro._ZTVN11QQmlPrivate11QQmlElementI6FbItemEE[_ZTVN11QQmlPrivate11QQmlElementI6FbItemEE]+0x4c): undefined reference to `QQuickFramebufferObject::textureProvider() const'
       .obj/main.o:(.data.rel.ro._ZTVN11QQmlPrivate11QQmlElementI6FbItemEE[_ZTVN11QQmlPrivate11QQmlElementI6FbItemEE]+0xb4): undefined reference to `QQuickFramebufferObject::geometryChanged(QRectF const&, QRectF const&)'
       .obj/main.o:(.data.rel.ro._ZTVN11QQmlPrivate11QQmlElementI6FbItemEE[_ZTVN11QQmlPrivate11QQmlElementI6FbItemEE]+0xb8): undefined reference to `QQuickFramebufferObject::updatePaintNode(QSGNode*, QQuickItem::UpdatePaintNodeData*)'
       .obj/main.o:(.data.rel.ro._ZTVN11QQmlPrivate11QQmlElementI6FbItemEE[_ZTVN11QQmlPrivate11QQmlElementI6FbItemEE]+0xbc): undefined reference to `QQuickFramebufferObject::releaseResources()'
       .obj/moc_fbitem.o: In function `FbItem::qt_metacast(char const*)':
       moc_fbitem.cpp:(.text+0x70): undefined reference to `QQuickFramebufferObject::qt_metacast(char const*)'
       .obj/moc_fbitem.o: In function `FbItem::qt_metacall(QMetaObject::Call, int, void**)':
       moc_fbitem.cpp:(.text+0x80): undefined reference to `QQuickFramebufferObject::qt_metacall(QMetaObject::Call, int, void**)'
       .obj/moc_fbitem.o: In function `FbItem::~FbItem()':
       moc_fbitem.cpp:(.text._ZN6FbItemD2Ev[_ZN6FbItemD5Ev]+0x38): undefined reference to `vtable for QQuickFramebufferObject'
       .obj/moc_fbitem.o: In function `FbItem::~FbItem()':
       moc_fbitem.cpp:(.text._ZN6FbItemD0Ev[_ZN6FbItemD0Ev]+0x40): undefined reference to `vtable for QQuickFramebufferObject'
       .obj/moc_fbitem.o:(.data.rel.ro+0x8): undefined reference to `typeinfo for QQuickFramebufferObject'
       .obj/moc_fbitem.o:(.data.rel.ro+0x58): undefined reference to `QQuickFramebufferObject::isTextureProvider() const'
       .obj/moc_fbitem.o:(.data.rel.ro+0x5c): undefined reference to `QQuickFramebufferObject::textureProvider() const'
       .obj/moc_fbitem.o:(.data.rel.ro+0xc4): undefined reference to `QQuickFramebufferObject::geometryChanged(QRectF const&, QRectF const&)'
       .obj/moc_fbitem.o:(.data.rel.ro+0xc8): undefined reference to `QQuickFramebufferObject::updatePaintNode(QSGNode*, QQuickItem::UpdatePaintNodeData*)'
       .obj/moc_fbitem.o:(.data.rel.ro+0xcc): undefined reference to `QQuickFramebufferObject::releaseResources()'
       .obj/moc_fbitem.o:(.data.rel.ro+0xf0): undefined reference to `QQuickFramebufferObject::staticMetaObject'

    [1] http://autobuild.buildroot.net/results/64a/64a198397736db12b73c1f693dbe1c47d73b53da

    Signed-off-by: Peter Seiderer <ps.report@gmx.net>
    Signed-off-by: Peter Korsgaard <peter@korsgaard.com>

commit ef9ffa3426edc895dc180d45b48bf305522b3450
Author: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Date:   Mon May 15 22:38:32 2017 +0200

    protobuf: link with libatomic when needed

    The protobuf library uses atomic intrinsics, so we need to link
    against libatomic.

    Fixes the build of protobuf on Sparc:

      http://autobuild.buildroot.net/results/f3d76eaebd529a61bce849e355182c60f233ed06/

    Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
    Signed-off-by: Peter Korsgaard <peter@korsgaard.com>

commit 4e00f9daa04e9a84f5191f479d7236dea72fbf35
Author: Peter Korsgaard <peter@korsgaard.com>
Date:   Tue May 16 21:24:02 2017 +0200

    gcc: drop unused legacy arc-2016.09 patch

    This was forgotten when the arc toolchain version was bumped.

    Signed-off-by: Peter Korsgaard <peter@korsgaard.com>

commit 5270553b9037c775acec493c8d05275fdf53ed05
Author: Romain Naour <romain.naour@gmail.com>
Date:   Sun May 14 23:45:56 2017 +0200

    package/boost: disable boost-locale for static only build with icu

    Boost fails to build with the following error:

    error: Tried to build the target twice, with property sets having
    error: these incompatible properties:
    error:
    error:     -  <runtime-…
zelenkaj pushed a commit that referenced this issue Jun 8, 2017
When linking the demo applications statically with pcap,
the CMake build system does not link with other libraries
that are already linked with libpcap
(-lnl-genl-3 -lnl-3 -ldbus-1 -pthread).

To fix this, the build system uses pcap-config:
pcap-config --libs --static

Resolves:
#187

Change-Id: I90d1c8997ca089d5c12dd6bfd276fe04cba572f7
Signed-off-by: Romain Naour <romain.naour@gmail.com>
@zelenkaj zelenkaj closed this as completed Jun 9, 2017
seissw pushed a commit that referenced this issue Nov 24, 2017
When linking the demo applications statically with pcap,
the CMake build system does not link with other libraries
that are already linked with libpcap
(-lnl-genl-3 -lnl-3 -ldbus-1 -pthread).

To fix this, the build system uses pcap-config:
pcap-config --libs --static

Resolves:
#187

Change-Id: I90d1c8997ca089d5c12dd6bfd276fe04cba572f7
Signed-off-by: Romain Naour <romain.naour@gmail.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

4 participants