summaryrefslogtreecommitdiffstats
path: root/package/xen
Commit message (Collapse)AuthorAgeFilesLines
* package/xen: fix build with gcc 8.1Fabrice Fontaine2019-03-251-0/+79
| | | | | | | | | | Fixes: - http://autobuild.buildroot.org/results/df5abe6ca8b4c8935f3d5c257aef816190771200 Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> (cherry picked from commit 9b2bf1b7458891ae652e3493ae87d1f7c4776a8b) Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* package/xen: security bump to version 4.11.1Peter Korsgaard2018-12-162-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | The 4.11.1 release brings a large number of fixes: https://xenproject.org/downloads/xen-archives/xen-project-411-series/xen-4111.html Including a number of security fixes: XSA-268: Use of v2 grant tables may cause crash on ARM (CVE-2018-15469) XSA-269: x86: Incorrect MSR_DEBUGCTL handling lets guests enable BTS (CVE-2018-15468) XSA-272: oxenstored does not apply quota-maxentity (CVE-2018-15470) XSA-273: L1 Terminal Fault speculative side channel (CVE-2018-3620, CVE-2018-3646) XSA-275: insufficient TLB flushing / improper large page mappings with AMD IOMMUs XSA-276: resource accounting issues in x86 IOREQ server handling XSA-277: x86: incorrect error handling for guest p2m page removals XSA-278: x86: Nested VT-x usable even when disabled (CVE-2018-18883) XSA-279: x86: DoS from attempting to use INVPCID with a non-canonical addresses XSA-280: Fix for XSA-240 conflicts with shadow paging XSA-282: guest use of HLE constructs may lock up host Signed-off-by: Peter Korsgaard <peter@korsgaard.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
* package/xen: Bump Xen to 4.11.0 and backport a fixAlistair Francis2018-11-183-2/+39
| | | | | | | | | | | | Bump the Xen package to the latest release and backport a fix from the Xen master brach. This fixes autobuilder issue: http://autobuild.buildroot.net/results/6e0d8e962e861a32f5bf2e5031ef51c25768f1f6/ Signed-off-by: Alistair Francis <alistair@alistair23.me> Tested-by: Matt Weber <matthew.weber@rockwellcollins.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* xen: security bump to version 4.10.2Peter Korsgaard2018-10-013-64/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Drop 0003-memfd-fix-configure-test.patch applied upstream. The 4.10.2 version brings a large number of fixes: https://xenproject.org/downloads/xen-archives/xen-project-410-series/xen-4102.html Including a number of security fixes: XSA-260: x86: mishandling of debug exceptions (CVE-2018-8897) XSA-261: x86 vHPET interrupt injection errors (CVE-2018-10982) XSA-262: qemu may drive Xen into unbounded loop (CVE-2018-10981) XSA-263: Speculative Store Bypass (CVE-2018-3639) XSA-264: preemption checks bypassed in x86 PV MM handling (CVE-2018-12891) XSA-265: x86: #DB exception safety check can be triggered by a guest (CVE-2018-12893) XSA-266: libxl fails to honour readonly flag on HVM emulated SCSI disks (CVE-2018-12892) XSA-267: Speculative register leakage from lazy FPU context switching (CVE-2018-3665) XSA-268: Use of v2 grant tables may cause crash on ARM (CVE-2018-15469) XSA-269: x86: Incorrect MSR_DEBUGCTL handling lets guests enable BTS (CVE-2018-15468) XSA-272: oxenstored does not apply quota-maxentity (CVE-2018-15470) XSA-273: L1 Terminal Fault speculative side channel (CVE-2018-3620, CVE-2018-3646) Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* Merge branch 'next'Peter Korsgaard2018-09-071-2/+0
|\ | | | | | | Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
| * libaio: bump to 0.3.111Thomas Petazzoni2018-08-211-2/+0
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Until now, libaio contained some architecture specific code to do the syscalls. In fact, it contained a generic variant of the code called syscall-generic.h, but it was showing a warning when it was used, as if it was "not safe". Consequently, in Buildroot, we had chosen to support libaio only on a the subset of architectures that were explicitly handled by libaio. However, between 0.3.110 and 0.3.111, libaio upstream entirely dropped the architecture-specific code: https://pagure.io/libaio/c/97fd3fc0195500e616e34047cba4846164c411d9?branch=master Consequently, in this patch, we: - Bump libaio to 0.3.111. - Switch to the new upstream at https://pagure.io/libaio/. - Drop the 0001-arches.patch patch, which was adding support for MIPS, since we no longer need architecture-specific code. - Update the remaining patches, and Git-format one of them which wasn't Git-formatted. - Drop the BR2_PACKAGE_LIBAIO_ARCH_SUPPORTS option and all its uses. Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
* | package/xen: disable tools/qemu-xen/ openglMatt Weber2018-09-041-1/+1
|/ | | | | | | | Resolves: http://autobuild.buildroot.net/results/a7f2bf387458c2f0db6a4b555c51004f321f9320 Signed-off-by: Matthew Weber <matthew.weber@rockwellcollins.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* xen: security bump to version 4.10.1Peter Korsgaard2018-05-312-2/+3
| | | | | | | | | | | | | | | | | | | | | The 4.10.1 version brings a large number of fixes: https://www.xenproject.org/downloads/xen-archives/xen-project-410-series/xen-4101.html Including a number of security fixes: XSA-252: DoS via non-preemptable L3/L4 pagetable freeing (CVE-2018-7540) XSA-253: x86: memory leak with MSR emulation (CVE-2018-5244) XSA-254: Information leak via side effects of speculative execution (CVE-2017-5753 CVE-2017-5715 CVE-2017-5754) XSA-255: grant table v2 -> v1 transition may crash Xen (CVE-2018-7541) XSA-256: x86 PVH guest without LAPIC may DoS the host (CVE-2018-7542) XSA-258: Information leak via crafted user-supplied CDROM (CVE-2018-10472) XSA-259: x86: PV guest may crash Xen with XPTI (CVE-2018-10471) Also add a hash for the license file while we are at it. Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* package/xen: force location of init scriptsYann E. MORIN2018-05-131-1/+3
| | | | | | | | | | | | | | | | | | | The Xen configure scripts looks at the build host to decide where to install the Sys-V startup scripts, and that location differs between various distros. Force the location. Fixes: http://autobuild.buildroot.org/results/869/869829ab086e824d164c5c5ec7f087ed83993be6/ http://autobuild.buildroot.org/results/336/3360e5a9e3d007b4ed77345b5fe93b2dacb6ad49/ http://autobuild.buildroot.org/results/29e/29e308ce3cc9c83497ba1c1f98fcda3f48fd03c4/ Signed-off-by: "Yann E. MORIN" <yann.morin.1998@free.fr> Cc: Matt Weber <matthew.weber@rockwellcollins.com> Cc: Alistair Francis <alistair@alistair23.me> Reviewed-by: Alistair Francis <alistair@alistair23.me> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
* package/xen: fix qemu-xen memfd build failureAlistair Francis2018-04-091-0/+62
| | | | | | | | | | | | | | | | | | Fix the QEMU memfd compile error: tools/qemu-xen/util/memfd.c:40:12: error: static declaration of 'memfd_create' follows non-static declaration static int memfd_create(const char *name, unsigned int flags) ^~~~~~~~~~~~ that has been introduced since the Glibc 2.27 upgrade. This just involves porting the upstream QEMU patch to the Xen QEMU tree. This fixes: http://autobuild.buildroot.net/results/ec7cda00e07b0c98a9a366244b67611e042e0d4b/ Signed-off-by: Alistair Francis <alistair@alistair23.me> Tested-by: Matt Weber <matthew.weber@rockwellcollins.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
* package/xen: Force disable SDL for xen-qemu buildAlistair Francis2018-01-191-0/+1
| | | | | | | | Fixes autobuilder issue: http://autobuild.buildroot.net/results/8bcb80dc93d38bb38ca32ad93d52c22d1176d57e/ Signed-off-by: Alistair Francis <alistair.francis@xilinx.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* package/xen: Bump to latest 4.10.0 releaseAlistair Francis2018-01-182-2/+2
| | | | | Signed-off-by: Alistair Francis <alistair.francis@xilinx.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* xen: bump to version 4.9.1Peter Korsgaard2018-01-153-67/+2
| | | | | | | | | | | Drop 0003-tools-libxc-xc_dom_arm-add-missing-variable-initiali.patch as that is now upstream: https://xenbits.xenproject.org/gitweb/?p=xen.git;a=commit;h=88bfbf90e35f1213f9967a97dee0b2039f9998a4 Drop security patches as 4.9.1 includes up to xsa-245. Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* package/*/Config.in: fix help text check-package warningsThomas Petazzoni2017-12-181-3/+3
| | | | | | | | | | | | | This commit fixes the warnings reported by check-package on the help text of all package Config.in files, related to the formatting of the help text: should start with a tab, then 2 spaces, then at most 62 characters. The vast majority of warnings fixed were caused by too long lines. A few warnings were related to spaces being used instead of a tab to indent the help text. Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* xen: add upstream post-4.9.0 security fix for XSA-245Peter Korsgaard2017-10-222-1/+6
| | | | | | | | | | | Fixes XA-245: ARM: Some memory not scrubbed at boot https://xenbits.xenproject.org/xsa/advisory-245.html Notice: Not applying XSA-237..244 as they are x86 only and have patch file name conflicts between 2017.02.x and master. Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* xen: add upstream post-4.9.0 security fixesPeter Korsgaard2017-09-192-0/+19
| | | | | | | | | | | | | | | | | | | | | Fixes the following security issues: XSA-226: multiple problems with transitive grants (CVE-2017-12135) XSA-227: x86: PV privilege escalation via map_grant_ref (CVE-2017-12137) XSA-228: grant_table: Race conditions with maptrack free list handling (CVE-2017-12136) XSA-230: grant_table: possibly premature clearing of GTF_writing / GTF_reading (CVE-2017-12855) XSA-231: Missing NUMA node parameter verification (CVE-2017-14316) XSA-232: Missing check for grant table (CVE-2017-14318) XSA-233: cxenstored: Race in domain cleanup (CVE-2017-14317) XSA-234: insufficient grant unmapping checks for x86 PV guests (CVE-2017-14319) XSA-235: add-to-physmap error paths fail to release lock on ARM Signed-off-by: Peter Korsgaard <peter@korsgaard.com> Reviewed-by: Alistair Francis <alistair.francis@xilinx.com> Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
* package/xen: fix build with gcc7Bernd Kuhls2017-08-191-0/+41
| | | | | | | | | | Fixes: http://autobuild.buildroot.net/results/f9553c1669bd05acee3ccea76e36c2474e534d8c/ Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de> [Thomas: improve patch, reformatted with Git and better commit log.] Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* package/xen: Include linux/limits.h when building QEMU inside of XenAlistair Francis2017-07-291-0/+43
| | | | | | | | | | | | | | | | | If building Xen and not using glibc (using musl for example) the QEMU project inside of Xen fails to build as it relys on the XATTR_SIZE_MAX macro which is defined in <linux/limits.h>. Glibc includes this header indirectly but as that is not part of the POSIX standard other libraries don't neccessearily have this. To fix the issue we explicitly include <linux/limits.h> to ensure the build works for all libc libraries. Fixes: http://autobuild.buildroot.net/results/bb1/bb1310eb1464d880a357ae5e491fd168361d25a0 Signed-off-by: Alistair Francis <alistair.francis@xilinx.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* Globally replace $(HOST_DIR)/usr/bin with $(HOST_DIR)/binArnout Vandecappelle2017-07-051-1/+1
| | | | | | | | | | | Since things are no longer installed in $(HOST_DIR)/usr, the callers should also not refer to it. This is a mechanical change with git grep -l '$(HOST_DIR)/usr/bin' | xargs sed -i 's%$(HOST_DIR)/usr/bin%$(HOST_DIR)/bin%g' Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* package/xen: bump to version 4.9.0Alistair Francis2017-07-019-341/+3
| | | | | | | | Upgrade the Xen package to Xen 4.9.0. This also means we can remove almost all of the patches we were previously carrying. Signed-off-by: Alistair Francis <alistair.francis@xilinx.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* package/xen: Fix builds with GCC 7Alistair Francis2017-07-011-0/+70
| | | | | | | | | | | | Fix a "duplicate 'const' declaration specifier" error that occurs when building Xen. As the issue has already been fixed in upstream Xen let's just backport the fix to apply here. Fixes: http://autobuild.buildroot.net/results/3a0/3a03c328bc6a6c30cc4f619925608d735632211f/ Signed-off-by: Alistair Francis <alistair.francis@xilinx.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* package/xen: Backport a header include fix for makedevAlistair Francis2017-05-301-0/+52
| | | | | | | | | | | | | maekdev() is available from sys/types.h but only due to a bug in glibc. This is being fixed by printing an error when using makedev() from sys/types.h. To fix the issue we should include sys/sysmacros.h for makedev(). As this has already been fixed in upstream Xen we can backport the patch. Fixes: http://autobuild.buildroot.net/results/552/552e66d764885341b2fe208a0e4382b5fe05ea9d/ Signed-off-by: Alistair Francis <alistair.francis@xilinx.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* package/xen: add dependency on host-acpicaAlistair Francis2017-05-291-1/+1
| | | | | | | | | | | | | | This commit adds a dependency on the host ACPICA package as Xen tools require iasl to build. Fixes: http://autobuild.buildroot.net/results/afa199864d6b546fe759bb582a9c10702ea7fa78/ Signed-off-by: Alistair Francis <alistair.francis@xilinx.com> Acked-by: Erico Nunes <nunes.erico@gmail.com> [Thomas: tweak commit log, add autobuilder reference.] Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* package/xen: Use POSIX complaint header includesAlistair Francis2017-04-212-0/+124
| | | | | | | | | | | | | | | | To fix build issues when using the musl library use POSIX compatible library inclues. This fixes this autobuilder issue: http://autobuild.buildroot.net/results/1aa/1aa1303f60372f51aa5a7eb18caac4a5b5c1d9d4/build-end.log These two patches have been by accepted upstream Xen and will be in 4.9: http://xenbits.xen.org/gitweb/?p=xen.git;a=commit;h=b4cd5173183fbc118e2dc2a0d2e0d5038daf4fb5 http://xenbits.xen.org/gitweb/?p=xen.git;a=commit;h=4703a9ba9bb0c9c2804813ffe0943177d5f96039 Signed-off-by: Alistair Francis <alistair.francis@xilinx.com> Reviewed-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* package/xen: Update to version 4.8.1Alistair Francis2017-04-128-54/+95
| | | | | | | | | | | | | | | Update Xen to version 4.8.1 and update the patches to allow Xen hypervisor and Xen tools to build. The patches applied were re-aranged a little bit. Patches 2, 3 and 4 have been accepted by upstream Xen and won't be required in future releases. Patch 1 (previously patch 2) is still required and was moved to patch 1 to better reflect it's status. Signed-off-by: Alistair Francis <alistair.francis@xilinx.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* boot, linux, package: use SPDX short identifier for GPLv2/GPLv2+Rahul Bedarkar2017-04-011-1/+1
| | | | | | | | | | | We want to use SPDX identifier for license strings as much as possible. SPDX short identifier for GPLv2/GPLv2+ is GPL-2.0/GPL-2.0+. This change is done by using following command. find . -name "*.mk" | xargs sed -ri '/LICENSE( )?[\+:]?=/s/\<GPLv2\>/GPL-2.0/g' Signed-off-by: Rahul Bedarkar <rahulbedarkar89@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* package: update comments for reverse dependencies of util-linuxRahul Bedarkar2017-01-281-1/+1
| | | | | | | | | | | | | | | | | | Commit 006a328ad6be ("util-linux: fix build with ncurses") removed dependency on BR2_USE_WCHAR, but failed to update the reverse dependencies of util-linux. This commit updates comments in Config.in for BR2_USE_WCHAR for reverse dependencies of util-linux which directly uses wchar now or when it is pulled from other dependencies. eudev doesn't use wchar directly, but needs C99 compiler. Autotools generate code with wchar_t for checking C99 compiler. Signed-off-by: Rahul Bedarkar <rahul.bedarkar@imgtec.com> Cc: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> Cc: Baruch Siach <baruch@tkos.co.il> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* package/xen: Disable Werror checkingAlistair Francis2016-12-091-0/+26
| | | | | | | | | | | | | | | The strict unused-const-variable checking was causing autobuilder errors when trying to build Xen tools/libxl as the migrate_*[] arrays are not always accessed. To avoid the error edit the Makefile to stop all general warnings being treated as errors, by removing the -Werror flag. Fixes: http://autobuild.buildroot.net/results/0e0/0e0d4aa4a05da5804821951289c0a4049b009c61/ Signed-off-by: Alistair Francis <alistair.francis@xilinx.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* package/xen: Bump Xen to 4.7.1Alistair Francis2016-12-082-2/+2
| | | | | Signed-off-by: Alistair Francis <alistair.francis@xilinx.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* package/xen: fix build failure on x86 after bump to 4.7Yann E. MORIN2016-11-011-0/+36
| | | | | | | | | | | | | | | Since the bump to 4.7, Xen fails to build because of a double definition of __OBJECT_FILE__. This is due to (who would have guessed) the weirdness of their buildsystem. Fix that with a dirty hack: undefine the macro before defining it. Signed-off-by: "Yann E. MORIN" <yann.morin.1998@free.fr> Cc: Alistair Francis <alistair.francis@xilinx.com> [Alistair: Tested on ARMv7 (little endian) boot.] Tested-by: Alistair Francis <alistair.francis@xilinx.com> Reviewed-by: Alistair Francis <alistair.francis@xilinx.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* xen: remove -Werror when building host toolsAlistair Francis2016-09-171-0/+26
| | | | | | Signed-off-by: Alistair Francis <alistair.francis@xilinx.com> Reviewed-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* Merge branch 'next'Peter Korsgaard2016-09-022-2/+2
|\ | | | | | | | | | | Quite some conflicts, so here goes .. Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
| * xen: Bump to version 4.7Alistair Francis2016-08-162-2/+2
| | | | | | | | | | | | | | Bump Xen up to 4.7 which is the latest release. Signed-off-by: Alistair Francis <alistair.francis@xilinx.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* | xen: Ensure host Python2 is usedAlistair Francis2016-08-141-0/+3
|/ | | | | | | | | To avoid Xen build issues ensure that host Python 2 is used. Signed-off-by: Alistair Francis <alistair.francis@xilinx.com> Tested-by: "Yann E. MORIN" <yann.morin.1998@free.fr> Acked-by: "Yann E. MORIN" <yann.morin.1998@free.fr> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* xen: new packageAlistair Francis2016-06-123-0/+99
Add support to compile Xen 4.6 and Xen tools for arm32 and arm64 targets. Signed-off-by: Alistair Francis <alistair.francis@xilinx.com> [Thomas: - Remove all "select" from the main Xen option, since the hypervisor can build fine without any additional library. The dependencies have been moved to the "tools" sub-option. - Make sure that at least one of the sub-option is enabled by selecting the hypervisor sub-option if the tools sub-option is not enabled. - Add a Config.in comment about the dependencies of the Xen tools. - Add missing dependency on argp-standalone in the .mk file. - Simplify the handling of XEN_INSTALL_TARGET_OPTS.] Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
OpenPOWER on IntegriCloud